last executing test programs:

21.238160996s ago: executing program 1 (id=3119):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @ib_path={0xfffffffffffffffc, r1}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x3, @remote, 0x3}, r1, 0x7}}, 0x48)

21.083268692s ago: executing program 1 (id=3120):
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x5e3b}}, './file0\x00'}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[<r1=>0x0, <r2=>0x0], 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000000c0)={0x0, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000100)={r1, r3, 0x0, 0xfffffffc, 0x9, 0x4, 0x50000000, 0x14b4, 0x5, 0xfffffffa, 0x3}) (async)
semctl$GETNCNT(0xffffffffffffffff, 0x3, 0xe, &(0x7f0000000140)=""/222)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x88000, 0x0)
ioctl$BLKFINISHZONE(r4, 0x40101288, &(0x7f0000000280)={0x1, 0x9}) (async)
semctl$GETALL(0xffffffffffffffff, 0x0, 0xd, &(0x7f00000002c0)=""/5)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0xa, 0x8, 0x7, 0x1})
r7 = semget(0x1, 0x4, 0x410)
semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000440)=[0x3, 0x0, 0x7, 0x40, 0x6, 0xd2, 0x5a90, 0x2, 0x8001, 0x7])
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000004c0)={0x4, &(0x7f0000000480)=[{0x4c, 0x3, 0x24, 0x7}, {0xd, 0x0, 0x80, 0xb}, {0x7, 0xd, 0x5, 0x3063}, {0x4, 0x6, 0x4, 0x10001}]}, 0x10)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000500)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3, 0x5, 0x8001, 0x500, 0x1b5430e9, 0x2000000}) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x40000, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000600)={r2, r6, r5, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000640)=0x10001) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), 0xffffffffffffffff) (async)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000700)={'ip6tnl0\x00', <r10=>0x0, 0x2f, 0x4, 0x0, 0x80000001, 0x40, @local, @remote, 0x8000, 0x1, 0x6, 0xa4}}) (async)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={<r11=>0x0, @remote, @private}, &(0x7f0000000800)=0xc)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2f0, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xdc, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2f0}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000bc0)={<r12=>r8, 0x100000001, 0xf99, 0x4})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r12, 0x0, 0x48c, &(0x7f0000000c00)={0x1, 'team0\x00', 0x1}, 0x18)
r13 = syz_open_dev$dri(&(0x7f0000000c40), 0x9709, 0x581a00)
ioctl$DRM_IOCTL_GET_MAP(r13, 0xc0286404, &(0x7f0000000c80)={&(0x7f0000ffb000/0x4000)=nil}) (async)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000cc0)={0x0, 0x0, <r14=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PANTHOR_GROUP_DESTROY(r14, 0xc0086448, &(0x7f0000000d00))
pselect6(0x40, &(0x7f0000000d40)={0x3, 0x401, 0x80000000, 0x4d, 0x8000000000000001, 0x67, 0x0, 0xfff}, &(0x7f0000000d80)={0x28, 0x3, 0x6, 0x8, 0x7, 0x2, 0x7}, &(0x7f0000000dc0)={0x400, 0x8, 0x2, 0x71, 0x2, 0xb84, 0x0, 0x2}, &(0x7f0000000e00), &(0x7f0000000e80)={&(0x7f0000000e40)={[0x3ff]}, 0x8})
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f00), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r12, &(0x7f0000001000)={&(0x7f0000000ec0), 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x50, r15, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040000}, 0x4008000) (async)
prlimit64(0x0, 0xf, &(0x7f0000001040)={0xffffffff, 0x2b8}, 0x0)

21.000367755s ago: executing program 1 (id=3121):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$alg(0x26, 0x5, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
userfaultfd(0x1)
socket$kcm(0x29, 0x5, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x2}, 0x14)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0)

20.792378277s ago: executing program 1 (id=3123):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x3f00)

20.699670254s ago: executing program 1 (id=3124):
semget$private(0x0, 0x2, 0x180)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffffffb, 0x0, 0xa, 0x6, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, r2)
r3 = socket$kcm(0x29, 0x5, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f00004fb000/0x3000)=nil, 0x3000, 0x15)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r6, 0x5607, 0x1)
syz_open_dev$I2C(&(0x7f0000000000), 0x604, 0x2000)

20.405591157s ago: executing program 1 (id=3127):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4})
getsockopt(0xffffffffffffffff, 0x8, 0x8, &(0x7f000001b000)=""/96, &(0x7f000001b080)=0x60)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0xc00080, 0x41f751e5b44c6aa9)
r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xa0, 0x7}, {0xc920, 0x805, 0x1, 0x7, 0x0, 0x1}]})
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000400)=""/76)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x10, 0x10, 0x8, 0x1000005, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xc, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x19}, @ra={0x94, 0x4}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x88, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x4000)
getsockopt$MRT(r3, 0x0, 0xcf, &(0x7f0000000180), &(0x7f00000002c0)=0x4)
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c20050a8600a2b"], 0x0)

19.201389907s ago: executing program 32 (id=3127):
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4})
getsockopt(0xffffffffffffffff, 0x8, 0x8, &(0x7f000001b000)=""/96, &(0x7f000001b080)=0x60)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0xe, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
listen(r2, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0xc00080, 0x41f751e5b44c6aa9)
r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f00000003c0)={0x56, 0x0, 0xac, {0xffff, 0x1}, {0x4d, 0x2}, @cond=[{0x8, 0x5388, 0xc, 0x800, 0xa0, 0x7}, {0xc920, 0x805, 0x1, 0x7, 0x0, 0x1}]})
ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000400)=""/76)
r5 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', <r6=>0x0})
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x10, 0x10, 0x8, 0x1000005, {{0x7, 0x4, 0x1, 0x3b, 0x1c, 0x66, 0x0, 0xc, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0x19}, @ra={0x94, 0x4}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)={0x88, 0x0, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x4000)
getsockopt$MRT(r3, 0x0, 0xcf, &(0x7f0000000180), &(0x7f00000002c0)=0x4)
syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000280000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c20050a8600a2b"], 0x0)

13.181593937s ago: executing program 2 (id=3141):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x5cee313670d5fda3})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x65)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000180)={0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0)
bind$netrom(0xffffffffffffffff, 0x0, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x0, 0x1, 0x0, "11010000001400000100b64c0000005c4b7c1500", 0x20303159})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84)
pipe2$9p(&(0x7f00000000c0)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@version_9p2000}]}})
io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f00000001c0)=[r4, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff], 0x5)
close_range(r1, 0xffffffffffffffff, 0x0)

12.993946653s ago: executing program 0 (id=3142):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x2000040)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d000000000001"], 0x38}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)
socket$unix(0x1, 0x1, 0x0)

11.721178402s ago: executing program 2 (id=3143):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), 0x0}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000100)={0x6cee, <r3=>r1, 'id0\x00'})
getpeername$qrtr(r3, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
syz_usb_connect(0x7, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRESHEX=0x0], 0x0)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r14 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r14, 0x0, 0x0)
syz_usb_control_io$lan78xx(r14, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r14, 0x0, 0x0)

10.345304307s ago: executing program 0 (id=3145):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000500)={'gre0\x00', <r2=>0x0, 0x1, 0x7800, 0x4, 0x3, {{0x5e, 0x4, 0x1, 0x5, 0x178, 0x68, 0x0, 0xb9, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, {[@timestamp_prespec={0x44, 0x54, 0x98, 0x3, 0x0, [{@multicast1}, {@empty, 0x1}, {@multicast2, 0x4}, {@broadcast, 0x7}, {@empty, 0x1ff}, {@loopback, 0xe}, {@empty, 0xff}, {@local, 0x1}, {@empty}, {@private=0xa010102, 0x7}]}, @cipso={0x86, 0x72, 0x2, [{0x7, 0xa, "bdeb097ba5c14d85"}, {0x6, 0xf, "b3170da467d1397b2b2c3680b1"}, {0x2, 0xd, "48f52c7f9eb072b11fbe94"}, {0x7, 0x10, "fdf951e99f3fc0993ae6840d37c2"}, {0x5, 0xd, "de7719583ffb0326f7705e"}, {0x0, 0x10, "f96b7631073a7867d7a082eacb68"}, {0x6, 0x7, "4ec9e386d6"}, {0x6, 0x8, "d9b19555ca3b"}, {0x1, 0xa, "725ae7910a5b78f8"}]}, @cipso={0x86, 0x36, 0x3, [{0x7, 0x3, '\''}, {0x2, 0xd, "10d76b9a48d9d6402ecf01"}, {0x1, 0x9, "c9f48da7cea11b"}, {0x2, 0x6, "b7dc5c80"}, {0x7, 0x6, "95ddac6d"}, {0x2, 0x5, "481e12"}, {0x5, 0x4, "d3cb"}, {0x7, 0x2}]}, @lsrr={0x83, 0x7, 0x2f, [@empty]}, @cipso={0x86, 0x4f, 0x0, [{0x0, 0x12, "124720faf466b9ebf0db50bbe6d87faa"}, {0x0, 0xd, "4dd8fb395005b012cd0249"}, {0x1, 0xd, "a926b8ce09cfbb8d3fc03a"}, {0x6, 0x6, "f264eea1"}, {0x6, 0xb, "6c6cd54661a6e7a70a"}, {0x0, 0x8, "e7b5a2129c6a"}, {0x1, 0x4, 'CJ'}]}, @rr={0x7, 0xf, 0x3d, [@dev={0xac, 0x14, 0x14, 0x42}, @local, @multicast2]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'gre0\x00', &(0x7f0000000700)={'syztnl1\x00', <r3=>0x0, 0x7, 0x1, 0x2, 0xffffffff, {{0x2f, 0x4, 0x0, 0x1a, 0xbc, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast1, @multicast2, {[@timestamp={0x44, 0x8, 0xf9, 0x0, 0x5, [0x0]}, @timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x2, [{@private=0xa010102, 0x2a}, {@multicast1, 0x1f33}]}, @timestamp_prespec={0x44, 0x54, 0x1b, 0x3, 0xf, [{@rand_addr=0x64010100, 0xfff}, {@private=0xa010100, 0x7}, {@loopback, 0x8}, {@multicast1, 0x8}, {@multicast1, 0xff}, {@multicast2, 0x8}, {@multicast1, 0x3}, {@broadcast, 0x53526585}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x8}]}, @rr={0x7, 0xb, 0x92, [@remote, @multicast2]}, @end, @timestamp_addr={0x44, 0x2c, 0xe7, 0x1, 0x9, [{@multicast1, 0x5}, {@private=0xa010101, 0x9}, {@empty, 0x6}, {@rand_addr=0x64010101, 0x7f}, {@empty, 0x7f}]}]}}}}})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r4=>0x0, 0xffffffffffffffff}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x11, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@ldst={0x3, 0x3, 0x6, 0x9, 0xf958b2f995f468ea, 0xffffffffffffffe0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0xf, 0xd1, &(0x7f0000000940)=""/209, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000a40)={0x4, 0x1, 0x0, 0x1c000000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000a80)=[0x1, 0x1], &(0x7f0000000ac0)=[{0x4, 0x1, 0xf, 0xa}, {0x0, 0x4, 0x5, 0x8}], 0x10, 0x91}, 0x94)
sendmsg$nl_route(r1, &(0x7f0000000c80)={&(0x7f0000000180), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x70bd2b, 0x25dfdbfd, {0x2, 0x80, 0x0, 0xf9, 0xfc, 0x2, 0xfe, 0xb}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_IIF={0x8, 0x3, r3}, @RTA_UID={0x8, 0x19, r4}, @RTA_PRIORITY={0x8, 0x6, 0x80}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2638a9bcf8fb576e}, 0x8000)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x14, 0x1, 0x9, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x14}}, 0x40000010)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x37}, 0x94)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'bond0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r9=>0x0})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r8], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@volatile}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)

9.226940816s ago: executing program 0 (id=3148):
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r2, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000009b80)=""/102392, 0x18ff8)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

8.201264753s ago: executing program 2 (id=3151):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x7e, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x3c}, 0x1, 0x620b}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x5f23, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x95, 0x0, 0x0, 0x9, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x71]})

7.267480897s ago: executing program 4 (id=3153):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x20001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
write$cgroup_int(r2, &(0x7f00000003c0)=0x2, 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000ffdbdf250f00000034"], 0x4c}, 0x1, 0x0, 0x0, 0x4044800}, 0x50)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0], 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.265872851s ago: executing program 2 (id=3154):
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x0, &(0x7f00000001c0)='discard')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = openat$rfkill(0xffffff9c, &(0x7f0000000100), 0x8002, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f00000014c0))
dup(r0)
r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x9, 0x3a, 'M', 0x3a, '\x8cZ\x17v\x9a\xd0\xe4w\x8f4f\xc9\xd6\"8=\xe1\x1f\xc3\xf0L\x9b\xf0}s\n\xaf^o\xc0\x1fr\x1d\xb1j\n\xca\t\x10\xe5\xa4\xa1\x17\x15\xbe\x8c?\xa6\xabY\x10\x8e\x00\xe3g\x9b\xf6y\x01z\xa6\xf22|\x1d\\\xe3\x0e\xe9\xa6\\O\x00\x00\x00\x00', 0x3a, './file0'}, 0x74)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="0a00000007000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000003ca0000002000000000150000000000000000d7dc0ad4cf117ad02c6ba4e160bd68728a6f27070ffc34c64ac62c05c20bdacd1201cd224f52921c01ae54a1d5516daf7f7c5c2910e5f833321f08ceb6ab5dd4be4d46b3a0eedbdb9cf591f08c7d0c7023041fb62cc1a6b609fd95ef067dd6cc011cf1dd2d9f61180ae90f6ace9ae8678fa8aaf56444d611668924c641353dfe19d548f44a7c449b8a0ab7ce1889a388d0c6e6b9df80f28bf034c166e405f8"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r9)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$kcm(0x11, 0x3, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0x2, 0x8, 0x10000, 0x40}, 0x8, 0x5}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x200}, {0xff, 0x7, 0x101, 0x8, 0x810, 0xffffffff}, {0x80005, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x1, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x1, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xe42, 0xf3, 0xfffffffc, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x6, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x7, 0x9, 0x4, 0x3, 0x1}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x37, 0x0, 0x6, 0xed, 0x80000000}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x5, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x7}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x3, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x1, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffff9, 0x1, 0xfffffffc, 0x2}, {0x8, 0x2, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x4, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x6, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x0, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x9}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x0, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4006, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xc5, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x9, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x1, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x21, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x6, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x6, 0x5, 0x6}, {0x7, 0x2, 0xf, 0x64, 0x4, 0x7}, {0x1, 0x2, 0x4010, 0xffffffb1, 0x0, 0x751e}, {0xffed, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0xffffffff}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x4}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56)

7.013427638s ago: executing program 0 (id=3155):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000240)={'gretap0\x00', {0x2, 0x0, @empty}}) (fail_nth: 6)

6.614123968s ago: executing program 0 (id=3156):
semget$private(0x0, 0x2, 0x180)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffffffb, 0x0, 0xa, 0x6, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2)
syz_genetlink_get_family_id$nl80211(0x0, r2)
r3 = socket$kcm(0x29, 0x5, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000140)={'full'}, 0xfffffdef)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f00004fb000/0x3000)=nil, 0x3000, 0x15)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r6, 0x5607, 0x1)
syz_open_dev$I2C(&(0x7f0000000000), 0x604, 0x2000)

6.613792578s ago: executing program 4 (id=3157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001f6c0)=""/102400, 0x19000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioprio_set$pid(0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x402441, 0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYRES16=r3], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4048811)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890)
read$msr(r3, &(0x7f0000000200)=""/1, 0x1)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}}, 0x24}}, 0x44080)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r7, {}, {0x0, 0xa}, {0x7ff9, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
fanotify_mark(r2, 0x40, 0x1021, r3, &(0x7f0000000100)='./file0\x00')
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0)
readv(r8, &(0x7f00000038c0)=[{&(0x7f0000004980)=""/4096, 0x1000}], 0x1)

6.097540679s ago: executing program 3 (id=3158):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x104)
socket$inet_udplite(0x2, 0x2, 0x88)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r5, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
io_uring_enter(r5, 0x4e14, 0x913a, 0x0, 0x0, 0x700) (fail_nth: 7)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)})
ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})

5.191342974s ago: executing program 3 (id=3159):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0xa000, 0x8)
syz_io_uring_setup(0x79ec, &(0x7f0000000080)={0x0, 0x6f4a, 0x4800, 0x3, 0x190, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
fsopen(&(0x7f0000000080)='ext4\x00', 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0)
write$eventfd(r3, &(0x7f0000000240), 0xffffff14)

4.185364089s ago: executing program 3 (id=3160):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r3)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000280)={0x0, 0xf000, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x2000040)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
socket$alg(0x26, 0x5, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d000000000001"], 0x38}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040)
socket$unix(0x1, 0x1, 0x0)

3.981870199s ago: executing program 4 (id=3161):
membarrier(0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800201000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000680)=""/112, 0xfffffef2}], 0x2}, 0x10150)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x7, 'vlan0\x00', {0x9}, 0xa})

3.361498446s ago: executing program 2 (id=3162):
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0)
open(0x0, 0x2a4c0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
sched_setattr(r2, 0x0, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x14, r5, 0x305, 0x0, 0x0, {0x7}}, 0x14}}, 0x24044080)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000440)={'dt2814\x00', [0x4e27, 0x5, 0x3, 0xffff, 0xe7, 0x1, 0x0, 0xa82, 0xff46, 0x100, 0xcf3, 0x9, 0x1d8, 0x2, 0x6, 0x101, 0x1, 0x1008b, 0x3, 0x0, 0x4, 0x80000001, 0x8, 0x2000007, 0xb, 0x5, 0x3c, 0x5, 0x7fffffff, 0xffff, 0xfffffff8]})

3.226376324s ago: executing program 3 (id=3163):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x7e, 0x0, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x3c, r4, 0x917, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}]}, 0x3c}, 0x1, 0x620b}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000000c0)={{0x7, 0x0, 0x0, 0x200000, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffff7fffffe, 0x0, 0x5, 0x0, 0x10000, 0x4, 0x4, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x6, 0x0, 0x0, 0x6, 0xae4f, 0x0, 0x0, 0x1, 0x0, 0x5f23, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0xfff, 0x3, 0x0, 0x0, 0x95, 0x0, 0x0, 0x9, 0x0, 0xfa0, 0x0, 0xfffffffffffffffb, 0xea4d, 0x377, 0xffffffffffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x4000, 0x1, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x9, 0x4000000000000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x3, 0x8000000000000001, 0x4, 0xd30, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x71]})

2.867309066s ago: executing program 4 (id=3164):
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0xfffffffffffffd5c}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000009b80)=""/102392, 0x18ff8)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x1)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)

1.484786626s ago: executing program 2 (id=3165):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x20004000)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)
eventfd(0x5)
r4 = getpid()
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
syz_usb_connect$uac2(0x1, 0x106, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x0, 0x5, 0x6, 0x40}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="8bb686bf4e"], 0x4, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x418}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1878}}, {0x77, &(0x7f0000000480)=@string={0x77, 0x3, "8228c129f86377917794742dbaacac1300b343bd4784ab8fcdb6e5e366d5544e46f8ffef24072d6bf911a1344d55990eabdcd688a060dc2853b845491e9a5adfb15b7378cef218f27a59553cccf2fd43b55881cbe3147cb103d09f9b1e4b2b27b11f44f3dd4ca20a9fca9a10b38f83fc28d974fdae"}}, {0xd3, &(0x7f0000000500)=@string={0xd3, 0x3, "1f9071462860d8b2e822b513b61bfd40ff5f46963272981d4a1a599083db0f08ab5def6d6489e8f72e4246f9dcf1524165e2f549c2c1e311a0ea7484294d0517807969ea49bf478af7181fa84eb9213ab572948fbf958421a4c3ce53810138b40e27622ae6757662fb6649aa10a1e0a7242d706db0096bcb4961b7aff211d058b4d5f7df2c517ec6ad9ba07c7d835dce44cfc56e626de662c494fbb9b6ef4bc31d708310f098f54e5c47edc4c8d06b4f3a23310398cd84c49abad03b19758d5d687ed624102712b91e5ccc1594d8a356c4"}}]})
prctl$PR_SCHED_CORE(0x3e, 0x0, r4, 0x2, 0x0)
write$proc_mixer(0xffffffffffffffff, 0x0, 0xaf)
openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x801, 0x0)
socket(0x25, 0x4, 0x9)

988.649785ms ago: executing program 4 (id=3166):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005400)=[{{0x0, 0x80101, &(0x7f0000000240)=[{&(0x7f00000037c0)='-', 0x8031e}], 0x1, 0x0, 0x0, 0x240}}, {{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000003ac0)="bb", 0x1}], 0x218}}, {{0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003e80)='Z', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000005380)=[{&(0x7f0000004280)="81", 0x1}], 0x1}}], 0x4, 0x60cd894)

900.203039ms ago: executing program 4 (id=3167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000080), 0x0}, 0x20)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000000100)={0x6cee, <r3=>r1, 'id0\x00'})
getpeername$qrtr(r3, &(0x7f00000002c0), &(0x7f0000000300)=0xc)
syz_usb_connect(0x7, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRESHEX=0x0], 0x0)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
socket$tipc(0x1e, 0x2, 0x0)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$alg(0x26, 0x5, 0x0)
r14 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r14, 0x0, 0x0)
syz_usb_control_io$lan78xx(r14, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r14, 0x0, 0x0)

899.000624ms ago: executing program 3 (id=3168):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x22}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, 0x0, &(0x7f0000000680)=r1}, 0x20)

824.739491ms ago: executing program 3 (id=3169):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r2, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r3, 0xc018480d, 0x0)

692.868153ms ago: executing program 5 (id=3128):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfcbb}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r4=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000180)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000003c0)={@dev, @dev, <r6=>0x0}, &(0x7f0000000400)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', <r7=>0x0, 0x40, 0x40, 0x317e889c, 0x7, {{0x18, 0x4, 0x1, 0x15, 0x60, 0x68, 0x0, 0x1, 0x29, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x47, 0xffffffffffffffff, [{0x1, 0xa, "18290c3646f5d786"}, {0x2, 0x5, "7bb727"}, {0x7, 0x6, "1cbfd751"}, {0x2, 0xb, "14a84d0c799026e4a1"}, {0x6, 0x7, "cd526f1a48"}, {0x6, 0x12, "f16180d591ccaa75965cdd58b481a5c1"}, {0x7, 0x8, "9394c15d5f7c"}]}, @ra={0x94, 0x4}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'gre0\x00', <r8=>0x0, 0x700, 0x7800, 0x7, 0x9, {{0xf, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x80, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0x3c, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @local]}, @noop, @end, @timestamp_addr={0x44, 0xc, 0xa6, 0x1, 0x8, [{@multicast1, 0x6}]}]}}}}})
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'sit0\x00', <r11=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', <r12=>0x0, 0x29, 0xff, 0x7f, 0x81, 0x78, @private1, @remote, 0x7, 0x80, 0x4, 0xc}})
r13 = socket(0x400000000010, 0x3, 0x0)
r14 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r15, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'batadv0\x00', <r16=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r17=>0x0, 0x20, 0x1, 0x9, 0xa, {{0xc, 0x4, 0x1, 0x32, 0x30, 0x66, 0x0, 0x5, 0x2d, 0x0, @loopback, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xa0, 0x3, 0x3, [{@multicast1, 0x4}, {@loopback, 0xffff}, {@loopback, 0x7}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000780)={0x204, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4}, 0x44000)

252.194773ms ago: executing program 5 (id=3170):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0xa000, 0x8)
syz_io_uring_setup(0x79ec, &(0x7f0000000080)={0x0, 0x6f4a, 0x4800, 0x3, 0x190, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
fsopen(&(0x7f0000000080)='ext4\x00', 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r2, 0x0, r4, 0x0, 0x88000cc, 0x0)
write$eventfd(r3, &(0x7f0000000240), 0xffffff14)

0s ago: executing program 0 (id=3171):
add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x21800, 0x0)
ioctl$TIOCMIWAIT(r0, 0x5453, 0x300fff2)

kernel console output (not intermixed with test programs):

52780][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1071.772315][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1071.785152][T12586] Bluetooth: hci1: unexpected event for opcode 0x0c12
[ 1071.792683][ T5808] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1071.849758][ T5808] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1071.859674][ T5808] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1072.020800][T14091] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1072.033568][ T5808] usb 4-1: USB disconnect, device number 82
[ 1072.235389][T16923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2834'.
[ 1072.323854][T14091] usb 2-1: config 0 has no interfaces?
[ 1072.329533][T14091] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1072.342943][T14091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1072.360838][T14091] usb 2-1: config 0 descriptor??
[ 1074.778445][   T30] audit: type=1400 audit(1774508285.820:4077): avc:  denied  { write } for  pid=16929 comm="syz.3.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1074.807619][   T30] audit: type=1400 audit(1774508286.020:4078): avc:  denied  { read } for  pid=16929 comm="syz.3.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1075.670351][ T5808] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 1075.820523][ T5808] usb 1-1: Using ep0 maxpacket: 16
[ 1075.843736][T12586] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1075.853934][T12586] Bluetooth: hci1: Injecting HCI hardware error event
[ 1075.877461][T12586] Bluetooth: hci1: hardware error 0x00
[ 1075.881267][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1075.923405][ T5808] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1075.933335][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.941463][ T5808] usb 1-1: Product: syz
[ 1075.945678][ T5808] usb 1-1: Manufacturer: syz
[ 1075.965081][ T5808] usb 1-1: SerialNumber: syz
[ 1075.981216][ T5808] usb 1-1: config 0 descriptor??
[ 1076.006020][T14091] usb 2-1: USB disconnect, device number 100
[ 1076.021422][ T5808] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1076.033442][ T5808] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1076.210309][ T5950] usb 3-1: unit 37 not found!
[ 1076.215104][ T5950] usb 3-1: unit 0 not found!
[ 1076.467498][ T5950] usb 3-1: USB disconnect, device number 85
[ 1076.599315][ T5808] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1076.686037][ T5808] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1076.718498][ T5808] em28xx 1-1:0.0: board has no eeprom
[ 1076.809866][ T5808] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1076.851607][ T5808] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1076.857393][   T24] em28xx 1-1:0.0: Binding DVB extension
[ 1077.040396][ T5866] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1077.161258][ T5808] usb 1-1: USB disconnect, device number 103
[ 1077.175468][ T5808] em28xx 1-1:0.0: Disconnecting em28xx
[ 1077.186206][   T24] em28xx 1-1:0.0: Registering input extension
[ 1077.239754][ T5808] em28xx 1-1:0.0: Closing input extension
[ 1077.305230][ T5808] em28xx 1-1:0.0: Freeing device
[ 1077.369526][ T5866] usb 5-1: Using ep0 maxpacket: 16
[ 1077.396021][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1077.437361][ T5866] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1077.448918][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.488195][ T5866] usb 5-1: Product: syz
[ 1077.502495][ T5866] usb 5-1: Manufacturer: syz
[ 1077.511265][ T5866] usb 5-1: SerialNumber: syz
[ 1077.708885][T16984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2853'.
[ 1078.048571][T12586] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1078.114281][ T5866] usb 5-1: config 0 descriptor??
[ 1078.163114][ T5866] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1078.173106][ T5866] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1079.839632][ T5866] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1079.955482][ T5866] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1079.968147][ T5866] em28xx 5-1:0.0: board has no eeprom
[ 1080.138258][T14091] usb 2-1: new full-speed USB device number 101 using dummy_hcd
[ 1080.397838][T14091] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1080.432800][ T5866] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1080.440748][ T5866] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1080.446393][ T5808] em28xx 5-1:0.0: Binding DVB extension
[ 1080.457084][ T5866] usb 5-1: USB disconnect, device number 95
[ 1080.473416][ T5866] em28xx 5-1:0.0: Disconnecting em28xx
[ 1080.502189][T14091] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1080.527908][T14091] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1080.546225][ T5808] em28xx 5-1:0.0: Registering input extension
[ 1080.548363][T14091] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1080.558134][ T5866] em28xx 5-1:0.0: Closing input extension
[ 1080.587444][T14091] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1080.590892][ T5866] em28xx 5-1:0.0: Freeing device
[ 1080.599466][T14091] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[ 1080.616148][T14091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.643801][T14091] usb 2-1: config 0 descriptor??
[ 1080.915907][ T5866] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1081.127867][ T5950] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[ 1081.292528][ T5866] usb 5-1: config 0 has no interfaces?
[ 1081.343640][ T5866] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1081.415395][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.564767][ T5866] usb 5-1: config 0 descriptor??
[ 1081.965486][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1082.009149][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1082.036080][ T5950] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1082.061574][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.082266][ T5950] usb 4-1: Product: syz
[ 1082.098874][ T5950] usb 4-1: Manufacturer: syz
[ 1082.109086][ T5950] usb 4-1: SerialNumber: syz
[ 1082.129016][ T5950] usb 4-1: config 0 descriptor??
[ 1082.536937][ T5914] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1082.686808][ T5914] usb 1-1: Using ep0 maxpacket: 16
[ 1082.699178][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1082.728519][ T5914] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1082.746551][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.765043][ T5914] usb 1-1: Product: syz
[ 1082.769331][ T5914] usb 1-1: Manufacturer: syz
[ 1082.773947][ T5914] usb 1-1: SerialNumber: syz
[ 1082.787382][ T5914] usb 1-1: config 0 descriptor??
[ 1082.806427][ T5914] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1082.819165][ T5914] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1082.895560][T14091] usbhid 2-1:0.0: can't add hid device: -71
[ 1082.904885][T14091] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1082.921047][T14091] usb 2-1: USB disconnect, device number 101
[ 1082.950514][  T974] usb 5-1: USB disconnect, device number 96
[ 1083.554580][ T5914] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1083.635751][T17047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2867'.
[ 1084.079207][ T5914] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1084.096152][ T5914] em28xx 1-1:0.0: board has no eeprom
[ 1084.166624][ T5914] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1084.187379][ T5914] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1084.304969][T14091] em28xx 1-1:0.0: Binding DVB extension
[ 1084.360308][ T5950] usb 4-1: USB disconnect, device number 83
[ 1084.772155][ T5914] usb 1-1: USB disconnect, device number 104
[ 1084.788531][ T5914] em28xx 1-1:0.0: Disconnecting em28xx
[ 1086.019317][T16961] udevd[16961]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1086.047694][T14091] em28xx 1-1:0.0: Registering input extension
[ 1086.124583][ T5914] em28xx 1-1:0.0: Closing input extension
[ 1086.192986][ T5914] em28xx 1-1:0.0: Freeing device
[ 1087.178951][T17076] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2874'.
[ 1090.712937][ T5808] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1091.072778][ T5808] usb 2-1: Using ep0 maxpacket: 16
[ 1091.101235][ T5808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1091.149921][ T5808] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1091.159952][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.170857][ T5808] usb 2-1: Product: syz
[ 1091.176779][ T5808] usb 2-1: Manufacturer: syz
[ 1091.181826][ T5808] usb 2-1: SerialNumber: syz
[ 1091.259005][ T5808] usb 2-1: config 0 descriptor??
[ 1091.334628][ T5808] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1091.381689][ T5808] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 1092.627913][ T5808] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1092.774050][ T5808] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1092.977035][ T5808] em28xx 2-1:0.0: board has no eeprom
[ 1092.986719][   T30] audit: type=1400 audit(1774508304.910:4079): avc:  denied  { connect } for  pid=17129 comm="syz.0.2887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1093.091592][ T5808] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1093.109636][ T5808] em28xx 2-1:0.0: dvb set to bulk mode.
[ 1093.116990][ T5866] em28xx 2-1:0.0: Binding DVB extension
[ 1093.297943][ T5808] usb 2-1: USB disconnect, device number 102
[ 1093.350308][ T5808] em28xx 2-1:0.0: Disconnecting em28xx
[ 1093.399377][ T5866] em28xx 2-1:0.0: Registering input extension
[ 1093.426911][ T5808] em28xx 2-1:0.0: Closing input extension
[ 1093.466555][ T5808] em28xx 2-1:0.0: Freeing device
[ 1093.682655][ T5950] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 1093.881208][ T5950] usb 1-1: Using ep0 maxpacket: 16
[ 1093.892894][ T5950] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1093.901989][ T5950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1093.913621][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1093.924909][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1093.955117][ T5950] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1093.994430][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1094.009077][ T5950] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1094.019496][ T5950] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1096.038635][ T5950] usb 1-1: Manufacturer: syz
[ 1096.045528][ T5950] usb 1-1: config 0 descriptor??
[ 1097.139600][ T5914] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1097.193629][ T5950] rc_core: IR keymap rc-hauppauge not found
[ 1097.198605][T17171] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.2898'.
[ 1097.211231][ T5950] Registered IR keymap rc-empty
[ 1097.216256][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1097.223745][T17171] openvswitch: netlink: Duplicate key (type 2).
[ 1097.239608][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1097.243550][T17171] netlink: 'syz.3.2898': attribute type 1 has an invalid length.
[ 1097.256233][T17171] netlink: 'syz.3.2898': attribute type 2 has an invalid length.
[ 1097.300909][ T5950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1097.330847][ T5914] usb 3-1: Using ep0 maxpacket: 32
[ 1097.634219][ T5950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input96
[ 1097.647254][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1097.664226][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1097.691919][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1097.724797][ T5914] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[ 1097.745683][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1097.753882][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1097.761781][ T5914] usb 3-1: Product: syz
[ 1097.765949][ T5914] usb 3-1: Manufacturer: syz
[ 1097.787269][ T5914] usb 3-1: SerialNumber: syz
[ 1097.792275][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1097.839509][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1097.870083][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1097.900036][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1097.926029][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1099.088837][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1099.426417][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1099.458761][ T5950] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1099.621019][T17195] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2896'.
[ 1099.683082][ T5950] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1099.736026][ T5950] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1099.948664][ T5950] usb 1-1: USB disconnect, device number 105
[ 1102.669394][ T5808] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1102.813228][ T5914] usb 3-1: unit 37 not found!
[ 1102.818087][ T5914] usb 3-1: unit 0 not found!
[ 1102.837204][ T5950] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1102.846883][ T5808] usb 2-1: Using ep0 maxpacket: 32
[ 1102.854259][ T5808] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1102.863237][ T5808] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1102.878742][ T5808] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[ 1102.896688][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.905234][ T5808] usb 2-1: Product: syz
[ 1102.914508][ T5808] usb 2-1: Manufacturer: syz
[ 1102.921837][ T5914] usb 3-1: USB disconnect, device number 86
[ 1102.924632][ T5808] usb 2-1: SerialNumber: syz
[ 1103.076680][ T5950] usb 5-1: Using ep0 maxpacket: 16
[ 1103.490794][ T5950] usb 5-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config
[ 1103.501198][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1103.512597][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1103.522797][ T5950] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1103.534823][ T5950] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1103.566696][ T5950] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1103.595147][ T5950] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1103.606842][ T5950] usb 5-1: Manufacturer: syz
[ 1103.924760][T17234] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2911'.
[ 1104.045003][ T5950] usb 5-1: config 0 descriptor??
[ 1104.945679][ T5950] rc_core: IR keymap rc-hauppauge not found
[ 1104.973366][ T5950] Registered IR keymap rc-empty
[ 1105.011165][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1105.065692][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1105.145847][ T5950] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1105.193829][ T5950] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input97
[ 1105.815249][ T5914] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[ 1106.472558][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.504968][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1106.526480][ T5808] usb 2-1: unit 37 not found!
[ 1106.531183][ T5808] usb 2-1: unit 0 not found!
[ 1106.546606][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1107.154998][ T5914] usb 1-1: Using ep0 maxpacket: 16
[ 1107.165521][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1107.165994][ T5914] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1107.166024][ T5914] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1107.166058][ T5914] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1107.166081][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.187447][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1107.228519][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1107.627369][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1107.736859][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1107.880458][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1107.894285][ T5950] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1107.960311][ T5950] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1108.197965][T17261] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1108.240015][ T5808] usb 2-1: USB disconnect, device number 103
[ 1108.360106][ T5950] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1108.448932][ T5950] usb 5-1: USB disconnect, device number 97
[ 1109.916711][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1110.914906][ T5914] usbhid 1-1:128.0: can't add hid device: -71
[ 1110.921114][ T5914] usbhid 1-1:128.0: probe with driver usbhid failed with error -71
[ 1110.942304][ T5914] usb 1-1: USB disconnect, device number 106
[ 1111.273179][T16951] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1111.282209][T16951] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1111.291229][T16951] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1111.301156][T16951] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1111.312731][T16951] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1111.374668][T17295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2927'.
[ 1111.640189][   T30] audit: type=1400 audit(1774508323.569:4080): avc:  denied  { mounton } for  pid=17292 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 1111.762362][ T5914] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[ 1111.949480][ T5914] usb 1-1: Using ep0 maxpacket: 16
[ 1111.961631][ T5914] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1112.920632][ T5914] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1112.934771][ T5914] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1112.947775][ T5914] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1112.985007][ T5914] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[ 1113.907793][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.908063][T16951] Bluetooth: hci5: command tx timeout
[ 1113.915890][ T5914] usb 1-1: Product: syz
[ 1113.915908][ T5914] usb 1-1: Manufacturer: syz
[ 1113.930327][ T5914] usb 1-1: SerialNumber: syz
[ 1113.972757][T17305] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1114.071165][ T5808] usb 3-1: new low-speed USB device number 87 using dummy_hcd
[ 1114.095264][ T5914] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 107 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[ 1114.136971][ T6441] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1114.155577][ T5914] usb 1-1: USB disconnect, device number 107
[ 1114.178466][ T5914] usblp0: removed
[ 1114.281367][ T5808] usb 3-1: Invalid ep0 maxpacket: 16
[ 1114.292323][T17292] chnl_net:caif_netlink_parms(): no params data found
[ 1114.393038][ T6441] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1114.420978][ T5808] usb 3-1: new low-speed USB device number 88 using dummy_hcd
[ 1114.533849][ T6441] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1114.590991][ T5914] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[ 1114.610886][ T5808] usb 3-1: Invalid ep0 maxpacket: 16
[ 1114.616472][ T5808] usb usb3-port1: attempt power cycle
[ 1114.700285][ T6441] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1114.750806][ T5914] usb 1-1: Using ep0 maxpacket: 16
[ 1114.757631][ T5914] usb 1-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config
[ 1114.768415][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1114.779546][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1114.789394][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1114.809313][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1114.845957][T17292] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1114.853500][T17292] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1114.915225][ T5914] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1114.925012][ T5914] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1114.933704][T17292] bridge_slave_0: entered allmulticast mode
[ 1114.944184][ T5914] usb 1-1: Manufacturer: syz
[ 1114.945782][T17292] bridge_slave_0: entered promiscuous mode
[ 1114.951540][ T5914] usb 1-1: config 0 descriptor??
[ 1115.431188][T17292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1115.440483][T17292] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1115.447673][T17292] bridge_slave_1: entered allmulticast mode
[ 1115.551829][T17292] bridge_slave_1: entered promiscuous mode
[ 1115.610356][ T5914] rc_core: IR keymap rc-hauppauge not found
[ 1115.637908][ T5914] Registered IR keymap rc-empty
[ 1115.652139][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1115.687623][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1115.993024][T16951] Bluetooth: hci5: command tx timeout
[ 1116.041287][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1116.049293][T17292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1116.071776][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input98
[ 1116.099424][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1116.133038][T17292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1116.140301][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1116.658774][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1116.689849][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1116.719863][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1116.749922][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1116.771976][T17339] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1116.779201][T17339] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1116.814817][T17339] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1116.823914][T17339] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1116.900257][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1116.962741][    T9] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1117.202027][T17292] team0: Port device team_slave_0 added
[ 1117.220053][T17292] team0: Port device team_slave_1 added
[ 1117.229750][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1117.230433][   T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.270107][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1117.275218][   T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.310125][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1117.340764][ T5914] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1117.378057][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1117.388897][   T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.389454][ T5914] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1117.416582][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 12336, setting to 64
[ 1117.433795][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1117.445574][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[ 1117.469630][ T5914] usb 1-1: USB disconnect, device number 108
[ 1117.485840][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.595684][ T6441] bridge_slave_1: left allmulticast mode
[ 1117.606927][ T6441] bridge_slave_1: left promiscuous mode
[ 1117.620286][    T9] usb 5-1: config 0 descriptor??
[ 1117.651488][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1117.787068][ T6441] bridge_slave_0: left allmulticast mode
[ 1117.818557][ T6441] bridge_slave_0: left promiscuous mode
[ 1118.069514][T16951] Bluetooth: hci5: command tx timeout
[ 1118.167270][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1118.358975][ T5808] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[ 1118.508965][ T5808] usb 1-1: Using ep0 maxpacket: 16
[ 1118.526046][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1118.796973][    T9] ath6kl: Failed to submit usb control message: -110
[ 1118.809083][    T9] ath6kl: unable to send the bmi data to the device: -110
[ 1118.824959][    T9] ath6kl: Unable to send get target info: -110
[ 1118.846515][    T9] ath6kl: Failed to init ath6kl core: -110
[ 1118.859771][    T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1118.886267][ T5808] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1118.896249][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1118.904726][ T5808] usb 1-1: Product: syz
[ 1118.911387][ T5808] usb 1-1: Manufacturer: syz
[ 1118.916042][ T5808] usb 1-1: SerialNumber: syz
[ 1118.925404][ T5808] usb 1-1: config 0 descriptor??
[ 1118.930557][ T6441] bond0 (unregistering): left promiscuous mode
[ 1118.939355][ T5808] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1118.949643][ T6441] bond_slave_0: left promiscuous mode
[ 1118.956227][ T6441] bond_slave_1: left promiscuous mode
[ 1118.962695][ T5808] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1118.972200][ T6441] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1118.988012][ T6441] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1118.998260][ T6441] bond0 (unregistering): Released all slaves
[ 1119.009582][ T6441] bond1 (unregistering): Released all slaves
[ 1119.025257][ T6441] bond2 (unregistering): Released all slaves
[ 1119.075575][T17292] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1119.123114][ T5866] usb 5-1: USB disconnect, device number 98
[ 1119.148566][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1119.211038][T17292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1119.243419][T17292] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1119.252495][T17292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1119.358251][T17292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1119.381606][ T6441] tipc: Left network mode
[ 1119.569038][T17292] hsr_slave_0: entered promiscuous mode
[ 1119.638431][ T5866] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1119.644150][T17292] hsr_slave_1: entered promiscuous mode
[ 1119.660687][ T5808] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1119.662456][T17292] debugfs: 'hsr0' already exists in 'hsr'
[ 1119.678372][T17292] Cannot create hsr debugfs directory
[ 1119.741994][ T5808] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1119.765434][ T5808] em28xx 1-1:0.0: board has no eeprom
[ 1119.828556][ T5866] usb 5-1: Using ep0 maxpacket: 16
[ 1119.844119][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1119.858261][ T5808] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1119.869335][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1119.899449][ T5808] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1119.905066][ T5811] em28xx 1-1:0.0: Binding DVB extension
[ 1119.924351][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1119.942213][ T5808] usb 1-1: USB disconnect, device number 109
[ 1119.950446][ T5808] em28xx 1-1:0.0: Disconnecting em28xx
[ 1120.027575][ T5866] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1120.037574][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1120.078183][ T6441] batadv0: left promiscuous mode
[ 1120.099835][ T5866] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1120.144721][T16951] Bluetooth: hci5: command tx timeout
[ 1120.200056][ T6441] hsr_slave_0: left promiscuous mode
[ 1120.214380][ T5866] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1120.225229][ T5811] em28xx 1-1:0.0: Registering input extension
[ 1120.241785][ T6441] hsr_slave_1: left promiscuous mode
[ 1120.258140][ T5808] em28xx 1-1:0.0: Closing input extension
[ 1120.266567][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1120.279435][ T5866] usb 5-1: Manufacturer: syz
[ 1120.310122][ T5866] usb 5-1: config 0 descriptor??
[ 1120.326642][ T5808] em28xx 1-1:0.0: Freeing device
[ 1120.331737][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1120.530023][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1120.660771][ T6441] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1120.684190][ T6441] batman_adv: batadv0: Interface deactivated: dummy0
[ 1120.704011][ T6441] batman_adv: batadv0: Removing interface: dummy0
[ 1120.768494][ T6441] veth1_macvtap: left promiscuous mode
[ 1120.779697][ T6441] veth0_macvtap: left promiscuous mode
[ 1120.793874][ T5866] rc_core: IR keymap rc-hauppauge not found
[ 1120.802355][ T5866] Registered IR keymap rc-empty
[ 1120.832031][ T6441] veth1_vlan: left promiscuous mode
[ 1120.840154][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1120.853080][ T6441] veth0_vlan: left promiscuous mode
[ 1120.877742][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1120.909783][ T5866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1120.954989][ T5866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input100
[ 1121.016264][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.058066][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.098595][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.130607][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.168032][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.198284][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.227804][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.279109][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.307860][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.342973][ T5866] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1121.369393][ T5866] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1121.386095][ T5866] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1121.428970][ T5866] usb 5-1: USB disconnect, device number 99
[ 1121.456222][ T6441] team0 (unregistering): Port device team_slave_1 removed
[ 1121.527229][ T6441] team0 (unregistering): Port device team_slave_0 removed
[ 1123.026990][ T5866] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1123.207761][ T5866] usb 3-1: Using ep0 maxpacket: 16
[ 1123.315564][ T5866] usb 3-1: config 0 has an invalid descriptor of length 24, skipping remainder of the config
[ 1123.481035][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1123.624691][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1123.643925][ T5866] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1123.669317][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1123.806325][ T5866] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1123.830568][ T5866] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1123.949204][ T5866] usb 3-1: Manufacturer: syz
[ 1123.974116][ T5866] usb 3-1: config 0 descriptor??
[ 1124.120003][T17432] FAULT_INJECTION: forcing a failure.
[ 1124.120003][T17432] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1124.159454][T17432] CPU: 0 UID: 0 PID: 17432 Comm: syz.4.2953 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1124.159484][T17432] Tainted: [L]=SOFTLOCKUP
[ 1124.159491][T17432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1124.159501][T17432] Call Trace:
[ 1124.159507][T17432]  <TASK>
[ 1124.159515][T17432]  dump_stack_lvl+0x100/0x190
[ 1124.159550][T17432]  should_fail_ex.cold+0x5/0xa
[ 1124.159574][T17432]  _copy_to_user+0x32/0xd0
[ 1124.159596][T17432]  video_usercopy+0xece/0x1740
[ 1124.159621][T17432]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1124.159644][T17432]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1124.159672][T17432]  ? __pfx_video_usercopy+0x10/0x10
[ 1124.159711][T17432]  v4l2_ioctl+0x1bd/0x250
[ 1124.159735][T17432]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1124.159759][T17432]  __x64_sys_ioctl+0x18e/0x210
[ 1124.159788][T17432]  do_syscall_64+0x106/0xf80
[ 1124.159818][T17432]  ? clear_bhb_loop+0x40/0x90
[ 1124.159840][T17432]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1124.159858][T17432] RIP: 0033:0x7f6ac9f9c799
[ 1124.159873][T17432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1124.159889][T17432] RSP: 002b:00007f6acae22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1124.159906][T17432] RAX: ffffffffffffffda RBX: 00007f6aca215fa0 RCX: 00007f6ac9f9c799
[ 1124.159917][T17432] RDX: 0000200000000040 RSI: 00000000c0445624 RDI: 0000000000000003
[ 1124.159928][T17432] RBP: 00007f6acae22090 R08: 0000000000000000 R09: 0000000000000000
[ 1124.159938][T17432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1124.159949][T17432] R13: 00007f6aca216038 R14: 00007f6aca215fa0 R15: 00007ffcbba11178
[ 1124.159973][T17432]  </TASK>
[ 1124.462025][ T5866] rc_core: IR keymap rc-hauppauge not found
[ 1124.501624][ T5866] Registered IR keymap rc-empty
[ 1124.543274][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1124.595181][ T6441] IPVS: stop unused estimator thread 0...
[ 1124.604005][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1124.640947][ T5866] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1124.687525][ T5866] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input101
[ 1124.721622][T17456] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1124.782397][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1124.938730][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1124.983985][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1125.045678][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1125.075935][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1125.117927][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1125.156720][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1125.210261][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1125.255656][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1125.295597][ T5866] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1125.360955][T17292] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1125.384163][T17292] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1125.389100][ T5866] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1125.518889][T17292] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1125.528342][ T5866] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1125.549542][T17292] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1125.586791][ T5866] usb 3-1: USB disconnect, device number 90
[ 1126.190508][T17487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2956'.
[ 1126.572504][T17292] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1126.690141][T17292] 8021q: adding VLAN 0 to HW filter on device team0
[ 1126.923105][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1126.930200][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1127.079870][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1127.086963][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1127.686681][T17516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2961'.
[ 1127.716600][T17516] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2961'.
[ 1128.086343][T17292] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1128.543907][ T5866] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1128.704068][ T5866] usb 5-1: Using ep0 maxpacket: 16
[ 1128.721408][ T5866] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1128.801971][ T5866] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1128.900426][ T5866] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1129.077525][ T5866] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1129.163594][ T5866] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[ 1129.172657][ T5866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.213613][T17292] veth0_vlan: entered promiscuous mode
[ 1129.359948][T17292] veth1_vlan: entered promiscuous mode
[ 1129.823839][ T5914] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[ 1129.841131][T17292] veth0_macvtap: entered promiscuous mode
[ 1129.950946][T17292] veth1_macvtap: entered promiscuous mode
[ 1130.069346][ T5914] usb 1-1: Using ep0 maxpacket: 16
[ 1130.119640][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1130.179864][T17292] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1130.194464][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1130.284871][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1130.320428][T17292] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1130.340792][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1130.420756][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1130.452003][   T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.505777][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.538391][ T5914] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1130.589875][   T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.601069][ T5914] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1130.646301][   T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1130.658158][ T5914] usb 1-1: Manufacturer: syz
[ 1130.714128][ T5914] usb 1-1: config 0 descriptor??
[ 1131.075561][ T5866] usb 5-1: Product: syz
[ 1131.079749][ T5866] usb 5-1: Manufacturer: syz
[ 1131.084395][ T5866] usb 5-1: SerialNumber: syz
[ 1131.112805][ T5866] usb 5-1: can't set config #1, error -71
[ 1131.125287][ T5866] usb 5-1: USB disconnect, device number 100
[ 1131.243328][ T5914] rc_core: IR keymap rc-hauppauge not found
[ 1131.249256][ T5914] Registered IR keymap rc-empty
[ 1131.289900][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1131.306404][T17540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1131.325994][T17540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1131.343367][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1131.450742][T14091] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[ 1131.596764][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1131.607268][ T6441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1131.614532][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input102
[ 1131.703516][T17555] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1131.759744][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1131.782862][T14091] usb 4-1: Using ep0 maxpacket: 16
[ 1131.783319][ T6441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1131.800228][T14091] usb 4-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[ 1131.811109][T14091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1131.842055][   T30] audit: type=1400 audit(1774508343.759:4081): avc:  denied  { mounton } for  pid=17292 comm="syz-executor" path="/root/syzkaller.h0MsDz/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[ 1131.874903][T14091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1131.894110][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1131.895844][   T30] audit: type=1400 audit(1774508343.819:4082): avc:  denied  { mounton } for  pid=17292 comm="syz-executor" path="/root/syzkaller.h0MsDz/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=64585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[ 1131.932490][T14091] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1131.935447][   T30] audit: type=1400 audit(1774508343.829:4083): avc:  denied  { mounton } for  pid=17292 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[ 1131.945285][T14091] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1131.979186][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1132.010081][   T30] audit: type=1400 audit(1774508343.829:4084): avc:  denied  { mount } for  pid=17292 comm="syz-executor" name="/" dev="gadgetfs" ino=7138 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[ 1132.042350][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1132.042912][   T30] audit: type=1400 audit(1774508343.839:4085): avc:  denied  { mounton } for  pid=17292 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[ 1132.126575][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1132.158119][T14091] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1132.167608][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1132.181614][T14091] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1132.197347][T14091] usb 4-1: Manufacturer: syz
[ 1132.202252][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1132.219257][T14091] usb 4-1: config 0 descriptor??
[ 1132.226019][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1132.242383][ T5808] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1132.252902][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1132.287155][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1132.314040][ T5914] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1132.324007][ T5914] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1132.342296][ T5914] usb 1-1: USB disconnect, device number 110
[ 1132.433316][ T5808] usb 5-1: Using ep0 maxpacket: 32
[ 1132.490252][   T24] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1132.529131][ T5808] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1132.541951][T14091] rc_core: IR keymap rc-hauppauge not found
[ 1132.548700][T14091] Registered IR keymap rc-empty
[ 1132.552641][ T5808] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1132.557350][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1132.565490][ T5808] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[ 1132.580550][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1132.600768][ T5808] usb 5-1: Product: syz
[ 1132.601393][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1132.617734][ T5808] usb 5-1: Manufacturer: syz
[ 1132.631934][ T5808] usb 5-1: SerialNumber: syz
[ 1132.655470][T14091] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1132.661872][   T24] usb 2-1: Using ep0 maxpacket: 32
[ 1132.697836][T14091] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input103
[ 1132.719585][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255
[ 1132.721951][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1132.754666][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1132.763930][   T24] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1132.777246][   T24] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1132.793968][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1132.815937][   T24] usb 2-1: Product: syz
[ 1132.834211][   T24] usb 2-1: Manufacturer: syz
[ 1132.841839][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1132.849108][   T24] usb 2-1: SerialNumber: syz
[ 1132.901787][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1132.933194][   T24] usb 2-1: config 0 descriptor??
[ 1132.945990][T17581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2969'.
[ 1132.962184][T17567] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1132.968005][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1133.001834][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1133.044059][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1133.104132][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1133.141869][T14091] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 1133.179727][   T24] usb 2-1: USB disconnect, device number 104
[ 1133.195472][T14091] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1133.245269][T14091] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1133.310471][T14091] usb 4-1: USB disconnect, device number 84
[ 1133.384861][   T30] audit: type=1400 audit(1774508345.320:4086): avc:  denied  { lock } for  pid=17564 comm="syz.1.2970" path="socket:[64637]" dev="sockfs" ino=64637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[ 1133.696337][ T5808] usb 5-1: unit 37 not found!
[ 1133.703034][ T5808] usb 5-1: unit 0 not found!
[ 1134.048172][ T5808] usb 5-1: USB disconnect, device number 101
[ 1134.291435][T17050] udevd[17050]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1134.630853][T14091] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[ 1134.809860][T14091] usb 4-1: config 0 has no interfaces?
[ 1134.815584][T14091] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1134.917857][T12586] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1134.927658][T12586] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1134.963752][T12586] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1134.971312][T14091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1134.971619][T12586] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1134.999638][T12586] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1135.018440][T14091] usb 4-1: config 0 descriptor??
[ 1135.223750][T17605] chnl_net:caif_netlink_parms(): no params data found
[ 1135.546057][ T5811] usb 4-1: USB disconnect, device number 85
[ 1137.647863][T12586] Bluetooth: hci0: command tx timeout
[ 1137.860424][T17605] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1137.874539][T17633] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1137.989270][T17605] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1138.003939][T17605] bridge_slave_0: entered allmulticast mode
[ 1138.016075][T17605] bridge_slave_0: entered promiscuous mode
[ 1138.049027][T17605] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1138.059839][T17605] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1138.073108][T17605] bridge_slave_1: entered allmulticast mode
[ 1138.090010][T17605] bridge_slave_1: entered promiscuous mode
[ 1138.171994][T17605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1138.214890][T17605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1138.254052][T17605] team0: Port device team_slave_0 added
[ 1138.306096][T17605] team0: Port device team_slave_1 added
[ 1138.360509][T17605] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1138.367525][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1138.394727][T17605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1138.506362][T17605] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1138.548839][T17605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1138.581957][T17605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1139.042586][T17605] hsr_slave_0: entered promiscuous mode
[ 1139.064309][T17605] hsr_slave_1: entered promiscuous mode
[ 1139.378830][   T49] bridge_slave_1: left allmulticast mode
[ 1139.388943][T14091] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1139.406786][   T49] bridge_slave_1: left promiscuous mode
[ 1139.488539][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1139.552814][   T49] bridge_slave_0: left allmulticast mode
[ 1139.561448][   T49] bridge_slave_0: left promiscuous mode
[ 1139.569842][T14091] usb 2-1: Using ep0 maxpacket: 8
[ 1139.575621][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1139.584358][T14091] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1139.596847][   T49] veth5: left allmulticast mode
[ 1139.610038][   T49] veth5: left promiscuous mode
[ 1139.615368][T14091] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1139.627450][   T49] bridge1: port 2(veth5) entered disabled state
[ 1139.637198][   T49] veth3: left allmulticast mode
[ 1139.642298][   T49] veth3: left promiscuous mode
[ 1139.647976][   T49] bridge1: port 1(veth3) entered disabled state
[ 1139.659797][T14091] usb 2-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[ 1139.675042][T14091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.684231][T14091] usb 2-1: Product: syz
[ 1139.689605][T14091] usb 2-1: Manufacturer: syz
[ 1139.700570][T14091] usb 2-1: SerialNumber: syz
[ 1139.729834][T12586] Bluetooth: hci0: command tx timeout
[ 1139.827596][T17659] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2990'.
[ 1140.596029][   T49] gretap0 (unregistering): left promiscuous mode
[ 1140.640619][T14091] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1140.666329][T14091] usb 2-1: USB disconnect, device number 105
[ 1140.880601][   T49] bond0 (unregistering): left promiscuous mode
[ 1140.886805][   T49] bond_slave_0: left promiscuous mode
[ 1140.893736][   T49] bond_slave_1: left promiscuous mode
[ 1140.926787][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1140.953584][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1140.969536][   T49] bond0 (unregistering): Released all slaves
[ 1141.116684][   T49] tipc: Disabling bearer <udp:syz2>
[ 1141.134957][   T49] tipc: Left network mode
[ 1141.547504][ T5811] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 1141.714085][ T5811] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1141.808566][T12586] Bluetooth: hci0: command tx timeout
[ 1141.817937][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1141.871921][ T5811] usb 3-1: config 0 descriptor??
[ 1141.891253][ T5811] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1142.035234][   T49] hsr_slave_0: left promiscuous mode
[ 1142.077271][   T49] hsr_slave_1: left promiscuous mode
[ 1142.104482][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1142.146158][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1143.228385][ T5811] usb 3-1: USB disconnect, device number 91
[ 1143.906219][T12586] Bluetooth: hci0: command tx timeout
[ 1144.119250][ T5914] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[ 1144.133827][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1144.160749][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1144.278510][ T5914] usb 1-1: Using ep0 maxpacket: 16
[ 1144.285258][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1144.305876][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1144.326379][ T5811] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[ 1144.335587][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1144.369007][ T5914] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1144.402255][ T5914] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1144.433107][ T5914] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1144.442602][ T5914] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1144.453557][ T5914] usb 1-1: Manufacturer: syz
[ 1144.461154][ T5914] usb 1-1: config 0 descriptor??
[ 1144.508157][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1144.536354][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1144.591668][ T5811] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1144.649078][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1144.667910][ T5811] usb 4-1: Product: syz
[ 1144.695509][ T5811] usb 4-1: Manufacturer: syz
[ 1144.708542][ T5811] usb 4-1: SerialNumber: syz
[ 1144.732020][ T5811] usb 4-1: config 0 descriptor??
[ 1144.753557][   T49] IPVS: stop unused estimator thread 0...
[ 1144.795781][ T5914] rc_core: IR keymap rc-hauppauge not found
[ 1144.801913][ T5914] Registered IR keymap rc-empty
[ 1144.803245][T17605] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1144.807344][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1144.887205][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1144.917644][T17605] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1144.920760][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[ 1144.976382][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input104
[ 1145.011799][T17605] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1145.053609][T17605] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1145.095112][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.245743][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.296976][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.330011][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.368505][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.376999][T17605] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1145.412753][T17605] 8021q: adding VLAN 0 to HW filter on device team0
[ 1145.427821][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.447237][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1145.454408][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1145.483688][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1145.490839][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1145.498501][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.535708][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.570242][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.595549][ T5914] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[ 1145.629642][ T5914] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1145.651032][T17750] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1145.675300][ T5914] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1145.709226][ T5914] usb 1-1: USB disconnect, device number 111
[ 1146.015494][T17605] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1146.025484][   T24] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1146.187540][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 1146.206453][   T24] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[ 1146.225707][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1146.257458][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1146.278204][   T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1146.301673][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1146.329747][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1146.480462][   T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1146.503738][   T24] usb 2-1: Manufacturer: syz
[ 1146.544645][   T24] usb 2-1: config 0 descriptor??
[ 1146.619051][ T5811] usb 4-1: USB disconnect, device number 86
[ 1146.653376][   T30] audit: type=1400 audit(1774508358.587:4087): avc:  denied  { ioctl } for  pid=17765 comm="syz.3.3008" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x540f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[ 1146.987630][T16952] udevd[16952]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1147.024613][   T24] rc_core: IR keymap rc-hauppauge not found
[ 1147.030655][   T24] Registered IR keymap rc-empty
[ 1147.046397][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.084922][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.115517][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1147.174621][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input105
[ 1147.236030][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.273585][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.294866][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.324700][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.344544][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.365162][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.394588][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.445948][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.465463][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.476874][T17605] veth0_vlan: entered promiscuous mode
[ 1147.491230][   T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1147.527985][   T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1147.539901][T17605] veth1_vlan: entered promiscuous mode
[ 1147.547020][   T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1147.569769][   T24] usb 2-1: USB disconnect, device number 106
[ 1147.674281][T17783] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1147.725009][T17605] veth0_macvtap: entered promiscuous mode
[ 1147.736100][T17605] veth1_macvtap: entered promiscuous mode
[ 1147.774813][T17605] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1147.795159][T17605] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1147.837814][ T6441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.848755][ T6441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.955475][ T6441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.964946][ T6441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1148.056200][T17787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3012'.
[ 1148.581668][ T6441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1148.602849][ T6441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1149.884613][ T6445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1149.892468][ T6445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1150.852330][T17811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3018'.
[ 1150.873078][T17811] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3018'.
[ 1150.882688][ T5811] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1150.891318][T16951] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1150.911716][T16951] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1150.921320][T16951] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1150.929165][T16951] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1150.936776][T16951] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1151.127882][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1151.163921][ T5950] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1151.179143][ T5811] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1151.225121][ T5811] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1151.261736][ T5811] usb 5-1: config 0 descriptor??
[ 1151.292125][ T5811] pwc: Askey VC010 type 2 USB webcam detected.
[ 1151.302520][ T5950] usb 3-1: device descriptor read/64, error -71
[ 1151.470433][T17812] chnl_net:caif_netlink_parms(): no params data found
[ 1151.552371][ T5950] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1151.695118][ T5811] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1151.701570][T17812] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1151.723824][T17812] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1151.737902][ T5811] pwc: recv_control_msg error -32 req 02 val 2700
[ 1151.737945][ T5950] usb 3-1: device descriptor read/64, error -71
[ 1151.744911][T17812] bridge_slave_0: entered allmulticast mode
[ 1151.761550][ T5811] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1151.769034][ T5811] pwc: recv_control_msg error -32 req 04 val 1000
[ 1151.793814][T17812] bridge_slave_0: entered promiscuous mode
[ 1151.803982][T17812] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1151.812041][T17812] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1151.820161][T17812] bridge_slave_1: entered allmulticast mode
[ 1151.832376][T17812] bridge_slave_1: entered promiscuous mode
[ 1151.878070][T17812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1151.891658][T17812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1151.904535][ T5950] usb usb3-port1: attempt power cycle
[ 1151.920684][T17812] team0: Port device team_slave_0 added
[ 1151.927911][T17812] team0: Port device team_slave_1 added
[ 1151.946340][T17812] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1151.953457][T17812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1151.979879][T17812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1151.991779][T17812] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1151.999010][T17812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1152.025686][T17812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1152.063062][T17812] hsr_slave_0: entered promiscuous mode
[ 1152.069125][T17812] hsr_slave_1: entered promiscuous mode
[ 1152.075236][T17812] debugfs: 'hsr0' already exists in 'hsr'
[ 1152.080965][T17812] Cannot create hsr debugfs directory
[ 1152.102100][ T5914] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1152.122462][ T5873] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[ 1152.175938][T17812] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.191784][ T5811] pwc: recv_control_msg error -71 req 02 val 2000
[ 1152.199010][ T5811] pwc: recv_control_msg error -71 req 02 val 2100
[ 1152.207228][ T5811] pwc: recv_control_msg error -71 req 04 val 1500
[ 1152.213994][ T5811] pwc: recv_control_msg error -71 req 02 val 2500
[ 1152.220622][ T5811] pwc: recv_control_msg error -71 req 02 val 2400
[ 1152.229170][ T5811] pwc: recv_control_msg error -71 req 02 val 2600
[ 1152.235984][ T5811] pwc: recv_control_msg error -71 req 02 val 2900
[ 1152.242831][ T5811] pwc: recv_control_msg error -71 req 02 val 2800
[ 1152.249672][ T5811] pwc: recv_control_msg error -71 req 04 val 1100
[ 1152.252263][ T5950] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1152.256897][ T5811] pwc: recv_control_msg error -71 req 04 val 1200
[ 1152.275220][T17812] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.275829][ T5811] pwc: Registered as video103.
[ 1152.286538][ T5914] usb 2-1: Using ep0 maxpacket: 32
[ 1152.296168][ T5873] usb 4-1: Using ep0 maxpacket: 8
[ 1152.301996][ T5950] usb 3-1: device descriptor read/8, error -71
[ 1152.312141][ T5811] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input106
[ 1152.314990][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1152.339988][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1152.344313][ T5811] usb 5-1: USB disconnect, device number 102
[ 1152.355819][ T5914] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1152.373700][ T5873] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1152.389702][ T5914] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[ 1152.402344][ T5873] usb 4-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[ 1152.414580][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.427875][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.436144][ T5914] usb 2-1: Product: syz
[ 1152.440308][ T5914] usb 2-1: Manufacturer: syz
[ 1152.451091][ T5873] usb 4-1: Product: syz
[ 1152.454802][T17812] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.456252][ T5873] usb 4-1: Manufacturer: syz
[ 1152.470236][ T5914] usb 2-1: SerialNumber: syz
[ 1152.476281][ T5873] usb 4-1: SerialNumber: syz
[ 1152.527179][T17812] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1152.562955][ T5950] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1152.582943][ T5950] usb 3-1: device descriptor read/8, error -71
[ 1152.638446][T17812] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1152.648377][T17812] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1152.657582][T17812] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1152.666900][T17812] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1152.710059][ T5950] usb usb3-port1: unable to enumerate USB device
[ 1152.717375][ T5873] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1152.757363][ T5873] usb 4-1: USB disconnect, device number 87
[ 1152.789734][T17835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3020'.
[ 1152.999930][T17812] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1153.011813][T12586] Bluetooth: hci1: command tx timeout
[ 1153.026937][T17812] 8021q: adding VLAN 0 to HW filter on device team0
[ 1153.053400][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1153.060574][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1153.104771][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1153.111933][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1154.238642][T17812] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1155.525743][T12586] Bluetooth: hci1: command tx timeout
[ 1156.540931][ T5914] usb 2-1: unit 37 not found!
[ 1156.546132][ T5914] usb 2-1: unit 0 not found!
[ 1156.665785][T17812] veth0_vlan: entered promiscuous mode
[ 1156.666739][ T5914] usb 2-1: USB disconnect, device number 107
[ 1156.723791][T17050] udevd[17050]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1156.785306][T17869] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1156.851596][T17812] veth1_vlan: entered promiscuous mode
[ 1157.367500][T17812] veth0_macvtap: entered promiscuous mode
[ 1157.381164][T17812] veth1_macvtap: entered promiscuous mode
[ 1157.411475][T17812] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1157.439737][T17812] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1157.567986][ T6445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.576932][T12586] Bluetooth: hci1: command tx timeout
[ 1157.592710][ T6445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.614040][ T6445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.623006][ T6445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1157.729563][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1157.826552][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1157.877478][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1157.910301][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1159.177102][    T9] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[ 1159.228557][ T5866] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[ 1159.350929][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1159.372400][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1159.397830][    T9] usb 4-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[ 1159.417173][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.420967][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1159.449773][    T9] usb 4-1: config 0 descriptor??
[ 1159.470705][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1159.511336][ T5866] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1159.538478][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1159.546499][ T5866] usb 1-1: Product: syz
[ 1159.568819][ T5866] usb 1-1: Manufacturer: syz
[ 1159.573448][ T5866] usb 1-1: SerialNumber: syz
[ 1159.606760][ T5866] usb 1-1: config 0 descriptor??
[ 1159.638711][T12586] Bluetooth: hci1: command tx timeout
[ 1159.960931][    T9] hid_parser_main: 112 callbacks suppressed
[ 1159.960944][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1160.004736][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1160.040073][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1160.047583][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1161.012731][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1161.020404][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1161.028178][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1161.035655][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1161.043206][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1161.050697][    T9] holtek_mouse 0003:04D9:A04A.0028: unknown main item tag 0x0
[ 1161.058380][    T9] holtek_mouse 0003:04D9:A04A.0028: collection stack underflow
[ 1161.065937][    T9] holtek_mouse 0003:04D9:A04A.0028: item 0 1 0 12 parsing failed
[ 1161.082773][    T9] holtek_mouse 0003:04D9:A04A.0028: hid parse failed: -22
[ 1161.090011][    T9] holtek_mouse 0003:04D9:A04A.0028: probe with driver holtek_mouse failed with error -22
[ 1161.103209][    T9] usb 4-1: USB disconnect, device number 88
[ 1161.154261][T16951] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1161.267766][T16951] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1161.299250][T16951] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1161.754857][T16951] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1161.763176][T16951] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1162.390183][ T5866] usb 1-1: USB disconnect, device number 112
[ 1162.480251][T17931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3045'.
[ 1162.514423][T17931] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3045'.
[ 1162.690527][ T5808] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1162.907533][ T5808] usb 5-1: Using ep0 maxpacket: 8
[ 1162.920692][ T5808] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1162.933341][ T5808] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1163.915454][T12586] Bluetooth: hci4: command tx timeout
[ 1163.972954][ T5808] usb 5-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40
[ 1163.983155][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1163.992180][ T5808] usb 5-1: Product: syz
[ 1163.998320][ T5808] usb 5-1: Manufacturer: syz
[ 1164.002917][ T5808] usb 5-1: SerialNumber: syz
[ 1165.295550][ T5808] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1165.336225][ T5808] usb 5-1: USB disconnect, device number 103
[ 1165.464700][T17953] sp0: Synchronizing with TNC
[ 1165.475130][T17916] chnl_net:caif_netlink_parms(): no params data found
[ 1165.663897][T17916] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1165.780000][T17916] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1165.800018][T17916] bridge_slave_0: entered allmulticast mode
[ 1165.819791][T17916] bridge_slave_0: entered promiscuous mode
[ 1165.851907][T17916] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1165.885926][T17916] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1165.903546][T17916] bridge_slave_1: entered allmulticast mode
[ 1165.919134][T17916] bridge_slave_1: entered promiscuous mode
[ 1165.936774][T17964] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3052'.
[ 1165.947005][T17967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3052'.
[ 1165.955483][T16951] Bluetooth: hci4: command tx timeout
[ 1166.001921][T17916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1166.039766][T17916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1166.083655][T17916] team0: Port device team_slave_0 added
[ 1166.094753][T17916] team0: Port device team_slave_1 added
[ 1166.142399][T17916] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1166.149570][    T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1166.160168][T17916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1166.186816][T17916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1166.201881][T17916] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1166.210820][T17916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1166.237262][ T5950] usb 1-1: new low-speed USB device number 113 using dummy_hcd
[ 1166.248486][T17916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1166.336461][    T9] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1166.345713][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.365207][    T9] usb 5-1: config 0 descriptor??
[ 1166.386351][T17916] hsr_slave_0: entered promiscuous mode
[ 1166.413729][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1166.415830][T17916] hsr_slave_1: entered promiscuous mode
[ 1166.421792][ T5950] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1166.428604][T17916] debugfs: 'hsr0' already exists in 'hsr'
[ 1166.435072][ T5950] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1166.440448][T17916] Cannot create hsr debugfs directory
[ 1166.448833][ T5950] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1166.605026][ T5950] usb 1-1: string descriptor 0 read error: -22
[ 1166.621083][ T5950] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice=63.25
[ 1166.632828][ T5950] usb 1-1: New USB device strings: Mfr=27, Product=188, SerialNumber=3
[ 1166.676271][ T5950] usb 1-1: invalid UAC_HEADER (v1)
[ 1166.800798][ T5914] usb 4-1: new full-speed USB device number 89 using dummy_hcd
[ 1166.810583][T17973] overlayfs: overlapping lowerdir path
[ 1166.873006][ T5950] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1166.883818][    T9] gspca_cpia1: usb_control_msg 03, error -71
[ 1166.893933][    T9] gspca_cpia1: usb_control_msg 01, error -71
[ 1166.914494][    T9] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[ 1166.924337][ T5950] usb 1-1: USB disconnect, device number 113
[ 1166.951026][    T9] usb 5-1: USB disconnect, device number 104
[ 1166.957576][ T5914] usb 4-1: device descriptor read/64, error -71
[ 1167.319874][ T5914] usb 4-1: new full-speed USB device number 90 using dummy_hcd
[ 1167.558304][T17916] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1167.667065][ T5914] usb 4-1: device descriptor read/64, error -71
[ 1167.679812][T17916] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1167.742820][T17916] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1167.774588][ T5914] usb usb4-port1: attempt power cycle
[ 1167.819606][T17984] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1168.002501][T17916] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1168.034340][T16951] Bluetooth: hci4: command tx timeout
[ 1169.141546][ T5914] usb 4-1: new full-speed USB device number 91 using dummy_hcd
[ 1169.209684][ T5914] usb 4-1: device descriptor read/8, error -71
[ 1169.287110][T17916] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1169.296920][T17916] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1169.309470][T17916] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1169.347550][T17916] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1169.463844][T17998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3061'.
[ 1169.482900][T17998] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3061'.
[ 1169.717455][T17916] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1169.783682][T17916] 8021q: adding VLAN 0 to HW filter on device team0
[ 1169.831477][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1169.838632][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1169.869178][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1169.876346][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1170.031504][   T30] audit: type=1400 audit(1774508381.968:4088): avc:  denied  { listen } for  pid=18005 comm="syz.4.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[ 1170.113121][T16951] Bluetooth: hci4: command tx timeout
[ 1170.695018][T17916] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1171.387831][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[ 1171.549916][T18019] bond0: (slave wlan1): Releasing backup interface
[ 1171.618041][T18019] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode
[ 1171.671357][T17916] veth0_vlan: entered promiscuous mode
[ 1171.711451][T17916] veth1_vlan: entered promiscuous mode
[ 1171.752858][ T5914] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[ 1171.776135][T17916] veth0_macvtap: entered promiscuous mode
[ 1171.803020][T17916] veth1_macvtap: entered promiscuous mode
[ 1171.855255][T17916] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1171.886783][T17916] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1171.912255][ T5914] usb 4-1: Using ep0 maxpacket: 16
[ 1171.920870][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1171.938376][T17540] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.944158][ T5914] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1171.961669][T17540] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1171.965941][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1171.990316][T17540] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.002179][ T5914] usb 4-1: Product: syz
[ 1172.015415][ T5914] usb 4-1: Manufacturer: syz
[ 1172.015853][T17540] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1172.076100][ T5914] usb 4-1: SerialNumber: syz
[ 1172.098481][ T5914] usb 4-1: config 0 descriptor??
[ 1172.122858][ T5914] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1172.151878][ T5914] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1172.167026][T17540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1172.190901][T17540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1172.273834][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1172.291160][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1172.374920][T18033] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1172.523862][   T30] audit: type=1400 audit(1774508384.490:4089): avc:  denied  { accept } for  pid=18034 comm="syz.2.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 1172.888240][ T5914] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1172.955088][ T5914] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1172.986932][ T5811] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1173.026736][ T5914] em28xx 4-1:0.0: board has no eeprom
[ 1173.051676][ T5808] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[ 1173.172416][ T5811] usb 3-1: Using ep0 maxpacket: 16
[ 1173.241666][ T5808] usb 1-1: Using ep0 maxpacket: 16
[ 1174.020700][ T5914] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1174.036613][ T5811] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1174.047553][ T5811] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1174.057531][ T5808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1174.061504][ T5914] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1174.070365][ T5811] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1174.434526][    T9] em28xx 4-1:0.0: Binding DVB extension
[ 1174.476763][ T5808] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1174.482948][ T5914] usb 4-1: USB disconnect, device number 93
[ 1174.597523][ T5811] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1174.604894][ T5914] em28xx 4-1:0.0: Disconnecting em28xx
[ 1174.610966][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.632032][ T5811] usb 3-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40
[ 1174.646321][ T5808] usb 1-1: Product: syz
[ 1174.650580][ T5808] usb 1-1: Manufacturer: syz
[ 1174.697186][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.726888][ T5808] usb 1-1: SerialNumber: syz
[ 1174.844521][ T5808] usb 1-1: config 0 descriptor??
[ 1174.852381][ T5811] usb 3-1: Product: syz
[ 1175.004860][    T9] em28xx 4-1:0.0: Registering input extension
[ 1175.005676][ T5808] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1175.024125][ T5811] usb 3-1: Manufacturer: syz
[ 1175.028706][ T5811] usb 3-1: SerialNumber: syz
[ 1175.056657][ T5914] em28xx 4-1:0.0: Closing input extension
[ 1175.116837][ T5914] em28xx 4-1:0.0: Freeing device
[ 1175.130550][ T5808] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1175.267939][ T5811] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 96 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8
[ 1175.287301][T12586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1175.296578][T12586] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1175.305849][T12586] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1175.319772][T12586] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1175.327147][T12586] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1176.053954][ T5808] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1176.089586][T18046] usb 3-1: USB disconnect, device number 96
[ 1176.134096][ T5808] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1176.152532][ T5808] em28xx 1-1:0.0: board has no eeprom
[ 1176.176414][   T30] audit: type=1400 audit(1774508388.141:4090): avc:  denied  { map } for  pid=18060 comm="syz.1.3074" path="socket:[67910]" dev="sockfs" ino=67910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1176.259984][ T5808] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1176.267994][ T5808] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1176.290847][T18046] em28xx 1-1:0.0: Binding DVB extension
[ 1176.310673][ T5808] usb 1-1: USB disconnect, device number 114
[ 1176.325572][ T5808] em28xx 1-1:0.0: Disconnecting em28xx
[ 1176.432892][T18056] chnl_net:caif_netlink_parms(): no params data found
[ 1176.445061][T18039] usblp0: removed
[ 1176.532225][T18046] em28xx 1-1:0.0: Registering input extension
[ 1176.542435][ T5808] em28xx 1-1:0.0: Closing input extension
[ 1176.565475][ T5808] em28xx 1-1:0.0: Freeing device
[ 1176.710570][T18079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3077'.
[ 1176.720192][T18079] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3077'.
[ 1177.166008][T18056] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1177.227407][T18085] qnx4: unable to read the superblock
[ 1177.285195][T18056] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1177.292601][T18056] bridge_slave_0: entered allmulticast mode
[ 1177.301436][T18056] bridge_slave_0: entered promiscuous mode
[ 1177.310416][T18056] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1177.317750][T18056] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1177.325510][T18056] bridge_slave_1: entered allmulticast mode
[ 1177.333516][T18056] bridge_slave_1: entered promiscuous mode
[ 1177.367097][T18056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1177.460152][T18056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1177.523326][T18056] team0: Port device team_slave_0 added
[ 1177.540403][T16951] Bluetooth: hci3: command tx timeout
[ 1177.549704][   T30] audit: type=1400 audit(1774508389.512:4091): avc:  denied  { getopt } for  pid=18087 comm="syz.2.3079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[ 1177.555075][T18056] team0: Port device team_slave_1 added
[ 1177.861194][T18056] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1177.878958][T18056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1177.954126][T18056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1178.569522][T18056] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1178.576686][T18056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1178.641893][T18056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1178.858493][T18056] hsr_slave_0: entered promiscuous mode
[ 1178.876680][T18111] loop4: detected capacity change from 0 to 7
[ 1178.885437][T18056] hsr_slave_1: entered promiscuous mode
[ 1178.886882][T18111] buffer_io_error: 27 callbacks suppressed
[ 1178.886895][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1178.918997][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1178.920056][T18056] debugfs: 'hsr0' already exists in 'hsr'
[ 1178.928489][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1178.968751][T18056] Cannot create hsr debugfs directory
[ 1178.969888][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1179.001140][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1179.010145][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1179.019589][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1179.082975][T18111] ldm_validate_partition_table(): Disk read failed.
[ 1179.100869][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1179.125432][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1179.153812][T18111] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1179.181599][T18111] Dev loop4: unable to read RDB block 0
[ 1179.198610][T18111]  loop4: unable to read partition table
[ 1179.211782][T18111] loop4: partition table beyond EOD, truncated
[ 1179.238401][T18111] loop_reread_partitions: partition scan of loop4 (���������S�j��	���%��`��ր����5) failed (rc=-5)
[ 1179.395912][T18056] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1179.994978][T16951] Bluetooth: hci3: command tx timeout
[ 1180.802229][T18056] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1180.952783][T18056] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1181.038411][ T5866] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1181.165047][T18056] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1181.251262][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1182.203268][T16951] Bluetooth: hci3: command tx timeout
[ 1182.220251][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1182.598257][ T5866] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[ 1182.675366][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1182.719209][ T5866] usb 3-1: config 0 descriptor??
[ 1182.908804][T18056] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1182.933346][T18056] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1182.946681][ T5914] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1182.982899][T18056] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1182.995949][T18056] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1183.184189][ T5866] hid_parser_main: 28 callbacks suppressed
[ 1183.184216][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1183.272837][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1183.342143][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1183.500265][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1183.538954][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1183.643808][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1183.824997][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1183.872824][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1183.942709][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1184.003171][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1184.017168][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1184.027698][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1184.038654][ T5914] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1184.050815][ T5914] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1184.060084][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.066260][ T5866] holtek_mouse 0003:04D9:A04A.0029: unknown main item tag 0x0
[ 1184.068115][ T5914] usb 1-1: Product: syz
[ 1184.080331][ T5914] usb 1-1: Manufacturer: syz
[ 1184.085283][ T5914] usb 1-1: SerialNumber: syz
[ 1184.090879][ T5866] holtek_mouse 0003:04D9:A04A.0029: collection stack underflow
[ 1184.105351][T18056] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1184.116761][ T5914] usb 1-1: config 0 descriptor??
[ 1184.127171][ T5866] holtek_mouse 0003:04D9:A04A.0029: item 0 0 0 12 parsing failed
[ 1184.135303][ T5866] holtek_mouse 0003:04D9:A04A.0029: hid parse failed: -22
[ 1184.169455][T18056] 8021q: adding VLAN 0 to HW filter on device team0
[ 1184.177893][ T5866] holtek_mouse 0003:04D9:A04A.0029: probe with driver holtek_mouse failed with error -22
[ 1184.244531][ T5866] usb 3-1: USB disconnect, device number 97
[ 1184.253140][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1184.260284][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1184.271080][T16951] Bluetooth: hci3: command tx timeout
[ 1184.299752][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1184.306857][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1184.525976][   T30] audit: type=1326 audit(1774508396.335:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18156 comm="syz.4.3094" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff7d639c799 code=0x0
[ 1184.681943][T18168] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1184.945075][T18056] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1185.117067][T18056] veth0_vlan: entered promiscuous mode
[ 1185.251289][T18056] veth1_vlan: entered promiscuous mode
[ 1186.073678][ T5914] adutux 1-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1186.084930][ T5914] usb 1-1: USB disconnect, device number 115
[ 1186.221751][T18056] veth0_macvtap: entered promiscuous mode
[ 1186.281987][T18056] veth1_macvtap: entered promiscuous mode
[ 1186.402574][T18056] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1186.465925][T18056] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1186.506027][ T6445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.534665][ T6445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.567340][ T6445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.628486][ T6445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1186.681459][ T6441] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1186.703571][ T6441] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.750691][ T6441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1186.760037][ T6441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1186.891895][T18189] FAULT_INJECTION: forcing a failure.
[ 1186.891895][T18189] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1186.933115][T18190] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1187.046784][T18189] CPU: 0 UID: 0 PID: 18189 Comm: syz.3.3072 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1187.046814][T18189] Tainted: [L]=SOFTLOCKUP
[ 1187.046820][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1187.046830][T18189] Call Trace:
[ 1187.046837][T18189]  <TASK>
[ 1187.046844][T18189]  dump_stack_lvl+0x100/0x190
[ 1187.046886][T18189]  should_fail_ex.cold+0x5/0xa
[ 1187.046910][T18189]  _copy_to_user+0x32/0xd0
[ 1187.046932][T18189]  binder_ioctl+0x1636/0x7610
[ 1187.046967][T18189]  ? tomoyo_path_number_perm+0x188/0x580
[ 1187.046997][T18189]  ? __pfx_binder_ioctl+0x10/0x10
[ 1187.047026][T18189]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1187.047053][T18189]  ? do_vfs_ioctl+0x226/0x13e0
[ 1187.047081][T18189]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1187.047107][T18189]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1187.047140][T18189]  ? __fget_files+0x215/0x3d0
[ 1187.047158][T18189]  ? hook_file_ioctl_common+0x146/0x410
[ 1187.047183][T18189]  ? selinux_file_ioctl+0x139/0x290
[ 1187.047206][T18189]  ? selinux_file_ioctl+0xb4/0x290
[ 1187.047233][T18189]  ? __pfx_binder_ioctl+0x10/0x10
[ 1187.047260][T18189]  __x64_sys_ioctl+0x18e/0x210
[ 1187.047288][T18189]  do_syscall_64+0x106/0xf80
[ 1187.047312][T18189]  ? clear_bhb_loop+0x40/0x90
[ 1187.047334][T18189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1187.047352][T18189] RIP: 0033:0x7f0a3159c799
[ 1187.047367][T18189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1187.047384][T18189] RSP: 002b:00007f0a32402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1187.047401][T18189] RAX: ffffffffffffffda RBX: 00007f0a31815fa0 RCX: 00007f0a3159c799
[ 1187.047413][T18189] RDX: 0000200000000380 RSI: 00000000c018620b RDI: 0000000000000003
[ 1187.047423][T18189] RBP: 00007f0a32402090 R08: 0000000000000000 R09: 0000000000000000
[ 1187.047433][T18189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1187.047442][T18189] R13: 00007f0a31816038 R14: 00007f0a31815fa0 R15: 00007ffc1efb9888
[ 1187.047467][T18189]  </TASK>
[ 1187.047474][T18189] binder: 18186:18189 ioctl c018620b 200000000380 returned -14
[ 1187.882023][   T30] audit: type=1400 audit(1774508399.847:4093): avc:  denied  { ioctl } for  pid=18202 comm="syz.0.3104" path="socket:[68525]" dev="sockfs" ino=68525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[ 1189.320094][T18218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3106'.
[ 1189.351254][T18218] bond0: entered promiscuous mode
[ 1189.356397][T18218] bond_slave_0: entered promiscuous mode
[ 1189.362887][T18218] bond_slave_1: entered promiscuous mode
[ 1189.388224][T18218] gretap0: entered promiscuous mode
[ 1189.398179][T18218] hsr1: entered promiscuous mode
[ 1190.842968][T18234] input: syz1 as /devices/virtual/input/input110
[ 1191.442574][ T5950] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1191.622604][ T5950] usb 5-1: Using ep0 maxpacket: 32
[ 1191.643788][ T5950] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1191.663210][ T5950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1191.684983][ T5950] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[ 1191.712290][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.742115][ T5950] usb 5-1: Product: syz
[ 1191.762585][ T5950] usb 5-1: Manufacturer: syz
[ 1191.767192][ T5950] usb 5-1: SerialNumber: syz
[ 1192.145275][T18251] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3111'.
[ 1192.524509][T18261] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1193.098951][   T30] audit: type=1400 audit(1774508404.980:4094): avc:  denied  { getopt } for  pid=18263 comm="syz.0.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1193.375770][ T5950] usb 5-1: unit 37 not found!
[ 1193.401593][ T5950] usb 5-1: unit 0 not found!
[ 1193.557988][ T5950] usb 5-1: USB disconnect, device number 105
[ 1193.650558][T17050] udevd[17050]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device
[ 1194.784616][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1194.987110][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.133979][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1195.208130][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.379769][   T49] bridge_slave_1: left allmulticast mode
[ 1196.443524][   T49] bridge_slave_1: left promiscuous mode
[ 1196.449260][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1196.589945][T18046] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1196.760969][   T49] bridge_slave_0: left allmulticast mode
[ 1196.766738][   T49] bridge_slave_0: left promiscuous mode
[ 1196.793132][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1196.850428][T18046] usb 1-1: Using ep0 maxpacket: 16
[ 1196.859927][T12586] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1196.871515][T12586] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1196.879227][T12586] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1196.887545][T12586] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1196.895027][T12586] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1196.912875][T18046] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1196.933117][T18046] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1196.944365][T18046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1196.954331][T18046] usb 1-1: Product: syz
[ 1196.958584][T18046] usb 1-1: Manufacturer: syz
[ 1196.967110][T18046] usb 1-1: SerialNumber: syz
[ 1196.982921][T18046] usb 1-1: config 0 descriptor??
[ 1196.996486][T18046] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1197.005852][T18046] em28xx 1-1:0.0: DVB interface 0 found: bulk
[ 1197.099714][ T5873] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1197.479122][   T30] audit: type=1400 audit(1774508409.452:4095): avc:  denied  { bind } for  pid=18333 comm="syz.4.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[ 1199.119146][T12586] Bluetooth: hci2: command tx timeout
[ 1199.234456][T18046] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 1199.335299][T18046] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1199.393830][T18046] em28xx 1-1:0.0: board has no eeprom
[ 1199.411227][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1199.428732][ T5873] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1199.467120][ T5873] usb 3-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00
[ 1199.480974][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1199.507278][ T5873] usb 3-1: config 0 descriptor??
[ 1199.518364][T18046] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1199.526197][T18046] em28xx 1-1:0.0: dvb set to bulk mode.
[ 1199.640116][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1199.651913][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1199.662519][   T49] bond0 (unregistering): Released all slaves
[ 1199.668912][ T5950] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1199.685093][   T24] em28xx 1-1:0.0: Binding DVB extension
[ 1199.709212][T18046] usb 1-1: USB disconnect, device number 116
[ 1199.721644][T18046] em28xx 1-1:0.0: Disconnecting em28xx
[ 1200.221481][   T24] em28xx 1-1:0.0: Registering input extension
[ 1200.252085][ T5873] usbhid 3-1:0.0: can't add hid device: -71
[ 1200.259157][ T5873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1200.269497][T18046] em28xx 1-1:0.0: Closing input extension
[ 1200.271306][ T5873] usb 3-1: USB disconnect, device number 98
[ 1200.308303][ T5950] usb 5-1: Using ep0 maxpacket: 32
[ 1200.330785][ T5950] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1200.337223][T18046] em28xx 1-1:0.0: Freeing device
[ 1200.482745][ T5866] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[ 1200.514085][ T5950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1200.561986][ T5950] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[ 1200.962745][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1200.971132][ T5950] usb 5-1: Product: syz
[ 1200.980710][ T5950] usb 5-1: Manufacturer: syz
[ 1200.986048][T18365] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1200.986435][ T5950] usb 5-1: SerialNumber: syz
[ 1201.027251][T18323] chnl_net:caif_netlink_parms(): no params data found
[ 1201.029673][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1201.057319][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1201.081181][ T5866] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1201.096610][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1201.114963][ T5866] usb 4-1: Product: syz
[ 1201.124080][ T5866] usb 4-1: Manufacturer: syz
[ 1201.134240][ T5866] usb 4-1: SerialNumber: syz
[ 1201.144850][ T5866] usb 4-1: config 0 descriptor??
[ 1201.147713][T12586] Bluetooth: hci2: command tx timeout
[ 1201.375979][   T49] hsr_slave_0: left promiscuous mode
[ 1201.393014][T18374] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3137'.
[ 1201.418750][   T49] hsr_slave_1: left promiscuous mode
[ 1201.441125][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1201.449209][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1201.463653][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1201.471584][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1201.500565][   T49] veth1_macvtap: left promiscuous mode
[ 1201.506320][   T49] veth0_macvtap: left promiscuous mode
[ 1201.512240][   T49] veth1_vlan: left promiscuous mode
[ 1201.518089][   T49] veth0_vlan: left promiscuous mode
[ 1203.163221][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1203.217453][T12586] Bluetooth: hci2: command tx timeout
[ 1203.223782][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1203.787994][T18403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3144'.
[ 1203.873845][T18403] bond0: entered promiscuous mode
[ 1203.879402][T18403] bond_slave_0: entered promiscuous mode
[ 1203.889930][T18403] bond_slave_1: entered promiscuous mode
[ 1203.912324][T18403] gretap0: entered promiscuous mode
[ 1203.934330][T18403] debugfs: 'hsr1' already exists in 'hsr'
[ 1203.942043][T18403] Cannot create hsr debugfs directory
[ 1203.947876][T18403] hsr1: entered promiscuous mode
[ 1204.146101][ T5873] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1204.316054][T18323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1204.325486][T18323] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1204.332874][T18323] bridge_slave_0: entered allmulticast mode
[ 1204.447977][T18323] bridge_slave_0: entered promiscuous mode
[ 1204.474257][ T5873] usb 3-1: Using ep0 maxpacket: 16
[ 1204.500289][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1204.507918][T18323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1204.521661][T18323] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1204.533374][T18323] bridge_slave_1: entered allmulticast mode
[ 1204.539416][ T5873] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1204.602801][T18412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3145'.
[ 1204.935542][T18323] bridge_slave_1: entered promiscuous mode
[ 1204.941450][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1204.955911][ T5873] usb 3-1: Product: syz
[ 1204.960077][ T5873] usb 3-1: Manufacturer: syz
[ 1204.964663][ T5873] usb 3-1: SerialNumber: syz
[ 1205.017610][ T5873] usb 3-1: config 0 descriptor??
[ 1205.034059][ T5873] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1205.043837][ T5873] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 1205.228193][T18323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1205.253485][T18323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1205.297098][T12586] Bluetooth: hci2: command tx timeout
[ 1205.307120][T18425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'.
[ 1205.317494][T18425] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3148'.
[ 1205.345257][T18323] team0: Port device team_slave_0 added
[ 1205.355154][T18323] team0: Port device team_slave_1 added
[ 1205.425490][T18323] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1205.444025][T18323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1205.570142][T18323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1205.601618][ T5950] usb 5-1: unit 37 not found!
[ 1205.603492][ T5866] usb 4-1: USB disconnect, device number 94
[ 1205.648439][ T5950] usb 5-1: unit 0 not found!
[ 1205.673145][T18323] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1205.681750][ T5873] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1205.726907][T18323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1205.820756][ T5873] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1205.829460][T18323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1205.876156][ T5873] em28xx 3-1:0.0: board has no eeprom
[ 1206.305035][ T5873] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1206.322948][ T5950] usb 5-1: USB disconnect, device number 106
[ 1206.329098][ T5873] em28xx 3-1:0.0: dvb set to bulk mode.
[ 1206.363887][ T5914] em28xx 3-1:0.0: Binding DVB extension
[ 1206.386097][ T5873] usb 3-1: USB disconnect, device number 99
[ 1206.428089][T17050] udevd[17050]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1206.447153][ T5873] em28xx 3-1:0.0: Disconnecting em28xx
[ 1206.567122][ T5914] em28xx 3-1:0.0: Registering input extension
[ 1206.588999][T18451] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1206.608245][T18323] hsr_slave_0: entered promiscuous mode
[ 1206.643203][ T5866] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1206.659674][ T5873] em28xx 3-1:0.0: Closing input extension
[ 1206.684125][ T5873] em28xx 3-1:0.0: Freeing device
[ 1206.721543][T18323] hsr_slave_1: entered promiscuous mode
[ 1206.740465][T18323] debugfs: 'hsr0' already exists in 'hsr'
[ 1206.778762][T18323] Cannot create hsr debugfs directory
[ 1206.886604][ T5866] usb 4-1: Using ep0 maxpacket: 16
[ 1206.908477][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1206.947105][ T5866] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1206.963077][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1206.991065][ T5866] usb 4-1: Product: syz
[ 1207.005403][ T5866] usb 4-1: Manufacturer: syz
[ 1207.020064][ T5866] usb 4-1: SerialNumber: syz
[ 1207.042431][ T5866] usb 4-1: config 0 descriptor??
[ 1207.063504][ T5866] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1207.090996][T18323] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1207.098931][ T5866] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1207.122082][T18323] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1207.144442][T18323] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1207.189762][T18323] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1207.488154][T18478] FAULT_INJECTION: forcing a failure.
[ 1207.488154][T18478] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1207.490921][T18323] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1207.524563][T18478] CPU: 0 UID: 0 PID: 18478 Comm: syz.0.3155 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1207.524590][T18478] Tainted: [L]=SOFTLOCKUP
[ 1207.524596][T18478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1207.524605][T18478] Call Trace:
[ 1207.524611][T18478]  <TASK>
[ 1207.524617][T18478]  dump_stack_lvl+0x100/0x190
[ 1207.524649][T18478]  should_fail_ex.cold+0x5/0xa
[ 1207.524672][T18478]  _copy_from_user+0x2e/0xd0
[ 1207.524691][T18478]  kstrtouint_from_user+0xd6/0x1d0
[ 1207.524713][T18478]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1207.524734][T18478]  ? __lock_acquire+0x4a5/0x2630
[ 1207.524755][T18478]  ? lock_acquire+0x1cf/0x380
[ 1207.524776][T18478]  proc_fail_nth_write+0x83/0x220
[ 1207.524800][T18478]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1207.524830][T18478]  vfs_write+0x2aa/0x1070
[ 1207.524855][T18478]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1207.524881][T18478]  ? __pfx_vfs_write+0x10/0x10
[ 1207.524895][T18478]  ? __fget_files+0x215/0x3d0
[ 1207.524919][T18478]  ? __fget_files+0x21f/0x3d0
[ 1207.524943][T18478]  ksys_write+0x12a/0x250
[ 1207.524958][T18478]  ? __pfx_ksys_write+0x10/0x10
[ 1207.524980][T18478]  do_syscall_64+0x106/0xf80
[ 1207.525002][T18478]  ? clear_bhb_loop+0x40/0x90
[ 1207.525023][T18478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1207.525040][T18478] RIP: 0033:0x7fc8a155cfce
[ 1207.525055][T18478] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1207.525071][T18478] RSP: 002b:00007fc8a23d6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1207.525087][T18478] RAX: ffffffffffffffda RBX: 00007fc8a23d76c0 RCX: 00007fc8a155cfce
[ 1207.525098][T18478] RDX: 0000000000000001 RSI: 00007fc8a23d70a0 RDI: 0000000000000003
[ 1207.525108][T18478] RBP: 00007fc8a23d7090 R08: 0000000000000000 R09: 0000000000000000
[ 1207.525117][T18478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1207.525127][T18478] R13: 00007fc8a1816038 R14: 00007fc8a1815fa0 R15: 00007ffcfacb6088
[ 1207.525151][T18478]  </TASK>
[ 1207.744946][T18323] 8021q: adding VLAN 0 to HW filter on device team0
[ 1207.755850][T17540] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1207.762928][T17540] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1207.789365][T17540] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1207.796460][T17540] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1207.825127][ T5866] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1207.948835][ T5866] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1208.063815][ T5866] em28xx 4-1:0.0: board has no eeprom
[ 1208.252161][T18489] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3154'.
[ 1208.295319][ T5866] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1208.318081][ T5866] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1208.352566][ T5811] em28xx 4-1:0.0: Binding DVB extension
[ 1208.384664][T18465] syzkaller0: entered promiscuous mode
[ 1208.391053][ T5866] usb 4-1: USB disconnect, device number 95
[ 1208.404031][T18465] syzkaller0: entered allmulticast mode
[ 1208.411746][ T5866] em28xx 4-1:0.0: Disconnecting em28xx
[ 1208.528213][ T5811] em28xx 4-1:0.0: Registering input extension
[ 1208.534754][   T30] audit: type=1326 audit(1774508420.518:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18493 comm="syz.3.3158" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0a3159c799 code=0x0
[ 1208.563649][ T5866] em28xx 4-1:0.0: Closing input extension
[ 1208.580174][ T5866] em28xx 4-1:0.0: Freeing device
[ 1210.508886][T18323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1211.546530][T18522] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1211.735435][T18323] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1211.858103][T18531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3164'.
[ 1211.889541][T18531] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3164'.
[ 1212.897016][T18323] veth0_vlan: entered promiscuous mode
[ 1212.925710][T18323] veth1_vlan: entered promiscuous mode
[ 1213.016522][T18323] veth0_macvtap: entered promiscuous mode
[ 1213.118872][T18323] veth1_macvtap: entered promiscuous mode
[ 1213.156219][T18323] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1213.275941][T18323] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1213.295597][ T2943] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1213.321517][ T2943] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1213.340796][ T2943] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1213.364618][ T2943] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1213.491511][T18046] usb 3-1: new low-speed USB device number 100 using dummy_hcd
[ 1213.661333][T18046] usb 3-1: Invalid ep0 maxpacket: 16
[ 1213.697137][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1213.710151][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1213.731031][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1213.740542][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1213.802162][T18046] usb 3-1: new low-speed USB device number 101 using dummy_hcd
[ 1213.809910][T18558] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1213.891493][ T5866] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1213.911241][ T5914] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1213.972352][T18046] usb 3-1: Invalid ep0 maxpacket: 16
[ 1213.978000][T18046] usb usb3-port1: attempt power cycle
[ 1213.988295][T18558] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3128'.
[ 1214.052162][ T5866] usb 4-1: Using ep0 maxpacket: 32
[ 1214.061083][ T5914] usb 5-1: Using ep0 maxpacket: 16
[ 1214.067639][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1214.082107][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1214.087445][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12408, setting to 64
[ 1214.096751][ T5866] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1214.116650][ T5866] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1214.118709][ T5914] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1214.126066][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1214.135893][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1214.151497][ T5866] usb 4-1: config 0 descriptor??
[ 1214.180993][ T5914] usb 5-1: Product: syz
[ 1214.185185][ T5914] usb 5-1: Manufacturer: syz
[ 1214.189753][ T5914] usb 5-1: SerialNumber: syz
[ 1214.215313][ T5914] usb 5-1: config 0 descriptor??
[ 1214.227540][ T5914] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1214.236855][ T5914] em28xx 5-1:0.0: DVB interface 0 found: bulk
[ 1214.397263][T18046] usb 3-1: new low-speed USB device number 102 using dummy_hcd
[ 1214.422643][T18046] usb 3-1: Invalid ep0 maxpacket: 16
[ 1214.485852][T18566] [syz.0.] <== rxrpc_preparse_xdr_yfs_rxgk() = -EKEYREJECTED [d9c19884!=bc, 2c,d9c19820]
[ 1214.501778][T18566] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1214.514637][    C0] 
[ 1214.516949][    C0] ================================
[ 1214.522024][    C0] WARNING: inconsistent lock state
[ 1214.527112][    C0] syzkaller #0 Tainted: G             L     
[ 1214.533066][    C0] --------------------------------
[ 1214.538154][    C0] inconsistent {HARDIRQ-ON-W} -> {IN-HARDIRQ-W} usage.
[ 1214.544980][    C0] syz.0.3171/18566 [HC1[1]:SC1[1]:HE0:SE0] takes:
[ 1214.551398][    C0] ffff88803322a868 (&dev->spinlock){?...}-{3:3}, at: das16m1_interrupt+0x68/0x120
[ 1214.560600][    C0] {HARDIRQ-ON-W} state was registered at:
[ 1214.566303][    C0]   lock_acquire+0x1cf/0x380
[ 1214.570883][    C0]   _raw_spin_lock_bh+0x33/0x40
[ 1214.571115][T18046] usb 3-1: new low-speed USB device number 103 using dummy_hcd
[ 1214.575719][    C0]   waveform_ao_cancel+0x96/0x150
[ 1214.575740][    C0]   do_cancel+0xf4/0x180
[ 1214.575754][    C0]   comedi_close+0x2f6/0x470
[ 1214.575769][    C0]   __fput+0x3ff/0xb40
[ 1214.601071][    C0]   task_work_run+0x150/0x240
[ 1214.605739][    C0]   get_signal+0x1bd/0x21e0
[ 1214.610242][    C0]   arch_do_signal_or_restart+0x91/0x7a0
[ 1214.615873][    C0]   exit_to_user_mode_loop+0x86/0x4a0
[ 1214.621229][    C0]   do_syscall_64+0x67c/0xf80
[ 1214.625901][    C0]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1214.631858][    C0] irq event stamp: 2049
[ 1214.635983][    C0] hardirqs last  enabled at (2048): [<ffffffff81c91a59>] handle_softirqs+0x1a9/0x9e0
[ 1214.645419][    C0] hardirqs last disabled at (2049): [<ffffffff8b904dc9>] common_interrupt+0x19/0xe0
[ 1214.654762][    C0] softirqs last  enabled at (2040): [<ffffffff81c9240f>] __irq_exit_rcu+0xef/0x150
[ 1214.664020][    C0] softirqs last disabled at (2047): [<ffffffff81c9240f>] __irq_exit_rcu+0xef/0x150
[ 1214.673280][    C0] 
[ 1214.673280][    C0] other info that might help us debug this:
[ 1214.681309][    C0]  Possible unsafe locking scenario:
[ 1214.681309][    C0] 
[ 1214.688730][    C0]        CPU0
[ 1214.691984][    C0]        ----
[ 1214.695257][    C0]   lock(&dev->spinlock);
[ 1214.699569][    C0]   <Interrupt>
[ 1214.702997][    C0]     lock(&dev->spinlock);
[ 1214.707480][    C0] 
[ 1214.707480][    C0]  *** DEADLOCK ***
[ 1214.707480][    C0] 
[ 1214.715597][    C0] 2 locks held by syz.0.3171/18566:
[ 1214.720765][    C0]  #0: ffff8880500612e8 (&tty->termios_rwsem){++++}-{4:4}, at: uart_ioctl+0x352/0x2ef0
[ 1214.730399][    C0]  #1: ffff8881436a8e90 (&port->mutex){+.+.}-{4:4}, at: uart_ioctl+0x386/0x2ef0
[ 1214.739419][    C0] 
[ 1214.739419][    C0] stack backtrace:
[ 1214.745283][    C0] CPU: 0 UID: 0 PID: 18566 Comm: syz.0.3171 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1214.745302][    C0] Tainted: [L]=SOFTLOCKUP
[ 1214.745307][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1214.745314][    C0] Call Trace:
[ 1214.745319][    C0]  <IRQ>
[ 1214.745325][    C0]  dump_stack_lvl+0x100/0x190
[ 1214.745344][    C0]  print_usage_bug.part.0+0x257/0x340
[ 1214.745358][    C0]  mark_lock+0x74a/0xa20
[ 1214.745368][    C0]  ? look_up_lock_class+0x55/0x120
[ 1214.745384][    C0]  ? register_lock_class+0x40/0x560
[ 1214.745399][    C0]  ? hrtimer_start_range_ns+0x3f9/0xfd0
[ 1214.745414][    C0]  __lock_acquire+0x10ff/0x2630
[ 1214.745426][    C0]  ? lockdep_hardirqs_on+0x78/0x100
[ 1214.745441][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 1214.745456][    C0]  ? dummy_timer+0x1d5d/0x3670
[ 1214.745469][    C0]  lock_acquire+0x1cf/0x380
[ 1214.745480][    C0]  ? das16m1_interrupt+0x68/0x120
[ 1214.745494][    C0]  _raw_spin_lock+0x2e/0x40
[ 1214.745507][    C0]  ? das16m1_interrupt+0x68/0x120
[ 1214.745517][    C0]  das16m1_interrupt+0x68/0x120
[ 1214.745531][    C0]  ? __pfx_das16m1_interrupt+0x10/0x10
[ 1214.745543][    C0]  __handle_irq_event_percpu+0x232/0x8e0
[ 1214.745561][    C0]  handle_irq_event+0xab/0x1e0
[ 1214.745576][    C0]  handle_edge_irq+0x375/0x970
[ 1214.745597][    C0]  __common_interrupt+0xd8/0x2f0
[ 1214.745616][    C0]  common_interrupt+0x60/0xe0
[ 1214.745628][    C0]  asm_common_interrupt+0x26/0x40
[ 1214.745641][    C0] RIP: 0010:handle_softirqs+0x1af/0x9e0
[ 1214.745658][    C0] Code: 89 64 24 18 44 88 6c 24 1e 48 c7 c7 a0 72 ad 8b e8 c6 8a c7 09 31 d2 65 66 89 15 e4 f5 44 12 e8 07 c6 47 00 fb bb ff ff ff ff <49> c7 c6 c0 c0 40 8e 41 0f bc df 83 c3 01 0f 85 a3 00 00 00 e9 48
[ 1214.745671][    C0] RSP: 0018:ffffc90000007f30 EFLAGS: 00000216
[ 1214.745682][    C0] RAX: 0000000000000800 RBX: 00000000ffffffff RCX: 0000000000000004
[ 1214.745690][    C0] RDX: 0000000000000000 RSI: ffffffff8de788ab RDI: ffffffff8c1b1220
[ 1214.745698][    C0] RBP: 00000001000164e3 R08: 0000000000000001 R09: 0000000000000000
[ 1214.745705][    C0] R10: 0000000000000001 R11: 0000000000000001 R12: 000000000000000a
[ 1214.745712][    C0] R13: 0000000000000000 R14: 0000000000400140 R15: 0000000000000100
[ 1214.745726][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 1214.745742][    C0]  __irq_exit_rcu+0xef/0x150
[ 1214.745756][    C0]  irq_exit_rcu+0x9/0x30
[ 1214.745769][    C0]  sysvec_apic_timer_interrupt+0xa3/0xc0
[ 1214.745785][    C0]  </IRQ>
[ 1214.745789][    C0]  <TASK>
[ 1214.745795][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1214.745809][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80
[ 1214.745824][    C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 16 9d 51 f6 48 89 df e8 fe ec 51 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 b5 0d 42 f6 65 8b 05 5e 9e 7a 08 85 c0 74 16 5b
[ 1214.745835][    C0] RSP: 0018:ffffc90003f47a68 EFLAGS: 00000246
[ 1214.745845][    C0] RAX: 0000000000000002 RBX: ffffffff9b4a7640 RCX: 0000000000000040
[ 1214.745852][    C0] RDX: 0000000000000000 RSI: ffffffff8de788ab RDI: ffffffff8c1b1220
[ 1214.745860][    C0] RBP: 0000000000000287 R08: 0000000000000001 R09: 0000000000000000
[ 1214.745868][    C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8f5129e0
[ 1214.745875][    C0] R13: 0000000000000003 R14: 0000000000000001 R15: 1ffff920007e8f5c
[ 1214.745887][    C0]  serial8250_config_port+0x1897/0x4ec0
[ 1214.745908][    C0]  ? __pfx_serial8250_config_port+0x10/0x10
[ 1214.745925][    C0]  ? __pfx___release_region+0x10/0x10
[ 1214.745946][    C0]  univ8250_config_port+0x25a/0x380
[ 1214.745958][    C0]  ? serial8250_release_std_resource+0x1b1/0x2f0
[ 1214.745975][    C0]  uart_ioctl+0x14cc/0x2ef0
[ 1214.745991][    C0]  ? __pfx_uart_ioctl+0x10/0x10
[ 1214.746006][    C0]  ? tomoyo_path_number_perm+0x188/0x580
[ 1214.746022][    C0]  ? futex_wait+0x125/0x380
[ 1214.746037][    C0]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1214.746054][    C0]  ? tty_jobctrl_ioctl+0x152/0xce0
[ 1214.746068][    C0]  ? __pfx_uart_ioctl+0x10/0x10
[ 1214.746084][    C0]  tty_ioctl+0x26a/0x1690
[ 1214.746099][    C0]  ? __pfx_tty_ioctl+0x10/0x10
[ 1214.746114][    C0]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[ 1214.746133][    C0]  ? __fget_files+0x215/0x3d0
[ 1214.746146][    C0]  ? hook_file_ioctl_common+0x146/0x410
[ 1214.746160][    C0]  ? selinux_file_ioctl+0x139/0x290
[ 1214.746176][    C0]  ? selinux_file_ioctl+0xb4/0x290
[ 1214.746192][    C0]  ? __pfx_tty_ioctl+0x10/0x10
[ 1214.746208][    C0]  __x64_sys_ioctl+0x18e/0x210
[ 1214.746226][    C0]  do_syscall_64+0x106/0xf80
[ 1214.746242][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1214.746255][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1214.746268][    C0] RIP: 0033:0x7fc8a159c799
[ 1214.746278][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1214.746289][    C0] RSP: 002b:00007fc8a23d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1214.746300][    C0] RAX: ffffffffffffffda RBX: 00007fc8a1815fa0 RCX: 00007fc8a159c799
[ 1214.746309][    C0] RDX: 000000000300fff2 RSI: 0000000000005453 RDI: 0000000000000003
[ 1214.746316][    C0] RBP: 00007fc8a1632c99 R08: 0000000000000000 R09: 0000000000000000
[ 1214.746324][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1214.746333][    C0] R13: 00007fc8a1816038 R14: 00007fc8a1815fa0 R15: 00007ffcfacb6088
[ 1214.746346][    C0]  </TASK>
[ 1214.746401][    C0] comedi comedi2: fifo overflow
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1215.290558][T18046] usb 3-1: Invalid ep0 maxpacket: 16
[ 1215.314229][T18046] usb usb3-port1: unable to enumerate USB device
[ 1215.320214][T18566] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1)
[ 1215.330731][   T30] audit: type=1400 audit(1774508427.271:4097): avc:  denied  { write } for  pid=5787 comm="syz-executor" path="pipe:[4660]" dev="pipefs" ino=4660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[ 1215.426590][ T5866] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.002A/input/input114
[ 1215.661436][ T5866] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.002A/input/input115
[ 1215.804728][ T5866] kye 0003:0458:5011.002A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[ 1215.863056][ T9584] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1215.984792][ T9584] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1216.050728][ T5914] em28xx 5-1:0.0: unknown em28xx chip ID (0)
[ 1216.111913][ T5914] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1216.119948][ T5914] em28xx 5-1:0.0: board has no eeprom
[ 1216.129442][ T9584] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1216.143239][   T24] usb 4-1: USB disconnect, device number 96
[ 1216.193882][ T9584] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1216.204190][ T5914] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1216.225823][ T5914] em28xx 5-1:0.0: dvb set to bulk mode.
[ 1216.239998][    T9] em28xx 5-1:0.0: Binding DVB extension
[ 1216.301588][    T9] em28xx 5-1:0.0: Registering input extension
[ 1216.308830][ T5914] usb 5-1: USB disconnect, device number 107
[ 1216.317090][ T5914] em28xx 5-1:0.0: Disconnecting em28xx
[ 1216.323799][ T9584] bridge_slave_1: left allmulticast mode
[ 1216.329450][ T9584] bridge_slave_1: left promiscuous mode
[ 1216.336562][ T5914] em28xx 5-1:0.0: Closing input extension
[ 1216.336711][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1216.344297][ T5914] em28xx 5-1:0.0: Freeing device
[ 1216.358525][ T9584] bridge_slave_0: left allmulticast mode
[ 1216.366419][ T9584] bridge_slave_0: left promiscuous mode
[ 1216.372097][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1216.452528][ T9584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1216.462697][ T9584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1216.472600][ T9584] bond0 (unregistering): Released all slaves
[ 1216.689600][ T9584] hsr_slave_0: left promiscuous mode
[ 1216.699074][ T9584] hsr_slave_1: left promiscuous mode
[ 1216.707303][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1216.714971][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1216.723319][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1216.735605][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1216.747509][ T9584] veth1_macvtap: left promiscuous mode
[ 1216.754059][ T9584] veth0_macvtap: left promiscuous mode
[ 1216.759555][ T9584] veth1_vlan: left promiscuous mode
[ 1216.765054][ T9584] veth0_vlan: left promiscuous mode
[ 1216.856632][ T9584] team0 (unregistering): Port device team_slave_1 removed
[ 1216.867392][ T9584] team0 (unregistering): Port device team_slave_0 removed
[ 1217.161235][ T9584] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.218083][ T9584] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.277835][ T9584] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.334461][ T9584] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.421797][ T9584] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.485482][ T9584] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.504771][ T9584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.565540][ T9584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.674382][ T9584] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.724393][ T9584] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.767512][ T9584] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.825719][ T9584] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.941838][ T9584] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1217.993694][ T9584] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1218.030481][ T9584] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1218.085229][ T9584] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1218.148347][ T9584] bridge_slave_1: left allmulticast mode
[ 1218.154413][ T9584] bridge_slave_1: left promiscuous mode
[ 1218.161867][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1218.176540][ T9584] bridge_slave_0: left allmulticast mode
[ 1218.182245][ T9584] bridge_slave_0: left promiscuous mode
[ 1218.187878][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.197090][ T9584] bridge_slave_1: left allmulticast mode
[ 1218.202859][ T9584] bridge_slave_1: left promiscuous mode
[ 1218.208493][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1218.216699][ T9584] bridge_slave_0: left allmulticast mode
[ 1218.222470][ T9584] bridge_slave_0: left promiscuous mode
[ 1218.228050][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.236241][ T9584] bridge_slave_1: left allmulticast mode
[ 1218.244131][ T9584] bridge_slave_1: left promiscuous mode
[ 1218.250706][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1218.258385][ T9584] bridge_slave_0: left allmulticast mode
[ 1218.264121][ T9584] bridge_slave_0: left promiscuous mode
[ 1218.269818][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.277901][ T9584] bridge_slave_1: left allmulticast mode
[ 1218.283751][ T9584] bridge_slave_1: left promiscuous mode
[ 1218.289539][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1218.297206][ T9584] bridge_slave_0: left allmulticast mode
[ 1218.303029][ T9584] bridge_slave_0: left promiscuous mode
[ 1218.308607][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.396807][ T9584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1218.406268][ T9584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1218.416918][ T9584] bond0 (unregistering): Released all slaves
[ 1218.465138][ T9584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1218.474951][ T9584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1218.484251][ T9584] bond0 (unregistering): Released all slaves
[ 1218.499620][ T9584] gretap0 (unregistering): left promiscuous mode
[ 1218.561641][ T9584] bond0 (unregistering): left promiscuous mode
[ 1218.567797][ T9584] bond_slave_0: left promiscuous mode
[ 1218.573446][ T9584] bond_slave_1: left promiscuous mode
[ 1218.580450][ T9584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1218.590115][ T9584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1218.599368][ T9584] bond0 (unregistering): Released all slaves
[ 1218.614960][ T9584] gretap0 (unregistering): left promiscuous mode
[ 1218.672275][ T9584] bond0 (unregistering): left promiscuous mode
[ 1218.678457][ T9584] bond_slave_0: left promiscuous mode
[ 1218.684018][ T9584] bond_slave_1: left promiscuous mode
[ 1218.691036][ T9584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1218.700358][ T9584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1218.710460][ T9584] bond0 (unregistering): Released all slaves
[ 1219.070817][ T9584] hsr_slave_0: left promiscuous mode
[ 1219.076452][ T9584] hsr_slave_1: left promiscuous mode
[ 1219.085097][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1219.092632][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1219.103382][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1219.110971][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1219.128352][ T9584] hsr_slave_0: left promiscuous mode
[ 1219.134271][ T9584] hsr_slave_1: left promiscuous mode
[ 1219.139837][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1219.147181][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1219.155221][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1219.163530][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1219.172591][ T9584] hsr_slave_0: left promiscuous mode
[ 1219.178099][ T9584] hsr_slave_1: left promiscuous mode
[ 1219.183842][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1219.191221][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1219.198668][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1219.206018][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1219.215187][ T9584] hsr_slave_0: left promiscuous mode
[ 1219.220914][ T9584] hsr_slave_1: left promiscuous mode
[ 1219.226368][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1219.233738][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1219.241265][ T9584] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1219.248650][ T9584] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1219.261265][ T9584] veth1_macvtap: left promiscuous mode
[ 1219.266714][ T9584] veth0_macvtap: left promiscuous mode
[ 1219.272243][ T9584] veth1_vlan: left promiscuous mode
[ 1219.277438][ T9584] veth0_vlan: left promiscuous mode
[ 1219.285639][ T9584] veth1_macvtap: left promiscuous mode
[ 1219.291311][ T9584] veth0_macvtap: left promiscuous mode
[ 1219.296771][ T9584] veth1_vlan: left promiscuous mode
[ 1219.302318][ T9584] veth0_vlan: left promiscuous mode
[ 1219.307846][ T9584] veth1_macvtap: left promiscuous mode
[ 1219.313370][ T9584] veth0_macvtap: left promiscuous mode
[ 1219.318981][ T9584] veth1_vlan: left promiscuous mode
[ 1219.324162][ T9584] veth0_vlan: left promiscuous mode
[ 1219.329782][ T9584] veth1_macvtap: left promiscuous mode
[ 1219.335225][ T9584] veth0_macvtap: left promiscuous mode
[ 1219.340715][ T9584] veth1_vlan: left promiscuous mode
[ 1219.345908][ T9584] veth0_vlan: left promiscuous mode
[ 1219.461271][ T9584] team0 (unregistering): Port device team_slave_1 removed
[ 1219.473400][ T9584] team0 (unregistering): Port device team_slave_0 removed
[ 1219.540280][ T9584] team0 (unregistering): Port device team_slave_1 removed
[ 1219.551560][ T9584] team0 (unregistering): Port device team_slave_0 removed
[ 1219.606846][ T9584] team0 (unregistering): Port device team_slave_1 removed
[ 1219.619008][ T9584] team0 (unregistering): Port device team_slave_0 removed
[ 1219.669889][ T9584] team0 (unregistering): Port device team_slave_1 removed
[ 1219.679219][ T9584] team0 (unregistering): Port device team_slave_0 removed