last executing test programs:

15.868067261s ago: executing program 4 (id=3063):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

14.967923874s ago: executing program 4 (id=3067):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b2e22300", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ad", 0x97}, {&(0x7f0000000200)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a3", 0x32}], 0x3)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000)
brk(0x200000ffa000)
close(r1)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r4, &(0x7f00000004c0)="b0", 0xfd15, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
close_range(r0, 0xffffffffffffffff, 0x0)

11.362445868s ago: executing program 0 (id=3082):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x7fffffff)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)

8.343922342s ago: executing program 3 (id=3091):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x79, 0x4) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x1}, 0x2f)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f7d70f46a8d3d", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000005,allow_other,\x00'], 0xfb, 0x0, 0x0) (async)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x10, 0x803, 0x0)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000007}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) (async)
ioctl$KVM_CAP_XEN_HVM(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x26, 0x0, 0x10}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0}) (async)
r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2)
ioctl$SCSI_IOCTL_STOP_UNIT(r8, 0x6) (async)
r9 = openat$sndtimer(0xffffff9c, &(0x7f00000002c0), 0x52d201)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000440)={{0x3, 0x3, 0x1, 0x1, 0x12}, 0x101, 0xdf, 'id1\x00', 'timer1\x00', 0x0, 0xdf46, 0x1, 0x80000000, 0x1}) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a40)=@newqdisc={0x7d, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8, 0xfff3}, {0x10, 0xffff}}}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045)
r10 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe}) (async)
syz_open_dev$vcsa(&(0x7f0000000140), 0x0, 0x44af03) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r10, 0x2219, 0x7721, 0x16, 0x0, 0x0)

7.878377763s ago: executing program 3 (id=3092):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b8008"], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x10, 0x0, 0x3}, 0x18, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0xa0, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x5e}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8d}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x60000000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4810}, 0x4000000)
landlock_restrict_self(r2, 0x0)
kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, 0xffffffffffffffff, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x105})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r6 = fsopen(&(0x7f0000000000)='udf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
read(r6, 0x0, 0x0)
r7 = socket(0xa, 0x2, 0x0)
connect$inet6(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
sendfile(r7, r8, 0x0, 0xffffffff)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000041000701feffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a100002800c0011"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)

7.597190811s ago: executing program 0 (id=3093):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
inotify_init()
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfc, 0xdf, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000380)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20082b0000002b21c263138526792c3cbdeace91cd0fb74237cc6e446c4e88e78883", @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x6, 0x80000000}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}, @RTA_OIF={0x8}]}, 0x34}}, 0x0)
unlink(&(0x7f0000000100)='./file0\x00')
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16=r2])
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000600)="b26c199d", 0x4, 0x4003b00, 0x0, 0x0)

7.483239122s ago: executing program 3 (id=3094):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa10102030109021200010000000009"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$video(0x0, 0x8, 0x0)
r2 = io_uring_setup(0x6ed6, &(0x7f0000000240)={0x0, 0xbf54, 0x40000, 0x0, 0x270})
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u32=&(0x7f00000000c0)=0xfffffffe}})
socket(0x2, 0x80805, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

7.284103068s ago: executing program 1 (id=3097):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x10000000007)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x41)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0)
r3 = syz_usb_connect(0x5, 0x73, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000396d0940fd101315ce7e0102030109026100010000000009040001"], 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0)
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil)
prctl$PR_SCHED_CORE(0x26, 0x4, 0x0, 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x0, 0x3, 0x11, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000180))
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000940)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
r7 = dup(r6)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0xffffec47, 0x9, 0xffff1892, 0x100, 0x25, 0x7, 0x1b}, 0x9c)
ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x2)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_tables_matches\x00')
readahead(r8, 0xa, 0x5)
ioctl$KVM_GET_TSC_KHZ_cpu(r8, 0xaea3)

5.615094513s ago: executing program 2 (id=3100):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
dup(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x7fffffff)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)

5.043772145s ago: executing program 0 (id=3101):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000080)={{0x2, 0xcaa94196ebb29860, 0xbf65, 0x401, 'syz0\x00', 0xfffff001}, 0x0, [0x1000, 0x8, 0x1d, 0x2, 0x2, 0x554, 0x5, 0xf553, 0x4, 0xe4f, 0xf27d, 0xfffffffffffffffb, 0x26, 0x6, 0xd43, 0x6, 0xff, 0x4, 0xffffffffffffffff, 0xf87, 0x8001, 0x83, 0xe0, 0x8, 0x7, 0x8, 0x9, 0x4, 0xd0, 0xad0, 0x80, 0x5, 0x101, 0x0, 0x4, 0x2, 0x3, 0x2, 0x110, 0x4, 0x3, 0x5, 0x7fff, 0x2, 0x2, 0x7, 0xfffffffffffff30a, 0x0, 0x8, 0x1, 0x1, 0x4, 0x7, 0x3, 0x4c9, 0x9000000000, 0x3, 0x0, 0x6, 0x8001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xffffffff, 0x81, 0x80000001, 0x3, 0xc39, 0x10001, 0xc, 0x2, 0xc4bb, 0x8, 0xe000000, 0x8, 0x0, 0x3, 0x7ff, 0x8, 0x6, 0x7f, 0x3, 0x80, 0x7, 0x200, 0x5c6, 0x63a, 0xba2, 0x0, 0x2, 0x5, 0xffffffffffffa0e5, 0x8000000000000001, 0x5, 0x1e1, 0x6, 0x800, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, 0x9, 0x40, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x1be, 0x26, 0x3, 0x9, 0x80000000f, 0x9, 0x8, 0xf6, 0x200, 0x7, 0x7fffffffffffffff, 0xf5d, 0x3, 0x9]}) (fail_nth: 1)

4.450530882s ago: executing program 0 (id=3102):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40)
write(r6, &(0x7f0000004200)='t', 0x1)
sendfile(r6, r5, 0x0, 0x7fffffff)
ftruncate(r4, 0x2007ffb)
sendfile(r4, r4, 0x0, 0x1000000201005)

3.949264928s ago: executing program 3 (id=3103):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="f66befdf566db6c8d583ab57f590a1cc903f86ca1416fb09995e02fd8fef9e7a9c071dc0a839d415171036fceb877f17f0ae57fc2ee53b8d0eb1cf0fa42d00000800310003000000"], 0x220}}, 0x400c004)
inotify_init()
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x5})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f00000001c0)=0xa9, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
syz_usb_connect(0x5, 0x35, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

3.170729644s ago: executing program 3 (id=3104):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$kcm(0x29, 0x2, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b2e22300", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
recvfrom(r3, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
writev(r3, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ad", 0x97}, {&(0x7f0000000200)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a3", 0x32}], 0x3)
setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000)
brk(0x200000ffa000)
close(r1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt(r5, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8)
sendto$inet6(r5, &(0x7f00000004c0)="b0", 0xfd15, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
close_range(r0, 0xffffffffffffffff, 0x0)

2.99717765s ago: executing program 4 (id=3079):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]})
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
read$nci(r1, 0x0, 0x0)
munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000)
personality(0x87bf5ac905ea0f7f)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
sendmmsg$inet(r3, 0x0, 0x0, 0x2400c042)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000f0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000061c000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00007c8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
brk(0x200000ffc000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0)
syz_open_procfs(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)

2.73335146s ago: executing program 1 (id=3105):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbf, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xad, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x79, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0xe, "a1bb87e0b1fd052915bc168e"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xe, "c8f46976e79ea788f03d9d32"}]}]}}, "03"}}}}}, 0x0)

2.436921732s ago: executing program 1 (id=3106):
r0 = socket$kcm(0x2, 0x922000000001, 0x106)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000305fcfffffffedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="11110200719400001c0012800b0001006d616373656300000c000280050003000f00000008000c"], 0x44}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xe1082084de59e668, 0xc3072, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x25, &(0x7f00000002c0), 0x8)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r2, 0x28)
poll(&(0x7f00000001c0)=[{r2, 0x4}, {r2, 0x500}], 0x2, 0x40000400)
shutdown(r2, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f00000002c0)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0x0, 0x2, "aede"}})
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x22a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x0, 0x8, "", [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x73d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x6, 0x2}}}}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x13, &(0x7f0000000440)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0xf, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x4, 0x9}]}, 0x3, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x1409}}, {0x9d, &(0x7f0000000200)=@string={0x9d, 0x3, "cf11632201aa1b1b689e1e5061d6ed9da561598d8fae613520f397cbf5892c0da42bc98edcb24fc73f83bb64770ae616b091ed7713e844a752fd0069b2f01dba7bf4958d7fa035e12e01b1a790c72a7dfe23ce56eaa5939c6a3dfa2769bab1613d894b1741795c6b851c4549afa8d6abc12d073374e90b8a7a3d757c6582b64d8416be7fbd86c3eb46b2d5a1b07d826342722fc4ca3ba3de66503b"}}]})

2.115444844s ago: executing program 4 (id=3107):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000000010104000000000000000002000000240001801400018008000100ba1e000108000200e00000010c000288050001"], 0x38}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c001980"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.911930371s ago: executing program 4 (id=3108):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010101000000000000000000000000000004d53300000000000000000000000000000000000000ff01000000000000a2000000000000000700000000000000fcffffffffffffff00000000000000000400000000000000ff7f000000000000fe4800000000000004000000000000000900000000000000df5f000000000000940b00000000000005000000f8ffffff0900000026bd7000000000000a00027f010000000000000003000000de00000008001e0056340000ac000700fe8000000000000000000000000000bbfc0100000000000000000000000000014e2200024e21000d020020a032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000800000000000000100000000000000008000000000000000200000000000000100000000000000009000000000000000002000000000000490e000000000000d8ffffffffffffff0900000000000000070000000000000005000000b36b6e000100000300000000"], 0x1ac}, 0x1, 0x0, 0x0, 0x4075}, 0xc800)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x250)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r4, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000080)={{0x2, 0xcaa94196ebb29860, 0xbf65, 0x401, 'syz0\x00', 0xfffff001}, 0x0, [0x1000, 0x8, 0x1d, 0x2, 0x2, 0x554, 0x5, 0xf553, 0x4, 0xe4f, 0xf27d, 0xfffffffffffffffb, 0x26, 0x6, 0xd43, 0x6, 0xff, 0x4, 0xffffffffffffffff, 0xf87, 0x8001, 0x83, 0xe0, 0x8, 0x7, 0x8, 0x9, 0x4, 0xd0, 0xad0, 0x80, 0x5, 0x101, 0x0, 0x4, 0x2, 0x3, 0x2, 0x110, 0x4, 0x3, 0x5, 0x7fff, 0x2, 0x2, 0x7, 0xfffffffffffff30a, 0x0, 0x8, 0x1, 0x1, 0x4, 0x7, 0x3, 0x4c9, 0x9000000000, 0x3, 0x0, 0x6, 0x8001, 0x0, 0x9, 0x9, 0x5, 0x1, 0xffffffff, 0x81, 0x80000001, 0x3, 0xc39, 0x10001, 0xc, 0x2, 0xc4bb, 0x8, 0xe000000, 0x8, 0x0, 0x3, 0x7ff, 0x8, 0x6, 0x7f, 0x3, 0x80, 0x7, 0x200, 0x5c6, 0x63a, 0xba2, 0x0, 0x2, 0x5, 0xffffffffffffa0e5, 0x8000000000000001, 0x5, 0x1e1, 0x6, 0x800, 0x0, 0x4, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x4, 0x9, 0x40, 0x8, 0x80, 0x1, 0xffffffffffffffff, 0x6, 0x0, 0x1be, 0x26, 0x3, 0x9, 0x80000000f, 0x9, 0x8, 0xf6, 0x200, 0x7, 0x7fffffffffffffff, 0xf5d, 0x3, 0x9]})
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
socket(0x10, 0x3, 0x0)
write$tun(r3, &(0x7f0000003600)=ANY=[@ANYBLOB="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"], 0x1068)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xfff3}, {0xf, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0xe, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfd, 0x1, 0x0, 0x0, 0x10], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x35c, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1000]}}}}]}, 0x88}}, 0x40084)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0)
pselect6(0x40, &(0x7f0000001380)={0x6, 0x7, 0x9, 0x5d7, 0x6, 0x8, 0xc444}, &(0x7f00000013c0)={0xf, 0x9, 0x400, 0x9, 0x6, 0xb, 0x4ea2, 0x400}, 0x0, 0x0, 0x0)
r11 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x8010)
sendmsg$nl_route_sched(r8, 0x0, 0x404c8c0)

1.747212332s ago: executing program 2 (id=3109):
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002b00000002"], 0x48)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0)
write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc82200005", @ANYRES8=r2], 0x66)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.586115768s ago: executing program 1 (id=3110):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000440)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r8=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r4}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r8, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', <r12=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r12}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f})

1.409142356s ago: executing program 2 (id=3111):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00')
getdents64(r2, &(0x7f0000000040)=""/48, 0x59)
getdents(r2, &(0x7f00000005c0)=""/180, 0xb4)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000004c0)={[0x6, 0x80000000000000, 0x400000000000008, 0x8, 0x101000, 0x1, 0x1004, 0xfbfffffffffffffb, 0xf, 0x83, 0x2, 0x9, 0x8bda, 0xfffefffffffffefe, 0x3fb, 0x2000000004], 0x24fff, 0x56153})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.397632384s ago: executing program 3 (id=3112):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa10102030109021200010000000009"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000580)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$video(0x0, 0x8, 0x0)
r2 = io_uring_setup(0x6ed6, 0x0)
io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r2, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1)
syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u32=&(0x7f00000000c0)=0xfffffffe}})
socket(0x2, 0x80805, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

1.152527147s ago: executing program 1 (id=3113):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lstat(&(0x7f0000000000)='./file0/file0\x00', 0x0)
read$FUSE(r0, &(0x7f0000002100)={0x2020}, 0x2020)
write$FUSE_INIT(r0, 0x0, 0x0)

1.048045026s ago: executing program 2 (id=3114):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000280)="10031200e4ff020002004788aa96a13bb100001100007fca1a00c295cedbe2350200a75c41af6637e861860d3643", 0x2e, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (fail_nth: 3)

1.045151289s ago: executing program 4 (id=3115):
r0 = syz_usb_connect(0x3, 0x9f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff0007050302000200070584020002"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[], 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000001580)=""/4100, 0x1004)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fchdir(0xffffffffffffffff)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x8f5}}, 0x1006)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r1, 0xc008aec1, &(0x7f00000004c0))
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0xc, &(0x7f0000000700)="aa00080c0000000100070009")

534.513327ms ago: executing program 0 (id=3116):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbf, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xad, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @broadcast, {[@cipso={0x86, 0x79, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x2, 0xe, "7434954373561de584b703c8"}, {0x0, 0xe, "a1bb87e0b1fd052915bc168e"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xe, "c8f46976e79ea788f03d9d32"}]}]}}, "03"}}}}}, 0x0)

534.169273ms ago: executing program 2 (id=3117):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000000)=[{0x6, 0x80, 0xfe, 0x7fff0006}]})
mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
read$nci(r1, 0x0, 0x0)
munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000)
personality(0x87bf5ac905ea0f7f)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4)
sendmmsg$inet(r3, 0x0, 0x0, 0x2400c042)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000f0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f000061c000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00007c8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
brk(0x200000ffc000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}}, 0x0)
syz_open_procfs(0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)

453.239227ms ago: executing program 0 (id=3118):
socket(0x10, 0x803, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x701000, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x6, 0x3a, 0x0, @private1, @dev={0xfe, 0x80, '\x00', 0x2b}, [], "8029335287b7a081"}}}}}}}, 0x0)
mknodat$loop(r3, &(0x7f0000000400)='./file0\x00', 0x1411, 0x1)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000440)=0x7fff)
sendmmsg$alg(r2, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000080)="c6831ed8838056e08cc5b459bfef3e6fed75d2901ee87b68bbb4a231d4871bc6e77e9245dcb9521274e052fde08c283e42b57cb57e73461c25ac7db970eac952908e2bad01079f62627fcd5eabb19db5738dde27fa95765d09a66d1110d93c0d9e75d48bf907e7c72867f0c90581894e8d01788913b71b98becde4fc5200378b", 0x80}], 0x1, 0x0, 0x0, 0x14}], 0x1, 0x0)
recvmsg(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000fc0)=""/149, 0x95}], 0x2}, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080))
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_ublk_add_dev(0xffffffffffffffff, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=<r11=>0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47)
r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0)
syz_ublk_setup_queues(r12, r11, &(0x7f0000000480)={0x0, 0x18e4, 0x10000, 0x0, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe90e, 0x200, 0x1, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x0, 0x2, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x2, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x231, 0x0, r12}, <r13=>0xffffffffffffffff}], 0x4, &(0x7f0000003900)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r10, '\x00', {0x3, 0xd55, 0x0, 0x0}}, 0x0)
r14 = syz_ublk_setup_io_uring(0xd4e5, &(0x7f0000000700)={0x0, 0x6809, 0x1000, 0x1, 0x3b9, 0x0, r13}, &(0x7f0000000640), 0x0, &(0x7f00000006c0))
syz_ublk_setup_queues(r6, r11, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4488, 0x10002, 0x401, 0x31c, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x0, 0x40021a, 0x0, r6}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r10, '\x00', {0x4, 0x48b, 0x0, 0x0}}, 0x0)

191.977253ms ago: executing program 1 (id=3119):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={0x0}}, 0x20)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x61, 0xba, 0x67, 0x40, 0xc10, 0x0, 0x5d91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x7, 0x0, 0x13, "", [{{0x9, 0x4, 0xfc, 0xa7, 0x0, 0x47, 0xe4, 0x13, 0x83}}]}}]}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006200)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x68c50012, 0x4, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50)
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x20200)
ioctl$I2C_SLAVE(r7, 0x703, 0x3f2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62)
syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0xb22e, {0x0, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = open(&(0x7f0000000000)='./file0/file0\x00', 0x20000, 0x0)
syz_fuse_handle_req(r3, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3be, 0x100080, {0x400000006, 0x6, 0x4000000000040000, 0xfe2b25d, 0x2, 0x0, 0x3, 0x4, 0x0, 0x4000, 0xfffffffc, 0x0, 0x0, 0xfffffff9, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc0286405, &(0x7f0000000380)={0x8, 0x470e, {r6}, {<r11=>r5}, 0x1, 0x7})
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x4e22, 0x5, 0x4e21, 0x0, 0xa, 0xa0, 0x20, 0x8, r2, r11}, {0x2, 0xa, 0x0, 0x200, 0x1, 0x401, 0x6, 0x9}, {0xb6, 0x3, 0x9d, 0x1}, 0x7, 0x6e6bb0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@private0, 0x4d5, 0xff}, 0x2, @in6=@empty, 0x3503, 0x0, 0x3, 0xf, 0x1, 0x80000000, 0xe10000}}, 0xe8)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r12=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010007d1cb7ac6b55bdec0000", @ANYRES32=r12, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0x5, '\x00', r12, r8, 0x0, 0x0, 0x3}, 0x50)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
mknodat(r8, &(0x7f0000000040)='./file0/file0\x00', 0x1c5e, 0x80000001)

0s ago: executing program 2 (id=3120):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x820000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49, 0x1}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000001100)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001080), 0x0, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

kernel console output (not intermixed with test programs):

2-1:0.0: probe with driver usbhid failed with error -71
[  684.298928][ T5630] usb 2-1: USB disconnect, device number 119
[  684.448711][T12813] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  684.622996][T12813] usb 3-1: unable to get BOS descriptor or descriptor too short
[  684.637043][T12813] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  684.646717][T12813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.659897][T12807] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  684.673212][T12813] usb 3-1: Product: syz
[  684.680425][T12813] usb 3-1: Manufacturer: syz
[  684.688258][T12813] usb 3-1: SerialNumber: syz
[  684.723450][T12807] usb 5-1: cp210x converter now attached to ttyUSB0
[  684.921559][T12813] usb 3-1: Unsupported UAC3 BADD profile
[  684.993118][T12813] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  685.016276][T12813] usb 3-1: USB disconnect, device number 16
[  685.069793][T11854] udevd[11854]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  685.603322][T15302] FAULT_INJECTION: forcing a failure.
[  685.603322][T15302] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.617061][T15302] CPU: 0 UID: 0 PID: 15302 Comm: syz.0.2827 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  685.617095][T15302] Tainted: [L]=SOFTLOCKUP
[  685.617103][T15302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  685.617118][T15302] Call Trace:
[  685.617127][T15302]  <TASK>
[  685.617136][T15302]  dump_stack_lvl+0xe8/0x150
[  685.617172][T15302]  should_fail_ex+0x40c/0x560
[  685.617203][T15302]  _copy_from_iter+0x1d3/0x1660
[  685.617232][T15302]  ? kmem_cache_alloc_node_noprof+0x191/0x610
[  685.617260][T15302]  ? rcu_is_watching+0x15/0xb0
[  685.617282][T15302]  ? trace_kmem_cache_alloc+0x29/0xe0
[  685.617311][T15302]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  685.617338][T15302]  ? __pfx__copy_from_iter+0x10/0x10
[  685.617368][T15302]  ? __alloc_skb+0x276/0x7a0
[  685.617389][T15302]  ? __alloc_skb+0x276/0x7a0
[  685.617416][T15302]  ? netlink_sendmsg+0x650/0xb40
[  685.617444][T15302]  ? skb_put+0x112/0x210
[  685.617470][T15302]  netlink_sendmsg+0x6c0/0xb40
[  685.617507][T15302]  ? __pfx_netlink_sendmsg+0x10/0x10
[  685.617539][T15302]  ? aa_sock_msg_perm+0xf1/0x1b0
[  685.617570][T15302]  ? __pfx_netlink_sendmsg+0x10/0x10
[  685.617604][T15302]  sock_sendmsg_nosec+0x13a/0x180
[  685.617638][T15302]  ____sys_sendmsg+0x54e/0x850
[  685.617669][T15302]  ? __pfx_____sys_sendmsg+0x10/0x10
[  685.617703][T15302]  ? import_iovec+0x73/0xa0
[  685.617727][T15302]  ___sys_sendmsg+0x2a5/0x360
[  685.617752][T15302]  ? __lock_acquire+0x683/0x2cf0
[  685.617786][T15302]  ? __pfx____sys_sendmsg+0x10/0x10
[  685.617847][T15302]  ? __fget_files+0x2a/0x420
[  685.617876][T15302]  ? __fget_files+0x3a2/0x420
[  685.617917][T15302]  __x64_sys_sendmsg+0x1b1/0x290
[  685.617947][T15302]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  685.617992][T15302]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.618015][T15302]  do_syscall_64+0x174/0x580
[  685.618044][T15302]  ? clear_bhb_loop+0x40/0x90
[  685.618072][T15302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.618093][T15302] RIP: 0033:0x7fb9bc59e019
[  685.618114][T15302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  685.618133][T15302] RSP: 002b:00007fb9bd421028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  685.618156][T15302] RAX: ffffffffffffffda RBX: 00007fb9bc825fa0 RCX: 00007fb9bc59e019
[  685.618172][T15302] RDX: 0000000020000010 RSI: 00002000000006c0 RDI: 0000000000000003
[  685.618187][T15302] RBP: 00007fb9bd421090 R08: 0000000000000000 R09: 0000000000000000
[  685.618200][T15302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  685.618212][T15302] R13: 00007fb9bc826038 R14: 00007fb9bc825fa0 R15: 00007fb9bc94fa48
[  685.618246][T15302]  </TASK>
[  685.890315][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  685.896758][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  685.938624][T12813] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  685.978378][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2828'.
[  686.102918][T12813] usb 3-1: config 2 has an invalid interface number: 174 but max is 0
[  686.117661][T12813] usb 3-1: config 2 has no interface number 0
[  686.125417][T12813] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E
[  686.139560][T12813] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023
[  686.150308][T12813] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 103
[  686.163796][T12813] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e
[  686.173654][T12813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.182495][T12813] usb 3-1: Product: syz
[  686.186967][T12813] usb 3-1: Manufacturer: syz
[  686.192221][T12813] usb 3-1: SerialNumber: syz
[  686.220939][T15303] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  686.229235][T15303] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  686.315123][T15312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  686.328050][T15312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  686.580287][T15315] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  686.601713][T15303] kvm: pic: level sensitive irq not supported
[  686.605004][T15303] kvm: pic: non byte read
[  686.910196][T12807] usb 5-1: USB disconnect, device number 23
[  686.956901][T12807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  686.978666][T12813] usb 3-1: probing VID:PID(0424:012C)   
[  687.012276][ T5625] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  687.020330][ T5625] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  687.027845][ T5625] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  687.036154][ T5625] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  687.060336][T12813] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E
[  687.067582][T12807] cp210x 5-1:0.0: device disconnected
[  687.074480][T12813] usb 3-1: vub300 testing BULK IN EndPoint(1) 82
[  687.105916][T12813] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs
[  687.132321][ T5625] usb 4-1: USB disconnect, device number 20
[  687.153450][T15330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.194263][T12813] vub300 3-1:2.174: probe with driver vub300 failed with error -22
[  687.209297][T15330] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  687.244304][T12813] usb 3-1: USB disconnect, device number 17
[  687.564330][T15339] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  687.906098][T15349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  687.927759][ T5625] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  687.965809][T15349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  688.138031][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2844'.
[  688.290345][T15349] team0: Port device team_slave_0 removed
[  688.728156][ T5625] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  688.899840][ T5625] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  688.909954][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.933346][ T5625] usb 3-1: config 0 descriptor??
[  688.946355][ T5625] cp210x 3-1:0.0: cp210x converter detected
[  689.525879][T15385] fuse: Bad value for 'fd'
[  689.677963][T15381] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  690.090640][ T5625] usb 3-1: cp210x converter now attached to ttyUSB0
[  690.274363][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.292777][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  690.380430][T12813] usb 3-1: USB disconnect, device number 19
[  690.432388][T12813] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  690.472083][T12813] cp210x 3-1:0.0: device disconnected
[  690.790523][T15404] netlink: 408 bytes leftover after parsing attributes in process `syz.1.2859'.
[  690.881163][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2862'.
[  691.061591][T15416] syzkaller0: entered promiscuous mode
[  691.071977][ T5630] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  691.087403][T15416] syzkaller0: entered allmulticast mode
[  691.125625][T15419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.143975][T15419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.249891][ T5630] usb 4-1: config 0 has an invalid interface number: 252 but max is 0
[  691.258532][ T5630] usb 4-1: config 0 has no interface number 0
[  691.264788][ T5630] usb 4-1: config 0 interface 252 has no altsetting 0
[  691.274946][ T5630] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91
[  691.285003][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.294181][ T5630] usb 4-1: Product: syz
[  691.299003][ T5630] usb 4-1: Manufacturer: syz
[  691.303753][ T5630] usb 4-1: SerialNumber: syz
[  691.314464][ T5630] usb 4-1: config 0 descriptor??
[  691.359417][T12813] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  691.523264][T12813] usb 3-1: device descriptor read/64, error -71
[  691.627870][T12807] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  691.660401][T15406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'.
[  691.779142][T12813] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  691.809845][T12807] usb 5-1: unable to get BOS descriptor or descriptor too short
[  691.834384][T12807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  691.863337][T12807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  691.896703][T12807] usb 5-1: string descriptor 0 read error: -22
[  691.910356][T12807] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  691.927988][T12813] usb 3-1: device descriptor read/64, error -71
[  691.934601][T12807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.964520][T12807] usb 5-1: selecting invalid altsetting 1
[  691.978895][T12807] usb 5-1: unit 3 not found!
[  692.058178][T12813] usb usb3-port1: attempt power cycle
[  692.153417][T12807] usb 5-1: cannot request logical cluster ID: 0 (err: -5)
[  692.162640][T12807] usb 5-1: invalid MIXER UNIT descriptor 6
[  692.387404][T12807] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -5
[  692.419012][T12813] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  692.429830][T12807] usb 5-1: USB disconnect, device number 24
[  692.471417][T12813] usb 3-1: device descriptor read/8, error -71
[  692.740065][T12813] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  692.768611][T12813] usb 3-1: device descriptor read/8, error -71
[  692.791196][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  692.826225][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  692.888511][T12813] usb usb3-port1: unable to enumerate USB device
[  693.087945][T15444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  693.114945][T15444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  693.594840][T15455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'.
[  693.726211][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  693.744405][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  693.820768][T12813] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  693.868471][ T5630] usb 4-1: USB disconnect, device number 21
[  693.999770][T12813] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  694.018702][T12813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.041412][T15467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2877'.
[  694.067333][T12813] usb 5-1: config 0 descriptor??
[  694.091026][T12813] cp210x 5-1:0.0: cp210x converter detected
[  694.448522][ T5704] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  694.614572][ T5704] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  694.636699][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.657406][ T5704] usb 2-1: Product: syz
[  694.667762][ T5704] usb 2-1: Manufacturer: syz
[  694.685941][ T5704] usb 2-1: SerialNumber: syz
[  694.726587][ T5704] usb 2-1: config 0 descriptor??
[  694.753758][ T5704] hub 2-1:0.0: bad descriptor, ignoring hub
[  694.766301][ T5704] hub 2-1:0.0: probe with driver hub failed with error -5
[  694.936584][T12813] usb 5-1: cp210x converter now attached to ttyUSB0
[  694.969465][ T5704] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  695.093211][ T5704] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  695.164357][ T5704] dib0700: firmware download failed at 7 with -22
[  695.254659][ T5704] usb 2-1: USB disconnect, device number 120
[  695.311856][ T5625] usb 5-1: USB disconnect, device number 25
[  695.336387][ T5625] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  695.351478][ T5625] cp210x 5-1:0.0: device disconnected
[  696.624690][T15523] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2887'.
[  696.667710][T15523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2887'.
[  696.687775][T15523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2887'.
[  697.338410][T12813] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  697.528089][T12813] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  697.552272][T12813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.569367][T12813] usb 5-1: Product: syz
[  697.582525][T12813] usb 5-1: Manufacturer: syz
[  697.593347][T12813] usb 5-1: SerialNumber: syz
[  697.622663][T12813] usb 5-1: config 0 descriptor??
[  697.650882][T12813] hub 5-1:0.0: bad descriptor, ignoring hub
[  697.667468][T12813] hub 5-1:0.0: probe with driver hub failed with error -5
[  697.737953][T12806] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  697.844082][T12813] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  697.878080][T12813] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  697.905590][T12813] dib0700: firmware download failed at 7 with -22
[  697.932874][T12806] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  697.956388][T12806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.990703][T12806] usb 3-1: config 0 descriptor??
[  698.015971][T12806] cp210x 3-1:0.0: cp210x converter detected
[  698.169570][T12813] usb 5-1: USB disconnect, device number 26
[  698.810862][T15545] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  698.916900][T12806] usb 3-1: cp210x converter now attached to ttyUSB0
[  699.000037][T15556] tipc: Started in network mode
[  699.037159][T15556] tipc: Node identity 76657468115f, cluster identity 4711
[  699.045954][T15556] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  699.142218][T15556] tipc: Resetting bearer <eth:syzkaller0>
[  699.187750][ T5704] usb 5-1: new full-speed USB device number 27 using dummy_hcd
[  699.470542][   T30] audit: type=1804 audit(1785640221.184:767): pid=15561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2899" name="bus" dev="ramfs" ino=70255 res=1 errno=0
[  699.554114][   T30] audit: type=1804 audit(1785640221.194:768): pid=15561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2899" name="bus" dev="ramfs" ino=70255 res=1 errno=0
[  699.612965][ T5630] usb 3-1: USB disconnect, device number 25
[  699.796464][ T5630] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  699.818595][ T5630] cp210x 3-1:0.0: device disconnected
[  699.958252][ T5704] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  700.128767][ T5704] usb 5-1: Using ep0 maxpacket: 32
[  700.153896][ T5704] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  700.181150][ T5704] usb 5-1: config 0 has no interface number 0
[  700.203379][ T5704] usb 5-1: config 0 interface 12 has no altsetting 0
[  700.212576][T12817] tipc: Node number set to 1731884136
[  700.243867][ T5704] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  700.282552][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.303515][ T5704] usb 5-1: Product: syz
[  700.313552][ T5704] usb 5-1: Manufacturer: syz
[  700.329639][ T5704] usb 5-1: SerialNumber: syz
[  700.376410][ T5704] usb 5-1: config 0 descriptor??
[  702.569450][ T9551] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  702.743993][ T9551] usb 3-1: config 0 has an invalid interface number: 252 but max is 0
[  702.774620][ T9551] usb 3-1: config 0 has no interface number 0
[  702.800607][ T9551] usb 3-1: config 0 interface 252 has no altsetting 0
[  702.830217][ T9551] usb 3-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91
[  702.862398][ T9551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.882876][ T9551] usb 3-1: Product: syz
[  702.901415][ T9551] usb 3-1: Manufacturer: syz
[  702.915012][ T9551] usb 3-1: SerialNumber: syz
[  702.952206][ T9551] usb 3-1: config 0 descriptor??
[  703.151015][T15599] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  703.159364][T15601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.176046][T15601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.313131][T15597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'.
[  703.545107][T15612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  703.566071][T15612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  703.865640][ T5704] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  703.888554][ T5704] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  703.897513][ T5704] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  703.918110][ T5704] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  703.963110][ T5704] usb 5-1: USB disconnect, device number 28
[  704.079181][T15628] FAULT_INJECTION: forcing a failure.
[  704.079181][T15628] name failslab, interval 1, probability 0, space 9, times 0
[  704.093447][T15628] CPU: 1 UID: 0 PID: 15628 Comm: syz.4.2918 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  704.093480][T15628] Tainted: [L]=SOFTLOCKUP
[  704.093489][T15628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  704.093503][T15628] Call Trace:
[  704.093516][T15628]  <TASK>
[  704.093526][T15628]  dump_stack_lvl+0xe8/0x150
[  704.093565][T15628]  should_fail_ex+0x40c/0x560
[  704.093600][T15628]  should_failslab+0xa8/0x100
[  704.093636][T15628]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  704.093665][T15628]  ? local_lock_release+0x9c/0x160
[  704.093701][T15628]  ? __alloc_skb+0x1d7/0x7a0
[  704.093722][T15628]  ? __alloc_skb+0x1d7/0x7a0
[  704.093751][T15628]  __alloc_skb+0x1d7/0x7a0
[  704.093779][T15628]  netlink_sendmsg+0x5d4/0xb40
[  704.093819][T15628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  704.093851][T15628]  ? aa_sock_msg_perm+0xf1/0x1b0
[  704.093882][T15628]  ? __pfx_netlink_sendmsg+0x10/0x10
[  704.093909][T15628]  sock_sendmsg_nosec+0x13a/0x180
[  704.093946][T15628]  ____sys_sendmsg+0x54e/0x850
[  704.093979][T15628]  ? __pfx_____sys_sendmsg+0x10/0x10
[  704.094015][T15628]  ? import_iovec+0x73/0xa0
[  704.094040][T15628]  ___sys_sendmsg+0x2a5/0x360
[  704.094066][T15628]  ? __lock_acquire+0x683/0x2cf0
[  704.094103][T15628]  ? __pfx____sys_sendmsg+0x10/0x10
[  704.094172][T15628]  ? __fget_files+0x2a/0x420
[  704.094202][T15628]  ? __fget_files+0x3a2/0x420
[  704.094243][T15628]  __x64_sys_sendmsg+0x1b1/0x290
[  704.094279][T15628]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  704.094323][T15628]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.094347][T15628]  do_syscall_64+0x174/0x580
[  704.094377][T15628]  ? clear_bhb_loop+0x40/0x90
[  704.094404][T15628]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.094434][T15628] RIP: 0033:0x7f3a27b9e019
[  704.094456][T15628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  704.094475][T15628] RSP: 002b:00007f3a28a3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  704.094498][T15628] RAX: ffffffffffffffda RBX: 00007f3a27e25fa0 RCX: 00007f3a27b9e019
[  704.094515][T15628] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  704.094529][T15628] RBP: 00007f3a28a3f090 R08: 0000000000000000 R09: 0000000000000000
[  704.094542][T15628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  704.094555][T15628] R13: 00007f3a27e26038 R14: 00007f3a27e25fa0 R15: 00007f3a27f4fa48
[  704.094588][T15628]  </TASK>
[  704.837847][ T5704] usb 5-1: new full-speed USB device number 29 using dummy_hcd
[  705.006979][ T5704] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  705.034171][ T5704] usb 5-1: config 0 has no interfaces?
[  705.050160][ T5704] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[  705.073000][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.121221][ T5704] usb 5-1: config 0 descriptor??
[  705.363255][ T9551] usb 3-1: USB disconnect, device number 26
[  705.530646][T15642] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  705.867727][T12806] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  705.957818][ T5630] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  706.068155][T12806] usb 4-1: Using ep0 maxpacket: 32
[  706.086667][T12806] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  706.120999][T12806] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  706.144189][T12806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.165213][T12806] usb 4-1: Product: syz
[  706.177820][T12806] usb 4-1: Manufacturer: syz
[  706.191370][T12806] usb 4-1: SerialNumber: syz
[  706.232052][T12806] usb 4-1: config 0 descriptor??
[  706.477945][ T9551] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  706.627799][ T9551] usb 2-1: Using ep0 maxpacket: 32
[  706.635013][ T9551] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  706.643564][ T9551] usb 2-1: config 0 has no interface number 0
[  706.649996][ T9551] usb 2-1: config 0 interface 12 has no altsetting 0
[  706.660754][ T9551] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  706.670826][ T9551] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.679291][ T9551] usb 2-1: Product: syz
[  706.683558][ T9551] usb 2-1: Manufacturer: syz
[  706.689044][ T9551] usb 2-1: SerialNumber: syz
[  706.696952][ T9551] usb 2-1: config 0 descriptor??
[  706.957802][ T5630] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  707.107788][ T5630] usb 3-1: Using ep0 maxpacket: 8
[  707.116751][ T5630] usb 3-1: unable to get BOS descriptor or descriptor too short
[  707.127761][ T5630] usb 3-1: config 4 interface 0 has no altsetting 0
[  707.138863][ T5630] usb 3-1: string descriptor 0 read error: -22
[  707.145540][ T5630] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  707.155007][ T5630] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  707.175973][ T5630] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  707.202250][ T5630] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  707.215036][ T5630] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  707.223255][ T5630] usb 3-1: media controller created
[  707.245262][ T5630] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  707.476272][T12817] usb 5-1: USB disconnect, device number 29
[  707.519816][T15673] fuse: Bad value for 'fd'
[  707.559753][T15673] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2930'.
[  707.935735][T15680] dummy0: Caught tx_queue_len zero misconfig
[  707.947401][T15680] netlink: 160 bytes leftover after parsing attributes in process `syz.0.2932'.
[  707.957133][T12806] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  708.124942][T12806] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  708.138417][T12806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.151894][T12806] usb 5-1: config 0 descriptor??
[  708.174421][T12806] cp210x 5-1:0.0: cp210x converter detected
[  708.336563][ T5630] zl10353_read_register: readreg error (reg=127, ret==0)
[  708.345277][T15685] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  708.363932][T15685] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  708.373975][T15685] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  708.385005][T15685] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  708.393301][T15685] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  708.450482][T12806] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32
[  708.498307][T12806] cp210x 5-1:0.0: querying part number failed
[  708.548258][T12806] usb 5-1: cp210x converter now attached to ttyUSB0
[  708.668392][ T5630] usb 3-1: USB disconnect, device number 28
[  709.015973][T12817] usb 1-1: USB disconnect, device number 116
[  709.072230][ T5630] usb 4-1: USB disconnect, device number 22
[  709.191710][T15694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2934'.
[  709.247428][T15694] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2934'.
[  709.619417][T15686] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.640297][T15686] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.670701][T15686] bridge_slave_0: entered allmulticast mode
[  709.679931][T15686] bridge_slave_0: entered promiscuous mode
[  709.772290][T15696] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  709.822622][T15686] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.837054][T15686] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.850746][T12817] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  709.856469][T15686] bridge_slave_1: entered allmulticast mode
[  709.886141][T15686] bridge_slave_1: entered promiscuous mode
[  710.147513][T15686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  710.188125][ T9551] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  710.212920][ T9551] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  710.221903][T15686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  710.233079][ T9551] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  710.267552][ T9551] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  710.331202][ T9551] usb 2-1: USB disconnect, device number 121
[  710.487802][ T5637] Bluetooth: hci5: command tx timeout
[  710.643190][T15686] team0: Port device team_slave_0 added
[  710.652911][T15686] team0: Port device team_slave_1 added
[  710.728256][ T9551] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  710.821607][T15686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  710.833977][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  710.884255][T15686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  710.905358][T15686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  710.923190][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  710.953175][ T9551] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  710.964061][T15686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  710.997343][ T9551] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  711.030750][ T9551] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  711.065157][ T9551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  711.090373][ T9551] usb 2-1: SerialNumber: syz
[  711.312442][T12817] usb 5-1: USB disconnect, device number 30
[  711.343051][ T9551] usb 2-1: 0:2 : does not exist
[  711.366576][T12817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  711.487804][ T5704] usb 3-1: new full-speed USB device number 29 using dummy_hcd
[  711.524747][T12817] cp210x 5-1:0.0: device disconnected
[  711.564985][T15686] hsr_slave_0: entered promiscuous mode
[  711.599397][T15686] hsr_slave_1: entered promiscuous mode
[  711.672431][ T5704] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  711.710493][ T5704] usb 3-1: config 0 has no interfaces?
[  711.728734][ T5704] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[  711.754583][ T9551] usb 2-1: USB disconnect, device number 122
[  711.786074][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.871765][ T5704] usb 3-1: config 0 descriptor??
[  711.976479][   T30] audit: type=1804 audit(1785640233.694:769): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2943" name="bus" dev="ramfs" ino=71884 res=1 errno=0
[  712.032465][T13144] udevd[13144]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  712.057869][   T30] audit: type=1804 audit(1785640233.744:770): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2943" name="bus" dev="ramfs" ino=71884 res=1 errno=0
[  712.367097][ T8854] bridge_slave_1: left allmulticast mode
[  712.376535][ T8854] bridge_slave_1: left promiscuous mode
[  712.452123][ T8854] bridge0: port 2(bridge_slave_1) entered disabled state
[  712.490857][ T8854] bridge_slave_0: left allmulticast mode
[  712.496799][ T8854] bridge_slave_0: left promiscuous mode
[  712.553171][ T8854] bridge0: port 1(bridge_slave_0) entered disabled state
[  712.560663][ T5637] Bluetooth: hci5: command tx timeout
[  712.569313][T12813] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  712.747748][T12813] usb 2-1: Using ep0 maxpacket: 8
[  712.763482][T12813] usb 2-1: unable to get BOS descriptor or descriptor too short
[  712.787080][T12813] usb 2-1: config 4 interface 0 has no altsetting 0
[  712.802760][T12813] usb 2-1: string descriptor 0 read error: -22
[  712.819373][T12813] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  712.842493][T12813] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  712.886497][T12813] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  712.952249][T12813] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  712.991073][T12813] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  713.030746][T12813] usb 2-1: media controller created
[  713.090769][T12813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  713.134620][ T8854] bond6 (unregistering): (slave geneve2): Releasing active interface
[  713.473243][ T8854] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  713.493211][ T8854] bridge1 (unregistering): left promiscuous mode
[  713.504750][ T8854] bridge1 (unregistering): left allmulticast mode
[  713.561001][ T8854] team0: Port device macvlan2 removed
[  713.608719][ T8854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  713.645256][ T8854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  713.660063][ T8854] bond0 (unregistering): Released all slaves
[  713.726965][ T8854] bond1 (unregistering): Released all slaves
[  713.801599][ T8854] bond2 (unregistering): Released all slaves
[  713.853181][ T8854] bond3 (unregistering): Released all slaves
[  713.894510][ T8854] bond4 (unregistering): Released all slaves
[  713.936624][ T8854] bond5 (unregistering): Released all slaves
[  713.962443][ T8854] bond6 (unregistering): Released all slaves
[  713.996773][ T8854] bond7 (unregistering): Released all slaves
[  714.049947][ T8854] bond8 (unregistering): Released all slaves
[  714.160164][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[  714.180916][T12813] zl10353_read_register: readreg error (reg=127, ret==0)
[  714.253445][T12817] usb 3-1: USB disconnect, device number 29
[  714.420804][T12813] usb 2-1: USB disconnect, device number 123
[  714.641835][ T5637] Bluetooth: hci5: command tx timeout
[  714.868434][T12806] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  715.051773][T12806] usb 3-1: Using ep0 maxpacket: 32
[  715.071319][T12806] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  715.101227][T12806] usb 3-1: config 0 has no interface number 0
[  715.163809][T12806] usb 3-1: config 0 interface 12 has no altsetting 0
[  715.221939][T12806] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  715.325957][T12806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.410570][T12806] usb 3-1: Product: syz
[  715.435500][T12806] usb 3-1: Manufacturer: syz
[  715.490240][T12806] usb 3-1: SerialNumber: syz
[  715.615449][T12806] usb 3-1: config 0 descriptor??
[  715.618665][ T5704] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[  716.438091][T12817] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  716.619020][T12817] usb 5-1: Using ep0 maxpacket: 32
[  716.642730][T12817] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  716.687146][T12817] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  716.700069][T12817] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.717837][T12817] usb 5-1: Product: syz
[  716.717863][ T5637] Bluetooth: hci5: command tx timeout
[  716.729764][T12817] usb 5-1: Manufacturer: syz
[  716.745125][T12817] usb 5-1: SerialNumber: syz
[  716.802654][T12817] usb 5-1: config 0 descriptor??
[  717.385729][ T8854] batman_adv: batadv0: Removing interface: batadv_slave_0
[  717.423515][ T8854] batman_adv: batadv0: Removing interface: batadv_slave_1
[  717.463616][ T8854] team0 (unregistering): Port device vlan2 removed
[  718.337098][ T8854] team0 (unregistering): Port device team_slave_1 removed
[  719.197967][T12806] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  719.220104][T12806] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  719.248749][T12806] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  719.288824][T12806] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  719.373150][T12806] usb 3-1: USB disconnect, device number 30
[  719.913679][T12806] usb 5-1: USB disconnect, device number 31
[  720.208040][T15686] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  720.247876][ T5704] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  720.266661][T15686] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  720.300384][T15686] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  720.383255][T15686] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  720.398925][T15686] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  720.459270][ T5704] usb 4-1: Using ep0 maxpacket: 32
[  720.477338][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.523643][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  720.547295][T15686] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  720.564578][ T5704] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  720.585376][T15686] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  720.604607][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.626803][T15686] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  720.637056][ T5704] usb 4-1: config 0 descriptor??
[  720.665255][ T5704] hub 4-1:0.0: USB hub found
[  720.687779][T12806] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[  720.712979][ T8854] IPVS: stop unused estimator thread 0...
[  720.893363][T12806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  720.943714][T12806] usb 2-1: config 0 has no interfaces?
[  720.996575][T12806] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[  721.031575][T12806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.089470][T12806] usb 2-1: config 0 descriptor??
[  721.561031][T15686] 8021q: adding VLAN 0 to HW filter on device bond0
[  721.686225][ T5704] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  721.702470][ T5704] usbhid 4-1:0.0: can't add hid device: -71
[  721.713901][ T5704] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  721.758510][ T5704] usb 4-1: USB disconnect, device number 24
[  721.768200][T12806] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  721.906379][T15686] 8021q: adding VLAN 0 to HW filter on device team0
[  721.950151][T12806] usb 5-1: Using ep0 maxpacket: 8
[  721.973106][T12677] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.980386][T12677] bridge0: port 1(bridge_slave_0) entered forwarding state
[  721.991225][T12806] usb 5-1: unable to get BOS descriptor or descriptor too short
[  722.000673][T12806] usb 5-1: config 4 interface 0 has no altsetting 0
[  722.044196][T12806] usb 5-1: string descriptor 0 read error: -22
[  722.083735][T12806] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  722.112794][T12677] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.120120][T12677] bridge0: port 2(bridge_slave_1) entered forwarding state
[  722.141509][T12806] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  722.191752][T12806] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  722.234550][T12806] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  722.304279][T12806] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  722.340020][T12806] usb 5-1: media controller created
[  722.454879][T12806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  722.611091][T15686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  722.705092][   T30] audit: type=1804 audit(1785640244.424:771): pid=15868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2958" name="bus" dev="ramfs" ino=71584 res=1 errno=0
[  722.761955][T15686] veth0_vlan: entered promiscuous mode
[  722.769725][   T30] audit: type=1804 audit(1785640244.494:772): pid=15868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2958" name="bus" dev="ramfs" ino=71584 res=1 errno=0
[  722.805004][T15686] veth1_vlan: entered promiscuous mode
[  722.912857][T15686] veth0_macvtap: entered promiscuous mode
[  722.947341][T15686] veth1_macvtap: entered promiscuous mode
[  723.043817][T15686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  723.093229][T15686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  723.140460][ T1046] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.157899][ T1046] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  723.198764][ T1046] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  723.229247][ T1046] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  723.441785][T12813] usb 2-1: USB disconnect, device number 125
[  723.462913][T12817] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  723.482098][T12806] zl10353_read_register: readreg error (reg=127, ret==0)
[  723.688961][ T8854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.713923][ T8854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.762886][T12806] usb 5-1: USB disconnect, device number 32
[  723.791309][T15874] FAULT_INJECTION: forcing a failure.
[  723.791309][T15874] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  723.836856][T15874] CPU: 1 UID: 0 PID: 15874 Comm: syz.1.2960 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  723.836897][T15874] Tainted: [L]=SOFTLOCKUP
[  723.836906][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  723.836919][T15874] Call Trace:
[  723.836928][T15874]  <TASK>
[  723.836938][T15874]  dump_stack_lvl+0xe8/0x150
[  723.836976][T15874]  should_fail_ex+0x40c/0x560
[  723.837009][T15874]  _copy_from_user+0x2d/0xb0
[  723.837033][T15874]  do_fb_ioctl+0x368/0x750
[  723.837068][T15874]  ? __pfx_do_fb_ioctl+0x10/0x10
[  723.837135][T15874]  ? __fget_files+0x2a/0x420
[  723.837172][T15874]  ? __fget_files+0x3a2/0x420
[  723.837201][T15874]  ? __fget_files+0x2a/0x420
[  723.837232][T15874]  ? bpf_lsm_file_ioctl+0x9/0x20
[  723.837259][T15874]  ? __pfx_fb_ioctl+0x10/0x10
[  723.837290][T15874]  __se_sys_ioctl+0xfc/0x170
[  723.837314][T15874]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.837337][T15874]  do_syscall_64+0x174/0x580
[  723.837364][T15874]  ? trace_irq_disable+0x3b/0x140
[  723.837392][T15874]  ? clear_bhb_loop+0x40/0x90
[  723.837418][T15874]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  723.837440][T15874] RIP: 0033:0x7f4fad59e019
[  723.837469][T15874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  723.837488][T15874] RSP: 002b:00007f4fae48a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  723.837509][T15874] RAX: ffffffffffffffda RBX: 00007f4fad825fa0 RCX: 00007f4fad59e019
[  723.837525][T15874] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003
[  723.837539][T15874] RBP: 00007f4fae48a090 R08: 0000000000000000 R09: 0000000000000000
[  723.837552][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  723.837564][T15874] R13: 00007f4fad826038 R14: 00007f4fad825fa0 R15: 00007f4fad94fa48
[  723.837595][T15874]  </TASK>
[  724.274505][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  724.282612][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  724.778392][ T5704] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  724.917739][T12818] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  724.939490][ T5704] usb 1-1: config 0 has an invalid interface number: 252 but max is 0
[  724.948011][ T5704] usb 1-1: config 0 has no interface number 0
[  724.954200][ T5704] usb 1-1: config 0 interface 252 has no altsetting 0
[  724.963698][ T5704] usb 1-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91
[  724.973241][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.981483][ T5704] usb 1-1: Product: syz
[  724.985703][ T5704] usb 1-1: Manufacturer: syz
[  724.990985][ T5704] usb 1-1: SerialNumber: syz
[  725.000618][ T5704] usb 1-1: config 0 descriptor??
[  725.067760][T12818] usb 5-1: Using ep0 maxpacket: 32
[  725.074947][T12818] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  725.086792][T12818] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  725.096817][T12818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.105267][T12818] usb 5-1: Product: syz
[  725.110155][T12818] usb 5-1: Manufacturer: syz
[  725.115113][T12818] usb 5-1: SerialNumber: syz
[  725.125538][T12818] usb 5-1: config 0 descriptor??
[  725.187776][T12817] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  725.328706][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2933'.
[  725.338143][T12817] usb 4-1: Using ep0 maxpacket: 32
[  725.366325][T12817] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  725.391223][T12817] usb 4-1: config 0 has no interface number 0
[  725.406100][T12817] usb 4-1: config 0 interface 12 has no altsetting 0
[  725.430288][T12817] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  725.453949][T12817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.469239][T12817] usb 4-1: Product: syz
[  725.479450][T12817] usb 4-1: Manufacturer: syz
[  725.491251][T12817] usb 4-1: SerialNumber: syz
[  725.511403][T12817] usb 4-1: config 0 descriptor??
[  725.736120][T15685] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  725.752491][T15685] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  725.762083][T15685] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  725.780568][T15685] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  725.791503][T15685] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  725.843577][ T5704] usb 1-1: USB disconnect, device number 117
[  726.523252][ T1046] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  726.557505][ T1046] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.218721][ T1046] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  727.253040][ T1046] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.559863][ T1046] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  727.588968][ T1046] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.918131][ T5637] Bluetooth: hci0: command tx timeout
[  727.956396][ T1046] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  727.967675][ T1046] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.065365][T15891] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.082156][T15891] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.100874][T15891] bridge_slave_0: entered allmulticast mode
[  728.126006][T15891] bridge_slave_0: entered promiscuous mode
[  728.182208][T15891] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.195074][T12806] usb 5-1: USB disconnect, device number 33
[  728.224988][T15891] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.277382][T15891] bridge_slave_1: entered allmulticast mode
[  728.299705][T15891] bridge_slave_1: entered promiscuous mode
[  728.569225][T15891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  728.689076][T15891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  728.893295][T15891] team0: Port device team_slave_0 added
[  729.020423][T15891] team0: Port device team_slave_1 added
[  729.083709][T12817] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  729.135218][T12817] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  729.160336][T12817] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  729.197439][T12817] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  729.260497][T12817] usb 4-1: USB disconnect, device number 26
[  729.352352][T15929] FAULT_INJECTION: forcing a failure.
[  729.352352][T15929] name failslab, interval 1, probability 0, space 9, times 0
[  729.387365][T15929] CPU: 1 UID: 0 PID: 15929 Comm: syz.2.2972 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  729.387397][T15929] Tainted: [L]=SOFTLOCKUP
[  729.387405][T15929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  729.387418][T15929] Call Trace:
[  729.387426][T15929]  <TASK>
[  729.387435][T15929]  dump_stack_lvl+0xe8/0x150
[  729.387473][T15929]  should_fail_ex+0x40c/0x560
[  729.387506][T15929]  should_failslab+0xa8/0x100
[  729.387540][T15929]  __kmalloc_noprof+0xfe/0x720
[  729.387578][T15929]  ? rcu_is_watching+0x15/0xb0
[  729.387599][T15929]  ? tomoyo_realpath_from_path+0xef/0x640
[  729.387624][T15929]  ? tomoyo_realpath_from_path+0xef/0x640
[  729.387656][T15929]  tomoyo_realpath_from_path+0xef/0x640
[  729.387691][T15929]  ? tomoyo_path_number_perm+0x219/0x5f0
[  729.387726][T15929]  tomoyo_path_number_perm+0x246/0x5f0
[  729.387763][T15929]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  729.387801][T15929]  ? sb_end_write+0xe5/0x190
[  729.387857][T15929]  ? vfs_write+0x9ce/0xba0
[  729.387885][T15929]  ? hook_file_ioctl+0x1f0/0x5f0
[  729.387935][T15929]  ? ksys_write+0x1fc/0x270
[  729.387962][T15929]  security_file_ioctl+0xc3/0x2a0
[  729.387997][T15929]  __se_sys_ioctl+0x47/0x170
[  729.388020][T15929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.388043][T15929]  do_syscall_64+0x174/0x580
[  729.388069][T15929]  ? trace_irq_disable+0x3b/0x140
[  729.388097][T15929]  ? clear_bhb_loop+0x40/0x90
[  729.388124][T15929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  729.388145][T15929] RIP: 0033:0x7fe435b9e019
[  729.388165][T15929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  729.388183][T15929] RSP: 002b:00007fe4369d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  729.388206][T15929] RAX: ffffffffffffffda RBX: 00007fe435e25fa0 RCX: 00007fe435b9e019
[  729.388222][T15929] RDX: 0000000000000000 RSI: 000000004008af60 RDI: 0000000000000003
[  729.388235][T15929] RBP: 00007fe4369d1090 R08: 0000000000000000 R09: 0000000000000000
[  729.388248][T15929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  729.388261][T15929] R13: 00007fe435e26038 R14: 00007fe435e25fa0 R15: 00007fe435f4fa48
[  729.388295][T15929]  </TASK>
[  729.611725][T13670] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  729.668143][T15929] ERROR: Out of memory at tomoyo_realpath_from_path.
[  729.780674][T13670] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  729.799415][T13670] usb 5-1: config 0 has no interfaces?
[  729.852114][T13670] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[  729.917139][T13670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.952444][T15891] batman_adv: batadv0: Adding interface: batadv_slave_0
[  729.981210][T13670] usb 5-1: config 0 descriptor??
[  729.997190][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  730.028945][ T5637] Bluetooth: hci0: command tx timeout
[  730.080495][T15891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  730.310455][T12806] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  730.467987][T12806] usb 3-1: Using ep0 maxpacket: 8
[  730.480478][T12806] usb 3-1: unable to get BOS descriptor or descriptor too short
[  730.526377][T12806] usb 3-1: config 4 interface 0 has no altsetting 0
[  730.541185][T12806] usb 3-1: string descriptor 0 read error: -22
[  730.547511][T12806] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  730.565300][T12806] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  730.599281][T12806] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  730.655648][T12806] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  730.686529][T12806] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  730.709916][T12806] usb 3-1: media controller created
[  730.742354][T12806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  730.757778][ T5625] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  730.835003][ T1046] bond0 (unregistering): (slave geneve2): Releasing active interface
[  730.923859][ T5625] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  730.943503][ T5625] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  730.964520][ T5625] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  730.977426][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.993916][ T5625] usb 4-1: Product: syz
[  731.003457][ T5625] usb 4-1: Manufacturer: syz
[  731.016304][ T5625] usb 4-1: SerialNumber: syz
[  731.047424][ T1046] bond3 (unregistering): (slave .`): Releasing backup interface
[  731.051286][ T5625] usb 4-1: 0:2 : does not exist
[  731.062262][ T1046] .` (unregistering): Released all slaves
[  731.082181][ T1046] bond1 (unregistering): (slave veth3): Releasing active interface
[  731.097100][ T1046] bond1 (unregistering): Released all slaves
[  731.134997][ T1046] bond2 (unregistering): Released all slaves
[  731.165603][ T1046] bond3 (unregistering): Released all slaves
[  731.310533][ T1046] bond0 (unregistering): Released all slaves
[  731.358914][ T1046] bond4 (unregistering): Released all slaves
[  731.397103][ T1046] bond5 (unregistering): Released all slaves
[  731.451483][T15891] batman_adv: batadv0: Adding interface: batadv_slave_1
[  731.459820][T15953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.469052][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  731.505091][T15953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.535426][T15891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  731.562941][T12807] usb 4-1: USB disconnect, device number 27
[  731.616056][T15945] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  731.646965][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[  731.695917][ T1046] tipc: Disabling bearer <eth:team0>
[  731.707996][ T1046] tipc: Disabling bearer <udp:syz0>
[  731.732086][ T1046] tipc: Left network mode
[  731.848974][T12806] zl10353_read_register: readreg error (reg=127, ret==0)
[  731.900124][T15891] hsr_slave_0: entered promiscuous mode
[  731.919040][T15891] hsr_slave_1: entered promiscuous mode
[  731.944063][T15891] debugfs: 'hsr0' already exists in 'hsr'
[  731.955991][T15891] Cannot create hsr debugfs directory
[  732.019502][T12806] usb 3-1: USB disconnect, device number 31
[  732.081105][ T5637] Bluetooth: hci0: command tx timeout
[  732.117522][T12807] usb 5-1: USB disconnect, device number 34
[  732.418818][T12813] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  732.444695][ T5625] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  732.597779][ T5625] usb 4-1: Using ep0 maxpacket: 32
[  732.607123][ T5625] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  732.623624][T12813] usb 1-1: config 0 has an invalid interface number: 252 but max is 0
[  732.640725][T12813] usb 1-1: config 0 has no interface number 0
[  732.648999][ T5625] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  732.658403][T12813] usb 1-1: config 0 interface 252 has no altsetting 0
[  732.674334][ T5625] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.687469][ T5625] usb 4-1: Product: syz
[  732.697774][T12813] usb 1-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=5d.91
[  732.707814][ T5625] usb 4-1: Manufacturer: syz
[  732.716553][ T5625] usb 4-1: SerialNumber: syz
[  732.742556][T12813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  732.754721][ T5625] usb 4-1: config 0 descriptor??
[  732.764609][T12813] usb 1-1: Product: syz
[  732.778341][T12813] usb 1-1: Manufacturer: syz
[  732.783056][T12813] usb 1-1: SerialNumber: syz
[  732.817344][T12813] usb 1-1: config 0 descriptor??
[  732.828362][T13670] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  732.928046][ T1046] veth1_vlan: left promiscuous mode
[  732.935688][ T1046] veth0_vlan: left promiscuous mode
[  732.990942][T13670] usb 5-1: Using ep0 maxpacket: 32
[  733.018359][T13670] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  733.072648][T13670] usb 5-1: config 0 has no interface number 0
[  733.096806][T13670] usb 5-1: config 0 interface 12 has no altsetting 0
[  733.126701][T13670] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  733.151169][T13670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.179546][T13670] usb 5-1: Product: syz
[  733.187068][T13670] usb 5-1: Manufacturer: syz
[  733.204673][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2976'.
[  733.223454][T13670] usb 5-1: SerialNumber: syz
[  733.246684][T13670] usb 5-1: config 0 descriptor??
[  733.664844][ T1046] team0 (unregistering): Port device vlan3 removed
[  734.157824][ T5637] Bluetooth: hci0: command tx timeout
[  734.712721][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2
[  735.548724][ T1046] IPVS: stop unused estimator thread 0...
[  735.819309][T12813] usb 1-1: USB disconnect, device number 118
[  735.845522][ T5625] usb 4-1: USB disconnect, device number 28
[  736.023532][T16017] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  736.291786][T15891] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  736.353677][T15891] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  736.373745][T15891] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  736.408194][T15891] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  736.435228][T15891] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  736.456715][T15891] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  736.469486][T16031] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2985'.
[  736.480675][T15891] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  736.509589][T15891] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  736.741021][T15891] 8021q: adding VLAN 0 to HW filter on device bond0
[  736.791508][T13670] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  736.814564][T15891] 8021q: adding VLAN 0 to HW filter on device team0
[  736.836042][T13670] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  736.861153][T13670] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  736.888448][ T8854] bridge0: port 1(bridge_slave_0) entered blocking state
[  736.895716][ T8854] bridge0: port 1(bridge_slave_0) entered forwarding state
[  736.906301][T13670] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  736.926848][T13670] usb 5-1: USB disconnect, device number 35
[  736.952196][T11820] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.959453][T11820] bridge0: port 2(bridge_slave_1) entered forwarding state
[  737.322722][T15891] 8021q: adding VLAN 0 to HW filter on device batadv0
[  737.563845][T16055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2989'.
[  737.584252][T15891] veth0_vlan: entered promiscuous mode
[  737.617342][T16055] hsr_slave_0: left promiscuous mode
[  737.665843][T16055] hsr_slave_1: left promiscuous mode
[  737.815542][T15891] veth1_vlan: entered promiscuous mode
[  738.005144][T15891] veth0_macvtap: entered promiscuous mode
[  738.055569][T15891] veth1_macvtap: entered promiscuous mode
[  738.156712][T15891] batman_adv: batadv0: Interface activated: batadv_slave_0
[  738.242340][T15891] batman_adv: batadv0: Interface activated: batadv_slave_1
[  738.300785][T11818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  738.358791][T11818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  738.428601][T11818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  738.608975][T12669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  738.904800][T12674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.946888][T12674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  739.141697][ T8850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  739.176032][ T8850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  740.428024][ T5625] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  740.599727][ T5625] usb 5-1: Using ep0 maxpacket: 32
[  740.625099][ T5625] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  740.660337][ T5625] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  740.687309][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  740.736482][ T5625] usb 5-1: Product: syz
[  740.745893][ T5625] usb 5-1: Manufacturer: syz
[  740.763291][ T5625] usb 5-1: SerialNumber: syz
[  740.796148][ T5625] usb 5-1: config 0 descriptor??
[  740.815506][T15685] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  740.832317][T15685] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  740.841500][T15685] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  740.859944][T15685] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  740.869523][T15685] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  741.632313][T16121] fuse: Bad value for 'fd'
[  741.646419][T16121] netlink: 408 bytes leftover after parsing attributes in process `syz.3.2995'.
[  741.767705][T12807] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  741.947726][T12807] usb 2-1: Using ep0 maxpacket: 32
[  741.966047][T12807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  742.002209][T12807] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  742.040760][T16129] netlink: 408 bytes leftover after parsing attributes in process `syz.0.2998'.
[  742.051952][T12807] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  742.069406][T13703] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.091008][T12807] usb 2-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  742.116359][T12807] usb 2-1: Product: syz
[  742.131947][T12807] usb 2-1: Manufacturer: syz
[  742.168681][T12807] usb 2-1: SerialNumber: syz
[  742.219016][T12807] usb 2-1: config 0 descriptor??
[  742.256887][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'.
[  742.297511][T12807] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  742.519215][T13668] usb 2-1: USB disconnect, device number 126
[  742.550372][T13538] usb 2-1: Failed to submit usb control message: -71
[  742.612386][T13538] usb 2-1: unable to send the bmi data to the device: -71
[  742.662620][T13538] usb 2-1: unable to get target info from device
[  742.691117][T13538] usb 2-1: could not get target info (-71)
[  742.732886][T13703] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  742.750324][T13538] usb 2-1: could not probe fw (-71)
[  742.955378][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3002'.
[  742.978288][ T5637] Bluetooth: hci4: command tx timeout
[  743.130093][T16161] bond0: Unable to set down delay as MII monitoring is disabled
[  743.316331][T16103] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.339097][T16103] bridge0: port 1(bridge_slave_0) entered disabled state
[  743.355267][T16103] bridge_slave_0: entered allmulticast mode
[  743.385180][T16103] bridge_slave_0: entered promiscuous mode
[  743.523591][T12813] IPVS: starting estimator thread 0...
[  743.541911][T13703] bond0: (slave netdevsim1): Releasing backup interface
[  743.583593][T13703] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode
[  743.615658][T13703] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode
[  743.639065][T16179] IPVS: using max 26 ests per chain, 62400 per kthread
[  743.691582][T13703] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  743.751520][T16103] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.785473][T16103] bridge0: port 2(bridge_slave_1) entered disabled state
[  743.813268][T16103] bridge_slave_1: entered allmulticast mode
[  743.848571][T13668] usb 5-1: USB disconnect, device number 36
[  743.858824][T16103] bridge_slave_1: entered promiscuous mode
[  744.065210][T13703] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  744.147120][T16103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  744.183899][T16103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  744.305299][T16103] team0: Port device team_slave_0 added
[  744.348648][T16103] team0: Port device team_slave_1 added
[  744.505295][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3011'.
[  744.533752][T16202] sg_write: data in/out 186/98 bytes for SCSI command 0x0-- guessing data in;
[  744.533752][T16202]    program syz.4.3010 not setting count and/or reply_len properly
[  744.625308][T16103] batman_adv: batadv0: Adding interface: batadv_slave_0
[  744.628702][T12807] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  744.634823][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  744.729197][T16103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  744.857861][T12807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  744.900483][T16103] batman_adv: batadv0: Adding interface: batadv_slave_1
[  744.902234][T12807] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  744.926443][T16103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  744.961676][T12807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  744.972132][T16212] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3012'.
[  744.992162][T12807] usb 4-1: config 0 descriptor??
[  744.996016][T16103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  745.034425][T16199] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  745.048313][ T5637] Bluetooth: hci4: command tx timeout
[  745.589950][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.609382][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.625768][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.640975][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.650087][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.677107][T13703] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.695027][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.709236][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.726853][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.754285][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.779185][T13703] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.794426][T12807] asus 0003:0B05:1ABE.001F: unknown main item tag 0x0
[  745.823651][T12807] asus 0003:0B05:1ABE.001F: item fetching failed at offset 231/483
[  745.845223][T12807] asus 0003:0B05:1ABE.001F: Asus hid parse failed: -22
[  745.857502][T12807] asus 0003:0B05:1ABE.001F: probe with driver asus failed with error -22
[  745.873165][ T5630] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  746.002060][T16199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  746.039494][ T5630] usb 2-1: Using ep0 maxpacket: 32
[  746.058833][ T5630] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  746.082308][ T5630] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  746.093297][T16199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.106981][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.122737][ T5630] usb 2-1: Product: syz
[  746.132281][ T5630] usb 2-1: Manufacturer: syz
[  746.141266][ T5630] usb 2-1: SerialNumber: syz
[  746.162124][ T5630] usb 2-1: config 0 descriptor??
[  746.975859][T13703] bond1 (unregistering): (slave geneve2): Releasing active interface
[  747.121683][T13703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  747.131475][ T5637] Bluetooth: hci4: command tx timeout
[  747.163550][T13703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  747.189956][T13703] bond0 (unregistering): Released all slaves
[  747.199335][ T1317] ieee802154 phy0 wpan0: encryption failed: -22
[  747.205805][ T1317] ieee802154 phy1 wpan1: encryption failed: -22
[  747.228694][T13703] bond1 (unregistering): Released all slaves
[  747.262648][T13703] bond2 (unregistering): Released all slaves
[  747.297380][T13703] bond3 (unregistering): Released all slaves
[  747.336518][T13703] bond4 (unregistering): (slave veth5): Releasing backup interface
[  747.350782][T13703] bond4 (unregistering): Released all slaves
[  747.380235][T13703] bond5 (unregistering): Released all slaves
[  747.419338][T13703] bond6 (unregistering): Released all slaves
[  747.536576][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[  747.772877][T16103] hsr_slave_0: entered promiscuous mode
[  747.797780][T16103] hsr_slave_1: entered promiscuous mode
[  747.864081][T13703] tipc: Disabling bearer <udp:syz0>
[  747.903164][T13703] tipc: Left network mode
[  748.527914][ T5704] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  748.575966][T13668] usb 4-1: USB disconnect, device number 29
[  748.728447][ T5704] usb 1-1: Using ep0 maxpacket: 8
[  748.748027][ T5704] usb 1-1: unable to get BOS descriptor or descriptor too short
[  748.774707][ T5704] usb 1-1: config 4 interface 0 has no altsetting 0
[  748.806233][ T5704] usb 1-1: string descriptor 0 read error: -22
[  748.828001][ T5704] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  748.869661][ T5704] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  748.927328][ T5704] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  748.963604][ T5704] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  748.983561][T13703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  748.997959][ T5704] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  749.009988][T13703] batman_adv: batadv0: Removing interface: batadv_slave_0
[  749.018924][ T5704] usb 1-1: media controller created
[  749.033496][T13703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  749.052231][T13703] batman_adv: batadv0: Removing interface: batadv_slave_1
[  749.062849][ T5704] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  749.144350][T12807] usb 2-1: USB disconnect, device number 127
[  749.198002][ T5637] Bluetooth: hci4: command tx timeout
[  749.474535][T16286] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3024'.
[  749.931780][T13703] team0 (unregistering): Port device team_slave_1 removed
[  749.975035][T13703] team0 (unregistering): Port device team_slave_0 removed
[  750.160943][ T5704] zl10353_read_register: readreg error (reg=127, ret==0)
[  750.370129][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2
[  750.426164][ T5704] usb 1-1: USB disconnect, device number 119
[  750.868156][   T30] audit: type=1326 audit(1785640272.584:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  750.934145][   T30] audit: type=1326 audit(1785640272.584:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  750.980081][   T30] audit: type=1326 audit(1785640272.584:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  751.024433][   T30] audit: type=1326 audit(1785640272.584:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  751.083451][   T30] audit: type=1326 audit(1785640272.584:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  751.121936][T13703] IPVS: stop unused estimator thread 0...
[  751.199189][   T30] audit: type=1326 audit(1785640272.584:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  751.280285][   T30] audit: type=1326 audit(1785640272.584:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  751.369566][   T30] audit: type=1326 audit(1785640272.584:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  751.482321][   T30] audit: type=1326 audit(1785640272.584:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  751.651604][   T30] audit: type=1326 audit(1785640272.584:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16303 comm="syz.4.3027" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a27b9e019 code=0x7ffc0000
[  751.760782][T13668] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  751.927707][T13668] usb 1-1: Using ep0 maxpacket: 32
[  751.934803][T13668] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  751.943851][T13668] usb 1-1: config 0 has no interface number 0
[  751.950492][T13668] usb 1-1: config 0 interface 12 has no altsetting 0
[  751.969865][T13668] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  751.979548][T13668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  751.987976][T13668] usb 1-1: Product: syz
[  751.992296][T13668] usb 1-1: Manufacturer: syz
[  751.996963][T13668] usb 1-1: SerialNumber: syz
[  752.025395][T13668] usb 1-1: config 0 descriptor??
[  752.508951][T12807] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  752.673715][T16103] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  752.692785][T12807] usb 5-1: Using ep0 maxpacket: 32
[  752.705819][T12807] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  752.714943][T16103] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  752.723609][T16103] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  752.733871][T12807] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  752.744112][T12807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.753795][T12807] usb 5-1: Product: syz
[  752.759172][T12807] usb 5-1: Manufacturer: syz
[  752.763988][T12807] usb 5-1: SerialNumber: syz
[  752.778410][T16103] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  752.798961][T16103] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  752.811294][T12807] usb 5-1: config 0 descriptor??
[  752.855383][T16103] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  752.864088][T16103] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  752.890520][T16103] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  753.233061][T16103] 8021q: adding VLAN 0 to HW filter on device bond0
[  753.269090][T16103] 8021q: adding VLAN 0 to HW filter on device team0
[  753.284145][T14998] bridge0: port 1(bridge_slave_0) entered blocking state
[  753.291465][T14998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  753.319258][T14998] bridge0: port 2(bridge_slave_1) entered blocking state
[  753.326558][T14998] bridge0: port 2(bridge_slave_1) entered forwarding state
[  753.463375][T16103] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.606832][T16103] veth0_vlan: entered promiscuous mode
[  753.674160][T16103] veth1_vlan: entered promiscuous mode
[  753.756713][T16365] syzkaller0: entered promiscuous mode
[  753.776890][T16365] syzkaller0: entered allmulticast mode
[  753.929748][T16103] veth0_macvtap: entered promiscuous mode
[  753.944951][T16103] veth1_macvtap: entered promiscuous mode
[  753.979585][T16103] batman_adv: batadv0: Interface activated: batadv_slave_0
[  754.038994][T16103] batman_adv: batadv0: Interface activated: batadv_slave_1
[  754.239406][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  754.274978][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  754.319610][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  754.367759][T12669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  754.476288][T16384] fuse: Unknown parameter ''
[  754.499901][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.532454][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.655419][T13538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  754.685897][T13538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  754.977681][T12817] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  755.158170][T12817] usb 2-1: Using ep0 maxpacket: 32
[  755.190989][T12817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  755.221705][T16406] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  755.228034][T12817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  755.246912][T16406] bond1 (unregistering): Released all slaves
[  755.273614][T12817] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  755.310686][T12817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.357295][T12817] usb 2-1: config 0 descriptor??
[  755.514005][T13670] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  755.559718][T13668] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  755.593576][T13668] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  755.614200][T13668] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  755.622650][T13668] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  755.657201][T13668] usb 1-1: USB disconnect, device number 120
[  755.739911][T13670] usb 3-1: too many configurations: 9, using maximum allowed: 8
[  755.772582][T13670] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  755.800428][T13670] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  755.823145][T12817] hid_parser_main: 213 callbacks suppressed
[  755.823163][T12817] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0
[  755.851241][T13670] usb 3-1: config 0 interface 0 has no altsetting 0
[  755.866147][T12817] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0
[  755.878190][T13670] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  755.909094][T13668] usb 5-1: USB disconnect, device number 37
[  755.948648][T12817] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0
[  755.970265][T13670] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  756.024584][T12817] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0
[  756.060943][T13670] usb 3-1: config 0 interface 0 has no altsetting 0
[  756.087410][T12817] koneplus 0003:1E7D:2D51.0020: unknown main item tag 0x0
[  756.126183][T13670] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  756.197765][T12817] koneplus 0003:1E7D:2D51.0020: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[  756.215667][T13670] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  756.246144][T13670] usb 3-1: config 0 interface 0 has no altsetting 0
[  756.273689][T13670] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  756.309791][T13670] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  756.374245][T16433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.390801][T13670] usb 3-1: config 0 interface 0 has no altsetting 0
[  756.401195][T15685] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  756.416928][T15685] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  756.432391][T15685] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  756.435816][T13670] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  756.453230][T15685] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  756.473112][T15685] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  756.520859][T13670] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  756.577199][T16433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.625418][T13670] usb 3-1: config 0 interface 0 has no altsetting 0
[  756.674166][T13670] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  756.724111][T13670] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  756.751748][T12807] usb 2-1: USB disconnect, device number 2
[  756.765216][T13670] usb 3-1: config 0 interface 0 has no altsetting 0
[  756.795006][T13670] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  756.817999][T13670] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  756.829481][T13670] usb 3-1: config 0 interface 0 has no altsetting 0
[  756.837963][T13670] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9
[  756.853108][T13670] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  756.873267][T13670] usb 3-1: config 0 interface 0 has no altsetting 0
[  756.886655][T13670] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  756.907725][T13670] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  756.924586][T13670] usb 3-1: Product: syz
[  756.931977][T13670] usb 3-1: Manufacturer: syz
[  756.944172][T13670] usb 3-1: SerialNumber: syz
[  756.954833][T13670] usb 3-1: config 0 descriptor??
[  757.050754][T13670] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0
[  757.305527][    C0] usb 3-1: yurex_control_callback - control failed: -71
[  757.370211][T12807] usb 3-1: USB disconnect, device number 32
[  757.379336][T16408] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19
[  757.415955][T12807] yurex 3-1:0.0: USB YUREX #0 now disconnected
[  757.714606][T16408] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3040'.
[  758.085181][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'.
[  758.169757][T16479] bond0: option arp_validate: invalid value (8)
[  758.211122][T16474] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3046'.
[  758.372177][T16481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3046'.
[  758.462173][T16437] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.469708][T16437] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.477205][T16437] bridge_slave_0: entered allmulticast mode
[  758.490632][T16437] bridge_slave_0: entered promiscuous mode
[  758.500547][T16437] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.508301][T16437] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.515973][T16437] bridge_slave_1: entered allmulticast mode
[  758.529819][T16437] bridge_slave_1: entered promiscuous mode
[  758.591264][T16437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  758.605530][T16437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  758.637976][ T5637] Bluetooth: hci3: command tx timeout
[  758.657400][T16437] team0: Port device team_slave_0 added
[  758.670237][T16437] team0: Port device team_slave_1 added
[  758.739940][T16437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.750622][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.811758][T16437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.846527][T16437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.856153][T16437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.885643][T16437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  759.017877][T12807] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  759.099275][T16437] hsr_slave_0: entered promiscuous mode
[  759.126325][T16437] hsr_slave_1: entered promiscuous mode
[  759.168466][T16437] debugfs: 'hsr0' already exists in 'hsr'
[  759.174317][T16437] Cannot create hsr debugfs directory
[  759.207677][T12807] usb 1-1: Using ep0 maxpacket: 32
[  759.220098][T12807] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  759.259259][T12807] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  759.278326][T13670] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  759.291584][T12807] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  759.302430][T12807] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  759.327924][T12807] usb 1-1: Product: syz
[  759.332205][T12807] usb 1-1: Manufacturer: syz
[  759.354743][T12807] hub 1-1:4.0: USB hub found
[  759.462117][T13670] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  759.477781][T13670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.496338][T13670] usb 2-1: Product: syz
[  759.504335][T13670] usb 2-1: Manufacturer: syz
[  759.515481][T13670] usb 2-1: SerialNumber: syz
[  759.562840][T12807] hub 1-1:4.0: 2 ports detected
[  759.727115][T16437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  759.739378][T16437] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  759.827222][T12807] hub 1-1:4.0: hub_hub_status failed (err = -71)
[  759.841232][T12807] hub 1-1:4.0: config failed, can't get hub status (err -71)
[  759.889226][T12807] usb 1-1: USB disconnect, device number 121
[  759.964388][T13670] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  760.009917][T16437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  760.022930][T13670] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  760.057706][T16437] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.091241][T16496] netlink: 268 bytes leftover after parsing attributes in process `syz.0.3048'.
[  760.112907][T16496] netlink: 1760 bytes leftover after parsing attributes in process `syz.0.3048'.
[  760.137064][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'.
[  760.248329][T16437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  760.262235][T16437] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.390546][T16437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  760.414458][T16437] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.516796][T11820] bridge_slave_1: left allmulticast mode
[  760.552466][T12807] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  760.553640][T11820] bridge_slave_1: left promiscuous mode
[  760.586019][T11820] bridge0: port 2(bridge_slave_1) entered disabled state
[  760.612954][T11820] bridge_slave_0: left allmulticast mode
[  760.619374][T11820] bridge_slave_0: left promiscuous mode
[  760.626127][T11820] bridge0: port 1(bridge_slave_0) entered disabled state
[  760.641549][T11820] dvmrp0: left allmulticast mode
[  760.718798][ T5637] Bluetooth: hci3: command tx timeout
[  760.724560][T12807] usb 3-1: Using ep0 maxpacket: 32
[  760.732768][T12807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  760.769045][T12807] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  760.793595][T12807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.804865][T12807] usb 3-1: Product: syz
[  760.814665][T12807] usb 3-1: Manufacturer: syz
[  760.824798][T12807] usb 3-1: SerialNumber: syz
[  760.849662][T12807] usb 3-1: config 0 descriptor??
[  761.147487][T11820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  761.169885][T11820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  761.189241][T11820] bond0 (unregistering): Released all slaves
[  761.214436][T11820] bond1 (unregistering): Released all slaves
[  761.243958][T11820] bond2 (unregistering): Released all slaves
[  761.262094][T13670] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  761.291775][T11820] bond3 (unregistering): Released all slaves
[  761.322512][T11820] bond4 (unregistering): Released all slaves
[  761.360048][T11820] bond5 (unregistering): Released all slaves
[  761.394096][T11820] bond6 (unregistering): Released all slaves
[  761.430779][T11820] bond7 (unregistering): Released all slaves
[  761.473348][T11820] bond8 (unregistering): Released all slaves
[  761.480704][T13670] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[  761.499272][T13670] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  761.516710][T13670] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  761.536948][T11820] bond9 (unregistering): Released all slaves
[  761.543623][T13670] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  761.565545][T13670] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  761.583750][T11820] bond10 (unregistering): Released all slaves
[  761.603886][T13670] usb 2-1: USB disconnect, device number 3
[  761.653176][T11820] bond11 (unregistering): Released all slaves
[  761.698571][T11820] bond12 (unregistering): Released all slaves
[  761.926841][T11820] tipc: Disabling bearer <eth:syzkaller0>
[  761.955054][T11820] tipc: Left network mode
[  762.226708][T16437] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  762.270405][T16437] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  762.288711][T16437] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  762.315586][T16437] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  762.355918][T16437] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  762.386454][T16437] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  762.596603][T16437] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  762.628074][T16437] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  762.744162][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  762.769607][T11820] batman_adv: batadv0: Removing interface: batadv_slave_0
[  762.791757][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  762.798034][ T5637] Bluetooth: hci3: command tx timeout
[  762.811416][T11820] batman_adv: batadv0: Removing interface: batadv_slave_1
[  762.839489][T11820] veth1_vlan: left promiscuous mode
[  762.845077][T11820] veth0_vlan: left promiscuous mode
[  763.234647][T11820] team0 (unregistering): Port device team_slave_1 removed
[  763.270518][T11820] team0 (unregistering): Port device team_slave_0 removed
[  763.653700][T16437] 8021q: adding VLAN 0 to HW filter on device bond0
[  763.678311][ T9551] usb 3-1: USB disconnect, device number 33
[  763.745311][T16437] 8021q: adding VLAN 0 to HW filter on device team0
[  763.820099][T16539] FAULT_INJECTION: forcing a failure.
[  763.820099][T16539] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  763.855833][T11816] bridge0: port 1(bridge_slave_0) entered blocking state
[  763.863107][T11816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  763.889892][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  763.889912][   T30] audit: type=1804 audit(1785640285.554:792): pid=16537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3061" name="bus" dev="ramfs" ino=77945 res=1 errno=0
[  763.918191][T16539] CPU: 1 UID: 0 PID: 16539 Comm: syz.2.3062 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  763.918231][T16539] Tainted: [L]=SOFTLOCKUP
[  763.918240][T16539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  763.918256][T16539] Call Trace:
[  763.918266][T16539]  <TASK>
[  763.918277][T16539]  dump_stack_lvl+0xe8/0x150
[  763.918321][T16539]  should_fail_ex+0x40c/0x560
[  763.918357][T16539]  _copy_from_iter+0x1d3/0x1660
[  763.918390][T16539]  ? kmem_cache_alloc_node_noprof+0x191/0x610
[  763.918423][T16539]  ? rcu_is_watching+0x15/0xb0
[  763.918448][T16539]  ? trace_kmem_cache_alloc+0x29/0xe0
[  763.918480][T16539]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  763.918511][T16539]  ? __pfx__copy_from_iter+0x10/0x10
[  763.918544][T16539]  ? __alloc_skb+0x276/0x7a0
[  763.918567][T16539]  ? __alloc_skb+0x276/0x7a0
[  763.918609][T16539]  ? netlink_sendmsg+0x650/0xb40
[  763.918640][T16539]  ? skb_put+0x112/0x210
[  763.918670][T16539]  netlink_sendmsg+0x6c0/0xb40
[  763.918711][T16539]  ? __pfx_netlink_sendmsg+0x10/0x10
[  763.918746][T16539]  ? aa_sock_msg_perm+0xf1/0x1b0
[  763.918780][T16539]  ? __pfx_netlink_sendmsg+0x10/0x10
[  763.918809][T16539]  sock_sendmsg_nosec+0x13a/0x180
[  763.918848][T16539]  ____sys_sendmsg+0x54e/0x850
[  763.918885][T16539]  ? __pfx_____sys_sendmsg+0x10/0x10
[  763.918931][T16539]  ? import_iovec+0x73/0xa0
[  763.918959][T16539]  ___sys_sendmsg+0x2a5/0x360
[  763.918987][T16539]  ? __lock_acquire+0x683/0x2cf0
[  763.919026][T16539]  ? __pfx____sys_sendmsg+0x10/0x10
[  763.919096][T16539]  ? __fget_files+0x2a/0x420
[  763.919129][T16539]  ? __fget_files+0x3a2/0x420
[  763.919171][T16539]  __x64_sys_sendmsg+0x1b1/0x290
[  763.919203][T16539]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  763.919258][T16539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.919285][T16539]  do_syscall_64+0x174/0x580
[  763.919315][T16539]  ? trace_irq_disable+0x3b/0x140
[  763.919347][T16539]  ? clear_bhb_loop+0x40/0x90
[  763.919376][T16539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.919401][T16539] RIP: 0033:0x7f9344d9e019
[  763.919422][T16539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  763.919442][T16539] RSP: 002b:00007f9345c43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  763.919467][T16539] RAX: ffffffffffffffda RBX: 00007f9345025fa0 RCX: 00007f9344d9e019
[  763.919484][T16539] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[  763.919498][T16539] RBP: 00007f9345c43090 R08: 0000000000000000 R09: 0000000000000000
[  763.919512][T16539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  763.919526][T16539] R13: 00007f9345026038 R14: 00007f9345025fa0 R15: 00007f934514fa48
[  763.919562][T16539]  </TASK>
[  764.206324][   T30] audit: type=1804 audit(1785640285.574:793): pid=16537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3061" name="bus" dev="ramfs" ino=77945 res=1 errno=0
[  764.236389][T13538] bridge0: port 2(bridge_slave_1) entered blocking state
[  764.243610][T13538] bridge0: port 2(bridge_slave_1) entered forwarding state
[  764.462336][T16437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  764.524966][T16437] veth0_vlan: entered promiscuous mode
[  764.603350][T16437] veth1_vlan: entered promiscuous mode
[  764.613898][T11820] IPVS: stop unused estimator thread 0...
[  764.735254][T16437] veth0_macvtap: entered promiscuous mode
[  764.780265][T16437] veth1_macvtap: entered promiscuous mode
[  764.842071][T16437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  764.879750][ T5637] Bluetooth: hci3: command tx timeout
[  764.888996][T16437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  764.981908][T16556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3068'.
[  765.032970][T11820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  765.123835][T12669] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  765.196022][T12669] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  765.247813][T11820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  765.355683][T11820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  765.384660][T11820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  765.547529][T13538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  765.571978][T13538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  766.349796][T12807] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  766.495962][T16586] loop5: detected capacity change from 0 to 4095
[  766.527692][T12807] usb 3-1: Using ep0 maxpacket: 32
[  766.562474][T12807] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  766.598052][T12807] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  766.624921][T12807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.667302][T12807] usb 3-1: Product: syz
[  766.679343][T12807] usb 3-1: Manufacturer: syz
[  766.698980][T12807] usb 3-1: SerialNumber: syz
[  766.716794][T16588] FAULT_INJECTION: forcing a failure.
[  766.716794][T16588] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  766.743064][T12807] usb 3-1: config 0 descriptor??
[  766.775935][T16588] CPU: 0 UID: 0 PID: 16588 Comm: syz.0.3074 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  766.775969][T16588] Tainted: [L]=SOFTLOCKUP
[  766.775977][T16588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  766.775990][T16588] Call Trace:
[  766.775999][T16588]  <TASK>
[  766.776008][T16588]  dump_stack_lvl+0xe8/0x150
[  766.776048][T16588]  should_fail_ex+0x40c/0x560
[  766.776081][T16588]  _copy_from_user+0x2d/0xb0
[  766.776104][T16588]  do_ipt_get_ctl+0x419/0x1300
[  766.776131][T16588]  ? reacquire_held_locks+0x104/0x190
[  766.776164][T16588]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[  766.776195][T16588]  ? do_ip_getsockopt+0x12fb/0x1d00
[  766.776225][T16588]  ? __local_bh_enable_ip+0xd0/0x130
[  766.776257][T16588]  ? __mutex_trylock_common+0x15f/0x270
[  766.776284][T16588]  ? __pfx___mutex_trylock_common+0x10/0x10
[  766.776310][T16588]  ? rcu_is_watching+0x15/0xb0
[  766.776332][T16588]  ? trace_contention_end+0x3d/0x140
[  766.776365][T16588]  ? nf_getsockopt+0x224/0x290
[  766.776391][T16588]  ? __mutex_unlock_slowpath+0x731/0x900
[  766.776439][T16588]  ? __might_fault+0xaf/0x130
[  766.776477][T16588]  nf_getsockopt+0x26e/0x290
[  766.776506][T16588]  ip_getsockopt+0x19e/0x230
[  766.776540][T16588]  ? __pfx_ip_getsockopt+0x10/0x10
[  766.776568][T16588]  ? __might_fault+0xaf/0x130
[  766.776594][T16588]  ? sock_common_getsockopt+0x2d/0xb0
[  766.776629][T16588]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  766.776662][T16588]  smc_getsockopt+0x1e4/0x3c0
[  766.776693][T16588]  ? __pfx_smc_getsockopt+0x10/0x10
[  766.776727][T16588]  ? __pfx_smc_getsockopt+0x10/0x10
[  766.776753][T16588]  do_sock_getsockopt+0x51d/0x7e0
[  766.776786][T16588]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  766.776829][T16588]  ? __fget_files+0x3a2/0x420
[  766.776859][T16588]  ? __fget_files+0x2a/0x420
[  766.776897][T16588]  __x64_sys_getsockopt+0x1a4/0x240
[  766.776929][T16588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.776954][T16588]  do_syscall_64+0x174/0x580
[  766.776980][T16588]  ? trace_irq_disable+0x3b/0x140
[  766.777009][T16588]  ? clear_bhb_loop+0x40/0x90
[  766.777036][T16588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  766.777058][T16588] RIP: 0033:0x7fc7b9f9e019
[  766.777078][T16588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  766.777097][T16588] RSP: 002b:00007fc7bae64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  766.777120][T16588] RAX: ffffffffffffffda RBX: 00007fc7ba225fa0 RCX: 00007fc7b9f9e019
[  766.777136][T16588] RDX: 0000000000000043 RSI: 0000000000000000 RDI: 0000000000000003
[  766.777149][T16588] RBP: 00007fc7bae64090 R08: 0000200000000800 R09: 0000000000000000
[  766.777163][T16588] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001
[  766.777177][T16588] R13: 00007fc7ba226038 R14: 00007fc7ba225fa0 R15: 00007fc7ba34fa48
[  766.777211][T16588]  </TASK>
[  767.122562][T16586] Buffer I/O error on dev loop5, logical block 511, async page read
[  767.148691][T16590] fuse: Bad value for 'fd'
[  767.163899][T16590] netlink: 408 bytes leftover after parsing attributes in process `syz.0.3075'.
[  767.173892][T13144] Buffer I/O error on dev loop5, logical block 511, async page read
[  767.902481][T16604] FAULT_INJECTION: forcing a failure.
[  767.902481][T16604] name failslab, interval 1, probability 0, space 9, times 0
[  767.926837][T16604] CPU: 1 UID: 0 PID: 16604 Comm: syz.0.3080 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  767.926873][T16604] Tainted: [L]=SOFTLOCKUP
[  767.926882][T16604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  767.926895][T16604] Call Trace:
[  767.926904][T16604]  <TASK>
[  767.926914][T16604]  dump_stack_lvl+0xe8/0x150
[  767.926952][T16604]  should_fail_ex+0x40c/0x560
[  767.926987][T16604]  should_failslab+0xa8/0x100
[  767.927022][T16604]  __kmalloc_noprof+0xfe/0x720
[  767.927052][T16604]  ? sock_kmalloc+0xd6/0x160
[  767.927078][T16604]  ? sock_kmalloc+0xd6/0x160
[  767.927112][T16604]  sock_kmalloc+0xd6/0x160
[  767.927142][T16604]  ____sys_sendmsg+0x1be/0x850
[  767.927182][T16604]  ? __pfx_____sys_sendmsg+0x10/0x10
[  767.927220][T16604]  ? import_iovec+0x73/0xa0
[  767.927245][T16604]  ___sys_sendmsg+0x2a5/0x360
[  767.927270][T16604]  ? __lock_acquire+0x683/0x2cf0
[  767.927306][T16604]  ? __pfx____sys_sendmsg+0x10/0x10
[  767.927369][T16604]  ? __fget_files+0x2a/0x420
[  767.927398][T16604]  ? __fget_files+0x3a2/0x420
[  767.927438][T16604]  __x64_sys_sendmsg+0x1b1/0x290
[  767.927468][T16604]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  767.927513][T16604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.927537][T16604]  do_syscall_64+0x174/0x580
[  767.927567][T16604]  ? trace_irq_disable+0x3b/0x140
[  767.927595][T16604]  ? clear_bhb_loop+0x40/0x90
[  767.927622][T16604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  767.927644][T16604] RIP: 0033:0x7fc7b9f9e019
[  767.927665][T16604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  767.927682][T16604] RSP: 002b:00007fc7bae64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  767.927710][T16604] RAX: ffffffffffffffda RBX: 00007fc7ba225fa0 RCX: 00007fc7b9f9e019
[  767.927727][T16604] RDX: 0000000020048811 RSI: 00002000000001c0 RDI: 0000000000000005
[  767.927742][T16604] RBP: 00007fc7bae64090 R08: 0000000000000000 R09: 0000000000000000
[  767.927755][T16604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  767.927767][T16604] R13: 00007fc7ba226038 R14: 00007fc7ba225fa0 R15: 00007fc7ba34fa48
[  767.927801][T16604]  </TASK>
[  768.194909][T16606] syzkaller0: entered promiscuous mode
[  768.214159][T16606] syzkaller0: entered allmulticast mode
[  768.218012][ T5630] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  768.255558][T16606] tipc: Started in network mode
[  768.285038][T16606] tipc: Node identity 0a0eaf2b950e, cluster identity 4711
[  768.305824][T16606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  768.309181][T15685] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  768.332235][T15685] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  768.343899][T15685] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  768.356575][T15685] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  768.366981][T15685] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  768.379597][ T5630] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  768.389909][ T5630] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  768.405211][ T5630] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  768.424014][T16606] tipc: Resetting bearer <eth:syzkaller0>
[  768.466630][   T30] audit: type=1804 audit(1785640290.184:794): pid=16610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3082" name="bus" dev="ramfs" ino=79044 res=1 errno=0
[  768.496289][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.528263][   T30] audit: type=1804 audit(1785640290.234:795): pid=16610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3082" name="bus" dev="ramfs" ino=79044 res=1 errno=0
[  768.557666][ T5630] usb 4-1: Product: syz
[  768.571312][ T5630] usb 4-1: Manufacturer: syz
[  768.592366][ T5630] usb 4-1: SerialNumber: syz
[  768.603615][T16605] tipc: Resetting bearer <eth:syzkaller0>
[  768.699661][T16605] tipc: Disabling bearer <eth:syzkaller0>
[  769.069735][ T5630] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  769.332194][   T30] audit: type=1326 audit(1785640291.054:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16600 comm="syz.3.3078" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3b399e019 code=0x0
[  769.797927][T12807] usb 3-1: USB disconnect, device number 34
[  770.080989][T16614] bridge0: port 1(bridge_slave_0) entered blocking state
[  770.090036][T16614] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.102820][T16614] bridge_slave_0: entered allmulticast mode
[  770.120255][T16614] bridge_slave_0: entered promiscuous mode
[  770.130439][T16614] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.141243][T16614] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.151791][T16614] bridge_slave_1: entered allmulticast mode
[  770.166753][T16614] bridge_slave_1: entered promiscuous mode
[  770.298754][T16614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  770.332151][T16614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  770.488091][T15685] Bluetooth: hci1: command tx timeout
[  770.591290][T16614] team0: Port device team_slave_0 added
[  770.609137][T16614] team0: Port device team_slave_1 added
[  770.711883][T16614] batman_adv: batadv0: Adding interface: batadv_slave_0
[  770.729868][T16614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  770.924953][T16645] netlink: 408 bytes leftover after parsing attributes in process `syz.2.3089'.
[  770.933653][T16614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  770.961485][T13670] usb 4-1: USB disconnect, device number 30
[  771.007099][T13670] usblp0: removed
[  771.121400][T16614] batman_adv: batadv0: Adding interface: batadv_slave_1
[  771.169756][T16614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  771.262150][T16614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  771.551804][T16652] fuse: Unknown parameter 'gro}p�j�'
[  772.107106][T16657] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.317194][T16614] hsr_slave_0: entered promiscuous mode
[  772.324309][T16614] hsr_slave_1: entered promiscuous mode
[  772.331470][T16614] debugfs: 'hsr0' already exists in 'hsr'
[  772.337267][T16614] Cannot create hsr debugfs directory
[  772.418608][T13670] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  772.484042][T16673] kvm: user requested TSC rate below hardware speed
[  772.488104][ T5630] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  772.558104][T15685] Bluetooth: hci1: command tx timeout
[  772.587662][T13670] usb 1-1: Using ep0 maxpacket: 32
[  772.600984][T13670] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  772.615297][T13670] usb 1-1: config 0 has no interface number 0
[  772.630428][T13670] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  772.647709][ T5630] usb 4-1: Using ep0 maxpacket: 32
[  772.657666][T13670] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.670856][ T5630] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  772.690478][T13670] usb 1-1: Product: syz
[  772.693313][ T5630] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  772.704057][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.706205][T13670] usb 1-1: Manufacturer: syz
[  772.713289][ T5630] usb 4-1: Product: syz
[  772.721325][ T5630] usb 4-1: Manufacturer: syz
[  772.727102][ T5630] usb 4-1: SerialNumber: syz
[  772.742970][ T5630] usb 4-1: config 0 descriptor??
[  772.744166][T13670] usb 1-1: SerialNumber: syz
[  772.780534][T13670] usb 1-1: config 0 descriptor??
[  772.798336][T13668] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  772.814192][T13670] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  772.911539][T16614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  772.923532][T16614] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.989717][T13668] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  773.030342][T13668] usb 2-1: config 0 interface 0 has no altsetting 0
[  773.046092][T13668] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  773.056257][T13670] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  773.087734][T13668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.105994][T13670] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  773.106359][T16614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  773.137010][T16614] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.137091][T13668] usb 2-1: Product: syz
[  773.168970][T13668] usb 2-1: Manufacturer: syz
[  773.183792][T13668] usb 2-1: SerialNumber: syz
[  773.259808][T13668] usb 2-1: config 0 descriptor??
[  773.305448][T13668] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  773.387954][T13668] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  773.420891][T13668] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  773.451022][T13668] usb 2-1: media controller created
[  773.522671][T13668] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  773.612281][T16662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  773.643922][T16614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  773.655370][T16662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  773.680718][T16614] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.709002][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6
[  773.761787][T13668] DVB: Unable to find symbol tda10046_attach()
[  773.768203][T13668] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  773.779925][T13668] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  773.858984][T16614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  773.869632][T16614] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  773.926902][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  773.932761][T12813] usb 1-1: USB disconnect, device number 122
[  773.973346][T12813] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  774.023961][T12813] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  774.063703][T12813] quatech2 1-1:0.51: device disconnected
[  774.184041][   T30] audit: type=1804 audit(1785640295.904:797): pid=16684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3100" name="bus" dev="ramfs" ino=79401 res=1 errno=0
[  774.215240][   T30] audit: type=1804 audit(1785640295.924:798): pid=16684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3100" name="bus" dev="ramfs" ino=79401 res=1 errno=0
[  774.343031][T16614] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  774.369489][T16614] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  774.384535][T16614] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  774.420895][T16614] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  774.435933][T16614] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  774.471576][T16614] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  774.500811][T16614] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  774.525868][T16614] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  774.642413][T15685] Bluetooth: hci1: command tx timeout
[  774.715514][T16696] FAULT_INJECTION: forcing a failure.
[  774.715514][T16696] name failslab, interval 1, probability 0, space 9, times 0
[  774.756029][T16696] CPU: 1 UID: 0 PID: 16696 Comm: syz.0.3101 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  774.756088][T16696] Tainted: [L]=SOFTLOCKUP
[  774.756097][T16696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  774.756110][T16696] Call Trace:
[  774.756119][T16696]  <TASK>
[  774.756128][T16696]  dump_stack_lvl+0xe8/0x150
[  774.756175][T16696]  should_fail_ex+0x40c/0x560
[  774.756200][T16696]  should_failslab+0xa8/0x100
[  774.756243][T16696]  __kmalloc_noprof+0xfe/0x720
[  774.756272][T16696]  ? rcu_is_watching+0x15/0xb0
[  774.756292][T16696]  ? tomoyo_realpath_from_path+0xef/0x640
[  774.756330][T16696]  ? tomoyo_realpath_from_path+0xef/0x640
[  774.756354][T16696]  tomoyo_realpath_from_path+0xef/0x640
[  774.756399][T16696]  ? tomoyo_path_number_perm+0x219/0x5f0
[  774.756435][T16696]  tomoyo_path_number_perm+0x246/0x5f0
[  774.756472][T16696]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  774.756504][T16696]  ? __lock_acquire+0x683/0x2cf0
[  774.756551][T16696]  ? hook_file_ioctl+0x1f0/0x5f0
[  774.756594][T16696]  ? __fget_files+0x2a/0x420
[  774.756626][T16696]  ? __fget_files+0x2a/0x420
[  774.756654][T16696]  ? __fget_files+0x3a2/0x420
[  774.756685][T16696]  ? __fget_files+0x2a/0x420
[  774.756730][T16696]  security_file_ioctl+0xc3/0x2a0
[  774.756764][T16696]  __se_sys_ioctl+0x47/0x170
[  774.756786][T16696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.756811][T16696]  do_syscall_64+0x174/0x580
[  774.756831][T16696]  ? trace_irq_disable+0x3b/0x140
[  774.756852][T16696]  ? clear_bhb_loop+0x40/0x90
[  774.756893][T16696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.756915][T16696] RIP: 0033:0x7fc7b9f9e019
[  774.756935][T16696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  774.756971][T16696] RSP: 002b:00007fc7bae64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  774.756994][T16696] RAX: ffffffffffffffda RBX: 00007fc7ba225fa0 RCX: 00007fc7b9f9e019
[  774.757011][T16696] RDX: 0000200000000080 RSI: 00000000c4c85513 RDI: 0000000000000003
[  774.757025][T16696] RBP: 00007fc7bae64090 R08: 0000000000000000 R09: 0000000000000000
[  774.757038][T16696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  774.757050][T16696] R13: 00007fc7ba226038 R14: 00007fc7ba225fa0 R15: 00007fc7ba34fa48
[  774.757084][T16696]  </TASK>
[  775.001639][T16614] 8021q: adding VLAN 0 to HW filter on device bond0
[  775.028212][T16614] 8021q: adding VLAN 0 to HW filter on device team0
[  775.083666][T16696] ERROR: Out of memory at tomoyo_realpath_from_path.
[  775.092876][T12674] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.101635][T12674] bridge0: port 1(bridge_slave_0) entered forwarding state
[  775.136768][T12674] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.144014][T12674] bridge0: port 2(bridge_slave_1) entered forwarding state
[  775.219894][T16614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  775.304126][   T30] audit: type=1804 audit(1785640297.024:799): pid=16699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3102" name="bus" dev="ramfs" ino=78807 res=1 errno=0
[  775.336026][   T30] audit: type=1804 audit(1785640297.054:800): pid=16699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3102" name="bus" dev="ramfs" ino=78807 res=1 errno=0
[  775.376132][T16614] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.530048][T16614] veth0_vlan: entered promiscuous mode
[  775.549848][T16614] veth1_vlan: entered promiscuous mode
[  775.671924][T16614] veth0_macvtap: entered promiscuous mode
[  775.691211][T12813] usb 4-1: USB disconnect, device number 31
[  775.736746][T16614] veth1_macvtap: entered promiscuous mode
[  775.856481][T16614] batman_adv: batadv0: Interface activated: batadv_slave_0
[  775.882392][T16702] netlink: 516 bytes leftover after parsing attributes in process `syz.3.3103'.
[  775.914939][T16614] batman_adv: batadv0: Interface activated: batadv_slave_1
[  775.939422][T12674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  775.954398][T12674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.018382][ T8850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.036254][ T8850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  776.155660][T13668] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  776.268038][T13668] usb 2-1: USB disconnect, device number 4
[  776.365426][T11818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.395554][T11818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.464547][ T8854] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  776.485706][ T8854] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  776.717776][T15685] Bluetooth: hci1: command tx timeout
[  777.635197][T16721] netlink: 'syz.4.3107': attribute type 1 has an invalid length.
[  777.650123][T16721] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  777.866157][T16723] netlink: 408 bytes leftover after parsing attributes in process `syz.4.3108'.
[  778.618976][ T5630] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  778.691005][T16738] FAULT_INJECTION: forcing a failure.
[  778.691005][T16738] name failslab, interval 1, probability 0, space 9, times 0
[  778.728328][T16738] CPU: 0 UID: 0 PID: 16738 Comm: syz.2.3114 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  778.728363][T16738] Tainted: [L]=SOFTLOCKUP
[  778.728373][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  778.728388][T16738] Call Trace:
[  778.728397][T16738]  <TASK>
[  778.728406][T16738]  dump_stack_lvl+0xe8/0x150
[  778.728444][T16738]  should_fail_ex+0x40c/0x560
[  778.728476][T16738]  should_failslab+0xa8/0x100
[  778.728511][T16738]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  778.728539][T16738]  ? local_lock_release+0x9c/0x160
[  778.728563][T16738]  ? __alloc_skb+0x1d7/0x7a0
[  778.728584][T16738]  ? __alloc_skb+0x1d7/0x7a0
[  778.728613][T16738]  __alloc_skb+0x1d7/0x7a0
[  778.728641][T16738]  alloc_skb_with_frags+0xc6/0x760
[  778.728678][T16738]  sock_alloc_send_pskb+0x878/0x990
[  778.728715][T16738]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  778.728754][T16738]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  778.728787][T16738]  ? dev_get_by_index+0x22/0x2d0
[  778.728815][T16738]  ? dev_get_by_index+0x22/0x2d0
[  778.728850][T16738]  packet_sendmsg+0x3258/0x5040
[  778.728888][T16738]  ? aa_file_perm+0x18b/0x15f0
[  778.728915][T16738]  ? aa_label_sk_perm+0x532/0x6e0
[  778.728952][T16738]  ? __lock_acquire+0x683/0x2cf0
[  778.728994][T16738]  ? __lock_acquire+0x683/0x2cf0
[  778.729039][T16738]  ? __pfx_packet_sendmsg+0x10/0x10
[  778.729079][T16738]  ? __might_fault+0xaf/0x130
[  778.729104][T16738]  ? __pfx_aa_sk_perm+0x10/0x10
[  778.729130][T16738]  ? aa_sock_msg_perm+0xf1/0x1b0
[  778.729160][T16738]  ? __pfx_packet_sendmsg+0x10/0x10
[  778.729189][T16738]  sock_sendmsg_nosec+0x13a/0x180
[  778.729224][T16738]  __sys_sendto+0x408/0x5a0
[  778.729247][T16738]  ? ksys_write+0x1e6/0x270
[  778.729272][T16738]  ? __pfx___sys_sendto+0x10/0x10
[  778.729294][T16738]  ? __mutex_unlock_slowpath+0x731/0x900
[  778.729355][T16738]  ? __pfx_ksys_write+0x10/0x10
[  778.729383][T16738]  __x64_sys_sendto+0xde/0x100
[  778.729408][T16738]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.729430][T16738]  do_syscall_64+0x174/0x580
[  778.729455][T16738]  ? trace_irq_disable+0x3b/0x140
[  778.729483][T16738]  ? clear_bhb_loop+0x40/0x90
[  778.729509][T16738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.729531][T16738] RIP: 0033:0x7f9344d9e019
[  778.729557][T16738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  778.729575][T16738] RSP: 002b:00007f9345c43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  778.729603][T16738] RAX: ffffffffffffffda RBX: 00007f9345025fa0 RCX: 00007f9344d9e019
[  778.729619][T16738] RDX: 000000000000002e RSI: 0000200000000280 RDI: 0000000000000003
[  778.729634][T16738] RBP: 00007f9345c43090 R08: 0000200000000140 R09: 0000000000000014
[  778.729648][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  778.729662][T16738] R13: 00007f9345026038 R14: 00007f9345025fa0 R15: 00007f934514fa48
[  778.729696][T16738]  </TASK>
[  778.787960][ T5630] usb 4-1: Using ep0 maxpacket: 32
[  779.105918][ T5630] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  779.127130][ T5630] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  779.137006][ T5630] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.148027][ T5630] usb 4-1: Product: syz
[  779.152340][ T5630] usb 4-1: Manufacturer: syz
[  779.157069][ T5630] usb 4-1: SerialNumber: syz
[  779.167967][ T5625] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  779.170515][ T5630] usb 4-1: config 0 descriptor??
[  779.350227][ T5625] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  779.367498][ T5625] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  779.399622][ T5625] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00
[  779.435179][ T5625] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.685119][T16741] binder: 16740:16741 ioctl 4018620d 0 returned -22
[  779.710784][ T5625] ------------[ cut here ]------------
[  779.717259][ T5625] memcpy: detected buffer overflow: 219 byte read of buffer size 60
[  779.726129][ T5625] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#0: kworker/0:3/5625
[  779.736400][ T5625] Modules linked in:
[  779.741832][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  779.753225][ T5625] Tainted: [L]=SOFTLOCKUP
[  779.758219][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  779.768413][ T5625] Workqueue: usb_hub_wq hub_event
[  779.773515][ T5625] RIP: 0010:__fortify_report+0x89/0xa0
[  779.779385][ T5625] Code: e8 fc 59 60 fd 48 8d 3d 05 a2 8e 0b 45 84 e4 49 8b 37 48 c7 c0 a0 ee 49 8c 48 c7 c1 c0 ee 49 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc
[  779.799222][ T5625] RSP: 0018:ffffc9000430ec08 EFLAGS: 00010246
[  779.806779][ T5625] RAX: ffffffff8c49eea0 RBX: 000000000000003c RCX: ffffffff8c49eea0
[  779.815793][ T5625] RDX: 00000000000000db RSI: ffffffff8c49ed80 RDI: ffffffff9062f600
[  779.824239][T16765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3120'.
[  779.833502][ T5625] RBP: 000000000000000e R08: 000000000000003c R09: 1ffffffff20af3a6
[  779.842520][ T5625] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000
[  779.850924][ T5625] R13: ffffc9000430edc0 R14: 00000000000000db R15: ffffffff8c49ebd8
[  779.859305][ T5625] FS:  0000000000000000(0000) GS:ffff888124f4c000(0000) knlGS:0000000000000000
[  779.868454][ T5625] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  779.875088][ T5625] CR2: 0000200000000700 CR3: 000000003817a000 CR4: 00000000003526f0
[  779.883196][ T5625] DR0: 0000000000003706 DR1: 0000000000000000 DR2: 0000000000000000
[  779.891290][ T5625] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  779.899380][ T5625] Call Trace:
[  779.902822][ T5625]  <TASK>
[  779.905851][ T5625]  __fortify_panic+0x9/0x10
[  779.910497][ T5625]  ttusb_dec_send_command+0x681/0x690
[  779.915939][ T5625]  ? __pfx_ttusb_dec_send_command+0x10/0x10
[  779.923292][ T5625]  ttusb_dec_probe+0x8e4/0x2160
[  779.928860][ T5625]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  779.934332][ T5625]  ? __pfx_ttusb_dec_probe+0x10/0x10
[  779.939732][ T5625]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  779.945610][ T5625]  ? __pm_runtime_set_status+0x994/0xc80
[  779.951367][ T5625]  usb_probe_interface+0x653/0xc60
[  779.956551][ T5625]  ? __pfx_usb_probe_interface+0x10/0x10
[  779.962379][ T5625]  really_probe+0x254/0xae0
[  779.967190][ T5625]  __driver_probe_device+0x1e8/0x360
[  779.972610][ T5625]  driver_probe_device+0x4f/0x240
[  779.977756][ T5625]  __device_attach_driver+0x270/0x410
[  779.983233][ T5625]  bus_for_each_drv+0x258/0x2f0
[  779.988937][ T5625]  ? __pfx___device_attach_driver+0x10/0x10
[  779.994911][ T5625]  ? __pfx_bus_for_each_drv+0x10/0x10
[  780.000425][ T5625]  ? lockdep_hardirqs_on+0x7a/0x110
[  780.005703][ T5625]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  780.011641][ T5625]  __device_attach+0x2c4/0x450
[  780.016480][ T5625]  ? __pfx___device_attach+0x10/0x10
[  780.022689][ T5625]  ? do_raw_spin_unlock+0xf5/0x210
[  780.028483][ T5625]  ? _raw_spin_unlock+0x28/0x50
[  780.033406][ T5625]  device_initial_probe+0xa1/0xd0
[  780.038553][ T5625]  bus_probe_device+0x12a/0x220
[  780.043466][ T5625]  device_add+0x7d7/0xb80
[  780.047908][ T5625]  usb_set_configuration+0x1ad8/0x2180
[  780.053465][ T5625]  usb_generic_driver_probe+0x8d/0x150
[  780.059035][ T5625]  usb_probe_device+0x1c3/0x3b0
[  780.063990][ T5625]  ? __pfx_usb_probe_device+0x10/0x10
[  780.069495][ T5625]  really_probe+0x254/0xae0
[  780.074071][ T5625]  __driver_probe_device+0x1e8/0x360
[  780.080683][ T5625]  driver_probe_device+0x4f/0x240
[  780.085798][ T5625]  __device_attach_driver+0x270/0x410
[  780.091505][ T5625]  bus_for_each_drv+0x258/0x2f0
[  780.096447][ T5625]  ? __pfx___device_attach_driver+0x10/0x10
[  780.102475][ T5625]  ? __pfx_bus_for_each_drv+0x10/0x10
[  780.108047][ T5625]  ? lockdep_hardirqs_on+0x7a/0x110
[  780.113335][ T5625]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  780.119499][ T5625]  __device_attach+0x2c4/0x450
[  780.125216][ T5625]  ? __pfx___device_attach+0x10/0x10
[  780.131194][ T5625]  ? do_raw_spin_unlock+0xf5/0x210
[  780.136482][ T5625]  ? _raw_spin_unlock+0x28/0x50
[  780.141451][ T5625]  device_initial_probe+0xa1/0xd0
[  780.146549][ T5625]  bus_probe_device+0x12a/0x220
[  780.151510][ T5625]  device_add+0x7d7/0xb80
[  780.156135][ T5625]  usb_new_device+0x99d/0x1620
[  780.161624][ T5625]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  780.167721][ T5625]  ? __pfx_usb_new_device+0x10/0x10
[  780.172990][ T5625]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.178296][ T5625]  hub_event+0x28e8/0x4d30
[  780.182873][ T5625]  ? __pfx_hub_event+0x10/0x10
[  780.188178][ T5625]  ? process_scheduled_works+0xa20/0x14e0
[  780.194005][ T5625]  ? rcu_is_watching+0x15/0xb0
[  780.198884][ T5625]  ? process_scheduled_works+0xa20/0x14e0
[  780.204680][ T5625]  process_scheduled_works+0xa8e/0x14e0
[  780.210380][ T5625]  ? __pfx_process_scheduled_works+0x10/0x10
[  780.216436][ T5625]  ? assign_work+0x3cf/0x5d0
[  780.221155][ T5625]  worker_thread+0xa47/0xfb0
[  780.226676][ T5625]  ? __kthread_parkme+0x71/0x1f0
[  780.232344][ T5625]  kthread+0x388/0x470
[  780.236544][ T5625]  ? __pfx_worker_thread+0x10/0x10
[  780.242040][ T5625]  ? __pfx_kthread+0x10/0x10
[  780.246713][ T5625]  ret_from_fork+0x514/0xb70
[  780.251415][ T5625]  ? __pfx_ret_from_fork+0x10/0x10
[  780.256604][ T5625]  ? __switch_to+0xc89/0x1420
[  780.261381][ T5625]  ? __pfx_kthread+0x10/0x10
[  780.266035][ T5625]  ret_from_fork_asm+0x1a/0x30
[  780.270925][ T5625]  </TASK>
[  780.274052][ T5625] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  780.281386][ T5625] CPU: 0 UID: 0 PID: 5625 Comm: kworker/0:3 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  780.292388][ T5625] Tainted: [L]=SOFTLOCKUP
[  780.296766][ T5625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  780.306872][ T5625] Workqueue: usb_hub_wq hub_event
[  780.311959][ T5625] Call Trace:
[  780.315281][ T5625]  <TASK>
[  780.318274][ T5625]  vpanic+0x56c/0xa60
[  780.322384][ T5625]  ? __pfx__printk+0x10/0x10
[  780.327078][ T5625]  ? __pfx_vpanic+0x10/0x10
[  780.331694][ T5625]  ? is_bpf_text_address+0x292/0x2b0
[  780.337053][ T5625]  ? is_bpf_text_address+0x26/0x2b0
[  780.342982][ T5625]  panic+0xc5/0xd0
[  780.346774][ T5625]  ? __pfx_panic+0x10/0x10
[  780.351261][ T5625]  ? ret_from_fork_asm+0x1a/0x30
[  780.356257][ T5625]  __warn+0x315/0x4c0
[  780.360290][ T5625]  ? __fortify_report+0x6b/0xa0
[  780.365240][ T5625]  ? __fortify_report+0x6b/0xa0
[  780.370148][ T5625]  __report_bug+0x276/0x570
[  780.374711][ T5625]  ? __fortify_report+0x6b/0xa0
[  780.379600][ T5625]  ? __pfx___report_bug+0x10/0x10
[  780.384665][ T5625]  ? lockdep_hardirqs_on+0x7a/0x110
[  780.389935][ T5625]  ? kfree+0x1c5/0x640
[  780.394031][ T5625]  ? usb_start_wait_urb+0x4ba/0x5b0
[  780.399270][ T5625]  report_bug_entry+0x19a/0x290
[  780.404428][ T5625]  ? __fortify_report+0x89/0xa0
[  780.409310][ T5625]  ? __fortify_report+0x8e/0xa0
[  780.414190][ T5625]  handle_bug+0xce/0x200
[  780.418467][ T5625]  exc_invalid_op+0x1a/0x50
[  780.423032][ T5625]  asm_exc_invalid_op+0x1a/0x20
[  780.427922][ T5625] RIP: 0010:__fortify_report+0x89/0xa0
[  780.433431][ T5625] Code: e8 fc 59 60 fd 48 8d 3d 05 a2 8e 0b 45 84 e4 49 8b 37 48 c7 c0 a0 ee 49 8c 48 c7 c1 c0 ee 49 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc
[  780.453089][ T5625] RSP: 0018:ffffc9000430ec08 EFLAGS: 00010246
[  780.459195][ T5625] RAX: ffffffff8c49eea0 RBX: 000000000000003c RCX: ffffffff8c49eea0
[  780.467813][ T5625] RDX: 00000000000000db RSI: ffffffff8c49ed80 RDI: ffffffff9062f600
[  780.475918][ T5625] RBP: 000000000000000e R08: 000000000000003c R09: 1ffffffff20af3a6
[  780.484063][ T5625] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: 0000000000000000
[  780.492068][ T5625] R13: ffffc9000430edc0 R14: 00000000000000db R15: ffffffff8c49ebd8
[  780.500091][ T5625]  ? __fortify_report+0x2c/0xa0
[  780.504977][ T5625]  __fortify_panic+0x9/0x10
[  780.509506][ T5625]  ttusb_dec_send_command+0x681/0x690
[  780.514912][ T5625]  ? __pfx_ttusb_dec_send_command+0x10/0x10
[  780.520841][ T5625]  ttusb_dec_probe+0x8e4/0x2160
[  780.526049][ T5625]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  780.531473][ T5625]  ? __pfx_ttusb_dec_probe+0x10/0x10
[  780.537508][ T5625]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  780.543355][ T5625]  ? __pm_runtime_set_status+0x994/0xc80
[  780.549029][ T5625]  usb_probe_interface+0x653/0xc60
[  780.554181][ T5625]  ? __pfx_usb_probe_interface+0x10/0x10
[  780.559849][ T5625]  really_probe+0x254/0xae0
[  780.564506][ T5625]  __driver_probe_device+0x1e8/0x360
[  780.569827][ T5625]  driver_probe_device+0x4f/0x240
[  780.574928][ T5625]  __device_attach_driver+0x270/0x410
[  780.580432][ T5625]  bus_for_each_drv+0x258/0x2f0
[  780.585314][ T5625]  ? __pfx___device_attach_driver+0x10/0x10
[  780.591239][ T5625]  ? __pfx_bus_for_each_drv+0x10/0x10
[  780.596641][ T5625]  ? lockdep_hardirqs_on+0x7a/0x110
[  780.601865][ T5625]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  780.607706][ T5625]  __device_attach+0x2c4/0x450
[  780.612498][ T5625]  ? __pfx___device_attach+0x10/0x10
[  780.617814][ T5625]  ? do_raw_spin_unlock+0xf5/0x210
[  780.622970][ T5625]  ? _raw_spin_unlock+0x28/0x50
[  780.627851][ T5625]  device_initial_probe+0xa1/0xd0
[  780.632925][ T5625]  bus_probe_device+0x12a/0x220
[  780.637906][ T5625]  device_add+0x7d7/0xb80
[  780.642286][ T5625]  usb_set_configuration+0x1ad8/0x2180
[  780.647820][ T5625]  usb_generic_driver_probe+0x8d/0x150
[  780.653316][ T5625]  usb_probe_device+0x1c3/0x3b0
[  780.658228][ T5625]  ? __pfx_usb_probe_device+0x10/0x10
[  780.663626][ T5625]  really_probe+0x254/0xae0
[  780.668196][ T5625]  __driver_probe_device+0x1e8/0x360
[  780.673523][ T5625]  driver_probe_device+0x4f/0x240
[  780.678590][ T5625]  __device_attach_driver+0x270/0x410
[  780.684002][ T5625]  bus_for_each_drv+0x258/0x2f0
[  780.688896][ T5625]  ? __pfx___device_attach_driver+0x10/0x10
[  780.694817][ T5625]  ? __pfx_bus_for_each_drv+0x10/0x10
[  780.700231][ T5625]  ? lockdep_hardirqs_on+0x7a/0x110
[  780.705460][ T5625]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  780.711317][ T5625]  __device_attach+0x2c4/0x450
[  780.716110][ T5625]  ? __pfx___device_attach+0x10/0x10
[  780.721445][ T5625]  ? do_raw_spin_unlock+0xf5/0x210
[  780.726595][ T5625]  ? _raw_spin_unlock+0x28/0x50
[  780.731475][ T5625]  device_initial_probe+0xa1/0xd0
[  780.736889][ T5625]  bus_probe_device+0x12a/0x220
[  780.741792][ T5625]  device_add+0x7d7/0xb80
[  780.746167][ T5625]  usb_new_device+0x99d/0x1620
[  780.750980][ T5625]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  780.757000][ T5625]  ? __pfx_usb_new_device+0x10/0x10
[  780.762243][ T5625]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.767594][ T5625]  hub_event+0x28e8/0x4d30
[  780.772090][ T5625]  ? __pfx_hub_event+0x10/0x10
[  780.776876][ T5625]  ? process_scheduled_works+0xa20/0x14e0
[  780.782636][ T5625]  ? rcu_is_watching+0x15/0xb0
[  780.787432][ T5625]  ? process_scheduled_works+0xa20/0x14e0
[  780.793180][ T5625]  process_scheduled_works+0xa8e/0x14e0
[  780.798785][ T5625]  ? __pfx_process_scheduled_works+0x10/0x10
[  780.804816][ T5625]  ? assign_work+0x3cf/0x5d0
[  780.809447][ T5625]  worker_thread+0xa47/0xfb0
[  780.814080][ T5625]  ? __kthread_parkme+0x71/0x1f0
[  780.819057][ T5625]  kthread+0x388/0x470
[  780.823157][ T5625]  ? __pfx_worker_thread+0x10/0x10
[  780.828291][ T5625]  ? __pfx_kthread+0x10/0x10
[  780.832917][ T5625]  ret_from_fork+0x514/0xb70
[  780.837541][ T5625]  ? __pfx_ret_from_fork+0x10/0x10
[  780.842718][ T5625]  ? __switch_to+0xc89/0x1420
[  780.847428][ T5625]  ? __pfx_kthread+0x10/0x10
[  780.852058][ T5625]  ret_from_fork_asm+0x1a/0x30
[  780.856886][ T5625]  </TASK>
[  780.860531][ T5625] Kernel Offset: disabled
[  780.864864][ T5625] Rebooting in 86400 seconds..