last executing test programs:

14.826816785s ago: executing program 1 (id=1624):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000100)='V', 0x1)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)
syz_usb_disconnect(r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_emit_ethernet(0x76, &(0x7f0000000080)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x40, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x10, 0x70, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x3, "91"}, @window={0x3, 0x3, 0x7f}, @fastopen={0x22, 0x4, 'yU'}, @mss={0x2, 0x4, 0x7}, @timestamp={0x8, 0xa, 0x7, 0x1}, @timestamp={0x8, 0xa, 0x3, 0x10}, @nop, @exp_fastopen={0xfe, 0x4}, @mss={0x2, 0x4, 0x8}]}}}}}}}}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd25, 0x25dfdbfd, {0xa, 0x80, 0x14, 0x0, 0xfc, 0x3, 0xff, 0xa, 0x3600}}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x240408d4)

9.946296996s ago: executing program 1 (id=1639):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
connect$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x2, 0xf0}, 0xff}, 0x18)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048040}, 0x44450)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket(0x2, 0x80805, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0xa, 0x801, 0x84)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={<r7=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48)
r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
fcntl$dupfd(r8, 0x0, r8)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x6, 0x7f, @buffer={0x2, 0x58, &(0x7f0000000240)=""/88}, &(0x7f0000000380)="e31ffffff200", 0x0, 0x0, 0x0, 0x1, 0x0})

8.328394571s ago: executing program 4 (id=1642):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040))
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x13, 0x6, 0x466, 0x5}})
rmdir(&(0x7f0000000100)='./file0\x00')
r2 = syz_usb_connect$uac1(0x2, 0xd6, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x4, 0x0, 0x80, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x9}, [@processing_unit={0x8, 0x24, 0x7, 0x8, 0x5, 0x8, 'K'}, @selector_unit={0xa, 0x24, 0x5, 0x2, 0x40, "bf472dda00"}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x1, 0x1, [0xa], 0xa6}, @extension_unit={0xb, 0x24, 0x8, 0x6, 0x9, 0x5, "1978720c"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5, 0x2, 0x0, 0x1, "a9b818a0d270c6daea"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x80, 0x1, {0x7, 0x25, 0x1, 0x80, 0x23, 0xd5d6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0xbd}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0x96, 0xf1, "a7"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x0, 0x4}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x2, 0x6, 0xe, "", '0E'}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x8, 0x5, "ba08"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xe0, 0x1, 0x4, {0x7, 0x25, 0x1, 0x83, 0x8, 0x400}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xc, 0x2, 0x4a, 0x10, 0x81}, 0xe2, &(0x7f0000000280)={0x5, 0xf, 0xe2, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x0, 0x4, 0x1ff}, @generic={0x1e, 0x10, 0x3, "31402bafdde0b4cef63937ce23bbcf14db40918be449d777b3a741"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x9, 0x2}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x6, 0x1e, 0xc, 0x8, 0x0, 0x4}, @generic={0xa0, 0x10, 0xb, "a5043acbc8280207bc28a125e3ca3132569e51d9a8c64adc722c25cd104778f99c66a8a047d91338d8db61aff081584d2c21205109b6fc32c820073223b24e9bd269df18ebf1daaf5837d5ee703d8bfe7646523d417675134ec9cb42437313edb6ffa4c4f47e87994e8922f35711df87979b8f960946e3a56f2a4a37ea94ac5cff37432d6bd1b903d7d536e983f44ba3d1a95f369682c80fb1aadaf4b9"}]}, 0x4, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x408}}]})
syz_usb_control_io$uac1(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000500)={0x20, 0x10, 0xc8, {0xc8, 0x4, "f919c1f5f8c8c1e8ea8cc27c0b429e7727c958301c12a8d6f556b4fe71331d84808507d1338381865119c100fdb691e12b3b19c337b8432bca1c0b2a0192c622310b8e6f66cf528f5eba6bb1bf1280316f89254fca3f2aa57139e01c14fc85754d2ddd8cf42c5c2f756535cbcba026b1a476a1e6c6d4d8889ee68f1446b74f2e5a42cda8db545d86b7be1a5c37af43a42e1c3655ec95b775025d9de29945641b811f2a2f1c9371e81e897bc946869fe63a49a6a937ce17a183103208674363a77961c4ee4e0d"}}, &(0x7f0000000600)={0x0, 0x3, 0x94, @string={0x94, 0x3, "cd2a67194594a1a5c52faa4ebe45bdf045fcc2713900a6ca575eb15ba648b1be88384b80f08673303a44c2539fbc81891b97c2ffed20ea78ba1b98d4379c7794f2748d5335efc934e42d4c1721461bcced2ce92352451e0290ff3fce77ebd197468a567cf5fb342d49b151d924f5f08d4c539d81755167f56388507652a4711152d1371a190a3c6ff73d879f9fbea664e288"}}}, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x60, 0x18, 0x68, "e7789a14046f4feb0146a79e072728c37ba241bc61f62f0332ab1da14f97adbf19399690814452a198d79cc061727a0bcd3123f27e8dba9a40348ff381eb1f0de2ccfb9c5c4160822f9683182fef26e6bf4d817e85987e0723dc5d5e2987956c5d75938d0e563f61"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0xf2}, &(0x7f00000007c0)={0x0, 0x8, 0x1}, &(0x7f0000000800)={0x20, 0x81, 0x1, "d0"}, &(0x7f0000000840)={0x20, 0x82, 0x1, "ff"}, &(0x7f0000000880)={0x20, 0x83, 0x3, "192129"}, &(0x7f00000008c0)={0x20, 0x84, 0x1, "9e"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "746f0e"}})
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000a00)={'pimreg\x00', &(0x7f00000009c0)=@ethtool_cmd={0x1f, 0x6, 0x8, 0x4, 0x1, 0x1, 0x5, 0x8, 0xe, 0xe, 0x844, 0x60, 0x3, 0x7, 0x8e, 0xffffffdb, [0x2, 0x5]}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x121000, 0x0)
r4 = open$dir(&(0x7f0000000b00)='./file0\x00', 0x40000, 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000a80)='&\xce\x00', &(0x7f0000000ac0)='./file0\x00', r4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c40)={'tunl0\x00', &(0x7f0000000b80)={'sit0\x00', <r5=>0x0, 0x20, 0x20, 0xfffffffb, 0xffffdb24, {{0x19, 0x4, 0x0, 0x5, 0x64, 0x67, 0x0, 0x7, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp={0x44, 0x1c, 0x53, 0x0, 0x3, [0x55a4, 0xac, 0x7, 0x6, 0x7fffffff, 0x7]}, @timestamp={0x44, 0x8, 0xbf, 0x0, 0x0, [0xff]}, @noop, @cipso={0x86, 0x2a, 0x0, [{0x1, 0xd, "5f18a4721c8e046a76e019"}, {0x5, 0x2}, {0x5, 0x5, "c339cf"}, {0x6, 0x10, "74cdbc89eeb69c857cdf455f43ca"}]}]}}}}})
fstat(r3, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)=@updpolicy={0x214, 0x19, 0x10, 0x70bd25, 0x25dfdbfc, {{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 0x4e21, 0x9, 0x9, 0x0, 0xa0, 0x11, r5, r6}, {0x8, 0xf3f, 0x8, 0xfff, 0x9, 0x2, 0x0, 0x8}, {0xe, 0x1501, 0x80000000, 0x2}, 0x2edb20ba, 0x6e6bb0, 0x1, 0x1, 0x3}, [@srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @replay_thresh={0x8, 0xb, 0xc100}, @proto={0x5, 0x19, 0x1ae}, @tfcpad={0x8, 0x16, 0x8001}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}, @algo_aead={0x101, 0x12, {{'ccm-aes-ce\x00'}, 0x5a8, 0x60, "904aad7e30cbc6e2599dd60df4b1362ea46ce356b9aa34623359037f3418b2d41791395f7c81919f2b8755f7a20576d1421b7387e6697856175ccf59871b6f613391ecfd7a23dc20507d3aa138390da6bd3eba88e3fba70bfb65ab75ed6ae4cc88e79afee7d0df05bd5847aee93456676d696c102aa5d96f8000c6b72969a081ed401f7debe3b6fd6b195375e18c4f3bef6519c76c5c30febc5e0be48844bacff6d4c85553bfdebcf4a9c5584492c5e89c0642d299"}}, @lifetime_val={0x24, 0x9, {0x101, 0x5, 0xb, 0x8}}]}, 0x214}, 0x1, 0x0, 0x0, 0x8804}, 0x4000)
r7 = getpgid(0xffffffffffffffff)
fcntl$setownex(r0, 0xf, &(0x7f0000000fc0)={0x0, r7})
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001000)='/sys/power/wakeup_count', 0x105002, 0x0)
getpeername$l2tp(r8, &(0x7f0000001040)={0x2, 0x0, @local}, &(0x7f0000001080)=0x10)
execveat(r4, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001180)={[&(0x7f0000001100)='\\>@,\x01%\x00', &(0x7f0000001140)='\x00']}, &(0x7f0000001280)={[&(0x7f00000011c0)='/dev/kvm\x00', &(0x7f0000001200)='ccm-aes-ce\x00', &(0x7f0000001240)='sit0\x00']}, 0x800)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f00000012c0)={0x7, 'dvmrp0\x00', {0x8}, 0x4})
sendmsg$nl_xfrm(r8, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)=@flushsa={0xa8, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfe, {0x3c}, [@algo_crypt={0x92, 0x2, {{'xts(aes-asm)\x00'}, 0x250, "838c904ce8d03ac7e27cb816ed0f62331e11d8b0b2a97a3b03afe0ab822b56c917307ba56ec121fdf2569bde323ca41482785caefa48e79de8736bb066497375a8fb07fc2e2771908239"}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4001}, 0x8000)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x5, 0x4)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000015c0)={0x24, &(0x7f0000001480)={0x0, 0x7, 0x6c, {0x6c, 0x0, "1836e64e0ae5749db9a3852db8596b9f6c4cfa25f3b1cfd2fcf7c7e6645bc07b752305204cb34ee77310092f62bd0678f17bdd452f21929a26e77ee44f07ba9bf0bd85f5e4bb2d7ba884e3fd4f79be2d902468a26ae291b1b5099215dcdfc06b4d1d8acfd61604f88f56"}}, &(0x7f0000001500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000001540)={0x0, 0x22, 0x11, {[@local=@item_012={0x1, 0x2, 0x3, '`'}, @main=@item_4={0x3, 0x0, 0x0, "daf3fdb5"}, @main=@item_4={0x3, 0x0, 0xc, "c68b9cbf"}, @main=@item_012={0x2, 0x0, 0x9, "4bc4"}, @main=@item_012={0x1, 0x0, 0x8, "88"}]}}, &(0x7f0000001580)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xf8, 0x1, {0x22, 0xcf6}}}}, &(0x7f0000001880)={0x2c, &(0x7f0000001600)={0x20, 0x30, 0xbc, "e6603d953a6ce590672355a8737d11b32298479db9ea1eee3c0ee1da9d1bdcedbcb9cee12263ef7cac47bcff2e3ec46828c11c8f95bcc15209a22ffe01ff457bdeb21ade74b092b73ea9a562d11cb082e3c04f21af1037a50d1de199f3e797ab873298758d7d8f76782b75b75c46735f333689cb6ceaf0f1020ecb4cd0310697898f20ac7bc70a9b814862c1c20d5cb7a4f9be9c6289278f6058add68b94388146efbf363a99b1da335b578a56b35d96768ac399c98c4e4ed4a0a425"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001780)={0x20, 0x1, 0xb2, "1e4a70b300fa944bbe577e7f405f21adfcdff7a9266368af2baa727db592a36300a9e9bd56884ede8b5527226f1fa435e7bb4cfd76254398bacc753c37db88c5d0c6fd49935ca6131c983ae25f5857532894df79615ecd358f8cb05d0cd43139f90e2960ce51597e12e9c493e5a57399ee2ab19b36c58b9db8ef797b32b237e8ffbace1fc5827c5eed41278151e45465483928e7184d5992857c2f6af77f27c53dc39b08abd4580d5c3d451b7349c0046ce6"}, &(0x7f0000001840)={0x20, 0x3, 0x1, 0x29}})
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f00000019c0)={0x14, &(0x7f00000018c0)={0x20, 0x3, 0x3a, {0x3a, 0x9, "5d5075bcf0eff8fcbc12c456874cffc2a76b60b9b971630f6805a1dff8aee1e9fb88230a87604d507e51d80f83b41a76c6d8b363ad47dc78"}}, &(0x7f0000001900)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "2d4f093488d375fe8dbd4a44c7b0333ec52fa201d4df42c46743a8f02bd9d53bebc1fcfaa9eb8013ca608ee88af60037956f2156a1a49674ffe77ac4d4301b39da0d6a61487e12059fed6a80b2b7c539a19a1438eb66f78691364c4a8e278ea1d194ad62ce426ba4f9485653523e336e41ba5f72873f6c11d6e6"}}}, &(0x7f0000001b80)={0x2c, &(0x7f0000001a00)={0x20, 0x14, 0x51, "d17085d2377781c28a1044949a03b2f97d6ae9cd38488a0985021ba287846c94a8bc4b17173d5a74f29a5034b70862b320bb803ab78d3dea28de9dbd039ffc4b89a732f5c8f8fc481442f6445c549c762b"}, &(0x7f0000001a80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001ac0)={0x0, 0x8, 0x1, 0x94}, &(0x7f0000001b00)={0xc0, 0x5, 0x2, "9933"}, &(0x7f0000001b40)={0x40, 0x5, 0x6, "b0f0b4485855"}})
recvmsg$can_raw(r8, &(0x7f0000001f80)={&(0x7f0000001bc0)=@can, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001c40)=""/58, 0x3a}, {&(0x7f0000001c80)=""/141, 0x8d}, {&(0x7f0000001d40)=""/183, 0xb7}, {&(0x7f0000001e00)=""/103, 0x67}], 0x4, &(0x7f0000001ec0)=""/172, 0xac}, 0x10124)
utime(&(0x7f0000001fc0)='./file0\x00', &(0x7f0000002000)={0x15, 0x400})
read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_WRITE(r8, &(0x7f0000004080)={0x18, 0x0, r9, {0xfffffff9}}, 0x18)
openat$incfs(r8, &(0x7f00000040c0)='.log\x00', 0xb39d46966763b3e9, 0x179)

7.919952838s ago: executing program 3 (id=1647):
ioprio_set$uid(0x3, 0x0, 0x0) (async, rerun: 32)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) (async, rerun: 32)
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r0, &(0x7f0000001ec0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/77, 0x4d}, {&(0x7f0000000140)=""/108, 0x6c}], 0x2, &(0x7f0000001bc0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000001c0)=""/17, 0x11}, &(0x7f0000000200), 0x4}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0xa}, {&(0x7f0000000240)=""/115, 0x73}, &(0x7f0000001600)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/233, 0xe9}, {&(0x7f00000013c0)=""/34, 0x22}, {&(0x7f0000001400)=""/169, 0xa9}, {&(0x7f00000014c0)=""/192, 0xc0}, {&(0x7f0000001580)=""/95, 0x5f}], 0x6, 0x1, 0x35}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80}, &(0x7f0000001680)=0x401, &(0x7f00000016c0)=0x4, 0x5, 0xffffffff7fffffff, 0x5a6, 0x0, 0x0, 0xf37a}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9b9}, &(0x7f0000001700)=0x1ff, &(0x7f0000001740)=0xffffffffffffffff, 0x9, 0x8000, 0x5, 0xffffffffffffffff, 0x8, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x6}, &(0x7f0000001780), &(0x7f00000017c0)=0x1a00000000000000, 0x9, 0x10001, 0x7, 0x800, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001800)=""/216, 0xd8}, &(0x7f0000001900), 0x4}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7, 0x7}, &(0x7f0000001940)=0x1, &(0x7f0000001980)=0x8, 0xd0, 0x7, 0x100, 0x8000000000000000, 0x32, 0xc0c1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x401, 0xfffffff5}, &(0x7f00000019c0)=0xb, &(0x7f0000001a00)=0x2, 0x4, 0x9, 0x8, 0x5, 0x20, 0x8}}, @fadd={0x58, 0x114, 0x6, {{0x5, 0xd}, &(0x7f0000001a40)=0x8, &(0x7f0000001a80)=0x8, 0x4, 0x1, 0x2194, 0xfffffffffffffe01, 0x0, 0x8000000000000000}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001ac0)=""/133, 0x85}, &(0x7f0000001b80), 0x20}}], 0x2e8}, 0x20000040)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c831, 0xffffffffffffffff, 0x0)

7.604950415s ago: executing program 3 (id=1648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000206010100000000e7ffffff0100ffff0c00078008000b000000cd200500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x58}, 0x1, 0x0, 0x0, 0x4044081}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[])
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000001c00)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0)
ioctl$SNDCTL_TMR_METRONOME(r5, 0x40045407)
add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0)
r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000500)=[@rdmsr={0x32, 0x18, {0x89d}}, @wrmsr={0x1e, 0x20, {0x97b, 0x87}}, @out_dx={0xaa, 0x28, {0x8e90, 0x5, 0x2}}, @rdmsr={0x32, 0x18, {0x6b1}}, @wr_crn={0x46, 0x20, {0x3, 0x8}}, @wrmsr={0x1e, 0x20, {0xfa8, 0x6}}, @in_dx={0x82, 0x20, {0xc876, 0x3}}, @code={0xa, 0x51, {"c421d9d4d466410f382118460f2171410f01cfc461177de7f3440fc7b00e000000f30f1ec60f20e035080000000f22e0b9044d564b0f32c4c1356da19b000000"}}], 0x129})
syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000280)="660fdcf70fc774b50ac4c1fd7d1b66baf80cb8c332b180ef66bafc0cecc4e1965173e966b8e0008ed0c744240069ae0000c74424028d000000c7442406000000000f011c2466b8cf000f00d866baf80cb82c7de28eef66bafc0ced3ef0809201000000ca", 0x64}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), 0x0)
unshare(0x8040480)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

6.567376202s ago: executing program 3 (id=1651):
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x80000661, 0x0, 0x3, 0xd59f7e, 0x5, 0x9, 0x10, 0x3, 0x2, 0x2800, 0xf20, 0xffffffff, 0x0, 0x1, 0x10, {0x401}, 0x8, 0x9}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r5, @ANYBLOB="0802000000ff372ce03e9e393afb0000"], 0x24}}, 0x0)
r6 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ppoll(&(0x7f0000000040)=[{r3, 0x9620}], 0x1, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000)
r7 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
sendmmsg(r7, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0)
r8 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x7fffc}, 0xc)
quotactl_fd$Q_GETFMT(r6, 0xffffffff80000400, 0x0, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYRES32=r9], 0xa0}}, 0x20044000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRESHEX=r7], 0x48}}, 0x2400c080)
fsopen(&(0x7f0000000080)='squashfs\x00', 0x1)

6.477625806s ago: executing program 1 (id=1653):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x800, 0x4, 0x5, 0x0, r1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) (async)
ftruncate(r0, 0xc17a) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bfffffff903000006a1082000000000204000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48)

6.385029928s ago: executing program 1 (id=1654):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000000c0)=0x1, 0x4)
keyctl$set_reqkey_keyring(0xe, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x3b)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, 0xfffffffffffffffe, 0x29)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x9, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x1}})
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffd30, 0xffffffffffffffda, 0x0, {0xfffffeff}}, 0x18)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r5, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

6.220047722s ago: executing program 4 (id=1655):
socket$inet6(0xa, 0x2, 0x0)
syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000d, 0x100011, r0, 0x0)
socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000078000000090a010400000000000000000100fffd08000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c000240000000000000000308000440000000010c000140fffffffffffff7ff080003"], 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure_enabled\x00', 0x26e1, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

5.917977117s ago: executing program 4 (id=1656):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x2, 0xffff133a, 0xb], [{0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x400, 0xfffb}, {0xffffffff}, {0x2000004}, {}, {}, {0x7}, {0x2}, {0x6, 0xff}, {0x8, 0xfffffffe}, {0x0, 0x5}], 0x10}) (async)
r1 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xc, 0x2, 0x8, 0x40, 0x10, 0x8}, {0x9, 0x5, 0x6, 0x2, 0x0, 0x10, 0xd2, 0x8}, {0x9, 0x5, 0x5, 0x3, 0x10, 0x8}}}}}}]}}, 0x0)
syz_usb_disconnect(r1)
r2 = dup(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180), &(0x7f0000000200)=[0x0, 0x0, 0x0], <r3=>0x0, 0xe0, &(0x7f0000000400)=[{}], 0x8, 0x10, &(0x7f0000000500), &(0x7f0000000480), 0x8, 0x45a, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x17, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000440), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xb30}, 0x10, r3}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x1e, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x71, 0x10, 0x48}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000100)=""/195, 0x41100, 0x8, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000540), 0x8, 0x10, &(0x7f0000000000), 0x10, r3, r4}, 0x94)

5.788722079s ago: executing program 0 (id=1657):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0xa, 0x800, 0x6d090cb3)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1, 0x7, 0x0, 0xb63e}, 0xc)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x108001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xfaf}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, <r5=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc, r5})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x6, r5, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2})
ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"])
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x3)

4.641247053s ago: executing program 4 (id=1658):
prctl$PR_CAPBSET_READ(0x17, 0x8)
r0 = syz_open_dev$vim2m(&(0x7f0000000300), 0x7ffd, 0x2)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xd, 0x1, 0x1, 0x0, 0x7})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0xfffffffd, 0x4005, 0x1, {0x1, @win={{}, 0x0, 0xfffffff8, 0x0, 0x0, 0x0}}})

4.344897005s ago: executing program 2 (id=1659):
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac007fffffffffffffff00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

4.303520355s ago: executing program 0 (id=1660):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000540)={0x20, 0x14, 0x2e, "2a69ccab11534c92d9b8d6693a08b89d68cffa8eb7dda4449a6af175b0edff377ebd02d43f0d6265d36c4f887aac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)

4.009498161s ago: executing program 3 (id=1661):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000120000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020056797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f40"], 0xdc}}, 0x4000000)

3.936932993s ago: executing program 2 (id=1662):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x2, 0x40)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000003800)=[{}, {}, {0x0, 0x80000000, 0x0, {<r1=>0x0}}, {}], 0x0, 0x0, 0x0})
r2 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x7d, 0x0, 0x1, [@nested={0x4, 0x8c}]}]}]}, 0x24}}, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000003a40)={{0x80000000, r1, 0x4, [0x7f, 0x752]}, {0x80000000, r1, 0x1, [0x10000, 0x4]}, 0x0, [0xff5, 0x4]})
syz_open_dev$media(&(0x7f0000000000), 0x2, 0x40) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000003800)=[{}, {}, {}, {}], 0x0, 0x0, 0x0}) (async)
socket(0x848000000015, 0x805, 0x0) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x24, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x7d, 0x0, 0x1, [@nested={0x4, 0x8c}]}]}]}, 0x24}}, 0x0) (async)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000003a40)={{0x80000000, r1, 0x4, [0x7f, 0x752]}, {0x80000000, r1, 0x1, [0x10000, 0x4]}, 0x0, [0xff5, 0x4]}) (async)

3.893662617s ago: executing program 4 (id=1663):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e9090400000103000000092105000001220500090581030002"], 0x0)
syz_usb_connect$cdc_ecm(0x5, 0xcd, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x1, 0x1, 0x3, 0x60, 0xff, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, '\b'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x25c2, 0xaa, 0x9}, [@mdlm_detail={0xc, 0x24, 0x13, 0x1, "ff2291b0e731d181"}, @mdlm_detail={0x6a, 0x24, 0x13, 0xc, "e9c5988d953d1b7047b315ee68255aaf50028ed2bf242420673760dc8b87e3ad7da99c1e18c2538af80a985a48a4070962d1c7d098da62383dd6278f60ebf85db1f8726f0e8776791e878dc5dc6d1f86fcb9d1e5f0d6d1eedd172518219119baa87af85f51dd"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x9, 0x18, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x4, 0x70, 0xd}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1c, 0x5, 0xf}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x4, 0xc6, 0xff, 0xa}, 0x25, &(0x7f0000000140)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7d, 0xf0f, 0x9, [0xff0000, 0x30, 0xc030, 0x30, 0x30]}]}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3409}}, {0xcd, &(0x7f0000000200)=@string={0xcd, 0x3, "e2e0d8098c52d557e06a681f9702323a547bf5a4c280a779a0eda59784a5232d0fffe849d76fd0130816213252ea685c25c21467ade59532e01348d49383466bb150d32638b89f327aa190db7e1ffc0aedaab043a501e4fed2f8ef30a4a8f723be1d9f0a32af78be1139ea0a76d8a9280792f182bf92e0d37f8d2edaa8914e632453bf8b16e2a32e80915ae91b775e46cd9fa7289bf6508f316452286d70f1a2b92a820933a8408382ea69612c8c1eb489606958dd92b4c09538b8b854994ce1d63a761fe52a8e428a7c35"}}]})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="19d081c289d69086553547e7b696db201338e33ad6b59faaf3c3c45b1b9422ad3a0c331cbcd22b80e8c26cb93e47b5ac49a645173fba9c7769af0eab4eca28595bafaf13453e85846ba97d9edaf525da8d4b12e7b30495c108a862a8e3ff8b4735009cc9378ec5d74eac677dd94d618dba1ff899a18435c491cecf9d762956906b4edd98ec36f6d57952", @ANYRESHEX=0x0, @ANYBLOB="ade92e0ca0dac046ab16de9910eee6648f9bee414dee8a5cb9ca0d41fd1e12ef4fedbeecd419c293ebd41c4f44a653a3e788fed5644ff0408068615468f38651f3771ef16f592ca94a3d661b2b96e4fc03657e1f65b5b830f972b9b4125751c51e9b4f3bbee99faf122ecc199d41abf553363a0b2880f497fc987122f616ef4425988535f0350d67eb41c4afe09766cdd942a5c07a94177d0d0ef011c39fc5050e8670a95b15f7240bbba7e89449b4186251ccd59a80cb994f7d095cfba6d9fbf1888235af87854b33b17ba4eb45a632b900c66f915676636d3286bb181d093073162f5b8d6d62a31c", @ANYRESHEX, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000300)="106b")

3.874023317s ago: executing program 1 (id=1664):
getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, 0x1, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x43e5280e}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x88}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0xc141) (async)
r0 = socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/98, 0x62}, {&(0x7f00000002c0)=""/69, 0x45}], 0x2, &(0x7f0000000380)=""/10, 0xa}, 0x40) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x80, 0x0)
recvmsg(r0, &(0x7f0000000840)={&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/71, 0x47}, {&(0x7f0000000540)=""/172, 0xac}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000006c0)=""/185, 0xb9}, {&(0x7f0000000780)=""/51, 0x33}], 0x5}, 0x40000020) (async)
ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000880)) (async)
pwritev2(r0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="2119c558fa179b9a3762c46fe9ead401de88c4d3b87f61fc756e375c9d16287e6cca435c2d55f5f69d458f", 0x2b}, {&(0x7f0000000900)="e60d11b75d92006bea4a471570d24d64b0fc80b31d3753a7aab2b8a38ca118a190de0c738b24f5b00f6801dae7ad62208e3bf817980e9f9335e17cbfd83fe8d3d39f7954fd27a46e1b076cd4b830018b264d16f6", 0x54}, {&(0x7f0000000980)="18bb5686c2a7e87d36103314bf73d5", 0xf}, {&(0x7f00000009c0)="08268a1c7e56aaa502d833945c8128bc4b029521277ef14532e80b22e327bd515c3f32b42e29cb759fb0f8ebd6cccd447703726ee5c132b7503c1a2c7fb553f36859f94958b161f013b84cb09bf587058c9f3a45208e2d9d85031a61c6f6558543ea8fec48e079d369f9e4536f47288ebf1db5993dc02e9fc27f03a5e72ffe63fce0d44c88e1c97379d7d8defd46fa47c1e2a434fb337997cb407a262bd70828448f0f780200689f5a6ee6c265c823cf5ccfc703a259", 0xb6}, {&(0x7f0000000a80)}], 0x5, 0x9, 0x5d5, 0x2)
r3 = socket$igmp6(0xa, 0x3, 0x2) (async)
getsockname$packet(r2, &(0x7f0000000b40)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14)
setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000bc0)={0xffffffffffffffff, 0x0, 0x1, r4, 0x2}, 0xc) (async)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0xa4, 0x0, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) (async)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000dc0), r2)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x901504}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x2c, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x43bd}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x68cf}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40808d0}, 0x4800) (async)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x10, 0x3f6, 0x800, 0x70bd25, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x894) (async)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x60, 0x140a, 0x100, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000005}, 0x20000801)
syz_usb_connect(0x2, 0x525, &(0x7f0000001100)={{0x12, 0x1, 0x110, 0xde, 0xc7, 0xd, 0x8, 0x2013, 0x1faa, 0xe269, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x513, 0x3, 0x5, 0xfa, 0x10, 0x8, [{{0x9, 0x4, 0x64, 0x7, 0x2, 0xcf, 0x84, 0x69, 0x9, [], [{{0x9, 0x5, 0x87, 0x11, 0x10, 0x9, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3d, 0xd845}, @generic={0xd1, 0x5, "000842f7612c2c06a1d171c70285b219e0c9cd9e3b4089a662700de987173056fa86fe4d36cd07e031bcc6c85131a5edc8907fac9fa12393bc73f7ee59844e8d9e2668dd40f3e3587dae6d27dd53d7aac3a78108aba05b5cc9e93a811bb8f4916d3eda6ef739076eaafb25f48662f476e28037dd19ee98ab857678041f89dd720c36f80c921b1afd8212b91dc3b1ed5e2a8592ed57d95307b9c46d2abe87d72cf36f89eaa3a26701fa947452c710f8c37a9c4a50613484673ad9ad543af14a790aeba74b96b96455436d469e99cc2d"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x4, 0x2, 0x9, [@generic={0x22, 0x23, "fac276a4859cfbebdadf370aa68d14b3de70bcd34ff05e8f118f812208710fd6"}]}}]}}, {{0x9, 0x4, 0xb0, 0xf9, 0x0, 0xb0, 0xd8, 0xb7, 0x58, [@uac_control={{0xa, 0x24, 0x1, 0x108, 0xf}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x101, 0x4, 0x2, 0x9, 0x2, 0x1}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "9c6d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0x2, 0x1}, [@mdlm_detail={0x90, 0x24, 0x13, 0x4, "34e6f077e9a010a6a048f621d1205f5d8a6c7f9e23511750dee64c0679ac24d9820f908aa1d11190444096e51ccf0c50583914313bbf924dd3317087353022babfe7ef106d0d1024880fc37f1d4f11ee2645aaf840e652434ed52c8d228adb90214870b64a62dc41240066d7c4d021ba70a8cbb7eb7ad466d925d8fa20080d3ba817f39423eb7fa76ce6d28c"}, @mdlm={0x15, 0x24, 0x12, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x5, 0x1, 0xff}, @obex={0x5, 0x24, 0x15, 0x1811}]}]}}, {{0x9, 0x4, 0xbc, 0x1, 0xd, 0xf0, 0x33, 0xeb, 0x3, [@uac_control={{0xa, 0x24, 0x1, 0x9eab, 0xa}}], [{{0x9, 0x5, 0x8, 0x4, 0x40, 0xf9, 0x5, 0x3, [@generic={0xd, 0x21, "6a0b2515c9566efdf75d73"}, @generic={0x85, 0xc, "937a38931ad6419656e035996d42e185919b7d5d849e8ea17a705fbf86c668ad72817bcec6be06c4a0dd236fcc5b8aba30e5fe9afacac65b4fdaad3c4b2ac6304d38a96a8d72c8b8d27bab13a2f19d01dda81993879d8d2f4d5d905c47e632d7c5133d6864fc6b98de7a80b560220ea04909521ba0af4ebeedaef0c491435a4c6d1eec"}]}}, {{0x9, 0x5, 0xa, 0xa, 0x20, 0x4, 0x2, 0x7b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x800}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0xa, 0x7, 0x24, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xd, 0x1}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0x6, 0x6}}, {{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1000}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x7, 0x87, 0x80, [@generic={0x2b, 0xb, "71118a9f5a386fb298421b1be260e04534dbbdbb401ccb588c882db13a489a4ab32219149e42927609"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x80, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0xcb5}]}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x4, 0x4, 0x5f}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0xe, 0x7, 0x5, [@generic={0x65, 0x41, "be069e6cd20f63b8d966b5c4732ba5e195f23fe8f089c92ffdaf1f909e6f0aa8fa2be8dd4694c0aa6fdf6b5a77e0b4cf4bba735984b3c142b1902568ede3353dc7b0290f73b068dc3d5dc3710e1e602d43b54f61d85277e5f14c4e10e84f35f96bb6c2"}, @generic={0x13, 0xe, "3c950e88fa076be2fba5c532973ead1053"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x3ff, 0xf6, 0xc0, 0x6, [@generic={0x9d, 0x3, "046adb65eeaae0018c16fe06172884f364746bfa699137f0bf88c53c94fb17c7da93dd2e9e2be7d84f89f3774f3b8086785b844ea1a7f1e552409282deb16b67a5e0b5ebd6892231e5f4fcbc5f52b54fc364e21aa77177ac8f87fbcd709cb33157d835eb25b489e543d3684f35f0ea527812dde76ba71fcfd40a07916b6fb5a8f410a46d426e8871fdf0a19cf82889e0e6ea29742c68158dcf7ff7"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x8, 0x4, 0x81, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x4}]}}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x3, 0x10, 0x8, [@generic={0x26, 0x5, "5fada02d3de517f11b6f66a4ac642005c2004e1f85bec6cff015dc49d23e22e280107c91"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xe6, 0x1}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x2, 0x8, 0x2, [@generic={0x56, 0xd, "18278a3e277ae0e606490ace48649825aa470d8e487170ebbf4f2e84601d0b12dd3f3bb5379bfdc9e3e9584383cd75d2eb5105031fc66f52932d24a471a4f7ff2ae21843ff51c8b2b4e1c273cfb49e501846c050"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0xb}]}}]}}]}}]}}, &(0x7f0000001940)={0xa, &(0x7f0000001640)={0xa, 0x6, 0x0, 0xfa, 0x1, 0x0, 0x8, 0x1}, 0x110, &(0x7f0000001680)={0x5, 0xf, 0x110, 0x2, [@generic={0x7a, 0x10, 0xb, "f789ff4fed9e4fe4a4e7aea81cc0f2ee09fa029e73a846370018132f32650203be9b9e171ae32fa57e8ed59c6bed0b85246543d9aa05de26d5ae2964535458f91adf0554f45eb9c5d3abd86ed918a1abc6e6d4a2fffec2a491f7ae412ddeb2fd91776d0c9143567136cd541c595e19b3a13c2d91096afa"}, @generic={0x91, 0x10, 0xa, "06955484056b038729c1618fbc37f9b58ec5a9afeb394a6a62b3c7d26e1dc3d0a34696a1a520bdfbd2055a5d7a80225bc80c3fbbb01a6703a42655e95c0fc7c5d5484bf52971e14a9f7a26e66d86cdb817302c2dfcfeb9d6e17647972c4d2c7fadc1b87288a18f9827fb61514a150a8aa9c740923d79aa9fe5194ccaf6c81ebc263839ac0fb7060763d3a525ab17"}]}, 0x2, [{0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x405}}, {0x102, &(0x7f0000001800)=@string={0x102, 0x3, "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"}}]})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f0000001980)=0x27015eeb, 0x4) (async)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000019c0)={{0x1, 0x1, 0x18, <r7=>r1, {0x2}}, './file0\x00'})
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001a40)=[@textreal={0x8, &(0x7f0000001a00)="66660f3821aa0c890f237cf20f080f090fc77100660f3882b800800f01cbbaa100b000ee0f073e0fc728", 0x2a}], 0x1, 0x0, &(0x7f0000001a80)=[@cr0={0x0, 0x20000002}], 0x1)
close(r0) (async)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000001ac0)={0xfffffffffffffffd, 0xeeee0000, 0x2, r7, 0x3}) (async)
r8 = syz_create_resource$binfmt(&(0x7f0000001b00)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff) (async)
ioctl$EVIOCSABS20(r7, 0x401845e0, &(0x7f0000001b40)={0x0, 0x0, 0x80000000, 0x0, 0x4}) (async)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000001b80), 0x80000, 0x0) (async)
setsockopt$sock_int(r6, 0x1, 0x2d, &(0x7f0000001bc0)=0xc0fa, 0x4) (async)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000001c00)={0xc}) (async)
syz_80211_inject_frame(&(0x7f0000001c40)=@broadcast, &(0x7f0000001c80)=@mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x2}, @device_b, @device_a, @initial, {0xa, 0xff}}, 0x0, 0x4, @default, @val={0x1, 0x4, [{0x30, 0x1}, {0x48, 0x1}, {0xc, 0x1}, {0x16, 0x1}]}, @val={0x2d, 0x1a, {0x1000, 0x0, 0x0, 0x0, {0x2, 0x65c, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0xe8d1, 0x6}}, [{0xdd, 0x6e, "0c558b1504eb7fdc7627693530ec1ed50c0562eca2d1ae81206bb1b72e0580881fc7ec1f56ad3151b62702e115240340cc429fbb503ed3c33fa55189adccd439ec58fc9e684ff103f85b0f61d545eb4afe7bddf351e6d85f9c7e48217fba143acbe4d319cafe94a6bd936591d978"}, {0xdd, 0xf9, "0d72d50e383d42d12f60f1f8a707f36c73d0e38148473afdd01d198bd2d9c5de4673bfa7d61740bcf706d187f9e8c82a76204c01accae10be98d20481a3f14126a5d3fc2d3546f95a20b75f6b277005bad3f8020d07bc02a94d629c970c830a526aa2229efe0f9e4ea4be26e88951df7c91ef6d43d39347d44ff9b0f77c4dd63d84cbaa01f91561e15dc23220e07d2a70385333fe7817f0efd7f0ce2769e8b9567577aa6537dfedc50de00ffd9ae64d4ccbf783c060a5bde6e41cfcf5811319a11d21d796e1ad2b020d0a5a13d09742a9e732f0fba30d2170ebc4f40110e1f83b13a3451437dd94570757d901dc803ebb713d30e2a59a920cd"}, {0xdd, 0xc, "a367093a5f4c7244c4e0678b"}, {0xdd, 0xad, "ab59354f826e2bb75e0c6e74448fb235e54a81468ac61db5bce70e1f7dd77d9ee9061c1609323f09220e4fc7e0c56e7cf46757bbe7755604d2998b50f8abb52ad42cbc5527cd022cfe19182d298f479214343b88839117ed6ec4b756cffd47ed5e71f5785f4d7d12147269a21cd10c9297fe817824b5fb0af8c6e291d0fa5f7ecc73a33c918f5b0ac820ead42cda1a85823e20bcf1e13ccf191d690a20b506d7ff458518bad293372f6bec5b95"}, {0xdd, 0xab, "24dbd7b450644806a979b4b7ff3731933e5a0c9959eca9bed4a58dce22eebc324a8c4213194cef932b28a0459f5d15841e003b1a750ec63e20d020f401afa6a56aaef3d4084ea3b5a5bdac7a14d184bab26a2b87d1267ea2207515968f8dc601cdaf99019222297cf531cfae1995186002ba846d9e86658505adea077b8c3952e3d4501b92e62690f0fb6dec4529e6ee3708a223a0ba8f2102664049e45e3c8fa3b01008639aa211653b5c"}]}, 0x315)

3.832820106s ago: executing program 3 (id=1665):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x121540)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000))
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

3.751815567s ago: executing program 2 (id=1666):
socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
io_setup(0x1, &(0x7f0000000180))
io_setup(0x9, &(0x7f0000002e40))
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r2, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xbcfb, 0x20, 0x800000, 0x1}, &(0x7f0000002000)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)

2.531708251s ago: executing program 3 (id=1667):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', <r1=>0x0})
connect$packet(r0, &(0x7f0000000240)={0x11, 0x5, r1, 0x1, 0x4, 0x6, @broadcast}, 0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000010000305fcffffff000000000000000021aab24d906f8d8de34635c1bd9fbdd56ed5a10941bd313f59f60fb2bbd8de1b851f30672457add7e7dec26dc354124dad738f60ef71982bf7dce81b5c8bb8ccfc16b292d4bbb4735c3a955b77ff2b0a6a", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d6163767461700004000280"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48094)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x12)
pipe2$watch_queue(0x0, 0x80)
syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="043b0afffffffffffffaffffffc84bd06d423141125839584cb4bd6c1381efbe1a6917a72dc52a35f90ee4e032cc489b987036ec4cd09c28f056796041e3e8d11e1e07489e6940b83fb2b6894a1c510b531250a66a872bbbcd3aa5f358b1b380c4938c2dab152901ebfe3306f9544c60a18fb6e3fce22d076dd941d7285c65053572750035aaf23c03ccaeaef9e30cc74001678a5f030e7d58b05690f3bde02f4c903fafe231b385b98b78e3d8c6b4fde84baa2e5142ad129f3af9b010eb1705403c25e4da25df270cc6c24f5d527b6ce1696f1986f500"/227], 0xd)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x50}, 0x1, 0xba01}, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f00000001c0)=0x7)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0)

2.152882407s ago: executing program 0 (id=1668):
socket$nl_generic(0x10, 0x3, 0x10)
futex(&(0x7f000000cffc)=0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x5, 0xf2, 0x0, &(0x7f0000000000), 0x4004000)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000008c0)={0xb, @pix_mp={0x0, 0x38305543, 0x0, 0x0, 0x7, [{}, {}, {0xfffffffe}, {}, {}, {0x0, 0x1}], 0x0, 0x5, 0x0, 0x2}})
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0f8565c, &(0x7f00000000c0)={0x200, 0x60cc, 0x2, {0x5, @vbi={0x3, 0x8, 0x7, 0x2d342b48, [0x5, 0x400], [0x6, 0x10], 0x1}}, 0x6})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff5", 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x1, 0x0)
r7 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, 0x0)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

1.896700254s ago: executing program 1 (id=1669):
socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000008c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x84202, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x4d, 0x40000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x801e, 0x11, 0x1, {0x1}})
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x800}, 0x0, [0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0xffffffefffffffff, 0x2, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x0, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffff, 0xb, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x10000, 0x7785, 0x0, 0x4, 0x4, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x8000000000000001, 0x5, 0x0, 0x920, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1000000000, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xffff7ffffffffffe, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x100, 0x81, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x3, 0x2, 0x0, 0x7, 0xc0c0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x80]})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r2)
sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000800)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000080)=0x800002, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000240), 0x8000000000, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r6, 0xc100565c, &(0x7f0000000140)={0x0, 0x5693, 0x4, {0x2, @pix={0xd, 0x2, 0x48524742, 0x2, 0x3, 0xdd79, 0x7, 0x2, 0x1, 0x6, 0x2, 0x5}}, 0xfffffffe})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000280)={0x6, 0x7, 0x4, {0x2, @raw_data="2e05d16eb38942f4b3929e32eb4c004aa7ebf544df3e59d3777c3fbc378802427cd355736a65cda50500b7db24f8bb708d5ffb488c3b968809076903102e6555cd4f9f6abb603b3b1e9e65108e145b5fc63c655f5aeffafa83c8985f606af0ea712dd3e42ee15c0d9cb4ed37913530d8641a3b32d7df7ef28081454c62b394cf2bf133cd5a04aa1ddeaf71d1c7213f6502e7bdff029c8a4739400fdaeb03e6fb0b82648779fe27db5666a8e38edcdd12350378cc5e0950346a99a5c3eabd436b365b76a278b3fb42"}, 0xb146})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c3b467e3cb9601e4af8", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb})
socket$nl_generic(0x10, 0x3, 0x10)

1.744146308s ago: executing program 2 (id=1670):
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000080)=""/245) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r3 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x2, 0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81c51263a8b1dc47}, 0x0) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2003, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xa4, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x6}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_LIMIT={0x0, 0x2, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1}, @TCA_FQ_CODEL_INTERVAL={0x4, 0x3, 0x3}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x7}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0xfdab, 0xa, 0xaa}]}}]}, 0x78}}, 0x4000010) (async, rerun: 32)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f0000000200)='W', 0x1, 0x7a}) (rerun: 32)
munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000)
munlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) (async)
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000000440)='O', 0x1, 0x6}) (async)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMETA(r8, 0x4bfa, &(0x7f0000000180)) (async)
syz_usb_connect(0x3, 0x24, &(0x7f0000006600)={{0x12, 0x1, 0x310, 0xe4, 0x98, 0xd8, 0x40, 0x979, 0x270, 0xec82, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf, 0x0, 0xe0, 0x2, [{{0x9, 0x4, 0x45, 0x5, 0x0, 0x2b, 0x60, 0xca, 0x5}}]}}]}}, &(0x7f0000007100)={0x0, 0x0, 0x0, 0x0})

1.188679731s ago: executing program 4 (id=1671):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000c1d98dee000000f70c61be0000000000001000000000000036e5373a21cf7b85661a2abfd08e39eabac107db6450"], 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x254, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r4, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x224, 0x2, [@TCA_BASIC_ACT={0x220, 0x3, [@m_bpf={0xa8, 0x7, 0x0, 0x0, {{0x8}, {0xcb, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x7, 0xc0, 0x0, 0x3}, {0x3, 0x1, 0x2, 0x8}, {0x7, 0x0, 0xe5}, {0x85, 0x4, 0x1, 0x1000}, {0xed6a, 0x6, 0xff, 0x7}, {0x1ff, 0x2, 0x2, 0x7f}, {0xfffe, 0xf, 0x3, 0x8001}, {0x6, 0x9, 0x5, 0x4}]}, @TCA_ACT_BPF_FD]}, {0x16, 0x6, "a7392eb0b33913b3ecf23d008226de0baad8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x174, 0x1, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x2, 0x20000000, 0x2020, 0x484}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0xffff, 0xffffffffdffffffa, 0x3, 0x3}, 0x0, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x7, 0x6, 0xf1}, 0x2, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffa, 0x7, 0x6, 0xf0000000, 0x7}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x3e9b530f, 0x0, 0x3, 0x80000001}, 0x3, r4}}]}, {0xa7, 0x6, "de2f97643f7fdf8c180d0d243eb0628e914c115a33da11218fe434b508f1ab4a109f54997c1f52103455200a43da3da007fbcfa1b6024a7ee759363430c1038cc9024e0df94ba209b2267c420c5eda68c3dc1ed24640628cfc647bf9d484edea7eef0dcfc3ee67f8094e0f0025d20e827f058ce6a5e9f5010cf3f6e4e58be3202663676275a414aa2623301c2c678569cd3aae8a34aa7374cad7db908c4f84153b03c8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x254}}, 0x4000)
r5 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socket(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000bf98000000000000560800000200003be68a8aead883bfefa1abe62200a9008500000007000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

1.106173095s ago: executing program 0 (id=1672):
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x10}}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00c9ffffffffffffff00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

1.015428128s ago: executing program 0 (id=1673):
r0 = socket(0x15, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970", @ANYRES32=r1], 0x58}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0})

940.985698ms ago: executing program 0 (id=1674):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
setsockopt$packet_int(r0, 0x107, 0xb, &(0x7f00000000c0)=0x1, 0x4)
keyctl$set_reqkey_keyring(0xe, 0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x3b)
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, 0xfffffffffffffffe, 0x29)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x9, 0x2, r0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, {0x1}})
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffd30, 0xffffffffffffffda, 0x0, {0xfffffeff}}, 0x18)
r8 = socket$inet6(0xa, 0x2, 0x0)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmmsg$inet(r8, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880)

709.003763ms ago: executing program 2 (id=1675):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000001000000fe8800000000000000000000000001010000000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000078ef00000000000000000000000000000000000000000000000000000000000084010500"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

0s ago: executing program 2 (id=1676):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f0000001600)={0x9, {"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", 0x1000}}, 0x1006)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000040)={0x3c, 0x0})
ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000100)={0x10002, 0xc0, 0x40, &(0x7f00000001c0)=[0x6, 0x9, 0x8c25, 0x14, 0x7, 0x36, 0x33, 0xffffffffffffffff, 0x80, 0xffffffffffffec4c, 0xf45, 0x8000000000000000, 0x10, 0x2, 0x7ffe, 0x8, 0xffffffffffffffd2, 0x6, 0x7, 0xf, 0x1000, 0x7fffffffffffffff, 0x52, 0xfffffffffffffff6, 0x5a, 0x4, 0x1000000004, 0x612, 0x4, 0x2, 0x4, 0xd, 0x7, 0x8000000000000001, 0x4, 0x9, 0x3, 0x9, 0xc, 0x62, 0x2, 0x824c, 0x8, 0xbf1, 0x800000, 0x800, 0x20000010, 0xfffffffffffffff8, 0xe8, 0x101, 0xffffffffffffffff, 0x10001, 0x6, 0xd995, 0x800000004007, 0x4, 0x6, 0xfffffffffffffbff, 0xfff, 0x8004, 0x4000000000000, 0x80000000, 0x6, 0x4, 0xd7, 0x7fff, 0x800, 0x7, 0x7ff, 0x298b, 0x3, 0x1, 0x3, 0xd8e, 0x2, 0x9, 0x1, 0x9, 0xf3a, 0xf3dc, 0x1, 0x7, 0x3d6b, 0x55, 0x3ff, 0x59c5, 0x2, 0x9, 0x8000a, 0x1, 0x4, 0x5, 0x3, 0x1, 0x8000003, 0x6, 0xffffffffffff7fff, 0x1000, 0x40, 0xfffffffffffffffe, 0x12000000, 0x2, 0x10000, 0x6, 0x25, 0x7, 0x8, 0x4, 0x4, 0x4, 0x5fa, 0x20000000000008, 0x9, 0xfffffffffffffffa, 0x5, 0xff, 0x4, 0x2, 0x5, 0x4, 0xf, 0xffff, 0x200000000, 0x8, 0x0, 0xfffffffffffffffe, 0x2, 0x5ae]})
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000005c0)=ANY=[])
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0x10000)
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0})

kernel console output (not intermixed with test programs):

 63
[  423.494581][T10940] kAFS: unparsable volume name
[  424.502961][T10964] loop2: detected capacity change from 0 to 7
[  424.512442][T10964]  loop2:
[  424.515399][T10964] loop2: partition table partially beyond EOD, truncated
[  424.560267][T10966] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1269'.
[  425.772620][T10989] FAULT_INJECTION: forcing a failure.
[  425.772620][T10989] name failslab, interval 1, probability 0, space 0, times 0
[  425.793248][T10989] CPU: 1 UID: 0 PID: 10989 Comm: syz.4.1273 Not tainted syzkaller #0 PREEMPT(full) 
[  425.793273][T10989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  425.793285][T10989] Call Trace:
[  425.793292][T10989]  <TASK>
[  425.793301][T10989]  dump_stack_lvl+0x189/0x250
[  425.793328][T10989]  ? __pfx____ratelimit+0x10/0x10
[  425.793348][T10989]  ? __pfx_dump_stack_lvl+0x10/0x10
[  425.793369][T10989]  ? __pfx__printk+0x10/0x10
[  425.793401][T10989]  ? __pfx___might_resched+0x10/0x10
[  425.793418][T10989]  ? fs_reclaim_acquire+0x7d/0x100
[  425.793439][T10989]  should_fail_ex+0x414/0x560
[  425.793472][T10989]  should_failslab+0xa8/0x100
[  425.793500][T10989]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  425.793527][T10989]  ? __alloc_skb+0x112/0x2d0
[  425.793552][T10989]  __alloc_skb+0x112/0x2d0
[  425.793576][T10989]  netlink_ack+0x146/0xa50
[  425.793594][T10989]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  425.793632][T10989]  netlink_rcv_skb+0x28c/0x470
[  425.793650][T10989]  ? __lock_acquire+0xab9/0xd20
[  425.793676][T10989]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  425.793699][T10989]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  425.793729][T10989]  ? netlink_deliver_tap+0x2e/0x1b0
[  425.793755][T10989]  netlink_unicast+0x82f/0x9e0
[  425.793792][T10989]  ? __pfx_netlink_unicast+0x10/0x10
[  425.793820][T10989]  ? netlink_sendmsg+0x642/0xb30
[  425.793839][T10989]  ? skb_put+0x11b/0x210
[  425.793865][T10989]  netlink_sendmsg+0x805/0xb30
[  425.793896][T10989]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.793919][T10989]  ? aa_sock_msg_perm+0xf1/0x1d0
[  425.793940][T10989]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  425.793961][T10989]  ? __pfx_netlink_sendmsg+0x10/0x10
[  425.793983][T10989]  __sock_sendmsg+0x219/0x270
[  425.794014][T10989]  ____sys_sendmsg+0x505/0x830
[  425.794043][T10989]  ? __pfx_____sys_sendmsg+0x10/0x10
[  425.794073][T10989]  ? import_iovec+0x74/0xa0
[  425.794108][T10989]  ___sys_sendmsg+0x21f/0x2a0
[  425.794133][T10989]  ? __pfx____sys_sendmsg+0x10/0x10
[  425.794187][T10989]  ? __fget_files+0x2a/0x420
[  425.794203][T10989]  ? __fget_files+0x3a0/0x420
[  425.794229][T10989]  __x64_sys_sendmsg+0x19b/0x260
[  425.794254][T10989]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  425.794289][T10989]  ? __pfx_ksys_write+0x10/0x10
[  425.794312][T10989]  ? rcu_is_watching+0x15/0xb0
[  425.794336][T10989]  ? do_syscall_64+0xbe/0x3b0
[  425.794362][T10989]  do_syscall_64+0xfa/0x3b0
[  425.794381][T10989]  ? lockdep_hardirqs_on+0x9c/0x150
[  425.794402][T10989]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.794421][T10989]  ? clear_bhb_loop+0x60/0xb0
[  425.794444][T10989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  425.794464][T10989] RIP: 0033:0x7fa8d278eec9
[  425.794481][T10989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  425.794498][T10989] RSP: 002b:00007fa8d35b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  425.794518][T10989] RAX: ffffffffffffffda RBX: 00007fa8d29e5fa0 RCX: 00007fa8d278eec9
[  425.794532][T10989] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  425.794543][T10989] RBP: 00007fa8d35b3090 R08: 0000000000000000 R09: 0000000000000000
[  425.794555][T10989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  425.794566][T10989] R13: 00007fa8d29e6038 R14: 00007fa8d29e5fa0 R15: 00007fa8d2b0fa28
[  425.794597][T10989]  </TASK>
[  426.312203][T10993] loop7: detected capacity change from 0 to 7
[  426.499529][   T24] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  427.499972][   T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  427.521792][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  427.534577][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  427.544575][   T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  427.589722][   T24] usb 3-1: Product: syz
[  427.593945][   T24] usb 3-1: Manufacturer: syz
[  427.620651][   T24] usb 3-1: SerialNumber: syz
[  427.627028][   T24] usb 3-1: config 0 descriptor??
[  427.639320][   T24] usb 3-1: selecting invalid altsetting 0
[  427.774668][T10993] Dev loop7: unable to read RDB block 7
[  427.782473][T10993]  loop7: unable to read partition table
[  427.788244][T10993] loop7: partition table beyond EOD, truncated
[  427.859298][T10993] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  428.001459][T10999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.110125][T10999] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.356202][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'.
[  428.738699][T11027] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1279'.
[  428.969791][ T5877] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  429.259635][ T5877] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  429.285783][ T5877] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  429.374559][ T5877] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  429.468357][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.507088][T11024] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  429.537291][ T5877] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  430.123043][ T5953] usb 3-1: USB disconnect, device number 68
[  430.537837][T11057] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1290'.
[  430.651988][T11059] vivid-001: disconnect
[  430.893712][T11046] vivid-001: reconnect
[  431.221218][T11072] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1294'.
[  431.259658][T11072] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1294'.
[  431.379598][ T5953] usb 3-1: new full-speed USB device number 69 using dummy_hcd
[  431.539904][ T5953] usb 3-1: device descriptor read/64, error -71
[  432.019688][ T5953] usb 3-1: new full-speed USB device number 70 using dummy_hcd
[  432.038795][ T5877] usb 2-1: USB disconnect, device number 66
[  432.160098][ T5953] usb 3-1: device descriptor read/64, error -71
[  432.219764][ T5869] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  432.311504][ T5953] usb usb3-port1: attempt power cycle
[  432.382183][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  432.415196][ T5869] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  432.425057][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.434321][ T5869] usb 4-1: Product: syz
[  432.438724][ T5869] usb 4-1: Manufacturer: syz
[  432.443965][ T5869] usb 4-1: SerialNumber: syz
[  432.462231][ T5869] usb 4-1: config 0 descriptor??
[  432.519515][ T5946] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  432.569704][ T5877] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  432.659576][ T5946] usb 5-1: device descriptor read/64, error -71
[  432.689588][ T5953] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  432.729572][ T5877] usb 2-1: Using ep0 maxpacket: 32
[  432.735233][ T5953] usb 3-1: device descriptor read/8, error -71
[  432.746475][ T5877] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  432.764414][ T5877] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  432.774983][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  432.785412][ T5877] usb 2-1: Product: syz
[  432.789701][ T5877] usb 2-1: Manufacturer: syz
[  432.794303][ T5877] usb 2-1: SerialNumber: syz
[  432.803098][ T5877] usb 2-1: config 0 descriptor??
[  432.808695][T11092] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  432.891319][T11085] netlink: 'syz.3.1297': attribute type 21 has an invalid length.
[  432.899622][ T5946] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  432.903485][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'.
[  432.923614][T11085] netlink: 'syz.3.1297': attribute type 21 has an invalid length.
[  432.933380][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1297'.
[  432.979972][ T5953] usb 3-1: new full-speed USB device number 72 using dummy_hcd
[  433.010781][ T5953] usb 3-1: device descriptor read/8, error -71
[  433.025373][T11092] [U] V�3��Fپ"S��/��4:�XTZ�W�T��LW��=
[  433.033202][T11092] [U] J"�E:��"


[  433.048042][T11092] input: syz0 as /devices/virtual/input/input36
[  433.064050][ T5946] usb 5-1: device descriptor read/64, error -71
[  433.075421][   T24] usb 2-1: USB disconnect, device number 67
[  433.129974][ T5953] usb usb3-port1: unable to enumerate USB device
[  433.159673][ T5877] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  433.189944][ T5946] usb usb5-port1: attempt power cycle
[  433.320456][ T5877] usb 1-1: Using ep0 maxpacket: 32
[  433.327167][ T5877] usb 1-1: config 0 has an invalid interface number: 250 but max is 1
[  433.335453][ T5877] usb 1-1: config 0 has no interface number 1
[  433.341946][ T5877] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  433.354836][ T5877] usb 1-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f
[  433.363942][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  433.372057][ T5877] usb 1-1: Product: syz
[  433.376274][ T5877] usb 1-1: Manufacturer: syz
[  433.380928][ T5877] usb 1-1: SerialNumber: syz
[  433.387498][ T5877] usb 1-1: config 0 descriptor??
[  433.404328][ T5877] usb 1-1: Found UVC 0.00 device syz (0408:3090)
[  433.410981][ T5877] usb 1-1: No valid video chain found.
[  433.539588][ T5946] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  433.561085][ T5946] usb 5-1: device descriptor read/8, error -71
[  433.599582][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  433.615683][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  433.625289][ T5953] usb 1-1: USB disconnect, device number 64
[  433.809631][ T5946] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  433.830998][ T5946] usb 5-1: device descriptor read/8, error -71
[  433.941010][ T5946] usb usb5-port1: unable to enumerate USB device
[  434.356243][T11113] netlink: 'syz.0.1306': attribute type 4 has an invalid length.
[  434.479756][ T5946] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  434.662561][ T5946] usb 3-1: Using ep0 maxpacket: 16
[  434.668916][ T5953] usb 4-1: USB disconnect, device number 80
[  434.675710][ T5946] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  434.686451][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  434.708544][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  434.724177][ T5946] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  434.734350][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  434.846914][ T5946] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  434.967408][ T5946] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  435.021551][ T5946] usb 3-1: Manufacturer: syz
[  435.030532][ T5946] usb 3-1: config 0 descriptor??
[  435.296151][T11130] fuse: Bad value for 'fd'
[  435.709970][T11147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  435.730087][T11147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  435.869801][ T5877] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  435.959620][   T93] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  436.019626][ T5877] usb 4-1: Using ep0 maxpacket: 8
[  436.036232][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short
[  436.151987][ T5877] usb 4-1: config 50 has an invalid interface number: 75 but max is 0
[  436.164509][   T93] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  436.616958][   T93] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.709681][ T5877] usb 4-1: config 50 has no interface number 0
[  436.747962][ T5877] usb 4-1: config 50 interface 75 altsetting 42 endpoint 0x3 has invalid maxpacket 592, setting to 64
[  436.772976][   T93] usb 5-1: Product: syz
[  436.777658][   T93] usb 5-1: Manufacturer: syz
[  436.782606][   T93] usb 5-1: SerialNumber: syz
[  436.787283][ T5877] usb 4-1: config 50 interface 75 altsetting 42 bulk endpoint 0x2 has invalid maxpacket 32
[  436.800161][ T5877] usb 4-1: config 50 interface 75 has no altsetting 0
[  436.883262][ T5877] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  436.897541][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.011173][   T93] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  437.028837][ T5877] usb 4-1: Product: syz
[  437.065229][ T5877] usb 4-1: Manufacturer: syz
[  437.097504][ T5877] usb 4-1: SerialNumber: syz
[  437.134365][   T93] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  437.203007][T11141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  437.210235][   T93] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  437.250300][   T93] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  437.405073][   T93] usb 5-1: USB disconnect, device number 85
[  437.733772][ T5946] rc_core: IR keymap rc-hauppauge not found
[  437.741087][ T5946] Registered IR keymap rc-empty
[  437.766402][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  437.849742][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  437.930690][ T5946] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  437.971545][ T5946] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input37
[  438.024037][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.061701][ T5953] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  438.197538][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.254076][ T5953] usb 5-1: Using ep0 maxpacket: 8
[  438.255799][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.271951][ T5953] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  438.285157][ T5953] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 54240, setting to 1024
[  438.315426][ T5953] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024
[  438.333770][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.342478][ T5953] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  438.370569][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.401288][ T5953] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  438.411724][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.420155][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.439702][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.480368][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.483675][ T5953] usb 5-1: Product: syz
[  438.495325][ T5953] usb 5-1: Manufacturer: syz
[  438.628439][ T5877] radioshark 4-1:50.75: Invalid radioSHARK device
[  438.644393][ T5953] usb 5-1: SerialNumber: syz
[  438.657230][ T5877] radioshark 4-1:50.75: probe with driver radioshark failed with error -22
[  438.694353][T11169] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  438.710302][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.723312][ T5877] usbhid 4-1:50.75: couldn't find an input interrupt endpoint
[  438.728028][T11191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1328'.
[  438.741555][ T5877] usb 4-1: USB disconnect, device number 81
[  438.751432][ T5946] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  438.752548][T11169] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  438.813377][ T5946] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  438.834900][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'.
[  438.845396][ T5946] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  438.880057][T11197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1329'.
[  438.905961][ T5946] usb 3-1: USB disconnect, device number 73
[  438.991283][T11169] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1321' resets device
[  439.429517][ T5877] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  439.550742][ T5953] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  439.584237][ T5953] usbtest 5-1:1.0: Linux user mode ISO test driver
[  439.611125][ T5953] usbtest 5-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt)
[  439.627074][ T5953] usb 5-1: USB disconnect, device number 86
[  439.634913][T11206] netlink: 'syz.1.1332': attribute type 12 has an invalid length.
[  439.652548][T11206] netlink: 'syz.1.1332': attribute type 29 has an invalid length.
[  439.664308][ T5877] usb 4-1: too many endpoints for config 0 interface 0 altsetting 144: 127, using maximum allowed: 30
[  439.676982][ T5877] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  439.719700][T11206] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1332'.
[  439.730025][ T5946] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  439.741175][T11206] netlink: 'syz.1.1332': attribute type 2 has an invalid length.
[  439.751266][ T5877] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0
[  439.764133][T11206] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1332'.
[  439.777709][ T5877] usb 4-1: config 0 interface 0 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127
[  439.835529][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0
[  439.842459][ T5877] usb 4-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00
[  439.851963][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.881221][ T5877] usb 4-1: config 0 descriptor??
[  439.921797][ T5946] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  439.931404][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.975336][ T5946] usb 3-1: config 0 descriptor??
[  440.009693][ T5946] gspca_main: sunplus-2.14.0 probing 055f:c420
[  440.144090][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  440.150565][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  440.528862][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  440.669960][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  440.779712][ T5946] gspca_sunplus: reg_w_riv err -71
[  440.784945][ T5946] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  440.828483][ T5946] usb 3-1: USB disconnect, device number 74
[  440.923502][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'.
[  441.060432][ T5877] uclogic 0003:5543:004D.002C: failed retrieving Huion firmware version: -71
[  441.069378][ T5877] uclogic 0003:5543:004D.002C: failed probing parameters: -71
[  441.079627][ T5877] uclogic 0003:5543:004D.002C: probe with driver uclogic failed with error -71
[  441.145436][ T5877] usb 4-1: USB disconnect, device number 82
[  441.359550][ T5946] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  441.565065][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  441.590182][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'.
[  441.619644][T11236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'.
[  441.828926][ T5946] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  441.872026][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.903064][ T5946] usb 5-1: Product: syz
[  441.923385][ T5946] usb 5-1: Manufacturer: syz
[  441.928028][ T5946] usb 5-1: SerialNumber: syz
[  442.068470][ T5946] usb 5-1: config 0 descriptor??
[  442.270842][T11250] netlink: 'syz.3.1343': attribute type 21 has an invalid length.
[  442.279038][T11250] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1343'.
[  442.290037][T11250] netlink: 'syz.3.1343': attribute type 21 has an invalid length.
[  442.298160][T11250] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1343'.
[  442.750046][ T5877] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  442.910666][T11232] netlink: 'syz.4.1338': attribute type 21 has an invalid length.
[  442.919582][T11232] netlink: 'syz.4.1338': attribute type 21 has an invalid length.
[  443.339016][ T5877] usb 4-1: config index 0 descriptor too short (expected 1051, got 27)
[  443.349645][ T5937] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  443.362424][ T5877] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  443.421478][ T5877] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  443.494558][ T5877] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149
[  443.512852][ T5937] usb 1-1: unable to get BOS descriptor set
[  443.522025][ T5937] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  443.543753][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0
[  443.622939][ T5937] usb 1-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  443.672488][ T5877] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3
[  443.692198][ T5937] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  443.718656][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.747761][ T5937] usb 1-1: config 1 interface 0 has no altsetting 0
[  443.778074][ T5937] usb 1-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.40
[  443.789101][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.800830][ T5877] usb 4-1: Product: syz
[  443.818261][ T5877] usb 4-1: Manufacturer: syz
[  443.824918][ T5937] usb 1-1: Product: 㐊
[  443.829179][ T5937] usb 1-1: Manufacturer: 謒嫩뷓ꞝۅ袗昗킙醽弪Ὠ膨悢갛칀⸪팭≥⓫腈푗ᶽ㭊콘퍶鴖嘊켴ﻹ瓄槪紩ᲄ፦쯷撋곲隩嗉퇸芾禦奃늏즾찗驔鱭
[  443.861044][ T5877] usb 4-1: SerialNumber: syz
[  443.890067][ T5877] usb 4-1: config 0 descriptor??
[  444.032265][T11250] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  444.137766][ T5937] usbhid 1-1:1.0: can't add hid device: -71
[  444.170739][ T5937] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  444.216627][ T5937] usb 1-1: USB disconnect, device number 65
[  444.631592][ T5946] usb 5-1: USB disconnect, device number 87
[  444.872258][T11273] __nla_validate_parse: 2 callbacks suppressed
[  444.872339][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1350'.
[  445.498466][ T5877] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected
[  445.530286][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[  445.541124][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[  445.550261][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[  445.647873][ T5946] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  445.709686][   T93] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  445.949695][ T5946] usb 3-1: Using ep0 maxpacket: 16
[  445.965962][ T5946] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  445.983281][ T5946] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  445.995049][ T5877] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[  446.030177][   T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  446.049011][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82
[  446.062044][   T93] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  446.072701][   T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.084239][ T5946] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  446.196939][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[  446.206237][   T93] usb 2-1: Product: syz
[  446.214002][   T93] usb 2-1: Manufacturer: syz
[  446.225258][ T5946] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  446.298482][   T93] usb 2-1: SerialNumber: syz
[  446.303960][ T5877] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[  446.312051][ T5946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  446.322690][ T5946] usb 3-1: Product: syz
[  446.329638][ T5946] usb 3-1: Manufacturer: syz
[  446.335593][ T5946] usb 3-1: SerialNumber: syz
[  446.346870][   T93] usb 2-1: config 0 descriptor??
[  446.353565][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[  446.373046][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[  446.392092][ T5877] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[  446.407732][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84
[  446.415991][ T5877] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[  446.425355][ T5877] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[  446.437568][ T5877] usb 4-1: USB disconnect, device number 83
[  446.447210][ T5877] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[  446.530922][ T5877] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[  446.581911][ T5946] usb 3-1: 0:2 : does not exist
[  446.622930][ T5877] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[  446.660806][ T5946] usb 3-1: USB disconnect, device number 75
[  446.823524][ T5877] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[  446.876732][ T5877] keyspan 4-1:0.0: device disconnected
[  446.891512][T11285] netlink: 'syz.1.1352': attribute type 21 has an invalid length.
[  446.899866][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'.
[  446.912370][T11285] netlink: 'syz.1.1352': attribute type 21 has an invalid length.
[  446.920500][T11285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'.
[  447.479837][ T5869] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  447.689576][ T5869] usb 5-1: Using ep0 maxpacket: 32
[  447.724411][T11311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1361'.
[  447.737324][T11311] netlink: 'syz.0.1361': attribute type 3 has an invalid length.
[  447.767952][ T5869] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.824698][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'.
[  447.873522][T11309] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1360'.
[  447.886078][ T5869] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.909136][T11309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1360'.
[  447.999960][ T5869] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  448.050607][ T5869] usb 5-1: config 0 interface 0 has no altsetting 0
[  448.077828][ T5869] usb 5-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  448.157834][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.231651][ T5869] usb 5-1: config 0 descriptor??
[  449.112837][ T5869] logitech-hidpp-device 0003:046D:C262.002D: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.4-1/input0
[  449.189659][ T5877] usb 2-1: USB disconnect, device number 68
[  449.731454][T11338] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  450.305825][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'.
[  450.329114][T11354] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1372'.
[  450.355804][T11354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1372'.
[  450.809695][ T5869] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  450.855463][ T5937] usb 5-1: USB disconnect, device number 88
[  451.065368][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.108493][ T5869] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  451.120082][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.320234][ T5869] usb 4-1: config 0 descriptor??
[  451.529985][ T5869] usbhid 4-1:0.0: can't add hid device: -71
[  451.545548][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  451.577429][ T5869] usb 4-1: USB disconnect, device number 84
[  451.991042][    T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  452.059645][ T5869] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  452.142411][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1379'.
[  452.240883][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  452.286344][    T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  452.295829][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.419921][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  452.429815][T11383] tipc: Started in network mode
[  452.434731][T11383] tipc: Node identity a65ecb2c1918, cluster identity 4711
[  452.447744][T11383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  452.457188][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  452.561270][T11383] syzkaller0: entered promiscuous mode
[  452.566753][T11383] syzkaller0: entered allmulticast mode
[  452.643331][T11383] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1380'.
[  452.654496][T11383] tipc: Resetting bearer <eth:syzkaller0>
[  452.693543][T11382] tipc: Resetting bearer <eth:syzkaller0>
[  452.734395][    T9] usb 5-1: Product: syz
[  452.754280][T11382] tipc: Disabling bearer <eth:syzkaller0>
[  452.805641][ T5869] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  452.823545][    T9] usb 5-1: Manufacturer: syz
[  452.830310][    T9] usb 5-1: SerialNumber: syz
[  452.838561][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.853076][    T9] usb 5-1: config 0 descriptor??
[  452.890123][ T5869] usb 4-1: config 0 descriptor??
[  453.297248][T11373] netlink: 'syz.4.1376': attribute type 21 has an invalid length.
[  453.305298][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'.
[  453.317895][T11373] netlink: 'syz.4.1376': attribute type 21 has an invalid length.
[  453.326145][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'.
[  453.380415][ T5869] mcp2200 0003:04D8:00DF.002E: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0
[  453.409585][    T9] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  453.590496][    T9] usb 3-1: Using ep0 maxpacket: 16
[  453.603610][    T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.687894][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  453.734523][ T5937] usb 4-1: USB disconnect, device number 85
[  453.754301][    T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  453.797552][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.831552][    T9] usb 3-1: config 0 descriptor??
[  453.914509][ T5877] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  453.970346][ T5869] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  454.077151][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  454.091674][ T5877] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  454.102658][ T5877] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  454.119788][ T5869] usb 2-1: device descriptor read/64, error -71
[  454.126669][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.146265][ T5877] usb 1-1: config 0 descriptor??
[  454.374042][ T5869] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  454.403569][T11396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1383'.
[  454.415876][    T9] nzxt-smart2 0003:1E71:2009.002F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  454.546641][ T5869] usb 2-1: device descriptor read/64, error -71
[  454.573462][ T5877] usbhid 1-1:0.0: can't add hid device: -71
[  454.583802][T11402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.652452][T11402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.662214][ T5869] usb usb2-port1: attempt power cycle
[  454.676946][T11402] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  454.719912][ T5877] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  454.838810][ T5877] usb 1-1: USB disconnect, device number 66
[  454.992164][    T9] usb 5-1: USB disconnect, device number 89
[  454.999981][ T5869] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  455.040681][ T5869] usb 2-1: device descriptor read/8, error -71
[  455.150995][ T5877] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  455.361269][ T5869] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  455.390706][ T5869] usb 2-1: device descriptor read/8, error -71
[  455.391021][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  455.427514][ T5877] usb 1-1: config 0 has no interfaces?
[  455.437729][ T5877] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  455.470595][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.478727][ T5877] usb 1-1: Product: syz
[  455.487856][ T5877] usb 1-1: Manufacturer: syz
[  455.498351][ T5877] usb 1-1: SerialNumber: syz
[  455.500880][ T5869] usb usb2-port1: unable to enumerate USB device
[  455.507312][ T5877] usb 1-1: config 0 descriptor??
[  455.539795][    T9] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  455.722793][    T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  455.732983][    T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  455.744012][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  455.753615][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  455.765218][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  455.827786][    T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  455.846717][    T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  455.866181][    T9] usb 5-1: Product: syz
[  455.871046][    T9] usb 5-1: Manufacturer: syz
[  455.888727][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  455.908959][    T9] cdc_wdm 5-1:1.0: skipping garbage
[  455.916949][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  455.924703][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[  456.100019][    T9] usb 3-1: USB disconnect, device number 76
[  456.637777][ T5869] usb 1-1: USB disconnect, device number 67
[  456.914106][T11423] netlink: 'syz.2.1389': attribute type 4 has an invalid length.
[  457.599786][ T5877] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[  457.780349][ T5877] usb 1-1: device descriptor read/64, error -71
[  458.041653][ T5877] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  458.538117][ T5869] usb 5-1: USB disconnect, device number 90
[  458.732724][ T5877] usb 1-1: device descriptor read/64, error -71
[  458.861024][ T5877] usb usb1-port1: attempt power cycle
[  459.153714][   T30] kauditd_printk_skb: 38 callbacks suppressed
[  459.153727][   T30] audit: type=1326 audit(1758874960.205:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d278eec9 code=0x7ffc0000
[  459.182273][    C1] vkms_vblank_simulate: vblank timer overrun
[  459.191146][   T30] audit: type=1326 audit(1758874960.205:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa8d278eec9 code=0x7ffc0000
[  459.269528][   T30] audit: type=1326 audit(1758874960.205:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d278eec9 code=0x7ffc0000
[  459.292005][ T5877] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  459.354674][ T5877] usb 1-1: device descriptor read/8, error -71
[  459.521484][   T30] audit: type=1326 audit(1758874960.205:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa8d278eec9 code=0x7ffc0000
[  459.640148][ T5877] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  459.692491][ T5877] usb 1-1: device descriptor read/8, error -71
[  459.724446][   T30] audit: type=1326 audit(1758874960.205:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d278eec9 code=0x7ffc0000
[  459.810879][    T9] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  459.832246][ T5877] usb usb1-port1: unable to enumerate USB device
[  459.972810][   T30] audit: type=1326 audit(1758874960.205:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa8d278eec9 code=0x7ffc0000
[  459.999820][    T9] usb 4-1: Using ep0 maxpacket: 16
[  460.136703][    T9] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7
[  460.181497][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.201623][   T30] audit: type=1326 audit(1758874960.205:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d278eec9 code=0x7ffc0000
[  460.240361][    T9] usb 4-1: Product: syz
[  460.244572][    T9] usb 4-1: Manufacturer: syz
[  460.265381][    T9] usb 4-1: SerialNumber: syz
[  460.301280][    T9] usb 4-1: config 0 descriptor??
[  460.308971][   T30] audit: type=1326 audit(1758874960.205:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8d278d710 code=0x7ffc0000
[  460.331366][    C1] vkms_vblank_simulate: vblank timer overrun
[  460.372043][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[  460.377985][    T9] hub 4-1:0.0: probe with driver hub failed with error -5
[  460.524174][   T30] audit: type=1326 audit(1758874960.205:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8d278eec9 code=0x7ffc0000
[  460.551487][   T30] audit: type=1326 audit(1758874960.205:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.4.1397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8d278eec9 code=0x7ffc0000
[  461.339600][    T9] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  461.844426][    T9] usb 1-1: Using ep0 maxpacket: 16
[  461.894500][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  461.914602][    T9] usb 1-1: config 1 has an invalid interface number: 26 but max is 1
[  461.923791][T11487] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  461.945426][    T9] usb 1-1: config 1 has an invalid interface number: 89 but max is 1
[  461.969117][    T9] usb 1-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config
[  461.995631][    T9] usb 1-1: config 1 has no interface number 0
[  462.018135][    T9] usb 1-1: config 1 has no interface number 1
[  462.029564][    T9] usb 1-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023
[  462.159494][    T9] usb 1-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  462.175694][    T9] usb 1-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8
[  462.315582][    T9] usb 1-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  462.331283][    T9] usb 1-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  462.346339][    T9] usb 1-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  462.400108][    T9] usb 1-1: config 1 interface 26 has no altsetting 0
[  462.421825][ T5869] usb 4-1: USB disconnect, device number 86
[  462.449027][    T9] usb 1-1: config 1 interface 89 has no altsetting 0
[  462.471521][    T9] usb 1-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec
[  462.483371][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.497055][    T9] usb 1-1: Product: syz
[  462.503713][    T9] usb 1-1: Manufacturer: syz
[  462.509097][    T9] usb 1-1: SerialNumber: syz
[  462.537258][T11476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  462.556086][T11476] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  462.788521][    T9] usb 1-1: unknown interface protocol 0x7d, assuming v1
[  462.837995][    T9] usb 1-1: 26:2 : does not exist
[  462.887466][    T9] usb 1-1: unknown interface protocol 0x13, assuming v1
[  462.899881][    T9] usb 1-1: 89:2 : does not exist
[  462.925135][    T9] usb 1-1: USB disconnect, device number 72
[  462.998470][ T8261] udevd[8261]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  463.819549][   T93] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  463.919510][ T5877] usb 2-1: new full-speed USB device number 73 using dummy_hcd
[  463.979660][   T93] usb 1-1: Using ep0 maxpacket: 32
[  463.986491][   T93] usb 1-1: config 7 has an invalid interface number: 123 but max is 0
[  463.994916][   T93] usb 1-1: config 7 has no interface number 0
[  464.001868][   T93] usb 1-1: config 7 interface 123 altsetting 6 bulk endpoint 0xC has invalid maxpacket 8
[  464.030048][   T93] usb 1-1: config 7 interface 123 has no altsetting 0
[  464.143891][ T5877] usb 2-1: device descriptor read/64, error -71
[  464.167838][   T93] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=b0.be
[  464.198213][   T93] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.249228][   T93] usb 1-1: Product: syz
[  464.293966][   T93] usb 1-1: Manufacturer: syz
[  464.299855][   T93] usb 1-1: SerialNumber: syz
[  464.311495][T11522] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  464.411411][ T5877] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  464.429595][ T5869] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  464.527281][   T93] kvaser_usb 1-1:7.123: error -ENODEV: Cannot get usb endpoint(s)
[  464.569791][ T5877] usb 2-1: device descriptor read/64, error -71
[  464.647000][ T5869] usb 4-1: config index 0 descriptor too short (expected 45, got 36)
[  464.666669][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  464.733301][   T93] usb 1-1: USB disconnect, device number 73
[  464.744940][ T5877] usb usb2-port1: attempt power cycle
[  464.749525][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  464.895722][T11533] hub 9-0:1.0: USB hub found
[  464.903549][T11533] hub 9-0:1.0: 1 port detected
[  464.940712][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  464.972848][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  465.024938][ T5869] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  465.041193][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.110694][ T5877] usb 2-1: new full-speed USB device number 75 using dummy_hcd
[  465.121039][T11539] fuse: Unknown parameter 'bn�Y��Ǚ[��;�bd'
[  465.140207][T11537] tipc: Started in network mode
[  465.145128][T11537] tipc: Node identity 4, cluster identity 4711
[  465.151568][T11537] tipc: Node number set to 4
[  465.152743][ T5877] usb 2-1: device descriptor read/8, error -71
[  465.157218][ T5869] usb 4-1: config 0 descriptor??
[  465.188916][T11525] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  465.479610][ T5877] usb 2-1: new full-speed USB device number 76 using dummy_hcd
[  465.489846][ T5946] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  465.512251][ T5877] usb 2-1: device descriptor read/8, error -71
[  465.610812][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.615985][ T5869] plantronics 0003:047F:FFFF.0030: reserved main item tag 0xd
[  465.621288][ T5877] usb usb2-port1: unable to enumerate USB device
[  465.636119][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.649640][ T5946] usb 1-1: Using ep0 maxpacket: 32
[  465.657031][ T5946] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  465.665650][ T5946] usb 1-1: config 0 has no interface number 0
[  465.678257][ T5946] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  465.700531][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.731437][ T5946] usb 1-1: Product: syz
[  465.780654][ T5946] usb 1-1: Manufacturer: syz
[  465.807216][ T5869] plantronics 0003:047F:FFFF.0030: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  465.808182][ T5946] usb 1-1: SerialNumber: syz
[  465.908460][ T5946] usb 1-1: config 0 descriptor??
[  465.931891][ T5877] usb 5-1: new low-speed USB device number 91 using dummy_hcd
[  465.943462][ T5946] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  465.970288][ T5946] usb 1-1: selecting invalid altsetting 1
[  465.982176][ T5946] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  465.999809][ T5869] usb 4-1: USB disconnect, device number 87
[  466.013163][ T5946] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  466.052820][ T5946] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  466.062249][ T5946] usb 1-1: media controller created
[  466.085204][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  466.121601][ T5877] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  466.132023][ T5877] usb 5-1: config 0 has no interface number 0
[  466.138191][ T5877] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  466.169040][ T5946] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  466.179013][ T5946] zl10353_read_register: readreg error (reg=127, ret==-71)
[  466.202307][ T5946] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  466.211505][ T5877] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 32671, setting to 8
[  466.246659][ T5877] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  466.311348][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.335045][ T5946] usb 1-1: USB disconnect, device number 74
[  466.353485][ T5877] usb 5-1: config 0 descriptor??
[  466.394992][T11548] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  466.413682][ T5877] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  466.559616][ T5869] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  466.689837][ T5953] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  466.719666][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  466.726786][ T5869] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  466.738112][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  466.749163][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  466.759159][ T5869] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  466.768966][ T5869] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  466.791625][ T5869] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  466.800992][ T5869] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  466.809100][ T5869] usb 4-1: Manufacturer: syz
[  466.817377][ T5869] usb 4-1: config 0 descriptor??
[  466.859709][ T5953] usb 3-1: Using ep0 maxpacket: 32
[  466.872224][ T5953] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  466.887334][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.906514][ T5953] usb 3-1: config 0 descriptor??
[  466.920754][ T5953] gspca_main: sq930x-2.14.0 probing 041e:403c
[  467.160548][ T5869] rc_core: IR keymap rc-hauppauge not found
[  467.166591][ T5869] Registered IR keymap rc-empty
[  467.173152][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.199579][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.230979][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  467.256049][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input40
[  467.273028][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.319664][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.359600][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.389906][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.429643][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.440345][ T5953] gspca_sq930x: reg_r 001f failed -110
[  467.455555][ T5953] sq930x 3-1:0.0: probe with driver sq930x failed with error -110
[  467.465414][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.499679][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.572317][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.620409][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.659617][ T5869] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  467.701613][ T5869] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  467.719499][ T5869] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  467.764400][ T5869] usb 4-1: USB disconnect, device number 88
[  467.901424][T11572] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  468.133624][T11561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.337359][T11561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.569334][ T5869] usb 3-1: USB disconnect, device number 77
[  468.577809][ T5953] usb 5-1: USB disconnect, device number 91
[  468.577871][    C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  468.929124][T11590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1434'.
[  468.939114][T11590] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1434'.
[  470.099669][ T5877] usb 4-1: new full-speed USB device number 89 using dummy_hcd
[  470.140135][ T5869] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  470.239569][ T5877] usb 4-1: device descriptor read/64, error -71
[  470.309582][ T5953] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  470.317425][ T5869] usb 2-1: Using ep0 maxpacket: 16
[  470.361096][ T5869] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.374466][ T5869] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.389578][ T5869] usb 2-1: config 0 interface 0 has no altsetting 0
[  470.396374][ T5869] usb 2-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00
[  470.405790][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.416828][ T5869] usb 2-1: config 0 descriptor??
[  470.489638][ T5877] usb 4-1: new full-speed USB device number 90 using dummy_hcd
[  470.523390][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.535576][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.554359][ T5953] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  470.579361][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.614455][ T5953] usb 3-1: config 0 descriptor??
[  470.649622][ T5877] usb 4-1: device descriptor read/64, error -71
[  470.704603][ T5946] usb 2-1: USB disconnect, device number 77
[  470.772220][ T5877] usb usb4-port1: attempt power cycle
[  471.129575][ T5877] usb 4-1: new full-speed USB device number 91 using dummy_hcd
[  471.189552][ T5953] usbhid 3-1:0.0: can't add hid device: -71
[  471.207651][ T5953] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  471.266472][ T5953] usb 3-1: USB disconnect, device number 78
[  471.343199][ T5877] usb 4-1: device descriptor read/8, error -71
[  471.613140][ T5877] usb 4-1: new full-speed USB device number 92 using dummy_hcd
[  471.652427][ T5877] usb 4-1: device descriptor read/8, error -71
[  471.771024][ T5877] usb usb4-port1: unable to enumerate USB device
[  471.946462][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  472.182778][T11623] program syz.0.1441 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  472.574544][ T5946] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  472.786764][ T5946] usb 2-1: unable to get BOS descriptor or descriptor too short
[  472.820544][ T5946] usb 2-1: config 6 has an invalid interface number: 144 but max is 0
[  472.877278][ T5946] usb 2-1: config 6 has no interface number 0
[  472.889688][ T5946] usb 2-1: config 6 interface 144 altsetting 1 endpoint 0x3 has an invalid bInterval 113, changing to 10
[  472.926953][ T5946] usb 2-1: config 6 interface 144 has no altsetting 0
[  472.948484][ T5946] usb 2-1: New USB device found, idVendor=7f55, idProduct=02fc, bcdDevice=20.c2
[  472.959749][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.989534][ T5946] usb 2-1: Product: syz
[  472.993733][ T5946] usb 2-1: Manufacturer: syz
[  473.040182][ T5946] usb 2-1: SerialNumber: syz
[  473.089624][ T5869] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  473.262411][ T5869] usb 1-1: Using ep0 maxpacket: 16
[  473.282978][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  473.304318][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  473.334832][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  473.367433][ T5869] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  473.425380][ T5946] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  473.434853][ T5869] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  473.441125][ T5946] usb 2-1: MIDIStreaming interface descriptor not found
[  473.459198][T11638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1449'.
[  473.508639][T11638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1449'.
[  473.553151][ T5869] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  473.569772][ T5869] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  473.603615][ T5869] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  473.623115][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  473.654199][ T5869] usb 1-1: SerialNumber: syz
[  473.678221][ T5946] usb 2-1: USB disconnect, device number 78
[  473.684501][ T5869] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  473.685401][ T5869] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12
[  474.218785][ T5869] usb 1-1: USB disconnect, device number 75
[  475.559640][   T43] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  475.711915][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  475.903241][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  475.923241][   T43] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  475.996091][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.053257][   T43] usb 3-1: config 0 descriptor??
[  476.162205][T11668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  476.169530][T11668] IPv6: NLM_F_CREATE should be set when creating new route
[  476.176823][T11668] IPv6: NLM_F_CREATE should be set when creating new route
[  476.219538][ T5953] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  476.445537][ T5953] usb 4-1: Using ep0 maxpacket: 8
[  476.455229][ T5953] usb 4-1: config 0 has an invalid interface number: 39 but max is 0
[  476.463852][ T5953] usb 4-1: config 0 has no interface number 0
[  476.495445][ T5953] usb 4-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27
[  476.495466][   T43] usbhid 3-1:0.0: can't add hid device: -71
[  476.495568][   T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  476.508007][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.601548][   T43] usb 3-1: USB disconnect, device number 79
[  476.607679][ T5953] usb 4-1: Product: syz
[  476.665526][ T5953] usb 4-1: Manufacturer: syz
[  476.682314][ T5953] usb 4-1: SerialNumber: syz
[  476.715126][ T5953] usb 4-1: config 0 descriptor??
[  476.736659][ T5953] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  476.829874][ T5869] usb 2-1: new full-speed USB device number 79 using dummy_hcd
[  477.041603][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  477.041623][   T30] audit: type=1800 audit(1758874978.105:356): pid=11666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1456" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  477.089532][ T5869] usb 2-1: device descriptor read/64, error -71
[  477.339747][ T5869] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[  477.679603][ T5869] usb 2-1: device descriptor read/64, error -71
[  477.806627][ T5869] usb usb2-port1: attempt power cycle
[  478.257526][T11710] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  478.289617][ T5869] usb 2-1: new full-speed USB device number 81 using dummy_hcd
[  478.516250][ T5869] usb 2-1: device descriptor read/8, error -71
[  478.670455][    T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  478.770583][ T5869] usb 2-1: new full-speed USB device number 82 using dummy_hcd
[  478.831729][    T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.851345][ T5869] usb 2-1: device descriptor read/8, error -71
[  478.892527][    T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  478.918459][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  478.941466][    T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  478.970002][ T5869] usb usb2-port1: unable to enumerate USB device
[  478.983211][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.038478][ T5869] usb 4-1: USB disconnect, device number 93
[  479.094682][    T9] usb 1-1: config 0 descriptor??
[  479.713087][    T9] usb 1-1: string descriptor 0 read error: -22
[  479.931776][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0031/input/input41
[  480.067598][    T9] uclogic 0003:256C:006D.0031: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[  480.161183][T11732] overlayfs: missing 'lowerdir'
[  480.210451][ T5869] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  480.246343][   T30] audit: type=1326 audit(1758874981.315:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.0.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398978eec9 code=0x7ffc0000
[  480.297086][T11710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.317130][T11710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.336818][   T30] audit: type=1326 audit(1758874981.315:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.0.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398978eec9 code=0x7ffc0000
[  480.373143][    T9] usb 1-1: USB disconnect, device number 76
[  480.423240][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  480.439795][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.476785][   T30] audit: type=1326 audit(1758874981.355:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.0.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f398978eec9 code=0x7ffc0000
[  480.499176][    C0] vkms_vblank_simulate: vblank timer overrun
[  480.508740][ T5869] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  480.534968][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.544153][   T30] audit: type=1326 audit(1758874981.355:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.0.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f398978eec9 code=0x7ffc0000
[  480.566626][    C0] vkms_vblank_simulate: vblank timer overrun
[  480.581648][   T30] audit: type=1326 audit(1758874981.355:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.0.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f398978eacb code=0x7ffc0000
[  480.612054][ T5869] usb 4-1: config 0 descriptor??
[  480.656340][   T30] audit: type=1326 audit(1758874981.355:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.0.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f398978eacb code=0x7ffc0000
[  480.678722][    C0] vkms_vblank_simulate: vblank timer overrun
[  480.735542][   T30] audit: type=1326 audit(1758874981.365:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.0.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f398978eacb code=0x7ffc0000
[  480.885755][   T30] audit: type=1326 audit(1758874981.365:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.0.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f398978eacb code=0x7ffc0000
[  480.908758][   T30] audit: type=1326 audit(1758874981.365:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11709 comm="syz.0.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f398978eacb code=0x7ffc0000
[  480.931043][    C0] vkms_vblank_simulate: vblank timer overrun
[  481.081498][ T5869] usbhid 4-1:0.0: can't add hid device: -71
[  481.098466][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  481.210485][ T5869] usb 4-1: USB disconnect, device number 94
[  481.338963][T11750] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'.
[  481.942485][T11757] netlink: 'syz.1.1482': attribute type 10 has an invalid length.
[  481.959313][T11757] 8021q: adding VLAN 0 to HW filter on device bond0
[  481.967777][T11757] team0: Port device bond0 added
[  481.993939][T11757] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1482'.
[  482.966998][T11783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.009712][ T5946] usb 3-1: new full-speed USB device number 80 using dummy_hcd
[  483.269750][   T93] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  483.354037][T11783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  483.370323][ T5946] usb 3-1: device descriptor read/64, error -71
[  483.649759][   T93] usb 2-1: Using ep0 maxpacket: 32
[  483.659888][   T93] usb 2-1: config 0 has no interfaces?
[  483.665893][   T93] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  483.696440][   T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.728030][   T93] usb 2-1: config 0 descriptor??
[  483.729564][ T5869] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  483.833266][ T5877] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  483.881160][ T5946] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[  483.948066][T11780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.959543][T11780] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.016318][ T5877] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  484.028144][ T5877] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  484.038166][ T5946] usb 3-1: device descriptor read/64, error -71
[  484.046822][ T5877] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  484.056348][ T5877] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  484.068100][T11789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.076926][T11789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.173633][ T5869] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.183118][ T5946] usb usb3-port1: attempt power cycle
[  484.203962][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  484.210307][T11782] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  484.223673][ T5953] usb 2-1: USB disconnect, device number 83
[  484.255332][ T5877] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  484.283664][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  484.323134][ T5869] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  484.332471][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.341152][ T5869] usb 1-1: Product: syz
[  484.345526][ T5869] usb 1-1: Manufacturer: syz
[  484.350423][ T5869] usb 1-1: SerialNumber: syz
[  484.360732][ T5869] usb 1-1: config 0 descriptor??
[  484.368610][ T5869] usb 1-1: ucan: probing device on interface #0
[  484.378655][ T5869] usb 1-1: ucan: invalid EP count (1)
[  484.386472][ T5869] usb 1-1: ucan: probe failed; try to update the device firmware
[  484.541036][ T5946] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[  484.592216][ T5946] usb 3-1: device descriptor read/8, error -71
[  484.630275][ T5877] usb 4-1: USB disconnect, device number 95
[  484.787519][ T8261] udevd[8261]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  484.829731][ T5946] usb 3-1: new full-speed USB device number 83 using dummy_hcd
[  484.852665][ T5946] usb 3-1: device descriptor read/8, error -71
[  484.962933][ T5946] usb usb3-port1: unable to enumerate USB device
[  484.999554][   T93] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  485.203967][   T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.215524][   T93] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  485.229715][   T93] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  485.248627][   T93] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.277689][   T93] usb 2-1: config 0 descriptor??
[  485.499663][ T5953] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  485.642718][ T5953] usb 4-1: device descriptor read/64, error -71
[  485.746232][T11802] binder: 11801:11802 ioctl c00c620f 200000000200 returned -22
[  485.788673][   T93] usbhid 2-1:0.0: can't add hid device: -71
[  485.794786][   T93] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  485.866569][ T5946] usb 1-1: USB disconnect, device number 77
[  485.889962][ T5953] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  485.905269][   T93] usb 2-1: USB disconnect, device number 84
[  486.019604][ T5953] usb 4-1: device descriptor read/64, error -71
[  486.282402][ T5953] usb usb4-port1: attempt power cycle
[  486.832341][ T5953] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  487.117598][ T5953] usb 4-1: device descriptor read/8, error -71
[  487.649539][ T5869] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  487.745476][ T5877] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  488.006143][ T5877] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  488.034516][ T5877] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  488.049544][ T5953] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  488.057060][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.100884][ T5877] usb 2-1: Product: syz
[  488.115419][ T5877] usb 2-1: Manufacturer: syz
[  488.135377][ T5877] usb 2-1: SerialNumber: syz
[  488.170281][ T5877] usb 2-1: config 0 descriptor??
[  488.859531][   T93] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  488.959692][ T5869] usb 5-1: Using ep0 maxpacket: 16
[  488.989718][ T5953] usb 4-1: device not accepting address 99, error -71
[  489.012805][   T93] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  489.030112][ T5953] usb usb4-port1: unable to enumerate USB device
[  489.039630][   T93] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  489.059273][   T93] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  489.082857][   T93] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  489.099555][    T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  489.136141][   T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.219543][   T93] usb 3-1: Product: syz
[  489.229546][   T93] usb 3-1: Manufacturer: syz
[  489.243160][   T93] usb 3-1: SerialNumber: syz
[  489.263406][    T9] usb 1-1: config index 0 descriptor too short (expected 8192, got 18)
[  489.273721][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  489.294567][    T9] usb 1-1: config 0 has no interfaces?
[  489.295211][   T93] usb 3-1: config 0 descriptor??
[  489.317114][T11842] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  489.332184][    T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  489.350956][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.359205][T11842] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  489.370996][   T93] usb 3-1: ucan: probing device on interface #0
[  489.407955][    T9] usb 1-1: Product: syz
[  489.426496][    T9] usb 1-1: Manufacturer: syz
[  489.436425][    T9] usb 1-1: SerialNumber: syz
[  489.450970][    T9] usb 1-1: config 0 descriptor??
[  489.597748][ T5869] usb 5-1: unable to read config index 0 descriptor/all
[  489.604843][ T5869] usb 5-1: can't read configurations, error -71
[  489.765533][T11829] bond0: (slave netdevsim0): Releasing backup interface
[  489.778071][   T93] usb 3-1: ucan: device reported invalid tx-fifo size
[  489.788545][   T93] usb 3-1: ucan: probe failed; try to update the device firmware
[  489.805188][T11829] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  489.872449][T11829] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  489.901400][    T9] usb 1-1: USB disconnect, device number 78
[  489.984170][   T93] usb 3-1: USB disconnect, device number 84
[  490.119820][ T5953] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  490.269560][ T5869] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  490.279674][ T5953] usb 4-1: Using ep0 maxpacket: 32
[  490.286592][ T5953] usb 4-1: config 0 has an invalid interface number: 4 but max is 0
[  490.294924][ T5953] usb 4-1: config 0 has an invalid descriptor of length 214, skipping remainder of the config
[  490.306097][ T5953] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  490.315180][ T5953] usb 4-1: config 0 has no interface number 1
[  490.321443][ T5953] usb 4-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  490.337545][ T5953] usb 4-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27
[  490.347364][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.355433][ T5953] usb 4-1: Product: syz
[  490.360569][ T5953] usb 4-1: Manufacturer: syz
[  490.365219][ T5953] usb 4-1: SerialNumber: syz
[  490.372997][ T5953] usb 4-1: config 0 descriptor??
[  490.384098][ T5953] pwc: Logitech QuickCam Pro 3000 USB webcam detected.
[  490.419534][ T5869] usb 5-1: Using ep0 maxpacket: 8
[  490.426403][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short
[  490.438545][ T5869] usb 5-1: config 8 interface 0 altsetting 7 endpoint 0x83 has invalid maxpacket 24929, setting to 1024
[  490.450152][ T5869] usb 5-1: config 8 interface 0 altsetting 7 bulk endpoint 0x83 has invalid maxpacket 1024
[  490.462144][ T5869] usb 5-1: config 8 interface 0 has no altsetting 0
[  490.473134][ T5869] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[  490.499713][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  490.516329][ T5869] usb 5-1: Product: syz
[  490.521528][ T5869] usb 5-1: Manufacturer: syz
[  490.527035][ T5869] usb 5-1: SerialNumber: syz
[  490.552305][T11848] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  490.619921][    T9] usb 2-1: USB disconnect, device number 85
[  490.736673][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.809177][T11848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  490.812410][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  490.818344][T11848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.047819][ T5953] pwc: Failed to set LED on/off time (-71)
[  491.060153][ T5953] pwc: send_video_command error -71
[  491.065639][ T5953] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  491.077869][ T5953] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  491.102931][    T9] usb 2-1: new low-speed USB device number 86 using dummy_hcd
[  491.111957][   T93] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[  491.133880][ T5869] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  491.170579][ T5953] usb 4-1: USB disconnect, device number 100
[  491.178652][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.179495][ T5869] usb 5-1: selecting invalid altsetting 0
[  491.246259][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.298935][ T5869] usb 5-1: USB disconnect, device number 93
[  491.305178][ T5946] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  491.342528][   T93] usb 1-1: device descriptor read/64, error -71
[  491.479775][ T5946] usb 3-1: Using ep0 maxpacket: 16
[  491.531423][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  491.533550][    T9] usb 2-1: device descriptor read/all, error -71
[  491.585209][   T93] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  491.634141][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  491.717840][ T5946] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  491.748887][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.767509][   T93] usb 1-1: device descriptor read/64, error -71
[  491.786822][ T5946] usb 3-1: config 0 descriptor??
[  491.901826][   T93] usb usb1-port1: attempt power cycle
[  492.203785][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'.
[  492.299719][   T93] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  492.430569][T11863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.460187][T11863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.522378][   T93] usb 1-1: device descriptor read/8, error -71
[  492.579761][T11863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  492.593363][T11863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  492.685695][ T5946] usbhid 3-1:0.0: can't add hid device: -71
[  492.706567][ T5946] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  492.790602][ T5946] usb 3-1: USB disconnect, device number 85
[  492.809502][   T93] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[  493.240634][   T93] usb 1-1: device descriptor read/8, error -71
[  493.454191][   T93] usb usb1-port1: unable to enumerate USB device
[  493.929549][   T93] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  493.950026][T11917] netlink: 'syz.4.1520': attribute type 10 has an invalid length.
[  494.079866][    T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  494.119555][   T93] usb 3-1: Using ep0 maxpacket: 32
[  494.149168][   T93] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f
[  494.170805][   T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.179096][   T93] usb 3-1: Product: syz
[  494.189232][   T93] usb 3-1: Manufacturer: syz
[  494.202688][   T93] usb 3-1: SerialNumber: syz
[  494.224106][   T93] usb 3-1: config 0 descriptor??
[  494.239868][   T93] ums-onetouch 3-1:0.0: USB Mass Storage device detected
[  494.242181][    T9] usb 2-1: Using ep0 maxpacket: 8
[  494.265906][    T9] usb 2-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  494.282166][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  494.288828][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[  494.309094][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.325042][   T93] usb 3-1: Found UVC 0.00 device syz (0d49:7000)
[  494.333246][    T9] usb 2-1: config 0 descriptor??
[  494.333376][   T93] usb 3-1: No valid video chain found.
[  494.453758][   T93] usb 3-1: USB disconnect, device number 86
[  494.489872][ T5869] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  494.549929][ T5953] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  494.641239][T11935] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠rXY� (pid: 11935 comm: syz.4.1522)
[  494.658950][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  494.658963][   T30] audit: type=1800 audit(1758874995.735:379): pid=11935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1522" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0727F185805599819 dev="mqueue" ino=43013 res=0 errno=0
[  494.697536][ T5869] usb 4-1: Using ep0 maxpacket: 16
[  494.704548][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  494.715523][ T5869] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  494.725467][ T5869] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  494.736175][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.745194][ T5953] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  494.753995][ T5953] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  494.765218][ T5953] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  494.775378][ T5869] usb 4-1: config 0 descriptor??
[  494.781295][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  494.792402][ T5953] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  494.812161][ T5953] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  494.826376][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  494.835159][ T5953] usb 1-1: Product: syz
[  494.840786][    T9] lenovo 0003:17EF:60FE.0032: hidraw0: USB HID v0.0b Device [HID 17ef:60fe] on usb-dummy_hcd.1-1/input0
[  494.853226][ T5953] usb 1-1: Manufacturer: syz
[  494.871651][ T5953] cdc_wdm 1-1:1.0: skipping garbage
[  494.876928][ T5953] cdc_wdm 1-1:1.0: skipping garbage
[  494.891719][ T5953] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  494.897694][ T5953] cdc_wdm 1-1:1.0: Unknown control protocol
[  495.023297][ T5946] usb 2-1: USB disconnect, device number 88
[  495.023441][T11939] syzkaller1: entered promiscuous mode
[  495.038914][T11939] syzkaller1: entered allmulticast mode
[  495.053618][ T5869] usbhid 4-1:0.0: can't add hid device: -71
[  495.061349][ T5869] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  495.074122][ T5953] usb 1-1: USB disconnect, device number 83
[  495.113557][ T5869] usb 4-1: USB disconnect, device number 101
[  495.178224][T11947] hsr0: entered allmulticast mode
[  495.197875][T11947] hsr_slave_0: entered allmulticast mode
[  495.213937][T11947] hsr_slave_1: entered allmulticast mode
[  495.236408][T11947] hsr_slave_0: left promiscuous mode
[  495.243319][T11947] hsr_slave_1: left promiscuous mode
[  495.261757][T11947] hsr0 (unregistering): left allmulticast mode
[  495.438005][T11939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1526'.
[  495.449012][T11939] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1526'.
[  496.542247][   T93] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  496.727390][   T93] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.739592][   T93] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  496.854142][   T93] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  496.904881][   T93] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  496.926768][   T93] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.935416][   T93] usb 3-1: Product: syz
[  496.940328][   T93] usb 3-1: Manufacturer: syz
[  496.944979][   T93] usb 3-1: SerialNumber: syz
[  496.949595][ T5869] usb 1-1: new full-speed USB device number 84 using dummy_hcd
[  497.080282][ T5869] usb 1-1: device descriptor read/64, error -71
[  497.339945][ T5869] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[  497.433078][T11982] netlink: 'syz.1.1536': attribute type 5 has an invalid length.
[  497.569596][ T5869] usb 1-1: device descriptor read/64, error -71
[  497.741056][T11981] QAT: failed to copy from user cfg_data.
[  497.760139][ T5869] usb usb1-port1: attempt power cycle
[  498.124213][ T5869] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[  498.232441][ T5869] usb 1-1: device descriptor read/8, error -71
[  498.610381][ T5869] usb 1-1: new full-speed USB device number 87 using dummy_hcd
[  498.657448][ T5869] usb 1-1: device descriptor read/8, error -71
[  498.769997][ T5869] usb usb1-port1: unable to enumerate USB device
[  499.221353][   T93] cdc_ncm 3-1:1.0: bind() failure
[  499.229715][   T93] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71
[  499.313623][   T93] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71
[  499.342361][   T93] usbtest 3-1:1.1: probe with driver usbtest failed with error -71
[  499.443213][   T93] usb 3-1: USB disconnect, device number 87
[  499.862971][T12001] loop4: detected capacity change from 0 to 7
[  499.943684][T12001] Dev loop4: unable to read RDB block 7
[  499.974068][T12001]  loop4: unable to read partition table
[  500.021159][T12001] loop4: partition table beyond EOD, truncated
[  500.070579][T12001] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  500.437330][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'.
[  500.463100][T12014] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1543'.
[  500.502618][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1543'.
[  500.670246][T12028] loop6: detected capacity change from 0 to 7
[  500.707810][ T8261] Dev loop6: unable to read RDB block 7
[  500.713776][ T8261]  loop6: unable to read partition table
[  500.729841][ T8261] loop6: partition table beyond EOD, truncated
[  500.758421][T12028] Dev loop6: unable to read RDB block 7
[  500.778065][T12028]  loop6: unable to read partition table
[  500.817335][T12028] loop6: partition table beyond EOD, truncated
[  500.837450][T12028] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  501.599568][ T5869] usb 4-1: new full-speed USB device number 102 using dummy_hcd
[  501.648094][ T1305] ieee802154 phy0 wpan0: encryption failed: -22
[  501.787310][ T1305] ieee802154 phy1 wpan1: encryption failed: -22
[  502.041399][ T5869] usb 4-1: device descriptor read/64, error -71
[  502.294608][T12057] loop4: detected capacity change from 0 to 7
[  502.341557][T12057] Dev loop4: unable to read RDB block 7
[  502.419542][ T5869] usb 4-1: new full-speed USB device number 103 using dummy_hcd
[  502.439564][T12057]  loop4: unable to read partition table
[  502.445422][T12057] loop4: partition table beyond EOD, truncated
[  502.477810][T12057] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  502.732608][ T5869] usb 4-1: device descriptor read/64, error -71
[  502.856638][ T5869] usb usb4-port1: attempt power cycle
[  502.999569][ T5946] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  503.151150][ T5946] usb 5-1: Using ep0 maxpacket: 8
[  503.161458][ T5946] usb 5-1: config 1 interface 0 altsetting 210 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  503.179539][ T5946] usb 5-1: config 1 interface 0 has no altsetting 0
[  503.239539][ T5869] usb 4-1: new full-speed USB device number 104 using dummy_hcd
[  503.272760][ T5869] usb 4-1: device descriptor read/8, error -71
[  503.521722][ T5869] usb 4-1: new full-speed USB device number 105 using dummy_hcd
[  503.562797][ T5869] usb 4-1: device descriptor read/8, error -71
[  503.680014][ T5869] usb usb4-port1: unable to enumerate USB device
[  503.900155][ T5953] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  504.052276][ T5953] usb 1-1: Using ep0 maxpacket: 8
[  504.079031][ T5953] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  504.097765][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.120449][ T5953] usb 1-1: Product: syz
[  504.138595][ T5953] usb 1-1: Manufacturer: syz
[  504.144283][ T5953] usb 1-1: SerialNumber: syz
[  504.176211][ T5953] usb 1-1: config 0 descriptor??
[  504.199491][ T5877] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  504.370453][ T5877] usb 3-1: Using ep0 maxpacket: 16
[  504.380524][ T5877] usb 3-1: config 0 has an invalid descriptor of length 197, skipping remainder of the config
[  504.398540][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[  504.412480][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 152, changing to 11
[  504.428243][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 33236, setting to 1024
[  504.428827][ T5953] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  504.454982][ T5877] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  504.481328][ T5877] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  504.491225][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.499291][ T5877] usb 3-1: Product: syz
[  504.504070][ T5877] usb 3-1: Manufacturer: syz
[  504.508735][ T5877] usb 3-1: SerialNumber: syz
[  504.518039][ T5877] usb 3-1: config 0 descriptor??
[  504.591698][T12089] bridge_slave_0: left allmulticast mode
[  504.597626][T12089] bridge_slave_0: left promiscuous mode
[  504.604539][T12089] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.624834][T12089] bridge_slave_1: left allmulticast mode
[  504.631014][T12089] bridge_slave_1: left promiscuous mode
[  504.639181][T12089] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.678269][T12089] bond0: (slave bond_slave_0): Releasing backup interface
[  504.698084][T12089] bond0: (slave bond_slave_1): Releasing backup interface
[  504.710659][ T5877] rc_core: IR keymap rc-xbox-dvd not found
[  504.716651][ T5877] Registered IR keymap rc-empty
[  504.723486][ T5877] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  504.746100][ T5877] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input42
[  504.760273][T12089] team0: Port device team_slave_0 removed
[  504.781679][ T5877] usb 3-1: USB disconnect, device number 88
[  504.787711][    C1] xbox_remote 3-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19
[  504.838130][T12089] team0: Port device team_slave_1 removed
[  504.848363][T12089] batman_adv: batadv0: Removing interface: batadv_slave_0
[  504.866764][T12089] batman_adv: batadv0: Removing interface: batadv_slave_1
[  504.892585][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  504.903709][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.931866][T12089] bond1: (slave veth3): Releasing active interface
[  505.770741][T12101] loop4: detected capacity change from 0 to 7
[  505.843212][T12101] Dev loop4: unable to read RDB block 7
[  505.850323][ T5946] usb 5-1: New USB device found, idVendor=056a, idProduct=0097, bcdDevice= 0.40
[  505.864282][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.874013][T12101]  loop4: unable to read partition table
[  505.879197][ T5946] usb 5-1: Product: syz
[  505.884134][T12101] loop4: partition table beyond EOD, truncated
[  505.912247][ T5946] usb 5-1: can't set config #1, error -71
[  505.955560][ T5946] usb 5-1: USB disconnect, device number 94
[  506.052434][T12101] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  506.169575][ T5236] Dev loop4: unable to read RDB block 7
[  506.179371][ T5953] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  506.189355][ T5236]  loop4: unable to read partition table
[  506.195890][ T5236] loop4: partition table beyond EOD, truncated
[  506.199830][ T5953] usb 1-1: USB disconnect, device number 88
[  506.898173][T12121] kvm: apic: phys broadcast and lowest prio
[  507.436383][ T5953] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  507.704340][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  507.802508][ T5953] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  507.814451][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.889700][ T5953] usb 1-1: Product: syz
[  507.942964][ T5953] usb 1-1: Manufacturer: syz
[  507.969492][ T5953] usb 1-1: SerialNumber: syz
[  508.048809][ T5953] usb 1-1: config 0 descriptor??
[  508.524481][T12123] netlink: 'syz.0.1577': attribute type 21 has an invalid length.
[  508.532635][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'.
[  508.560083][T12123] netlink: 'syz.0.1577': attribute type 21 has an invalid length.
[  508.570150][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'.
[  508.595723][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1577'.
[  508.631313][T12134] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1580'.
[  508.652204][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1580'.
[  508.899372][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'.
[  508.950058][T12143] fuse: Unknown parameter '000000000000000000000030x000000000000000300000000000000000003000000000000000000000000000000000000000300000000000000000000'
[  509.486519][T12158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1586'.
[  509.783988][ T5953] usb 1-1: USB disconnect, device number 89
[  509.859748][ T5877] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  509.899812][    T9] usb 2-1: new low-speed USB device number 89 using dummy_hcd
[  510.107401][ T5877] usb 3-1: Using ep0 maxpacket: 16
[  510.135155][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  510.162467][    T9] usb 2-1: device descriptor read/64, error -71
[  510.385544][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  510.494426][ T5877] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  510.516021][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.519751][    T9] usb 2-1: new low-speed USB device number 90 using dummy_hcd
[  510.561710][ T5877] usb 3-1: Product: syz
[  510.566390][ T5877] usb 3-1: Manufacturer: syz
[  510.572220][ T5877] usb 3-1: SerialNumber: syz
[  510.659698][    T9] usb 2-1: device descriptor read/64, error -71
[  510.782935][    T9] usb usb2-port1: attempt power cycle
[  511.009748][ T5946] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  511.159516][    T9] usb 2-1: new low-speed USB device number 91 using dummy_hcd
[  511.159604][ T5946] usb 5-1: Using ep0 maxpacket: 8
[  511.183185][T12180] loop9: detected capacity change from 0 to 7
[  511.188155][ T5946] usb 5-1: unable to get BOS descriptor or descriptor too short
[  511.190059][T12180] buffer_io_error: 5 callbacks suppressed
[  511.190076][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.211740][    T9] usb 2-1: device descriptor read/8, error -71
[  511.218216][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.228789][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.229597][   T93] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  511.237643][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.250118][ T5946] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  511.256496][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.264886][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.273790][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.278405][ T5946] usb 5-1: Product: syz
[  511.286070][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.286150][T12180] ldm_validate_partition_table(): Disk read failed.
[  511.286196][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.286282][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.291601][ T5946] usb 5-1: Manufacturer: syz
[  511.298580][T12180] Buffer I/O error on dev loop9, logical block 0, async page read
[  511.305594][ T5946] usb 5-1: SerialNumber: syz
[  511.316659][T12180] Dev loop9: unable to read RDB block 0
[  511.349233][T12180]  loop9: unable to read partition table
[  511.355400][T12180] loop9: partition table beyond EOD, truncated
[  511.373375][T12180] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  511.373375][T12180] 
) failed (rc=-5)
[  511.399544][   T93] usb 4-1: Using ep0 maxpacket: 8
[  511.411632][   T93] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  511.421994][   T93] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  511.432722][   T93] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  511.443323][   T93] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  511.457511][   T93] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  511.468720][   T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  511.469753][    T9] usb 2-1: new low-speed USB device number 92 using dummy_hcd
[  511.511640][    T9] usb 2-1: device descriptor read/8, error -71
[  511.560703][ T5946] usb 5-1: selecting invalid altsetting 1
[  511.567869][ T5946] catc 5-1:8.0: Can't set altsetting 1.
[  511.581293][ T5946] catc 5-1:8.0: probe with driver catc failed with error -5
[  511.605418][ T5946] usb 5-1: USB disconnect, device number 95
[  511.630037][    T9] usb usb2-port1: unable to enumerate USB device
[  511.695272][   T93] usb 4-1: GET_CAPABILITIES returned 0
[  511.709544][   T93] usbtmc 4-1:16.0: can't read capabilities
[  511.965542][T12178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  511.987803][T12178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  512.023368][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'.
[  512.045048][T12178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1591'.
[  512.073898][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.083047][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.092154][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.116460][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.125604][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.134706][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.162043][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.171176][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.172310][    T9] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  512.180280][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.201426][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.210554][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.219752][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.314234][ T5877] usb 3-1: 0:2 : does not exist
[  512.329735][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.338862][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.347963][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.357067][    C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  512.363835][ T5877] usb 3-1: USB disconnect, device number 89
[  512.449950][    T9] usb 1-1: Using ep0 maxpacket: 8
[  512.460484][    T9] usb 1-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85
[  512.492066][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.502056][    T9] usb 1-1: Product: syz
[  512.506416][    T9] usb 1-1: Manufacturer: syz
[  512.509905][   T24] usb 4-1: USB disconnect, device number 106
[  512.514485][    T9] usb 1-1: SerialNumber: syz
[  512.564388][ T8261] udevd[8261]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  512.658928][    T9] usb 1-1: config 0 descriptor??
[  512.683813][    T9] ipw 1-1:0.0: IPWireless converter converter detected
[  512.741021][T12211] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1598'.
[  512.902062][    T9] usb 1-1: USB disconnect, device number 90
[  512.944237][    T9] ipw 1-1:0.0: device disconnected
[  513.794584][T12233] netlink: 'syz.1.1603': attribute type 12 has an invalid length.
[  513.861593][T12233] __nla_validate_parse: 1 callbacks suppressed
[  513.861613][T12233] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1603'.
[  513.881499][T12233] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  513.919787][T12233] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  514.212071][T12244] netlink: 'syz.0.1604': attribute type 10 has an invalid length.
[  514.220208][T12244] batadv0: left allmulticast mode
[  514.226670][T12244] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.277058][T12244] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  514.593700][T12257] netlink: 'syz.1.1605': attribute type 12 has an invalid length.
[  514.829686][   T24] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  514.999514][   T24] usb 1-1: Using ep0 maxpacket: 32
[  515.022853][   T24] usb 1-1: config 0 has an invalid interface number: 38 but max is 0
[  515.035659][   T24] usb 1-1: config 0 has no interface number 0
[  515.078766][   T24] usb 1-1: config 0 interface 38 has no altsetting 0
[  515.133988][   T24] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3
[  515.157387][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.191072][   T24] usb 1-1: Product: syz
[  515.212010][   T24] usb 1-1: Manufacturer: syz
[  515.236965][   T24] usb 1-1: SerialNumber: syz
[  515.268237][   T24] usb 1-1: config 0 descriptor??
[  515.320640][   T24] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  515.475868][T12270] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1609'.
[  515.983193][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.992624][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  516.544961][   T24] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110
[  516.545056][   T24] gspca_pac7302 1-1:0.38: probe with driver gspca_pac7302 failed with error -110
[  516.914817][T12298] netlink: 'syz.0.1606': attribute type 3 has an invalid length.
[  516.939701][T12298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'.
[  517.101611][T12270] bridge0: entered allmulticast mode
[  517.169677][ T5946] usb 3-1: new low-speed USB device number 90 using dummy_hcd
[  517.329795][ T5946] usb 3-1: Invalid ep0 maxpacket: 16
[  517.459507][ T5946] usb 3-1: new low-speed USB device number 91 using dummy_hcd
[  517.834783][ T5946] usb 3-1: Invalid ep0 maxpacket: 16
[  517.848301][ T5946] usb usb3-port1: attempt power cycle
[  517.985037][ T5877] usb 1-1: USB disconnect, device number 91
[  518.171217][ T5869] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  518.229513][ T5946] usb 3-1: new low-speed USB device number 92 using dummy_hcd
[  518.300868][ T5946] usb 3-1: Invalid ep0 maxpacket: 16
[  518.429623][ T5946] usb 3-1: new low-speed USB device number 93 using dummy_hcd
[  518.481688][ T5946] usb 3-1: Invalid ep0 maxpacket: 16
[  518.487451][ T5946] usb usb3-port1: unable to enumerate USB device
[  518.911691][ T5869] usb 5-1: unable to get BOS descriptor or descriptor too short
[  518.941623][ T5946] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  518.965728][ T5869] usb 5-1: unable to read config index 0 descriptor/start: -71
[  519.048749][ T5869] usb 5-1: can't read configurations, error -71
[  519.207561][ T5946] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  519.270759][ T5946] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  519.362191][T12344] netlink: 'syz.4.1621': attribute type 10 has an invalid length.
[  519.377032][T12344] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  519.468811][ T5946] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  519.500528][T12344] wg1: entered promiscuous mode
[  519.515423][T12344] wg1: entered allmulticast mode
[  519.615715][ T5946] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  519.702742][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.729242][ T5946] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  519.737978][ T5946] usb 1-1: invalid MIDI out EP 0
[  519.891358][ T5946] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  519.919519][ T5869] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  520.138229][ T5869] usb 5-1: Using ep0 maxpacket: 32
[  520.158122][ T5946] usb 1-1: USB disconnect, device number 92
[  520.413467][ T5869] usb 5-1: config 0 has an invalid interface number: 217 but max is 0
[  520.437588][ T5869] usb 5-1: config 0 has no interface number 0
[  520.523836][   T30] audit: type=1326 audit(1758875021.575:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  520.591631][ T5869] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02
[  520.600902][   T30] audit: type=1326 audit(1758875021.585:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  520.623711][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.631936][ T5869] usb 5-1: Product: syz
[  520.636444][ T5869] usb 5-1: Manufacturer: syz
[  520.659002][ T5869] usb 5-1: SerialNumber: syz
[  520.688969][ T5869] usb 5-1: config 0 descriptor??
[  520.689786][ T5877] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  520.720300][   T30] audit: type=1326 audit(1758875021.585:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  520.773816][   T30] audit: type=1326 audit(1758875021.585:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  520.904255][ T5877] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  520.917858][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.933652][ T5869] ftdi_sio 5-1:0.217: FTDI USB Serial Device converter detected
[  520.972708][   T30] audit: type=1326 audit(1758875021.725:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  521.014094][ T5877] usb 3-1: config 0 descriptor??
[  521.027390][ T5877] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  521.078022][   T30] audit: type=1326 audit(1758875021.725:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  521.079619][ T5869] usb 5-1: Detected SIO
[  521.383326][   T30] audit: type=1326 audit(1758875021.915:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  521.392510][ T5869] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  521.453987][   T30] audit: type=1326 audit(1758875021.915:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  521.599735][   T93] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  521.697662][   T30] audit: type=1326 audit(1758875021.915:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  521.782820][   T30] audit: type=1326 audit(1758875021.915:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f258638eec9 code=0x7ffc0000
[  521.809703][   T93] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  521.838639][   T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  521.858037][   T93] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  521.895979][   T93] usb 2-1: config 0 interface 0 has no altsetting 0
[  521.916250][   T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  521.928551][   T93] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  521.969227][   T93] usb 2-1: config 0 interface 0 has no altsetting 0
[  521.996540][   T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  522.021008][   T93] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  522.076167][   T93] usb 2-1: config 0 interface 0 has no altsetting 0
[  522.084194][   T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  522.095902][   T93] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  522.110620][   T93] usb 2-1: config 0 interface 0 has no altsetting 0
[  522.123205][   T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  522.141948][   T93] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  522.174729][   T93] usb 2-1: config 0 interface 0 has no altsetting 0
[  522.186385][   T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  522.225868][   T93] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  522.278864][   T93] usb 2-1: config 0 interface 0 has no altsetting 0
[  522.321597][   T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  522.355305][   T93] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  522.398192][   T93] usb 2-1: config 0 interface 0 has no altsetting 0
[  522.439650][   T93] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  522.465087][   T93] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  522.496360][   T93] usb 2-1: config 0 interface 0 has no altsetting 0
[  522.537246][   T93] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  522.589502][   T93] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  522.618549][   T93] usb 2-1: Product: syz
[  522.635447][   T93] usb 2-1: Manufacturer: syz
[  522.659594][   T93] usb 2-1: SerialNumber: syz
[  522.676865][   T93] usb 2-1: config 0 descriptor??
[  522.716564][   T93] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  523.155503][ T5869] usb 5-1: USB disconnect, device number 97
[  523.173243][ T5869] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  523.173820][ T5869] ftdi_sio 5-1:0.217: device disconnected
[  523.273455][ T5953] usb 3-1: USB disconnect, device number 94
[  523.412715][    T9] usb 2-1: USB disconnect, device number 93
[  523.457526][T12403] kvm: apic: phys broadcast and lowest prio
[  524.269555][ T5869] usb 5-1: new full-speed USB device number 98 using dummy_hcd
[  524.422073][ T5869] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  524.432612][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  524.459760][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  524.645092][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  524.666538][ T5869] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  524.675901][ T5869] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  524.698024][ T5869] usb 5-1: Manufacturer: syz
[  524.712748][ T5869] usb 5-1: config 0 descriptor??
[  524.879930][    T9] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  525.235739][ T5869] rc_core: IR keymap rc-hauppauge not found
[  525.246337][ T5869] Registered IR keymap rc-empty
[  525.254717][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  525.279554][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  525.318017][ T5869] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  525.371707][ T5869] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input44
[  525.412186][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  525.449697][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  525.529629][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  525.719596][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  525.749875][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  525.799626][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  525.888695][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  525.900795][   T93] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  526.019564][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  526.066690][   T93] usb 2-1: config 0 has no interfaces?
[  526.078981][   T93] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  526.099965][   T93] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.108886][   T93] usb 2-1: Product: syz
[  526.114547][   T93] usb 2-1: Manufacturer: syz
[  526.119247][   T93] usb 2-1: SerialNumber: syz
[  526.141304][   T93] usb 2-1: config 0 descriptor??
[  526.179536][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  526.243869][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  526.269779][ T5877] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  526.429538][ T5877] usb 1-1: device descriptor read/64, error -71
[  526.490319][ T5869] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  526.545007][ T5869] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  526.584759][ T5869] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  526.676743][ T5869] usb 5-1: USB disconnect, device number 98
[  526.729473][ T5877] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  526.742364][T12447] gtp0: entered promiscuous mode
[  526.747485][T12447] gtp0: entered allmulticast mode
[  526.869561][ T5877] usb 1-1: device descriptor read/64, error -71
[  526.990081][ T5877] usb usb1-port1: attempt power cycle
[  527.049541][ T5869] usb 5-1: new full-speed USB device number 99 using dummy_hcd
[  527.202576][ T5869] usb 5-1: not running at top speed; connect to a high speed hub
[  527.212310][ T5869] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  527.223740][ T5869] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  527.241468][ T5869] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  527.281246][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.298101][ T5869] usb 5-1: Product: ࠖ
[  527.307059][ T5869] usb 5-1: Manufacturer: ࠇ
[  527.315056][ T5869] usb 5-1: SerialNumber: Ј
[  527.343151][ T5877] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  527.380594][ T5877] usb 1-1: device descriptor read/8, error -71
[  528.096783][ T5869] usb 5-1: 0:2 : does not exist
[  528.129808][ T5877] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  528.170383][ T5877] usb 1-1: device descriptor read/8, error -71
[  528.189429][ T5869] usb 5-1: USB disconnect, device number 99
[  528.253958][ T8261] udevd[8261]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such device
[  528.290073][ T5877] usb usb1-port1: unable to enumerate USB device
[  528.346675][ T5877] usb 2-1: USB disconnect, device number 94
[  528.591236][T12487] program syz.2.1652 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  528.613765][T12487] netlink: 'syz.2.1652': attribute type 10 has an invalid length.
[  528.667837][T12487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1652'.
[  528.748148][T12487] batman_adv: batadv0: Adding interface: virt_wifi0
[  528.755282][T12487] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  528.783988][T12487] batman_adv: batadv0: Interface activated: virt_wifi0
[  528.824803][T12487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1652'.
[  530.703809][T12508] loop6: detected capacity change from 0 to 7
[  530.713432][ T8261] Dev loop6: unable to read RDB block 7
[  530.719010][ T8261]  loop6: unable to read partition table
[  530.732411][ T8261] loop6: partition table beyond EOD, truncated
[  530.742883][T12508] Dev loop6: unable to read RDB block 7
[  530.748480][T12508]  loop6: unable to read partition table
[  530.763528][T12508] loop6: partition table beyond EOD, truncated
[  530.781936][T12508] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  530.921202][ T5869] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  530.944336][T12512] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  530.988082][T12512] openvswitch: netlink: Key type 125 is out of range max 32
[  531.037510][T12517] openvswitch: netlink: Key type 125 is out of range max 32
[  531.040744][T12518] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  531.093146][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  531.114834][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  531.140219][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  531.160984][ T5869] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  531.174310][ T5869] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  531.188559][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.213546][ T5869] usb 1-1: config 0 descriptor??
[  531.259758][ T5877] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  531.269572][   T24] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[  531.422680][ T5869] hdpvr 1-1:0.0: firmware version 0x69 dated ̫SL�ٸ�i:��h����ݤD�j�u���7~��?be�lO�z�
[  531.439608][ T5877] usb 5-1: Using ep0 maxpacket: 16
[  531.457319][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  531.470533][   T24] usb 2-1: config 5 has an invalid interface number: 100 but max is 2
[  531.487903][ T5869] hdpvr 1-1:0.0: untested firmware, the driver might not work.
[  531.487903][   T24] usb 2-1: config 5 has an invalid interface number: 176 but max is 2
[  531.487926][   T24] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping
[  531.519602][ T5877] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  531.528894][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  531.541125][ T5877] usb 5-1: config 0 descriptor??
[  531.614006][   T24] usb 2-1: config 5 has an invalid interface number: 188 but max is 2
[  531.623673][   T24] usb 2-1: config 5 has no interface number 0
[  531.636258][   T24] usb 2-1: config 5 has no interface number 1
[  531.676917][   T24] usb 2-1: config 5 has no interface number 2
[  531.683926][   T24] usb 2-1: config 5 interface 100 altsetting 7 has an invalid descriptor for endpoint zero, skipping
[  531.696476][   T24] usb 2-1: config 5 interface 100 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  531.710350][   T24] usb 2-1: config 5 interface 188 altsetting 1 endpoint 0x3 has invalid maxpacket 27169, setting to 1023
[  531.723369][   T24] usb 2-1: config 5 interface 188 altsetting 1 has an endpoint descriptor with address 0x5F, changing to 0xF
[  531.744090][   T24] usb 2-1: config 5 interface 188 altsetting 1 endpoint 0xF has an invalid bInterval 61, changing to 4
[  531.756756][   T24] usb 2-1: config 5 interface 188 altsetting 1 endpoint 0xF has invalid maxpacket 11680, setting to 1023
[  531.774356][   T24] usb 2-1: config 5 interface 188 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[  531.792630][   T24] usb 2-1: config 5 interface 188 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 13
[  531.808442][   T24] usb 2-1: config 5 interface 100 has no altsetting 0
[  531.836275][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  531.849910][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  531.865754][   T24] usb 2-1: config 5 interface 176 has no altsetting 0
[  531.875926][   T24] usb 2-1: config 5 interface 188 has no altsetting 0
[  531.892630][   T24] usb 2-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=e2.69
[  531.905521][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.067929][   T24] usb 2-1: Product: syz
[  532.109547][   T24] usb 2-1: SerialNumber: syz
[  532.127080][ T5869] hdpvr 1-1:0.0: Could not setup controls
[  532.190259][ T5869] hdpvr 1-1:0.0: registering videodev failed
[  532.273989][ T5869] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71
[  532.310943][ T5869] usb 1-1: USB disconnect, device number 97
[  532.351469][T12529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  532.370830][   T24] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in cold state, will try to load a firmware
[  532.428337][   T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  532.459569][   T24] dib0700: firmware download failed at 7 with -22
[  532.483616][   T24] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in cold state, will try to load a firmware
[  532.496624][ T5877] usbhid 5-1:0.0: can't add hid device: -71
[  532.502713][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  532.515302][ T5877] usb 5-1: USB disconnect, device number 100
[  532.523222][   T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  532.546177][   T24] dib0700: firmware download failed at 7 with -22
[  532.571977][T12534] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1667'.
[  532.631738][   T24] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in cold state, will try to load a firmware
[  532.664042][   T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  532.675729][   T24] dib0700: firmware download failed at 7 with -22
[  532.711673][   T24] usb 2-1: USB disconnect, device number 95
[  533.765450][T12553] loop6: detected capacity change from 0 to 7
[  533.772485][T12553] Dev loop6: unable to read RDB block 7
[  533.779038][T12553]  loop6: unable to read partition table
[  533.787496][T12553] loop6: partition table beyond EOD, truncated
[  533.802969][T12553] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  535.175637][    C0] 
[  535.175654][    C0] ========================================================
[  535.175666][    C0] WARNING: possible irq lock inversion dependency detected
[  535.175681][    C0] syzkaller #0 Not tainted
[  535.175694][    C0] --------------------------------------------------------
[  535.175703][    C0] syz.2.1676/12573 just changed the state of lock:
[  535.175715][    C0] ffff888146b22230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[  535.175786][    C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past:
[  535.175798][    C0]  (tasklist_lock){.+.+}-{3:3}
[  535.175817][    C0] 
[  535.175817][    C0] 
[  535.175817][    C0] and interrupts could create inverse lock ordering between them.
[  535.175817][    C0] 
[  535.175827][    C0] 
[  535.175827][    C0] other info that might help us debug this:
[  535.175834][    C0] Chain exists of:
[  535.175834][    C0]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  535.175834][    C0] 
[  535.175869][    C0]  Possible interrupt unsafe locking scenario:
[  535.175869][    C0] 
[  535.175876][    C0]        CPU0                    CPU1
[  535.175882][    C0]        ----                    ----
[  535.175888][    C0]   lock(tasklist_lock);
[  535.175901][    C0]                                local_irq_disable();
[  535.175908][    C0]                                lock(&dev->event_lock#2);
[  535.175925][    C0]                                lock(&client->buffer_lock);
[  535.175939][    C0]   <Interrupt>
[  535.175944][    C0]     lock(&dev->event_lock#2);
[  535.175961][    C0] 
[  535.175961][    C0]  *** DEADLOCK ***
[  535.175961][    C0] 
[  535.175966][    C0] 6 locks held by syz.2.1676/12573:
[  535.175977][    C0]  #0: ffff88802f12e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  535.176019][    C0]  #1: ffff88802f12e130 (&tty->atomic_write_lock){+.+.}-{4:4}, at: file_tty_write+0x211/0xa20
[  535.176058][    C0]  #2: ffff88802f12e2e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_write+0x1e0/0x1200
[  535.176101][    C0]  #3: ffffc90003114380 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_write+0x653/0x1200
[  535.176144][    C0]  #4: ffffffff8e12e380 (console_lock){+.+.}-{0:0}, at: do_con_write+0x102/0x5200
[  535.176184][    C0]  #5: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: led_trigger_event+0x4b/0x210
[  535.176226][    C0] 
[  535.176226][    C0] the shortest dependencies between 2nd lock and 1st lock:
[  535.176243][    C0]     -> (tasklist_lock){.+.+}-{3:3} {
[  535.176266][    C0]        HARDIRQ-ON-R at:
[  535.176277][    C0]                             lock_acquire+0x120/0x360
[  535.176300][    C0]                             _raw_read_lock+0x36/0x50
[  535.176315][    C0]                             __do_wait+0xde/0x740
[  535.176334][    C0]                             do_wait+0x1f8/0x520
[  535.176354][    C0]                             kernel_wait+0xab/0x170
[  535.176374][    C0]                             call_usermodehelper_exec_work+0xbe/0x230
[  535.176399][    C0]                             process_scheduled_works+0xae1/0x17b0
[  535.176415][    C0]                             worker_thread+0x8a0/0xda0
[  535.176430][    C0]                             kthread+0x70e/0x8a0
[  535.176449][    C0]                             ret_from_fork+0x439/0x7d0
[  535.176470][    C0]                             ret_from_fork_asm+0x1a/0x30
[  535.176492][    C0]        SOFTIRQ-ON-R at:
[  535.176502][    C0]                             lock_acquire+0x120/0x360
[  535.176523][    C0]                             _raw_read_lock+0x36/0x50
[  535.176537][    C0]                             __do_wait+0xde/0x740
[  535.176556][    C0]                             do_wait+0x1f8/0x520
[  535.176576][    C0]                             kernel_wait+0xab/0x170
[  535.176596][    C0]                             call_usermodehelper_exec_work+0xbe/0x230
[  535.176620][    C0]                             process_scheduled_works+0xae1/0x17b0
[  535.176635][    C0]                             worker_thread+0x8a0/0xda0
[  535.176650][    C0]                             kthread+0x70e/0x8a0
[  535.176668][    C0]                             ret_from_fork+0x439/0x7d0
[  535.176683][    C0]                             ret_from_fork_asm+0x1a/0x30
[  535.176704][    C0]        INITIAL USE at:
[  535.176713][    C0]                            lock_acquire+0x120/0x360
[  535.176735][    C0]                            _raw_write_lock_irq+0xa2/0xf0
[  535.176751][    C0]                            copy_process+0x224f/0x3c00
[  535.176766][    C0]                            kernel_clone+0x21e/0x840
[  535.176783][    C0]                            user_mode_thread+0xdd/0x140
[  535.176801][    C0]                            rest_init+0x23/0x300
[  535.176820][    C0]                            start_kernel+0x3a9/0x410
[  535.176837][    C0]                            x86_64_start_reservations+0x24/0x30
[  535.176858][    C0]                            x86_64_start_kernel+0x143/0x1c0
[  535.176879][    C0]                            common_startup_64+0x13e/0x147
[  535.176900][    C0]        INITIAL READ USE at:
[  535.176910][    C0]                                 lock_acquire+0x120/0x360
[  535.176931][    C0]                                 _raw_read_lock+0x36/0x50
[  535.176945][    C0]                                 __do_wait+0xde/0x740
[  535.176964][    C0]                                 do_wait+0x1f8/0x520
[  535.176984][    C0]                                 kernel_wait+0xab/0x170
[  535.177004][    C0]                                 call_usermodehelper_exec_work+0xbe/0x230
[  535.177027][    C0]                                 process_scheduled_works+0xae1/0x17b0
[  535.177042][    C0]                                 worker_thread+0x8a0/0xda0
[  535.177057][    C0]                                 kthread+0x70e/0x8a0
[  535.177075][    C0]                                 ret_from_fork+0x439/0x7d0
[  535.177090][    C0]                                 ret_from_fork_asm+0x1a/0x30
[  535.177110][    C0]      }
[  535.177116][    C0]      ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[  535.177139][    C0]      ... acquired at:
[  535.177145][    C0]    lock_acquire+0x120/0x360
[  535.177166][    C0]    _raw_read_lock+0x36/0x50
[  535.177178][    C0]    send_sigurg+0x12b/0x420
[  535.177195][    C0]    sk_send_sigurg+0x6c/0x2e0
[  535.177217][    C0]    queue_oob+0x420/0x4f0
[  535.177239][    C0]    unix_stream_sendmsg+0xc3f/0xdf0
[  535.177259][    C0]    __sock_sendmsg+0x219/0x270
[  535.177281][    C0]    ____sys_sendmsg+0x52d/0x830
[  535.177298][    C0]    ___sys_sendmsg+0x21f/0x2a0
[  535.177316][    C0]    __sys_sendmmsg+0x227/0x430
[  535.177333][    C0]    __x64_sys_sendmmsg+0xa0/0xc0
[  535.177352][    C0]    do_syscall_64+0xfa/0x3b0
[  535.177369][    C0]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.177384][    C0] 
[  535.177389][    C0]    -> (&f_owner->lock){....}-{3:3} {
[  535.177412][    C0]       INITIAL USE at:
[  535.177422][    C0]                          lock_acquire+0x120/0x360
[  535.177443][    C0]                          _raw_write_lock_irq+0xa2/0xf0
[  535.177462][    C0]                          __f_setown+0x67/0x370
[  535.177478][    C0]                          f_setown+0x23a/0x300
[  535.177493][    C0]                          do_fcntl+0x11d/0x1910
[  535.177509][    C0]                          __se_sys_fcntl+0xc8/0x150
[  535.177525][    C0]                          do_syscall_64+0xfa/0x3b0
[  535.177542][    C0]                          entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.177558][    C0]       INITIAL READ USE at:
[  535.177568][    C0]                               lock_acquire+0x120/0x360
[  535.177589][    C0]                               _raw_read_lock_irqsave+0xaf/0x100
[  535.177604][    C0]                               send_sigio+0x38/0x370
[  535.177620][    C0]                               dnotify_handle_event+0x169/0x440
[  535.177638][    C0]                               fsnotify+0x1671/0x1a80
[  535.177660][    C0]                               __fsnotify_parent+0x3fe/0x540
[  535.177683][    C0]                               vfs_read+0x802/0xa30
[  535.177702][    C0]                               __x64_sys_pread64+0x193/0x220
[  535.177723][    C0]                               do_syscall_64+0xfa/0x3b0
[  535.177740][    C0]                               entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.177756][    C0]     }
[  535.177761][    C0]     ... key      at: [<ffffffff99b34fe0>] file_f_owner_allocate.__key+0x0/0x20
[  535.177789][    C0]     ... acquired at:
[  535.177795][    C0]    lock_acquire+0x120/0x360
[  535.177815][    C0]    _raw_read_lock_irqsave+0xaf/0x100
[  535.177830][    C0]    send_sigio+0x38/0x370
[  535.177844][    C0]    kill_fasync+0x24d/0x4d0
[  535.177861][    C0]    sock_wake_async+0x137/0x160
[  535.177874][    C0]    sock_def_readable+0x3bb/0x550
[  535.177895][    C0]    queue_oob+0x452/0x4f0
[  535.177916][    C0]    unix_stream_sendmsg+0xc3f/0xdf0
[  535.177937][    C0]    __sock_sendmsg+0x219/0x270
[  535.177958][    C0]    ____sys_sendmsg+0x52d/0x830
[  535.177975][    C0]    ___sys_sendmsg+0x21f/0x2a0
[  535.177992][    C0]    __sys_sendmmsg+0x227/0x430
[  535.178010][    C0]    __x64_sys_sendmmsg+0xa0/0xc0
[  535.178028][    C0]    do_syscall_64+0xfa/0x3b0
[  535.178044][    C0]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.178059][    C0] 
[  535.178063][    C0]   -> (&new->fa_lock){....}-{3:3} {
[  535.178086][    C0]      INITIAL USE at:
[  535.178096][    C0]                        lock_acquire+0x120/0x360
[  535.178117][    C0]                        _raw_write_lock_irq+0xa2/0xf0
[  535.178132][    C0]                        fasync_remove_entry+0xf1/0x1c0
[  535.178148][    C0]                        __fput+0x89f/0xa70
[  535.178164][    C0]                        task_work_run+0x1d1/0x260
[  535.178184][    C0]                        do_exit+0x6b5/0x2300
[  535.178202][    C0]                        do_group_exit+0x21c/0x2d0
[  535.178221][    C0]                        get_signal+0x1286/0x1340
[  535.178235][    C0]                        arch_do_signal_or_restart+0x9a/0x750
[  535.178258][    C0]                        exit_to_user_mode_loop+0x75/0x110
[  535.178280][    C0]                        do_syscall_64+0x2bd/0x3b0
[  535.178297][    C0]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.178312][    C0]      INITIAL READ USE at:
[  535.178322][    C0]                             lock_acquire+0x120/0x360
[  535.178343][    C0]                             _raw_read_lock_irqsave+0xaf/0x100
[  535.178358][    C0]                             kill_fasync+0x199/0x4d0
[  535.178375][    C0]                             evdev_pass_values+0x627/0xbd0
[  535.178390][    C0]                             evdev_events+0x1e6/0x340
[  535.178405][    C0]                             input_pass_values+0x285/0x890
[  535.178420][    C0]                             input_event_dispose+0x330/0x6b0
[  535.178440][    C0]                             input_inject_event+0x1dd/0x340
[  535.178466][    C0]                             evdev_write+0x2fc/0x480
[  535.178482][    C0]                             vfs_write+0x27e/0xb30
[  535.178500][    C0]                             ksys_write+0x145/0x250
[  535.178519][    C0]                             do_syscall_64+0xfa/0x3b0
[  535.178536][    C0]                             entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.178552][    C0]    }
[  535.178557][    C0]    ... key      at: [<ffffffff99b35000>] fasync_insert_entry.__key+0x0/0x20
[  535.178583][    C0]    ... acquired at:
[  535.178589][    C0]    lock_acquire+0x120/0x360
[  535.178609][    C0]    _raw_read_lock_irqsave+0xaf/0x100
[  535.178624][    C0]    kill_fasync+0x199/0x4d0
[  535.178639][    C0]    evdev_pass_values+0x627/0xbd0
[  535.178654][    C0]    evdev_events+0x1e6/0x340
[  535.178668][    C0]    input_pass_values+0x285/0x890
[  535.178682][    C0]    input_event_dispose+0x330/0x6b0
[  535.178701][    C0]    input_inject_event+0x1dd/0x340
[  535.178721][    C0]    evdev_write+0x2fc/0x480
[  535.178736][    C0]    vfs_write+0x27e/0xb30
[  535.178754][    C0]    ksys_write+0x145/0x250
[  535.178773][    C0]    do_syscall_64+0xfa/0x3b0
[  535.178789][    C0]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.178804][    C0] 
[  535.178808][    C0]  -> (&client->buffer_lock){....}-{3:3} {
[  535.178831][    C0]     INITIAL USE at:
[  535.178841][    C0]                      lock_acquire+0x120/0x360
[  535.178862][    C0]                      _raw_spin_lock+0x2e/0x40
[  535.178884][    C0]                      evdev_pass_values+0xb9/0xbd0
[  535.178899][    C0]                      evdev_events+0x1e6/0x340
[  535.178914][    C0]                      input_pass_values+0x285/0x890
[  535.178928][    C0]                      input_event_dispose+0x330/0x6b0
[  535.178948][    C0]                      input_inject_event+0x1dd/0x340
[  535.178969][    C0]                      evdev_write+0x2fc/0x480
[  535.178984][    C0]                      vfs_write+0x27e/0xb30
[  535.179003][    C0]                      ksys_write+0x145/0x250
[  535.179021][    C0]                      do_syscall_64+0xfa/0x3b0
[  535.179038][    C0]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.179054][    C0]   }
[  535.179062][    C0]   ... key      at: [<ffffffff99e342a0>] evdev_open.__key.25+0x0/0x20
[  535.179083][    C0]   ... acquired at:
[  535.179089][    C0]    lock_acquire+0x120/0x360
[  535.179109][    C0]    _raw_spin_lock+0x2e/0x40
[  535.179131][    C0]    evdev_pass_values+0xb9/0xbd0
[  535.179145][    C0]    evdev_events+0x1e6/0x340
[  535.179159][    C0]    input_pass_values+0x285/0x890
[  535.179173][    C0]    input_event_dispose+0x330/0x6b0
[  535.179193][    C0]    input_inject_event+0x1dd/0x340
[  535.179212][    C0]    evdev_write+0x2fc/0x480
[  535.179227][    C0]    vfs_write+0x27e/0xb30
[  535.179245][    C0]    ksys_write+0x145/0x250
[  535.179264][    C0]    do_syscall_64+0xfa/0x3b0
[  535.179279][    C0]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.179295][    C0] 
[  535.179299][    C0] -> (&dev->event_lock#2){..-.}-{3:3} {
[  535.179325][    C0]    IN-SOFTIRQ-W at:
[  535.179335][    C0]                     lock_acquire+0x120/0x360
[  535.179356][    C0]                     _raw_spin_lock_irqsave+0xa7/0xf0
[  535.179379][    C0]                     input_inject_event+0xa5/0x340
[  535.179399][    C0]                     led_trigger_event+0x138/0x210
[  535.179416][    C0]                     kbd_bh+0x1c6/0x2e0
[  535.179437][    C0]                     tasklet_action_common+0x36c/0x580
[  535.179463][    C0]                     handle_softirqs+0x283/0x870
[  535.179480][    C0]                     __irq_exit_rcu+0xca/0x1f0
[  535.179497][    C0]                     irq_exit_rcu+0x9/0x30
[  535.179513][    C0]                     sysvec_call_function_single+0xa3/0xc0
[  535.179528][    C0]                     asm_sysvec_call_function_single+0x1a/0x20
[  535.179545][    C0]                     _raw_spin_unlock_irqrestore+0xa8/0x110
[  535.179560][    C0]                     do_con_write+0x4169/0x5200
[  535.179577][    C0]                     con_write+0x24/0x40
[  535.179591][    C0]                     n_tty_write+0xd29/0x1200
[  535.179611][    C0]                     file_tty_write+0x551/0xa20
[  535.179625][    C0]                     vfs_write+0x5c9/0xb30
[  535.179644][    C0]                     ksys_write+0x145/0x250
[  535.179663][    C0]                     do_syscall_64+0xfa/0x3b0
[  535.179680][    C0]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.179695][    C0]    INITIAL USE at:
[  535.179705][    C0]                    lock_acquire+0x120/0x360
[  535.179727][    C0]                    _raw_spin_lock_irqsave+0xa7/0xf0
[  535.179750][    C0]                    input_inject_event+0xa5/0x340
[  535.179770][    C0]                    kbd_led_trigger_activate+0xbc/0x100
[  535.179791][    C0]                    led_trigger_set+0x52d/0x950
[  535.179807][    C0]                    led_trigger_set_default+0x260/0x2a0
[  535.179825][    C0]                    led_classdev_register_ext+0x73d/0x930
[  535.179840][    C0]                    input_leds_connect+0x517/0x790
[  535.179862][    C0]                    input_register_device+0xcfd/0x1140
[  535.179885][    C0]                    atkbd_connect+0x72e/0xa00
[  535.179901][    C0]                    serio_driver_probe+0x82/0xd0
[  535.179915][    C0]                    really_probe+0x26a/0x9e0
[  535.179935][    C0]                    __driver_probe_device+0x18c/0x2f0
[  535.179954][    C0]                    driver_probe_device+0x4f/0x430
[  535.179974][    C0]                    __driver_attach+0x452/0x700
[  535.179992][    C0]                    bus_for_each_dev+0x230/0x2b0
[  535.180007][    C0]                    serio_handle_event+0x1f9/0x8d0
[  535.180022][    C0]                    process_scheduled_works+0xae1/0x17b0
[  535.180037][    C0]                    worker_thread+0x8a0/0xda0
[  535.180052][    C0]                    kthread+0x70e/0x8a0
[  535.180069][    C0]                    ret_from_fork+0x439/0x7d0
[  535.180083][    C0]                    ret_from_fork_asm+0x1a/0x30
[  535.180104][    C0]  }
[  535.180109][    C0]  ... key      at: [<ffffffff99e34000>] input_allocate_device.__key.5+0x0/0x20
[  535.180129][    C0]  ... acquired at:
[  535.180135][    C0]    mark_lock+0x11b/0x190
[  535.180147][    C0]    __lock_acquire+0x680/0xd20
[  535.180168][    C0]    lock_acquire+0x120/0x360
[  535.180189][    C0]    _raw_spin_lock_irqsave+0xa7/0xf0
[  535.180211][    C0]    input_inject_event+0xa5/0x340
[  535.180231][    C0]    led_trigger_event+0x138/0x210
[  535.180247][    C0]    kbd_bh+0x1c6/0x2e0
[  535.180266][    C0]    tasklet_action_common+0x36c/0x580
[  535.180283][    C0]    handle_softirqs+0x283/0x870
[  535.180297][    C0]    __irq_exit_rcu+0xca/0x1f0
[  535.180311][    C0]    irq_exit_rcu+0x9/0x30
[  535.180324][    C0]    sysvec_call_function_single+0xa3/0xc0
[  535.180338][    C0]    asm_sysvec_call_function_single+0x1a/0x20
[  535.180354][    C0]    _raw_spin_unlock_irqrestore+0xa8/0x110
[  535.180368][    C0]    do_con_write+0x4169/0x5200
[  535.180384][    C0]    con_write+0x24/0x40
[  535.180399][    C0]    n_tty_write+0xd29/0x1200
[  535.180418][    C0]    file_tty_write+0x551/0xa20
[  535.180431][    C0]    vfs_write+0x5c9/0xb30
[  535.180449][    C0]    ksys_write+0x145/0x250
[  535.180473][    C0]    do_syscall_64+0xfa/0x3b0
[  535.180489][    C0]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.180504][    C0] 
[  535.180508][    C0] 
[  535.180508][    C0] stack backtrace:
[  535.180519][    C0] CPU: 0 UID: 0 PID: 12573 Comm: syz.2.1676 Not tainted syzkaller #0 PREEMPT(full) 
[  535.180537][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  535.180548][    C0] Call Trace:
[  535.180555][    C0]  <IRQ>
[  535.180562][    C0]  dump_stack_lvl+0x189/0x250
[  535.180583][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  535.180601][    C0]  ? __pfx__printk+0x10/0x10
[  535.180626][    C0]  print_irq_inversion_bug+0x1d2/0x1e0
[  535.180644][    C0]  mark_lock_irq+0x35f/0x390
[  535.180662][    C0]  mark_lock+0x11b/0x190
[  535.180676][    C0]  __lock_acquire+0x680/0xd20
[  535.180700][    C0]  ? input_inject_event+0xa5/0x340
[  535.180721][    C0]  lock_acquire+0x120/0x360
[  535.180742][    C0]  ? input_inject_event+0xa5/0x340
[  535.180768][    C0]  _raw_spin_lock_irqsave+0xa7/0xf0
[  535.180791][    C0]  ? input_inject_event+0xa5/0x340
[  535.180811][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  535.180834][    C0]  ? led_trigger_event+0x4b/0x210
[  535.180852][    C0]  ? led_trigger_event+0x4b/0x210
[  535.180870][    C0]  input_inject_event+0xa5/0x340
[  535.180891][    C0]  ? led_trigger_event+0x4b/0x210
[  535.180909][    C0]  led_trigger_event+0x138/0x210
[  535.180927][    C0]  kbd_bh+0x1c6/0x2e0
[  535.180948][    C0]  tasklet_action_common+0x36c/0x580
[  535.180966][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  535.180986][    C0]  ? __pfx_tasklet_action_common+0x10/0x10
[  535.181007][    C0]  ? workqueue_softirq_action+0xd4/0x150
[  535.181025][    C0]  handle_softirqs+0x283/0x870
[  535.181042][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  535.181058][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  535.181073][    C0]  ? sched_clock_cpu+0x74/0x430
[  535.181088][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  535.181109][    C0]  __irq_exit_rcu+0xca/0x1f0
[  535.181124][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  535.181140][    C0]  ? rcu_is_watching+0x15/0xb0
[  535.181157][    C0]  irq_exit_rcu+0x9/0x30
[  535.181171][    C0]  sysvec_call_function_single+0xa3/0xc0
[  535.181186][    C0]  </IRQ>
[  535.181192][    C0]  <TASK>
[  535.181198][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  535.181215][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110
[  535.181231][    C0] Code: 74 05 e8 8b 49 4a f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 13 f0 12 f6 65 8b 05 6c d1 23 07 85 c0 74 40 48 c7 04 24 0e 36
[  535.181246][    C0] RSP: 0018:ffffc9001bf075e0 EFLAGS: 00000206
[  535.181259][    C0] RAX: f7596bed3f5c4800 RBX: 0000000000000a06 RCX: f7596bed3f5c4800
[  535.181272][    C0] RDX: 0000000000000006 RSI: ffffffff8d9ba4bd RDI: 0000000000000001
[  535.181283][    C0] RBP: ffffc9001bf07670 R08: ffffffff8fa3a837 R09: 1ffffffff1f47506
[  535.181295][    C0] R10: dffffc0000000000 R11: fffffbfff1f47507 R12: dffffc0000000000
[  535.181326][    C0] R13: ffff88801a4a1398 R14: ffffffff8e9a6760 R15: 1ffff920037e0ebc
[  535.181345][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  535.181362][    C0]  ? vt_set_led_state+0x131/0x1f0
[  535.181378][    C0]  do_con_write+0x4169/0x5200
[  535.181411][    C0]  ? __pfx_do_con_write+0x10/0x10
[  535.181428][    C0]  ? __mutex_lock+0x335/0x1350
[  535.181446][    C0]  ? n_tty_write+0xe35/0x1200
[  535.181471][    C0]  ? n_tty_write+0x653/0x1200
[  535.181490][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  535.181508][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  535.181524][    C0]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  535.181546][    C0]  con_write+0x24/0x40
[  535.181562][    C0]  n_tty_write+0xd29/0x1200
[  535.181589][    C0]  ? __pfx_n_tty_write+0x10/0x10
[  535.181608][    C0]  ? __pfx_woken_wake_function+0x10/0x10
[  535.181629][    C0]  ? file_tty_write+0x323/0xa20
[  535.181643][    C0]  ? rcu_is_watching+0x15/0xb0
[  535.181658][    C0]  ? kfree+0x4d/0x440
[  535.181677][    C0]  ? __pfx_n_tty_write+0x10/0x10
[  535.181697][    C0]  file_tty_write+0x551/0xa20
[  535.181715][    C0]  vfs_write+0x5c9/0xb30
[  535.181736][    C0]  ? __pfx_tty_write+0x10/0x10
[  535.181751][    C0]  ? __pfx_vfs_write+0x10/0x10
[  535.181774][    C0]  ? __fget_files+0x2a/0x420
[  535.181791][    C0]  ksys_write+0x145/0x250
[  535.181811][    C0]  ? __pfx_ksys_write+0x10/0x10
[  535.181830][    C0]  ? rcu_is_watching+0x15/0xb0
[  535.181846][    C0]  ? do_syscall_64+0xbe/0x3b0
[  535.181865][    C0]  do_syscall_64+0xfa/0x3b0
[  535.181881][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  535.181897][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.181912][    C0]  ? clear_bhb_loop+0x60/0xb0
[  535.181930][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  535.181944][    C0] RIP: 0033:0x7f5ea4d8eec9
[  535.181959][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  535.181972][    C0] RSP: 002b:00007f5ea2b91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  535.181988][    C0] RAX: ffffffffffffffda RBX: 00007f5ea4fe6270 RCX: 00007f5ea4d8eec9
[  535.182000][    C0] RDX: 0000000000001006 RSI: 0000200000001600 RDI: 0000000000000008
[  535.182010][    C0] RBP: 00007f5ea4e11f91 R08: 0000000000000000 R09: 0000000000000000
[  535.182021][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  535.182031][    C0] R13: 00007f5ea4fe6308 R14: 00007f5ea4fe6270 R15: 00007f5ea510fa28
[  535.182048][    C0]  </TASK>