last executing test programs:

18m57.200090968s ago: executing program 32 (id=220):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c)

17m16.81737707s ago: executing program 33 (id=1073):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

17m5.093645591s ago: executing program 34 (id=1152):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$netlink(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4044811)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf)

16m46.765325537s ago: executing program 35 (id=1284):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000100)=0x470f, 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)

15m8.881212207s ago: executing program 36 (id=1963):
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc49, 0x4})
sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

14m56.695950701s ago: executing program 37 (id=2028):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10)
pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0)

13m45.924785031s ago: executing program 38 (id=2433):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
unshare(0x64000600)
ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x3, 0x200, 0x4})

12m49.315134435s ago: executing program 39 (id=2759):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
syz_usb_control_io(r0, 0x0, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000680)={0x1, 0x40, 0x1, &(0x7f0000000240)={0x14, "0fd62f1944b23de763cfb137449ccf18ea4ee9f23bc4e6acba8d11e8daa6c4ee99"}})

12m33.937269611s ago: executing program 40 (id=2817):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x7ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001400190100000000000000022865d1519e"], 0x28}}, 0x0)

9m27.96274548s ago: executing program 7 (id=3762):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x7db, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x0, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x7, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x4, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x100, 0x8, 0x800006, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x9d0d, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0xff, 0x1, 0xc, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0x6, 0x2, 0x4, 0x9, 0x2, 0x7, 0x100, 0x8, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x0, 0x3c63, 0x7, 0x6, 0x8, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0xf, 0x100, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc]}, 0x45c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001ac0)={0xffffffffffffffff, 0x10000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c7fe581b06788011314d528539f3fc279733f0374c17d8a0ba193b3e7772fd29f3526666674a385efc4c00", "24432e1e77a610174ff100000000000000004000000001800000000000000100", [0x0, 0xffffffffffffffff]}})
syz_open_dev$ttys(0xc, 0x2, 0x0)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x80000}}, 0x50)
preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/250, 0xfa}], 0x1, 0xdfc, 0x124c)

9m25.975255629s ago: executing program 0 (id=3770):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202080, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

9m25.588668945s ago: executing program 0 (id=3773):
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000640)=[{&(0x7f0000001a00)="ce", 0x1}], 0x1, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x2, 0xe)
r4 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)

9m25.152476895s ago: executing program 0 (id=3776):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0], [], [0x0, 0x0, 0x8, 0x8000], [0x0, 0x3, 0x400000006]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})

9m24.649145761s ago: executing program 0 (id=3779):
r0 = epoll_create1(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x9})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

9m24.488599102s ago: executing program 7 (id=3780):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)

9m24.109798143s ago: executing program 0 (id=3781):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0xfff7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @loopback}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

9m23.948552409s ago: executing program 7 (id=3782):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01feffffff000000000006241a0000000905810300020000020904010000020d00000904010102020d00000905822f88d65d0000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x14, 0x10, 0x10, 0x10, 0x10, 0x10, 0x13, 0xe, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0})
r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

9m23.376737019s ago: executing program 0 (id=3785):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3)
close_range(r1, r3, 0x0)

9m23.026440153s ago: executing program 41 (id=3785):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x3)
close_range(r1, r3, 0x0)

9m20.844733172s ago: executing program 7 (id=3795):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff)

9m19.979626871s ago: executing program 7 (id=3801):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0)

9m18.152320541s ago: executing program 7 (id=3803):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback, 0xffffffff}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x1d, 0xffffffffffffffff, {0x4}}, './file0\x00'})
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8)

9m17.64039612s ago: executing program 42 (id=3803):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r1)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback, 0xffffffff}, 0x1c)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x1d, 0xffffffffffffffff, {0x4}}, './file0\x00'})
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0x1c)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x2}, 0x8)

7m59.715990831s ago: executing program 6 (id=4119):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
move_pages(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000a0d000/0x3000)=nil], 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0x1c}}, 0x40000)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m59.146132088s ago: executing program 6 (id=4124):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", <r1=>0xffffffffffffffff})
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, <r4=>0xffffffffffffffff})
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r6=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", <r7=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r7, <r8=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r8, <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"31ec861d1bdbb2f004dd52ad43b7db21214d0677cda624d9b86d05e119883e3f", r9})

7m58.912479827s ago: executing program 6 (id=4126):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0x14}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf, 0x2, 0xe, 0x0, 0x7fff, 0x38f7}, {0x9, 0x1, 0x0, 0xfffe, 0x8, 0x401}, 0xf5, 0x80000001, 0x210e}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xee3ce641f2ef5769}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0x72f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0xffff}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

7m58.324396876s ago: executing program 6 (id=4127):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
ioctl$LOOP_SET_FD(r3, 0x4c03, r3)
dup2(r2, r0)

7m57.749462488s ago: executing program 6 (id=4128):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r4 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x2020)

7m57.444541435s ago: executing program 6 (id=4130):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)="d0039e16e5d0207ad4d192c128c552dc5cab6d682c37cec2cbea7b9fa8fd1c6d1bff8f367332dd23080c9b4ff0cf018a62fd", 0x32}], 0x1)
r3 = dup(r2)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m56.86052904s ago: executing program 43 (id=4130):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000100)="d0039e16e5d0207ad4d192c128c552dc5cab6d682c37cec2cbea7b9fa8fd1c6d1bff8f367332dd23080c9b4ff0cf018a62fd", 0x32}], 0x1)
r3 = dup(r2)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m31.123158352s ago: executing program 4 (id=4235):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xe}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)

7m30.620015284s ago: executing program 4 (id=4239):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@host})
socket(0x200000100000011, 0x803, 0x0)
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$admmidi(&(0x7f0000000000), 0x20, 0x0)
socket(0x400000000010, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$kcm(0x2, 0x200000000000001, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000000)={&(0x7f0000000540)={{@host=0x10, 0xffffffff}, {@host=0x10, 0x1}, 0x400, "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"}, 0x418, 0x2001})

7m29.480721547s ago: executing program 4 (id=4247):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0xb1e9, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000400)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80800)
vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1)
fcntl$setpipe(r5, 0x407, 0x176)
vmsplice(r6, &(0x7f0000000240)=[{&(0x7f0000000a40)='5', 0x1}], 0x1, 0x0)

7m27.980621157s ago: executing program 4 (id=4249):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

7m27.598994097s ago: executing program 4 (id=4263):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_int(r0, 0x0, 0x6, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d)
ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r4, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r4}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

7m27.369700175s ago: executing program 4 (id=4253):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xfffc)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7m26.45796586s ago: executing program 44 (id=4253):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xfffc)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m56.672519187s ago: executing program 3 (id=4608):
mmap(&(0x7f0000f9b000/0x3000)=nil, 0x3000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x2004000}, 0x24008041)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5m55.702602685s ago: executing program 3 (id=4610):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(0x3)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, &(0x7f0000000240)="94", 0x1)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
fchdir(r3)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x40001ae)
tee(r0, r2, 0x8f5, 0x0)

5m55.58540173s ago: executing program 3 (id=4612):
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(0x3)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r1, &(0x7f0000000240)="94", 0x1)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00')
fchdir(r3)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0x84000584)
tee(r0, r2, 0x8f5, 0x0)

5m55.447019694s ago: executing program 3 (id=4613):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
unshare(0x2c020400)

5m54.643738615s ago: executing program 3 (id=4614):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8169, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x41b, 0x3})
dup(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

5m54.356788754s ago: executing program 3 (id=4617):
r0 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}], 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4)
unshare(0x2000400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000fa0b00000008000100ba"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020)

5m53.331002923s ago: executing program 45 (id=4617):
r0 = socket$kcm(0x11, 0x20000000000000a, 0x300)
r1 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f0000000200)=""/144, 0x90}], 0x4}, 0x1}], 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x28, &(0x7f0000000000), 0x4)
unshare(0x2000400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000003, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010300000000000000fa0b00000008000100ba"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020)

12.99484157s ago: executing program 2 (id=5818):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r0, r3)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x10001, @private2={0xfc, 0x2, '\x00', 0x1}, 0x81}, 0x1c)
getdents64(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYBLOB="000205005ed89bc8cc"], 0xd)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507"], 0x0)

12.476124602s ago: executing program 9 (id=5819):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000e00)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x40, 0x12, 0x38}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000d40)={0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="003c0300000063"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.161422373s ago: executing program 8 (id=5822):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x358, 0xffff8880b870dfff)
ptrace$getregset(0x4204, r2, 0x200, 0x0)
syz_io_uring_setup(0x49a, &(0x7f0000000500)={0x0, 0x79af, 0x3180, 0x1, 0x36}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x84400)

11.160630573s ago: executing program 1 (id=5832):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000180)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

10.081107104s ago: executing program 8 (id=5823):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth0_vlan\x00'}, 0x18)

9.87569707s ago: executing program 2 (id=5824):
socket$nl_netfilter(0x10, 0x3, 0xc)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x22, 0x0, 0x0)
listen(r1, 0x0)
accept4(r1, 0x0, 0x0, 0x80800)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, 0x0)
socket$unix(0x1, 0x5, 0x0)

8.83614371s ago: executing program 8 (id=5826):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r2, 0x0, 0x7}, 0x38)

8.765573332s ago: executing program 9 (id=5828):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="001601"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.401817425s ago: executing program 8 (id=5830):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffe, 0x1, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000240)="a8", 0x0, 0x8, 0x0, 0x1, 0x0})
r1 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x20, 0x0, @fd, 0x5, 0x0, 0xb, 0x7})
io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000300)=[{0x0, 0x20}, {&(0x7f0000000500)=""/94, 0x5e}], 0x2, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3})

7.361208024s ago: executing program 5 (id=5831):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r1=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f000000080034000400000008000300", @ANYRES32=r1], 0x2c}}, 0x80)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x280449c, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000093c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x2026012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x40000, 0x2)
getdents64(r4, 0x0, 0x0)
statx(r4, &(0x7f0000000b00)='./file0\x00', 0x2000, 0x7ff, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="b8"], 0x0, 0x0, 0x0})

7.275451509s ago: executing program 2 (id=5833):
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
syz_open_dev$video(0x0, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7.128252684s ago: executing program 8 (id=5834):
unshare(0x2040400)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000180)=ANY=[], 0x0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000002240), 0x2)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x547e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x1e2, 0x0, r1}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0)

6.884334528s ago: executing program 1 (id=5835):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x800334e, 0x10, 0x3, 0x800}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0xb, {0x2, 0x5, 0x40, 0x180}, {0x100, 0x80000000, 0xfff, 0x140cde09}, {0xfffffffa, 0x64440999}})
bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_uring_enter(r2, 0x7277, 0x4000, 0x0, 0x0, 0x0)

6.39138256s ago: executing program 5 (id=5836):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200)})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000007d68c5ee17688a2003c08020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)

5.591713062s ago: executing program 9 (id=5837):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x1000000, 0x0, 0x4, 0x0, &(0x7f0000000280)="f8806115"})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

5.458261339s ago: executing program 5 (id=5838):
socket$inet6(0xa, 0x80002, 0x88)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4080, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r6, 0x40045542, &(0x7f00000001c0))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0)

5.348395339s ago: executing program 2 (id=5839):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'veth0_vlan\x00'}, 0x18)

5.334768378s ago: executing program 1 (id=5840):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8a324fb8f8a86162)
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1})
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4014f50b, 0x0)

4.546111225s ago: executing program 9 (id=5841):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x20001c}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe1, 0x6d, 0x5e, 0x40, 0xce9e, 0xd4fc, 0x7c43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x48, 0x0, 0x1, 0xe0, 0x1, 0x3, 0x0, [], [{{0x9, 0x5, 0x296df579a05dc682, 0x3, 0x10, 0x1, 0x8}}]}}]}}]}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x810)
io_setup(0xff, &(0x7f0000000380)=<r3=>0x0)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x4c, 0x12, 0x1, 0x0, 0x0, {0x10, 0x3, 0x2, 0x0, {0xfffe, 0x4e22, [0x0, 0xffffffff], [0x0, 0xfffffffc], 0x0, [0x8001]}}}, 0x4c}}, 0x20004010)
io_submit(r3, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r2, &(0x7f0000000340), 0x0, 0xffffffffffffffff}])

4.269309754s ago: executing program 8 (id=5842):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0x18, 0xb, "2ed44719d5b088b14d8846"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)

4.026714549s ago: executing program 1 (id=5843):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r1 = memfd_create(&(0x7f0000000580)='y\x105\xfb\xf7\x88\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7`\x9b=\xec\x9f\x1d\x9b@$\x8c\bb\x1a\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\'\xffO,4\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x01G\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\rr\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\xc6\x8a=\x04\xa35\x9b\xf5\x80E\x8f\x1e\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x10\x00'/276, 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x0, 0x0, 0x1000})
r3 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x4, 0x312}, &(0x7f00000029c0)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008880)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x7, 0x1})
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0xb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xeb})
io_uring_enter(r3, 0x7277, 0x0, 0x28, 0x0, 0x0)

4.005840977s ago: executing program 2 (id=5844):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2)
r3 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x85c3}})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
io_uring_enter(r3, 0x7323, 0x0, 0x5, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
clock_gettime(0x0, 0x0)

3.975672821s ago: executing program 5 (id=5845):
socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2040600)
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x1000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x3ff, r1}, 0x38)

3.006654063s ago: executing program 1 (id=5846):
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x800)
recvfrom(r0, &(0x7f0000000240)=""/234, 0xea, 0x2, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000200))
syz_genetlink_get_family_id$fou(&(0x7f0000001080), 0xffffffffffffffff)
r2 = socket(0x8000000010, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00')
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
write(r2, &(0x7f00000002c0)="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", 0xfc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e21, @remote}, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

2.069350248s ago: executing program 9 (id=5847):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r2, &(0x7f0000007100)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50)
read$FUSE(r2, &(0x7f000000cdc0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r5}, 0x10)
syz_fuse_handle_req(r2, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}})
syz_fuse_handle_req(r2, &(0x7f0000002780)="955a6d3d9389591b52410101df39065ac5c8944eaeb6d6b2bdfa4fb4c0838856a46fe5ada3e2eb72e9dd685f750d5a2f64dcd0992e0bb282c5261f8c3b4a4a1458221117337512cb8e3108a21b0ac1b7873d489a3e4328a9d57abc131532c693b3e0bcf65beff9c2313d4e16be211e4e11ff719a366420ffa5ad407447d3d766693a1aca49b368471c56f4368b73f5c475c4dbd7081393c5209abaec91694644162da1f20fbac85c4551d6dcb5082c8fccf9afa9544600219a5e1ae3a0ca36a6730228fe3e2959e2d4e0e010f513fa6de390e182c445ecc782e6cdfd359092ba8f51b8e8273013d26b39f378d00f4592a5c37c62ad4bb8133fb2ce9608d6b587ceb7147a8a7551c559ab0699fc995b0c634387be26aadf97983b528599c9cc51c870748dca7021087acc4c0b071df5ec6b9e13da3918ea604a51f33dc5413e3a82e0311e42b5bbeaee0ce2aa52a8fa608140cc33ea27eb2a1ba2759fe588d8bf81ac10eafdbd1d3735d1dbae688ba8a0b4c99bae43ef2429bab7c5a0e3e4a3a639cacfe890cf6823274c6c9acacc5ef1ea45e46baa9fd1c054736e4990bc28827dc6cedb99509ef49f9ce69c8a135cf50660439c22bebe5701bd5c197278ebbc778375695d5bb6a86d255d0f5fa69466aadb51c6bde1aabf24ff4c329574e5c80bd884f1984fbf81d4b5f3b6f0388c85d7086fa44265dc9cda05bcd93bde33609dd34df334134795240be3d05cb1e173616de22528056391a8fd4577bffd2bdb032bc3b2d0f304c777980124006f7f40e887fe97615b8372db6eec917ac6bb8fb3bf7cc4ba067f24c3cca10396d3f6918e07f87bb4c93835cf8dd6944b090e8fbaef7d5fbd43423e6b1da354d9ebe29d8716fabea0d36fdb3285859b31f1e14c109a763e912f620d0623173aad3e1408820a64fef442522e4a47d8a8e515e1b713fc5c17e1bd6a5ff25c1589535174b0bfc6600d1ec1fa736e5baffbcf50a60fd6c2569f8c1c80ef944fd41b3b91c6fcbce81eacce7e5a5c55ad9aa4e2370cfea1c4a69a7a2629c7161835d7a58b395b8de6af8d042b15e01b8ea2851f367ca3b379fa7f5f0ac122edb0e172e1676e00594c7da13a3535e2f33fef849a935855758a6b204f82e73871890e3a8aba6b0f6ce5ae88f8bcbb87ad449536b593290e92a17025c7742deeaccee7bca0bf5960532f212a0f731abfd69162aad94b5ac448a28283f0058e92e1d527d32ea71672d342ada4099ddbdb79bea23d1ea53cab0efca3c52fc2dbeaa77e918cb927de4deb2374b0577c90ad5ff961dc7ceb7897e8b429a6b3af2d403a2cf12b50e07563f7df2f473fcde7860267fcfb112b10f65cd0b05dca3cf930444a0a188777f15bd872719a8fb0453ba759efb7ffde3700c78bd1ae7c37a282a8c24864714129f7438530513a4ce67d3a8462c694ce0db6215cc248dda220b47c022b2c987b2b8203f7151d3d1d61c2e04ac954ebcc24e583cfb5dafdf1dda207514e4f2a2ff90231c7502902fa420c38bdbba4af708377e7f0d646d7b83d8f3ca1fa866e421901170145b28ba41107f469a7229bd420f634a023553d57083ecab961bf5cbabebb322bc8aa8854973790264ce7d15a83199d97f57d970e6452737ae3a3ad9ee624320c930520b335b758930f0b5374b7910c67e72fb6d7a0537901fdf7b0727d079ee130de6fece5fcce10c13d345f703052753eed8a810b53a3a5bcd5e6f4c9980c578e51313a172bb6c9e63c0a69c301f64fb103c9f1be4c5fbe949df614e7ba0a2b89c5f1ce65ecc9816a2d7a53f83df3a09d110ea5acd9da4f0eb518087ecd7d8169e10ad8168f102cfefa7d3f8b02455a96a239bd0df512b46504e5b1c8e0cea27b8458584d3350a2f53186362d9ac7d762cb4f2cc158246d95612fe8cb105e967eda72ec98591ddf261abcebe6cc7a1280a4bc4cc7ffb7d5dc898909d47943b1425d8a7239fc7eb93dfc52b41034459d4b182c708c09c19f61d6a13c69effe4b1fee395295129709b19836d7ad78c6a3315b7a4da2e2863f4fb0cbadd50ac02d92f6a2d19677e5dcabd6430a37c5aa206521e4fe7ec6d1f5e3f0e44bd143730019488a655d841145e3db7b23a0d794af1cbe140d25bea947569f63e8b6ae256aff08805a9f1d46c09b11896fabd06e34d13d751f0f9f19bbacbb0defb6ef1c23e7dcdef62bae40d64b20e129feda9d2ddf331e03095ad91b4585716f9b6474b7f426527ff9b54f026c65e31cb1906ba051f8bbfadaf5f598076772b02d7020f7289c1736aafbdd86342a2f3c9fec6c20df5b7d92a1155c490bbf95e86ee9c3902fbec21d0fa7498129c755adef5848f98b3f4e6714414dcc08682b4bb741fb96c74e126f7cc4c77c43104625b450e0d492f6a677e2d2b3928f20db50d8c4790b55bd008b55964b2e62eb85eba309abe382cf4dab106031479b079101c669f072cbee757b350eed1ddcb44a68646fda697db156efb7d0fff4e890796148d2e428b43d7149c47d52b952aa141a79c2160c9ab6df20ad181e43b84b84067749b19f1241295a1bdeb0dbf8e01a7d2009645b10725ee949ce54fdac3115aac10b322c7f116e352ebf24c0574fee357191b325bbbe1810cc5874e49f6279cad7bcbbf56542c720e7a4765fc681ba6bed2111be083741c30f844beb3c4c33ae0a1c6ed502e9349321b1415a4389ff21eab4445a32697bd013225baf860f791e8dbdfac47de4989b9a65e343fe8f9e59e67e185e61177ad3c7a1325cde72f8113512e75eaf04e33ed100b1daac4c0cc11c52d6fab01109c78b0d6c27b7ebf45965e7baed410d4187a78e1a6f44edbca1360c073c8af85e0284f6ad4ef47ef1b35863bbfa57b703ec014fdab08d1f6727d90e7516842e8b142b4abda2691d57e9253aefa8033d87769893f4ca19fb56bbcb216a17c0f63fa821edd393cbdd2cecc193097ea39ad7bb6e5a1337d92755b58256ba4fea931e93f4d8067b5fba38a4e396fcb32e3b18b72e12180ff528d2249a46f08d32db61d7c0005f221bd470715a0a44f99be72d6c71505b960b1d753288a74a4e0920ed3deefbcd87dfb5f89a855f6c398085e974856224c8146a2b2baef95d4bbd38df729190feeaab713fccc9077541fa794e25cfa52767870eaf97fea233c6ba2c9784532d49bd9942347aabdfe306b8722f196ed58e96ef0c99e3b1ade0462d907556c9f55b23d76f3973e232a3ce8b9d67dbc74b73f15e3ba3a60439384df0fe2fe6beb5e16ad1686f3feb5319cbd384bae0aa77781f8dee09faf3d01e727850e997d7c9da8fd1abfd1d24bc933505367275b70e0bb0481645905b9cfc862ffa898f8c6e4efcc753899d87667f6f8c5cdde2114791592573d5b166faa2966a0e5cc6cf4c55d05b792f496d4ce503ce5c357db570db57033552907bbf65556bfad1763ac54e07c820c8373dbbd3c95f78561cfd12bc24d6cdea692b398427f79895b5cdf947c42a8d3403e76aeec38e8459c61707f0c46b66dc2deedbc57e793c3c5ea91a9064b3babcb9b46c7836b0efc0b83695878c4698641f2fef3a15703442423bca8414a5682b26a1ac725d2bc52b10bcac3959b276c81ff1fb9004e606702e7cfaa85163574cd9b9ec98e851d43c00e6708f8eb6dd2a8c92c24ec9dddc4c46ed169f2f0b82486ee2aebd607fb9d89026f1391e7d8d4c33292cf91e2d6438f66c645cff2e3aca9ef41696543e33e68bde671edb1c2f7a62abfd7d039e1870082dcfe9fa777c5dfaec56a2a5d4f184f45ac4166fccb135fb6ad864a5f90e04576a8904a7352f211324843e09f042b540d14efd282f1dd64b8ef70abe5d7d0c4bf4048e1bdf0e72cd0028ecb3621050c4c7e5093cedfdb1cf49d8f7219eef5b1ac7772a0b99dcd7373732d46066a7a9aeaf05b19c8129ec4560feba82569e2caeb4031c67413f33e97e9b28ba9a59a9c7a56092997ed193d920fef72f960a38bda0ba97e4caf2439226673d8b7e342b40d3a461305f13ef4b7bedb35215e859902d2f2d29d1eb57d56c75c9063c0cf6ba1b7cac8e3ca465f91cc2f4ebf0f410a1868114108eb6002f65ccfb84bb943fff42df55bb3ad2e0ced72d6387526d19a541c0d2f0448c6f66b6c4c8508859f91a80a5ef77e9807750ca0bc81bf6bd895bbe3554e81ac9ce5ab7fe0d69dc6b83bb6575394cbd7ac07daf200b6d047ad142ae204bc57bb8bb5db20d67961a3a601d92855eb38fb4c0d9c8a2bf56c1bed71f111db664b61c461f1c2edbc67dd46d108ba3ce2e41eb6d52f69c87405a371ee474fe0c7abd4a61290034c71afaadba2ac17028f3342ba95f2203c22053300e76c1ed24bd26b3d47b430ec285b4f0d14fc5907f034aa71f316eebe5b7c7ba93d55b640815ea1ccca3b7f4236441d5a19026b5bc74c2350b87c5a68b393b7e4f3285a09151f768cb07a58f201fb01c05cc4ebfdbc78657d5f22af6d1e18b2cc3bcf9eb31b91287ab99bb6f15b55b8f6eff15d14e89cd6e180128048ea62dd49fe6311fd5faf931ef59fe886b48d4cf4eaf4df754d17567fcf886b11c3bce1462ef20c27468868718b594467549a1eb05b0aacdfc68f4f61b665b2f1106ae8b438dec7c80d52fedafad2f6b48934845b331e4278d8316ec17b1f780d4d4d4822bd7998f4a045d63ff91d734a678821078ef3271263c989395ef210af2249806f8ae2e4f8c0702a7f9a9870eb62531a3f5d65cca2912bad8831d533b2f61750f0a98c6ef9c18df22de5663434c4c5e716942da0c008a3ed7612da172767a026e845694431cfeb3f51e8922ee612692e446f592173910238a42eb069dbeb72ae9d9a587e6a4a5bacaeafc5968814f16b66c97605b1b91cc01d227866ec12a9eb51f9c2f42fa1f7425448577f20bcab3238ebb63dead129f5f2b0b1bf3735b3de570d4316208e287769662c58136d8d00d14a4cf767eaf3b6656f0e2f8cdc7b7bb9047707cbd40f4635cd22b247f995fa7a6c333dbf36956a73d79b9f8863f51d2a172663810a74ce546cfaf05eab040583e914cd3dc087e1ee0afb2e2a2aaf25453260f7e36a2f453f147fd89a10d5ff9248b338c021cbcc381c14c466578e408c306f3132fe02e01f8a04b2f01ad35e320953c951ddd034d75d4f3eb83a7837c55dd40e787bdd4a0016162698d7027bd9945c7bc37512a5d54418de50eb457a15a08e2b7d460c4f70685fac82373a7fb399e3606e9ee4dd9fb59e83f1f490aa98bc7fc697006ad99a58a1ba9d203003f454651ebb7bc547fac0a2b022b47490255145bf42fa57a6a66d19a3c13247842b1bf940c298f3a5d69c1589663c10593ca0e9000309036e600125ff8ad295625bba618be058aaf0d6585d7bacaac6dff8ed7e208d6ec9b46003c0224415a0e9f82ef6abb09860f49decd80cc41b8c5a3475f54c13c629097d374f5272c4495f704fdf30be62b9810ba4c760e8f5098a2861007b46232096b70b12c94daadbe983aa82e809646cc45b2f0212003d53061baba25869a7b4002de4c099a6305b8fc6c874e66231f51698f236b548e25771f6bc79553c439f92306db4f440b3f584c77b6d30cca8f38471459c12a299983b294008ed31fc9112b305f9c358b7eba73ec66d4fcf3afde0ec746fc9223d5728496d9896ee96bb17309cff88c28be2b90f8e82b95045330bc566c6f59f33d0e51e838a538b2e459255ac229dae67978712b2b69ab92fd92090e868021234bde76c2eae912de79b0f392dc77e2847dd0fcbbf2b5901a754bc7511c2f76807e407f74b351729e91fca5aca34fb7a511c6da4716d5d27177c9e787b66cc3eee400253e7479b04cda8ff5e2e571f6a8eff83e65baecfa1eb8da47e529a9b2d42b7f5f0aa1e03e28e22c131562f50bd0442d6ef3078e018f199920b1902fac4455590b227b058509177242b18cad0c61ed1e9baa9f54986f80fc7ae55221b5bdf0481c526ac903edf89031e86088c2d75f7ca348d095abb0221686ff244a1fdc0ffa0f502c4d5bbac74fdf7029b089034b920cca5d96c0bf13c805b497b406417f5f8699dba000f5c84a3642503592cc9a3847ef1f3f8f27ffbe547e42024924f12304392794dab13f96379329305325238b24bc13d6a0cf32f95cfdbedfa32ace80261017e6e53595e0b199ec59439bf8c1f13e09bf7b02d8ef6566043ab278aaa590e8d8170563a75ecaf9e7ae1aec450abbcc56337e3bfbe8f57ab99f3ca216ef861548c2c3e6b9feda83e84eeb0de2cb024e745ceac4372c0ae0952f36c495e775cd47c9ca6420b06d95a7b75bf0da4d5e081687ecb1a1282d8f289b3d5cf98fa5acb154b6ca79ec6d2b12e7fc637b8882c480eb604ab93e432109808c9807c1375e6d573027f125f5d309beae25940b66979f93717b0b31df03db7e3eaf7a6afed45fb15bfab837cee104dcc0469accd63d6ce76a8f2e105e90037a5f2c504dcd477df25e58392aefb31b778dc7de640f6a0e2488898f4e5e7e8fbc542898a822fe4682bf0b80a6032bf64b0761555f790f3cacea386651371e08464c80a949a92ae442725f5bfe492890df202cf01cd0bb5283aa02f5b06c507a08d166cbbbcca6b56911f8ebef7bd1f29c24ba7313aa78cbd9dd39318150f7b35ecf694d623fb5a0e7fa7cc1dcd8ae304cd4488a6f2f8ca3193a422e073823026aa63ff0008cd282c7d3c740960a12011e432c5438f55f99ac726fa4c0d197d5c5bb27e3da9324a5bf134276cd53a5171551d1c676b43eec6fe749c112d78502b503047fa02ee29d259c88ee4ee36cb0e8df2bce16159e28f820dbf7321c2103b999b08fb61f400770d4631f5ff8bf19c652bfa8f3959ddd29a3816fbf2a13fe3a549dc2eeb53cb86adf50d86fbe872e19bf9fbba4737f950741d3d3865a9ae0fd8c87c0dcf854af3ca1b3839c9387549b13e7b9f139c969736a711db07d8c2ad9031150f556f84f2c35e9992d449681cd2df4f1f078e07c553844f248ed39b195c6f33b9924c15fb00f721ae31a3d50f6fac72a3fa149751be9d36b2743dce8e2c57eed1a5807a4a87ce2a0f80120d11c57eb49accce3050102cfaf3611c3b13dc1591cdb4e3d225c922b6e7f44bae6c0d39ef2e52908808f834b6e81aee9d44ed9e6b93b43fb07b7d407f92ea77f3d5da6dd52dda844698ad63eb11bdd0b07ed45d9ba73c2c7f2dfc29ac8655e2f09ff1c1439117b9f2c67ba8ea26280023fa65e5a80e05103f50d5194a7649234d2ad5fe9a8298654d029e5eb81b7729a056dc9390ab978d230f001fa0aa2675e77a04327549619653c1acbd0c3e22c9702b3c763348638b7bbc7cca39c0c649803b8a1e2765f5f651cd8b6c538f8acd352d5f6c69d13eebe623c60b9eaf573e385b8f61c52b4a8606e4ae975c4510222839c77a411d469858be77b45d1b54fd3bc090fb69bbdd6ab8b4eab72920d497b28a28223a61553814c17faeebe2b08035fd6f8346dc75419160096c4adbf77f819b5292100329ac9ef7a0c4528462fde36a8966456e8c7e61542f9020e3251a9e9e39d97dddeaf2b0b3d5117d5bb2dde2a4b1a9a12b0d35c73644f675a9afc33f4c42600efcc35205f40aa305cf6079717907724d0341e3e73dc5612a67fea95e9d5b1de89d70c24796db2d43964232382e598974f1f57a1cb51ccf82d27c46a181051d2de73d721d5117eeb2fbca1465d54727057ca2416e15e493b62c72063d3585564d02b9c17cffb288f34f67fdbed1174b16a109383c5a40f343f449054e01140b6f84b09589c10fd6c1158d856be968430954b9dd3f9f55998f64f417aadbf1b5fabf1b626d7c03745a0d6a3ca49569774131ff6cfd6855bec36ab65b99825c933ce9189b4ca2673b0a8c7fcc8ef137d5460a17b0fe5d94e776c6b2318c1fc27837faff06b8f922499fb0f5222c641cee744a9c1b52c0e0c014de67edf1ceba5367660edf5b90690bde79f54e2f3c76219e519d4b6b0e38b18b20ae0dce6f1773060133026f547e350404dfe27f390b203bc321b75ae50ab63ef17702b10c8bf530b12e749808deb945d8b56cd6a35258ae45913038890a0214dafbee1ecbbaef350a9ce192333f2f0a0f5fbf2103341fe8d57806c40b5e7a946a7918548b74b7e6be3e3c374c79f19d7a7a307f52438944d12b0457368e0c14e3eefdb0a85f9b8b7cd03599bc598f6a55be745334ea191bf0a56d2fe8e86703d4daaf69f3f1c348801de580b373e45e2aa8fea718f411ce876f1f7feb39b3701aaea7f6566b78e29ca2706f7601f1f2dbc3fe021d0b2c341555a7bb93b05b7a7448b7bc5486475fd972a0ecc26fcca2c55e9deb6142012fecb7904f64fca3d7d5f986d981de9624b7fe3c430bc28b35fe1e916847c55ce1928fa4668ee49f28392f7e80a902790e26c5d27b3ff67801e1df69a762a63d103de6e5baed0f5462e5abf4a91913514561a7a724332c0fc175547d67164e07e286fe741f67a45996f8a8ae5c8c112cad5997bfad9f389200e6aca146ae14e9b9ec384ae1540bfcc409b12bb1846f7170724338657f2530f7eef844d307df65083dce3e4b8e401fbbdc6beba9d89b372bd5b2226ce261dbb67bd28980714f187441b85a3fc1b6b7e8a72ff70fcb2453a67f1cf8e07fc20ad90da01a816e9974cd9c79e20fc51f9156e6e36ed9f3c305db4f77b323cf181a58d4a0fd4d25cbd7794f367019328133376910e82047f47efa3877f432a69ff72057927878015724904c78fc89d7e34941f83faaa12ac00d47d0a9389d88c884502d5b5bd29d8786b39a3218a35bf00b5679dfc12861c61d931f1d428613e8ddde5833db212f4aa1a2d2bd02b55cf4b7307f7312dc7e99540925995dc89daca86e66eb17e757bc5cefcf10f294a845678387e96dbdc2a345aad860d053c00d51d5896687cf03dd1db701a28bc16f713a1bf3cd17109df7047fa51f60717abd5a2f0b8b9ceeede8740c93ec763dbb5d06462f843714f53925d6b28dff96b9c3442252d7af4943547924c183742f6e7be6eeb7fb50b2e10a14f1adc2139e594479f7056b36a3c41cdef680bca7ac0c261bff33841af14ef914579724c7238d26df5de067c8011469b2f66957e7df7c5a0001deff98cee38a39b142bce8729bd9e61505f641b7bc56f4129d8854dc5dd432f898d517a068d4d750364b2eeb1328a2d0a517cb326a72e5fa4aaf5ca772b7b0b3c7df0d5cffc57f69a10ef01e87d82ab55f00eb6aa1cb8ae688c9ffecbd2cc4d19de56bc0f9d0ba73a5a18c229b20574952e190d063ffb38391ce1bbd53147037817e1fa0d255128f5eb8d6ceed7f32af6061343d5e95e98b6e193ec815d44442c7b9d819000a85dd94438a15664d6dece2d0cae539eee3120efd6f43a2b6875de37e8923b8b4c4eb7809e8e3449f73c5e70cde5892561252bfec1d91ee78f05652f1150f3efb38b4b8b3198a0dd7dc97c1cd148c30677d660fe16498ea350f768dd767833578003213523867a177230da1f980f7585857d63b34bcad822d30dd0874c0357ab222439a50ac23f4683d17a996124d7c305e2686a654617c46601be19d380326e96d2e723ee2033769e8084630571eb41465cbd2ad98d801d12a22f4f9b2163aaf035b9fc16778a5418ce23ce9c80948709454b5ce44e8229676d1292419f2967192d290d4442f9630e2d87b5caf4efb83f7f53c617e23b3a4afa222834da2c6a29f0f14bbe1cc64be42ab2defa13fc55cea54fe96e8326acdd0e5d6508e9d887f89cb72df512f50f48c10b47b4d9cf0c67bd69e03cb58547eab6792fe2d6c4f96c5b762105d984f38980bd1efdff2f7b2f7cc913ee0d4e7041e0c1bf8d209b5663e2fe40f881e5c2e67625e2d20aad7aeacd1b5978196e38865eb08f2ac61f17d49f5a84ed315e20c1446483f18845259b8b30031fcb84a105770abb48761369087e54b5dd9d1984ba44073b9ae5c6ce9efc6766a1e5e6d476bc707deff3aa8fdd5a878cb1024b1f7e6301936a16e6d3ec1a0e3f4adc55ce83a15b7549a20ee2fc0caafd4b96800c5672be8e45684658c7bdd81fd8bc6e756e4aaa778b99f047aeda9043c7ff60bee6a0eb30dfdff7e419927d914a8aef9299fd09099b09b008fc09ff67ab97352c21733d76720e28d4c031b898e9cb443c13c0d8ed42c1fe21355da8f64c2b8d7972e1bd8c73b7bf2292223c090d8736c838b6fc5b9f8dffd7d809c102b44472254f100dcd6de0bf8a8784d2d53432ac4d37c5ae0d740e96f9c9a14ebae7ac636574e5cf7d75b3eb813c009d1c5d0b19ee25267375d4e577f8b1e616629cc0a9026a8293db040b7c8a3f697d6afe6b41697c22227db3cd3c47d1c0328aed1bfd590550db088d65792f0c400ed3568a241e2c4feb4d97c2c209f725c018018a22d9a0fe3abd99216513c465760f44625be60d158b920e78d6dd2bafe0c63f0c320cf6f3aeb0e976db36a36c0469d1481c726015ef8652438ae81ad28f9408d5de0761bccba5893090b94e4866e3b62dc19d9933067e169c764101e93ffddbe32f52699a76a2e132793ea08823bfd98765d874950af2679f21e913846efb26d4d31af3eb95f66e9ce3ce7c28f23085daf14f34ad7516b64668b7263fb1c7e72a42f50f430c62e6431bfdb732818a6f6df44d1ced15b15439ad57dcb321a3f5e2ffa26fe34570740360a6757af9056fea31ebe22c4221fca061df6c3ea976ece32e28e0a104f58861472715ed19aaa45b5384b8b6e006cfad7d4ece67c5fb05b5abe66290d2ddd5dce85d942828dfe4862b2850aaba8234ac8a6e92191a53ad5de7152b14502577d54775da921581ac26e1a8c966719da49305b9912bf8b56b1c679bd562a95a9c381676022811d9705ea462a9bd32144797128cc5f845b17a363a180f57c24ce65df43effd90818b949589e9d1412013cd279281831ccebbf39464b785fc6e9d15e843b7c9015b88515676c18fcf530ff1ea5e0d77c909ec8bb0613c37123e825df1a28e9dfd79b932b6655b6e8304f23e565505a6029ceb5fce6672ed97a8869135c3f7a19bd2f2a2caa38596b3ee4fe74da39b0377cae49e21080fcf0f9b002bb2ae9633e13dea8983165ed8eaf79031f5b10c863a7005707c1c769873456b9bb2eba4e6c8423071ea3d00dd506a6c24cd49944ab8ac5a08d8896abe386be8eb036cad80f8418bfeec764374e9204f3b41d18350c1d029caa7fe6f9a46ffe031dc212fa9ffe4f40903a94eac1af401c5e420e9cc241126393374460e37bcb35adabd7f23c088914d51d472e9be9d1c4bd3a1fede0a04824ec564f914bc4fb7818091c951c9a9d33dbaba76167e5182c5b469f0d0b251e8d631dc829e3a17e608fd8f4283d6046cc89589f46c9f03a849b211b1229ddb37ec27ecfef2c8b12819d2305d87e1f02561bd45afc38cbe1278bfd6fc4e814e403fe479d24ee62ad81e1425761a36702883b32442d7207b0f66b7350281506fb08eb8e40a9faf096bd1e1c12434aee166e4c55ddb57e39889067130a6e7010790506c012b452457baa22f34a133db0fab0d1796bc2ee04835ef090a309", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x9, {0x7, 0x0, 0x3, 0xfff}}, 0x0})
ioctl$FS_IOC_RESVSP(r3, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff})

1.876826475s ago: executing program 5 (id=5848):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}})
io_uring_enter(r2, 0x3516, 0xf400, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)

1.853351969s ago: executing program 1 (id=5849):
r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.548501729s ago: executing program 9 (id=5850):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000480)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r3, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0x7c81, 0x0)
syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0)

423.53335ms ago: executing program 2 (id=5851):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
socket$nl_generic(0x10, 0x3, 0x10)
getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/105, 0x69)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff})
getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f00000001c0))
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375)

0s ago: executing program 5 (id=5852):
r0 = socket$key(0xf, 0x3, 0x2)
connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
fdatasync(r0)
sendmsg$netlink(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001a00)={0x10, 0x25, 0x4, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20000801}, 0x40010)
r3 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x10000400}, 0xc)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2)
recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)=""/154, 0x9a}, {&(0x7f0000000880)=""/4111, 0x100f}, {&(0x7f00000007c0)=""/97, 0x61}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000004c0)=""/153, 0x99}, {&(0x7f00000005c0)=""/233, 0x78}, {&(0x7f0000000100)=""/119, 0x77}, {0x0}, {0x0}, {&(0x7f0000000400)=""/161, 0xa1}], 0x6}, 0x1000}], 0x3, 0x8042, 0x0)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8)
sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc0100000002000000020000000000000000000000000000080019"], 0xe0}}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

kernel console output (not intermixed with test programs):

 auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24184 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1026.265214][   T30] audit: type=1326 audit(1763014572.335:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24184 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1026.353052][   T30] audit: type=1326 audit(1763014572.335:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24184 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1026.432794][   T30] audit: type=1326 audit(1763014572.335:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24184 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1026.476868][   T30] audit: type=1326 audit(1763014572.345:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24184 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1026.555194][   T30] audit: type=1326 audit(1763014572.345:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24184 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1026.585919][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5138'.
[ 1026.663999][   T30] audit: type=1326 audit(1763014572.345:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24184 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1026.702945][   T30] audit: type=1326 audit(1763014572.345:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24184 comm="syz.9.5137" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1026.778359][T24200] syzkaller0: entered promiscuous mode
[ 1026.835239][T24200] syzkaller0: entered allmulticast mode
[ 1027.957773][T23110] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1028.489151][T23110] usb 6-1: config 0 has no interfaces?
[ 1028.520257][T23110] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1028.610225][T23110] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1028.634601][T23110] usb 6-1: Product: syz
[ 1028.639151][T23110] usb 6-1: SerialNumber: syz
[ 1028.662810][T23110] usb 6-1: config 0 descriptor??
[ 1029.181779][T24230] binder: BINDER_SET_CONTEXT_MGR already set
[ 1029.187988][T24230] binder: 24229:24230 ioctl 4018620d 800002c0 returned -16
[ 1029.567644][T23110] usb 6-1: USB disconnect, device number 64
[ 1029.785505][T23111] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1029.995321][T23111] usb 3-1: Using ep0 maxpacket: 16
[ 1030.003106][T23111] usb 3-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config
[ 1030.105210][T23111] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1030.179404][T23111] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1030.195008][T23111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1030.217279][T23111] usb 3-1: Product: syz
[ 1030.229560][T23111] usb 3-1: Manufacturer: syz
[ 1030.242406][T23111] usb 3-1: SerialNumber: syz
[ 1031.332187][T24259] syzkaller0: entered promiscuous mode
[ 1031.348586][T24259] syzkaller0: entered allmulticast mode
[ 1031.381212][T24260] bridge2: entered allmulticast mode
[ 1031.941768][T24265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1032.207746][T24268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1032.227938][T24265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1032.605430][T23111] usb 3-1: 0:2 : does not exist
[ 1032.805488][T23111] usb 3-1: USB disconnect, device number 67
[ 1033.548314][T20906] udevd[20906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1033.731805][T24280] bridge_slave_0: left promiscuous mode
[ 1033.856419][T24280] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1034.013579][T24280] bridge_slave_1: left promiscuous mode
[ 1034.042002][T24280] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1034.356488][T24280] bond0: (slave bond_slave_0): Releasing backup interface
[ 1034.617427][T24280] bond0: (slave bond_slave_1): Releasing backup interface
[ 1034.677816][T24280] team0: Port device team_slave_0 removed
[ 1034.703769][T24280] team0: Port device team_slave_1 removed
[ 1034.760348][T24280] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1035.048350][T24280] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1035.364183][T24280] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1036.001030][ T5901] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1036.165337][ T5901] usb 3-1: Using ep0 maxpacket: 8
[ 1036.173696][ T5901] usb 3-1: config 0 has an invalid interface number: 138 but max is 0
[ 1036.184957][ T5901] usb 3-1: config 0 has no interface number 0
[ 1036.191688][ T5901] usb 3-1: config 0 interface 138 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1036.246190][ T5901] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64
[ 1036.317178][ T5901] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 1036.440009][T24315] syzkaller0: entered promiscuous mode
[ 1036.447171][ T5901] usb 3-1: config 0 interface 138 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1023
[ 1036.457773][T24315] syzkaller0: entered allmulticast mode
[ 1036.463465][ T5901] usb 3-1: config 0 interface 138 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[ 1036.606908][ T5901] usb 3-1: config 0 interface 138 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[ 1036.617411][ T5901] usb 3-1: config 0 interface 138 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1036.649509][ T5901] usb 3-1: config 0 interface 138 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[ 1036.660481][ T5901] usb 3-1: config 0 interface 138 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1036.680509][ T5901] usb 3-1: New USB device found, idVendor=0458, idProduct=7045, bcdDevice=66.a7
[ 1036.689819][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.697888][ T5901] usb 3-1: Product: syz
[ 1036.702210][ T5901] usb 3-1: Manufacturer: syz
[ 1036.728908][ T5901] usb 3-1: SerialNumber: syz
[ 1037.008331][ T5901] usb 3-1: config 0 descriptor??
[ 1037.040326][ T5901] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7045
[ 1037.200248][   T30] kauditd_printk_skb: 26 callbacks suppressed
[ 1037.200263][   T30] audit: type=1804 audit(1763014583.325:1966): pid=24321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.5178" name="/newroot/281/file0" dev="fuse" ino=1 res=1 errno=0
[ 1037.434114][ T5901] gspca_sn9c20x: Write register 1000 failed -71
[ 1037.445616][ T5901] gspca_sn9c20x: Device initialization failed
[ 1037.452827][ T5901] gspca_sn9c20x 3-1:0.138: probe with driver gspca_sn9c20x failed with error -71
[ 1037.509539][ T5901] usb 3-1: USB disconnect, device number 68
[ 1037.528754][   T30] audit: type=1326 audit(1763014583.665:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.8.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1037.607241][T24336] binder_alloc: 24335: binder_alloc_buf, no vma
[ 1037.617056][   T30] audit: type=1326 audit(1763014583.665:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.8.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1037.860795][   T30] audit: type=1326 audit(1763014583.665:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.8.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1037.910426][   T30] audit: type=1326 audit(1763014583.665:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.8.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1037.951412][   T30] audit: type=1326 audit(1763014583.665:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.8.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1037.975004][   T30] audit: type=1326 audit(1763014583.665:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.8.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1038.001741][   T30] audit: type=1326 audit(1763014583.665:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.8.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1038.024476][   T30] audit: type=1326 audit(1763014583.685:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.8.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1038.047427][   T30] audit: type=1326 audit(1763014583.685:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24329 comm="syz.8.5181" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1041.146503][T24362] loop6: detected capacity change from 0 to 2640
[ 1041.171505][T24362] buffer_io_error: 2227 callbacks suppressed
[ 1041.171523][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.213334][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.273884][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.345789][T24374] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1041.404362][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.412661][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.420910][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.429464][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.438504][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.446655][T24362] ldm_validate_partition_table(): Disk read failed.
[ 1041.454315][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.463653][T24362] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1041.472048][T24362] Dev loop6: unable to read RDB block 0
[ 1041.478082][T24362]  loop6: unable to read partition table
[ 1041.483858][T24362] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1041.499432][T24376] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1041.595639][T20794] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1041.717248][T24382] binder: BINDER_SET_CONTEXT_MGR already set
[ 1041.745928][T24382] binder: 24381:24382 ioctl 4018620d 800000c0 returned -16
[ 1041.758256][T20794] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1041.818978][T24382] binder: BINDER_SET_CONTEXT_MGR already set
[ 1042.342527][T24382] binder: 24381:24382 ioctl 4018620d 80000040 returned -16
[ 1043.235800][T24395] syz_tun: left allmulticast mode
[ 1043.253846][T24395] syz_tun: left promiscuous mode
[ 1043.271997][T24395] bridge0: port 1(syz_tun) entered disabled state
[ 1043.497239][T24395] bond0: (slave team0): Releasing backup interface
[ 1043.776695][T24395] bond0: (slave dummy0): Releasing backup interface
[ 1043.899424][T24395] bond0: (slave bond_slave_0): Releasing backup interface
[ 1044.199053][T24395] bond0: (slave bond_slave_1): Releasing backup interface
[ 1044.912850][T24395] team0: Port device team_slave_0 removed
[ 1044.939083][T24395] team0: Port device team_slave_1 removed
[ 1044.956524][T24395] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1044.964760][T24395] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1045.130255][T24395] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1045.160238][T24395] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1045.169124][T24395] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1045.926815][T24427] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1045.991556][   T30] kauditd_printk_skb: 15 callbacks suppressed
[ 1045.991575][   T30] audit: type=1326 audit(1763014592.105:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.055218][   T30] audit: type=1326 audit(1763014592.105:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.078231][   T30] audit: type=1326 audit(1763014592.105:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.100997][   T30] audit: type=1326 audit(1763014592.105:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.123565][   T30] audit: type=1326 audit(1763014592.105:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.159222][   T30] audit: type=1326 audit(1763014592.105:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.275470][   T30] audit: type=1326 audit(1763014592.105:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.298043][   T30] audit: type=1326 audit(1763014592.105:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.321029][   T30] audit: type=1326 audit(1763014592.105:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.343997][   T30] audit: type=1326 audit(1763014592.105:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24423 comm="syz.1.5207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f04539 code=0x7ffc0000
[ 1046.395346][T24433] netlink: 'syz.1.5209': attribute type 3 has an invalid length.
[ 1046.431459][T24433] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5209'.
[ 1046.508338][T24436] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1046.573511][T24440] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1046.617768][T12305] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1046.655366][ T1557] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1046.929162][T12305] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1046.950887][ T1557] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1046.995649][ T1557] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.023518][ T1557] usb 6-1: Product: syz
[ 1047.055662][ T1557] usb 6-1: Manufacturer: syz
[ 1047.064533][ T1557] usb 6-1: SerialNumber: syz
[ 1047.486193][ T1557] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1047.514950][ T1557] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1047.705355][ T5930] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1048.185221][ T5930] usb 9-1: Using ep0 maxpacket: 16
[ 1048.192218][ T5930] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1048.204407][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1048.333682][ T5930] usb 9-1: config 0 descriptor??
[ 1048.361115][ T5930] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1049.795996][ T1557] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO
[ 1049.812241][ T1557] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[ 1049.882199][ T1557] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1049.931152][ T1557] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1050.128635][ T1557] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[ 1050.362588][ T1557] usb 6-1: USB disconnect, device number 65
[ 1051.436020][ T5930] gspca_sonixj: reg_w1 err -71
[ 1051.440959][ T5930] sonixj 9-1:0.0: probe with driver sonixj failed with error -71
[ 1051.456477][ T5930] usb 9-1: USB disconnect, device number 33
[ 1052.496583][T24501] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5230'.
[ 1052.721422][T24509] gre1: entered promiscuous mode
[ 1052.793535][T24509] bond3: (slave gre1): The slave device specified does not support setting the MAC address
[ 1052.891159][T24509] bond3: (slave gre1): Error -95 calling set_mac_address
[ 1053.059979][T24513] macvlan2: entered promiscuous mode
[ 1053.066428][T24513] macvlan2: entered allmulticast mode
[ 1053.095973][T24513] bond3: (slave macvlan2): Error -99 calling set_mac_address
[ 1054.025226][T23110] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1054.185289][T23111] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1054.225394][T23110] usb 3-1: Using ep0 maxpacket: 32
[ 1054.236764][T23110] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 1054.245006][T23110] usb 3-1: config 0 has no interface number 0
[ 1054.263187][T23110] usb 3-1: config 0 interface 12 has no altsetting 0
[ 1054.278897][T23110] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1054.294806][T23110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.336688][T23110] usb 3-1: Product: syz
[ 1054.355312][T23111] usb 6-1: Using ep0 maxpacket: 32
[ 1054.364768][T23110] usb 3-1: Manufacturer: syz
[ 1054.387262][T23110] usb 3-1: SerialNumber: syz
[ 1054.392033][T23111] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 1054.421870][T23111] usb 6-1: config 0 has no interface number 0
[ 1054.428136][T23110] usb 3-1: config 0 descriptor??
[ 1054.449736][T23111] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1054.474560][T23111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.486106][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.492387][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.528505][T23111] usb 6-1: Product: syz
[ 1054.532724][T23111] usb 6-1: Manufacturer: syz
[ 1054.552279][T23111] usb 6-1: SerialNumber: syz
[ 1054.574847][T23111] usb 6-1: config 0 descriptor??
[ 1054.592542][T23111] smsc95xx v2.0.0
[ 1055.025909][T23111] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1055.069743][T23111] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1055.441579][T24534] binder_alloc: 24530: binder_alloc_buf, no vma
[ 1057.615265][T23110] f81534 3-1:0.12: f81534_set_register: reg: 1001 data: f1 failed: -71
[ 1057.623611][T23110] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[ 1057.635671][T23110] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1057.643567][T23111] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71
[ 1057.663898][T23111] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[ 1057.688693][T23111] usb 6-1: USB disconnect, device number 66
[ 1057.694739][T23110] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[ 1057.745276][T23110] usb 3-1: USB disconnect, device number 69
[ 1058.922494][ T1557] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1059.087875][ T1557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1059.099012][ T1557] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1059.255700][ T1557] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1059.305349][ T1557] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1059.327346][ T1557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.348507][ T1557] usb 3-1: config 0 descriptor??
[ 1060.014769][ T1557] plantronics 0003:047F:FFFF.0051: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1060.227629][ T1557] usb 3-1: USB disconnect, device number 70
[ 1060.235528][T24560] usb 3-1: string descriptor 0 read error: -19
[ 1060.247803][T24569] fido_id[24569]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:047F:FFFF.0051/report_descriptor': No such file or directory
[ 1061.013709][T24580] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5260'.
[ 1062.515186][T23111] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1062.719284][T23111] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1062.750459][T23111] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1062.776164][T23111] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1062.811013][T23111] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1062.854926][T23111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.888793][T23111] usb 10-1: config 0 descriptor??
[ 1063.436181][T23111] plantronics 0003:047F:FFFF.0052: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1064.061093][T24591] usb 10-1: string descriptor 0 read error: -71
[ 1064.070931][T23111] usb 10-1: USB disconnect, device number 20
[ 1064.255220][ T1557] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1064.487558][T15531] usb 6-1: new full-speed USB device number 67 using dummy_hcd
[ 1064.515191][ T1557] usb 2-1: Using ep0 maxpacket: 16
[ 1064.523395][ T1557] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1064.542844][ T1557] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1064.558161][ T1557] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1064.569566][ T1557] usb 2-1: Product: syz
[ 1064.635362][ T1557] usb 2-1: Manufacturer: syz
[ 1064.643302][ T1557] usb 2-1: SerialNumber: syz
[ 1064.657823][T15531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1064.676000][ T1557] usb 2-1: config 0 descriptor??
[ 1064.689231][T15531] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1064.714951][ T1557] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1064.725636][ T1557] em28xx 2-1:0.0: DVB interface 0 found: bulk
[ 1064.732564][T15531] usb 6-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1064.750350][T15531] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1064.770076][T15531] usb 6-1: Manufacturer: syz
[ 1064.783484][T15531] usb 6-1: config 0 descriptor??
[ 1065.160132][T24618] syz.2.5259 (24618): drop_caches: 1
[ 1065.292211][T24619] syz.2.5259 (24619): drop_caches: 1
[ 1065.314102][T15531] cougar 0003:060B:700A.0053: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0
[ 1065.341957][ T1557] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1065.553617][T24618] syz.2.5259 (24618): drop_caches: 1
[ 1065.627568][ T6002] usb 6-1: USB disconnect, device number 67
[ 1065.829200][ T1557] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1065.872149][ T1557] em28xx 2-1:0.0: board has no eeprom
[ 1065.949045][T24624] fido_id[24624]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[ 1066.355231][T24639] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5266'.
[ 1066.679086][ T1557] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1066.750668][ T1557] em28xx 2-1:0.0: dvb set to bulk mode.
[ 1066.861114][T15531] em28xx 2-1:0.0: Binding DVB extension
[ 1066.973240][T23110] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1067.374190][T23110] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1067.399331][T23110] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1067.424266][T23110] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1067.435790][T23110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1067.474165][T23110] usb 6-1: SerialNumber: syz
[ 1067.687696][T24635] em28xx 2-1:0.0: reading from i2c device at 0x8 failed (error=-5)
[ 1067.721088][T23110] usb 6-1: 0:2 : does not exist
[ 1067.762390][T23110] usb 6-1: unit 255 not found!
[ 1067.794384][T23110] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1067.820109][ T6002] usb 2-1: USB disconnect, device number 64
[ 1067.827540][ T6002] em28xx 2-1:0.0: Disconnecting em28xx
[ 1067.845806][T23110] usb 6-1: 5:0: cannot get min/max values for control 7 (id 5)
[ 1067.862802][T23110] usb 6-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 1067.883132][T23110] usb 6-1: 5:0: cannot get min/max values for control 9 (id 5)
[ 1067.908849][T15531] em28xx 2-1:0.0: Registering input extension
[ 1067.913708][T23110] usb 6-1: USB disconnect, device number 68
[ 1067.929475][ T6002] em28xx 2-1:0.0: Closing input extension
[ 1067.986724][ T6002] em28xx 2-1:0.0: Freeing device
[ 1068.677428][T15531] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1069.355351][T15531] usb 6-1: Using ep0 maxpacket: 16
[ 1069.385230][ T6002] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1069.393653][T15531] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.441020][T15531] usb 6-1: config 0 has no interfaces?
[ 1069.515254][T15531] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[ 1069.555620][T15531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.565618][T15531] usb 6-1: Product: syz
[ 1069.570319][T15531] usb 6-1: Manufacturer: syz
[ 1069.574924][T15531] usb 6-1: SerialNumber: syz
[ 1069.633463][T15531] usb 6-1: config 0 descriptor??
[ 1069.761153][ T6002] usb 10-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.781779][ T6002] usb 10-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1069.812241][ T6002] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1069.864817][ T6002] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.109913][T24674] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[ 1070.597121][ T5930] usb 6-1: USB disconnect, device number 69
[ 1071.711291][T23110] usb 10-1: USB disconnect, device number 21
[ 1072.649407][T24700] syzkaller0: entered promiscuous mode
[ 1072.657734][T24700] syzkaller0: entered allmulticast mode
[ 1073.075268][ T5930] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1073.325357][ T5930] usb 6-1: Using ep0 maxpacket: 16
[ 1073.332919][ T5930] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1073.424621][ T5930] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1073.565336][ T5930] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1073.574657][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.613899][ T5930] usb 6-1: Product: syz
[ 1073.630746][ T5930] usb 6-1: Manufacturer: syz
[ 1073.661122][ T5930] usb 6-1: SerialNumber: syz
[ 1074.115675][ T5930] usb 6-1: 0:2 : does not exist
[ 1074.179290][ T5930] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1074.183939][T24719] syz.1.5288 (24719): drop_caches: 1
[ 1074.295076][ T5930] usb 6-1: USB disconnect, device number 70
[ 1074.592523][T24721] syz.1.5288 (24721): drop_caches: 1
[ 1074.609908][T24719] syz.1.5288 (24719): drop_caches: 1
[ 1074.697999][T20906] udevd[20906]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1075.415526][T23110] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1075.595341][T23110] usb 2-1: Using ep0 maxpacket: 16
[ 1075.610488][T23110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1075.653327][T23110] usb 2-1: config 0 has no interfaces?
[ 1075.673619][T23110] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[ 1075.701662][T23110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.745576][T23110] usb 2-1: Product: syz
[ 1075.785884][T23110] usb 2-1: Manufacturer: syz
[ 1075.831647][T23110] usb 2-1: SerialNumber: syz
[ 1075.892452][T23110] usb 2-1: config 0 descriptor??
[ 1076.275934][T24763] sch_tbf: burst 25 is lower than device ip6gre0 mtu (1448) !
[ 1076.731331][T23110] usb 2-1: USB disconnect, device number 65
[ 1077.355221][ T5930] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1077.511911][ T5930] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1077.522586][ T5930] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.571953][ T5930] usb 9-1: config 0 descriptor??
[ 1077.582909][ T5930] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1079.597664][T24794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5309'.
[ 1079.610984][T24794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5309'.
[ 1079.813246][ T5930] usb 9-1: USB disconnect, device number 34
[ 1081.375326][ T5930] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1081.568379][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.589050][ T5930] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1081.645507][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.674959][ T5930] usb 2-1: config 0 descriptor??
[ 1081.724756][ T5930] pwc: Askey VC010 type 2 USB webcam detected.
[ 1082.142026][ T5930] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1082.176142][ T5930] pwc: recv_control_msg error -32 req 02 val 2700
[ 1082.206832][ T5930] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1082.273138][ T5930] pwc: recv_control_msg error -32 req 04 val 1000
[ 1082.312524][ T5930] pwc: recv_control_msg error -32 req 04 val 1300
[ 1082.327261][ T5930] pwc: recv_control_msg error -32 req 04 val 1400
[ 1082.336074][ T5930] pwc: recv_control_msg error -32 req 02 val 2000
[ 1082.350166][ T5930] pwc: recv_control_msg error -32 req 02 val 2100
[ 1082.357779][ T5930] pwc: recv_control_msg error -32 req 04 val 1500
[ 1082.870176][ T5930] pwc: recv_control_msg error -71 req 02 val 2600
[ 1082.883656][ T5930] pwc: recv_control_msg error -71 req 02 val 2900
[ 1082.891819][ T5930] pwc: recv_control_msg error -71 req 02 val 2800
[ 1082.902227][ T5930] pwc: recv_control_msg error -71 req 04 val 1100
[ 1082.909450][ T5930] pwc: recv_control_msg error -71 req 04 val 1200
[ 1082.917645][T24839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5325'.
[ 1082.936427][T24839] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5325'.
[ 1082.945458][ T5930] pwc: Registered as video103.
[ 1082.967322][ T5930] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input112
[ 1082.995998][ T5930] usb 2-1: USB disconnect, device number 66
[ 1083.173068][T24842] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5327'.
[ 1085.826191][T24875] sctp: [Deprecated]: syz.5.5338 (pid 24875) Use of int in max_burst socket option.
[ 1085.826191][T24875] Use struct sctp_assoc_value instead
[ 1086.479983][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5340'.
[ 1086.615723][T24884] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5340'.
[ 1086.672450][T24886] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5341'.
[ 1086.965617][ T5930] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1087.077883][T23090] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1087.178976][ T5930] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1087.215356][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1087.239262][ T5930] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1087.257116][T23090] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1087.261983][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1087.277177][T23090] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1087.295391][ T5930] usb 3-1: SerialNumber: syz
[ 1087.354391][T23090] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1087.526326][T23090] usb 10-1: config 0 descriptor??
[ 1087.547806][T23090] pwc: Askey VC010 type 2 USB webcam detected.
[ 1087.578672][ T5930] usb 3-1: 0:2 : does not exist
[ 1087.599046][ T5930] usb 3-1: unit 255 not found!
[ 1087.608108][ T5930] usb 3-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1087.704663][T15531] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1087.748775][ T5930] usb 3-1: 5:0: cannot get min/max values for control 7 (id 5)
[ 1087.763605][ T5930] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 1087.802429][ T5930] usb 3-1: 5:0: cannot get min/max values for control 9 (id 5)
[ 1087.847091][ T5930] usb 3-1: USB disconnect, device number 71
[ 1087.875178][T15531] usb 2-1: Using ep0 maxpacket: 16
[ 1087.882092][T15531] usb 2-1: config 0 has an invalid interface number: 71 but max is 1
[ 1087.893732][T15531] usb 2-1: config 0 has an invalid interface number: 220 but max is 1
[ 1087.907641][T15531] usb 2-1: config 0 has no interface number 0
[ 1087.909118][T20906] udevd[20906]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1087.913909][T15531] usb 2-1: config 0 has no interface number 1
[ 1087.940844][T23090] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1087.962377][T15531] usb 2-1: config 0 interface 71 has no altsetting 0
[ 1088.151661][T23090] pwc: recv_control_msg error -32 req 02 val 2700
[ 1088.151691][T15531] usb 2-1: config 0 interface 220 has no altsetting 0
[ 1088.165265][T23090] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1088.173405][T23090] pwc: recv_control_msg error -32 req 04 val 1000
[ 1088.181735][T15531] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=1b.69
[ 1088.201121][T15531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.203417][T23090] pwc: recv_control_msg error -32 req 04 val 1300
[ 1088.221431][T15531] usb 2-1: Product: syz
[ 1088.225949][T15531] usb 2-1: Manufacturer: syz
[ 1088.230559][T15531] usb 2-1: SerialNumber: syz
[ 1088.230573][T23090] pwc: recv_control_msg error -32 req 04 val 1400
[ 1088.251214][T23090] pwc: recv_control_msg error -32 req 02 val 2000
[ 1088.260949][T15531] usb 2-1: config 0 descriptor??
[ 1088.269987][T23090] pwc: recv_control_msg error -32 req 02 val 2100
[ 1088.339460][T23090] pwc: recv_control_msg error -32 req 04 val 1500
[ 1088.635929][T15531] usb 2-1: USB disconnect, device number 67
[ 1088.691600][T24912] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1088.741224][T24912] syzkaller0: entered promiscuous mode
[ 1088.753593][T23090] pwc: recv_control_msg error -71 req 02 val 2600
[ 1088.770847][T24912] syzkaller0: entered allmulticast mode
[ 1088.776788][T23090] pwc: recv_control_msg error -71 req 02 val 2900
[ 1088.805697][T23090] pwc: recv_control_msg error -71 req 02 val 2800
[ 1088.820141][T24912] tipc: Resetting bearer <eth:syzkaller0>
[ 1088.836247][T23090] pwc: recv_control_msg error -71 req 04 val 1100
[ 1088.855711][T23090] pwc: recv_control_msg error -71 req 04 val 1200
[ 1088.875498][T24911] tipc: Resetting bearer <eth:syzkaller0>
[ 1088.881633][T23090] pwc: Registered as video103.
[ 1088.897801][T23090] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input113
[ 1088.950640][T23090] usb 10-1: USB disconnect, device number 22
[ 1088.968113][T24911] tipc: Disabling bearer <eth:syzkaller0>
[ 1089.008876][T24916] syzkaller0: entered promiscuous mode
[ 1089.020923][T24916] syzkaller0: entered allmulticast mode
[ 1089.937214][T24924] batadv_slave_0: left allmulticast mode
[ 1090.037941][T24924] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1093.383975][T24965] syz_tun: entered allmulticast mode
[ 1093.414357][T24965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5365'.
[ 1093.551829][T24965] syz_tun (unregistering): left allmulticast mode
[ 1094.624546][T24989] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5372'.
[ 1094.680033][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x0
[ 1094.694877][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x0
[ 1095.055316][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x0
[ 1095.083165][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x0
[ 1095.115267][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x1
[ 1095.147407][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x0
[ 1095.180547][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x6
[ 1095.222408][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x7
[ 1095.258199][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x0
[ 1095.281452][T23090] hid-generic 0008:0007:F958.0054: unknown main item tag 0x0
[ 1095.329276][T23090] hid-generic 0008:0007:F958.0054: hidraw0: <UNKNOWN> HID v0.02 Device [syz1] on syz0
[ 1095.514805][T25001] fido_id[25001]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1095.845270][T15531] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1096.433720][T15531] usb 3-1: Using ep0 maxpacket: 8
[ 1096.462075][T15531] usb 3-1: config 0 has an invalid interface number: 191 but max is 0
[ 1096.471638][T15531] usb 3-1: config 0 has no interface number 0
[ 1096.491853][T15531] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=f5.41
[ 1096.661245][T15531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.765271][T15531] usb 3-1: Product: syz
[ 1096.769475][T15531] usb 3-1: Manufacturer: syz
[ 1096.774072][T15531] usb 3-1: SerialNumber: syz
[ 1097.096325][T15531] usb 3-1: config 0 descriptor??
[ 1097.118707][T25027] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5382'.
[ 1097.303009][T25032] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5383'.
[ 1097.450235][T15531] usb 3-1: MBOX3: Invalid descriptor size=18.
[ 1097.468917][T15531] usb 3-1: USB disconnect, device number 72
[ 1097.494075][T25039] netlink: 'syz.8.5383': attribute type 5 has an invalid length.
[ 1097.503449][T25039] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5383'.
[ 1097.516512][T25032] netlink: 'syz.8.5383': attribute type 5 has an invalid length.
[ 1097.524403][T25032] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5383'.
[ 1098.661959][T25061] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5392'.
[ 1099.285856][T15540] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1099.483587][T15540] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1099.499634][T15540] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1099.541464][T15540] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1099.558789][T15540] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1099.575427][T15540] usb 9-1: SerialNumber: syz
[ 1099.797747][T15540] usb 9-1: 0:2 : does not exist
[ 1099.816040][T15540] usb 9-1: unit 255 not found!
[ 1099.841056][T15540] usb 9-1: 5:0: cannot get min/max values for control 5 (id 5)
[ 1100.025713][T23090] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1100.030525][T15540] usb 9-1: 5:0: cannot get min/max values for control 7 (id 5)
[ 1100.049157][T15540] usb 9-1: 5:0: cannot get min/max values for control 8 (id 5)
[ 1100.069974][T15540] usb 9-1: 5:0: cannot get min/max values for control 9 (id 5)
[ 1100.077669][ T5930] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1100.106908][T15540] usb 9-1: USB disconnect, device number 35
[ 1100.177392][T23090] usb 2-1: Using ep0 maxpacket: 16
[ 1100.193575][T23090] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1100.205448][T23090] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1100.215838][T23090] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1100.228081][T23090] usb 2-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[ 1100.243442][T23090] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.245608][ T5930] usb 6-1: Using ep0 maxpacket: 8
[ 1100.252126][T23090] usb 2-1: Product: syz
[ 1100.261444][T23090] usb 2-1: Manufacturer: syz
[ 1100.266543][T23090] usb 2-1: SerialNumber: syz
[ 1100.266996][ T5930] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1100.290472][T23090] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input114
[ 1100.300238][ T5930] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1100.328662][ T5930] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1100.355665][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1100.378613][ T5930] usbtmc 6-1:16.0: bulk endpoints not found
[ 1100.552701][ T5184] bcm5974 2-1:1.0: could not read from device
[ 1100.586227][ T5184] bcm5974 2-1:1.0: could not read from device
[ 1100.611994][ T5184] bcm5974 2-1:1.0: could not read from device
[ 1100.625050][T23090] usb 2-1: USB disconnect, device number 68
[ 1100.893578][T25088] binder_alloc: 25086: pid 25086 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1100.906390][T25088] binder_alloc: 25086: pid 25086 spamming oneway? 2 buffers allocated for a total size of 5120
[ 1101.283141][T25090] xt_CT: No such helper "netbios-ns"
[ 1102.373718][T25104] xt_policy: neither incoming nor outgoing policy selected
[ 1102.768990][T15540] usb 6-1: USB disconnect, device number 71
[ 1102.875872][T23111] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1102.954186][T25119] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5411'.
[ 1103.074778][T23111] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1103.085920][T23111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1103.121884][T23111] usb 3-1: Product: syz
[ 1103.136156][T25119] macvtap1: entered promiscuous mode
[ 1103.144047][T23111] usb 3-1: Manufacturer: syz
[ 1103.161897][T23111] usb 3-1: SerialNumber: syz
[ 1103.200560][T25119] syz_tun: entered promiscuous mode
[ 1103.230388][T25119] macvtap1: entered allmulticast mode
[ 1103.293505][T25125] syz_tun: left promiscuous mode
[ 1103.857266][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5414'.
[ 1103.972747][T23111] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[ 1103.989163][T23111] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[ 1104.033186][T23111] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1104.095391][T23111] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[ 1104.110387][ T5930] usb 10-1: new full-speed USB device number 23 using dummy_hcd
[ 1104.115514][T23111] usb 3-1: USB disconnect, device number 73
[ 1104.277069][ T5930] usb 10-1: config 5 has an invalid interface number: 187 but max is 0
[ 1104.286544][ T5930] usb 10-1: config 5 has no interface number 0
[ 1104.292933][ T5930] usb 10-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[ 1104.452504][ T5930] usb 10-1: config 5 interface 187 altsetting 8 has an endpoint descriptor with address 0x93, changing to 0x83
[ 1104.480162][ T5930] usb 10-1: config 5 interface 187 altsetting 8 endpoint 0x83 has an invalid bInterval 153, changing to 4
[ 1104.493285][ T5930] usb 10-1: config 5 interface 187 altsetting 8 endpoint 0x83 has invalid maxpacket 57626, setting to 1023
[ 1104.557806][ T5930] usb 10-1: config 5 interface 187 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1104.571710][ T5930] usb 10-1: config 5 interface 187 has no altsetting 0
[ 1104.582971][ T5930] usb 10-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a
[ 1104.593389][ T5930] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.601793][ T5930] usb 10-1: Product: syz
[ 1104.606364][ T5930] usb 10-1: Manufacturer: syz
[ 1104.638764][ T5930] usb 10-1: SerialNumber: syz
[ 1104.897424][ T5930] em28xx 10-1:5.187: New device syz syz @ 12 Mbps (eb1a:2801, interface 187, class 187)
[ 1104.913560][ T5930] em28xx 10-1:5.187: Device initialization failed.
[ 1104.924371][ T5930] em28xx 10-1:5.187: Device must be connected to a high-speed USB 2.0 port.
[ 1104.990426][ T5930] usb 10-1: USB disconnect, device number 23
[ 1107.179415][T25164] netlink: 'syz.9.5425': attribute type 1 has an invalid length.
[ 1107.260452][T25164] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address
[ 1107.282554][T25164] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[ 1107.309258][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5425'.
[ 1107.380983][T25164] bond1: (slave xfrm1): making interface the new active one
[ 1107.425365][T23090] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[ 1107.438346][T25164] bond1: (slave xfrm1): Enslaving as an active interface with an up link
[ 1107.523158][T25166] bond1 (unregistering): (slave xfrm1): Releasing backup interface
[ 1107.556963][T25166] bond1 (unregistering): Released all slaves
[ 1107.610330][T23090] usb 2-1: Using ep0 maxpacket: 32
[ 1107.620940][T23090] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1107.658065][T25172] syzkaller0: entered promiscuous mode
[ 1107.663649][T25172] syzkaller0: entered allmulticast mode
[ 1107.697407][T23090] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1107.752420][T23090] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1107.772507][T23090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1107.798256][T23090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1107.839010][T23090] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1107.868789][T23090] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1107.878014][T23090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.912419][T23090] usb 2-1: config 0 descriptor??
[ 1107.935556][   T30] kauditd_printk_skb: 16 callbacks suppressed
[ 1107.935572][   T30] audit: type=1804 audit(1763014654.065:2017): pid=25174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.5429" name="/newroot/334/file1" dev="fuse" ino=1 res=1 errno=0
[ 1108.408014][T25184] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5433'.
[ 1108.427642][T23090] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 69 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1108.493926][T23090] usb 2-1: USB disconnect, device number 69
[ 1108.542750][T23090] usblp0: removed
[ 1108.627091][T22151] Bluetooth: hci1: SCO packet too small
[ 1109.025376][T23090] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1109.115514][T22151] Bluetooth: hci2: command 0x0406 tx timeout
[ 1109.205248][T23090] usb 2-1: Using ep0 maxpacket: 32
[ 1109.228074][T23090] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1109.241520][T23090] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1109.261223][T23090] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1109.289680][T23090] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1109.350273][T23090] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1109.410223][T23090] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1109.434697][T23090] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1109.444847][T23090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1109.528817][T23090] usb 2-1: config 0 descriptor??
[ 1109.759314][T23090] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 70 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1110.270978][    C0] usblp0: nonzero read bulk status received: -71
[ 1110.272100][ T6002] usb 2-1: USB disconnect, device number 70
[ 1110.277557][T25162] usblp0: error -71 reading from printer
[ 1110.524353][T25161] usblp0: removed
[ 1111.191023][T22151] Bluetooth: hci2: command 0x0406 tx timeout
[ 1111.432895][T25224] binder: BINDER_SET_CONTEXT_MGR already set
[ 1111.440403][T25224] binder: 25223:25224 ioctl 4018620d 80000100 returned -16
[ 1111.451503][T25225] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[ 1112.092267][T25224] binder: BINDER_SET_CONTEXT_MGR already set
[ 1112.113023][T25224] binder: 25223:25224 ioctl 4018620d 800002c0 returned -16
[ 1112.308256][T25229] @: renamed from vlan0
[ 1113.103100][ T6002] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1113.285218][T15540] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1113.315859][ T6002] usb 3-1: Using ep0 maxpacket: 16
[ 1113.328792][ T6002] usb 3-1: config 0 has an invalid interface number: 71 but max is 1
[ 1113.416042][ T6002] usb 3-1: config 0 has an invalid interface number: 220 but max is 1
[ 1113.424905][ T6002] usb 3-1: config 0 has no interface number 0
[ 1113.432765][ T6002] usb 3-1: config 0 has no interface number 1
[ 1113.461705][ T6002] usb 3-1: config 0 interface 71 has no altsetting 0
[ 1113.476755][T15540] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1113.488069][T15540] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1113.508346][T15540] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1113.534058][T15540] usb 10-1: config 0 descriptor??
[ 1113.543855][ T6002] usb 3-1: config 0 interface 220 has no altsetting 0
[ 1113.601804][ T6002] usb 3-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=1b.69
[ 1113.615526][ T6002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1113.627992][ T6002] usb 3-1: Product: syz
[ 1113.632171][ T6002] usb 3-1: Manufacturer: syz
[ 1113.637426][ T6002] usb 3-1: SerialNumber: syz
[ 1113.650701][ T6002] usb 3-1: config 0 descriptor??
[ 1113.747816][T25254] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5453'.
[ 1113.782400][T15540] usbhid 10-1:0.0: can't add hid device: -71
[ 1113.797031][T15540] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1113.827814][T15540] usb 10-1: USB disconnect, device number 24
[ 1113.846758][T25254] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1114.129151][ T6002] usb 3-1: USB disconnect, device number 74
[ 1114.245235][T15540] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1114.416295][T15540] usb 10-1: Using ep0 maxpacket: 16
[ 1114.436562][T15540] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1114.495776][T15540] usb 10-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[ 1114.530945][T15540] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1114.625376][ T5901] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1114.670938][T15540] usb 10-1: config 0 descriptor??
[ 1114.815355][ T5901] usb 9-1: Using ep0 maxpacket: 16
[ 1114.822450][ T5901] usb 9-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1114.844147][ T5901] usb 9-1: config 1 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1114.869309][ T5901] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1114.883567][ T5901] usb 9-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice= 0.40
[ 1114.925233][ T5901] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1114.950994][ T5901] usb 9-1: Product: syz
[ 1114.960650][ T5901] usb 9-1: Manufacturer: syz
[ 1114.975730][ T5901] usb 9-1: SerialNumber: syz
[ 1115.037590][ T5901] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input115
[ 1115.140872][T15540] kye 0003:0458:5016.0055: control desc unexpectedly large
[ 1115.217094][T15540] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.0055/input/input116
[ 1115.332930][T15540] input: HID 0458:5016 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0458:5016.0055/input/input117
[ 1115.431753][ T5901] usb 9-1: USB disconnect, device number 36
[ 1115.444422][ T5184] bcm5974 9-1:1.0: could not read from device
[ 1115.473907][T15540] kye 0003:0458:5016.0055: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.9-1/input0
[ 1115.535645][T19426] bcm5974 9-1:1.0: could not read from device
[ 1115.914024][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.920419][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.062067][T23090] usb 10-1: USB disconnect, device number 25
[ 1117.163440][T25292] syzkaller0: entered promiscuous mode
[ 1117.211189][T25292] syzkaller0: entered allmulticast mode
[ 1117.505637][ T5930] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1117.687055][ T5930] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1117.706085][ T5930] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1117.747255][ T5930] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1117.785275][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1117.862367][T25295] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1117.912635][ T5930] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1117.988666][ T5901] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1118.168458][ T5901] usb 10-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1118.268393][ T5901] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1118.304102][ T5901] usb 10-1: config 0 descriptor??
[ 1118.330708][ T5930] usb 3-1: USB disconnect, device number 75
[ 1118.352982][ T5901] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1119.413904][T25300] syz.8.5467 (25300): drop_caches: 2
[ 1120.349885][T25323] syzkaller0: entered promiscuous mode
[ 1120.359221][T25323] syzkaller0: entered allmulticast mode
[ 1120.498100][ T5901] usb 10-1: USB disconnect, device number 26
[ 1120.955276][ T5901] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1121.105525][ T5901] usb 2-1: Using ep0 maxpacket: 8
[ 1121.119873][ T5901] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[ 1121.130247][ T5901] usb 2-1: config 179 has no interface number 0
[ 1121.139009][ T5901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1121.150538][ T5901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1121.167036][ T5901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1121.192168][ T5901] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1121.204886][T25341] syzkaller0: entered promiscuous mode
[ 1121.215774][T25341] syzkaller0: entered allmulticast mode
[ 1121.223086][ T5901] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1121.285605][ T5901] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1121.294674][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1121.371167][T25331] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1121.377068][T25346] netlink: 'syz.2.5482': attribute type 3 has an invalid length.
[ 1121.412880][T25346] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5482'.
[ 1121.449751][T25343] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1121.471061][T25339] tipc: Resetting bearer <eth:syzkaller0>
[ 1121.506928][T25339] tipc: Disabling bearer <eth:syzkaller0>
[ 1121.926064][   T30] audit: type=1326 audit(1763014668.055:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.025738][   T30] audit: type=1326 audit(1763014668.055:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.135659][   T30] audit: type=1326 audit(1763014668.065:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.243182][   T30] audit: type=1326 audit(1763014668.065:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.315187][   T30] audit: type=1326 audit(1763014668.065:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.358208][   T30] audit: type=1326 audit(1763014668.065:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.381771][T25367] loop6: detected capacity change from 0 to 7
[ 1122.401891][   T30] audit: type=1326 audit(1763014668.065:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.424494][T20906] Dev loop6: unable to read RDB block 7
[ 1122.558440][   T30] audit: type=1326 audit(1763014668.065:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.561183][T20906]  loop6: AHDI p1 p2 p3
[ 1122.580595][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1122.631275][ T6002] usb 2-1: USB disconnect, device number 71
[ 1122.631298][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1122.647113][    C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[ 1122.659807][   T30] audit: type=1326 audit(1763014668.065:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.689280][T20906] loop6: partition table partially beyond EOD, truncated
[ 1122.730404][   T30] audit: type=1326 audit(1763014668.065:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25357 comm="syz.9.5487" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1122.758378][T20906] loop6: p1 start 926365495 is beyond EOD, truncated
[ 1122.837612][T20906] loop6: p2 size 116 extends beyond EOD, truncated
[ 1122.877829][T25367] Dev loop6: unable to read RDB block 7
[ 1122.883996][T25367]  loop6: AHDI p1 p2 p3
[ 1122.888488][T25367] loop6: partition table partially beyond EOD, truncated
[ 1122.932630][T25367] loop6: p1 start 926365495 is beyond EOD, truncated
[ 1122.955679][T25367] loop6: p2 size 116 extends beyond EOD, truncated
[ 1123.881262][T25380] syzkaller0: entered promiscuous mode
[ 1123.927597][T25380] syzkaller0: entered allmulticast mode
[ 1129.895266][ T5930] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1130.067212][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1130.078610][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1130.089034][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1130.102765][ T5930] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1130.112143][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1130.131532][ T5930] usb 3-1: config 0 descriptor??
[ 1130.567963][ T5930] plantronics 0003:047F:FFFF.0056: reserved main item tag 0xe
[ 1130.575658][ T5930] hid_parser_main: 112 callbacks suppressed
[ 1130.575678][ T5930] plantronics 0003:047F:FFFF.0056: unknown main item tag 0x0
[ 1130.599761][ T5930] plantronics 0003:047F:FFFF.0056: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1130.862385][ T6002] usb 3-1: USB disconnect, device number 76
[ 1133.702298][   T52] Bluetooth: hci2: unexpected event for opcode 0x2024
[ 1134.863812][T25479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1134.903775][T23110] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0
[ 1134.915241][T23110] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0
[ 1134.922668][T23110] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0
[ 1134.954263][T25478] capability: warning: `syz.9.5520' uses 32-bit capabilities (legacy support in use)
[ 1135.065358][T23110] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0
[ 1135.086142][T23110] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0
[ 1135.098067][T23110] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0
[ 1135.108032][T25473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5518'.
[ 1135.117614][T23110] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0
[ 1135.125022][T23110] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0
[ 1135.133840][T23110] hid-generic 0000:0000:0000.0057: unknown main item tag 0x0
[ 1135.164974][T23110] hid-generic 0000:0000:0000.0057: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz1
[ 1135.285540][T25473] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1135.290648][ T6002] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[ 1135.419321][T25488] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5523'.
[ 1135.449957][T25485] fido_id[25485]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1135.457903][ T6002] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[ 1135.489057][ T6002] usb 2-1: config 0 has no interface number 0
[ 1135.508534][T25491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5525'.
[ 1135.519347][ T6002] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1135.734090][ T6002] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1135.896800][T23110] usb 3-1: new full-speed USB device number 77 using dummy_hcd
[ 1135.920623][ T6002] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1135.999792][ T6002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.085957][ T6002] usb 2-1: Product: syz
[ 1136.140437][T23110] usb 3-1: config 5 has an invalid interface number: 187 but max is 0
[ 1136.150419][T23110] usb 3-1: config 5 has no interface number 0
[ 1136.197473][T23110] usb 3-1: config 5 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[ 1136.230417][ T6002] usb 2-1: Manufacturer: syz
[ 1136.273132][ T6002] usb 2-1: SerialNumber: syz
[ 1136.340713][T23110] usb 3-1: config 5 interface 187 altsetting 8 has an endpoint descriptor with address 0x93, changing to 0x83
[ 1136.363707][ T6002] usb 2-1: config 0 descriptor??
[ 1136.373767][T23110] usb 3-1: config 5 interface 187 altsetting 8 endpoint 0x83 has an invalid bInterval 153, changing to 4
[ 1136.402079][T23110] usb 3-1: config 5 interface 187 altsetting 8 endpoint 0x83 has invalid maxpacket 57626, setting to 1023
[ 1136.414899][T23110] usb 3-1: config 5 interface 187 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1136.429449][T23110] usb 3-1: config 5 interface 187 has no altsetting 0
[ 1136.440515][T23110] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2801, bcdDevice=21.7a
[ 1136.455209][T23110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1136.485515][T23110] usb 3-1: Product: syz
[ 1136.489863][T23110] usb 3-1: Manufacturer: syz
[ 1136.494518][T23110] usb 3-1: SerialNumber: syz
[ 1136.577216][T25503] netlink: 'syz.8.5528': attribute type 1 has an invalid length.
[ 1136.633178][T25506] netlink: 'syz.5.5527': attribute type 2 has an invalid length.
[ 1136.641208][T25506] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5527'.
[ 1136.662821][T25503] bond5: entered promiscuous mode
[ 1136.686819][T25503] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1136.883500][T23110] em28xx 3-1:5.187: New device syz syz @ 12 Mbps (eb1a:2801, interface 187, class 187)
[ 1136.904760][T23110] em28xx 3-1:5.187: Device initialization failed.
[ 1136.931790][T23110] em28xx 3-1:5.187: Device must be connected to a high-speed USB 2.0 port.
[ 1136.961321][T23110] usb 3-1: USB disconnect, device number 77
[ 1137.049971][T25513] netlink: 'syz.9.5529': attribute type 27 has an invalid length.
[ 1137.083695][T25507] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1137.168146][T25507] bond5: (slave bond6): making interface the new active one
[ 1137.176897][T25507] bond6: entered promiscuous mode
[ 1137.191372][T25507] bond5: (slave bond6): Enslaving as an active interface with an up link
[ 1137.275284][T25508] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1137.315348][T25508] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[ 1137.376417][ T6002] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[ 1137.386355][ T6002] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -71
[ 1137.405266][T23111] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1137.433489][ T6002] usb 2-1: USB disconnect, device number 72
[ 1137.597811][T23111] usb 10-1: Using ep0 maxpacket: 16
[ 1137.614957][T23111] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1137.629750][T23111] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1137.680228][T23111] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1137.699059][T23111] usb 10-1: config 1 has no interface number 1
[ 1137.712045][T23111] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1137.735442][T23111] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1137.767742][T23111] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1137.781752][T23111] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1137.791557][T23111] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1137.822865][T23111] usb 10-1: Product: syz
[ 1137.827271][T23111] usb 10-1: Manufacturer: syz
[ 1137.865351][T23111] usb 10-1: SerialNumber: syz
[ 1138.164196][T23111] usb 10-1: USB disconnect, device number 27
[ 1138.344538][T25436] udevd[25436]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1138.715188][ T6002] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1138.729099][T25531] binder: BINDER_SET_CONTEXT_MGR already set
[ 1138.742646][T25531] binder: 25530:25531 ioctl 4018620d 80000040 returned -16
[ 1138.768883][T25531] binder: 25530:25531 ioctl c0306201 80000240 returned -11
[ 1138.889280][ T6002] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1138.903507][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 1138.903523][   T30] audit: type=1326 audit(1763014685.035:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1138.905185][ T6002] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1138.911092][   T30] audit: type=1326 audit(1763014685.045:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1138.963653][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1139.030726][ T6002] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1139.040828][ T6002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1139.071735][ T6002] usb 2-1: SerialNumber: syz
[ 1139.105364][   T30] audit: type=1326 audit(1763014685.105:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1139.127454][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1139.214095][   T30] audit: type=1326 audit(1763014685.105:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1139.275226][   T30] audit: type=1326 audit(1763014685.105:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1139.297318][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1139.321631][ T6002] usb 2-1: 0:2 : does not exist
[ 1139.366480][ T6002] usb 2-1: USB disconnect, device number 73
[ 1139.445248][   T30] audit: type=1326 audit(1763014685.105:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1139.519131][T25436] udevd[25436]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1139.643379][   T30] audit: type=1326 audit(1763014685.105:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1139.730557][   T30] audit: type=1326 audit(1763014685.105:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1139.808993][   T30] audit: type=1326 audit(1763014685.105:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1139.925595][   T30] audit: type=1326 audit(1763014685.105:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25535 comm="syz.8.5538" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb3539 code=0x7ffc0000
[ 1140.425209][ T6002] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1140.576060][ T6002] usb 10-1: Using ep0 maxpacket: 32
[ 1140.583759][ T6002] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1140.592518][ T6002] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1140.601353][ T6002] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1140.624085][ T6002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1140.644803][ T6002] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1140.726294][ T6002] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1140.764907][ T6002] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1140.865762][ T6002] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1140.881242][ T6002] usb 10-1: config 0 descriptor??
[ 1141.154754][ T6002] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 28 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1141.183248][ T6002] usb 10-1: USB disconnect, device number 28
[ 1141.237695][ T6002] usblp0: removed
[ 1141.783612][ T6002] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1141.965214][ T6002] usb 10-1: Using ep0 maxpacket: 32
[ 1141.973322][ T6002] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1141.982151][ T6002] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1142.036456][ T6002] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1142.094424][ T6002] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1142.107552][ T6002] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1142.132036][ T6002] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1142.199188][ T6002] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1142.219120][ T6002] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1142.305039][ T6002] usb 10-1: config 0 descriptor??
[ 1142.518442][ T6002] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1142.853674][    C1] usblp0: nonzero read bulk status received: -71
[ 1142.854916][ T5930] usb 10-1: USB disconnect, device number 29
[ 1142.861609][T25556] usblp0: error -71 reading from printer
[ 1142.861696][T25573] usblp0: error -19 reading from printer
[ 1143.058987][T25555] usblp0: removed
[ 1143.065065][T25581] binder: BINDER_SET_CONTEXT_MGR already set
[ 1143.215960][T25581] binder: 25580:25581 ioctl 4018620d 80000100 returned -16
[ 1143.233071][T25582] binder: BINDER_SET_CONTEXT_MGR already set
[ 1143.255676][T25582] binder: 25580:25582 ioctl 4018620d 80004a80 returned -16
[ 1144.283057][T25592] netlink: 'syz.9.5553': attribute type 1 has an invalid length.
[ 1144.360334][T25592] bond1: entered promiscuous mode
[ 1144.436722][T25592] bond1: entered allmulticast mode
[ 1144.715618][T25592] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1144.748450][T25595] bond1: (slave gretap1): making interface the new active one
[ 1144.756166][T25595] gretap1: entered promiscuous mode
[ 1144.761613][T25595] gretap1: entered allmulticast mode
[ 1144.772332][T25595] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1145.087234][T25596] vlan2: entered allmulticast mode
[ 1145.093420][T25596] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[ 1146.406573][T25614] VFS: Warning: syz.8.5558 using old stat() call. Recompile your binary.
[ 1147.627534][T25624] binder: 25623:25624 unknown command 0
[ 1147.634805][T25624] binder: 25623:25624 ioctl c0306201 80000080 returned -22
[ 1147.653323][T25624] binder: 25623:25624 ioctl c0306201 80000300 returned -11
[ 1147.661524][T25625] binder_alloc: 25621: binder_alloc_buf, no vma
[ 1147.725344][T25622] binder: 25621:25622 ioctl c0306201 80000580 returned -14
[ 1147.980761][T25632] netlink: 'syz.2.5564': attribute type 1 has an invalid length.
[ 1148.059223][ T5930] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1148.272097][T25645] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5567'.
[ 1148.299714][T25639] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1148.315243][ T5930] usb 2-1: Using ep0 maxpacket: 16
[ 1148.325313][ T5930] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[ 1148.334827][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1148.346493][ T5930] usb 2-1: Product: syz
[ 1148.356488][ T5930] usb 2-1: Manufacturer: syz
[ 1148.382096][ T5930] usb 2-1: SerialNumber: syz
[ 1148.399764][T25640] veth3: entered promiscuous mode
[ 1148.409542][T25640] bond2: (slave veth3): Enslaving as a backup interface with a down link
[ 1148.423578][ T5930] usb 2-1: config 0 descriptor??
[ 1148.456429][ T5930] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1148.491926][ T5930] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[ 1148.545082][T25436] udevd[25436]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1149.278086][T15531] usb 2-1: USB disconnect, device number 74
[ 1149.437475][T25658] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5570'.
[ 1149.785283][T23111] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1150.090906][T23111] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1150.145800][T23111] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1150.263830][T25666] binder: BINDER_SET_CONTEXT_MGR already set
[ 1150.270403][T23111] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1150.280794][T25666] binder: 25665:25666 ioctl 4018620d 800000c0 returned -16
[ 1150.288490][T23111] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1150.315803][T23111] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1150.326483][T25666] binder: 25665:25666 unknown command 0
[ 1150.333038][T25666] binder: 25665:25666 ioctl c0306201 80000080 returned -22
[ 1150.340566][T23111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1150.352406][T25666] binder: BINDER_SET_CONTEXT_MGR already set
[ 1150.370598][T25666] binder: 25665:25666 ioctl 4018620d 80000040 returned -16
[ 1150.384299][T23111] usb 10-1: config 0 descriptor??
[ 1150.405463][T25666] binder: 25665:25666 ioctl c0306201 80000300 returned -11
[ 1150.621989][T25671] bridge2: entered allmulticast mode
[ 1150.797945][T25673] binder: BINDER_SET_CONTEXT_MGR already set
[ 1150.804338][T25673] binder: 25672:25673 ioctl 4018620d 80000300 returned -16
[ 1150.845055][T25673] binder: BINDER_SET_CONTEXT_MGR already set
[ 1150.861736][T25673] binder: 25672:25673 ioctl 4018620d 80000040 returned -16
[ 1150.871961][T23111] plantronics 0003:047F:FFFF.0058: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1151.583637][T25688] syzkaller0: entered promiscuous mode
[ 1151.589326][T25688] syzkaller0: entered allmulticast mode
[ 1152.152871][T23111] usb 10-1: USB disconnect, device number 30
[ 1152.707014][T25695] xt_policy: neither incoming nor outgoing policy selected
[ 1153.525213][ T6002] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1153.572850][ T5930] IPVS: starting estimator thread 0...
[ 1153.822569][T25713] IPVS: using max 35 ests per chain, 84000 per kthread
[ 1153.847376][ T6002] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1153.875234][ T6002] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1153.896690][ T6002] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1153.928529][ T6002] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1153.942193][ T6002] usb 9-1: SerialNumber: syz
[ 1154.176627][ T6002] usb 9-1: 0:2 : does not exist
[ 1154.256669][ T6002] usb 9-1: USB disconnect, device number 37
[ 1157.821985][T25765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5603'.
[ 1157.925308][T25765] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5603'.
[ 1159.580894][T25785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5607'.
[ 1160.401229][T25801] netlink: 'syz.2.5611': attribute type 2 has an invalid length.
[ 1160.409317][T25801] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5611'.
[ 1161.208689][T23111] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1161.395181][T23111] usb 10-1: Using ep0 maxpacket: 8
[ 1161.419983][T23111] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1161.445730][T23111] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 1161.455281][T23111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1161.473575][T23111] usb 10-1: config 0 descriptor??
[ 1161.489114][T23111] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 1162.493971][T23111] gspca_vc032x: reg_w err -71
[ 1162.522477][T23111] vc032x 10-1:0.0: probe with driver vc032x failed with error -71
[ 1162.557467][T25822] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5627'.
[ 1162.588979][T23111] usb 10-1: USB disconnect, device number 31
[ 1162.682114][T25822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5627'.
[ 1163.391849][T25834] netlink: 'syz.5.5620': attribute type 30 has an invalid length.
[ 1163.800965][T25833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1163.804316][T25834] bond3: option arp_missed_max: invalid value (0)
[ 1163.982665][T25834] bond3: option arp_missed_max: allowed values 1 - 255
[ 1164.003918][T25834] bond3 (unregistering): Released all slaves
[ 1164.455388][T25859] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1164.625206][T23111] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1165.180052][T23111] usb 9-1: Using ep0 maxpacket: 8
[ 1165.235476][T23111] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1165.245387][T23111] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1165.264994][T23111] usb 9-1: Product: syz
[ 1165.282289][T23111] usb 9-1: Manufacturer: syz
[ 1165.295188][T23111] usb 9-1: SerialNumber: syz
[ 1165.344418][T23111] usb 9-1: config 0 descriptor??
[ 1165.573781][T23111] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1165.655912][T23086] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1165.925345][T23086] usb 2-1: Using ep0 maxpacket: 8
[ 1165.967346][T15531] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1166.000881][T23086] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1166.015031][T23086] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1166.060107][T23086] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1166.077991][T23086] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1166.166953][T23086] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1166.179376][T23086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.198993][T15531] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1166.213040][T15531] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1166.235081][T15531] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1166.289750][T15531] usb 10-1: config 0 descriptor??
[ 1166.300308][T15531] pwc: Askey VC010 type 2 USB webcam detected.
[ 1166.404133][T23086] usb 2-1: GET_CAPABILITIES returned 0
[ 1166.419548][T23086] usbtmc 2-1:16.0: can't read capabilities
[ 1166.825446][T15531] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1166.828569][ T6002] usb 2-1: USB disconnect, device number 75
[ 1167.028843][T23111] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1167.043734][T23111] usb 9-1: USB disconnect, device number 38
[ 1167.065647][T15531] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1167.103399][T15531] pwc: recv_control_msg error -32 req 04 val 1000
[ 1167.140989][T15531] pwc: recv_control_msg error -32 req 04 val 1300
[ 1167.155064][T15531] pwc: recv_control_msg error -32 req 04 val 1400
[ 1167.170835][T15531] pwc: recv_control_msg error -32 req 02 val 2000
[ 1167.186282][T15531] pwc: recv_control_msg error -32 req 02 val 2100
[ 1167.676723][T15531] pwc: recv_control_msg error -32 req 04 val 1500
[ 1168.185241][T15531] pwc: recv_control_msg error -32 req 02 val 2500
[ 1168.532006][T15531] pwc: recv_control_msg error -71 req 02 val 2600
[ 1168.541871][T15531] pwc: recv_control_msg error -71 req 02 val 2900
[ 1168.570766][T15531] pwc: recv_control_msg error -71 req 02 val 2800
[ 1168.590672][T15531] pwc: recv_control_msg error -71 req 04 val 1100
[ 1168.615685][T15531] pwc: recv_control_msg error -71 req 04 val 1200
[ 1169.014908][T15531] pwc: Registered as video103.
[ 1169.041580][T15531] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input120
[ 1169.095415][T15531] usb 10-1: USB disconnect, device number 32
[ 1172.078599][T25957] bridge3: entered allmulticast mode
[ 1174.488871][T25999] syzkaller0: entered promiscuous mode
[ 1174.494403][T25999] syzkaller0: entered allmulticast mode
[ 1177.467159][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.473518][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1179.505320][T15531] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1179.685256][T15531] usb 3-1: Using ep0 maxpacket: 16
[ 1179.692573][T15531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1179.710250][T15531] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1179.721121][T15531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.780410][T15531] usb 3-1: Product: syz
[ 1179.784744][T15531] usb 3-1: Manufacturer: syz
[ 1179.793645][T15531] usb 3-1: SerialNumber: syz
[ 1180.131718][T15531] usb 3-1: config 0 descriptor??
[ 1180.147755][T15531] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1180.178698][T15531] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 1180.792158][T15531] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1180.877563][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1180.877591][   T30] audit: type=1326 audit(1763014727.015:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1180.995474][   T30] audit: type=1326 audit(1763014727.045:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1181.020767][   T30] audit: type=1326 audit(1763014727.045:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=459 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1181.045867][   T30] audit: type=1326 audit(1763014727.045:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1181.071167][   T30] audit: type=1326 audit(1763014727.045:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1181.098639][   T30] audit: type=1326 audit(1763014727.045:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1181.121423][   T30] audit: type=1326 audit(1763014727.045:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1181.144489][   T30] audit: type=1326 audit(1763014727.045:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1181.166856][T15540] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1181.179008][   T30] audit: type=1326 audit(1763014727.045:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1181.209167][   T30] audit: type=1326 audit(1763014727.045:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26083 comm="syz.9.5665" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1181.245561][T15531] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1181.253702][T15531] em28xx 3-1:0.0: board has no eeprom
[ 1181.342790][T15540] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1181.354212][T15540] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1181.366895][T15540] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1181.380812][T15540] usb 10-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1181.390140][T15540] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.398355][T15540] usb 10-1: Product: syz
[ 1181.402622][T15540] usb 10-1: Manufacturer: syz
[ 1181.407412][T15540] usb 10-1: SerialNumber: syz
[ 1181.414694][T15540] usb 10-1: config 0 descriptor??
[ 1181.421004][T26087] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1181.428731][T26087] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 1181.437684][T15540] usb 10-1: ucan: probing device on interface #0
[ 1181.595792][T15531] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1181.604125][T15531] em28xx 3-1:0.0: dvb set to bulk mode.
[ 1181.648948][ T1557] em28xx 3-1:0.0: Binding DVB extension
[ 1181.844868][T15540] usb 10-1: ucan: device reported invalid tx-fifo size
[ 1181.925617][T23111] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1182.065338][T15540] usb 10-1: ucan: probe failed; try to update the device firmware
[ 1182.224992][T23111] usb 6-1: Using ep0 maxpacket: 32
[ 1182.240919][T23111] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[ 1182.252300][T23111] usb 6-1: config 0 has no interface number 0
[ 1182.259089][T23090] usb 10-1: USB disconnect, device number 33
[ 1182.694333][T23111] usb 6-1: config 0 interface 184 has no altsetting 0
[ 1182.705785][T23111] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1182.724031][T23111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.733016][T23111] usb 6-1: Product: syz
[ 1182.739668][T23111] usb 6-1: Manufacturer: syz
[ 1182.745192][T23111] usb 6-1: SerialNumber: syz
[ 1182.764661][T23111] usb 6-1: config 0 descriptor??
[ 1182.791829][T23111] smsc75xx v1.0.0
[ 1182.793078][T26068] em28xx 3-1:0.0: reading from i2c device at 0x2 failed (error=-5)
[ 1182.807431][T15540] usb 3-1: USB disconnect, device number 78
[ 1182.814546][T15540] em28xx 3-1:0.0: Disconnecting em28xx
[ 1182.907069][ T1557] em28xx 3-1:0.0: Registering input extension
[ 1182.914159][T15540] em28xx 3-1:0.0: Closing input extension
[ 1182.947230][T15540] em28xx 3-1:0.0: Freeing device
[ 1183.200220][T26109] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1183.217604][T26109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1183.475270][T23111] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1183.504397][T23111] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1183.995431][T26122] netlink: 'syz.2.5671': attribute type 1 has an invalid length.
[ 1184.024914][T26119] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5670'.
[ 1184.375017][T26122] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1184.585016][T26122] gretap1: entered promiscuous mode
[ 1184.606404][T26122] bond3: (slave gretap1): making interface the new active one
[ 1184.616399][T26122] bond3: (slave gretap1): Enslaving as an active interface with an up link
[ 1184.686781][T26131] syzkaller0: entered promiscuous mode
[ 1184.692371][T26131] syzkaller0: entered allmulticast mode
[ 1184.957578][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5674'.
[ 1184.975754][T26134] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5674'.
[ 1184.993770][T26134] netlink: 277 bytes leftover after parsing attributes in process `syz.2.5674'.
[ 1185.024331][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5674'.
[ 1185.038287][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5674'.
[ 1185.091186][T26134] futex_wake_op: syz.2.5674 tries to shift op by -1; fix this program
[ 1185.101711][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5674'.
[ 1185.295484][ T1557] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 1186.136936][T23111] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000300: -71
[ 1186.175201][ T1557] usb 10-1: Using ep0 maxpacket: 8
[ 1186.192635][ T1557] usb 10-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[ 1186.215560][ T1557] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.236385][ T1557] usb 10-1: Product: syz
[ 1186.237320][T23111] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX: -71
[ 1186.251130][ T1557] usb 10-1: Manufacturer: syz
[ 1186.251506][T23111] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[ 1186.288263][ T1557] usb 10-1: SerialNumber: syz
[ 1186.298224][ T1557] usb 10-1: config 0 descriptor??
[ 1186.324556][ T1557] gspca_main: sonixj-2.14.0 probing 0c45:613a
[ 1186.435647][T23111] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1186.534292][T23111] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[ 1186.784339][T23111] usb 6-1: USB disconnect, device number 72
[ 1187.606303][T23111] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1187.775475][T23111] usb 6-1: Using ep0 maxpacket: 16
[ 1187.799658][T23111] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1187.862287][T23111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1187.897203][T23111] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1187.906805][T23111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.914895][T23111] usb 6-1: Product: syz
[ 1188.010344][T23111] usb 6-1: Manufacturer: syz
[ 1188.014981][T23111] usb 6-1: SerialNumber: syz
[ 1188.260014][T23111] usb 6-1: config 0 descriptor??
[ 1188.321611][T23111] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1188.496304][T23111] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1188.578055][T26176] netlink: 'syz.8.5690': attribute type 1 has an invalid length.
[ 1189.197292][T23111] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1189.225281][T23111] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[ 1189.267264][T26176] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1189.328822][T26179] gretap1: entered promiscuous mode
[ 1189.414936][ T1557] gspca_sonixj: reg_w1 err -71
[ 1189.455324][ T1557] sonixj 10-1:0.0: probe with driver sonixj failed with error -71
[ 1189.458636][T26179] bond7: (slave gretap1): making interface the new active one
[ 1189.478232][ T1557] usb 10-1: USB disconnect, device number 34
[ 1189.491592][T26179] bond7: (slave gretap1): Enslaving as an active interface with an up link
[ 1189.913662][T23111] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[ 1189.923057][T23111] em28xx 6-1:0.0: couldn't setup AC97 register 2
[ 1189.995215][T23110] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1190.154923][T23110] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1190.179180][T23110] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1190.213566][T23110] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1190.232983][T23110] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1190.330700][T23110] usb 9-1: SerialNumber: syz
[ 1190.542472][T23111] em28xx 6-1:0.0: couldn't setup AC97 register 6
[ 1190.576240][T23111] em28xx 6-1:0.0: couldn't setup AC97 register 54
[ 1190.609027][T23110] usb 9-1: 0:2 : does not exist
[ 1190.648870][T23111] em28xx 6-1:0.0: couldn't setup AC97 register 56
[ 1190.658392][T23110] usb 9-1: unit 255 not found!
[ 1190.811167][T23111] usb 6-1: USB disconnect, device number 73
[ 1190.819407][T23110] usb 9-1: 5:0: cannot get min/max values for control 1 (id 5)
[ 1190.834346][T23110] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1190.859981][T23110] usb 9-1: USB disconnect, device number 39
[ 1192.735324][T23110] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1192.885250][T23110] usb 2-1: Using ep0 maxpacket: 16
[ 1192.885295][T15540] usb 9-1: new full-speed USB device number 40 using dummy_hcd
[ 1192.914821][T26221] tipc: Started in network mode
[ 1192.929041][T23110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1192.935430][T26221] tipc: Node identity d62484e5ae89, cluster identity 4711
[ 1192.951185][T26221] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1192.994085][T23110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1193.016293][T26221] syzkaller0: entered promiscuous mode
[ 1193.021924][T26221] syzkaller0: entered allmulticast mode
[ 1193.075351][ T1557] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1193.077419][T23110] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[ 1193.096929][T15540] usb 9-1: config 0 has an invalid interface number: 20 but max is 0
[ 1193.105058][T15540] usb 9-1: config 0 has no interface number 0
[ 1193.111392][T15540] usb 9-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[ 1193.138309][T15540] usb 9-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[ 1193.149347][T15540] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.227236][ T1557] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1193.450313][ T1557] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1193.459447][ T1557] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1193.467557][T15540] usb 9-1: Product: syz
[ 1193.474008][T15540] usb 9-1: Manufacturer: syz
[ 1193.489401][ T1557] usb 3-1: config 0 descriptor??
[ 1193.489922][T23110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1193.511648][T15540] usb 9-1: SerialNumber: syz
[ 1193.519858][ T1557] pwc: Askey VC010 type 2 USB webcam detected.
[ 1193.528881][T15540] usb 9-1: config 0 descriptor??
[ 1193.529719][T26224] tipc: Resetting bearer <eth:syzkaller0>
[ 1193.543024][T26218] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[ 1193.577356][T15540] usb-storage 9-1:0.20: USB Mass Storage device detected
[ 1193.601348][T23110] usb 2-1: config 0 descriptor??
[ 1193.607687][T15540] usb-storage 9-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[ 1193.637693][T26220] tipc: Resetting bearer <eth:syzkaller0>
[ 1193.662375][T26220] tipc: Disabling bearer <eth:syzkaller0>
[ 1194.169019][ T1557] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1194.185410][T15540] scsi host1: usb-storage 9-1:0.20
[ 1194.256858][T15540] usb 9-1: USB disconnect, device number 40
[ 1194.291833][T23110] usbhid 2-1:0.0: can't add hid device: -71
[ 1194.298086][T23110] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1194.366782][T23110] usb 2-1: USB disconnect, device number 76
[ 1194.437623][ T1557] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1194.445637][T23111] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1194.695197][T23111] usb 10-1: Using ep0 maxpacket: 8
[ 1194.726756][ T1557] pwc: recv_control_msg error -32 req 04 val 1000
[ 1194.732240][T23111] usb 10-1: config 0 has an invalid interface number: 55 but max is 0
[ 1194.753009][T23111] usb 10-1: config 0 has no interface number 0
[ 1194.760093][ T1557] pwc: recv_control_msg error -32 req 04 val 1300
[ 1194.761150][T23111] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1194.782095][T23111] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1194.804517][T23111] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1194.808054][ T1557] pwc: recv_control_msg error -32 req 04 val 1400
[ 1194.816832][T23111] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1194.836168][T23111] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1194.857061][T23111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1194.866855][ T1557] pwc: recv_control_msg error -32 req 02 val 2000
[ 1194.874283][ T1557] pwc: recv_control_msg error -32 req 02 val 2100
[ 1194.882930][ T1557] pwc: recv_control_msg error -32 req 04 val 1500
[ 1194.884529][T23111] usb 10-1: config 0 descriptor??
[ 1194.903409][ T1557] pwc: recv_control_msg error -32 req 02 val 2500
[ 1194.912264][T23111] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1195.116389][ T1557] pwc: recv_control_msg error -71 req 02 val 2600
[ 1195.130987][ T1557] pwc: recv_control_msg error -71 req 02 val 2900
[ 1195.143094][ T1557] pwc: recv_control_msg error -71 req 02 val 2800
[ 1195.170558][ T1557] pwc: recv_control_msg error -71 req 04 val 1100
[ 1195.196089][T26238] netlink: 'syz.8.5706': attribute type 30 has an invalid length.
[ 1195.215252][ T1557] pwc: recv_control_msg error -71 req 04 val 1200
[ 1195.237254][T23111] usb 10-1: USB disconnect, device number 35
[ 1195.258171][ T1557] pwc: Registered as video103.
[ 1195.264160][T23111] ldusb 10-1:0.55: LD USB Device #0 now disconnected
[ 1195.272252][ T1557] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input122
[ 1195.337478][ T1557] usb 3-1: USB disconnect, device number 79
[ 1195.491285][T26238] bond8: option arp_missed_max: invalid value (0)
[ 1195.974684][T26238] bond8: option arp_missed_max: allowed values 1 - 255
[ 1195.987288][T26237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1196.077205][T26238] bond8 (unregistering): Released all slaves
[ 1196.130885][T26247] syz_tun: entered allmulticast mode
[ 1196.150386][T26247] dvmrp8: entered allmulticast mode
[ 1196.297629][T26246] syz_tun: left allmulticast mode
[ 1196.703603][T26251] delete_channel: no stack
[ 1197.868186][T26276] syzkaller0: entered promiscuous mode
[ 1197.873793][T26276] syzkaller0: entered allmulticast mode
[ 1198.059891][T26278] tipc: Started in network mode
[ 1198.064981][T26278] tipc: Node identity f6ec3757fa92, cluster identity 4711
[ 1198.076933][T26278] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1198.265389][T26275] tipc: Resetting bearer <eth:syzkaller0>
[ 1198.489048][T26286] vcan0: tx drop: invalid sa for name 0x0000100000000000
[ 1198.668261][T26275] tipc: Disabling bearer <eth:syzkaller0>
[ 1200.178372][T26297] binder: 26296:26297 ioctl c0306201 80000440 returned -14
[ 1200.957237][T26308] bridge2: entered allmulticast mode
[ 1201.055341][T26309] vlan0: entered promiscuous mode
[ 1201.060741][T26309] ip6gretap0: entered promiscuous mode
[ 1201.196396][T23110] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1201.366267][T23110] usb 3-1: Using ep0 maxpacket: 16
[ 1201.368654][T23110] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1201.368683][T23110] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1201.372055][T23110] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1201.372083][T23110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1201.372102][T23110] usb 3-1: Product: syz
[ 1201.372117][T23110] usb 3-1: Manufacturer: syz
[ 1201.372130][T23110] usb 3-1: SerialNumber: syz
[ 1201.378566][T23110] usb 3-1: config 0 descriptor??
[ 1201.381118][T23110] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1201.381157][T23110] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1202.284511][T23110] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1202.286324][T23110] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1202.923124][T23110] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[ 1203.819732][T23110] em28xx 3-1:0.0: couldn't setup AC97 register 4
[ 1203.843269][T23110] em28xx 3-1:0.0: couldn't setup AC97 register 6
[ 1203.875252][T23110] em28xx 3-1:0.0: couldn't setup AC97 register 54
[ 1204.085848][T23110] em28xx 3-1:0.0: couldn't setup AC97 register 56
[ 1204.179994][T23110] usb 3-1: USB disconnect, device number 80
[ 1204.743534][T26365] =======================================================
[ 1204.743534][T26365] WARNING: The mand mount option has been deprecated and
[ 1204.743534][T26365]          and is ignored by this kernel. Remove the mand
[ 1204.743534][T26365]          option from the mount to silence this warning.
[ 1204.743534][T26365] =======================================================
[ 1206.099523][   T30] kauditd_printk_skb: 59 callbacks suppressed
[ 1206.099542][   T30] audit: type=1804 audit(1763014752.225:2137): pid=26385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5747" name="/newroot/576/file1" dev="fuse" ino=1 res=1 errno=0
[ 1207.287658][T26400] bridge_slave_0: left allmulticast mode
[ 1207.293316][T26400] bridge_slave_0: left promiscuous mode
[ 1207.361398][T26400] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1207.428938][T26400] bridge_slave_1: left allmulticast mode
[ 1207.615980][T26400] bridge_slave_1: left promiscuous mode
[ 1207.655960][T26400] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1207.708277][T26400] bond0: (slave bond_slave_0): Releasing backup interface
[ 1207.785707][T26400] bond0: (slave bond_slave_1): Releasing backup interface
[ 1207.859299][T26400] team0: Port device team_slave_0 removed
[ 1207.892547][T26400] team0: Port device team_slave_1 removed
[ 1207.934170][T26400] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1207.942800][T26400] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1208.168194][T26400] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1208.208794][T26400] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1208.298892][T26400] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1209.556287][T15540] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 1209.747314][T15540] usb 10-1: config 0 has an invalid interface number: 204 but max is 0
[ 1209.775797][T15540] usb 10-1: config 0 has no interface number 0
[ 1209.807810][T15540] usb 10-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d
[ 1209.847549][T15540] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1209.915519][T15540] usb 10-1: Product: syz
[ 1209.919808][T15540] usb 10-1: Manufacturer: syz
[ 1209.921489][T26431] netlink: 'syz.2.5761': attribute type 10 has an invalid length.
[ 1209.937140][T26431] bond0: (slave netdevsim0): Releasing backup interface
[ 1209.946762][T26431] team0: Port device netdevsim0 added
[ 1209.985331][T15540] usb 10-1: SerialNumber: syz
[ 1210.015568][T26432] syzkaller0: entered promiscuous mode
[ 1210.031648][T15540] usb 10-1: config 0 descriptor??
[ 1210.036854][T26432] syzkaller0: entered allmulticast mode
[ 1210.054860][T15540] ems_usb 10-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -22
[ 1210.127377][T15540] ems_usb 10-1:0.204: probe with driver ems_usb failed with error -22
[ 1210.517474][T15540] usb 10-1: USB disconnect, device number 36
[ 1213.980424][   T30] audit: type=1326 audit(1763014760.115:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26475 comm="syz.9.5775" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x0
[ 1214.027573][T26479] netlink: 'syz.2.5777': attribute type 4 has an invalid length.
[ 1214.056373][T26479] netlink: 'syz.2.5777': attribute type 4 has an invalid length.
[ 1214.094336][   T30] audit: type=1326 audit(1763014760.225:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26475 comm="syz.9.5775" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f63539 code=0x0
[ 1215.405244][T23110] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1215.682303][T23110] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[ 1215.692825][T23110] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[ 1215.702484][T23110] usb 3-1: Product: syz
[ 1215.708556][T23110] usb 3-1: Manufacturer: syz
[ 1215.713321][T23110] usb 3-1: SerialNumber: syz
[ 1215.733113][T23110] usb 3-1: config 0 descriptor??
[ 1215.765942][T23110] usb 3-1: selecting invalid altsetting 1
[ 1215.771895][T23110] comedi comedi5: could not switch to alternate setting 1
[ 1215.793890][T23110] usbduxfast 3-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[ 1216.096568][T23110] usb 3-1: USB disconnect, device number 81
[ 1216.351460][T26515] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1216.503603][T26521] netlink: 'syz.9.5788': attribute type 1 has an invalid length.
[ 1216.608806][T26526] bond2: (slave vcan0): The slave device specified does not support setting the MAC address
[ 1216.625259][T23110] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1216.657913][T26526] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode
[ 1216.672559][T26526] bond2: (slave vcan0): making interface the new active one
[ 1216.682248][T26526] bond2: (slave vcan0): Enslaving as an active interface with an up link
[ 1216.700823][T26521] bond2: entered allmulticast mode
[ 1216.753115][T26521] vcan0: entered allmulticast mode
[ 1216.797087][T23110] usb 2-1: config 0 has an invalid interface number: 74 but max is 1
[ 1216.808847][T23110] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1216.945182][T23110] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1216.960671][T23110] usb 2-1: config 0 has no interface number 0
[ 1216.967194][T23110] usb 2-1: config 0 interface 74 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1216.998852][T23110] usb 2-1: config 0 interface 74 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E
[ 1217.011837][T23110] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[ 1217.024388][T23110] usb 2-1: config 0 interface 74 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1217.037754][T23110] usb 2-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=de.66
[ 1217.047216][T23110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.056799][T23110] usb 2-1: Product: syz
[ 1217.065426][T15531] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1217.080569][T23110] usb 2-1: Manufacturer: syz
[ 1217.092794][T23110] usb 2-1: SerialNumber: syz
[ 1217.113049][T23110] usb 2-1: config 0 descriptor??
[ 1217.225193][T15531] usb 3-1: Using ep0 maxpacket: 16
[ 1217.233128][T15531] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1217.254223][T15531] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1217.277791][T15531] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1217.288180][T15531] usb 3-1: Product: syz
[ 1217.292462][T15531] usb 3-1: Manufacturer: syz
[ 1217.297442][T15531] usb 3-1: SerialNumber: syz
[ 1217.312183][T15531] usb 3-1: config 0 descriptor??
[ 1217.327320][T15531] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1217.344429][T15531] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 1217.350052][T23110] cypress_m8 2-1:0.74: HID->COM RS232 Adapter converter detected
[ 1217.362985][T23110] usb 2-1: HID->COM RS232 Adapter converter now attached to ttyUSB0
[ 1217.499740][T23110] usb 2-1: USB disconnect, device number 77
[ 1217.510802][T23110] cyphidcom ttyUSB0: HID->COM RS232 Adapter converter now disconnected from ttyUSB0
[ 1217.521698][T23110] cypress_m8 2-1:0.74: device disconnected
[ 1218.176782][T15531] em28xx 3-1:0.0: chip ID is em2765
[ 1218.356182][T26544] bridge_slave_0: left allmulticast mode
[ 1218.362148][T26544] bridge_slave_0: left promiscuous mode
[ 1218.368682][T26544] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1218.382456][T26544] bridge_slave_1: left allmulticast mode
[ 1218.391720][T26544] bridge_slave_1: left promiscuous mode
[ 1218.469385][T26544] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1218.912373][T26544] bond0: (slave bond_slave_0): Releasing backup interface
[ 1218.946070][T26544] bond0: (slave bond_slave_1): Releasing backup interface
[ 1219.187907][T15531] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1219.196054][T15531] em28xx 3-1:0.0: board has no eeprom
[ 1219.425338][T26544] team0: Port device team_slave_0 removed
[ 1219.444178][T26544] team0: Port device team_slave_1 removed
[ 1219.450849][T26544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1219.462411][T26544] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1219.481497][T26544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1219.497637][T26544] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1219.518726][T26544] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1219.546478][T15531] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1219.560858][T15531] em28xx 3-1:0.0: dvb set to bulk mode.
[ 1219.582153][ T5930] em28xx 3-1:0.0: Binding DVB extension
[ 1219.929769][T26565] vlan2: entered promiscuous mode
[ 1219.935421][T26565] vlan2: entered allmulticast mode
[ 1219.941061][T26565] hsr_slave_1: entered allmulticast mode
[ 1220.193361][T15531] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1220.615169][T15531] usb 2-1: Using ep0 maxpacket: 16
[ 1220.677705][T15531] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[ 1220.689723][T15531] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1220.768949][T15531] usb 2-1: config 0 has no interface number 0
[ 1220.780297][T15531] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[ 1220.794056][T15531] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1220.796757][T23090] usb 3-1: USB disconnect, device number 82
[ 1220.830313][T15531] usb 2-1: Product: syz
[ 1220.831565][T23090] em28xx 3-1:0.0: Disconnecting em28xx
[ 1220.914752][ T5930] em28xx 3-1:0.0: Registering input extension
[ 1220.935533][T15531] usb 2-1: Manufacturer: syz
[ 1220.975490][T15531] usb 2-1: SerialNumber: syz
[ 1220.980383][T23090] em28xx 3-1:0.0: Closing input extension
[ 1221.122286][T15531] usb 2-1: config 0 descriptor??
[ 1221.252784][T23090] em28xx 3-1:0.0: Freeing device
[ 1221.596646][T15531] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[ 1221.603993][T15531] uvcvideo 2-1:0.105: No valid video chain found.
[ 1221.820207][T23090] usb 2-1: USB disconnect, device number 78
[ 1222.765927][T26592] Set syz1 is full, maxelem 6117 reached
[ 1225.881044][ T5930] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[ 1226.035257][ T5930] usb 3-1: Using ep0 maxpacket: 32
[ 1226.045238][T23111] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 1226.061901][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1226.100217][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1226.136541][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1226.390944][T23111] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1226.402102][T23111] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1226.412080][T23111] usb 10-1: Product: syz
[ 1226.416478][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1226.425181][T23111] usb 10-1: Manufacturer: syz
[ 1226.431313][T23111] usb 10-1: SerialNumber: syz
[ 1226.437765][ T5930] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1226.447692][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1226.461738][ T5930] usb 3-1: Product: syz
[ 1226.468702][ T5930] usb 3-1: Manufacturer: syz
[ 1226.484659][ T5930] usb 3-1: SerialNumber: syz
[ 1226.506672][ T5930] usb 3-1: config 0 descriptor??
[ 1226.879339][T23111] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1226.896402][T23111] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1227.245488][T23110] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1227.432887][T23110] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1227.472809][T23110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1227.494191][T23110] usb 2-1: Product: syz
[ 1227.503218][T23110] usb 2-1: Manufacturer: syz
[ 1227.513588][T23110] usb 2-1: SerialNumber: syz
[ 1227.945756][T23110] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1227.972942][T23110] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1228.131979][T23111] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1228.172134][T23090] usb 3-1: USB disconnect, device number 83
[ 1228.877671][T23111] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[ 1229.221838][T23111] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1229.265253][T23111] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1229.306125][T23110] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1229.355575][T23111] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1229.415071][T23111] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[ 1229.442764][T23111] usb 10-1: USB disconnect, device number 37
[ 1229.459388][T26671] syzkaller0: entered promiscuous mode
[ 1229.465008][T26671] syzkaller0: entered allmulticast mode
[ 1230.095215][T23111] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 1230.647197][T23110] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO
[ 1230.695301][T23110] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1230.715235][T23110] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1230.748960][T23110] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1230.767325][T23111] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1230.779541][T23111] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1230.826732][T23110] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1230.845684][T23111] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1230.866143][T23110] usb 2-1: USB disconnect, device number 79
[ 1230.881137][T23111] usb 10-1: config 0 descriptor??
[ 1230.900739][T23111] pwc: Askey VC010 type 2 USB webcam detected.
[ 1231.308642][T23111] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1231.315922][T23111] pwc: recv_control_msg error -32 req 02 val 2700
[ 1231.323084][T23111] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1231.360085][T23111] pwc: recv_control_msg error -32 req 04 val 1000
[ 1231.374468][T23111] pwc: recv_control_msg error -32 req 04 val 1300
[ 1231.466933][T23111] pwc: recv_control_msg error -32 req 04 val 1400
[ 1231.488816][T23111] pwc: recv_control_msg error -32 req 02 val 2000
[ 1231.498801][T23111] pwc: recv_control_msg error -32 req 02 val 2100
[ 1231.531826][T23111] pwc: recv_control_msg error -32 req 04 val 1500
[ 1231.546312][T23111] pwc: recv_control_msg error -32 req 02 val 2500
[ 1231.553819][T23111] pwc: recv_control_msg error -32 req 02 val 2400
[ 1231.813889][T23111] pwc: recv_control_msg error -71 req 02 val 2900
[ 1231.820809][T23111] pwc: recv_control_msg error -71 req 02 val 2800
[ 1231.828048][T23111] pwc: recv_control_msg error -71 req 04 val 1100
[ 1231.835618][T23111] pwc: recv_control_msg error -71 req 04 val 1200
[ 1231.843597][T23111] pwc: Registered as video103.
[ 1231.850245][T23111] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input125
[ 1231.866791][T23111] usb 10-1: USB disconnect, device number 38
[ 1233.985308][T15540] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[ 1234.260612][T15540] usb 10-1: config 0 has an invalid interface number: 72 but max is 0
[ 1234.299247][T15540] usb 10-1: config 0 has no interface number 0
[ 1234.323027][T15540] usb 10-1: New USB device found, idVendor=ce9e, idProduct=d4fc, bcdDevice=7c.43
[ 1234.367465][ T5930] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1234.386343][T15540] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.428742][T15540] usb 10-1: Product: syz
[ 1234.562447][T15540] usb 10-1: Manufacturer: syz
[ 1234.574245][T15540] usb 10-1: SerialNumber: syz
[ 1234.599814][T15540] usb 10-1: config 0 descriptor??
[ 1234.617575][T15540] usb 10-1: bad CDC descriptors
[ 1234.625199][ T5930] usb 9-1: Using ep0 maxpacket: 8
[ 1234.641891][ T5930] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1234.665254][T15531] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1234.686389][ T5930] usb 9-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1234.729774][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.751416][ T5930] usb 9-1: Product: syz
[ 1234.766326][ T5930] usb 9-1: Manufacturer: syz
[ 1234.907163][ T5930] usb 9-1: SerialNumber: syz
[ 1234.959374][ T5930] usb 9-1: config 0 descriptor??
[ 1234.965236][T15531] usb 6-1: Using ep0 maxpacket: 8
[ 1234.973486][T15531] usb 6-1: config 0 has no interfaces?
[ 1234.985996][T15531] usb 6-1: config 0 has no interfaces?
[ 1234.993783][T15531] usb 6-1: config 0 has no interfaces?
[ 1235.009021][T15531] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1235.024353][T15531] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1235.045730][ T5930] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1235.064786][T15531] usb 6-1: Product: syz
[ 1235.083555][T15531] usb 6-1: Manufacturer: syz
[ 1235.187596][T15531] usb 6-1: SerialNumber: syz
[ 1235.306182][T15531] usb 6-1: config 0 descriptor??
[ 1235.393886][T26749] netlink: 'syz.1.5846': attribute type 12 has an invalid length.
[ 1235.482930][T23111] usb 10-1: USB disconnect, device number 39
[ 1236.204916][T15531] usb 6-1: USB disconnect, device number 74
[ 1236.696524][T15540] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[ 1237.648654][ T5930] gspca_zc3xx: i2c_w status error 2e
[ 1237.670770][T15540] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1237.681811][T15540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1237.692911][T15540] usb 2-1: Product: syz
[ 1237.701386][T15540] usb 2-1: Manufacturer: syz
[ 1237.855378][ T5930] gspca_zc3xx: reg_w_i err -71
[ 1237.880115][T15540] usb 2-1: SerialNumber: syz
[ 1238.216119][T26776] 
[ 1238.218484][T26776] =====================================================
[ 1238.225410][T26776] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1238.232871][T26776] syzkaller #0 Not tainted
[ 1238.237282][T26776] -----------------------------------------------------
[ 1238.244211][T26776] syz.5.5852/26776 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1238.251930][T26776] ffff88807bcf1468 (&tty->flow.lock){....}-{3:3}, at: stop_tty+0x2f/0x150
[ 1238.260487][T26776] 
[ 1238.260487][T26776] and this task is already holding:
[ 1238.267851][T26776] ffffffff8e7596f8 (kbd_event_lock){....}-{3:3}, at: kbd_event+0xd2/0x3f70
[ 1238.276571][T26776] which would create a new lock dependency:
[ 1238.282453][T26776]  (kbd_event_lock){....}-{3:3} -> (&tty->flow.lock){....}-{3:3}
[ 1238.290187][T26776] 
[ 1238.290187][T26776] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1238.299633][T26776]  (&dev->event_lock#2){..-.}-{3:3}
[ 1238.299674][T26776] 
[ 1238.299674][T26776] ... which became SOFTIRQ-irq-safe at:
[ 1238.312639][T26776]   lock_acquire+0x120/0x360
[ 1238.317221][T26776]   _raw_spin_lock_irqsave+0xa7/0xf0
[ 1238.322844][T26776]   input_event+0x76/0xe0
[ 1238.327176][T26776]   hidinput_report_event+0xa1/0x100
[ 1238.332474][T26776]   hid_report_raw_event+0x148b/0x16d0
[ 1238.337926][T26776]   hid_input_report+0x43e/0x520
[ 1238.342879][T26776]   hid_irq_in+0x47e/0x6d0
[ 1238.347313][T26776]   __usb_hcd_giveback_urb+0x376/0x540
[ 1238.352769][T26776]   dummy_timer+0x85f/0x44c0
[ 1238.356898][T15540] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1238.357356][T26776]   __hrtimer_run_queues+0x52c/0xc60
[ 1238.369595][T15540] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1238.374339][T26776]   hrtimer_run_softirq+0x187/0x2b0
[ 1238.374367][T26776]   handle_softirqs+0x286/0x870
[ 1238.395015][T26776]   __irq_exit_rcu+0xca/0x1f0
[ 1238.399702][T26776]   irq_exit_rcu+0x9/0x30
[ 1238.404039][T26776]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1238.409773][T26776]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1238.415842][T26776]   pv_native_safe_halt+0x13/0x20
[ 1238.420877][T26776]   default_idle+0x13/0x20
[ 1238.425298][T26776]   default_idle_call+0x73/0xb0
[ 1238.430148][T26776]   do_idle+0x1e7/0x510
[ 1238.434295][T26776]   cpu_startup_entry+0x44/0x60
[ 1238.439162][T26776]   start_secondary+0x101/0x110
[ 1238.443999][T26776]   common_startup_64+0x13e/0x147
[ 1238.449026][T26776] 
[ 1238.449026][T26776] to a SOFTIRQ-irq-unsafe lock:
[ 1238.456031][T26776]  (tasklist_lock){.+.+}-{3:3}
[ 1238.456061][T26776] 
[ 1238.456061][T26776] ... which became SOFTIRQ-irq-unsafe at:
[ 1238.468704][T26776] ...
[ 1238.468715][T26776]   lock_acquire+0x120/0x360
[ 1238.475870][T26776]   _raw_read_lock+0x36/0x50
[ 1238.480455][T26776]   __do_wait+0xde/0x740
[ 1238.484708][T26776]   do_wait+0x1f8/0x510
[ 1238.488863][T26776]   kernel_wait+0xab/0x170
[ 1238.493292][T26776]   call_usermodehelper_exec_work+0xbe/0x230
[ 1238.499265][T26776]   process_scheduled_works+0xae1/0x17b0
[ 1238.504885][T26776]   worker_thread+0x8a0/0xda0
[ 1238.509562][T26776]   kthread+0x711/0x8a0
[ 1238.513762][T26776]   ret_from_fork+0x4bc/0x870
[ 1238.515214][ T5930] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1238.518433][T26776]   ret_from_fork_asm+0x1a/0x30
[ 1238.518453][T26776] 
[ 1238.518453][T26776] other info that might help us debug this:
[ 1238.518453][T26776] 
[ 1238.518461][T26776] Chain exists of:
[ 1238.518461][T26776]   &dev->event_lock#2 --> kbd_event_lock --> tasklist_lock
[ 1238.518461][T26776] 
[ 1238.518499][T26776]  Possible interrupt unsafe locking scenario:
[ 1238.518499][T26776] 
[ 1238.524796][ T5930] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1238.529540][T26776]        CPU0                    CPU1
[ 1238.529548][T26776]        ----                    ----
[ 1238.529554][T26776]   lock(tasklist_lock);
[ 1238.529567][T26776]                                local_irq_disable();
[ 1238.529573][T26776]                                lock(&dev->event_lock#2);
[ 1238.529593][T26776]                                lock(kbd_event_lock
[ 1238.545325][ T5930] usb 9-1: USB disconnect, device number 41
[ 1238.552799][T26776] );
[ 1238.552808][T26776]   <Interrupt>
[ 1238.552814][T26776]     lock(&dev->event_lock#2);
[ 1238.552833][T26776] 
[ 1238.552833][T26776]  *** DEADLOCK ***
[ 1238.552833][T26776] 
[ 1238.552839][T26776] 5 locks held by syz.5.5852/26776:
[ 1238.552850][T26776]  #0: ffff8881473ef118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[ 1238.644396][T26776]  #1: ffff8880295df230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 1238.654778][T26776]  #2: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 1238.664456][T26776]  #3: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1238.674049][T26776]  #4: ffffffff8e7596f8 (kbd_event_lock){....}-{3:3}, at: kbd_event+0xd2/0x3f70
[ 1238.683217][T26776] 
[ 1238.683217][T26776] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1238.694142][T26776]  -> (&dev->event_lock#2){..-.}-{3:3} {
[ 1238.699812][T26776]     IN-SOFTIRQ-W at:
[ 1238.703866][T26776]                       lock_acquire+0x120/0x360
[ 1238.710181][T26776]                       _raw_spin_lock_irqsave+0xa7/0xf0
[ 1238.717212][T26776]                       input_event+0x76/0xe0
[ 1238.723290][T26776]                       hidinput_report_event+0xa1/0x100
[ 1238.730320][T26776]                       hid_report_raw_event+0x148b/0x16d0
[ 1238.737519][T26776]                       hid_input_report+0x43e/0x520
[ 1238.744182][T26776]                       hid_irq_in+0x47e/0x6d0
[ 1238.750356][T26776]                       __usb_hcd_giveback_urb+0x376/0x540
[ 1238.757536][T26776]                       dummy_timer+0x85f/0x44c0
[ 1238.763843][T26776]                       __hrtimer_run_queues+0x52c/0xc60
[ 1238.770860][T26776]                       hrtimer_run_softirq+0x187/0x2b0
[ 1238.777793][T26776]                       handle_softirqs+0x286/0x870
[ 1238.784381][T26776]                       __irq_exit_rcu+0xca/0x1f0
[ 1238.791148][T26776]                       irq_exit_rcu+0x9/0x30
[ 1238.797204][T26776]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1238.804661][T26776]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1238.812455][T26776]                       pv_native_safe_halt+0x13/0x20
[ 1238.819226][T26776]                       default_idle+0x13/0x20
[ 1238.825361][T26776]                       default_idle_call+0x73/0xb0
[ 1238.831928][T26776]                       do_idle+0x1e7/0x510
[ 1238.837819][T26776]                       cpu_startup_entry+0x44/0x60
[ 1238.844496][T26776]                       start_secondary+0x101/0x110
[ 1238.851107][T26776]                       common_startup_64+0x13e/0x147
[ 1238.857878][T26776]     INITIAL USE at:
[ 1238.861847][T26776]                      lock_acquire+0x120/0x360
[ 1238.868090][T26776]                      _raw_spin_lock_irqsave+0xa7/0xf0
[ 1238.875096][T26776]                      input_inject_event+0xa5/0x340
[ 1238.881835][T26776]                      kbd_led_trigger_activate+0xbc/0x100
[ 1238.889037][T26776]                      led_trigger_set+0x52d/0x950
[ 1238.895702][T26776]                      led_trigger_set_default+0x260/0x2a0
[ 1238.902887][T26776]                      led_classdev_register_ext+0x73d/0x930
[ 1238.910248][T26776]                      input_leds_connect+0x517/0x790
[ 1238.917087][T26776]                      input_register_device+0xd00/0x1140
[ 1238.924215][T26776]                      atkbd_connect+0x72e/0xa00
[ 1238.930529][T26776]                      serio_driver_probe+0x82/0xd0
[ 1238.937102][T26776]                      really_probe+0x26d/0x9e0
[ 1238.943330][T26776]                      __driver_probe_device+0x18c/0x2f0
[ 1238.950334][T26776]                      driver_probe_device+0x4f/0x430
[ 1238.957085][T26776]                      __driver_attach+0x452/0x700
[ 1238.963578][T26776]                      bus_for_each_dev+0x233/0x2b0
[ 1238.970147][T26776]                      serio_handle_event+0x1f9/0x8d0
[ 1238.976898][T26776]                      process_scheduled_works+0xae1/0x17b0
[ 1238.984177][T26776]                      worker_thread+0x8a0/0xda0
[ 1238.990492][T26776]                      kthread+0x711/0x8a0
[ 1238.996377][T26776]                      ret_from_fork+0x4bc/0x870
[ 1239.002686][T26776]                      ret_from_fork_asm+0x1a/0x30
[ 1239.009204][T26776]   }
[ 1239.011780][T26776]   ... key      at: [<ffffffff99b29060>] input_allocate_device.__key.5+0x0/0x20
[ 1239.020888][T26776] -> (kbd_event_lock){....}-{3:3} {
[ 1239.026101][T26776]    INITIAL USE at:
[ 1239.030002][T26776]                    lock_acquire+0x120/0x360
[ 1239.036060][T26776]                    _raw_spin_lock_irqsave+0xa7/0xf0
[ 1239.042827][T26776]                    vt_reset_unicode+0x2b/0x160
[ 1239.049170][T26776]                    reset_vc+0x68/0x1b0
[ 1239.054792][T26776]                    vc_init+0x70/0x4a0
[ 1239.060329][T26776]                    con_init+0x385/0x9c0
[ 1239.066049][T26776]                    console_init+0x10e/0x430
[ 1239.072104][T26776]                    start_kernel+0x254/0x410
[ 1239.078150][T26776]                    x86_64_start_reservations+0x24/0x30
[ 1239.085160][T26776]                    x86_64_start_kernel+0x143/0x1c0
[ 1239.091821][T26776]                    common_startup_64+0x13e/0x147
[ 1239.098307][T26776]  }
[ 1239.100788][T26776]  ... key      at: [<ffffffff8e7596f8>] kbd_event_lock+0x18/0xa0
[ 1239.108682][T26776]  ... acquired at:
[ 1239.112485][T26776]    lock_acquire+0x120/0x360
[ 1239.117150][T26776]    _raw_spin_lock+0x2e/0x40
[ 1239.121813][T26776]    kbd_event+0xd2/0x3f70
[ 1239.126217][T26776]    input_handle_events_default+0xd4/0x1a0
[ 1239.132099][T26776]    input_pass_values+0x288/0x890
[ 1239.137195][T26776]    input_event_dispose+0x3e5/0x6b0
[ 1239.142467][T26776]    input_inject_event+0x1dd/0x340
[ 1239.147650][T26776]    kd_sound_helper+0x19f/0x210
[ 1239.152572][T26776]    input_handler_for_each_handle+0x101/0x1c0
[ 1239.158712][T26776]    kd_mksound+0x96/0x130
[ 1239.163206][T26776]    do_con_write+0x3250/0x5210
[ 1239.168065][T26776]    con_write+0x24/0x40
[ 1239.172314][T26776]    n_tty_write+0xd27/0x1200
[ 1239.176982][T26776]    file_tty_write+0x559/0xa20
[ 1239.181835][T26776]    vfs_write+0x5c9/0xb30
[ 1239.186328][T26776]    ksys_write+0x145/0x250
[ 1239.190816][T26776]    __do_fast_syscall_32+0xb6/0x2b0
[ 1239.196101][T26776]    do_fast_syscall_32+0x34/0x80
[ 1239.201112][T26776]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1239.207602][T26776] 
[ 1239.209906][T26776] 
[ 1239.209906][T26776] the dependencies between the lock to be acquired
[ 1239.209915][T26776]  and SOFTIRQ-irq-unsafe lock:
[ 1239.223398][T26776]    -> (tasklist_lock){.+.+}-{3:3} {
[ 1239.228775][T26776]       HARDIRQ-ON-R at:
[ 1239.233002][T26776]                           lock_acquire+0x120/0x360
[ 1239.239664][T26776]                           _raw_read_lock+0x36/0x50
[ 1239.246334][T26776]                           __do_wait+0xde/0x740
[ 1239.252651][T26776]                           do_wait+0x1f8/0x510
[ 1239.258878][T26776]                           kernel_wait+0xab/0x170
[ 1239.265380][T26776]                           call_usermodehelper_exec_work+0xbe/0x230
[ 1239.273427][T26776]                           process_scheduled_works+0xae1/0x17b0
[ 1239.281162][T26776]                           worker_thread+0x8a0/0xda0
[ 1239.287909][T26776]                           kthread+0x711/0x8a0
[ 1239.294162][T26776]                           ret_from_fork+0x4bc/0x870
[ 1239.300907][T26776]                           ret_from_fork_asm+0x1a/0x30
[ 1239.307828][T26776]       SOFTIRQ-ON-R at:
[ 1239.312053][T26776]                           lock_acquire+0x120/0x360
[ 1239.318713][T26776]                           _raw_read_lock+0x36/0x50
[ 1239.325562][T26776]                           __do_wait+0xde/0x740
[ 1239.331879][T26776]                           do_wait+0x1f8/0x510
[ 1239.338108][T26776]                           kernel_wait+0xab/0x170
[ 1239.344593][T26776]                           call_usermodehelper_exec_work+0xbe/0x230
[ 1239.352639][T26776]                           process_scheduled_works+0xae1/0x17b0
[ 1239.360339][T26776]                           worker_thread+0x8a0/0xda0
[ 1239.367083][T26776]                           kthread+0x711/0x8a0
[ 1239.373395][T26776]                           ret_from_fork+0x4bc/0x870
[ 1239.380183][T26776]                           ret_from_fork_asm+0x1a/0x30
[ 1239.387123][T26776]       INITIAL USE at:
[ 1239.391266][T26776]                          lock_acquire+0x120/0x360
[ 1239.397835][T26776]                          _raw_write_lock_irq+0xa2/0xf0
[ 1239.404840][T26776]                          copy_process+0x224f/0x3c00
[ 1239.411668][T26776]                          kernel_clone+0x21e/0x840
[ 1239.418241][T26776]                          user_mode_thread+0xdd/0x140
[ 1239.425072][T26776]                          rest_init+0x23/0x300
[ 1239.431295][T26776]                          start_kernel+0x3ae/0x410
[ 1239.437866][T26776]                          x86_64_start_reservations+0x24/0x30
[ 1239.445491][T26776]                          x86_64_start_kernel+0x143/0x1c0
[ 1239.452677][T26776]                          common_startup_64+0x13e/0x147
[ 1239.459687][T26776]       INITIAL READ USE at:
[ 1239.464265][T26776]                               lock_acquire+0x120/0x360
[ 1239.471266][T26776]                               _raw_read_lock+0x36/0x50
[ 1239.478272][T26776]                               __do_wait+0xde/0x740
[ 1239.484933][T26776]                               do_wait+0x1f8/0x510
[ 1239.491507][T26776]                               kernel_wait+0xab/0x170
[ 1239.498342][T26776]                               call_usermodehelper_exec_work+0xbe/0x230
[ 1239.506736][T26776]                               process_scheduled_works+0xae1/0x17b0
[ 1239.514868][T26776]                               worker_thread+0x8a0/0xda0
[ 1239.521957][T26776]                               kthread+0x711/0x8a0
[ 1239.528530][T26776]                               ret_from_fork+0x4bc/0x870
[ 1239.535619][T26776]                               ret_from_fork_asm+0x1a/0x30
[ 1239.542879][T26776]     }
[ 1239.545626][T26776]     ... key      at: [<ffffffff8dc0c058>] tasklist_lock+0x18/0x40
[ 1239.553668][T26776]     ... acquired at:
[ 1239.557719][T26776]    lock_acquire+0x120/0x360
[ 1239.562392][T26776]    _raw_read_lock+0x36/0x50
[ 1239.567051][T26776]    send_sigurg+0x12b/0x420
[ 1239.571624][T26776]    sk_send_sigurg+0x6c/0x2e0
[ 1239.576371][T26776]    queue_oob+0x420/0x4f0
[ 1239.580771][T26776]    unix_stream_sendmsg+0xc3f/0xdf0
[ 1239.586048][T26776]    __sock_sendmsg+0x21c/0x270
[ 1239.590900][T26776]    ____sys_sendmsg+0x52d/0x830
[ 1239.595836][T26776]    ___sys_sendmsg+0x21f/0x2a0
[ 1239.600685][T26776]    __sys_sendmmsg+0x28e/0x430
[ 1239.605534][T26776]    __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 1239.611249][T26776]    __do_fast_syscall_32+0xb6/0x2b0
[ 1239.616543][T26776]    do_fast_syscall_32+0x34/0x80
[ 1239.621593][T26776]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1239.628086][T26776] 
[ 1239.630399][T26776]   -> (&f_owner->lock){....}-{3:3} {
[ 1239.635773][T26776]      INITIAL USE at:
[ 1239.639825][T26776]                        lock_acquire+0x120/0x360
[ 1239.646251][T26776]                        _raw_write_lock_irq+0xa2/0xf0
[ 1239.653104][T26776]                        __f_setown+0x67/0x370
[ 1239.659440][T26776]                        fcntl_dirnotify+0x3fa/0x6a0
[ 1239.666110][T26776]                        do_fcntl+0x6d0/0x1910
[ 1239.672263][T26776]                        do_compat_fcntl64+0x477/0x720
[ 1239.679110][T26776]                        __do_fast_syscall_32+0xb6/0x2b0
[ 1239.686118][T26776]                        do_fast_syscall_32+0x34/0x80
[ 1239.692867][T26776]                        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1239.701086][T26776]      INITIAL READ USE at:
[ 1239.705573][T26776]                             lock_acquire+0x120/0x360
[ 1239.712402][T26776]                             _raw_read_lock_irqsave+0xaf/0x100
[ 1239.720016][T26776]                             send_sigurg+0x55/0x420
[ 1239.726675][T26776]                             sk_send_sigurg+0x6c/0x2e0
[ 1239.733595][T26776]                             queue_oob+0x420/0x4f0
[ 1239.740174][T26776]                             unix_stream_sendmsg+0xc3f/0xdf0
[ 1239.747624][T26776]                             __sock_sendmsg+0x21c/0x270
[ 1239.754719][T26776]                             ____sys_sendmsg+0x52d/0x830
[ 1239.761811][T26776]                             ___sys_sendmsg+0x21f/0x2a0
[ 1239.768817][T26776]                             __sys_sendmmsg+0x28e/0x430
[ 1239.775821][T26776]                             __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 1239.783696][T26776]                             __do_fast_syscall_32+0xb6/0x2b0
[ 1239.791149][T26776]                             do_fast_syscall_32+0x34/0x80
[ 1239.798336][T26776]                             entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1239.806994][T26776]    }
[ 1239.809676][T26776]    ... key      at: [<ffffffff9980c880>] file_f_owner_allocate.__key+0x0/0x20
[ 1239.818684][T26776]    ... acquired at:
[ 1239.822641][T26776]    lock_acquire+0x120/0x360
[ 1239.827300][T26776]    _raw_read_lock_irqsave+0xaf/0x100
[ 1239.832747][T26776]    send_sigio+0x38/0x370
[ 1239.837149][T26776]    kill_fasync+0x24d/0x4d0
[ 1239.841724][T26776]    sock_wake_async+0x137/0x160
[ 1239.846649][T26776]    sock_def_readable+0x3bb/0x550
[ 1239.851836][T26776]    queue_oob+0x452/0x4f0
[ 1239.856235][T26776]    unix_stream_sendmsg+0xc3f/0xdf0
[ 1239.861513][T26776]    __sock_sendmsg+0x21c/0x270
[ 1239.866366][T26776]    ____sys_sendmsg+0x52d/0x830
[ 1239.871297][T26776]    ___sys_sendmsg+0x21f/0x2a0
[ 1239.876152][T26776]    __sys_sendmmsg+0x28e/0x430
[ 1239.880991][T26776]    __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 1239.886699][T26776]    __do_fast_syscall_32+0xb6/0x2b0
[ 1239.891978][T26776]    do_fast_syscall_32+0x34/0x80
[ 1239.896995][T26776]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1239.903481][T26776] 
[ 1239.905788][T26776]  -> (&new->fa_lock){...-}-{3:3} {
[ 1239.910988][T26776]     IN-SOFTIRQ-R at:
[ 1239.915037][T26776]                       lock_acquire+0x120/0x360
[ 1239.921432][T26776]                       _raw_read_lock_irqsave+0xaf/0x100
[ 1239.928533][T26776]                       kill_fasync+0x199/0x4d0
[ 1239.934852][T26776]                       sock_wake_async+0x137/0x160
[ 1239.941429][T26776]                       sock_def_readable+0x3bb/0x550
[ 1239.948184][T26776]                       tcp_data_queue+0x201e/0x64a0
[ 1239.954844][T26776]                       tcp_rcv_established+0x1335/0x2670
[ 1239.961939][T26776]                       tcp_v4_do_rcv+0xa90/0x1430
[ 1239.968423][T26776]                       tcp_v4_rcv+0x2675/0x2f20
[ 1239.974731][T26776]                       ip_protocol_deliver_rcu+0x221/0x440
[ 1239.981999][T26776]                       ip_local_deliver_finish+0x3bb/0x6f0
[ 1239.989263][T26776]                       NF_HOOK+0x30c/0x3a0
[ 1239.995151][T26776]                       NF_HOOK+0x30c/0x3a0
[ 1240.001064][T26776]                       __netif_receive_skb+0x143/0x380
[ 1240.007983][T26776]                       process_backlog+0x60e/0x14f0
[ 1240.014644][T26776]                       __napi_poll+0xc7/0x360
[ 1240.020784][T26776]                       net_rx_action+0x5f7/0xdf0
[ 1240.027188][T26776]                       handle_softirqs+0x286/0x870
[ 1240.033759][T26776]                       run_ksoftirqd+0x9b/0x100
[ 1240.040069][T26776]                       smpboot_thread_fn+0x542/0xa60
[ 1240.046814][T26776]                       kthread+0x711/0x8a0
[ 1240.052690][T26776]                       ret_from_fork+0x4bc/0x870
[ 1240.059091][T26776]                       ret_from_fork_asm+0x1a/0x30
[ 1240.065677][T26776]     INITIAL USE at:
[ 1240.069653][T26776]                      lock_acquire+0x120/0x360
[ 1240.075885][T26776]                      _raw_write_lock_irq+0xa2/0xf0
[ 1240.082566][T26776]                      fasync_remove_entry+0xf1/0x1c0
[ 1240.089314][T26776]                      sock_fasync+0x85/0xf0
[ 1240.095285][T26776]                      __fput+0x8a2/0xa70
[ 1240.100989][T26776]                      task_work_run+0x1d4/0x260
[ 1240.107304][T26776]                      exit_to_user_mode_loop+0xe9/0x130
[ 1240.114319][T26776]                      __do_fast_syscall_32+0x1f4/0x2b0
[ 1240.121244][T26776]                      do_fast_syscall_32+0x34/0x80
[ 1240.127821][T26776]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1240.135885][T26776]     INITIAL READ USE at:
[ 1240.140301][T26776]                           lock_acquire+0x120/0x360
[ 1240.146961][T26776]                           _raw_read_lock_irqsave+0xaf/0x100
[ 1240.154665][T26776]                           kill_fasync+0x199/0x4d0
[ 1240.161246][T26776]                           sock_wake_async+0x137/0x160
[ 1240.168166][T26776]                           af_alg_wmem_wakeup+0x3c0/0x440
[ 1240.175350][T26776]                           skcipher_recvmsg+0x115c/0x11d0
[ 1240.182542][T26776]                           sock_recvmsg+0x22c/0x270
[ 1240.189201][T26776]                           ____sys_recvmsg+0x1c9/0x460
[ 1240.196124][T26776]                           ___sys_recvmsg+0x1b5/0x510
[ 1240.202956][T26776]                           __sys_recvmsg+0x161/0x220
[ 1240.209699][T26776]                           __do_fast_syscall_32+0xb6/0x2b0
[ 1240.216978][T26776]                           do_fast_syscall_32+0x34/0x80
[ 1240.223985][T26776]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1240.232466][T26776]   }
[ 1240.235054][T26776]   ... key      at: [<ffffffff9980c8a0>] fasync_insert_entry.__key+0x0/0x20
[ 1240.243810][T26776]   ... acquired at:
[ 1240.247770][T26776]    lock_acquire+0x120/0x360
[ 1240.252430][T26776]    _raw_read_lock_irqsave+0xaf/0x100
[ 1240.257913][T26776]    kill_fasync+0x199/0x4d0
[ 1240.262489][T26776]    __start_tty+0x18c/0x220
[ 1240.267069][T26776]    start_tty+0x2b/0x70
[ 1240.271310][T26776]    n_tty_set_termios+0xa7c/0x1090
[ 1240.276496][T26776]    tty_set_termios+0xda4/0x17e0
[ 1240.281588][T26776]    set_termios+0x516/0x6c0
[ 1240.286166][T26776]    tty_mode_ioctl+0x47e/0x740
[ 1240.291006][T26776]    tty_ioctl+0x9c6/0xde0
[ 1240.295406][T26776]    __ia32_compat_sys_ioctl+0x543/0x840
[ 1240.301036][T26776]    __do_fast_syscall_32+0xb6/0x2b0
[ 1240.306313][T26776]    do_fast_syscall_32+0x34/0x80
[ 1240.311325][T26776]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1240.317806][T26776] 
[ 1240.320110][T26776] -> (&tty->flow.lock){....}-{3:3} {
[ 1240.325399][T26776]    INITIAL USE at:
[ 1240.329276][T26776]                    lock_acquire+0x120/0x360
[ 1240.335326][T26776]                    _raw_spin_lock_irqsave+0xa7/0xf0
[ 1240.342073][T26776]                    start_tty+0x20/0x70
[ 1240.347691][T26776]                    n_tty_set_termios+0xa7c/0x1090
[ 1240.354260][T26776]                    tty_set_termios+0xda4/0x17e0
[ 1240.360662][T26776]                    set_termios+0x516/0x6c0
[ 1240.366632][T26776]                    tty_mode_ioctl+0x47e/0x740
[ 1240.372873][T26776]                    tty_ioctl+0x9c6/0xde0
[ 1240.378690][T26776]                    __se_sys_ioctl+0xfc/0x170
[ 1240.384925][T26776]                    do_syscall_64+0xfa/0xfa0
[ 1240.390976][T26776]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1240.398413][T26776]  }
[ 1240.400896][T26776]  ... key      at: [<ffffffff99ae9c40>] alloc_tty_struct.__key.35+0x0/0x20
[ 1240.409562][T26776]  ... acquired at:
[ 1240.413345][T26776]    lock_acquire+0x120/0x360
[ 1240.418007][T26776]    _raw_spin_lock_irqsave+0xa7/0xf0
[ 1240.423364][T26776]    stop_tty+0x2f/0x150
[ 1240.427587][T26776]    kbd_event+0x2b72/0x3f70
[ 1240.432170][T26776]    input_handle_events_default+0xd4/0x1a0
[ 1240.438048][T26776]    input_pass_values+0x288/0x890
[ 1240.443145][T26776]    input_event_dispose+0x330/0x6b0
[ 1240.448424][T26776]    input_inject_event+0x1dd/0x340
[ 1240.453606][T26776]    evdev_write+0x2fc/0x480
[ 1240.458175][T26776]    vfs_write+0x27e/0xb30
[ 1240.462665][T26776]    ksys_write+0x145/0x250
[ 1240.467155][T26776]    __do_fast_syscall_32+0xb6/0x2b0
[ 1240.472454][T26776]    do_fast_syscall_32+0x34/0x80
[ 1240.477464][T26776]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1240.483948][T26776] 
[ 1240.486252][T26776] 
[ 1240.486252][T26776] stack backtrace:
[ 1240.492134][T26776] CPU: 1 UID: 0 PID: 26776 Comm: syz.5.5852 Not tainted syzkaller #0 PREEMPT(full) 
[ 1240.492152][T26776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1240.492162][T26776] Call Trace:
[ 1240.492169][T26776]  <TASK>
[ 1240.492175][T26776]  dump_stack_lvl+0x189/0x250
[ 1240.492201][T26776]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1240.492217][T26776]  ? __pfx__printk+0x10/0x10
[ 1240.492235][T26776]  validate_chain+0x1f05/0x2140
[ 1240.492257][T26776]  __lock_acquire+0xab9/0xd20
[ 1240.492272][T26776]  ? stop_tty+0x2f/0x150
[ 1240.492287][T26776]  lock_acquire+0x120/0x360
[ 1240.492299][T26776]  ? stop_tty+0x2f/0x150
[ 1240.492314][T26776]  ? __lock_acquire+0xab9/0xd20
[ 1240.492333][T26776]  _raw_spin_lock_irqsave+0xa7/0xf0
[ 1240.492350][T26776]  ? stop_tty+0x2f/0x150
[ 1240.492364][T26776]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[ 1240.492382][T26776]  ? atomic_notifier_call_chain+0x26/0x180
[ 1240.492399][T26776]  stop_tty+0x2f/0x150
[ 1240.492415][T26776]  kbd_event+0x2b72/0x3f70
[ 1240.492436][T26776]  ? __pfx_kbd_event+0x10/0x10
[ 1240.492453][T26776]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1240.492475][T26776]  ? finish_task_switch+0x266/0x950
[ 1240.492495][T26776]  ? __lock_acquire+0xab9/0xd20
[ 1240.492510][T26776]  ? do_raw_spin_lock+0x121/0x290
[ 1240.492529][T26776]  ? do_raw_spin_unlock+0x122/0x240
[ 1240.492548][T26776]  ? __lock_acquire+0xab9/0xd20
[ 1240.492562][T26776]  ? input_pass_values+0x8d/0x890
[ 1240.492577][T26776]  ? input_pass_values+0x8d/0x890
[ 1240.492599][T26776]  input_handle_events_default+0xd4/0x1a0
[ 1240.492620][T26776]  ? input_pass_values+0x8d/0x890
[ 1240.492634][T26776]  input_pass_values+0x288/0x890
[ 1240.492650][T26776]  ? input_handle_event+0x70c/0xf30
[ 1240.492670][T26776]  input_event_dispose+0x330/0x6b0
[ 1240.492690][T26776]  input_inject_event+0x1dd/0x340
[ 1240.492708][T26776]  ? input_inject_event+0xb6/0x340
[ 1240.492727][T26776]  evdev_write+0x2fc/0x480
[ 1240.492748][T26776]  ? __pfx_evdev_write+0x10/0x10
[ 1240.492764][T26776]  ? bpf_lsm_file_permission+0x9/0x20
[ 1240.492779][T26776]  ? security_file_permission+0x75/0x290
[ 1240.492795][T26776]  ? rw_verify_area+0x255/0x4d0
[ 1240.492812][T26776]  ? __lock_acquire+0xab9/0xd20
[ 1240.492824][T26776]  ? __pfx_evdev_write+0x10/0x10
[ 1240.492839][T26776]  vfs_write+0x27e/0xb30
[ 1240.492859][T26776]  ? __pfx_vfs_write+0x10/0x10
[ 1240.492880][T26776]  ? __fget_files+0x2a/0x420
[ 1240.492894][T26776]  ? __fget_files+0x2a/0x420
[ 1240.492913][T26776]  ? __fget_files+0x3a0/0x420
[ 1240.492925][T26776]  ? __fget_files+0x2a/0x420
[ 1240.492939][T26776]  ksys_write+0x145/0x250
[ 1240.492957][T26776]  ? __pfx_ksys_write+0x10/0x10
[ 1240.492974][T26776]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[ 1240.492993][T26776]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1240.493016][T26776]  __do_fast_syscall_32+0xb6/0x2b0
[ 1240.493035][T26776]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1240.493053][T26776]  do_fast_syscall_32+0x34/0x80
[ 1240.493071][T26776]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1240.493088][T26776] RIP: 0023:0xf7f05539
[ 1240.493101][T26776] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1240.493114][T26776] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1240.493130][T26776] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040
[ 1240.493143][T26776] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000
[ 1240.493153][T26776] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1240.493162][T26776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1240.493171][T26776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1240.493184][T26776]  </TASK>
[ 1240.493239][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1240.856251][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1240.904026][T15540] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[ 1240.916288][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1240.925200][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1241.004007][T15540] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1241.089541][T15540] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1241.123450][T15540] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1241.144521][T15540] usb 2-1: USB disconnect, device number 80