last executing test programs:

16m45.374646577s ago: executing program 2 (id=4186):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4048084)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="440000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="03000000000000001c0012800900010069706970000000000c00028008000200ac14141e08001f000600"], 0x44}, 0x1, 0x0, 0x0, 0x44801}, 0x8880)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r2 = getpgid(0x0)
r3 = syz_pidfd_open(r2, 0x0)
r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0)
r5 = pidfd_getfd(r3, r4, 0x0)
readlinkat(r5, &(0x7f0000000100)='\x00', &(0x7f0000000140)=""/189, 0xbd)
unshare(0x480)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x94627de606642a33)
readv(r6, 0x0, 0x0)
r7 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0</\x00\x8eO4._\x14zC\x8a\xe8\xe0u\xe0\xff\xf1\xb2\xfd\xf6nz\x05-]\xc2Vk\xaeky\xd3\x83\xe2\xc7\xd3\xe6M^\x98ox\x14\t\xe9Q1\x1dK\x9a\x045\xd37\xb22\xfdD(\xd2\xdd\xa0\xff\x0f\x00\x00\x00\x00\x00\x00v\n\xd8?]k\x14N\x18\xf4\xc2j\xed6g\xfd\xd2\xd4\xe3\x1f\xa6 \xa0\x8d\xb5\x9aE<2`]<\x8cR\xd69\x0fO\xbf\xc3\xbd\xb0\x96\x90\x91k\x86\x1a\x10\xd2\xf5\x8b\xfc\xf4\xd0[\x12\xf5+\x1aS\x02/Yx\xf2jJb\x97\x9c/\x1f5i\xc6\x861\x9a\xff\xc3\xe7\xbfU\xd5\xac\xccB=\x8f\xfd\x84\xeepQ\x93nn\x0f\xc6\xa9?\xad\x8b~\x96@i=G\x9ft\x1d\xcc\xc6Ys7\x7f\x8ehv\xd3$\x13s\xa0\xbfi\xfaFS\xa9=Xe\xf8tI\x15\x882\x8b\x8e-X\xb8\xf2\x9du\x15S^\xec\xce\xfaf$S\x9f\xe7Ed\n\x84\\ u\xd2\x16\xc1\xa5\xa0\xaa\xe8.i\xc8\x0e\vt\xe2\xf1lA\x93\xdd\xce\x8f$\x06v\xbe\xe7\x95nN\xc5\xaa\x1ev\xc6P\x9c\\G&y\x8bYA\xc3}\xd9\x86[\xb2\xf3\x0f\x90%\xcb\x81\xe8\xea\xbcs\x95\xe9\x8eXH\x19m\xdfOY\xf1E9-\xc8\xe7\x13^+(\x034\x82\xafiOO\x14\x8f^\x8c', 0x7)
ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x10001})
r8 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r8, &(0x7f0000000300)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @multicast2}}}], 0xa}}], 0x1, 0x4040880)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'nr0\x00'})
r9 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x840)
ioctl$VIDIOC_QUERY_EXT_CTRL(r9, 0xc0e85667, &(0x7f0000000200)={0x0, 0x2, "c78afaea3096d9061a00", 0xfffd, 0x10001, 0x400000001000000, 0x16f, 0x1000, 0xc, 0x0, 0xfffff000, [0x3, 0x0, 0x8, 0x3]})
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x94, r10, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x2000c000}, 0x40011)

16m45.18215167s ago: executing program 2 (id=4188):
r0 = socket$inet(0x2, 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x10})
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10)

16m44.943038873s ago: executing program 2 (id=4190):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000001200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

16m44.062986248s ago: executing program 2 (id=4192):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000100), 0x1014b, 0x12002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)={0x2c, r3, 0x1, 0x1, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}]}, 0x2c}}, 0x8000)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, 0x0, &(0x7f0000000200))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000980)={0x8001, 0x3, 0x9, 0x7, 0x6e64})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f000001fc40)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000008000100", @ANYRES16], 0x1c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_GET(r9, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

16m42.965743948s ago: executing program 2 (id=4194):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8937, &(0x7f0000000000)={'dummy0\x00', @random="0100002010ff"})

16m42.847086612s ago: executing program 2 (id=4195):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x2008040)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x340}, &(0x7f0000000dc0)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)

16m27.589547398s ago: executing program 32 (id=4195):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200))
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x0, 0x2008040)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x340}, &(0x7f0000000dc0)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r6, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f00000001c0))
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1)

10m13.881530947s ago: executing program 0 (id=5942):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000540), 0x4)
sendmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x804)
sendmsg$inet(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000040)='P', 0xfe1b}], 0x1}, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$read(0xb, 0x0, &(0x7f0000000240)=""/112, 0x349b7f55)
r5 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, 0x0, 0x0)
sendmmsg(r6, &(0x7f0000001c00), 0x400000000000159, 0x40840)

10m13.382883808s ago: executing program 0 (id=5946):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x7d95, &(0x7f0000000540)={0x0, 0xe472, 0x2, 0x0, 0x25a}, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x840000000002, 0x3, 0xfa)
getsockname$inet(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000004c0)={'nat\x00', 0x0, [0x900, 0xffffffff, 0x7, 0x342, 0x1]}, &(0x7f00000001c0)=0x54)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d0070b6000008001b0000000000dc9dd76b7e29f47af67572e1e8f9d646b48935afc2ede9d6efaec5b14b9a58be8149177953526133ca37b8819835"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000100500000000000000dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300040008001b000000000008000d0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1})
unshare(0x2000000)
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4})
openat$random(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c000180"], 0x94}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)

10m10.162096056s ago: executing program 0 (id=5954):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYBLOB="0000000000000000b702000014000000b70200000000000085"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000000000000004000", "f4bd000000801900", [0x0, 0x2000000000001]}})

10m9.952495551s ago: executing program 0 (id=5957):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@can, {&(0x7f00000003c0)=""/79, 0x52}, &(0x7f00000000c0), 0x59}, 0x17)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00')
pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00')
r6 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000280)={0xa, 0x1, 0x7, {0x8000, 0x1000, 0x4, 0x8}})
syz_emit_ethernet(0x1fc, &(0x7f0000001600)=ANY=[], 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x2, @vbi={0x4, 0x5, 0x5, 0x47504a4d, [0x200, 0x7], [0x4f, 0x6], 0x1}})
r7 = gettid()
timer_create(0x1, &(0x7f0000000800)={0x0, 0x8, 0x4, @tid=r7}, &(0x7f0000000000))
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r7, 0x1, 0x5004)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

10m8.295015945s ago: executing program 0 (id=5963):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
listen(r1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0) (async)
listen(r2, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc}) (async)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r4=>0x0})
syz_emit_ethernet(0x3b, &(0x7f0000000080)={@local, @broadcast, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@generic={0x11, "d7d173b6e5eadfedb2bbba3655dda7524827596c77b270244e56237f1d98bf67b64492144ce04ad00c"}}}, &(0x7f0000000100)={0x1, 0x1, [0x5a2, 0x5da, 0xcbc, 0x902]})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r4, r5, <r6=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)})
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000000040)={0x10, 0x0, r6})

10m6.972833742s ago: executing program 0 (id=5971):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000000000000000000000010000000000000", @ANYRES32, @ANYBLOB="000000040000000000", @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r0], 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
cachestat(r1, &(0x7f00000000c0)={0x9, 0x8}, &(0x7f0000000140), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x178, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_ACT={0xc0, 0x1, [@m_connmark={0xbc, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x21}}}]}, {0x6d, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x6, 0x9, 0x6, 0x6}, {0x2, 0x8, 0x6, 0x5}, {0x6, 0x5, 0x7, 0xc4}, {0xfffe, 0x76, 0x9, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x3, 0x4, 0xff, 0x5}, {0x8, 0x0, 0x7, 0x7eb8}, {0x4, 0x37, 0x7, 0x45f}, {0x9fb5, 0xff, 0x5, 0x10001}, {0x9, 0x9, 0xcb, 0xfffffffc}, {0xfffc, 0xb, 0xd, 0xa}]}}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000001c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000000540)={0x77359400})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x3, 0xfffff281, 0x10001, 0x6}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x44}}, 0x20004055)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r5, 0x1})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x3, 0xffff1000, 0x8, r5, 0x5})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003})
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000380)='bond0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

10m6.309670645s ago: executing program 33 (id=5971):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000000000000000000000010000000000000", @ANYRES32, @ANYBLOB="000000040000000000", @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r0], 0x50)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
cachestat(r1, &(0x7f00000000c0)={0x9, 0x8}, &(0x7f0000000140), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)=@delchain={0x178, 0x65, 0x2, 0x70bd27, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x6}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_ACT={0xc0, 0x1, [@m_connmark={0xbc, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x21}}}]}, {0x6d, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd166133b7f5ce1aede8154721"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x6, 0x9, 0x6, 0x6}, {0x2, 0x8, 0x6, 0x5}, {0x6, 0x5, 0x7, 0xc4}, {0xfffe, 0x76, 0x9, 0x8}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x3, 0x4, 0xff, 0x5}, {0x8, 0x0, 0x7, 0x7eb8}, {0x4, 0x37, 0x7, 0x45f}, {0x9fb5, 0xff, 0x5, 0x10001}, {0x9, 0x9, 0xcb, 0xfffffffc}, {0xfffc, 0xb, 0xd, 0xa}]}}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r2 = socket(0x10, 0x803, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000001c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f0000000580)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000000540)={0x77359400})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x6, 0x3, 0xfffff281, 0x10001, 0x6}, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x44}}, 0x20004055)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r5, 0x1})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x3, 0xffff1000, 0x8, r5, 0x5})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x0, 0x7, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, "488dc807"}, 0x1004, 0x2, {0x0}, 0x10000003})
ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000380)='bond0\x00')
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

9.111250946s ago: executing program 5 (id=8476):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000004c0)=[{0x800000000}, {0x0, 0x0, 0x800}], 0x2, 0xbff, 0x1e, 0x0, 0xc, 0x6e})
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f00000001c0)={{0x81b7000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0x4, 0xd4, 0x0, 0x6, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x2, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0xfd, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x0, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x5, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6a, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xeeef0000, 0x8000000, 0xd, 0x5, 0x28, 0x7, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0x8000000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000003208"])
r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x10000)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_ECHOREQ(r7, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r8, 0x800, 0x70bd28, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x46090)

8.600442872s ago: executing program 5 (id=8479):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x8000)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) (async)
r2 = syz_open_dev$sg(&(0x7f0000000280), 0x5dc, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000005c0)={0x0, 0xf, 0x5c}) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0xc2, 0x54, 0x8, 0x112a, 0x5, 0xbe68, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1f, 0x0, 0x0, 0x97, 0xde, 0xbe}}]}}]}}, 0x0)

7.72376077s ago: executing program 3 (id=8482):
r0 = socket(0x8, 0x1, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x1000)
vmsplice(r2, 0x0, 0x0, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000)
socketpair(0x28, 0x3, 0x28, &(0x7f0000000000))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r5 = accept$inet(r1, &(0x7f0000000140)={0x2, 0x0, @private}, &(0x7f00000001c0)=0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000040)=[{0xfc01, 0x8, 0x7, 0xd7e}, {0x7, 0x0, 0xb, 0x7}, {0x1, 0x2, 0x9, 0x7fff}, {0x4, 0x3, 0x3, 0x6f}]}, 0x10)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec80fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xcc000007, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0)
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xa13ca8e5839881a4, 0x4})
sendmmsg$inet6(r6, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7.492419513s ago: executing program 6 (id=8483):
syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x1, 0x78, 0x6d, 0x3d, 0x40, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x4, 0x2}}]}}, {{0x9, 0x4, 0xe2, 0x0, 0x2, 0xb2, 0x26, 0x18, 0xbb, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x7c, 0x9e, 0x9, [@generic={0x7, 0x5, "85e371932d"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x0, 0x9, 0x73, 0x3}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x459}}, {0xfc, &(0x7f0000000100)=@string={0xfc, 0x3, "19b737c1904efc679b8ac31ff52fb7eed27cf9da07a7853619c9d8b15e18c908e368e61dcea4d342c0f9c4d6be12cf34ce8c740ac56b21d15c5a700399e49cf659a04be046fb52b0e7d23465678108f2933c39f0cdd1c99ea4bd03a68ac04a4617fdf693722d2e2c129f6d1a31f3138a4aaf1805b51bd1d2d168e3f9e3ef61cd803d734ef3549d1e4acd6023e212a6cbbde0e6c112cd70808d28aee73724b7da171b4d29afe0afced9e2d808b0b7fa8d3abe5bf2d8c659a0b46e1d20d450842187ceaf8a2194a088804bf5e74de348abac5be0c0a1e8f899856ffa6868d32a833e88d45147367852cee6bce1df16852c2736bc0f174ec065e27a"}}, {0x5b, &(0x7f0000000200)=@string={0x5b, 0x3, "46bb3d6b1a8ed49868f51b14c99ae2a7728c22295ed8d23b56a20f901d551605ba53c39bab2e0d8c4add5fea40e1413e51c65ae73559cfafa4e786bde7ba2583c88517f805cf8ebf3dc5f6b5910094136c473c0d8dafc6b1b4"}}, {0xc3, &(0x7f0000000280)=@string={0xc3, 0x3, "122f403c409427b18c6d40adc7f7cf4b2df7f8b1317c0b859e98c5cbc8faab1758047a2988fa34b873ded69bf4d6931583a33b8cbaf22eea28f1bf6ae7fab0f8a3fdcb5df706baba00c29af41012a03468e5c42acd3c6c8ceb1d0eb71f47ca845e218ad646fef52f50c55b6f7f96e5a9d9c7a23cf5d6487c4fc4ac98741cd83ea97391119b52694d6b14b94b5e4f8667e3306766ff3a878bd1a8834163f9714b35422d4942f4c3b7af2b9d0974a27d7635102fb75c9970689b1a0f330c5fc44809"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x402}}, {0x60, &(0x7f0000000380)=@string={0x60, 0x3, "a0b7d19dea49f9d3b3c5651f90cf830c57935a5eb8b15bec612260ad1f7a9a43ec37d9bbc40a6e59824675201fc318acca2712b5254a2d247ffd9ddcac2e4c3e5bf0fd64010001bd351b9ccf37c38709857855e71436db61984e4ab058e1"}}]})
syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x1, 0x78, 0x6d, 0x3d, 0x40, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x4, 0x2}}]}}, {{0x9, 0x4, 0xe2, 0x0, 0x2, 0xb2, 0x26, 0x18, 0xbb, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x7c, 0x9e, 0x9, [@generic={0x7, 0x5, "85e371932d"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x0, 0x9, 0x73, 0x3}}]}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x459}}, {0xfc, &(0x7f0000000100)=@string={0xfc, 0x3, "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"}}, {0x5b, &(0x7f0000000200)=@string={0x5b, 0x3, "46bb3d6b1a8ed49868f51b14c99ae2a7728c22295ed8d23b56a20f901d551605ba53c39bab2e0d8c4add5fea40e1413e51c65ae73559cfafa4e786bde7ba2583c88517f805cf8ebf3dc5f6b5910094136c473c0d8dafc6b1b4"}}, {0xc3, &(0x7f0000000280)=@string={0xc3, 0x3, "122f403c409427b18c6d40adc7f7cf4b2df7f8b1317c0b859e98c5cbc8faab1758047a2988fa34b873ded69bf4d6931583a33b8cbaf22eea28f1bf6ae7fab0f8a3fdcb5df706baba00c29af41012a03468e5c42acd3c6c8ceb1d0eb71f47ca845e218ad646fef52f50c55b6f7f96e5a9d9c7a23cf5d6487c4fc4ac98741cd83ea97391119b52694d6b14b94b5e4f8667e3306766ff3a878bd1a8834163f9714b35422d4942f4c3b7af2b9d0974a27d7635102fb75c9970689b1a0f330c5fc44809"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x402}}, {0x60, &(0x7f0000000380)=@string={0x60, 0x3, "a0b7d19dea49f9d3b3c5651f90cf830c57935a5eb8b15bec612260ad1f7a9a43ec37d9bbc40a6e59824675201fc318acca2712b5254a2d247ffd9ddcac2e4c3e5bf0fd64010001bd351b9ccf37c38709857855e71436db61984e4ab058e1"}}]}) (async)

7.118195831s ago: executing program 1 (id=8486):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x206}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0xe4}]}}}]}, 0x40}, 0x1, 0xd, 0x0, 0x4000000}, 0x44050)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r2=>0x0})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)=@newneigh={0x94, 0x1c, 0x800, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x0, r5, 0x0, 0xc0, 0x3}, [@NDA_CACHEINFO={0x14, 0x3, {0x2, 0xe5, 0x4, 0x3}}, @NDA_VNI={0x8, 0x7, 0x9}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8}, @NDA_VNI={0x8, 0x7, 0xd}, @NDA_CACHEINFO={0x14, 0x3, {0x6, 0x9, 0x0, 0x9}}, @NDA_NH_ID={0x8, 0xd, 0xffffffff}, @NDA_FDB_EXT_ATTRS={0x14, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @NDA_VNI={0x8, 0x7, 0x80000001}]}, 0x94}}, 0x4000000)
syz_usb_connect(0x6, 0xaf3, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x60, 0x8a, 0x65, 0x40, 0x6a5, 0x0, 0x6a1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae1, 0x3, 0x80, 0xb2, 0x80, 0x0, [{{0x9, 0x4, 0x83, 0x8, 0x3, 0xc8, 0x62, 0x57, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "ceec"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xac, 0x9, 0x0, 0x7}, {0x6, 0x24, 0x1a, 0x10, 0x1a}, [@network_terminal={0x7, 0x24, 0xa, 0x6, 0x0, 0x7, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x81, 0x6a9, 0x5, 0x1, 0xfff, 0x7}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x800, 0x5, 0x2, 0x40, 0x8}, @mdlm_detail={0x32, 0x24, 0x13, 0x8, "0070f9ebab1f2bbefc84e815f99fad38ca47d138b9217fdde627dbe1c04aebaa97d7e6ac0a7b744b3e60438a99e7"}, @obex={0x5, 0x24, 0x15, 0xe2e6}]}], [{{0x9, 0x5, 0xd, 0x0, 0x20, 0xf8, 0xf, 0x7}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x5, 0x62, 0x1}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x1f, 0x9, 0x7, [@generic={0x23, 0x9, "ebed39e31199dcd9699e34f7d8860bdac3d7e88eb62943d91395bb08866402e86f"}]}}]}}, {{0x9, 0x4, 0x18, 0x9, 0xe, 0x3c, 0x5d, 0x37, 0x5e, [@hid_hid={0x9, 0x21, 0x8, 0xf, 0x1, {0x22, 0xf89}}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "97"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x800, 0xff, 0x6, 0x4}, [@obex={0x5, 0x24, 0x15, 0x8}, @acm={0x4, 0x24, 0x2, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x51}, @mbim_extended={0x8, 0x24, 0x1c, 0x0, 0xd, 0xfffb}, @network_terminal={0x7, 0x24, 0xa, 0x54, 0xd, 0x4, 0x5}]}], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0xe, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf1, 0x101}, @generic={0x7f, 0x9, "79634589e953624c26baa290256a5c1191d19525cb74337744eeb50ba5eb9903e04222b891c870bb77d09296528f274e69205745f6525063739b204c790632f2837b6ed6d3eface15865d1d46f76ac74bdc2786969b758322cb8d6fe03a5d69aa31da916bd01e435686d9a79cbcb0dab6c977c74340ad6f7c86990c706"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x80, 0x9, 0x0, [@generic={0x75, 0x24, "b1dda3f11e8b0bf4371e5102f73997e1df1f99b6bdb2b300a9cf20c32f887aade5a16c11d1367033015c9c046b8d0ee631862d1bc076b9ae5629b32878fa6cd457671803d0e52b82532ca3ca894bafd46e356b59a23bef48297062109d99d15b7cfcd8f79009a3686eb9a0a294855c03fd2c00"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x1, 0x0, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x8}, @generic={0x8e, 0x1f, "3248b7b732c8cfb458d6c34f5875d68f747602cc4d4170a4205ddd5988b2aedda68745011aa82ce25d02a32d67b094974e85e4b56fa009755eabb793e3059d83d4ffabaa5f293c592cc46a86083f0e07fd48e2977e3d13a4707ade657df1a965add164067403e488dc0ffeacb21ac0f5502923ef3ef39a1ab1b2cb9b5894ebab7b91429ad7f867836aa68ded"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x400, 0x5, 0x4, 0x3, [@generic={0x44, 0x23, "a994bb3c81f430b4740f0d5ba8ed2e25c19c6f4c0ee7641ef72073e8f1fc052cc4260287153d485b5da3fff28d55b0ea9d4ea840fb1290b0e186c1ec5183edefa49c"}, @generic={0x6e, 0xe, "06ddd3e8a6edcda83784c9ea9704f96594e6fdc45a53a603dddc82a6fc46f9478bcef5440fd970b699ba5e16b22b1bf0ef74ab17dafc46c6df8bf86cf98f55f823efa76ee3861ac9f4bb885f4ceacdc47d8c035ab112419778151417826e86e59a688aad16a9ab1bf1f95480"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0x12, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x7a, 0x5}, @generic={0xe3, 0x2, "40c1c919f1197dfaa97a60e8604464b8dc2d60830864b4bf2228f2f916577a5da892c56725a71169f8ac59bb33a8cef67929a8dad8a6769c9b1975ff99997e6a9f180d2e86e0f62c9657dffc9971bdddab55b5cb9f29b0314f622086c10019b07e5464d77aa9a1bf7d767d2b4ad1a5638462a50c56dbe039b7a8f9b2a31e604bb1ac6df73773c853b71823e8ecf390d356f0e8c99e240fbcf0a442bafffed6b92712f0c9580776b5717bc2277815a98bf04132f7dc239cd68a456fe35af84eaadee3ccda444934f3de603c8a20ade73f3bc52541a5ea369d0adf26a5dd17466881"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x5, 0xd, 0xab, [@generic={0x7e, 0xf, "b4498e45f4c441a21cd88653653a93cf7ffbec53e00db9c54ad8bbc0b63d92061166dae21e43233947b85042ad7719f04369fee358d44d7543a6eee1ad1281659329823c4f35a705354d152dfe337362386e944521418132b534807caa19d6902a15f4c0feca1b7c3c9aa5af09d9e687044aadab9b3ec8ba1eb34ae9"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x0, 0x6, 0x7, [@generic={0xc1, 0x24, "8cf5ea31fd5ee44a9e186990cfb099737588452b5c70099a9ae49915e738d5d151da29c521d0172937ed3aac41b9674656edf04132955fe1b5e4db6c6bbca23ed57af7b63002e41b7758ce44587ca131d2f5e570106d2e6da60c25c7776e2261e306f8080a31d93ef6a5efa0df339b7058a89b7217a827b044eba8b252079e8656959c088433ccc4f91ae51f37264138e63e86974c8246b96c0ad9b977bacf90cfe7b4b340c2b4ca1649350fbb004f760edf46ef4df15de2e9f42e8285e5eb"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xfa, 0x1, 0x4}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x80, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xa0cf}]}}, {{0x9, 0x5, 0x9, 0x5dcc85da469d8726, 0x8, 0x48, 0x3, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x81, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x3, 0x1, 0x42}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x7, 0x4, 0x1}}, {{0x9, 0x5, 0x4, 0x0, 0x0, 0x3, 0x80, 0x2, [@generic={0xd3, 0x1, "0f0a0d76b1d7d9d6c9741adabeccec4a35ca02e847d0bda651181e92ba8ff22a2f5b2bdd4d694e2b27dae1301fc461f0e04edbb5432a3c9f798a0646bfd7cce89b3be062758da425728dc99bf2e300f841cfc9e5cee82af25b8ab489d11c16851fc12c7fd2230b0ad191cab3ebdee9cb0d5b5a0c6e7f275e0757b8c166ca0fe07d185270e3d9be0c8085896d999f40cc38441b0ebbd35d73a5d80707ee75a3922d1bddf68f0f7602bf3bf741aea2f0566effca4ff7f3747c19b83149329d48de9d4c2bd7b9959769db6e74020d6a685ca6"}]}}]}}, {{0x9, 0x4, 0xb9, 0xd, 0xd, 0xe, 0x1, 0x0, 0x7, [], [{{0x9, 0x5, 0xf, 0xc, 0x3ff, 0x7, 0x87, 0x1, [@generic={0x1f, 0x2, "59125b167dfe3302e8feaaeda94d48327f65e63183e67d3035dd7c55ef"}, @generic={0x6f, 0x30, "8653ec44157b62038fa13469ae712eb2657ecefab908526f13bb0c862e3e460873a1e332d14b9b63c503b305b97c168d4fc5eaed70514fcbb9798cd35b3e33152169546dd9d64e15ac083875e8c04baadddbdfd3752942a21e170551ccb0fc64cc29fb8b3888aac7f21f4ca2a8"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x400, 0x5, 0x6, 0x9, [@generic={0x3e, 0xa, "0a114a97ae543886dc5e8c7234895f1f3d1b1527add0adec3139aab67cff8044577345077cb5255e290cb7f2b446423eb836290ade352ca33639a9ec"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x73, 0x1, 0x2c, [@generic={0xe6, 0xd, "68a64480c9170c9ac56346ee5f0645cb086a1e9a00c95f0fed8381429c79d4bef424aae580074ac1e689ce16f566d55e937a623b15b6b1ed4047fc733d9ccd271f943be2799afbb4f058991f8860cba5f2eef8c2074c98b098b623b863d72f125718df0f0ccdbc2eae2b6d6cdfbe9190581270d331b5c5376c9bfd386c1892d96c440717fff4dcbd1e82ae372e1f0fc9c3e2ea161e04f429201243e77200038fbe3e8bb0c999110ccdbf22abeb6919a24f70ba0395bddca4c5a56c39dd499c9bb01b694c2cfd71eed28abb54a1cb191d0e83a39b01bc3ad2d0abd652b4bbf5640120e4cf"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x3, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc5, 0x7, 0x800}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}, {{0x9, 0x5, 0x0, 0x3, 0x8, 0xcc, 0x81, 0x81}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xe8, 0x7, 0x1, [@generic={0x56, 0x5, "1be37514e8978208ffc33b1f1d4b5682d156dceae24d0f6d4d68b0baf26a07f6f70c807271ceff6e27efefaa75ec5009e9698ba96c87350f6240c2f0bbe5534bd4872d9149152d706c5f582aec45b0e41a65e81b"}, @generic={0xaa, 0x7, "da7136088b227069b0cd439412cb84b2af8104d300b1d344005a5ce22e23c7c2050290da9ce88a1d77f2ab1695692bd6e772a73b288d5067b4d9ab97ce2f2108ec665a95e2a60e67b8e1beb3ff5deaefae806167a91f3a579f7f5a3af25f63d77a26c645d92e31de8155b0f6731ca2a578fa3666ff9917414db7be90e20e6e3a1f84d853d1e1396d44953c7834a786bc68a624e42fb44876037f30ad3d572c2e5635012d6b4b4dd8"}]}}, {{0x9, 0x5, 0x3a8addaeeb26938e, 0x4, 0x10, 0x3, 0xdb, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x2d5}]}}, {{0x9, 0x5, 0x2, 0x4, 0x200, 0xa, 0x40, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x3ac}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x2, 0x6, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0xff}]}}, {{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x2, 0xd, 0x6, [@generic={0x3f, 0xa, "e462493a888d9406b318e053b0a045363dace20055ea73ef6acdb7131c3bd2716b32ef0037cbdc0534db677d0537937ebd9874ed6441963ea5f358df90"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x9, 0x8, 0x3, [@generic={0x6d, 0x8, "093f7340031618f8c6bd54efa7e4038231924a4839d79b55d0c938ab7a3b558ef7b4c5f5c0b1d018ee280473663525790c7ed0f3e9c64f043fd5802208fd4053ce75a7d1ffbe0e1c4c23a42d43144fb213a6941b258a4cbeb0eee4f995365adb5b0ed8043c12e7dedfe409"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0x2}]}}, {{0x9, 0x5, 0x84, 0x8caa2abfe2c2e3b8, 0x10, 0x4, 0x4, 0x4}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x0, 0x5, 0x8}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x6, 0x10, 0x5, 0x40, 0xf9}, 0x20, &(0x7f0000000040)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x30, 0x5, 0x0, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "0e6be25ffa67a21b6a81cbaa8b95f095"}]}, 0x8, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3801}}, {0x24, &(0x7f0000000240)=@string={0x24, 0x3, "96aec0dc0c5a0aa9c1c646f768f7fc419701af783eff6ebe19c2806daebd1435dd0b"}}, {0xa2, &(0x7f0000000280)=@string={0xa2, 0x3, "8d4340bb1d4d69cb3aec4ded40d216ec41a7ffb0a30fb8906cb5ad84d7e0daaf4e4a85b840a1b8b566903e8bed0e78c290a030574cd21e2a59bebea48b5cbe7bbf4e11fe8da42c1b55ddef92a0f896d878c2d135494f62a001b0570af972007d23214705e1e3f60499252c12a83522e8076c42eed37a57dcc531249792272cefd50a60624ce679c49dd3f8f77b5a6836c9b5ac917ad4b3ffe680c09bd4dba938"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xabe2b092e0cf270}}, {0xe1, &(0x7f00000003c0)=ANY=[@ANYBLOB="e1034192d901365c167ea6cbcbf27bf7e7b3c5096a6052f924a3149fbec7776dd9aee83e631f79fa322c6aded190525c0768fde2805417f0abce7647e2d5a87fb767ef872973f673cb96d4d2f787ca860308ad325ac69686a683d18accb3857b9e8013d78b7a92b8a339957398c72895610da0069cbf617427a7b8702913bafd59e72e1e3d6e7f8fa5f88be7b346882d61473738722f155bef6b4efdeb02b8db0ed12254693789da63dc0939d784c8fbd4f2e650d30e47312e41850a28528ba9064baac33edf38873a01000000e0fa5a5a58d39c153c6d5d4ac8"]}, {0x54, &(0x7f0000001040)=@string={0x54, 0x3, "dd3c937e3b457098049cd710ac3a268a639f7da64ed9d0944830e02059f81f70c3a1057599fa6f1f59952ee9864a14863e94942e155df89eab1eeebf6dc0921443ff4785e944a981a19cae39cfb763b06d11"}}]})
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001140)=ANY=[@ANYBLOB="06000000100003002ac570000000020000000000dc7df18a0d940ebc309f012937940f3ad132abdaa23f1e841c1f5d9412663084", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001240)={@cgroup=r6, 0xc, 0x0, 0x5, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001200)=[0x0, 0x0, 0x0]}, 0x40)

6.963105723s ago: executing program 5 (id=8487):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', @mcast2, 0x8, 0x3c80, 0x85, 0x400, 0x3, 0x60})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0)
syz_open_dev$media(0x0, 0x4, 0xf13841)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r4, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$qrtr(0x2a, 0x2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/timers\x00', 0x41, 0x0)
write$uinput_user_dev(r6, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000000c0)={0x0, 'team0\x00', {0x2}, 0x401})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000001c0)={0xb, 0x78c, 0xfff0})

6.962604181s ago: executing program 3 (id=8488):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r1 = dup(r0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
unshare(0x22020600)
flock(0xffffffffffffffff, 0x8)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="f3450fbc475aa766ba4200ed66baf80cb8398a888aef66bafc0cb0f0ee000000400f22c042a7a70f49f70f00d86536400f00d335000004000f22c066ba200066ed", 0x41}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f0000000240)=""/163)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$unix(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
sendmmsg$unix(r9, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20041, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x7)

6.163230638s ago: executing program 1 (id=8489):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x7, 0x2}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r2, &(0x7f0000000500), &(0x7f0000000600)=""/146, 0x7000000}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000046000000c0ff0000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0)
connect$can_bcm(r4, &(0x7f00000005c0), 0x10)
recvmmsg(r4, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0xff6}], 0x1}, 0x8000}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@delqdisc={0x54, 0x25, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0x8}, {0x5, 0x2}, {0x10, 0x1}}, [@qdisc_kind_options=@q_blackhole={0xe}, @qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0xfffffffc}, @TCA_CODEL_TARGET={0x8, 0x1, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x5)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000003a0, 0xffffffffffffffff, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9b, 0x8, 0x0, 0x0}}, 0x10)
r7 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90)
write$cgroup_type(r7, &(0x7f0000000000), 0xd4ba103)
r8 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4)
inotify_rm_watch(r7, r8)

5.926475961s ago: executing program 1 (id=8490):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0})
ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'veth0_macvtap\x00'}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$PTP_CLOCK_GETCAPS(0xffffffffffffffff, 0x80503d01, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0a0000000000000000050000000003"], 0x48)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="04000000040000000400"], 0x48)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0x0)
r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x5, 0x4f, 0x1, 0x1, 0x2, 0x4, 0xddd4, 0x5a506226, 0x7, 0x10, 0x10001, 0x1c2, 0x6, 0x40000000, 0x3, 0x1, {0x2, 0x2}, 0x4, 0x5}}) (async)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000280)={0x0, @bt={0x5, 0x4f, 0x1, 0x1, 0x2, 0x4, 0xddd4, 0x5a506226, 0x7, 0x10, 0x10001, 0x1c2, 0x6, 0x40000000, 0x3, 0x1, {0x2, 0x2}, 0x4, 0x5}})
timer_create(0x4, &(0x7f0000000140)={0x0, 0x1f, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000001c0)) (async)
timer_create(0x4, &(0x7f0000000140)={0x0, 0x1f, 0x2, @tid=0xffffffffffffffff}, &(0x7f00000001c0)=<r6=>0x0)
timer_gettime(r6, &(0x7f0000000240)) (async)
timer_gettime(r6, &(0x7f0000000240))

5.543577071s ago: executing program 3 (id=8491):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58010000100013040000000000000000e0000002000000000000008fd900000020010000000000000000000000000002fffd00004e2400090200002000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002232000000fe8000000000000000000000000000bb0000000000000000070000000000000000000000000000000400000000000000ffffffffffffffff04000000000000000600000000000000000000050000000003000000010000000800000000000000cc0000000000000000000000000000000d0000000000000000000000000000000000000002000001080000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000060"], 0x158}}, 0x4804)

5.447897273s ago: executing program 4 (id=8492):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000140)={0x2020, 0x0, <r1=>0x0}, 0xfdb1)
write$FUSE_DIRENT(r0, &(0x7f0000002180)=ANY=[@ANYBLOB="1001000000000000", @ANYRES64=r1, @ANYBLOB="0700000000000014"], 0x110) (async)
write$FUSE_DIRENT(r0, &(0x7f0000002180)=ANY=[@ANYBLOB="1001000000000000", @ANYRES64=r1, @ANYBLOB="0700000000000014"], 0x110)
timer_create(0x3129c2dfde5bdfd7, &(0x7f0000000080)={0x0, 0x26}, &(0x7f00000000c0))

5.243102717s ago: executing program 3 (id=8493):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x4000)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000200000a38000000090a000000000000000000000000000908000a40000000000900020073797a3100000000f8ff04400008000440000000ff140000001100010000000000000000000084000a000000"], 0x60}}, 0x810)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r4, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000090)
syz_80211_inject_frame(0x0, 0x0, 0x0)
nanosleep(0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0x2, 0x2020})
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

5.097157097s ago: executing program 4 (id=8494):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x33fe0}}, 0x40010)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1})
r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, 0x0, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"})
openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '/dev/cec#\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x5d, 0x39, 0x39, 0x37, 0x32, 0x30], 0x2d, [0x61, 0x64, 0x36, 0x61], 0x2d, [0x66, 0x65, 0x53, 0x39], 0x2d, [0x37, 0x30, 0x37, 0x64], 0x2d, [0x37, 0x34, 0x34, 0x0, 0x30, 0x66, 0x31, 0x33]}}}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000380)="1503f47fcee8af5def8b900588653365fe9bef5529b7edb0d930d7b95f5a8b1812a532648a000f6dae612f70ab4449a944b8a2b7013c68d5a1ef8ae00fa0a3ea6bc3535c54ca942ec52db3d606e6eff38780ae28ea16ff34e775dc1508e3013f38de584f21de10dd9f6d71029e897fd4bcd21c44c2aa7f3587601a0c13846ffdf368d6ede017d83e5f81757daf700c2cb5bf53c4229d758b5cf0d8ac2211780d504ff1eccb2d2adbd076a446ee46881113265a38e6c1c42840ea4688667a0c9191f3b794ffd2b717288c155b81f5fb58f8048df014dbdff73b107e0febf4833e73ccb9df8acb0f090c5203038d32a09e6857216028beeae59e")
mkdirat(r6, &(0x7f0000000480)='./file0\x00', 0x1d9)
unshare(0x24020400)

5.039993156s ago: executing program 6 (id=8495):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48a, 0x0, 0x32}]})
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x12ba, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x98, 0x3, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x84, 0x4, 0x1}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x3c3100, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x10, 0x7}, 0x94)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4)
bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
sendto$inet6(r4, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0)

4.820572498s ago: executing program 5 (id=8496):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0x2, 0x9, 0x8, 0x87, 0x81}, 0x0)
r2 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0)
fsopen(&(0x7f0000000000)='ufs\x00', 0x1)
r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000080015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
openat$cgroup_pressure(r5, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x38, r9, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x4048086)
ioctl$SNDRV_PCM_IOCTL_XRUN(r7, 0xc0984124, 0x1000000000000)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000640)={0xa, 0x4e24, 0xff, @mcast1, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000480)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000680)="67a90e2b6eb50a437ec5a90db234a1384341ed8438c569588aa6290c054fe6d64e2171d7fa2bc29d09ed84207249c7221d3fc8529cb78cb6c5ced3862baa6d6be4583da32053e8476b3c20c68de3fd4dd0bf37356ff2db98c1ff71376d2d3e10a002487ca963bee45c4b31087316dd81", 0x70}], 0x2}}], 0x1, 0x41000)

4.014806739s ago: executing program 1 (id=8497):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r4, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1})
r5 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12", 0x2, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, 0x0, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x4, 0x0, &(0x7f0000000240)="2294a696"})
openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
r6 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, &(0x7f0000000280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '/dev/cec#\x00'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x31, 0x5d, 0x39, 0x39, 0x37, 0x32, 0x30], 0x2d, [0x61, 0x64, 0x36, 0x61], 0x2d, [0x66, 0x65, 0x53, 0x39], 0x2d, [0x37, 0x30, 0x37, 0x64], 0x2d, [0x37, 0x34, 0x34, 0x0, 0x30, 0x66, 0x31, 0x33]}}}, {@audit}]}}, 0x1, 0x0, &(0x7f0000000380)="1503f47fcee8af5def8b900588653365fe9bef5529b7edb0d930d7b95f5a8b1812a532648a000f6dae612f70ab4449a944b8a2b7013c68d5a1ef8ae00fa0a3ea6bc3535c54ca942ec52db3d606e6eff38780ae28ea16ff34e775dc1508e3013f38de584f21de10dd9f6d71029e897fd4bcd21c44c2aa7f3587601a0c13846ffdf368d6ede017d83e5f81757daf700c2cb5bf53c4229d758b5cf0d8ac2211780d504ff1eccb2d2adbd076a446ee46881113265a38e6c1c42840ea4688667a0c9191f3b794ffd2b717288c155b81f5fb58f8048df014dbdff73b107e0febf4833e73ccb9df8acb0f090c5203038d32a09e6857216028beeae59e")
mkdirat(r6, &(0x7f0000000480)='./file0\x00', 0x1d9)
unshare(0x24020400)

3.255595194s ago: executing program 3 (id=8498):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000fe0100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}})

3.055859359s ago: executing program 5 (id=8499):
semtimedop(0xffffffffffffffff, &(0x7f0000000080)=[{0x4, 0x7fff, 0x800}], 0x1, 0x0)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
sched_rr_get_interval(r1, &(0x7f00000002c0))
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="0fdfce182c50d71054c003fd8e1a19f16d47680b542050991cc43debdda55796447104e25a5dd8bc1300d46fa67a4c8ddb0dd2d9f83c4ea350c7e16ce5008fac89ba3b7c2066102609ff67bdadfe04491f0566f1e1caa90c61f68834a4f5d52730fb7780278a7e414e670feba983d71005309026b52e4f93854bccc7d4ac0dcd345ab2b5ca61238043649ccd1103f0be2076fea202f66a93980ad96264cd22e16d6778fbbc33cea020f99520725477e6b089a1c98a336abf8a87a9ed1d3582df5c559d12b73d219471f3ed6ae7f0d51640ad87", @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000080)={0x0, 0x4, 0x47, {0x47, 0x11, "ffb8f717dbc70b3a9e4b1f086e4f05bde06bfd5fc137c916a6cc754b35a3801878cab4b9c3f2ea32f63b00ac43bbcd9e167bc21519ce89d024807fc32a9c335cbecb4c2d32"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

2.902949941s ago: executing program 6 (id=8500):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, <r3=>0x0], &(0x7f0000000040), 0x3, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x200, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f00000003c0)=[0x1]})
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfa}}, 0xffff}, 0xffffffffffffff59) (async)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r5, &(0x7f0000000040), 0xe09)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x80000000, 0x30, 0x30, 0x0, @in6={0xa, 0x4e20, 0x6, @loopback}, @ib={0x1b, 0x5, 0x0, {"00070009000000000000000000000006"}, 0x0, 0x1, 0x8}}}, 0x118) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async, rerun: 32)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) (async, rerun: 32)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, &(0x7f0000000000)={<r8=>0xffffffffffffffff})
close_range(r8, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) (rerun: 32)

2.844915908s ago: executing program 4 (id=8501):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00')
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r2 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001ec0)={&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @loopback}}}], 0x20}, 0x4)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000000ec0)=[{&(0x7f0000000200)=""/1, 0x1}], 0x1, 0xa, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0xfde3, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r3], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x20048004)
r6 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r6, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0x16, r5, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x14)
setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0xf3, 0x6, @vifc_lcl_ifindex=r5, @multicast1}, 0x10)

2.786153781s ago: executing program 6 (id=8502):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000200)="de", 0x1)
setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1)
getsockopt$inet_opts(r2, 0x0, 0x9, 0x0, &(0x7f0000005b80))
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
socket(0x10, 0xa, 0x1)
write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x12, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0a05562749c192c225bdd94628c04f5bd78ac28e08b9ca2d56adc21e0d68510d0b7392a0a24461715a1219f9eef850f07fc8c1d43da11f4ce486dac991072c6d7a085d00a58baa7ac9fa667f04f0047a5130a460f19178bb9a51a13d1a7432adea9b7798bda442f19fdfad4965dbff660adbd37e889a66c69b50b751da6368e0fabb5c2d627d73632af484017c48ac3073505cfd10b0e77548e274fa94124ca0f3ce1475f29a8100807b22a7fe567ec3a7b83146c69107b5e8d122834f9c555ef6189108b9c5", @ANYRES16=r6, @ANYBLOB], 0x34}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r7, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6})
close(r7)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x1000)

2.698985717s ago: executing program 3 (id=8503):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x400)
r2 = socket(0x11, 0x2, 0x0)
setsockopt(r2, 0x107, 0x17, &(0x7f0000000080)="0000d85c", 0x4)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8, 0x40, 0x3}, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}})

2.479973531s ago: executing program 4 (id=8504):
unshare(0x24020400)
r0 = socket$netlink(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000380)="dff5b08e974c0a40a8fade44c8b2a302f7604f09b68f3f6cc5f12fa0fd3a72e5199c99594e509511f39ef27cab2f19181546fac0beeb65da52b0255fb5d0eb102a731f2de5ca6c8a8d205bbcaae3a76bea41664d62baa62fa72ec971683e183097c95c3a58eee8880ba2f64e1169ce424c4102379143ec069a6034576a854be6dad35b2dfb6ad85fa0194138aa82129c750ef22c86a540ee9837374f9f9c9b7cad68fde4af05520395a9ea9a4532144d515071b2cbf2d282f5c41993c10088a55c6eed9d5a2d", 0xc6, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500000008be8529aad82bd0000000d4000000200000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffd}, 0x10}, 0x94)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e000000013000100"], 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
write$UHID_INPUT(r1, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1006)
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000480)={{{@in=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000580)=0xe8)
stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r4, r5}}, './file0\x00'})

1.728296876s ago: executing program 1 (id=8505):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='mountinfo\x00')
r3 = syz_io_uring_setup(0x891, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0x2, 0xbfdffdfc}, &(0x7f0000000000)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f0000000440)='./file0\x00', 0x8)
r7 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x23, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = syz_open_dev$dri(&(0x7f00000000c0), 0xba31000000, 0x0)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r10, 0xc00464c9, &(0x7f0000000200))
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r11, 0x4138ae84, &(0x7f00000001c0)={{0x81b7000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0x4, 0xd4, 0x0, 0x6, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x2, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0xfd, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x0, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x5, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0xa, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6a, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xeeef0000, 0x8000000, 0xd, 0x5, 0x28, 0x7, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0x8000000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000700)=ANY=[@ANYBLOB="01000000000000003208"])

1.188403788s ago: executing program 4 (id=8506):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000000c0)="f3670f01d80f01cfb85e038ee80f20e06635020000000f22e00f3802b10a00baf80c66b87066618766efbafc0cb8f05aefdecc2766b97f03000066b80a00000066ba000000000f303e0f013c"}], 0x1, 0x20, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x4, <r3=>r2, 0x1})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/block/loop14', 0x210000, 0x4d)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x4})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

923.366278ms ago: executing program 4 (id=8507):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x1}, {0x6, 0xff}]}, 0x10)
sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r9)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x300, 0x2, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xbeaa587e4b8ed667, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c961}, 0x4008080)
ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f0000000080)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000000)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/185, 0xb9}}], 0x43, 0x2040000, &(0x7f0000003700)={0x77359400})
shutdown(r3, 0x0)

802.093967ms ago: executing program 6 (id=8508):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c000000100001002cbd7000200000ffa1000000", @ANYRES32=0x0, @ANYBLOB="1301975784800000140003006e657464657673696d30000000000000140014006970366772657461703000000000000034001680300001802c000c8014"], 0x7c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010)

730.781943ms ago: executing program 1 (id=8509):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001c00)=[{{&(0x7f0000000680), 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/14, 0xe}], 0x1}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000780)=""/241, 0xf1}, {&(0x7f0000000880)=""/85, 0x55}, {&(0x7f0000000900)=""/180, 0xb4}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/110, 0x6e}], 0x5, &(0x7f0000001ac0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}}], 0x2, 0x20, &(0x7f0000001c80)={0x77359400})
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16, @ANYBLOB="01002ebd700e000000001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x12)
syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2000000, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c67726f757028664d01", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x7fffffffffffffff,audit,smackfstransmute=,smackfsdef=connmark\x00,\x00'], 0x1, 0x0, &(0x7f00000003c0)="f889a995c078ce8bdd08284324f6f91f51d94e4086a703b76dbbdc84d076e9f21c582af8a1caf1cccd8301512f4df4900f408eee2a61a0b2")
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x400)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000600)={"1814be51", 0x8eed, 0xf, 0xf, 0x2, 0x4, "a261c2680c42e4c3df27478185913f", "195107a0", "b502e7d7", "f0a5b3d7", ["7fce3248917474c615b20ff3", "eb1399ea7320ecf21274336a", "33cb451dc3d1b2e479739aaa", "22591a8a0815d0aa2ef62fef"]})
r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000040)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2})
io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000001dc0)={'#! ', '', [], 0xa, "58b7ea55517965753a23817a4f28016279aa34ae5fb78deaf55ea5fbf084edf9738b7cc107758dc296307dd9770bbff307617bdbe6b547dfe7bd3025e599ffc4e2a91c9376f2be0c1a7439162f00000000000000000000000000000000000000000000000000e07590acf41c36b004371f9bc0120ab7779b38ff7b2eb77c3525a4e5037f5264bfe9df6eb0e0c79b33225a58eac3d999c8d6466ba01d83dc561cbbbaef9e612cb881efe4ac5acd2ab8576c4f5caf11523797a8004eedd890d321443d17faa65e2f37c4a79279a9556cfe707bfd111c4e4300683aaaa3919a45397f9fdc709044412aeae1dc966c491d5f821270b97e26f59d3994cc86"}, 0x100)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x4010, 0xffffffffffffffff, 0xb7231000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f00002bf000/0x3000)=nil, 0x0, 0x0, r9}, 0x68)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100cf022aa4eb53814ae5702dd0"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

705.239842ms ago: executing program 5 (id=8510):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x3, 0x2000, 0x1000, &(0x7f0000002000/0x1000)=nil})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b0000070000000900010073797a300000000014000000020a01010000000000000000000000002c000000180a05000000000000000000070000010900010073797a30000000000c0005400000000000000002580000000b0a01010000000000000000070000090800034000000008090001"], 0x392c}}, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000001440)={'vcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
r5 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, 0x0, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005)
readv(r3, &(0x7f0000001540)=[{&(0x7f0000004580)=""/4107, 0x100b}], 0x1)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r9=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000000)={r9, 0xfffff052}, 0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000400)={<r10=>0x0, 0x4}, &(0x7f0000000440)=0x8)
sendmsg$inet_sctp(r6, &(0x7f0000000500)={&(0x7f0000000280)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="548a7d83662b8be034f3fe6f3a24c9d88b9fe0c5c72dba979ace2b75f470a7e9fdea61cbe802658d267c6d93ab5e0bdb2fdda20bd424fd41cbfd9512e5bea3d84f76ce3443d24a", 0x47}, {&(0x7f0000000340)="2516b8a61fcb8cc64ff12f8887066ec458301e1a994bd84e6e615f901d1c9f28d248ff1876f63f986b88b53f7a49df036e6d367b1e0a1e70f3a32a19b69b85fb012334259eb51da0f6292b8fce6eaf421fd5e6fbd996aa5ccc44005da7de49a11f45b35bf95d5cc28e669f435db79745880e1cd5a8d8b6d6c859f934", 0x7c}], 0x2, &(0x7f0000000480)=[@sndrcv={0x30, 0x84, 0x1, {0xad, 0x6, 0x9, 0xffff, 0x7fff, 0x2, 0x100000, 0x6, r9}}, @authinfo={0x18, 0x84, 0x6, {0x5e}}, @sndrcv={0x30, 0x84, 0x1, {0xfff0, 0xc96c, 0x8000, 0x4, 0x7, 0x7, 0x8, 0x401, r10}}], 0x78, 0x4040004}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r11 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @mcast1, 0x80, 0x0, 0x0, 0x20000000}})
io_uring_enter(r11, 0x62e, 0x1fe0, 0x16, 0x0, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0)

0s ago: executing program 6 (id=8511):
syz_emit_ethernet(0xfef3, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaa3aa86dd600101010000000000000000000000bbfe8000000000dea0c84181bb3440bcb082cfc4ea35f9000000000000000000aa4e200e2200649078020000000100000004001000628e0960f6d6d3f6", @ANYRES32], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="000a0100f8ff32"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGLED(r2, 0x5452, &(0x7f0000000240)=""/77)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01)
write$char_usb(r3, &(0x7f0000000040)="e2", 0x1068)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r5 = dup(r4)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x6, 0x4, 0x9, '\x00', 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0x10ffff)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x10004, 0x2, 0x3000, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="0f20e035200000000f22e067660f38810ac4e2093c000f78d4c6c100ea0b0000000101c4e17d283c340fc75ac73ef20f06c4c2d9b82d33000000", 0x3a}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000180)={0x2, 0x0, [{0x88a, 0x0, 0x8}, {0x97f, 0x0, 0x8}]})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"})

kernel console output (not intermixed with test programs):

p_probe:parse failed
[ 1979.785356][T32090] logitech-hidpp-device 0003:046D:0A87.0084: probe with driver logitech-hidpp-device failed with error -22
[ 1979.902631][    T9] usb 6-1: USB disconnect, device number 32
[ 1980.170734][T22955] snd_usb_pod 5-1:1.1: set_interface failed
[ 1980.183714][T22955] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[ 1980.194583][T22955] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71
[ 1980.302888][T22955] usb 5-1: USB disconnect, device number 126
[ 1980.364090][ T3737] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8015'.
[ 1980.383030][ T3737] netlink: 'syz.6.8015': attribute type 11 has an invalid length.
[ 1980.397311][ T3737] netlink: 19 bytes leftover after parsing attributes in process `syz.6.8015'.
[ 1980.521272][    T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1980.726952][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1980.742855][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1980.753579][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1980.767236][    T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1980.776408][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1980.801491][    T9] usb 6-1: config 0 descriptor??
[ 1981.056676][ T5920] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[ 1981.304378][ T5920] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[ 1981.317909][    T9] plantronics 0003:047F:FFFF.0085: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1981.346358][ T5920] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253
[ 1981.356159][T22955] usb 4-1: USB disconnect, device number 94
[ 1981.523678][ T5920] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[ 1981.533238][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1981.543389][ T5920] usb 7-1: Product: syz
[ 1981.577246][ T5920] usb 7-1: Manufacturer: syz
[ 1981.583363][ T5920] usb 7-1: SerialNumber: syz
[ 1981.593959][ T5920] usb 7-1: config 0 descriptor??
[ 1981.609021][ T5920] gspca_main: sunplus-2.14.0 probing 055f:c630
[ 1981.724680][T22955] usb 2-1: USB disconnect, device number 123
[ 1981.864718][ T3763] loop4: detected capacity change from 0 to 7
[ 1981.909631][ T3763] Dev loop4: unable to read RDB block 7
[ 1981.951358][ T3763]  loop4: AHDI p1 p2
[ 1981.955708][ T3763] loop4: partition table partially beyond EOD, truncated
[ 1981.967041][ T3763] loop4: p1 size 4227858431 extends beyond EOD, truncated
[ 1982.047918][T29092] udevd[29092]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 1982.296917][ T3771] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1982.521616][T22955] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[ 1982.706440][T22955] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1982.753399][T22955] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1982.775124][T22955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1982.827933][T22955] usb 2-1: config 0 descriptor??
[ 1982.842554][ T3767] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1983.333751][T22955] elan 0003:04F3:0755.0086: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[ 1983.420201][T32090] usb 6-1: USB disconnect, device number 33
[ 1983.529511][T22955] usb 2-1: USB disconnect, device number 124
[ 1983.701984][ T3787] fido_id[3787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1983.773623][ T5920] usb 7-1: USB disconnect, device number 96
[ 1983.890848][T32090] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[ 1984.046471][ T3791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1984.066247][ T3791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1984.115033][T32090] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1984.123006][T32090] usb 6-1: can't read configurations, error -71
[ 1984.483432][ T3812] fuse: Unknown parameter '0x0000000000000003'
[ 1985.211657][T32090] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 1985.400720][T32090] usb 6-1: Using ep0 maxpacket: 32
[ 1985.409224][T32090] usb 6-1: config 0 has an invalid interface number: 183 but max is 0
[ 1985.417766][T32090] usb 6-1: config 0 has no interface number 0
[ 1985.453356][T32090] usb 6-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528
[ 1985.571091][ T3831] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8038'.
[ 1985.605868][T32090] usb 6-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8
[ 1985.625983][T32090] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1985.636761][T32090] usb 6-1: Product: syz
[ 1985.641831][T32090] usb 6-1: Manufacturer: syz
[ 1985.646618][T32090] usb 6-1: SerialNumber: syz
[ 1985.654836][T32090] usb 6-1: config 0 descriptor??
[ 1985.661859][ T3819] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1985.832577][ T3834] bond5: (slave gre0): Device is not bonding slave
[ 1985.930921][ T3834] bond5: option active_slave: invalid value (gre0)
[ 1985.984201][ T3834] bond5 (unregistering): Released all slaves
[ 1986.024721][ T3840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1986.025029][ T3840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1986.026921][ T3840] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1986.233156][T32090] net1080 6-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.5-1, NetChip TurboCONNECT, 66:9f:17:75:cc:bd
[ 1986.785873][ T3848] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1987.847688][T32090] usb 6-1: USB disconnect, device number 35
[ 1987.859955][T32090] net1080 6-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.5-1, NetChip TurboCONNECT
[ 1989.156463][ T3896] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1989.190754][ T5920] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1989.397666][ T5920] usb 5-1: Using ep0 maxpacket: 32
[ 1989.423222][ T5920] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1989.455883][ T5920] usb 5-1: config 244 has an invalid interface number: 68 but max is 0
[ 1989.482690][ T5920] usb 5-1: config 244 has no interface number 0
[ 1989.489439][ T5920] usb 5-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[ 1989.530733][ T5920] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[ 1989.551568][T32090] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1989.600691][ T5920] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[ 1989.661931][ T5920] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0
[ 1989.672282][ T5920] usb 5-1: config 244 interface 68 has no altsetting 0
[ 1989.713504][ T5920] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[ 1989.730805][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1989.731043][T32090] usb 2-1: Using ep0 maxpacket: 8
[ 1989.751192][ T5920] usb 5-1: Product: syz
[ 1989.755414][ T5920] usb 5-1: Manufacturer: syz
[ 1989.760025][ T5920] usb 5-1: SerialNumber: syz
[ 1989.767681][T32090] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1989.794570][T32090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1989.822084][T32090] usb 2-1: config 0 descriptor??
[ 1990.006996][ T3894] pimreg: entered allmulticast mode
[ 1990.016117][ T3894] pimreg: left allmulticast mode
[ 1990.054145][T32090] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1990.222952][ T5920] comedi comedi5: Endpoint has wrong direction
[ 1990.234627][ T5920] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device.
[ 1990.255168][T32090] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1990.276002][ T5920] usb 5-1: USB disconnect, device number 127
[ 1990.299820][T32090] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[ 1990.331339][T32090] asix 2-1:0.0: probe with driver asix failed with error -61
[ 1990.904948][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8062'.
[ 1990.936591][ T3939] lo: Caught tx_queue_len zero misconfig
[ 1991.199426][ T3939] netem: incorrect ge model size
[ 1991.212122][ T3939] netem: change failed
[ 1992.135379][ T3961] binder: 3958:3961 ioctl c0306201 200000000100 returned -11
[ 1992.196542][ T3962] fuse: Bad value for 'fd'
[ 1992.357871][ T3969] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1992.388959][T22955] usb 2-1: USB disconnect, device number 125
[ 1992.510469][ T3971] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1992.944504][ T3981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8071'.
[ 1992.953677][ T3981] lo: Caught tx_queue_len zero misconfig
[ 1993.837082][   T24] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1994.040399][ T3988] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[ 1994.360879][   T24] usb 2-1: Using ep0 maxpacket: 16
[ 1994.586158][   T24] usb 2-1: config 0 has no interfaces?
[ 1994.623434][   T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1994.731667][   T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1994.740221][   T24] usb 2-1: Manufacturer: syz
[ 1994.780425][   T24] usb 2-1: config 0 descriptor??
[ 1995.556918][ T3981] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1995.603349][ T3981] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1996.290819][T20113] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1996.299886][   T24] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[ 1996.500777][   T24] usb 7-1: Using ep0 maxpacket: 32
[ 1996.510968][T20113] usb 5-1: Using ep0 maxpacket: 32
[ 1996.524834][   T24] usb 7-1: New USB device found, idVendor=13d3, idProduct=3393, bcdDevice=6b.ed
[ 1996.606040][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1996.623583][T20113] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1996.801168][   T24] usb 7-1: Product: syz
[ 1996.805502][T20113] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1996.813224][   T24] usb 7-1: Manufacturer: syz
[ 1996.818299][T20113] usb 5-1: can't read configurations, error -71
[ 1996.831454][   T24] usb 7-1: SerialNumber: syz
[ 1996.846699][   T24] usb 7-1: config 0 descriptor??
[ 1997.110954][ T5920] usb 6-1: new full-speed USB device number 36 using dummy_hcd
[ 1997.466401][ T5920] usb 6-1: device descriptor read/64, error -71
[ 1997.641394][T32090] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1997.730741][ T5920] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[ 1997.765737][T22955] usb 2-1: USB disconnect, device number 126
[ 1997.817119][T32090] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1997.845184][T32090] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1997.874244][ T5920] usb 6-1: device descriptor read/64, error -71
[ 1997.876181][T32090] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1997.892450][T20113] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[ 1997.942500][T32090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1997.969026][ T4018] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1997.981196][ T5920] usb usb6-port1: attempt power cycle
[ 1998.006445][T32090] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1998.072794][T20113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 27750, setting to 64
[ 1998.143733][T20113] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1998.164944][T20113] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1998.342708][ T4028] binder: 4025:4028 ioctl c0306201 200000000100 returned -11
[ 1998.351069][ T4028] fuse: Bad value for 'fd'
[ 1998.376573][ T4018] fuse: Unknown parameter 'rootmod'
[ 1998.400916][T20113] usb 5-1: Product: syz
[ 1998.405335][T20113] usb 5-1: Manufacturer: syz
[ 1998.410355][T20113] usb 5-1: SerialNumber: syz
[ 1998.421705][ T5920] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[ 1998.442620][ T5920] usb 6-1: device descriptor read/8, error -71
[ 1998.451826][T20113] usb 5-1: config 0 descriptor??
[ 1998.602540][T28388] usb 4-1: USB disconnect, device number 95
[ 1998.680822][ T5920] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[ 1998.701967][ T5920] usb 6-1: device descriptor read/8, error -71
[ 1998.810778][    T9] usb 7-1: USB disconnect, device number 97
[ 1998.829600][ T5920] usb usb6-port1: unable to enumerate USB device
[ 1998.873699][ T5920] usb 5-1: USB disconnect, device number 3
[ 1998.983514][T29116] udevd[29116]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2000.221285][T20113] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 2000.521313][T20113] usb 2-1: Using ep0 maxpacket: 16
[ 2000.538241][T20113] usb 2-1: config 0 has no interfaces?
[ 2000.547834][T20113] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2000.557437][T20113] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2000.566364][T20113] usb 2-1: Manufacturer: syz
[ 2000.584984][T20113] usb 2-1: config 0 descriptor??
[ 2000.872495][ T4054] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2000.926542][ T4054] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2001.457057][ T4081] [U] 
[ 2001.460513][ T4081] [U] K{�
[ 2001.475726][ T4081] [U] �T �1��Š�F���Fˊ�`G�Jǘ�G���������O��/�MC�
[ 2001.487114][ T4081] [U] T�ؖ/,�~�Ĝ��J���}8���'O1��"�7-΂JQ�K��W��Q�5C%"�H12��Y������X�`���ȼ`+��(�¿!(���Z'�TXLN�I�G�J����ݭ�P�~�7�!���"ب���(�5�OBܤ�̓J�
[ 2001.565986][ T4081] [U] �K\&�}6�6�X�HX��Ե���.`�A�$�40|϶��9��ި����U��4��ĮVBZ��}�W�M�T���Q��ΦR�4��
[ 2001.586740][ T4081] [U] ".H6��"�KÇ[����J�4��I�N��[Z(��C|T�]Z{��3�C=��X�Ԟ˅�4�W�)\T�XJ��SH{Q;̹���T��+���G��߮D�.˂�>Y����WUH�FN����HL]S�2���\G%�O�&Z)�К'�PUL�_<�	�ذ�Ү��`ұT��ޜ���;_�"(�U{7J��2X �/�'��C���I����H�C�ճ�V�=��AI�%W�ES� R��J�Μ���G��R��͡HI
���A��6-�D��V�� I"��Nƨ ��ASC~4���8C�*�OO5/ߜJ�~���W�VK+����3��Y)��M���V��YQƽ�DTR�
OTPEM%F��EJ�A5��T_-X~�^AAۂҘ�Q��
[ 2001.718199][ T4081] [U] 	+�W�G?]��'A:	��)�
����' B>T���F/��<'�U�'��H�I�.+]E�.�-ɿ߿�%��>2`�^U�8F.�6��3��+�A�«���G3�P��6:�^0��T��V�'E�T����YC�N��Rϩ�N�PJ�;�Z����ۑ8!��\م�A�ʖ2��$е�­WI.��#��/BAI���`��4J��D�Y@�Z��GW�5˿B��ٜ�N�Y"VI2��
[ 2001.927913][ T4081] [U] �T�_K5�T�YJ���9��C�$BR�L�NUL��9W���|�G�"ʃ�%�ڶ�C�؝���Q��
 ��3��Q��N^HP*��$	�.�7Yӱ�2�
[ 2001.941704][ T4081] [U] �?���H��*����3͝7�ɍ�^#Q�"0~���(�O�XL�B�,'V��=���C�S���G�S��0�ւ��`���ه��=1(�ξ��P#�2DO*Ƀ
[ 2001.966988][ T4081] [U] �S��G������GU��D-{���|&�����ѐ2��L�C_��!`��OZ֥�B��%>�RѶ�WχݎSS�H"�YA4�O.�Y��ď�RTԶ�B�[+/<<R�B����|ФE���۠�V96#���ͤʦJ�U�%
S851���ҩS�P��\��?Q�|L��QX�0�K�1ORɴ2��|��D�F���ِ��2ޔ���0��H�}C[/����PX^��O
[ 2001.991635][ T4081] [U] �؛���(J�Л��M��XZ�;�����؝_����*3�3��5�\�XM��U��AK!AQ`�
[ 2002.035156][ T4089] binder: 4083:4089 ioctl c0306201 200000000100 returned -11
[ 2002.044049][ T4089] fuse: Bad value for 'fd'
[ 2002.530733][T28388] usb 7-1: new full-speed USB device number 98 using dummy_hcd
[ 2002.703210][ T5920] usb 2-1: USB disconnect, device number 127
[ 2002.713940][T28388] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2002.746227][T28388] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2002.786366][T28388] usb 7-1: config 0 descriptor??
[ 2002.811438][T28388] cp210x 7-1:0.0: cp210x converter detected
[ 2003.263854][ T4094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8104'.
[ 2003.270955][T20113] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 2003.326726][T28388] cp210x 7-1:0.0: failed to get vendor val 0x370c size 13: -121
[ 2003.342934][T28388] cp210x 7-1:0.0: GPIO initialisation failed: -121
[ 2003.370252][T28388] usb 7-1: cp210x converter now attached to ttyUSB0
[ 2003.571511][T28388] usb 7-1: USB disconnect, device number 98
[ 2003.612466][T20113] usb 2-1: config 0 has an invalid interface number: 197 but max is 4
[ 2003.634918][T20113] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2003.635165][T28388] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2003.685029][T28388] cp210x 7-1:0.0: device disconnected
[ 2003.699921][T20113] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5
[ 2003.718528][T20113] usb 2-1: config 0 has no interface number 0
[ 2003.725270][   T24] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[ 2003.760514][T20113] usb 2-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[ 2003.776351][T20113] usb 2-1: config 0 interface 197 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[ 2003.805666][T20113] usb 2-1: config 0 interface 197 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2003.851885][T20113] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[ 2003.861481][T20113] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2003.874343][T20113] usb 2-1: Product: syz
[ 2003.879466][T20113] usb 2-1: Manufacturer: syz
[ 2003.887805][T20113] usb 2-1: SerialNumber: syz
[ 2003.896291][T20113] usb 2-1: config 0 descriptor??
[ 2003.901454][   T24] usb 5-1: Invalid ep0 maxpacket: 64
[ 2003.908515][ T4102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 2004.030875][   T24] usb 5-1: new low-speed USB device number 5 using dummy_hcd
[ 2004.232805][ T4102] netlink: 124 bytes leftover after parsing attributes in process `syz.1.8106'.
[ 2004.246844][   T24] usb 5-1: Invalid ep0 maxpacket: 64
[ 2004.268063][   T24] usb usb5-port1: attempt power cycle
[ 2004.294584][ T4118] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[ 2004.575443][ T4128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2004.620873][   T24] usb 5-1: new low-speed USB device number 6 using dummy_hcd
[ 2004.654405][   T24] usb 5-1: Invalid ep0 maxpacket: 64
[ 2004.729478][ T4126] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2004.890772][   T24] usb 5-1: new low-speed USB device number 7 using dummy_hcd
[ 2004.911441][   T24] usb 5-1: Invalid ep0 maxpacket: 64
[ 2004.917003][   T24] usb usb5-port1: unable to enumerate USB device
[ 2005.660844][   T24] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[ 2005.914708][ T4145] batadv_slave_1: entered promiscuous mode
[ 2005.933786][   T24] usb 4-1: config 0 has an invalid interface number: 160 but max is 0
[ 2005.951384][   T24] usb 4-1: config 0 has no interface number 0
[ 2005.958365][   T24] usb 4-1: config 0 interface 160 has no altsetting 0
[ 2005.969697][   T24] usb 4-1: New USB device found, idVendor=a6da, idProduct=1e78, bcdDevice=56.e4
[ 2005.992201][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2006.010729][   T24] usb 4-1: Product: syz
[ 2006.015885][   T24] usb 4-1: Manufacturer: syz
[ 2006.021102][   T24] usb 4-1: SerialNumber: syz
[ 2006.031447][   T24] usb 4-1: config 0 descriptor??
[ 2006.042484][   T24] usb-storage 4-1:0.160: USB Mass Storage device detected
[ 2006.262766][   T24] usb 4-1: USB disconnect, device number 96
[ 2006.892182][ T4144] batadv_slave_1: left promiscuous mode
[ 2007.076522][ T4159] vlan2: entered promiscuous mode
[ 2007.091271][ T4159] vlan2: entered allmulticast mode
[ 2007.627250][ T5920] usb 2-1: USB disconnect, device number 2
[ 2007.844137][ T4173] binder: 4168:4173 ioctl c0306201 200000000100 returned -11
[ 2007.857166][ T4173] fuse: Bad value for 'fd'
[ 2007.986775][   T24] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[ 2008.190707][   T24] usb 7-1: Using ep0 maxpacket: 16
[ 2008.303723][   T24] usb 7-1: config 0 has no interfaces?
[ 2008.446452][   T24] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2008.493588][   T24] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2008.590750][   T24] usb 7-1: Manufacturer: syz
[ 2008.668643][   T24] usb 7-1: config 0 descriptor??
[ 2008.793955][ T4177] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2009.028559][ T4169] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2009.110756][   T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[ 2009.110787][ T5920] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 2009.144766][ T4169] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2009.225208][ T4184] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2009.278120][   T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2009.344909][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2009.351149][ T5920] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2009.367563][ T5920] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 2009.392756][   T24] usb 5-1: Product: syz
[ 2009.403596][   T24] usb 5-1: Manufacturer: syz
[ 2009.415302][ T5920] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2009.421129][   T24] usb 5-1: SerialNumber: syz
[ 2009.566191][ T5920] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 2009.647538][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2009.673247][ T5920] usb 2-1: Product: syz
[ 2009.678177][   T24] usb 5-1: config 0 descriptor??
[ 2009.687553][ T5920] usb 2-1: Manufacturer: syz
[ 2009.703744][ T5920] usb 2-1: SerialNumber: syz
[ 2009.798063][ T5920] hub 2-1:1.0: bad descriptor, ignoring hub
[ 2009.830740][T28388] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 2009.884134][ T5920] hub 2-1:1.0: probe with driver hub failed with error -5
[ 2009.901211][   T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2010.029770][ T5920] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 2010.087151][T28388] usb 6-1: Using ep0 maxpacket: 32
[ 2010.220896][T28388] usb 6-1: too many configurations: 17, using maximum allowed: 8
[ 2010.330813][   T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2010.344091][T32090] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[ 2010.354728][   T24] usb 5-1: USB disconnect, device number 8
[ 2010.364011][T28388] usb 6-1: config 0 has no interfaces?
[ 2010.373677][T28388] usb 6-1: config 0 has no interfaces?
[ 2010.395607][T28388] usb 6-1: config 0 has no interfaces?
[ 2010.409648][T28388] usb 6-1: config 0 has no interfaces?
[ 2010.459208][T28388] usb 6-1: config 0 has no interfaces?
[ 2010.477537][T28388] usb 6-1: config 0 has no interfaces?
[ 2010.486599][T28388] usb 6-1: config 0 has no interfaces?
[ 2010.497148][T28388] usb 6-1: config 0 has no interfaces?
[ 2010.514363][T32090] usb 4-1: config 0 has no interfaces?
[ 2010.530193][T32090] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2010.536785][T28388] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[ 2010.591822][T28388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2010.592501][T32090] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2010.600037][T28388] usb 6-1: Product: syz
[ 2010.615276][T28388] usb 6-1: Manufacturer: syz
[ 2010.642014][T28388] usb 6-1: SerialNumber: syz
[ 2010.658856][T28388] usb 6-1: config 0 descriptor??
[ 2010.672049][T32090] usb 4-1: config 0 descriptor??
[ 2010.780987][T28388] usb 7-1: USB disconnect, device number 99
[ 2010.845463][ T4196] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8134'.
[ 2010.876176][ T4188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8131'.
[ 2010.887030][ T4188] bond0: Unable to set up delay as MII monitoring is disabled
[ 2010.905361][ T5938] usb 6-1: USB disconnect, device number 40
[ 2011.304263][ T4197] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2011.375303][ T4197] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8134'.
[ 2011.850958][ T5938] usb 2-1: USB disconnect, device number 3
[ 2011.864849][ T5938] usblp0: removed
[ 2012.116349][ T4217] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2012.726284][ T4223] random: crng reseeded on system resumption
[ 2013.265387][T28388] usb 4-1: USB disconnect, device number 97
[ 2013.893110][T28388] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[ 2014.028468][ T4232] binder: 4228:4232 ioctl c0306201 200000000100 returned -11
[ 2014.036702][ T4232] fuse: Bad value for 'fd'
[ 2014.060697][T28388] usb 4-1: Using ep0 maxpacket: 8
[ 2014.067513][T28388] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 2014.120358][T28388] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 2014.155714][T28388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2014.207911][T28388] usb 4-1: Product: syz
[ 2014.231619][T28388] usb 4-1: Manufacturer: syz
[ 2014.236277][T28388] usb 4-1: SerialNumber: syz
[ 2014.265727][T28388] usb 4-1: config 0 descriptor??
[ 2014.272124][ T4244] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2014.291116][T28388] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 2014.490133][ T4236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2014.501401][ T4236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2014.721893][T28388] gspca_zc3xx: reg_w_i err -71
[ 2014.749451][ T4253] hub 9-0:1.0: USB hub found
[ 2014.775510][ T4253] hub 9-0:1.0: 1 port detected
[ 2014.823991][ T4260] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8148'.
[ 2014.837274][ T4261] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2015.401616][T28388] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 2015.408019][T28388] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 2015.420864][T28388] usb 4-1: USB disconnect, device number 98
[ 2015.750222][ T4284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2015.794828][ T4284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2015.865728][ T4287] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8159'.
[ 2016.230236][ T4297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2016.625686][ T4303] random: crng reseeded on system resumption
[ 2016.736551][T28388] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 2016.800739][ T4288] binder: 4280:4288 ioctl c0306201 200000000100 returned -11
[ 2016.856778][ T4285] fuse: Bad value for 'fd'
[ 2016.952195][T28388] usb 5-1: device descriptor read/64, error -71
[ 2017.088616][ T4311] netlink: 'syz.5.8164': attribute type 8 has an invalid length.
[ 2017.260974][T28388] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 2017.421146][T28388] usb 5-1: device descriptor read/64, error -71
[ 2017.531705][T28388] usb usb5-port1: attempt power cycle
[ 2017.770797][ T5938] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[ 2017.900900][T28388] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 2017.922392][ T5938] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2017.934162][ T5938] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 2017.945281][T28388] usb 5-1: device descriptor read/8, error -71
[ 2017.971785][T20113] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[ 2018.048830][ T5938] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[ 2018.086036][ T5938] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[ 2018.125240][ T5938] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2018.134854][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2018.154107][ T5938] usb 6-1: Product: syz
[ 2018.164813][ T5938] usb 6-1: Manufacturer: syz
[ 2018.178369][ T5938] usb 6-1: SerialNumber: syz
[ 2018.190766][T28388] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 2018.197416][T20113] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 2018.215309][T20113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2018.225052][ T4320] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2018.234252][T28388] usb 5-1: device descriptor read/8, error -71
[ 2018.245471][ T5938] cdc_mbim 6-1:1.0: skipping garbage
[ 2018.267074][T20113] usb 4-1: Product: syz
[ 2018.278476][T20113] usb 4-1: Manufacturer: syz
[ 2018.290057][T20113] usb 4-1: SerialNumber: syz
[ 2018.371174][T28388] usb usb5-port1: unable to enumerate USB device
[ 2018.441446][ T4320] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2018.467911][ T4320] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 2018.771376][ T4320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2018.842203][ T4320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2018.901605][T20113] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 2018.920934][T20113] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 2018.973702][T20113] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 2019.024378][T20113] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[ 2019.106404][ T5938] cdc_mbim 6-1:1.0: bind() failure
[ 2019.149471][ T5938] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[ 2019.195586][ T5938] cdc_ncm 6-1:1.1: bind() failure
[ 2019.300104][ T5938] usb 6-1: USB disconnect, device number 41
[ 2019.487616][T28388] IPVS: starting estimator thread 0...
[ 2019.591284][ T4349] IPVS: using max 49 ests per chain, 117600 per kthread
[ 2019.846408][T28388] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 2020.031537][ T5938] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 2020.060788][T28388] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 2020.072654][T28388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 2020.090174][ T4353] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2020.108315][T28388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 2020.141908][T28388] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2020.160438][T28388] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2020.171909][T28388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2020.196174][T28388] usb 5-1: config 0 descriptor??
[ 2020.203002][ T5938] usb 2-1: Using ep0 maxpacket: 16
[ 2020.344060][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2020.410871][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2020.420912][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2020.465666][ T5938] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2020.512236][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2020.586558][ T5938] usb 2-1: config 0 descriptor??
[ 2020.631080][   T24] usb 4-1: USB disconnect, device number 99
[ 2020.833906][T28388] plantronics 0003:047F:FFFF.0087: ignoring exceeding usage max
[ 2020.900485][T28388] plantronics 0003:047F:FFFF.0087: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[ 2021.068113][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.068154][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.068181][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.068207][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.068234][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.068261][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.068287][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.068313][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.068339][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.068366][ T5938] microsoft 0003:045E:07DA.0088: unknown main item tag 0x0
[ 2021.072967][ T5938] microsoft 0003:045E:07DA.0088: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 2021.072999][ T5938] microsoft 0003:045E:07DA.0088: no inputs found
[ 2021.073014][ T5938] microsoft 0003:045E:07DA.0088: could not initialize ff, continuing anyway
[ 2021.158326][ T4372] fuse: blksize only supported for fuseblk
[ 2021.271580][T20113] usb 2-1: USB disconnect, device number 4
[ 2021.340877][ T5938] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[ 2021.492558][ T5938] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 132, changing to 11
[ 2021.492594][ T5938] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2021.492628][ T5938] usb 7-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[ 2021.492651][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2021.495176][ T5938] usb 7-1: config 0 descriptor??
[ 2021.847967][ T4378] loop4: detected capacity change from 0 to 7
[ 2021.856808][T29238] Dev loop4: unable to read RDB block 7
[ 2021.870779][T29238]  loop4: AHDI p1 p2
[ 2021.878231][T29238] loop4: partition table partially beyond EOD, truncated
[ 2021.899928][T29238] loop4: p1 size 4227858431 extends beyond EOD, truncated
[ 2021.927837][ T4378] Dev loop4: unable to read RDB block 7
[ 2021.949465][ T4376] fuse: Bad value for 'user_id'
[ 2021.955628][ T4376] fuse: Bad value for 'user_id'
[ 2021.968901][ T4378]  loop4: AHDI p1 p2
[ 2021.973515][ T4378] loop4: partition table partially beyond EOD, truncated
[ 2021.981713][ T4378] loop4: p1 size 4227858431 extends beyond EOD, truncated
[ 2022.080140][T29238] udevd[29238]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 2022.146796][T29238] udevd[29238]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 2022.462446][ T5938] usbhid 7-1:0.0: can't add hid device: -71
[ 2022.523818][ T5938] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2022.551220][ T5938] usb 7-1: USB disconnect, device number 100
[ 2022.892137][T20113] usb 5-1: USB disconnect, device number 13
[ 2022.920912][T32090] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 2023.081879][T32090] usb 2-1: Using ep0 maxpacket: 16
[ 2023.099865][T32090] usb 2-1: config 0 has no interfaces?
[ 2023.112422][T32090] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2023.170350][T32090] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2023.266017][T32090] usb 2-1: Manufacturer: syz
[ 2023.281881][T32090] usb 2-1: config 0 descriptor??
[ 2023.372678][T20113] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 2023.577532][ T4389] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2023.595163][ T4389] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8187'.
[ 2023.620746][  T984] usb 7-1: new full-speed USB device number 101 using dummy_hcd
[ 2023.731197][T20113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2023.774802][T20113] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2023.792120][T20113] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 2023.818063][T20113] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2023.830278][T20113] usb 5-1: config 0 descriptor??
[ 2023.956903][  T984] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[ 2024.028020][  T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2024.097625][  T984] usb 7-1: Product: syz
[ 2024.108361][  T984] usb 7-1: Manufacturer: syz
[ 2024.118486][  T984] usb 7-1: SerialNumber: syz
[ 2024.174255][  T984] usb 7-1: config 0 descriptor??
[ 2024.255569][T20113] cp2112 0003:10C4:EA90.0089: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 2024.451202][T20113] cp2112 0003:10C4:EA90.0089: Part Number: 0x00 Device Version: 0x00
[ 2024.587199][  T984] airspy 7-1:0.0: Board ID: 00
[ 2024.592406][  T984] airspy 7-1:0.0: Firmware version: 
[ 2024.661010][T20113] cp2112 0003:10C4:EA90.0089: error requesting SMBus config
[ 2024.669794][T20113] cp2112 0003:10C4:EA90.0089: probe with driver cp2112 failed with error -32
[ 2024.876264][ T4421] loop4: detected capacity change from 0 to 7
[ 2024.884891][T29134] Dev loop4: unable to read RDB block 7
[ 2024.890528][T29134]  loop4: AHDI p1 p2
[ 2024.896363][T29134] loop4: partition table partially beyond EOD, truncated
[ 2024.904868][T29134] loop4: p1 size 4227858431 extends beyond EOD, truncated
[ 2024.919170][ T4421] Dev loop4: unable to read RDB block 7
[ 2024.991123][ T4421]  loop4: AHDI p1 p2
[ 2024.996069][ T4421] loop4: partition table partially beyond EOD, truncated
[ 2025.021655][ T4421] loop4: p1 size 4227858431 extends beyond EOD, truncated
[ 2025.030295][ T4423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8195'.
[ 2025.077733][ T4423] netlink: 'syz.5.8195': attribute type 6 has an invalid length.
[ 2025.398445][  T984] airspy 7-1:0.0: usb_control_msg() failed -71 request 0f
[ 2025.409452][  T984] airspy 7-1:0.0: Registered as swradio24
[ 2025.431500][T29134] udevd[29134]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 2025.441497][  T984] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[ 2025.446999][ T4423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8195'.
[ 2025.535610][  T984] usb 7-1: USB disconnect, device number 101
[ 2025.569545][T29134] udevd[29134]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 2025.585543][T26754] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 2025.613262][T26754] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 2025.633664][T26754] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 2025.654347][T26754] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 2025.879568][  T984] usb 2-1: USB disconnect, device number 5
[ 2026.077279][T28388] usb 5-1: USB disconnect, device number 14
[ 2026.420877][T32090] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[ 2026.450885][ T4437] fuse: Bad value for 'user_id'
[ 2026.461194][ T4437] fuse: Bad value for 'user_id'
[ 2026.584024][T32090] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 132, changing to 11
[ 2026.620736][T32090] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2026.630912][T32090] usb 7-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[ 2026.662067][T32090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2026.742746][T32090] usb 7-1: config 0 descriptor??
[ 2028.006034][T32090] usbhid 7-1:0.0: can't add hid device: -71
[ 2028.019975][T32090] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2028.033225][T32090] usb 7-1: USB disconnect, device number 102
[ 2028.174933][ T4467] netlink: 'syz.3.8202': attribute type 5 has an invalid length.
[ 2028.815073][    T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 2029.103922][    T9] usb 6-1: Using ep0 maxpacket: 32
[ 2029.121289][    T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2029.132766][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2029.159927][    T9] usb 6-1: config 0 descriptor??
[ 2029.254227][T28388] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 2029.460715][T28388] usb 2-1: Using ep0 maxpacket: 16
[ 2029.467959][T28388] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2029.479299][T28388] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[ 2029.606913][T28388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[ 2029.635007][T28388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[ 2029.664392][T28388] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2029.721331][T28388] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[ 2029.731806][T28388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2029.749731][T28388] usb 2-1: Product: syz
[ 2029.775897][T28388] usb 2-1: Manufacturer: syz
[ 2029.930748][T28388] usb 2-1: SerialNumber: syz
[ 2029.981254][T28388] usb 2-1: config 0 descriptor??
[ 2030.194699][T28388] appledisplay: Apple Cinema Display connected
[ 2031.605565][    C0] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19
[ 2031.616993][ T5938] usb 2-1: USB disconnect, device number 6
[ 2031.625671][ T5938] appledisplay: Apple Cinema Display disconnected
[ 2032.116410][    T9] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[ 2032.228854][    T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[ 2032.245217][    T9] dib0700: firmware download failed at 7 with -22
[ 2032.280295][    T9] usb 6-1: USB disconnect, device number 42
[ 2032.407627][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8221'.
[ 2032.495400][ T4517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8221'.
[ 2032.504511][ T4517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8221'.
[ 2032.641121][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 2032.740777][    T9] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 2032.822443][   T24] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 132, changing to 11
[ 2032.841037][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2032.847884][   T24] usb 2-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[ 2032.872286][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2032.903722][   T24] usb 2-1: config 0 descriptor??
[ 2032.921735][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2032.939307][    T9] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2032.959835][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2032.989949][    T9] usb 6-1: config 0 descriptor??
[ 2033.110770][T28388] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[ 2033.225816][    T9] usbhid 6-1:0.0: can't add hid device: -71
[ 2033.232041][    T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 2033.277554][T28388] usb 4-1: config 0 has no interfaces?
[ 2033.293695][T28388] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2033.338184][    T9] usb 6-1: USB disconnect, device number 43
[ 2033.365758][T28388] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2033.566121][T28388] usb 4-1: config 0 descriptor??
[ 2033.985242][   T24] usbhid 2-1:0.0: can't add hid device: -71
[ 2033.991602][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2034.026378][   T24] usb 2-1: USB disconnect, device number 7
[ 2034.210964][    T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 2034.613175][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 2034.662838][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2034.706180][    T9] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[ 2034.760982][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2034.962090][    T9] usb 6-1: config 0 descriptor??
[ 2035.095323][ T4546] loop4: detected capacity change from 0 to 7
[ 2035.101894][ T4544] fuse: Bad value for 'fd'
[ 2035.126205][ T4546] Dev loop4: unable to read RDB block 7
[ 2035.147277][ T4546]  loop4: AHDI p1 p2
[ 2035.160830][ T4546] loop4: partition table partially beyond EOD, truncated
[ 2035.232987][ T4546] loop4: p1 size 4227858431 extends beyond EOD, truncated
[ 2035.385955][    T9] kye 0003:0458:5016.008A: control desc unexpectedly large
[ 2035.445839][T29238] udevd[29238]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 2035.484600][    T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.008A/input/input140
[ 2035.545946][ T4553] lo: Caught tx_queue_len zero misconfig
[ 2035.698367][    T9] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.008A/input/input141
[ 2035.755430][ T4561] usb usb1: usbfs: process 4561 (syz.6.8233) did not claim interface 0 before use
[ 2035.853955][    T9] kye 0003:0458:5016.008A: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0
[ 2036.130175][   T24] usb 4-1: USB disconnect, device number 100
[ 2036.317396][ T4575] random: crng reseeded on system resumption
[ 2036.839813][ T4585] random: crng reseeded on system resumption
[ 2037.555733][   T24] usb 6-1: USB disconnect, device number 44
[ 2037.653312][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.660073][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2038.150902][  T984] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 2038.241493][ T4602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8242'.
[ 2038.330799][  T984] usb 5-1: device descriptor read/64, error -71
[ 2038.630722][  T984] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 2038.657577][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 2038.657594][   T30] audit: type=1326 audit(1760623398.598:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2038.852719][   T30] audit: type=1326 audit(1760623398.598:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2038.945895][  T984] usb 5-1: device descriptor read/64, error -71
[ 2039.044794][   T30] audit: type=1326 audit(1760623398.598:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2039.071536][  T984] usb usb5-port1: attempt power cycle
[ 2039.092838][   T30] audit: type=1326 audit(1760623398.598:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2039.135876][   T30] audit: type=1326 audit(1760623398.598:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2039.173224][   T30] audit: type=1326 audit(1760623398.598:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2039.320844][   T30] audit: type=1326 audit(1760623398.628:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2039.537915][   T30] audit: type=1326 audit(1760623398.628:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2039.598855][  T984] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 2039.616886][   T30] audit: type=1326 audit(1760623398.628:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2039.670456][  T984] usb 5-1: device descriptor read/8, error -71
[ 2039.690412][   T30] audit: type=1326 audit(1760623398.628:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.6.8244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2040.024903][  T984] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 2040.081148][  T984] usb 5-1: device descriptor read/8, error -71
[ 2040.196423][  T984] usb usb5-port1: unable to enumerate USB device
[ 2040.528363][ T4629] xt_CT: No such helper "pptp"
[ 2041.101006][    T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[ 2041.299630][    T9] usb 4-1: config 0 has no interfaces?
[ 2041.308584][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2041.343268][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2041.370360][    T9] usb 4-1: config 0 descriptor??
[ 2041.430912][T32090] usb 7-1: new high-speed USB device number 103 using dummy_hcd
[ 2041.496988][ T4658] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 2041.564009][ T4660] random: crng reseeded on system resumption
[ 2041.680864][T32090] usb 7-1: Using ep0 maxpacket: 32
[ 2041.708217][T32090] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[ 2041.717466][T32090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2041.816010][ T4667] trusted_key: encrypted_key: insufficient parameters specified
[ 2041.829252][T32090] usb 7-1: config 0 descriptor??
[ 2041.829684][ T4667] bond0: Caught tx_queue_len zero misconfig
[ 2041.898094][T32090] gspca_main: nw80x-2.14.0 probing 055f:d001
[ 2042.444417][T32090] gspca_nw80x: reg_w err -110
[ 2042.449328][T32090] nw80x 7-1:0.0: probe with driver nw80x failed with error -110
[ 2042.844119][ T4677] ip6tnl0: Caught tx_queue_len zero misconfig
[ 2042.902264][ T4679] SET target dimension over the limit!
[ 2043.589917][ T4700] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8266'.
[ 2043.649731][  T984] usb 4-1: USB disconnect, device number 101
[ 2043.790865][T32090] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 2044.034025][T32090] usb 6-1: Using ep0 maxpacket: 32
[ 2044.059480][T32090] usb 6-1: config index 0 descriptor too short (expected 195, got 137)
[ 2044.068099][T32090] usb 6-1: config 0 has an invalid interface number: 20 but max is 0
[ 2044.081653][T32090] usb 6-1: config 0 has an invalid descriptor of length 70, skipping remainder of the config
[ 2044.092492][T32090] usb 6-1: config 0 has no interface number 0
[ 2044.102189][T32090] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[ 2044.121342][T32090] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x5 has an invalid bInterval 89, changing to 10
[ 2044.147595][T32090] usb 6-1: config 0 interface 20 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 2044.180375][T32090] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x8A has invalid maxpacket 1023, setting to 64
[ 2044.192353][T32090] usb 6-1: config 0 interface 20 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8
[ 2044.234225][T32090] usb 6-1: New USB device found, idVendor=22b8, idProduct=4281, bcdDevice=f0.2f
[ 2044.272300][T32090] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2044.321052][T32090] usb 6-1: config 0 descriptor??
[ 2044.540714][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 2044.558994][T32090] usb 6-1: string descriptor 0 read error: -71
[ 2044.602242][T32090] option 6-1:0.20: GSM modem (1-port) converter detected
[ 2044.627338][ T5920] usb 7-1: USB disconnect, device number 103
[ 2044.682198][T32090] usb 6-1: USB disconnect, device number 45
[ 2044.704099][    T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2044.715567][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2044.716886][T32090] option 6-1:0.20: device disconnected
[ 2044.863671][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00
[ 2044.883328][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2044.934885][    T9] usb 2-1: config 0 descriptor??
[ 2045.041892][   T30] kauditd_printk_skb: 13 callbacks suppressed
[ 2045.041910][   T30] audit: type=1326 audit(1760623404.968:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2045.097962][   T30] audit: type=1326 audit(1760623404.968:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2045.188829][   T30] audit: type=1326 audit(1760623404.968:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2045.227350][   T30] audit: type=1326 audit(1760623404.968:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2045.284397][   T30] audit: type=1326 audit(1760623404.968:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac9f38d710 code=0x7ffc0000
[ 2045.313916][   T30] audit: type=1326 audit(1760623404.968:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2045.337217][   T30] audit: type=1326 audit(1760623404.968:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac9f38d710 code=0x7ffc0000
[ 2045.366894][   T30] audit: type=1326 audit(1760623404.968:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2045.425780][    T9] hid_parser_main: 7 callbacks suppressed
[ 2045.425803][    T9] logitech 0003:046D:C623.008B: unknown main item tag 0x0
[ 2045.456564][   T30] audit: type=1326 audit(1760623404.968:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2045.487223][    T9] logitech 0003:046D:C623.008B: unknown main item tag 0x0
[ 2045.497982][    T9] logitech 0003:046D:C623.008B: unknown main item tag 0x0
[ 2045.505813][    T9] logitech 0003:046D:C623.008B: unknown main item tag 0x0
[ 2045.619022][   T30] audit: type=1326 audit(1760623404.968:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.6.8271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac9f38eec9 code=0x7ffc0000
[ 2045.655073][    T9] logitech 0003:046D:C623.008B: unknown main item tag 0x0
[ 2045.674455][    T9] logitech 0003:046D:C623.008B: hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.1-1/input0
[ 2046.352942][    T9] usb 2-1: USB disconnect, device number 8
[ 2046.440672][ T4748] random: crng reseeded on system resumption
[ 2046.620714][ T5920] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 2046.677891][ T4739] fido_id[4739]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 2046.783947][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 2046.794134][ T5920] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 2046.806991][ T5920] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 2046.816614][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2046.830801][ T5920] usb 6-1: Product: syz
[ 2046.841769][ T5920] usb 6-1: Manufacturer: syz
[ 2046.846407][ T5920] usb 6-1: SerialNumber: syz
[ 2046.957822][ T5920] usb 6-1: config 0 descriptor??
[ 2046.975745][ T4742] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2046.983409][ T4742] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2047.246929][ T4742] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2047.263731][ T4742] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2047.693808][ T5920] Error reading MAC address
[ 2048.661776][ T4776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8284'.
[ 2048.909643][ T5920] usb 6-1: USB disconnect, device number 46
[ 2049.510976][  T984] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 2049.543149][T32090] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 2049.701402][T32090] usb 5-1: Using ep0 maxpacket: 8
[ 2049.716492][T32090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2049.728732][T32090] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 2049.741600][  T984] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 2049.751007][  T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2049.758995][  T984] usb 6-1: Product: syz
[ 2049.777012][T32090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2049.785341][  T984] usb 6-1: Manufacturer: syz
[ 2049.789954][  T984] usb 6-1: SerialNumber: syz
[ 2049.811632][ T4812] random: crng reseeded on system resumption
[ 2049.885267][T32090] usb 5-1: config 0 descriptor??
[ 2049.896352][  T984] usb 6-1: config 0 descriptor??
[ 2049.922825][T32090] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 2050.187529][T32090] gspca_vc032x: reg_r err -32
[ 2050.193921][T32090] vc032x 5-1:0.0: probe with driver vc032x failed with error -32
[ 2050.327065][  T984] usb 6-1: Firmware version (0.0) predates our first public release.
[ 2050.335518][  T984] usb 6-1: Please update to version 0.2 or newer
[ 2050.539161][ T4821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2050.550000][ T4821] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2050.741676][T20113] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[ 2050.870838][T20113] usb 2-1: device descriptor read/64, error -71
[ 2051.212058][T20113] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[ 2051.350774][T20113] usb 2-1: device descriptor read/64, error -71
[ 2051.552500][T20113] usb usb2-port1: attempt power cycle
[ 2051.936909][T20113] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[ 2051.989482][T20113] usb 2-1: device descriptor read/8, error -71
[ 2052.159947][ T4844] mmap: syz.6.8300 (4844): VmData 37724160 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[ 2052.208215][ T4849] binder: BINDER_SET_CONTEXT_MGR already set
[ 2052.214628][ T4849] binder: 4846:4849 ioctl 4018620d 200000000040 returned -16
[ 2052.240842][T20113] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[ 2052.290854][ T5920] usb 6-1: USB disconnect, device number 47
[ 2052.301679][T20113] usb 2-1: device descriptor read/8, error -71
[ 2052.362191][  T984] usb 5-1: USB disconnect, device number 19
[ 2052.571379][T20113] usb usb2-port1: unable to enumerate USB device
[ 2052.668861][ T4860] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2053.003150][  T984] usb 7-1: new high-speed USB device number 104 using dummy_hcd
[ 2053.183395][  T984] usb 7-1: Using ep0 maxpacket: 8
[ 2053.211059][  T984] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2053.234161][  T984] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[ 2053.254143][  T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2053.271148][ T4868] FAULT_INJECTION: forcing a failure.
[ 2053.271148][ T4868] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2053.285366][  T984] usb 7-1: Product: syz
[ 2053.289560][  T984] usb 7-1: Manufacturer: syz
[ 2053.311601][ T4868] CPU: 0 UID: 0 PID: 4868 Comm: syz.1.8307 Not tainted syzkaller #0 PREEMPT(full) 
[ 2053.311626][ T4868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2053.311637][ T4868] Call Trace:
[ 2053.311645][ T4868]  <TASK>
[ 2053.311655][ T4868]  dump_stack_lvl+0x189/0x250
[ 2053.311681][ T4868]  ? __pfx____ratelimit+0x10/0x10
[ 2053.311707][ T4868]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2053.311723][ T4868]  ? __pfx__printk+0x10/0x10
[ 2053.311738][ T4868]  ? __might_fault+0xb0/0x130
[ 2053.311761][ T4868]  should_fail_ex+0x414/0x560
[ 2053.311786][ T4868]  _copy_from_user+0x2d/0xb0
[ 2053.311805][ T4868]  do_sock_getsockopt+0x17d/0x450
[ 2053.311829][ T4868]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2053.311849][ T4868]  ? do_syscall_64+0xa0/0xfa0
[ 2053.311872][ T4868]  __x64_sys_getsockopt+0x1a5/0x250
[ 2053.311893][ T4868]  ? do_syscall_64+0xa0/0xfa0
[ 2053.311915][ T4868]  ? do_syscall_64+0xa0/0xfa0
[ 2053.311931][ T4868]  do_syscall_64+0xfa/0xfa0
[ 2053.311943][ T4868]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2053.311957][ T4868]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2053.311971][ T4868]  ? clear_bhb_loop+0x60/0xb0
[ 2053.311987][ T4868]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2053.312001][ T4868] RIP: 0033:0x7fcd76b8eec9
[ 2053.312015][ T4868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2053.312028][ T4868] RSP: 002b:00007fcd77955038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 2053.312044][ T4868] RAX: ffffffffffffffda RBX: 00007fcd76de5fa0 RCX: 00007fcd76b8eec9
[ 2053.312054][ T4868] RDX: 0000000000000039 RSI: 0000000000000001 RDI: 0000000000000003
[ 2053.312063][ T4868] RBP: 00007fcd77955090 R08: 0000200000000200 R09: 0000000000000000
[ 2053.312073][ T4868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2053.312081][ T4868] R13: 00007fcd76de6038 R14: 00007fcd76de5fa0 R15: 00007fcd76f0fa28
[ 2053.312103][ T4868]  </TASK>
[ 2053.315610][  T984] usb 7-1: SerialNumber: syz
[ 2053.561506][  T984] usb 7-1: config 0 descriptor??
[ 2053.657838][  T984] gspca_main: stk014-2.14.0 probing 05e1:0893
[ 2053.694995][  T984] usb 7-1: selecting invalid altsetting 1
[ 2053.768467][  T984] gspca_stk014: init reg: 0x00
[ 2053.773705][  T984] stk014 7-1:0.0: probe with driver stk014 failed with error -5
[ 2053.785107][ T4879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8309'.
[ 2053.850471][ T4880] random: crng reseeded on system resumption
[ 2053.974417][ T4860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2054.004867][ T4860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2054.124850][ T5920] usb 7-1: USB disconnect, device number 104
[ 2054.996631][ T4899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8312'.
[ 2055.561114][  T984] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 2056.130731][  T984] usb 2-1: Using ep0 maxpacket: 8
[ 2056.137991][  T984] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 2056.165026][  T984] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2056.276563][  T984] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2056.510203][  T984] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 2056.582241][ T4906] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8315'.
[ 2056.631512][  T984] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2056.768669][  T984] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2056.864478][  T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2057.061404][ T5920] IPVS: starting estimator thread 0...
[ 2057.119069][ T4921] FAULT_INJECTION: forcing a failure.
[ 2057.119069][ T4921] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2057.134101][ T4921] CPU: 0 UID: 0 PID: 4921 Comm: syz.6.8319 Not tainted syzkaller #0 PREEMPT(full) 
[ 2057.134126][ T4921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2057.134138][ T4921] Call Trace:
[ 2057.134146][ T4921]  <TASK>
[ 2057.134155][ T4921]  dump_stack_lvl+0x189/0x250
[ 2057.134181][ T4921]  ? __pfx____ratelimit+0x10/0x10
[ 2057.134209][ T4921]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2057.134228][ T4921]  ? __pfx__printk+0x10/0x10
[ 2057.134247][ T4921]  ? __might_fault+0xb0/0x130
[ 2057.134276][ T4921]  should_fail_ex+0x414/0x560
[ 2057.134309][ T4921]  _copy_from_user+0x2d/0xb0
[ 2057.134334][ T4921]  sk_getsockopt+0x197/0x2530
[ 2057.134365][ T4921]  ? __pfx_sk_getsockopt+0x10/0x10
[ 2057.134389][ T4921]  ? do_syscall_64+0xa0/0xfa0
[ 2057.134417][ T4921]  ? __lock_acquire+0xab9/0xd20
[ 2057.134451][ T4921]  ? __might_fault+0xb0/0x130
[ 2057.134489][ T4921]  do_sock_getsockopt+0x237/0x450
[ 2057.134525][ T4921]  ? do_syscall_64+0xa0/0xfa0
[ 2057.134546][ T4921]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2057.134572][ T4921]  ? do_syscall_64+0xa0/0xfa0
[ 2057.134602][ T4921]  __x64_sys_getsockopt+0x1a5/0x250
[ 2057.134627][ T4921]  ? do_syscall_64+0xa0/0xfa0
[ 2057.134646][ T4921]  ? do_syscall_64+0xa0/0xfa0
[ 2057.134668][ T4921]  do_syscall_64+0xfa/0xfa0
[ 2057.134684][ T4921]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2057.134703][ T4921]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2057.134721][ T4921]  ? clear_bhb_loop+0x60/0xb0
[ 2057.134743][ T4921]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2057.134762][ T4921] RIP: 0033:0x7fac9f38eec9
[ 2057.134779][ T4921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2057.134794][ T4921] RSP: 002b:00007faca02c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 2057.134814][ T4921] RAX: ffffffffffffffda RBX: 00007fac9f5e5fa0 RCX: 00007fac9f38eec9
[ 2057.134828][ T4921] RDX: 0000000000000039 RSI: 0000000000000001 RDI: 0000000000000003
[ 2057.134840][ T4921] RBP: 00007faca02c1090 R08: 0000200000000200 R09: 0000000000000000
[ 2057.134852][ T4921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2057.134863][ T4921] R13: 00007fac9f5e6038 R14: 00007fac9f5e5fa0 R15: 00007fac9f70fa28
[ 2057.134894][ T4921]  </TASK>
[ 2057.150827][ T4917] IPVS: using max 49 ests per chain, 117600 per kthread
[ 2057.556745][  T984] usb 2-1: usb_control_msg returned -32
[ 2057.580797][  T984] usbtmc 2-1:16.0: can't read capabilities
[ 2058.310909][T32090] usb 5-1: new low-speed USB device number 20 using dummy_hcd
[ 2058.331316][ T4900] usbtmc 2-1:16.0: usb_control_msg returned -32
[ 2058.338025][ T4899] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8312'.
[ 2058.358984][ T4899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2058.374387][ T4899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2058.470774][T32090] usb 5-1: Invalid ep0 maxpacket: 16
[ 2058.611542][ T4935] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:16x16 (0x38415261, 3, 0, 0, 0)
[ 2058.627144][T32090] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[ 2059.468237][T32090] usb 5-1: Invalid ep0 maxpacket: 16
[ 2059.622838][T32090] usb usb5-port1: attempt power cycle
[ 2059.676778][  T984] usb 2-1: USB disconnect, device number 13
[ 2059.970898][T32090] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[ 2059.994556][T32090] usb 5-1: Invalid ep0 maxpacket: 16
[ 2060.096790][ T4954] FAULT_INJECTION: forcing a failure.
[ 2060.096790][ T4954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2060.122479][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: syz.5.8331 Not tainted syzkaller #0 PREEMPT(full) 
[ 2060.122505][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2060.122516][ T4954] Call Trace:
[ 2060.122524][ T4954]  <TASK>
[ 2060.122533][ T4954]  dump_stack_lvl+0x189/0x250
[ 2060.122558][ T4954]  ? __pfx____ratelimit+0x10/0x10
[ 2060.122585][ T4954]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2060.122603][ T4954]  ? __pfx__printk+0x10/0x10
[ 2060.122631][ T4954]  should_fail_ex+0x414/0x560
[ 2060.122663][ T4954]  _copy_to_user+0x31/0xb0
[ 2060.122688][ T4954]  simple_read_from_buffer+0xe1/0x170
[ 2060.122715][ T4954]  proc_fail_nth_read+0x1b3/0x220
[ 2060.122745][ T4954]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2060.122773][ T4954]  ? rw_verify_area+0x2a6/0x4d0
[ 2060.122792][ T4954]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2060.122819][ T4954]  vfs_read+0x200/0xa30
[ 2060.122843][ T4954]  ? __pfx_vfs_read+0x10/0x10
[ 2060.122867][ T4954]  ? do_sock_getsockopt+0x237/0x450
[ 2060.122891][ T4954]  ? do_syscall_64+0xa0/0xfa0
[ 2060.122911][ T4954]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 2060.122941][ T4954]  ksys_read+0x145/0x250
[ 2060.122962][ T4954]  ? __pfx_ksys_read+0x10/0x10
[ 2060.122983][ T4954]  ? do_syscall_64+0xbe/0xfa0
[ 2060.123004][ T4954]  do_syscall_64+0xfa/0xfa0
[ 2060.123020][ T4954]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2060.123037][ T4954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2060.123054][ T4954]  ? clear_bhb_loop+0x60/0xb0
[ 2060.123075][ T4954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2060.123091][ T4954] RIP: 0033:0x7f00f278d8dc
[ 2060.123108][ T4954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2060.123123][ T4954] RSP: 002b:00007f00f3630030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2060.123143][ T4954] RAX: ffffffffffffffda RBX: 00007f00f29e5fa0 RCX: 00007f00f278d8dc
[ 2060.123156][ T4954] RDX: 000000000000000f RSI: 00007f00f36300a0 RDI: 0000000000000004
[ 2060.123168][ T4954] RBP: 00007f00f3630090 R08: 0000000000000000 R09: 0000000000000000
[ 2060.123179][ T4954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2060.123199][ T4954] R13: 00007f00f29e6038 R14: 00007f00f29e5fa0 R15: 00007f00f2b0fa28
[ 2060.123229][ T4954]  </TASK>
[ 2060.141411][T32090] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[ 2060.411632][T32090] usb 5-1: Invalid ep0 maxpacket: 16
[ 2060.417285][T32090] usb usb5-port1: unable to enumerate USB device
[ 2060.450932][  T984] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 2060.620734][  T984] usb 2-1: Using ep0 maxpacket: 16
[ 2060.636300][  T984] usb 2-1: config 0 has no interfaces?
[ 2060.653741][  T984] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2060.670975][  T984] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2060.689178][  T984] usb 2-1: Manufacturer: syz
[ 2060.712869][  T984] usb 2-1: config 0 descriptor??
[ 2061.103293][ T4969] team0 (unregistering): Port device team_slave_0 removed
[ 2061.113783][ T4969] team0 (unregistering): Port device team_slave_1 removed
[ 2061.140912][ T4947] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2061.228097][ T4952] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 2061.269282][ T4977] ip6gretap1: entered allmulticast mode
[ 2061.440880][    T9] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[ 2061.591210][    T9] usb 4-1: device descriptor read/64, error -71
[ 2062.309746][ T4993] geneve2: entered allmulticast mode
[ 2062.337285][T28313] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0
[ 2062.340762][    T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[ 2062.384166][T28313] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0
[ 2062.427010][T28313] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0
[ 2062.437206][T28313] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0
[ 2062.531003][    T9] usb 4-1: device descriptor read/64, error -71
[ 2062.641349][    T9] usb usb4-port1: attempt power cycle
[ 2062.650727][  T984] usb 6-1: new low-speed USB device number 48 using dummy_hcd
[ 2062.800735][  T984] usb 6-1: device descriptor read/64, error -71
[ 2062.926266][T32090] usb 2-1: USB disconnect, device number 14
[ 2063.004055][    T9] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[ 2063.041124][  T984] usb 6-1: new low-speed USB device number 49 using dummy_hcd
[ 2063.060951][    T9] usb 4-1: device descriptor read/8, error -71
[ 2063.173118][  T984] usb 6-1: device descriptor read/64, error -71
[ 2063.262093][   T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 2063.294241][  T984] usb usb6-port1: attempt power cycle
[ 2063.301382][    T9] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[ 2063.322874][    T9] usb 4-1: device descriptor read/8, error -71
[ 2063.371021][ T5938] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 2063.420863][   T24] usb 5-1: Using ep0 maxpacket: 16
[ 2063.434382][   T24] usb 5-1: no configurations
[ 2063.434425][    T9] usb usb4-port1: unable to enumerate USB device
[ 2063.439007][   T24] usb 5-1: can't read configurations, error -22
[ 2063.602522][ T5938] usb 2-1: config 0 has an invalid descriptor of length 218, skipping remainder of the config
[ 2063.613043][ T5938] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[ 2063.624124][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 196
[ 2063.637704][ T5938] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[ 2063.641211][  T984] usb 6-1: new low-speed USB device number 50 using dummy_hcd
[ 2063.654571][   T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 2063.663123][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2063.677907][ T5938] usb 2-1: config 0 descriptor??
[ 2063.681654][  T984] usb 6-1: device descriptor read/8, error -71
[ 2063.810697][   T24] usb 5-1: Using ep0 maxpacket: 16
[ 2063.818253][   T24] usb 5-1: no configurations
[ 2063.823343][T20113] usb 7-1: new high-speed USB device number 105 using dummy_hcd
[ 2063.835644][   T24] usb 5-1: can't read configurations, error -22
[ 2063.845955][   T24] usb usb5-port1: attempt power cycle
[ 2063.897293][ T5014] xt_TCPMSS: Only works on TCP SYN packets
[ 2063.907911][ T5938] usb 2-1: string descriptor 0 read error: -71
[ 2063.919095][ T5938] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 2063.920885][  T984] usb 6-1: new low-speed USB device number 51 using dummy_hcd
[ 2063.970738][T20113] usb 7-1: device descriptor read/64, error -71
[ 2063.977966][  T984] usb 6-1: device descriptor read/8, error -71
[ 2063.988316][ T5938] usb 2-1: USB disconnect, device number 15
[ 2064.091929][  T984] usb usb6-port1: unable to enumerate USB device
[ 2064.210776][T20113] usb 7-1: new high-speed USB device number 106 using dummy_hcd
[ 2064.218548][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 2064.246353][   T24] usb 5-1: Using ep0 maxpacket: 16
[ 2064.252322][   T24] usb 5-1: no configurations
[ 2064.256977][   T24] usb 5-1: can't read configurations, error -22
[ 2064.350877][T20113] usb 7-1: device descriptor read/64, error -71
[ 2064.390728][   T24] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 2064.421306][   T24] usb 5-1: Using ep0 maxpacket: 16
[ 2064.427966][   T24] usb 5-1: no configurations
[ 2064.433823][   T24] usb 5-1: can't read configurations, error -22
[ 2064.440474][   T24] usb usb5-port1: unable to enumerate USB device
[ 2064.461119][T20113] usb usb7-port1: attempt power cycle
[ 2064.800946][T20113] usb 7-1: new high-speed USB device number 107 using dummy_hcd
[ 2064.824291][T20113] usb 7-1: device descriptor read/8, error -71
[ 2065.040818][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 2065.091080][T20113] usb 7-1: new high-speed USB device number 108 using dummy_hcd
[ 2065.125505][T20113] usb 7-1: device descriptor read/8, error -71
[ 2065.205790][   T24] usb 2-1: config index 0 descriptor too short (expected 28277, got 36)
[ 2065.241225][T20113] usb usb7-port1: unable to enumerate USB device
[ 2065.248960][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2065.276321][   T24] usb 2-1: config 0 has no interfaces?
[ 2065.282569][   T24] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 2065.292094][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2065.303553][   T24] usb 2-1: config 0 descriptor??
[ 2066.177341][ T5065] sctp: [Deprecated]: syz.5.8360 (pid 5065) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2066.177341][ T5065] Use struct sctp_sack_info instead
[ 2066.247756][ T5920] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 2066.640771][ T5920] usb 4-1: Using ep0 maxpacket: 16
[ 2066.704321][ T5920] usb 4-1: config 0 has no interfaces?
[ 2066.720064][ T5920] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2066.740732][ T5938] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 2066.803008][ T5920] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2066.826314][ T5920] usb 4-1: Manufacturer: syz
[ 2066.892608][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2066.919743][ T5920] usb 4-1: config 0 descriptor??
[ 2066.925279][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2066.939784][ T5938] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[ 2066.950314][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2066.965956][ T5938] usb 5-1: config 0 descriptor??
[ 2067.120749][  T984] usb 7-1: new high-speed USB device number 109 using dummy_hcd
[ 2067.178815][ T5938] usbhid 5-1:0.0: can't add hid device: -71
[ 2067.185606][ T5938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2067.213336][ T5054] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2067.252153][ T5938] usb 5-1: USB disconnect, device number 28
[ 2067.270999][  T984] usb 7-1: Using ep0 maxpacket: 8
[ 2067.280844][  T984] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 2067.302239][  T984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2067.351654][  T984] pvrusb2: Hardware description: Terratec Grabster AV400
[ 2067.372859][  T984] pvrusb2: **********
[ 2067.385589][  T984] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 2067.411948][  T984] pvrusb2: Important functionality might not be entirely working.
[ 2067.454608][  T984] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 2067.476012][  T984] pvrusb2: **********
[ 2067.553975][ T2344] pvrusb2: Invalid write control endpoint
[ 2067.592635][ T5938] usb 7-1: USB disconnect, device number 109
[ 2067.863893][ T2344] pvrusb2: Invalid write control endpoint
[ 2067.885406][    T9] usb 2-1: USB disconnect, device number 16
[ 2067.927591][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 2067.981508][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 2067.989649][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 2068.003174][ T2344] pvrusb2: Device being rendered inoperable
[ 2068.009571][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 2068.040966][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[ 2068.079652][ T2344] pvrusb2: Attached sub-driver cx25840
[ 2068.082703][   T24] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 2068.112672][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 2068.160855][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 2068.186650][ T5083] FAULT_INJECTION: forcing a failure.
[ 2068.186650][ T5083] name failslab, interval 1, probability 0, space 0, times 0
[ 2068.221960][ T5083] CPU: 1 UID: 0 PID: 5083 Comm: syz.1.8366 Not tainted syzkaller #0 PREEMPT(full) 
[ 2068.221985][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2068.221996][ T5083] Call Trace:
[ 2068.222003][ T5083]  <TASK>
[ 2068.222012][ T5083]  dump_stack_lvl+0x189/0x250
[ 2068.222036][ T5083]  ? __pfx____ratelimit+0x10/0x10
[ 2068.222062][ T5083]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2068.222080][ T5083]  ? __pfx__printk+0x10/0x10
[ 2068.222104][ T5083]  ? __pfx___might_resched+0x10/0x10
[ 2068.222130][ T5083]  should_fail_ex+0x414/0x560
[ 2068.222161][ T5083]  should_failslab+0xa8/0x100
[ 2068.222184][ T5083]  __kmalloc_noprof+0xcb/0x7f0
[ 2068.222202][ T5083]  ? kfree+0x4d/0x6d0
[ 2068.222216][ T5083]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 2068.222242][ T5083]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 2068.222263][ T5083]  ? tomoyo_domain+0xd9/0x130
[ 2068.222286][ T5083]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 2068.222310][ T5083]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 2068.222336][ T5083]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2068.222396][ T5083]  ? __fget_files+0x2a/0x420
[ 2068.222420][ T5083]  ? __fget_files+0x3a0/0x420
[ 2068.222439][ T5083]  ? __fget_files+0x2a/0x420
[ 2068.222463][ T5083]  security_file_ioctl+0xcb/0x2d0
[ 2068.222487][ T5083]  __se_sys_ioctl+0x47/0x170
[ 2068.222507][ T5083]  do_syscall_64+0xfa/0xfa0
[ 2068.222523][ T5083]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2068.222542][ T5083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2068.222560][ T5083]  ? clear_bhb_loop+0x60/0xb0
[ 2068.222582][ T5083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2068.222599][ T5083] RIP: 0033:0x7fcd76b8eec9
[ 2068.222617][ T5083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2068.222631][ T5083] RSP: 002b:00007fcd77955038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2068.222651][ T5083] RAX: ffffffffffffffda RBX: 00007fcd76de5fa0 RCX: 00007fcd76b8eec9
[ 2068.222664][ T5083] RDX: 0000200000000700 RSI: 000000004008ae89 RDI: 0000000000000008
[ 2068.222676][ T5083] RBP: 00007fcd77955090 R08: 0000000000000000 R09: 0000000000000000
[ 2068.222688][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2068.222699][ T5083] R13: 00007fcd76de6038 R14: 00007fcd76de5fa0 R15: 00007fcd76f0fa28
[ 2068.222734][ T5083]  </TASK>
[ 2068.240711][ T5083] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 2068.270804][   T24] usb 5-1: Using ep0 maxpacket: 32
[ 2068.510949][ T5938] usb 4-1: USB disconnect, device number 106
[ 2068.532614][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 52, changing to 7
[ 2068.544581][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 9272, setting to 1024
[ 2068.572512][   T24] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[ 2068.583070][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2068.591767][   T24] usb 5-1: Product: syz
[ 2068.596228][   T24] usb 5-1: Manufacturer: syz
[ 2068.601704][   T24] usb 5-1: SerialNumber: syz
[ 2068.621868][   T24] usb 5-1: config 0 descriptor??
[ 2068.635814][   T24] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input142
[ 2068.688001][   T24] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22
[ 2068.795028][   T24] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -22
[ 2068.835788][    T9] usb 5-1: USB disconnect, device number 29
[ 2069.041808][ T5938] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 2069.220785][ T5920] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 2069.231085][   T24] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 2069.251202][ T5938] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 2069.274908][ T5938] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 2069.304496][ T5938] usb 4-1: config 220 has no interface number 2
[ 2069.319476][ T5938] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 2069.352130][ T5938] usb 4-1: config 220 interface 0 has no altsetting 0
[ 2069.359140][ T5938] usb 4-1: config 220 interface 76 has no altsetting 0
[ 2069.370790][ T5920] usb 2-1: Using ep0 maxpacket: 16
[ 2069.377395][ T5938] usb 4-1: config 220 interface 1 has no altsetting 0
[ 2069.388723][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2069.413032][   T24] usb 6-1: Using ep0 maxpacket: 32
[ 2069.414177][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2069.433967][   T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2069.444078][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2069.455381][   T24] usb 6-1: config 0 descriptor??
[ 2069.500907][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2069.522017][ T5938] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 2069.558189][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2069.569152][ T5920] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[ 2069.600741][ T5938] usb 4-1: Product: syz
[ 2069.604954][ T5938] usb 4-1: Manufacturer: syz
[ 2069.624533][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2069.635971][ T5938] usb 4-1: SerialNumber: syz
[ 2069.664191][ T5920] usb 2-1: config 0 descriptor??
[ 2069.728214][   T24] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 2069.744868][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2069.765604][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 2069.800573][   T24] usb 6-1: media controller created
[ 2069.954223][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8374'.
[ 2070.037429][ T5938] usb 4-1: selecting invalid altsetting 0
[ 2070.045844][ T5938] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 2070.068259][ T5938] uvcvideo 4-1:220.0: No valid video chain found.
[ 2070.146907][ T5938] usb 4-1: selecting invalid altsetting 0
[ 2070.153056][ T5920] hid-multitouch 0003:0457:07DA.008C: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0
[ 2070.215556][ T5938] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 2070.255388][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2070.272240][ T5938] usb 4-1: USB disconnect, device number 107
[ 2070.290444][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2070.322970][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2070.498704][  T984] usb 2-1: USB disconnect, device number 17
[ 2070.674151][ T5118] fido_id[5118]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 2071.229874][   T24] DVB: Unable to find symbol dib7000p_attach()
[ 2071.275059][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 2071.575878][   T24] rc_core: IR keymap rc-dib0700-rc5 not found
[ 2071.588398][   T24] Registered IR keymap rc-empty
[ 2071.597147][   T24] dvb-usb: could not initialize remote control.
[ 2071.610844][   T24] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 2071.772736][ T5125] binder: 5119:5125 ioctl c0306201 200000000100 returned -11
[ 2071.792107][   T24] usb 6-1: USB disconnect, device number 52
[ 2071.973741][ T5136] fuse: Bad value for 'fd'
[ 2072.162000][   T24] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 2072.423629][T28388] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 2072.450762][ T5938] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 2072.605768][   T24] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 2072.620770][T28388] usb 4-1: Using ep0 maxpacket: 16
[ 2072.627856][ T5938] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2072.639032][T28388] usb 4-1: config 0 has an invalid interface number: 102 but max is 0
[ 2072.649717][T28388] usb 4-1: config 0 has no interface number 0
[ 2072.658151][ T5938] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2072.670333][T28388] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10
[ 2072.680093][T28388] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2072.688766][ T5938] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2072.698188][T28388] usb 4-1: Product: syz
[ 2072.702595][T28388] usb 4-1: Manufacturer: syz
[ 2072.707867][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2072.716487][T28388] usb 4-1: SerialNumber: syz
[ 2072.732786][T28388] usb 4-1: config 0 descriptor??
[ 2072.741353][ T5153] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 2072.754192][ T5938] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 2072.765321][T28388] usb-storage 4-1:0.102: USB Mass Storage device detected
[ 2072.782591][   T24] usb 6-1: Using ep0 maxpacket: 16
[ 2072.787701][T28388] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000
[ 2072.795635][   T24] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[ 2072.795663][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2072.795681][   T24] usb 6-1: Product: syz
[ 2072.795696][   T24] usb 6-1: Manufacturer: syz
[ 2072.795709][   T24] usb 6-1: SerialNumber: syz
[ 2073.228407][T28388] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller)
[ 2073.228407][T28388]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 2073.351237][ T5175] blktrace: Concurrent blktraces are not allowed on sg0
[ 2073.469392][   T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 2073.602397][ T5177] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 2073.699667][   T24] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -2
[ 2073.840887][T29134] udevd[29134]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2074.015287][T28388] usb 6-1: USB disconnect, device number 53
[ 2074.882571][ T5192] loop9: detected capacity change from 0 to 7
[ 2074.894909][ T5193] buffer_io_error: 9 callbacks suppressed
[ 2074.894921][ T5193] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2074.935688][ T5194] random: crng reseeded on system resumption
[ 2075.019055][T29238] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2075.028773][T29238] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2075.040479][T29238] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2075.056069][T29238] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2075.076656][T29238] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2075.098840][T28388] usb 5-1: USB disconnect, device number 30
[ 2075.220821][T29238] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2075.250016][ T5193] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2075.414245][T29238] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2075.452726][ T5201] Buffer I/O error on dev loop9, logical block 0, async page read
[ 2075.637789][T29238] ldm_validate_partition_table(): Disk read failed.
[ 2075.713685][T29238] Dev loop9: unable to read RDB block 0
[ 2075.761097][T29238]  loop9: unable to read partition table
[ 2075.915334][T29238] loop9: partition table beyond EOD, truncated
[ 2076.250792][T28388] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 2076.430819][T28388] usb 2-1: Using ep0 maxpacket: 32
[ 2076.451758][T28388] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[ 2076.473850][T28388] usb 2-1: config 0 has no interface number 0
[ 2076.510918][T28388] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2076.539106][   T24] usb 4-1: USB disconnect, device number 108
[ 2076.548797][T28388] usb 2-1: config 0 interface 85 has no altsetting 0
[ 2076.578863][T28388] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2076.599567][T28388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2076.619011][T28388] usb 2-1: Product: syz
[ 2076.629183][T28388] usb 2-1: Manufacturer: syz
[ 2076.639640][T28388] usb 2-1: SerialNumber: syz
[ 2076.672370][T28388] usb 2-1: config 0 descriptor??
[ 2076.681329][ T5920] usb 7-1: new high-speed USB device number 110 using dummy_hcd
[ 2076.910744][ T5920] usb 7-1: Using ep0 maxpacket: 8
[ 2076.926792][ T5920] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2076.949825][ T5920] usb 7-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00
[ 2076.961930][ T5212] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8390'.
[ 2076.986810][ T5223] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8393'.
[ 2076.995883][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2077.044520][ T5920] usb 7-1: config 0 descriptor??
[ 2077.304234][ T5223] erspan0: left promiscuous mode
[ 2077.309645][ T5223] erspan0: left allmulticast mode
[ 2077.347923][T28388] appletouch 2-1:0.85: Geyser mode initialized.
[ 2077.376870][ T5920] lenovo 0003:17EF:61AE.008D: hidraw0: USB HID vff.ff Device [HID 17ef:61ae] on usb-dummy_hcd.6-1/input0
[ 2077.396323][T28388] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input144
[ 2077.616659][   T24] usb 7-1: USB disconnect, device number 110
[ 2077.654254][ T5920] usb 2-1: USB disconnect, device number 18
[ 2077.727917][ T5233] fido_id[5233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 2077.799314][ T5920] appletouch 2-1:0.85: input: appletouch disconnected
[ 2077.838570][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2077.846050][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2078.342554][ T5223] batadv0: left promiscuous mode
[ 2078.506909][ T5249] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2078.514260][ T5249] IPv6: NLM_F_CREATE should be set when creating new route
[ 2078.780705][    T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 2079.069854][    T9] usb 2-1: config 0 has no interfaces?
[ 2079.069894][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2079.069919][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2079.102741][    T9] usb 2-1: config 0 descriptor??
[ 2079.325632][ T5223] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[ 2079.481428][ T5223] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[ 2079.535334][ T5223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2079.586270][ T5223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2079.987160][ T5270] random: crng reseeded on system resumption
[ 2080.447802][ T5281] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 2080.610729][ T5281] usb 5-1: Using ep0 maxpacket: 32
[ 2080.617750][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2080.630826][ T5281] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2080.640046][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2080.648928][ T5281] usb 5-1: Product: syz
[ 2080.665106][ T5281] usb 5-1: Manufacturer: syz
[ 2080.674319][ T5281] usb 5-1: SerialNumber: syz
[ 2080.700533][ T5281] usb 5-1: config 0 descriptor??
[ 2080.727774][ T5281] smsc95xx v2.0.0
[ 2080.731923][ T5281] smsc95xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 2080.756477][ T5281] smsc95xx 5-1:0.0: probe with driver smsc95xx failed with error -22
[ 2080.819328][ T5223] macvtap1: left promiscuous mode
[ 2080.877638][ T5223] ip6erspan0: left allmulticast mode
[ 2080.892397][ T5223] hsr1: left allmulticast mode
[ 2080.906415][ T5223] macvlan0: left allmulticast mode
[ 2080.913802][ T5223] bond0: left allmulticast mode
[ 2080.959919][ T5223] bond_slave_0: left allmulticast mode
[ 2081.064054][ T5223] bond_slave_1: left allmulticast mode
[ 2081.113519][ T5223] ip6gretap1: left allmulticast mode
[ 2081.246129][ T5288] loop9: detected capacity change from 0 to 7
[ 2081.318274][  T981] usb 5-1: USB disconnect, device number 31
[ 2081.327910][ T5288] Dev loop9: unable to read RDB block 7
[ 2081.370566][ T5288]  loop9: unable to read partition table
[ 2081.431152][ T5288] loop9: partition table beyond EOD, truncated
[ 2081.451321][T28313] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2081.460247][T28313] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2081.470426][ T5288] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 2081.493617][T28313] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2081.523302][T28313] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 2081.761837][  T981] usb 2-1: USB disconnect, device number 19
[ 2082.320911][T32090] usb 7-1: new high-speed USB device number 111 using dummy_hcd
[ 2082.462733][ T5309] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2082.481138][T32090] usb 7-1: Using ep0 maxpacket: 16
[ 2082.489012][T32090] usb 7-1: config 0 has no interfaces?
[ 2082.499083][T32090] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2082.509507][T32090] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2082.520569][T32090] usb 7-1: Manufacturer: syz
[ 2083.027115][T32090] usb 7-1: config 0 descriptor??
[ 2083.359597][ T5292] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2083.481039][ T5292] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 2083.674665][ T5319] loop6: detected capacity change from 0 to 7
[ 2083.702304][ T5319] Dev loop6: unable to read RDB block 7
[ 2083.703292][ T5938] usb 6-1: new full-speed USB device number 54 using dummy_hcd
[ 2083.725660][ T5319]  loop6: unable to read partition table
[ 2083.744003][ T5319] loop6: partition table beyond EOD, truncated
[ 2083.821266][ T5319] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 2083.840720][ T5938] usb 6-1: device descriptor read/64, error -71
[ 2084.004796][ T5329] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode
[ 2084.026120][ T5329] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode
[ 2084.042884][ T5329] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 2084.054033][ T5329] syzkaller0: mtu less than device minimum
[ 2084.101245][ T5938] usb 6-1: new full-speed USB device number 55 using dummy_hcd
[ 2084.151566][ T5281] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[ 2084.230836][ T5938] usb 6-1: device descriptor read/64, error -71
[ 2084.392805][ T5938] usb usb6-port1: attempt power cycle
[ 2084.423232][ T5281] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2084.433485][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2084.448927][ T5281] usb 2-1: Product: syz
[ 2084.453741][ T5281] usb 2-1: Manufacturer: syz
[ 2084.458561][ T5281] usb 2-1: SerialNumber: syz
[ 2084.472743][ T5281] usb 2-1: config 0 descriptor??
[ 2084.630736][ T5278] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 2084.688403][ T5281] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2084.750789][ T5938] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[ 2084.782430][ T5938] usb 6-1: device descriptor read/8, error -71
[ 2084.795536][ T5278] usb 5-1: config 0 has no interfaces?
[ 2084.804439][ T5278] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2084.815140][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2084.841068][ T5278] usb 5-1: config 0 descriptor??
[ 2085.031258][ T5938] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[ 2085.063539][ T5342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8417'.
[ 2085.063561][ T5938] usb 6-1: device descriptor read/8, error -71
[ 2085.110876][ T5342] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8417'.
[ 2085.231088][ T5938] usb usb6-port1: unable to enumerate USB device
[ 2085.410760][  T984] usb 4-1: new full-speed USB device number 109 using dummy_hcd
[ 2085.482478][ T5264] usb 7-1: USB disconnect, device number 111
[ 2085.573451][  T984] usb 4-1: config index 0 descriptor too short (expected 2075, got 27)
[ 2085.589386][  T984] usb 4-1: config 0 has an invalid interface number: 200 but max is 0
[ 2085.619624][  T984] usb 4-1: config 0 has no interface number 0
[ 2085.638282][  T984] usb 4-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0
[ 2085.649820][  T984] usb 4-1: config 0 interface 200 has no altsetting 0
[ 2085.659683][  T984] usb 4-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39
[ 2085.669085][  T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2085.677388][  T984] usb 4-1: Product: syz
[ 2085.682428][  T984] usb 4-1: Manufacturer: syz
[ 2085.687357][  T984] usb 4-1: SerialNumber: syz
[ 2085.695950][  T984] usb 4-1: config 0 descriptor??
[ 2085.708451][ T5323] trusted_key: encrypted_key: insufficient parameters specified
[ 2085.725407][ T5281] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 2085.780568][ T5281] usb 2-1: USB disconnect, device number 20
[ 2086.060917][ T5264] usb 7-1: new high-speed USB device number 112 using dummy_hcd
[ 2086.223306][ T5264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2086.249511][ T5264] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2086.250200][ T5351] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2086.285747][ T5264] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2086.322742][  T984] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.200/input/input146
[ 2086.342380][ T5264] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2086.360247][ T5264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2086.376971][  T984] usb 4-1: USB disconnect, device number 109
[ 2086.422286][ T5264] usb 7-1: config 0 descriptor??
[ 2086.467055][ T5357] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001
[ 2086.836437][ T5346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2086.857551][ T5346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2086.956948][ T5264] usbhid 7-1:0.0: can't add hid device: -71
[ 2086.971525][ T5264] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2087.024460][ T5368] tipc: Invalid UDP bearer configuration
[ 2087.026495][ T5368] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 2087.043556][ T5264] usb 7-1: USB disconnect, device number 112
[ 2087.253407][ T5938] usb 5-1: USB disconnect, device number 32
[ 2087.623476][ T5938] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 2087.802343][ T5938] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2087.812628][ T5938] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2087.830741][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2087.847552][ T5938] usb 5-1: config 0 descriptor??
[ 2087.887759][ T5938] pwc: Askey VC010 type 2 USB webcam detected.
[ 2088.087041][ T5375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2088.121390][ T5375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2088.491914][ T5938] pwc: recv_control_msg error -32 req 02 val 2b00
[ 2088.593926][ T5938] pwc: recv_control_msg error -32 req 02 val 2700
[ 2088.613488][ T5938] pwc: recv_control_msg error -32 req 02 val 2c00
[ 2088.623527][ T5938] pwc: recv_control_msg error -32 req 04 val 1000
[ 2088.751271][ T5938] pwc: recv_control_msg error -32 req 04 val 1300
[ 2088.823408][ T5938] pwc: recv_control_msg error -32 req 04 val 1400
[ 2088.875082][ T5400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8427'.
[ 2088.885264][ T5400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2088.894000][ T5400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2089.105913][ T5938] pwc: recv_control_msg error -71 req 02 val 2100
[ 2089.113364][ T5938] pwc: recv_control_msg error -71 req 04 val 1500
[ 2089.120107][ T5938] pwc: recv_control_msg error -71 req 02 val 2500
[ 2089.137360][ T5938] pwc: recv_control_msg error -71 req 02 val 2400
[ 2089.154931][ T5938] pwc: recv_control_msg error -71 req 02 val 2600
[ 2089.170816][ T5938] pwc: recv_control_msg error -71 req 02 val 2900
[ 2089.188427][ T5938] pwc: recv_control_msg error -71 req 02 val 2800
[ 2089.208865][ T5938] pwc: recv_control_msg error -71 req 04 val 1100
[ 2089.231158][ T5938] pwc: recv_control_msg error -71 req 04 val 1200
[ 2089.249951][ T5938] pwc: Registered as video103.
[ 2089.270903][ T5938] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input148
[ 2089.411756][ T5938] usb 5-1: USB disconnect, device number 33
[ 2089.613110][ T5281] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 2089.703098][T29134] udevd[29134]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[ 2089.833641][ T5281] usb 6-1: config 0 has no interfaces?
[ 2089.850908][ T5281] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2089.914943][ T5281] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2089.947468][ T5281] usb 6-1: config 0 descriptor??
[ 2089.989853][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8438'.
[ 2090.283394][ T5431] fuse: Unknown parameter 'use00000000000000000000'
[ 2090.951395][ T5428] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20000
[ 2093.524542][ T5938] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 2093.886521][ T5938] usb 2-1: config index 0 descriptor too short (expected 36803, got 77)
[ 2093.947706][ T5938] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2094.110789][ T5938] usb 2-1: config 0 has no interfaces?
[ 2094.130896][ T5938] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2094.144272][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2094.160743][ T5938] usb 2-1: Product: syz
[ 2094.160766][ T5938] usb 2-1: Manufacturer: syz
[ 2094.160782][ T5938] usb 2-1: SerialNumber: syz
[ 2094.224773][ T5938] usb 2-1: config 0 descriptor??
[ 2094.243662][ T5425] delete_channel: no stack
[ 2094.382272][ T5281] usb 6-1: USB disconnect, device number 58
[ 2094.535298][  T984] usb 2-1: USB disconnect, device number 21
[ 2094.681235][ T5938] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 2094.840748][ T5938] usb 5-1: Using ep0 maxpacket: 8
[ 2094.863579][ T5938] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 2094.873506][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2094.919498][  T984] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 2094.937301][ T5938] usb 5-1: Product: syz
[ 2094.950317][ T5938] usb 5-1: Manufacturer: syz
[ 2095.025825][ T5938] usb 5-1: SerialNumber: syz
[ 2095.182081][ T5938] usb 5-1: config 0 descriptor??
[ 2095.199362][  T984] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2095.211440][  T984] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[ 2095.307201][  T984] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2095.349507][  T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2095.366601][  T984] usb 2-1: Product: syz
[ 2095.373284][  T984] usb 2-1: Manufacturer: syz
[ 2095.377933][  T984] usb 2-1: SerialNumber: syz
[ 2095.407842][ T5938] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 2095.632667][ T5478] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 2095.642190][ T5488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8454'.
[ 2095.652971][  T984] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[ 2095.659054][  T984] cdc_ncm 2-1:1.0: bind() failure
[ 2095.681156][  T984] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 2095.688014][  T984] cdc_ncm 2-1:1.1: bind() failure
[ 2095.746898][ T5264] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 2095.941481][ T5264] usb 6-1: Using ep0 maxpacket: 8
[ 2095.948500][ T5264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 2095.959720][ T5264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 2095.974986][ T5264] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 2095.991668][ T5264] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=53.c8
[ 2096.001100][ T5264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2096.009298][ T5264] usb 6-1: Product: syz
[ 2096.012313][ T5472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2096.022575][ T5264] usb 6-1: Manufacturer: syz
[ 2096.023547][ T5472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2096.028530][ T5264] usb 6-1: SerialNumber: syz
[ 2096.206644][ T5938] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 2096.217449][ T5478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2096.226642][ T5264] usb 6-1: config 0 descriptor??
[ 2096.231941][  T984] usb 7-1: new high-speed USB device number 114 using dummy_hcd
[ 2096.233486][ T5938] usb 5-1: USB disconnect, device number 34
[ 2096.250008][ T5478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2096.272673][ T5264] ati_remote 6-1:0.0: ati_remote_probe: Unexpected endpoint_in
[ 2096.328371][ T5264] usb 2-1: USB disconnect, device number 22
[ 2096.390881][  T984] usb 7-1: Using ep0 maxpacket: 8
[ 2096.399789][  T984] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21
[ 2096.425177][  T984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2096.493381][  T984] usb 7-1: Product: syz
[ 2096.495432][ T5484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2096.516818][  T984] usb 7-1: Manufacturer: syz
[ 2096.525466][  T984] usb 7-1: SerialNumber: syz
[ 2096.529318][ T5484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2096.551848][  T984] usb 7-1: config 0 descriptor??
[ 2096.558386][ T5938] usb 6-1: USB disconnect, device number 59
[ 2096.635697][  T984] usb_ehset_test 7-1:0.0: probe with driver usb_ehset_test failed with error -32
[ 2097.200822][  T984] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[ 2097.361988][  T984] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 132, changing to 11
[ 2097.374084][  T984] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2097.380908][  T984] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[ 2097.390455][  T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2097.408109][  T984] usb 5-1: config 0 descriptor??
[ 2098.559470][  T984] usbhid 5-1:0.0: can't add hid device: -71
[ 2098.568559][  T984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2098.601749][  T984] usb 5-1: USB disconnect, device number 35
[ 2098.936834][ T5259] usb 7-1: USB disconnect, device number 114
[ 2099.086675][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.094526][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2099.130744][ T5264] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 2099.642683][ T5264] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2099.779832][ T5264] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2099.826301][ T5264] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2099.836483][ T5264] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2099.851620][ T5264] usb 4-1: Product: syz
[ 2099.855912][ T5264] usb 4-1: Manufacturer: syz
[ 2099.887145][ T5264] usb 4-1: SerialNumber: syz
[ 2099.902538][ T5264] usb 4-1: config 0 descriptor??
[ 2099.955756][ T5264] usb 4-1: selecting invalid altsetting 0
[ 2100.204309][ T5556] loop6: detected capacity change from 0 to 7
[ 2100.215166][ T5556] Dev loop6: unable to read RDB block 7
[ 2100.220922][ T5556]  loop6: unable to read partition table
[ 2100.228429][ T5556] loop6: partition table beyond EOD, truncated
[ 2100.296847][ T5278] usb 4-1: USB disconnect, device number 111
[ 2100.301815][ T5556] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 2101.374857][ T5278] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 2101.416614][ T5580] program syz.5.8479 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2101.546692][ T5278] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 132, changing to 11
[ 2101.558008][ T5278] usb 5-1: config 0 interface 0 has no altsetting 0
[ 2101.648758][ T5278] usb 5-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[ 2101.691736][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2101.697460][ T5260] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 2101.708765][ T5278] usb 5-1: config 0 descriptor??
[ 2101.983089][ T5260] usb 6-1: Using ep0 maxpacket: 8
[ 2102.003343][ T5260] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[ 2102.024047][ T5260] usb 6-1: config 0 has no interface number 0
[ 2102.036527][ T5260] usb 6-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[ 2102.068120][ T5260] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2102.078281][ T5260] usb 6-1: Product: syz
[ 2102.100776][ T5260] usb 6-1: Manufacturer: syz
[ 2102.105420][ T5260] usb 6-1: SerialNumber: syz
[ 2102.147322][ T5260] usb 6-1: config 0 descriptor??
[ 2102.195698][ T5260] redrat3 6-1:0.31: Couldn't find all endpoints
[ 2102.395555][ T5938] usb 6-1: USB disconnect, device number 60
[ 2102.642316][ T5595] loop6: detected capacity change from 0 to 7
[ 2102.652565][T29238] Dev loop6: unable to read RDB block 7
[ 2102.658243][T29238]  loop6: unable to read partition table
[ 2102.664920][T29238] loop6: partition table beyond EOD, truncated
[ 2102.677532][ T5595] Dev loop6: unable to read RDB block 7
[ 2102.683692][ T5595]  loop6: unable to read partition table
[ 2102.703111][ T5278] usbhid 5-1:0.0: can't add hid device: -71
[ 2102.715001][ T5278] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 2102.731058][ T5595] loop6: partition table beyond EOD, truncated
[ 2102.741613][ T5278] usb 5-1: USB disconnect, device number 36
[ 2102.746385][ T5595] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 2102.810910][ T5259] usb 7-1: new full-speed USB device number 115 using dummy_hcd
[ 2103.279091][ T5259] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 2103.287983][ T5259] usb 7-1: not running at top speed; connect to a high speed hub
[ 2103.321916][ T5259] usb 7-1: config 2 has an invalid interface number: 212 but max is 1
[ 2103.330391][ T5259] usb 7-1: config 2 has an invalid interface number: 226 but max is 1
[ 2103.339071][ T5259] usb 7-1: config 2 has no interface number 0
[ 2103.345891][ T5259] usb 7-1: config 2 has no interface number 1
[ 2103.354978][ T5259] usb 7-1: config 2 interface 212 altsetting 9 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 2103.366360][ T5259] usb 7-1: config 2 interface 226 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[ 2103.377817][ T5259] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x85 has invalid maxpacket 37745, setting to 64
[ 2103.564454][ T5259] usb 7-1: config 2 interface 226 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 2103.584168][ T5259] usb 7-1: config 2 interface 226 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2103.619401][ T5259] usb 7-1: config 2 interface 212 has no altsetting 0
[ 2103.638452][ T5259] usb 7-1: New USB device found, idVendor=0738, idProduct=4540, bcdDevice=c6.ce
[ 2103.648772][ T5259] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2103.768879][ T5259] usb 7-1: Product: 뭆欽踚飔ᐛ髉꟢豲⤢㯒ꉖ透唝Ԗ厺鯃⺫谍㹁왑夵꿏붆뫧茥藈켅뾎씽뗶‘᎔䝬഼꾍뇆
[ 2103.811887][ T5259] usb 7-1: Manufacturer: 뜙섷亐柼誛ῃ⿵糒꜇㚅줙뇘ᡞࣉ棣ᷦ꓎䋓燎후ኾ㓏賎ੴ毅턡婜Ͱꁙצּ끒틧攴腧㲓퇍黉붤ꘃ삊䙊ﴗ鏶⵲Ⱞ鼒ᩭ訓꽊Ԙ᮵틑棑泥쵡㶀乳哳ẝ쵊⍠ዢ쮦쇦촒聰⢍␷ᬗ⥍캯ࣘ랰跺븺웘ꁙ溴”僔ↄ캇誯鐡袠䮀ꭈ宬샠駸澅棺퍨茪蠾凔㙇剸ᛟⲅ㘧ྼ丗旀竢
[ 2103.912367][ T5259] usb 7-1: SerialNumber: ⼒㱀鑀넧涌굀䯏뇸簱蔋颞쯅靖ឫј⥺愈렴鯖훴ᖓꎃ谻檿﫧ﶣ巋۷몺숀ሐ㒠⫄㳍豬ᷫ뜎䜟蓊⅞횊﹆⿵앐潛陿ꧥ쟙㲢훵籈쑏颬ᱴ㻘玩ᆑ力䵩ᑫ䮹佞枆ャ晧㫿讇꣑䆃北䭱䈵䤭럃⮯ঝꉴ白ဵ뜯饜桰᪛㌏弌䣄
[ 2104.257237][ T5593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2104.266428][ T5593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2104.442335][ T5259] input: Mad Catz Beat Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:2.226/input/input149
[ 2104.546390][    C0] xpad 7-1:2.226: xpad_irq_in - usb_submit_urb failed with result -1
[ 2104.593960][ T5259] usb 7-1: USB disconnect, device number 115
[ 2104.594017][    C0] xpad 7-1:2.226: xpad_irq_in - usb_submit_urb failed with result -19
[ 2104.680230][ T5628] CUSE: DEVNAME unspecified
[ 2104.956535][ T5636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8493'.
[ 2105.400323][ T5651] binder: 5642:5651 ioctl c0306201 200000000100 returned -11
[ 2105.410102][ T5651] fuse: Bad value for 'fd'
[ 2105.447511][ T5264] usb 7-1: new high-speed USB device number 116 using dummy_hcd
[ 2105.613023][ T5264] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 132, changing to 11
[ 2105.751356][ T5632] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2105.811268][ T5264] usb 7-1: config 0 interface 0 has no altsetting 0
[ 2105.826782][ T5264] usb 7-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[ 2105.846013][ T5264] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2105.864281][ T5264] usb 7-1: config 0 descriptor??
[ 2106.084903][ T5657] binder: 5654:5657 ioctl c0306201 200000000100 returned -11
[ 2106.113263][ T5657] fuse: Bad value for 'fd'
[ 2106.891880][ T5264] usbhid 7-1:0.0: can't add hid device: -71
[ 2106.910873][ T5264] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[ 2106.920208][ T5660] loop4: detected capacity change from 0 to 7
[ 2106.939402][ T5264] usb 7-1: USB disconnect, device number 116
[ 2106.950018][T29238] Dev loop4: unable to read RDB block 7
[ 2106.969436][T29238]  loop4: AHDI p1 p2
[ 2106.983765][T29238] loop4: partition table partially beyond EOD, truncated
[ 2107.045767][T29238] loop4: p1 size 4227858431 extends beyond EOD, truncated
[ 2107.069195][ T5660] Dev loop4: unable to read RDB block 7
[ 2107.081459][ T5660]  loop4: AHDI p1 p2
[ 2107.085422][ T5660] loop4: partition table partially beyond EOD, truncated
[ 2107.135738][ T5660] loop4: p1 size 4227858431 extends beyond EOD, truncated
[ 2107.260995][ T5278] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 2107.278531][T29238] udevd[29238]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 2107.335227][ T5670] 8021q: VLANs not supported on ip_vti0
[ 2107.496795][ T5278] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2107.520309][T29238] udevd[29238]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[ 2107.750710][ T5278] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2107.781896][ T5278] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 2107.824999][ T5278] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2107.847674][ T5278] usb 6-1: Manufacturer: syz
[ 2107.870540][ T5278] usb 6-1: config 0 descriptor??
[ 2108.064040][ T5260] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 2108.131877][ T5278] rc_core: IR keymap rc-hauppauge not found
[ 2108.131891][ T5278] Registered IR keymap rc-empty
[ 2108.132611][ T5278] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2108.153258][ T5278] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input150
[ 2108.210925][ T5260] usb 4-1: Using ep0 maxpacket: 32
[ 2108.226677][ T5260] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 2108.226696][ T5260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2108.241976][ T5260] usb 4-1: config 0 descriptor??
[ 2108.468963][ T5260] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 2108.496983][ T5260] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 2108.537815][ T5260] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 2108.550780][ T5260] usb 4-1: media controller created
[ 2108.635101][ T5260] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2108.643854][    C0] igorplugusb 6-1:0.0: Error: urb status = -32
[ 2108.644064][    C0] raw-gadget.0 gadget.5: ignoring, device is not running
[ 2108.657198][    C0] igorplugusb 6-1:0.0: Error: urb status = -32
[ 2108.665233][ T5278] usb 6-1: USB disconnect, device number 61
[ 2109.104315][ T5260] DVB: Unable to find symbol dib7000p_attach()
[ 2109.110843][ T5260] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 2109.420668][ T5260] rc_core: IR keymap rc-dib0700-rc5 not found
[ 2109.430175][ T5260] Registered IR keymap rc-empty
[ 2109.442132][ T5260] dvb-usb: could not initialize remote control.
[ 2109.457352][ T5260] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 2109.606495][ T5703] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2109.777487][ T5702] fuse: Bad value for 'fd'
[ 2109.792948][ T5706] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8510'.
[ 2109.827949][ T5707] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 2110.158040][ T5707] tipc: Resetting bearer <eth:syzkaller0>
[ 2110.428793][ T5715] 
[ 2110.431138][ T5715] =====================================================
[ 2110.438057][ T5715] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 2110.445551][ T5715] syzkaller #0 Not tainted
[ 2110.449947][ T5715] -----------------------------------------------------
[ 2110.456858][ T5715] syz.6.8511/5715 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 2110.464475][ T5715] ffff88804e262948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 2110.473169][ T5715] 
[ 2110.473169][ T5715] and this task is already holding:
[ 2110.480604][ T5715] ffff88804cbfa028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 2110.490371][ T5715] which would create a new lock dependency:
[ 2110.496256][ T5715]  (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 2110.504336][ T5715] 
[ 2110.504336][ T5715] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 2110.513771][ T5715]  (&client->buffer_lock){..-.}-{3:3}
[ 2110.513797][ T5715] 
[ 2110.513797][ T5715] ... which became SOFTIRQ-irq-safe at:
[ 2110.526832][ T5715]   lock_acquire+0x120/0x360
[ 2110.531414][ T5715]   _raw_spin_lock+0x2e/0x40
[ 2110.535992][ T5715]   evdev_pass_values+0xb9/0xbd0
[ 2110.540912][ T5715]   evdev_events+0x1e6/0x340
[ 2110.545481][ T5715]   input_pass_values+0x288/0x890
[ 2110.550485][ T5715]   input_event_dispose+0x3e5/0x6b0
[ 2110.555665][ T5715]   input_event+0x89/0xe0
[ 2110.559981][ T5715]   hidinput_hid_event+0x1362/0x1ca0
[ 2110.565254][ T5715]   hid_process_event+0x4be/0x620
[ 2110.570275][ T5715]   hid_report_raw_event+0xe91/0x16d0
[ 2110.575648][ T5715]   hid_input_report+0x43e/0x520
[ 2110.580589][ T5715]   hid_irq_in+0x47e/0x6d0
[ 2110.585012][ T5715]   __usb_hcd_giveback_urb+0x376/0x540
[ 2110.590457][ T5715]   dummy_timer+0x85f/0x44c0
[ 2110.595033][ T5715]   __hrtimer_run_queues+0x52c/0xc60
[ 2110.600391][ T5715]   hrtimer_run_softirq+0x187/0x2b0
[ 2110.605578][ T5715]   handle_softirqs+0x286/0x870
[ 2110.610411][ T5715]   __irq_exit_rcu+0xca/0x1f0
[ 2110.615073][ T5715]   irq_exit_rcu+0x9/0x30
[ 2110.619825][ T5715]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2110.625719][ T5715]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2110.631781][ T5715]   mod_delayed_work_on+0x1b6/0x200
[ 2110.636974][ T5715]   process_scheduled_works+0xae1/0x17b0
[ 2110.642592][ T5715]   worker_thread+0x8a0/0xda0
[ 2110.647254][ T5715]   kthread+0x711/0x8a0
[ 2110.651390][ T5715]   ret_from_fork+0x4bc/0x870
[ 2110.656061][ T5715]   ret_from_fork_asm+0x1a/0x30
[ 2110.660894][ T5715] 
[ 2110.660894][ T5715] to a SOFTIRQ-irq-unsafe lock:
[ 2110.668070][ T5715]  (tasklist_lock){.+.+}-{3:3}
[ 2110.668091][ T5715] 
[ 2110.668091][ T5715] ... which became SOFTIRQ-irq-unsafe at:
[ 2110.680688][ T5715] ...
[ 2110.680700][ T5715]   lock_acquire+0x120/0x360
[ 2110.687944][ T5715]   _raw_read_lock+0x36/0x50
[ 2110.692534][ T5715]   __do_wait+0xde/0x740
[ 2110.696758][ T5715]   do_wait+0x1f8/0x510
[ 2110.700900][ T5715]   kernel_wait+0xab/0x170
[ 2110.705297][ T5715]   call_usermodehelper_exec_work+0xbe/0x230
[ 2110.711519][ T5715]   process_scheduled_works+0xae1/0x17b0
[ 2110.717141][ T5715]   worker_thread+0x8a0/0xda0
[ 2110.721805][ T5715]   kthread+0x711/0x8a0
[ 2110.725947][ T5715]   ret_from_fork+0x4bc/0x870
[ 2110.730609][ T5715]   ret_from_fork_asm+0x1a/0x30
[ 2110.735457][ T5715] 
[ 2110.735457][ T5715] other info that might help us debug this:
[ 2110.735457][ T5715] 
[ 2110.745664][ T5715] Chain exists of:
[ 2110.745664][ T5715]   &client->buffer_lock --> &new->fa_lock --> tasklist_lock
[ 2110.745664][ T5715] 
[ 2110.758765][ T5715]  Possible interrupt unsafe locking scenario:
[ 2110.758765][ T5715] 
[ 2110.767086][ T5715]        CPU0                    CPU1
[ 2110.772521][ T5715]        ----                    ----
[ 2110.777865][ T5715]   lock(tasklist_lock);
[ 2110.782438][ T5715]                                local_irq_disable();
[ 2110.789172][ T5715]                                lock(&client->buffer_lock);
[ 2110.796520][ T5715]                                lock(&new->fa_lock);
[ 2110.803264][ T5715]   <Interrupt>
[ 2110.806699][ T5715]     lock(&client->buffer_lock);
[ 2110.811701][ T5715] 
[ 2110.811701][ T5715]  *** DEADLOCK ***
[ 2110.811701][ T5715] 
[ 2110.819826][ T5715] 7 locks held by syz.6.8511/5715:
[ 2110.824913][ T5715]  #0: ffff8880296b6118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[ 2110.834030][ T5715]  #1: ffff88801d7fd230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 2110.844111][ T5715]  #2: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 2110.853750][ T5715]  #3: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 2110.863296][ T5715]  #4: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 2110.872431][ T5715]  #5: ffff88804cbfa028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 2110.882594][ T5715]  #6: ffffffff8e13d2e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 2110.891714][ T5715] 
[ 2110.891714][ T5715] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 2110.902098][ T5715] -> (&client->buffer_lock){..-.}-{3:3} {
[ 2110.907810][ T5715]    IN-SOFTIRQ-W at:
[ 2110.911773][ T5715]                     lock_acquire+0x120/0x360
[ 2110.917913][ T5715]                     _raw_spin_lock+0x2e/0x40
[ 2110.924050][ T5715]                     evdev_pass_values+0xb9/0xbd0
[ 2110.930533][ T5715]                     evdev_events+0x1e6/0x340
[ 2110.936669][ T5715]                     input_pass_values+0x288/0x890
[ 2110.943257][ T5715]                     input_event_dispose+0x3e5/0x6b0
[ 2110.950092][ T5715]                     input_event+0x89/0xe0
[ 2110.955966][ T5715]                     hidinput_hid_event+0x1362/0x1ca0
[ 2110.962799][ T5715]                     hid_process_event+0x4be/0x620
[ 2110.969367][ T5715]                     hid_report_raw_event+0xe91/0x16d0
[ 2110.976281][ T5715]                     hid_input_report+0x43e/0x520
[ 2110.982762][ T5715]                     hid_irq_in+0x47e/0x6d0
[ 2110.988724][ T5715]                     __usb_hcd_giveback_urb+0x376/0x540
[ 2110.995724][ T5715]                     dummy_timer+0x85f/0x44c0
[ 2111.001858][ T5715]                     __hrtimer_run_queues+0x52c/0xc60
[ 2111.008689][ T5715]                     hrtimer_run_softirq+0x187/0x2b0
[ 2111.015431][ T5715]                     handle_softirqs+0x286/0x870
[ 2111.021833][ T5715]                     __irq_exit_rcu+0xca/0x1f0
[ 2111.028057][ T5715]                     irq_exit_rcu+0x9/0x30
[ 2111.033935][ T5715]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2111.041206][ T5715]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2111.048823][ T5715]                     mod_delayed_work_on+0x1b6/0x200
[ 2111.055586][ T5715]                     process_scheduled_works+0xae1/0x17b0
[ 2111.062777][ T5715]                     worker_thread+0x8a0/0xda0
[ 2111.069005][ T5715]                     kthread+0x711/0x8a0
[ 2111.074702][ T5715]                     ret_from_fork+0x4bc/0x870
[ 2111.080923][ T5715]                     ret_from_fork_asm+0x1a/0x30
[ 2111.087319][ T5715]    INITIAL USE at:
[ 2111.091192][ T5715]                    lock_acquire+0x120/0x360
[ 2111.097237][ T5715]                    _raw_spin_lock_irqsave+0xa7/0xf0
[ 2111.103977][ T5715]                    evdev_ioctl_handler+0x1969/0x1f10
[ 2111.110807][ T5715]                    __se_sys_ioctl+0xfc/0x170
[ 2111.116935][ T5715]                    do_syscall_64+0xfa/0xfa0
[ 2111.122979][ T5715]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2111.130497][ T5715]  }
[ 2111.133004][ T5715]  ... key      at: [<ffffffff99d58380>] evdev_open.__key.25+0x0/0x20
[ 2111.141255][ T5715] 
[ 2111.141255][ T5715] the dependencies between the lock to be acquired
[ 2111.141263][ T5715]  and SOFTIRQ-irq-unsafe lock:
[ 2111.154736][ T5715]   -> (tasklist_lock){.+.+}-{3:3} {
[ 2111.160014][ T5715]      HARDIRQ-ON-R at:
[ 2111.164146][ T5715]                         lock_acquire+0x120/0x360
[ 2111.170637][ T5715]                         _raw_read_lock+0x36/0x50
[ 2111.177118][ T5715]                         __do_wait+0xde/0x740
[ 2111.183252][ T5715]                         do_wait+0x1f8/0x510
[ 2111.189296][ T5715]                         kernel_wait+0xab/0x170
[ 2111.195599][ T5715]                         call_usermodehelper_exec_work+0xbe/0x230
[ 2111.203466][ T5715]                         process_scheduled_works+0xae1/0x17b0
[ 2111.210991][ T5715]                         worker_thread+0x8a0/0xda0
[ 2111.217565][ T5715]                         kthread+0x711/0x8a0
[ 2111.223605][ T5715]                         ret_from_fork+0x4bc/0x870
[ 2111.230176][ T5715]                         ret_from_fork_asm+0x1a/0x30
[ 2111.236920][ T5715]      SOFTIRQ-ON-R at:
[ 2111.241054][ T5715]                         lock_acquire+0x120/0x360
[ 2111.247533][ T5715]                         _raw_read_lock+0x36/0x50
[ 2111.254021][ T5715]                         __do_wait+0xde/0x740
[ 2111.260163][ T5715]                         do_wait+0x1f8/0x510
[ 2111.266213][ T5715]                         kernel_wait+0xab/0x170
[ 2111.272519][ T5715]                         call_usermodehelper_exec_work+0xbe/0x230
[ 2111.280389][ T5715]                         process_scheduled_works+0xae1/0x17b0
[ 2111.287915][ T5715]                         worker_thread+0x8a0/0xda0
[ 2111.294484][ T5715]                         kthread+0x711/0x8a0
[ 2111.300527][ T5715]                         ret_from_fork+0x4bc/0x870
[ 2111.307100][ T5715]                         ret_from_fork_asm+0x1a/0x30
[ 2111.313840][ T5715]      INITIAL USE at:
[ 2111.317885][ T5715]                        lock_acquire+0x120/0x360
[ 2111.324284][ T5715]                        _raw_write_lock_irq+0xa2/0xf0
[ 2111.331117][ T5715]                        copy_process+0x224f/0x3c00
[ 2111.337715][ T5715]                        kernel_clone+0x21e/0x840
[ 2111.344111][ T5715]                        user_mode_thread+0xdd/0x140
[ 2111.350775][ T5715]                        rest_init+0x23/0x300
[ 2111.356820][ T5715]                        start_kernel+0x3ae/0x410
[ 2111.363214][ T5715]                        x86_64_start_reservations+0x24/0x30
[ 2111.370575][ T5715]                        x86_64_start_kernel+0x143/0x1c0
[ 2111.377592][ T5715]                        common_startup_64+0x13e/0x147
[ 2111.384854][ T5715]      INITIAL READ USE at:
[ 2111.389336][ T5715]                             lock_acquire+0x120/0x360
[ 2111.396165][ T5715]                             _raw_read_lock+0x36/0x50
[ 2111.402996][ T5715]                             __do_wait+0xde/0x740
[ 2111.409482][ T5715]                             do_wait+0x1f8/0x510
[ 2111.415874][ T5715]                             kernel_wait+0xab/0x170
[ 2111.422525][ T5715]                             call_usermodehelper_exec_work+0xbe/0x230
[ 2111.430745][ T5715]                             process_scheduled_works+0xae1/0x17b0
[ 2111.438649][ T5715]                             worker_thread+0x8a0/0xda0
[ 2111.445566][ T5715]                             kthread+0x711/0x8a0
[ 2111.451961][ T5715]                             ret_from_fork+0x4bc/0x870
[ 2111.458875][ T5715]                             ret_from_fork_asm+0x1a/0x30
[ 2111.465963][ T5715]    }
[ 2111.468614][ T5715]    ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[ 2111.476504][ T5715]    ... acquired at:
[ 2111.480456][ T5715]    lock_acquire+0x120/0x360
[ 2111.485137][ T5715]    _raw_read_lock+0x36/0x50
[ 2111.489793][ T5715]    send_sigurg+0x12b/0x420
[ 2111.494364][ T5715]    sk_send_sigurg+0x6c/0x2e0
[ 2111.499106][ T5715]    queue_oob+0x420/0x4f0
[ 2111.503503][ T5715]    unix_stream_sendmsg+0xc3f/0xdf0
[ 2111.508772][ T5715]    __sock_sendmsg+0x21c/0x270
[ 2111.513601][ T5715]    ____sys_sendmsg+0x52d/0x830
[ 2111.518515][ T5715]    ___sys_sendmsg+0x21f/0x2a0
[ 2111.523344][ T5715]    __sys_sendmmsg+0x227/0x430
[ 2111.528201][ T5715]    __x64_sys_sendmmsg+0xa0/0xc0
[ 2111.533292][ T5715]    do_syscall_64+0xfa/0xfa0
[ 2111.537948][ T5715]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2111.543996][ T5715] 
[ 2111.546297][ T5715]  -> (&f_owner->lock){....}-{3:3} {
[ 2111.551569][ T5715]     INITIAL USE at:
[ 2111.555554][ T5715]                      lock_acquire+0x120/0x360
[ 2111.561780][ T5715]                      _raw_write_lock_irq+0xa2/0xf0
[ 2111.568431][ T5715]                      __f_setown+0x67/0x370
[ 2111.574390][ T5715]                      generic_setlease+0xd60/0x1240
[ 2111.581044][ T5715]                      fcntl_setlease+0x3a2/0x4c0
[ 2111.587522][ T5715]                      do_fcntl+0x6a9/0x1910
[ 2111.593689][ T5715]                      __se_sys_fcntl+0xc8/0x150
[ 2111.600000][ T5715]                      do_syscall_64+0xfa/0xfa0
[ 2111.606218][ T5715]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2111.613830][ T5715]     INITIAL READ USE at:
[ 2111.619027][ T5715]                           lock_acquire+0x120/0x360
[ 2111.625696][ T5715]                           _raw_read_lock_irqsave+0xaf/0x100
[ 2111.633143][ T5715]                           send_sigurg+0x55/0x420
[ 2111.639641][ T5715]                           sk_send_sigurg+0x6c/0x2e0
[ 2111.646395][ T5715]                           queue_oob+0x420/0x4f0
[ 2111.652814][ T5715]                           unix_stream_sendmsg+0xc3f/0xdf0
[ 2111.660101][ T5715]                           __sock_sendmsg+0x21c/0x270
[ 2111.666936][ T5715]                           ____sys_sendmsg+0x52d/0x830
[ 2111.673861][ T5715]                           ___sys_sendmsg+0x21f/0x2a0
[ 2111.680695][ T5715]                           __sys_sendmmsg+0x227/0x430
[ 2111.687703][ T5715]                           __x64_sys_sendmmsg+0xa0/0xc0
[ 2111.694703][ T5715]                           do_syscall_64+0xfa/0xfa0
[ 2111.701355][ T5715]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2111.709400][ T5715]   }
[ 2111.711966][ T5715]   ... key      at: [<ffffffff99a3b880>] file_f_owner_allocate.__key+0x0/0x20
[ 2111.720891][ T5715]   ... acquired at:
[ 2111.725284][ T5715]    lock_acquire+0x120/0x360
[ 2111.729942][ T5715]    _raw_read_lock_irqsave+0xaf/0x100
[ 2111.735385][ T5715]    send_sigio+0x38/0x370
[ 2111.739788][ T5715]    kill_fasync+0x24d/0x4d0
[ 2111.744368][ T5715]    sock_wake_async+0x137/0x160
[ 2111.749286][ T5715]    sock_def_readable+0x3bb/0x550
[ 2111.754378][ T5715]    queue_oob+0x452/0x4f0
[ 2111.758773][ T5715]    unix_stream_sendmsg+0xc3f/0xdf0
[ 2111.764037][ T5715]    __sock_sendmsg+0x21c/0x270
[ 2111.768869][ T5715]    ____sys_sendmsg+0x52d/0x830
[ 2111.773801][ T5715]    ___sys_sendmsg+0x21f/0x2a0
[ 2111.778628][ T5715]    __sys_sendmmsg+0x227/0x430
[ 2111.783454][ T5715]    __x64_sys_sendmmsg+0xa0/0xc0
[ 2111.788456][ T5715]    do_syscall_64+0xfa/0xfa0
[ 2111.793111][ T5715]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2111.799162][ T5715] 
[ 2111.801462][ T5715] -> (&new->fa_lock){....}-{3:3} {
[ 2111.806565][ T5715]    INITIAL USE at:
[ 2111.810435][ T5715]                    lock_acquire+0x120/0x360
[ 2111.816483][ T5715]                    _raw_write_lock_irq+0xa2/0xf0
[ 2111.822959][ T5715]                    fasync_remove_entry+0xf1/0x1c0
[ 2111.829527][ T5715]                    lease_modify+0x1ca/0x3c0
[ 2111.835571][ T5715]                    locks_remove_file+0x4bf/0xea0
[ 2111.842055][ T5715]                    __fput+0x3ab/0xa70
[ 2111.847605][ T5715]                    task_work_run+0x1d4/0x260
[ 2111.853735][ T5715]                    exit_to_user_mode_loop+0xe9/0x130
[ 2111.860569][ T5715]                    do_syscall_64+0x2bd/0xfa0
[ 2111.866707][ T5715]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2111.874141][ T5715]    INITIAL READ USE at:
[ 2111.878450][ T5715]                         lock_acquire+0x120/0x360
[ 2111.884931][ T5715]                         _raw_read_lock_irqsave+0xaf/0x100
[ 2111.892196][ T5715]                         kill_fasync+0x199/0x4d0
[ 2111.898593][ T5715]                         sock_wake_async+0x137/0x160
[ 2111.905333][ T5715]                         sk_send_sigurg+0x1f1/0x2e0
[ 2111.911988][ T5715]                         queue_oob+0x420/0x4f0
[ 2111.918212][ T5715]                         unix_stream_sendmsg+0xc3f/0xdf0
[ 2111.925324][ T5715]                         __sock_sendmsg+0x21c/0x270
[ 2111.931981][ T5715]                         ____sys_sendmsg+0x52d/0x830
[ 2111.938741][ T5715]                         ___sys_sendmsg+0x21f/0x2a0
[ 2111.945392][ T5715]                         __sys_sendmmsg+0x227/0x430
[ 2111.952043][ T5715]                         __x64_sys_sendmmsg+0xa0/0xc0
[ 2111.958870][ T5715]                         do_syscall_64+0xfa/0xfa0
[ 2111.965364][ T5715]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2111.973236][ T5715]  }
[ 2111.975714][ T5715]  ... key      at: [<ffffffff99a3b8a0>] fasync_insert_entry.__key+0x0/0x20
[ 2111.984376][ T5715]  ... acquired at:
[ 2111.988156][ T5715]    lock_acquire+0x120/0x360
[ 2111.992848][ T5715]    _raw_read_lock_irqsave+0xaf/0x100
[ 2111.998292][ T5715]    kill_fasync+0x199/0x4d0
[ 2112.002868][ T5715]    evdev_pass_values+0x627/0xbd0
[ 2112.007963][ T5715]    evdev_events+0x1e6/0x340
[ 2112.012970][ T5715]    input_pass_values+0x288/0x890
[ 2112.018062][ T5715]    input_event_dispose+0x330/0x6b0
[ 2112.023331][ T5715]    input_inject_event+0x1dd/0x340
[ 2112.028512][ T5715]    evdev_write+0x2fc/0x480
[ 2112.033086][ T5715]    vfs_write+0x27e/0xb30
[ 2112.037480][ T5715]    ksys_write+0x145/0x250
[ 2112.041959][ T5715]    do_syscall_64+0xfa/0xfa0
[ 2112.046616][ T5715]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2112.052664][ T5715] 
[ 2112.054970][ T5715] 
[ 2112.054970][ T5715] stack backtrace:
[ 2112.060838][ T5715] CPU: 1 UID: 0 PID: 5715 Comm: syz.6.8511 Not tainted syzkaller #0 PREEMPT(full) 
[ 2112.060851][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2112.060859][ T5715] Call Trace:
[ 2112.060867][ T5715]  <TASK>
[ 2112.060873][ T5715]  dump_stack_lvl+0x189/0x250
[ 2112.060888][ T5715]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2112.060898][ T5715]  ? __pfx__printk+0x10/0x10
[ 2112.060910][ T5715]  validate_chain+0x1f05/0x2140
[ 2112.060930][ T5715]  __lock_acquire+0xab9/0xd20
[ 2112.060944][ T5715]  ? kill_fasync+0x199/0x4d0
[ 2112.060958][ T5715]  lock_acquire+0x120/0x360
[ 2112.060971][ T5715]  ? kill_fasync+0x199/0x4d0
[ 2112.060987][ T5715]  _raw_read_lock_irqsave+0xaf/0x100
[ 2112.061002][ T5715]  ? kill_fasync+0x199/0x4d0
[ 2112.061016][ T5715]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[ 2112.061029][ T5715]  ? do_raw_spin_lock+0x121/0x290
[ 2112.061041][ T5715]  kill_fasync+0x199/0x4d0
[ 2112.061054][ T5715]  ? kill_fasync+0x53/0x4d0
[ 2112.061068][ T5715]  evdev_pass_values+0x627/0xbd0
[ 2112.061081][ T5715]  ? evdev_pass_values+0x5c1/0xbd0
[ 2112.061093][ T5715]  evdev_events+0x1e6/0x340
[ 2112.061103][ T5715]  ? evdev_events+0x79/0x340
[ 2112.061113][ T5715]  ? input_pass_values+0x8d/0x890
[ 2112.061124][ T5715]  input_pass_values+0x288/0x890
[ 2112.061140][ T5715]  ? input_handle_event+0x70c/0xf30
[ 2112.061155][ T5715]  input_event_dispose+0x330/0x6b0
[ 2112.061169][ T5715]  input_inject_event+0x1dd/0x340
[ 2112.061183][ T5715]  ? input_inject_event+0xb6/0x340
[ 2112.061197][ T5715]  evdev_write+0x2fc/0x480
[ 2112.061209][ T5715]  ? __pfx_evdev_write+0x10/0x10
[ 2112.061220][ T5715]  ? bpf_lsm_file_permission+0x9/0x20
[ 2112.061234][ T5715]  ? security_file_permission+0x75/0x290
[ 2112.061249][ T5715]  ? rw_verify_area+0x255/0x4d0
[ 2112.061259][ T5715]  ? __lock_acquire+0xab9/0xd20
[ 2112.061270][ T5715]  ? __pfx_evdev_write+0x10/0x10
[ 2112.061281][ T5715]  vfs_write+0x27e/0xb30
[ 2112.061293][ T5715]  ? __pfx_vfs_write+0x10/0x10
[ 2112.061303][ T5715]  ? __fget_files+0x2a/0x420
[ 2112.061316][ T5715]  ? __fget_files+0x2a/0x420
[ 2112.061326][ T5715]  ? __fget_files+0x3a0/0x420
[ 2112.061337][ T5715]  ? __fget_files+0x2a/0x420
[ 2112.061350][ T5715]  ksys_write+0x145/0x250
[ 2112.061360][ T5715]  ? __pfx_ksys_write+0x10/0x10
[ 2112.061371][ T5715]  ? do_syscall_64+0xbe/0xfa0
[ 2112.061384][ T5715]  do_syscall_64+0xfa/0xfa0
[ 2112.061394][ T5715]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2112.061404][ T5715]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2112.061414][ T5715]  ? clear_bhb_loop+0x60/0xb0
[ 2112.061425][ T5715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2112.061435][ T5715] RIP: 0033:0x7fac9f38eec9
[ 2112.061447][ T5715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2112.061456][ T5715] RSP: 002b:00007faca02a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2112.061468][ T5715] RAX: ffffffffffffffda RBX: 00007fac9f5e6090 RCX: 00007fac9f38eec9
[ 2112.061476][ T5715] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000006
[ 2112.061483][ T5715] RBP: 00007fac9f411f91 R08: 0000000000000000 R09: 0000000000000000
[ 2112.061489][ T5715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2112.061495][ T5715] R13: 00007fac9f5e6128 R14: 00007fac9f5e6090 R15: 00007fac9f70fa28
[ 2112.061507][ T5715]  </TASK>
[ 2112.558861][ T5260] usb 4-1: USB disconnect, device number 112
[ 2112.756879][ T5260] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.