last executing test programs:

11.332754342s ago: executing program 0 (id=2426):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000380)={0xc000003, 0x27d, &(0x7f0000002080)=[0x0, 0x3, 0xb, 0x9, 0x8e88, 0x200, 0x8, 0x0, 0xe, 0x8, 0xff, 0x5, 0x3, 0x1, 0x0, 0x1, 0x2, 0x3000000, 0x6, 0xffffffff, 0x9, 0xfff, 0x64a7, 0x6, 0xa6e, 0x9, 0xce, 0x11, 0x0, 0x10000, 0x6, 0x80, 0xffffffff, 0x71add126, 0x3423, 0x0, 0x4, 0x7, 0x5, 0x8, 0x4, 0x7, 0x3, 0x0, 0x9b1, 0x105e, 0x0, 0x8000, 0x80, 0x8, 0x29, 0x10, 0x0, 0x216, 0x1ff, 0x40, 0x5, 0x578, 0x7, 0x6, 0x0, 0x4, 0x3eeaa4b0, 0x6, 0x7, 0x2, 0x3, 0x1, 0x2, 0x6, 0xffff, 0x0, 0x8, 0xfff, 0xdb5, 0x9, 0x1, 0x2, 0x1000, 0x5, 0x7fffffff, 0x23a, 0xfffff3e9, 0x3a, 0x80000000, 0x7fffffff, 0xfff, 0x7, 0x10, 0xf, 0x5788e00, 0x9, 0x7, 0x81, 0x76, 0x7, 0x6, 0x2, 0x44949089, 0x4, 0x81, 0x1, 0x9, 0x40, 0x8, 0xfffffffc, 0x2, 0x305d, 0x1, 0x0, 0x2, 0x2, 0x363c, 0xac, 0xff, 0x6, 0x0, 0x3, 0x6, 0x5, 0x9, 0x100, 0x81, 0x4, 0x8, 0xffff, 0x9, 0x7, 0x1, 0x1, 0x7c80, 0x176, 0x8001, 0x6, 0x6fc, 0x7, 0x80000000, 0xb, 0x8, 0x8, 0x7, 0x5, 0x4804, 0x8, 0x5, 0x3, 0xa, 0xd, 0x10, 0x10001, 0x800, 0xe8b8, 0x2, 0x9, 0x7, 0x9, 0x5, 0xffffffff, 0x4, 0x1, 0xa0e, 0x7, 0xd, 0x4, 0x9, 0x3, 0x0, 0x7ff, 0xffffff81, 0x7, 0xd0, 0x7, 0x3, 0x7, 0x4, 0x3, 0x2, 0x80, 0x7, 0x8, 0x0, 0x0, 0x7, 0x7, 0x9, 0xfffffffa, 0x0, 0xb5a, 0x5, 0x40, 0x1, 0x3, 0x81, 0x4, 0x2, 0x9, 0x7, 0x22b, 0xa0, 0x1, 0x7f, 0x4, 0xe, 0x7ff, 0x3, 0x7, 0x3, 0xfffff5e6, 0x800, 0x0, 0x7, 0x161, 0xf, 0x0, 0x0, 0x7fff, 0x57cb77fd, 0x3, 0x6, 0x0, 0x9, 0x1ff, 0x6, 0x9, 0x4f, 0x4, 0x8, 0x1cce, 0xfffffe01, 0x5, 0x3, 0x799cf969, 0xbb, 0xb, 0x8, 0x4, 0xf0a, 0x900000, 0x10001, 0x6, 0x6000, 0x0, 0xfffffff2, 0x7ff, 0x8000, 0x569, 0x875, 0x7, 0xe, 0x80000001, 0xfffffff9, 0x2, 0x3, 0xffffffff, 0x4, 0xe1f9, 0x4, 0x0, 0xb, 0x5, 0x40, 0x8, 0xad5d, 0x1, 0x5570, 0x9, 0xff, 0x6, 0x1, 0x5, 0xb2dd, 0x7, 0x5, 0x7f, 0x3, 0xa71b, 0x5, 0x7, 0xffff, 0x367, 0x9b, 0x6, 0x1, 0xf5, 0x4, 0x2, 0x5, 0xffffffff, 0x80000000, 0xffe00000, 0x9, 0xffff, 0x4, 0x6, 0x10, 0xfffffff8, 0x1aea, 0x0, 0xd92, 0x0, 0xfffffffb, 0x7fffffff, 0x401, 0x4, 0xfff, 0xa9, 0x5, 0x7, 0x8, 0x7, 0x5, 0x9, 0x2, 0x10001, 0x101, 0x9, 0xffffffff, 0x5, 0x3ff, 0x10, 0x1, 0x1, 0xb37, 0x6, 0x742f, 0x9, 0x7, 0x101, 0x8, 0x3, 0x2, 0xa, 0x1, 0xc78, 0x4, 0x5, 0xfffffff0, 0x1dc0aec8, 0x8, 0x40, 0xa, 0x16, 0x9, 0x3, 0x1, 0x7, 0x6e4, 0x1, 0x2ff3420a, 0x10, 0x1, 0x7, 0x7, 0x8000, 0x1, 0xfbb6, 0xd7f1, 0x8001, 0x0, 0x400, 0x7, 0xb789, 0x80000001, 0x7, 0x3, 0x4, 0x81, 0xf, 0x8, 0x8a0c, 0xfffffffa, 0x8, 0x0, 0x3, 0x6, 0x2, 0x4, 0x400, 0x8, 0x400, 0x7, 0x2, 0x1, 0x8, 0x7, 0x5, 0xfffffffd, 0x5, 0x6d2, 0x40, 0x2, 0xe, 0x8675, 0x51, 0x6, 0xffffffff, 0x10, 0x3, 0x80000000, 0x80000000, 0x2, 0x2, 0x6, 0x10001, 0x4, 0x7f, 0x401, 0x1000, 0x7, 0xfffffffb, 0x8001, 0x4, 0x0, 0x4b, 0x7, 0xcb0, 0x3, 0x78, 0x5, 0x8, 0x10001, 0x9ab, 0x6, 0x5, 0x7, 0x6, 0x81, 0x3, 0x3, 0x355a, 0x7, 0x52, 0xd, 0xcf0, 0x80000000, 0x6, 0x8, 0x80000001, 0x5, 0x1, 0x10, 0x8, 0xd, 0x5, 0xe191, 0x2, 0x200, 0x5, 0x7ff, 0x0, 0x3, 0x401, 0x8, 0x7, 0x3d6a, 0x4, 0x0, 0x7, 0xfff, 0x7f, 0x200, 0xfffffffe, 0x0, 0x5, 0x2, 0x1, 0x7fffffff, 0xffffffff, 0x0, 0x7fff, 0xeba, 0x2d, 0x1, 0xebc8, 0x401, 0x16e, 0xfff, 0x6, 0xce, 0xd, 0x200, 0x5, 0x4, 0x1, 0xfff, 0x8fc, 0x92fc, 0x7, 0x0, 0x5, 0x36, 0x2, 0x10001, 0x76c, 0x0, 0x5, 0xfffffffc, 0x9, 0x1, 0xfffffe00, 0x5b29, 0x800, 0xfffffff0, 0xac, 0xfffffffd, 0x9, 0x7, 0xdade, 0x8, 0x401, 0x6f1eb044, 0x52, 0x3, 0x4, 0x4, 0x1, 0x100, 0x3ff, 0x2, 0xbf, 0x4, 0x5, 0x3, 0x1000, 0x5, 0x345, 0xc, 0x2, 0x95, 0x3, 0x8, 0x9, 0x0, 0xe3, 0x4, 0x5, 0x0, 0x6, 0x8, 0xfff, 0x1, 0x7, 0x2, 0xffff, 0x4, 0x5, 0x2, 0xffffffff, 0x200, 0x80000001, 0x5, 0x100, 0x3ff, 0x8, 0x2, 0x8000, 0x9007, 0x8, 0x400, 0xec9e, 0x3, 0x3, 0x7, 0x0, 0xfff, 0x2, 0x3, 0x1, 0x6, 0x1, 0x9, 0x1, 0xa6a4, 0x3fc0, 0x9, 0xe0, 0x41, 0x6, 0xfff, 0xff, 0x40, 0x2, 0x6, 0xa6, 0x9, 0x83, 0x6, 0x9, 0xfffffffb, 0xb, 0x4, 0x4, 0x1ff, 0x1, 0xffffffff, 0xfff, 0x8, 0x746, 0xa34e, 0x4, 0x6, 0x0, 0x8000, 0x5, 0x5, 0x95, 0x4000000, 0x4, 0x9, 0x7, 0x380, 0x1, 0x1, 0x9, 0x3, 0x81, 0x5, 0x2, 0x2, 0x8, 0xc, 0x0, 0x10001, 0x3, 0x0, 0xbcab, 0x844, 0x6, 0xf3, 0x2, 0x7, 0xfff, 0x6, 0x2, 0x2, 0xff, 0x1], 0x0, 0x1})

11.234772358s ago: executing program 0 (id=2428):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x24000840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86"], 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f"])
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x23c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x686}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xfffffffd, @empty, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @remote, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_MEDIA={0xe8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x614}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2fd5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e31}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ffe00}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdd65}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20000850}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

10.863462039s ago: executing program 0 (id=2429):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xf0)
setpriority(0x0, 0x0, 0x2a14b58)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x1ab801, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x7})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x8, 0x3, 0x6, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x1000000100800001, 0x5, 0x0, 0x2000, 0x1004, 0x0, 0x5], 0xd000, 0x200346})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000001c0)={0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x4810)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008c}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000002cbbaceeb2bb41"], 0x50)

9.533550811s ago: executing program 0 (id=2433):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x4fed0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
syz_usb_connect(0x6, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa0}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xbe)
sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6ebed91840ceb992d349e05fa69"], 0x10}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r8, @ANYBLOB="080008100002000008000200ffffffff0800090006000000080009000000180008000200ac1414aa080009"], 0x48}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000200001d01080008000a00", @ANYRES32, @ANYBLOB="080009001e"], 0x24}}, 0x8000004)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="0b42be01ab317f41fa61d01cb2e5cacf1d9150e9fed51202798a7cbeeebfc8dd7b962eda80459c2605ee899df9bca383a6502ea2de7e0dd7f859e921f26969c814642326aa939e39ce87f583fd665a0bbdcc75fa5d52eb37055df778a8a90571", @ANYRESHEX=r10, @ANYRES8=r7, @ANYBLOB="65ab97b596f74f609231c14426ae63dd7e11ac360201de8b7157a8b595192f8f683f9853add1f23aaeeb6ca5c8df856bf6f3988dcfe184ee96395daa619f173493d0f1bec66bd23da4cd4b0d304cf3e7a49172a563213a12fa6d674d0ec920e0ff20d1bfbd1ba7a20a4eb3553a10022b3947e9530e7c19d575fe4bf431c4397b3582a379dd337b82952199e094f7dd3bebf1fc4c7d1bb73237bf34df8a78fc53a084c1fd1ef30aa2a3058c2f0e1d60e6d6aa33778f4e7c13cd34c78c96538937608456fa4c191e33ce664d8ef66167e1ac5534b4cb3353a04e38dedc54010d839d98f617ea", @ANYRES8=r9, @ANYRESDEC=r6], 0x70}, 0x1, 0x0, 0x0, 0x4080}, 0x20040050)

9.327682073s ago: executing program 4 (id=2434):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x8100)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$dsp(0xffffffffffffffff, &(0x7f00000004c0)='\x00', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000003c0)={0xc, 0x3, 0x800, 0x5}, 0x10)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000fffdffff0000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r7, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x70, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000180)={0x80a0000, 0x10d000})
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000240)={0x1, 0x7fffffff, 0x2, 0x80000000007, 0x8000000000000000, 0x2, 0xfffdfffffffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x3})

7.756909486s ago: executing program 3 (id=2437):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
r3 = socket(0x9, 0x3, 0x6)
bind$inet(r3, 0x0, 0x0)
getrlimit(0x2, &(0x7f00000000c0))
r4 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
r6 = dup3(r4, r5, 0x0)
ioctl$MON_IOCG_STATS(r6, 0xc0109207, &(0x7f0000000180))

7.753227321s ago: executing program 4 (id=2438):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000380)={0xc000003, 0x27d, &(0x7f0000002080)=[0x0, 0x3, 0xb, 0x9, 0x8e88, 0x200, 0x8, 0x0, 0xe, 0x8, 0xff, 0x5, 0x3, 0x1, 0x0, 0x1, 0x2, 0x3000000, 0x6, 0xffffffff, 0x9, 0xfff, 0x64a7, 0x6, 0xa6e, 0x9, 0xce, 0x11, 0x0, 0x10000, 0x6, 0x80, 0xffffffff, 0x71add126, 0x3423, 0x0, 0x4, 0x7, 0x5, 0x8, 0x4, 0x7, 0x3, 0x0, 0x9b1, 0x105e, 0x0, 0x8000, 0x80, 0x8, 0x29, 0x10, 0x0, 0x216, 0x1ff, 0x40, 0x5, 0x578, 0x7, 0x6, 0x0, 0x4, 0x3eeaa4b0, 0x6, 0x7, 0x2, 0x3, 0x1, 0x2, 0x6, 0xffff, 0x0, 0x8, 0xfff, 0xdb5, 0x9, 0x1, 0x2, 0x1000, 0x5, 0x7fffffff, 0x23a, 0xfffff3e9, 0x3a, 0x80000000, 0x7fffffff, 0xfff, 0x7, 0x10, 0xf, 0x5788e00, 0x9, 0x7, 0x81, 0x76, 0x7, 0x6, 0x2, 0x44949089, 0x4, 0x81, 0x1, 0x9, 0x40, 0x8, 0xfffffffc, 0x2, 0x305d, 0x1, 0x0, 0x2, 0x2, 0x363c, 0xac, 0xff, 0x6, 0x0, 0x3, 0x6, 0x5, 0x9, 0x100, 0x81, 0x4, 0x8, 0xffff, 0x9, 0x7, 0x1, 0x1, 0x7c80, 0x176, 0x8001, 0x6, 0x6fc, 0x7, 0x80000000, 0xb, 0x8, 0x8, 0x7, 0x5, 0x4804, 0x8, 0x5, 0x3, 0xa, 0xd, 0x10, 0x10001, 0x800, 0xe8b8, 0x2, 0x9, 0x7, 0x9, 0x5, 0xffffffff, 0x4, 0x1, 0xa0e, 0x7, 0xd, 0x4, 0x9, 0x3, 0x0, 0x7ff, 0xffffff81, 0x7, 0xd0, 0x7, 0x3, 0x7, 0x4, 0x3, 0x2, 0x80, 0x7, 0x8, 0x0, 0x0, 0x7, 0x7, 0x9, 0xfffffffa, 0x0, 0xb5a, 0x5, 0x40, 0x1, 0x3, 0x81, 0x4, 0x2, 0x9, 0x7, 0x22b, 0xa0, 0x1, 0x7f, 0x4, 0xe, 0x7ff, 0x3, 0x7, 0x3, 0xfffff5e6, 0x800, 0x0, 0x7, 0x161, 0xf, 0x0, 0x0, 0x7fff, 0x57cb77fd, 0x3, 0x6, 0x0, 0x9, 0x1ff, 0x6, 0x9, 0x4f, 0x4, 0x8, 0x1cce, 0xfffffe01, 0x5, 0x3, 0x799cf969, 0xbb, 0xb, 0x8, 0x4, 0xf0a, 0x900000, 0x10001, 0x6, 0x6000, 0x0, 0xfffffff2, 0x7ff, 0x8000, 0x569, 0x875, 0x7, 0xe, 0x80000001, 0xfffffff9, 0x2, 0x3, 0xffffffff, 0x4, 0xe1f9, 0x4, 0x0, 0xb, 0x5, 0x40, 0x8, 0xad5d, 0x1, 0x5570, 0x9, 0xff, 0x6, 0x1, 0x5, 0xb2dd, 0x7, 0x5, 0x7f, 0x3, 0xa71b, 0x5, 0x7, 0xffff, 0x367, 0x9b, 0x6, 0x1, 0xf5, 0x4, 0x2, 0x5, 0xffffffff, 0x80000000, 0xffe00000, 0x9, 0xffff, 0x4, 0x6, 0x10, 0xfffffff8, 0x1aea, 0x0, 0xd92, 0x0, 0xfffffffb, 0x7fffffff, 0x401, 0x4, 0xfff, 0xa9, 0x5, 0x7, 0x8, 0x7, 0x5, 0x9, 0x2, 0x10001, 0x101, 0x9, 0xffffffff, 0x5, 0x3ff, 0x10, 0x1, 0x1, 0xb37, 0x6, 0x742f, 0x9, 0x7, 0x101, 0x8, 0x3, 0x2, 0xa, 0x1, 0xc78, 0x4, 0x5, 0xfffffff0, 0x1dc0aec8, 0x8, 0x40, 0xa, 0x16, 0x9, 0x3, 0x1, 0x7, 0x6e4, 0x1, 0x2ff3420a, 0x10, 0x1, 0x7, 0x7, 0x8000, 0x1, 0xfbb6, 0xd7f1, 0x8001, 0x0, 0x400, 0x7, 0xb789, 0x80000001, 0x7, 0x3, 0x4, 0x81, 0xf, 0x8, 0x8a0c, 0xfffffffa, 0x8, 0x0, 0x3, 0x6, 0x2, 0x4, 0x400, 0x8, 0x400, 0x7, 0x2, 0x1, 0x8, 0x7, 0x5, 0xfffffffd, 0x5, 0x6d2, 0x40, 0x2, 0xe, 0x8675, 0x51, 0x6, 0xffffffff, 0x10, 0x3, 0x80000000, 0x80000000, 0x2, 0x2, 0x6, 0x10001, 0x4, 0x7f, 0x401, 0x1000, 0x7, 0xfffffffb, 0x8001, 0x4, 0x0, 0x4b, 0x7, 0xcb0, 0x3, 0x78, 0x5, 0x8, 0x10001, 0x9ab, 0x6, 0x5, 0x7, 0x6, 0x81, 0x3, 0x3, 0x355a, 0x7, 0x52, 0xd, 0xcf0, 0x80000000, 0x6, 0x8, 0x80000001, 0x5, 0x1, 0x10, 0x8, 0xd, 0x5, 0xe191, 0x2, 0x200, 0x5, 0x7ff, 0x0, 0x3, 0x401, 0x8, 0x7, 0x3d6a, 0x4, 0x0, 0x7, 0xfff, 0x7f, 0x200, 0xfffffffe, 0x0, 0x5, 0x2, 0x1, 0x7fffffff, 0xffffffff, 0x0, 0x7fff, 0xeba, 0x2d, 0x1, 0xebc8, 0x401, 0x16e, 0xfff, 0x6, 0xce, 0xd, 0x200, 0x5, 0x4, 0x1, 0xfff, 0x8fc, 0x92fc, 0x7, 0x0, 0x5, 0x36, 0x2, 0x10001, 0x76c, 0x0, 0x5, 0xfffffffc, 0x9, 0x1, 0xfffffe00, 0x5b29, 0x800, 0xfffffff0, 0xac, 0xfffffffd, 0x9, 0x7, 0xdade, 0x8, 0x401, 0x6f1eb044, 0x52, 0x3, 0x4, 0x4, 0x1, 0x100, 0x3ff, 0x2, 0xbf, 0x4, 0x5, 0x3, 0x1000, 0x5, 0x345, 0xc, 0x2, 0x95, 0x3, 0x8, 0x9, 0x0, 0xe3, 0x4, 0x5, 0x0, 0x6, 0x8, 0xfff, 0x1, 0x7, 0x2, 0xffff, 0x4, 0x5, 0x2, 0xffffffff, 0x200, 0x80000001, 0x5, 0x100, 0x3ff, 0x8, 0x2, 0x8000, 0x9007, 0x8, 0x400, 0xec9e, 0x3, 0x3, 0x7, 0x0, 0xfff, 0x2, 0x3, 0x1, 0x6, 0x1, 0x9, 0x1, 0xa6a4, 0x3fc0, 0x9, 0xe0, 0x41, 0x6, 0xfff, 0xff, 0x40, 0x2, 0x6, 0xa6, 0x9, 0x83, 0x6, 0x9, 0xfffffffb, 0xb, 0x4, 0x4, 0x1ff, 0x1, 0xffffffff, 0xfff, 0x8, 0x746, 0xa34e, 0x4, 0x6, 0x0, 0x8000, 0x5, 0x5, 0x95, 0x4000000, 0x4, 0x9, 0x7, 0x380, 0x1, 0x1, 0x9, 0x3, 0x81, 0x5, 0x2, 0x2, 0x8, 0xc, 0x0, 0x10001, 0x3, 0x0, 0xbcab, 0x844, 0x6, 0xf3, 0x2, 0x7, 0xfff, 0x6, 0x2, 0x2, 0xff, 0x1], 0x0, 0x1})

7.466399917s ago: executing program 4 (id=2442):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x0, 0xc9}}}}, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x1b4}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000680)=0x7e)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x6bf6, 0x400, 0x5, 0x3da}, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x22f, 0x0, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x0)
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a329600000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

6.491897871s ago: executing program 2 (id=2443):
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x0, 0xc9}}}}, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x1, 0x400, 0x0, 0x1b4}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000680)=0x7e)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r5 = syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000480)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0xf1ff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0xf1ff}]}}]}, 0x40}}, 0x0)
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0904000000000000000002000000400004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a329600000008000180fffffffc08000140000000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'})

5.473552516s ago: executing program 4 (id=2444):
lsetxattr$security_capability(0x0, &(0x7f0000000040), &(0x7f0000000080)=@v3={0x3000000, [{0xd, 0x8}, {0xe, 0x7}], 0xee01}, 0x18, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x40483)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="bb0fa868627a58ae4272c6ece77749441f7c08000000000000000086d9602e2caa00003b00fe8000000000000000000000ffff9f1146fa46b440d1e52feba57f5100bbff00"/78], 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
listen(r3, 0x1ad72f7)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="c99a0211a169a4735076c883e83c0536ef5e1014e91d22cca7206b4308bad9b7859d14d929c23b9e45b1fb432abb2dae830c2dcbf618f307435f02ecf25b1076692b397560e64cd16928c9f93109e5e292c9222da1c830e14f673ff73829bd3aa3338b56e289d8ff5317e05d79348ae27bf2ac818ef1240028aa840c09aca378c788bc8d110939a5b9cfddb9de1f9c1a9c8ecc5a2499c865", 0x98}], 0x1, &(0x7f0000000040)}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0xe09, @loopback, 0x4}, 0x1c)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140084001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000200)={@empty, @broadcast, @val={@val={0x88a8, 0x1, 0x1, 0x83}, {0x8100, 0x7, 0x1, 0x3}}, {@can={0xc, {{0x2, 0x1, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "bd33843190ad9588"}}}}, 0x0)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
write$6lowpan_enable(r4, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r6)

4.854208818s ago: executing program 4 (id=2445):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
read$hiddev(r1, 0x0, 0x0)

4.785691125s ago: executing program 0 (id=2446):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a000009240301010105"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.471245774s ago: executing program 3 (id=2448):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x482480, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r4, 0x0, 0x7a, 0x5, 0x9, 0x0, {0x2, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}})
r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c643c, &(0x7f0000000300))
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000600000000000000001811f6ff000000", @ANYBLOB="0000000000000000b7080000810000007b8af8ff00000000bfa200000000000007020000"], &(0x7f0000000080)='syzkaller\x00', 0x800003, 0x1000, &(0x7f0000000c80)=""/4096, 0x40f00, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfdfe, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f0000000500)}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000200000", @ANYRES32=r6, @ANYRES16=r2, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000950000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x5, 0x4, 0x10, 0x28c55b44, 0xf21, 0x9})
syz_pidfd_open(0x0, 0x0)
mkdirat(r1, &(0x7f0000000200)='./file0\x00', 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x14, r9, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0)
r10 = landlock_create_ruleset(0x0, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r10, 0x1, 0x0, 0x0)

4.385706958s ago: executing program 2 (id=2449):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x3, 0x0}}, 0x20)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0x80, 0x0)
write$binfmt_misc(r5, &(0x7f0000000100)="46c6", 0x2)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x4, 0xa7e, 0x1a}, 0x2c)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan4\x00', <r10=>0x0})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000001300)=0x670aa715, 0x12)
r11 = syz_clone(0x2800, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000200), 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fcdbdf25140000000c0006000100000001000000080001000100000008000300", @ANYRES32=r10, @ANYBLOB="08001c00d1ab5b37bd2e2a1692bb36b2564b690d7955d12ab35d1cda8c4eca1f0cf210fd7a558489a3edde6c0fa7867e9289ac7ed99e47a405b82f5f588e2f2e172da63b6941f358a0c3d7605a9cd0cbabcd4a10e4c837122314821cb18825991b1b7ed365584f3ed31eb45d85b00b809cb9cab738272838cf1d53227c6c89b7b9", @ANYRES32=r11, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x40)
r12 = socket$kcm(0xa, 0x2, 0x0)
r13 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x11}, {@remote, 0x4e23, 0x3, 0xcd}}, 0x44)
gettid()
sendmsg$sock(r12, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, 0x0)

4.110445812s ago: executing program 3 (id=2450):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f00000002c0)={0x0, 0x8, 0x80, 0x0, 0x80, 0xfffffffd, 0xffffffff, 0xb05, 0x1, 0x107f, 0x4, 0xf41, 0x0, 0x0, 0x0})
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001)
r4 = fcntl$dupfd(r3, 0x0, r3)
read$FUSE(r4, 0x0, 0x600)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host, 0x2})

3.746050196s ago: executing program 3 (id=2451):
set_mempolicy(0x8000, &(0x7f0000000040), 0x8000)
r0 = syz_io_uring_setup(0x1116, &(0x7f0000000080)={0x0, 0xbfdc, 0x8, 0x0, 0x1}, &(0x7f0000000940), &(0x7f0000000180))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x19, &(0x7f0000000000)={0x9, 0x0, 0x0}, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
setsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000000)=0x69, 0x4) (async)
setsockopt$rose(r2, 0x104, 0x5, &(0x7f0000000000)=0x69, 0x4)

3.68458849s ago: executing program 2 (id=2452):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000380)={0xc000003, 0x27d, &(0x7f0000002080)=[0x0, 0x3, 0xb, 0x9, 0x8e88, 0x200, 0x8, 0x0, 0xe, 0x8, 0xff, 0x5, 0x3, 0x1, 0x0, 0x1, 0x2, 0x3000000, 0x6, 0xffffffff, 0x9, 0xfff, 0x64a7, 0x6, 0xa6e, 0x9, 0xce, 0x11, 0x0, 0x10000, 0x6, 0x80, 0xffffffff, 0x71add126, 0x3423, 0x0, 0x4, 0x7, 0x5, 0x8, 0x4, 0x7, 0x3, 0x0, 0x9b1, 0x105e, 0x0, 0x8000, 0x80, 0x8, 0x29, 0x10, 0x0, 0x216, 0x1ff, 0x40, 0x5, 0x578, 0x7, 0x6, 0x0, 0x4, 0x3eeaa4b0, 0x6, 0x7, 0x2, 0x3, 0x1, 0x2, 0x6, 0xffff, 0x0, 0x8, 0xfff, 0xdb5, 0x9, 0x1, 0x2, 0x1000, 0x5, 0x7fffffff, 0x23a, 0xfffff3e9, 0x3a, 0x80000000, 0x7fffffff, 0xfff, 0x7, 0x10, 0xf, 0x5788e00, 0x9, 0x7, 0x81, 0x76, 0x7, 0x6, 0x2, 0x44949089, 0x4, 0x81, 0x1, 0x9, 0x40, 0x8, 0xfffffffc, 0x2, 0x305d, 0x1, 0x0, 0x2, 0x2, 0x363c, 0xac, 0xff, 0x6, 0x0, 0x3, 0x6, 0x5, 0x9, 0x100, 0x81, 0x4, 0x8, 0xffff, 0x9, 0x7, 0x1, 0x1, 0x7c80, 0x176, 0x8001, 0x6, 0x6fc, 0x7, 0x80000000, 0xb, 0x8, 0x8, 0x7, 0x5, 0x4804, 0x8, 0x5, 0x3, 0xa, 0xd, 0x10, 0x10001, 0x800, 0xe8b8, 0x2, 0x9, 0x7, 0x9, 0x5, 0xffffffff, 0x4, 0x1, 0xa0e, 0x7, 0xd, 0x4, 0x9, 0x3, 0x0, 0x7ff, 0xffffff81, 0x7, 0xd0, 0x7, 0x3, 0x7, 0x4, 0x3, 0x2, 0x80, 0x7, 0x8, 0x0, 0x0, 0x7, 0x7, 0x9, 0xfffffffa, 0x0, 0xb5a, 0x5, 0x40, 0x1, 0x3, 0x81, 0x4, 0x2, 0x9, 0x7, 0x22b, 0xa0, 0x1, 0x7f, 0x4, 0xe, 0x7ff, 0x3, 0x7, 0x3, 0xfffff5e6, 0x800, 0x0, 0x7, 0x161, 0xf, 0x0, 0x0, 0x7fff, 0x57cb77fd, 0x3, 0x6, 0x0, 0x9, 0x1ff, 0x6, 0x9, 0x4f, 0x4, 0x8, 0x1cce, 0xfffffe01, 0x5, 0x3, 0x799cf969, 0xbb, 0xb, 0x8, 0x4, 0xf0a, 0x900000, 0x10001, 0x6, 0x6000, 0x0, 0xfffffff2, 0x7ff, 0x8000, 0x569, 0x875, 0x7, 0xe, 0x80000001, 0xfffffff9, 0x2, 0x3, 0xffffffff, 0x4, 0xe1f9, 0x4, 0x0, 0xb, 0x5, 0x40, 0x8, 0xad5d, 0x1, 0x5570, 0x9, 0xff, 0x6, 0x1, 0x5, 0xb2dd, 0x7, 0x5, 0x7f, 0x3, 0xa71b, 0x5, 0x7, 0xffff, 0x367, 0x9b, 0x6, 0x1, 0xf5, 0x4, 0x2, 0x5, 0xffffffff, 0x80000000, 0xffe00000, 0x9, 0xffff, 0x4, 0x6, 0x10, 0xfffffff8, 0x1aea, 0x0, 0xd92, 0x0, 0xfffffffb, 0x7fffffff, 0x401, 0x4, 0xfff, 0xa9, 0x5, 0x7, 0x8, 0x7, 0x5, 0x9, 0x2, 0x10001, 0x101, 0x9, 0xffffffff, 0x5, 0x3ff, 0x10, 0x1, 0x1, 0xb37, 0x6, 0x742f, 0x9, 0x7, 0x101, 0x8, 0x3, 0x2, 0xa, 0x1, 0xc78, 0x4, 0x5, 0xfffffff0, 0x1dc0aec8, 0x8, 0x40, 0xa, 0x16, 0x9, 0x3, 0x1, 0x7, 0x6e4, 0x1, 0x2ff3420a, 0x10, 0x1, 0x7, 0x7, 0x8000, 0x1, 0xfbb6, 0xd7f1, 0x8001, 0x0, 0x400, 0x7, 0xb789, 0x80000001, 0x7, 0x3, 0x4, 0x81, 0xf, 0x8, 0x8a0c, 0xfffffffa, 0x8, 0x0, 0x3, 0x6, 0x2, 0x4, 0x400, 0x8, 0x400, 0x7, 0x2, 0x1, 0x8, 0x7, 0x5, 0xfffffffd, 0x5, 0x6d2, 0x40, 0x2, 0xe, 0x8675, 0x51, 0x6, 0xffffffff, 0x10, 0x3, 0x80000000, 0x80000000, 0x2, 0x2, 0x6, 0x10001, 0x4, 0x7f, 0x401, 0x1000, 0x7, 0xfffffffb, 0x8001, 0x4, 0x0, 0x4b, 0x7, 0xcb0, 0x3, 0x78, 0x5, 0x8, 0x10001, 0x9ab, 0x6, 0x5, 0x7, 0x6, 0x81, 0x3, 0x3, 0x355a, 0x7, 0x52, 0xd, 0xcf0, 0x80000000, 0x6, 0x8, 0x80000001, 0x5, 0x1, 0x10, 0x8, 0xd, 0x5, 0xe191, 0x2, 0x200, 0x5, 0x7ff, 0x0, 0x3, 0x401, 0x8, 0x7, 0x3d6a, 0x4, 0x0, 0x7, 0xfff, 0x7f, 0x200, 0xfffffffe, 0x0, 0x5, 0x2, 0x1, 0x7fffffff, 0xffffffff, 0x0, 0x7fff, 0xeba, 0x2d, 0x1, 0xebc8, 0x401, 0x16e, 0xfff, 0x6, 0xce, 0xd, 0x200, 0x5, 0x4, 0x1, 0xfff, 0x8fc, 0x92fc, 0x7, 0x0, 0x5, 0x36, 0x2, 0x10001, 0x76c, 0x0, 0x5, 0xfffffffc, 0x9, 0x1, 0xfffffe00, 0x5b29, 0x800, 0xfffffff0, 0xac, 0xfffffffd, 0x9, 0x7, 0xdade, 0x8, 0x401, 0x6f1eb044, 0x52, 0x3, 0x4, 0x4, 0x1, 0x100, 0x3ff, 0x2, 0xbf, 0x4, 0x5, 0x3, 0x1000, 0x5, 0x345, 0xc, 0x2, 0x95, 0x3, 0x8, 0x9, 0x0, 0xe3, 0x4, 0x5, 0x0, 0x6, 0x8, 0xfff, 0x1, 0x7, 0x2, 0xffff, 0x4, 0x5, 0x2, 0xffffffff, 0x200, 0x80000001, 0x5, 0x100, 0x3ff, 0x8, 0x2, 0x8000, 0x9007, 0x8, 0x400, 0xec9e, 0x3, 0x3, 0x7, 0x0, 0xfff, 0x2, 0x3, 0x1, 0x6, 0x1, 0x9, 0x1, 0xa6a4, 0x3fc0, 0x9, 0xe0, 0x41, 0x6, 0xfff, 0xff, 0x40, 0x2, 0x6, 0xa6, 0x9, 0x83, 0x6, 0x9, 0xfffffffb, 0xb, 0x4, 0x4, 0x1ff, 0x1, 0xffffffff, 0xfff, 0x8, 0x746, 0xa34e, 0x4, 0x6, 0x0, 0x8000, 0x5, 0x5, 0x95, 0x4000000, 0x4, 0x9, 0x7, 0x380, 0x1, 0x1, 0x9, 0x3, 0x81, 0x5, 0x2, 0x2, 0x8, 0xc, 0x0, 0x10001, 0x3, 0x0, 0xbcab, 0x844, 0x6, 0xf3, 0x2, 0x7, 0xfff, 0x6, 0x2, 0x2, 0xff, 0x1], 0x0, 0x1})

3.589249488s ago: executing program 2 (id=2453):
syz_open_procfs(0x0, &(0x7f0000000780)='net/tcp6\x00')
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x8080)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
r1 = socket(0x10, 0x40000, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x8943, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x6, 0x142)
ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000240)=0x8)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000001c0))
sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffff7fffffffe, 0x0, 0x2}, 0x0)
r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r5, &(0x7f0000000180)=ANY=[], 0x86)
r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
dup3(r6, r5, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, 0x0, 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000000c0), 0x12)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)

3.502191401s ago: executing program 3 (id=2454):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r6, 0x80047456, 0x0)
socket$inet(0x2, 0x3, 0x13)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000240)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000740))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000001c0)={r8})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb392ee6262d168b33aca6c4419e26a06d31c66505701b7d6df7375f4272f4ec7f1f4c718875e08cb6005f8d89f22f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P')

2.682779132s ago: executing program 1 (id=2455):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000b00)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a400fe00000000b7060000080000001e64000000000000450403000100ff801704000001000a00b7040000ff010000720af2fe000000008500000049000000b700000070b2000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d761ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a8321e056acf27c34bed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb93ce1c0983cdcb48477b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e44c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6bc7c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c460880000000000000000000000000000007a4604baa70bda5d5f18f54e9638350a6dd81a55ab5528efd1ef5a564908db7cce99e5c569c2947763b90e03b6d1a53b590e4ff4867f0d86b9af58244866b9df33634c8d85ce1b3bfa3e5bec6989c907c2f46b9a837676e07d87bb7dba3f34694ceb5b9faf10eece00bcfd503ed3f3048782665a848d79e443de4ba97db3a9bde69be7612cb1441c61eadd5bb4494ff2eb189c2ab3a241c12f764c0719650c1b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x60, 0x10, &(0x7f0000000340), 0xfffffffffffffdef, 0x0, 0xffffffffffffffff, 0xfffffffffffffe96}, 0x42) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
pread64(r1, &(0x7f0000000080)=""/196, 0xc4, 0x3) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYRES16=0x0, @ANYRES16=r2, @ANYRES32=r2, @ANYBLOB="080034000000000004"], 0x48}, 0x1, 0x0, 0x0, 0x80040}, 0x4004011) (async)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000300))
syz_open_dev$video4linux(&(0x7f00000000c0), 0x40000000000001, 0x400) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x0, 0x0) (async)
getpgrp(0xffffffffffffffff) (async)
syz_open_dev$vcsn(&(0x7f00000000c0), 0x6c90, 0x40000) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x200100, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x5, @mcast2, 0x6}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={0x0, 0x714000, 0x1000, 0x0, 0x3}, 0x20) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async, rerun: 32)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) (rerun: 32)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x7ff)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f0000000140)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000100)=0x4}) (async, rerun: 64)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) (rerun: 64)
r8 = socket(0xa, 0x2, 0x0)
connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4e24, 0x2083, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) (async)
setsockopt$inet_udp_int(r8, 0x11, 0x67, &(0x7f0000000000)=0x2000, 0x4)

2.576802658s ago: executing program 0 (id=2456):
r0 = gettid()
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3)
fcntl$setsig(r1, 0xa, 0x12)
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
r5 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000e40), 0x2, 0x0)
readv(r5, &(0x7f0000001f00)=[{&(0x7f0000000e80)=""/4096, 0x1000}], 0x1)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]})
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]})
pipe2$9p(0x0, 0x0)
syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff01030207"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f0000000000)=@string={0x2}}, {0x2, &(0x7f0000000040)=@string={0x2}}, {0x0, 0x0}, {0x1f, &(0x7f0000000100)=@string={0x1f, 0x3, "af20122b4b197db176c3ce11c0ad08ae22ad1304a3772d31c3f55df451"}}, {0x0, 0x0}]})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r6, 0x800, 0x70bd26, 0x25ffdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x20}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x480b0}, 0x20008805)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000004c0)=@x25, 0x80, &(0x7f0000000840)=[{&(0x7f0000000540)="514e5ee99736c6933099e6c470d9e54eaa1d59f52c2e79bd974ea53c1e93ecb7da35d187ed5b5c0c3d5612a39e0086832cf9f919f8c3bc43b9f437d1023d3d10482c0f5a4e99d5bc067e29d11a3cfb6b", 0x50}, {&(0x7f00000005c0)="1bf9e5eabb18fad0ea90829fdb97901b8d15a3647828fa69ade317a1b5f8bfa369410d93e6316a0fec735d2bcec1d6890d92276f0e24afc5c052c7103203b10f80ab675474621c933f092c0f7c7bd6412317f67b5324d9c0d8d0d3d9ef09236e91678af81225f22dcd6219987c235c59baa93d55c924e9bbae4dcda5940288d87875923a7b4999660248", 0x8a}, {&(0x7f00000006c0)}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000000740)}], 0x5, &(0x7f00000008c0)=[{0xc0, 0x104, 0x1, "48a4f770344c5646a9217ec31f22ed3ba2c268d82a2a33b3d6b11bd6cec53a4c5e280f128b9e49d3e855ff0d74426e8c547a31ad314720d9b14715717d4d019a1169e0ce34943d26dbffbb4b336eb0a04c674935334fc3c5d1e8be0faf4efd58b36de86a54232e4a72e155175fcb1bf1daa08d16019c44b5705b4990e9311a600a671f582389922be44b6bde7dc05967232888e458838d445341f076052edd6d4fe30f65c0fa1d3350cdf32394ea"}, {0x18, 0x29, 0x3, "e49c3b1b2ff313b9"}], 0xd8}, 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=0x0])
poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8)
dup2(r1, r2)
fcntl$setown(r1, 0x8, r0)
tkill(r0, 0x13)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x4})
ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000cc0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x90, 0xdd, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x5, 0x80, 0x94}}}}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0xf, &(0x7f0000000d40)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x4a, 0x7, 0x8}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})
pidfd_send_signal(r3, 0x11, &(0x7f0000000080)={0x22, 0x3}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3)

2.446537264s ago: executing program 1 (id=2457):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x7)

2.433180751s ago: executing program 1 (id=2458):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xf0)
setpriority(0x0, 0x0, 0x2a14b58)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x1ab801, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0x7})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x8, 0x3, 0x6, 0x2, 0x80000000, 0x4, 0x0, 0x0, 0x1000000100800001, 0x5, 0x0, 0x2000, 0x1004, 0x0, 0x5], 0xd000, 0x200346})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000001c0)={0x1})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f00000002c0)={0xdb, 0x0, 0x4})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x4810)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008c}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @remote}, 0x1c)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000001000/0x400000)=nil)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1100000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000000000000000000000000000000002cbbaceeb2bb41"], 0x50)

2.370349053s ago: executing program 2 (id=2459):
r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x83, 0x2, "39a2"}, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x40, 0x30, 0x14, {0x14, 0x2f, "7d7fd0289cd46c0e6a43c7c56350989becc5"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000180)={0x20, 0x11, 0xf8, "0d4560fe0d56bad2b32ca862bc51c59ec63fab7d348b102c7c4b1d58a52d8164d3e613f2501d733005d5da8985d48353ed7273272412c6011eeaf8339ee9b87252100de575e58c602f57aae617e19ac65d9cb839aa8f038837124176a8e3fd62718a1f00da7c8ae98909c45579e21305a5634a8e1f4e81e218d423ef98cd9a90993c5417116bb90fe8927100094cf90d5dac735625da6f5d215780198aec84acc35dd0f82027a1b8a28b6b55f7dea35d7b8f2d7c4ebcc8a2c51d540af8ab51bdf4366ac4b28f56d4ed51a1d3706e80e85fc1b6211cee78701520f2b75de9aeaa0d65de673136a2b44a07090cd49fdc40d86a6d948d72730f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x5}})

1.877010551s ago: executing program 4 (id=2460):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r6, 0x80047456, 0x0)
socket$inet(0x2, 0x3, 0x13)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000240)={<r8=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000740))
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, &(0x7f00000001c0)={r8})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb392ee6262d168b33aca6c4419e26a06d31c66505701b7d6df7375f4272f4ec7f1f4c718875e08cb6005f8d89f22f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P')

1.660260232s ago: executing program 1 (id=2461):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0x9, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff5f)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x60, 0x2, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x8050)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x10, "0062ba7d82000000000000000000f7ffffff00"})

933.655378ms ago: executing program 2 (id=2462):
read$msr(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000)
syz_usb_connect$uac1(0x5, 0xa3, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000406b1d01014000010203010902910003018034080904000000010100000a240107005002010208240803ff00fab0082404030d82ab090c2402030502018102000c81090401000001020000090401010101020000090501090800037c090725018208addc0904020000010200000904020101010200000f24020272090700020080000000000724010412011009058209f703058e8e07"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c00000043000900000000000000000003000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
r3 = inotify_init1(0x80000)
inotify_add_watch(r3, &(0x7f00000000c0)='./file0\x00', 0x14)
r4 = inotify_init1(0x80000)
inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0x60000726)
setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
syz_open_dev$MSR(&(0x7f0000000000), 0x9, 0x0)

745.588626ms ago: executing program 1 (id=2463):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0xec5, 0x8000)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
alarm(0x3)
sched_setscheduler(r2, 0x0, &(0x7f0000000000)=0x800)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000200)="2bd036b506ea6f385192aec3f5be7918fcf82ee09ee09b072ec8242f0f6ededd4981f2e002018e643f3e205a20afd6c34174427aafc5cb82a1a2abba31fa61b8bd9d53a4c58fc55796113a15ddbf", &(0x7f0000000140)=@udp6=r3, 0x4}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r0, 0xc02064a5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0})

646.425695ms ago: executing program 1 (id=2464):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
close(0x3)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58)
accept4(r1, 0x0, 0x0, 0x0)
r2 = syz_io_uring_setup(0x891, &(0x7f0000000380)={0x0, 0x400beea, 0x80, 0x0, 0x16e}, 0x0, &(0x7f0000000140)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r3, &(0x7f0000000780)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa}})
io_uring_enter(r2, 0x47f6, 0x0, 0x60, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e65772064656661756c74206c757365723a86797aa0303030303030303030303031303033373234000000"], 0x2a, 0xfffffffffffffff9)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
move_mount(r5, &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, &(0x7f0000000180))

0s ago: executing program 3 (id=2465):
prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000009c0)=[{{&(0x7f00000000c0)=@x25={0x9, @remote}, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/172}, {&(0x7f0000000480)=""/91}], 0x0, &(0x7f0000000500)=""/27}, 0x3ff}, {{&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)=""/84}, {&(0x7f0000000680)=""/186}, {&(0x7f00000007c0)=""/243}], 0x0, &(0x7f0000000900)=""/175}}], 0x10125, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000018000180140002006261746164765f736c6176655f310000600003805c0003800c000180"], 0x8c}}, 0x0)
listen(r4, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x68}, 0x1, 0x0, 0x0, 0x20040841}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r9, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, 0x0, 0x0, 0x0, <r11=>0x0})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x3, r11, 0x0, 0x0, 0x43, &(0x7f0000000240)="eeaa327af1976a5790f526f61a108cba7e979ec9a0d3c6c46b9a6880af1cc8658705c1b5901e989b7daf7e79ba82ffd3d334ddecdefc605268c876ea9ada98dd460709"})
recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])

kernel console output (not intermixed with test programs):

5882] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  598.084515][ T5882] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  598.104000][   T24] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  598.156967][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.172741][   T24] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  598.196971][ T5882] usb 1-1: config 0 descriptor??
[  598.228941][   T24] usb 3-1: USB disconnect, device number 77
[  598.649308][ T5882] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  598.662603][ T5882] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  598.674501][ T5882] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  598.687799][ T5882] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  598.733710][ T5882] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  598.897291][ T5882] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  598.925027][ T5882] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  598.948670][ T5882] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  598.970316][ T5882] plantronics 0003:047F:FFFF.0034: unknown main item tag 0x0
[  599.004160][ T5882] plantronics 0003:047F:FFFF.0034: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  599.135154][T12612] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  599.566637][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1764'.
[  599.566670][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'.
[  599.606630][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1764'.
[  599.606655][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'.
[  599.668518][T12625] fuse: Bad value for 'fd'
[  600.623700][   T10] usb 1-1: USB disconnect, device number 65
[  601.179300][  T943] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  601.255987][   T30] audit: type=1400 audit(2000000024.197:1413): avc:  denied  { listen } for  pid=12641 comm="syz.0.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  601.331843][  T943] usb 3-1: Using ep0 maxpacket: 32
[  601.341061][  T943] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  601.341091][  T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.418284][  T943] usb 3-1: config 0 descriptor??
[  601.421236][  T943] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state
[  601.421260][  T943] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  601.421342][  T943] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  601.616579][   T10] usb 3-1: USB disconnect, device number 78
[  601.904063][   T30] audit: type=1800 audit(2000000024.901:1414): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1775" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  602.433817][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1777'.
[  603.115818][   T30] audit: type=1800 audit(2000000026.182:1415): pid=12669 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1773" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  604.456695][    T9] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[  604.583953][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'.
[  604.954579][ T5904] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  605.039954][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  605.056108][    T9] usb 1-1: not running at top speed; connect to a high speed hub
[  605.064576][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1791'.
[  605.074119][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  605.089013][T12694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1791'.
[  605.095117][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  605.123785][ T5904] usb 2-1: Using ep0 maxpacket: 32
[  605.172617][    T9] usb 1-1: string descriptor 0 read error: -22
[  605.178935][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  605.251259][ T5904] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  605.326476][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  605.372149][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.489296][T12698] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  605.543766][ T5904] usb 2-1: config 0 descriptor??
[  605.550479][    T9] usb 1-1: 0:2 : does not exist
[  605.901618][ T5904] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state
[  605.908797][ T5904] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  605.919155][ T5904] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  605.968484][ T5904] usb 2-1: USB disconnect, device number 67
[  606.115709][    T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  606.247571][   T30] audit: type=1800 audit(2000000029.425:1416): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1796" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  606.502853][    T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  606.537958][    T9] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  606.598257][    T9] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  606.635214][    T9] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  606.664132][    T9] usb 1-1: USB disconnect, device number 66
[  607.295010][ T5882] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  607.458355][ T5882] usb 2-1: Using ep0 maxpacket: 16
[  607.486161][    T9] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  607.541679][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  607.605221][ T5882] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  607.618323][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.706496][ T5882] usb 2-1: config 0 descriptor??
[  607.714111][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  607.724555][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  607.753712][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  607.774419][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  607.787639][    T9] usb 5-1: string descriptor 0 read error: -22
[  607.812859][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  607.836707][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.859159][    T9] usb 5-1: 0:2 : does not exist
[  608.009546][T12747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1809'.
[  608.967420][   T30] audit: type=1326 audit(2000000032.071:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12717 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574dd8eec9 code=0x7fc00000
[  608.995559][ T5882] mcp2221 0003:04D8:00DD.0035: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  609.241952][    T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  609.251129][    T9] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  609.255862][    T9] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  609.268588][    T9] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  609.271791][    T9] usb 5-1: USB disconnect, device number 77
[  610.006700][   T30] audit: type=1326 audit(2000000033.152:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe058eec9 code=0x7fc00000
[  610.430937][    T9] usb 2-1: USB disconnect, device number 68
[  610.438454][   T30] audit: type=1326 audit(2000000033.803:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12717 comm="syz.1.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f574dd8eec9 code=0x7fc00000
[  610.835745][T12774] 9pnet_fd: Insufficient options for proto=fd
[  611.022353][T12777] 9pnet_fd: Insufficient options for proto=fd
[  611.511849][    T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  611.711676][T12793] 9pnet_fd: Insufficient options for proto=fd
[  611.859119][    T9] usb 5-1: Using ep0 maxpacket: 8
[  611.945031][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  611.975692][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  612.004781][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  612.026178][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  612.064904][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  612.118683][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  612.177412][   T30] audit: type=1326 audit(2000000035.640:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12756 comm="syz.3.1810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefe058eec9 code=0x7fc00000
[  612.250987][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.467412][ T5882] usb 3-1: new full-speed USB device number 79 using dummy_hcd
[  612.506141][    T9] usb 5-1: usb_control_msg returned -32
[  612.528745][    T9] usbtmc 5-1:16.0: can't read capabilities
[  612.739415][    T9] usb 5-1: USB disconnect, device number 78
[  612.754526][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short
[  612.763036][ T5882] usb 3-1: not running at top speed; connect to a high speed hub
[  612.776685][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  612.788285][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  613.127726][ T5882] usb 3-1: string descriptor 0 read error: -22
[  613.234985][ T5882] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  613.265054][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.282014][ T5882] usb 3-1: 0:2 : does not exist
[  614.305672][ T5917] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  614.318022][ T5882] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  614.340436][ T5882] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  614.426856][ T5882] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  614.434905][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1832'.
[  614.505568][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short
[  614.515945][ T5917] usb 5-1: config 1 interface 1 has no altsetting 0
[  614.524529][ T5917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  614.533828][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.550159][ T5882] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  614.561915][ T5917] usb 5-1: Product: syz
[  614.581531][ T5917] usb 5-1: Manufacturer: syz
[  614.586484][ T5882] usb 3-1: USB disconnect, device number 79
[  614.616622][ T5917] usb 5-1: SerialNumber: syz
[  614.917119][T12831] binder: BC_ACQUIRE_RESULT not supported
[  614.923366][T12831] binder: 12830:12831 ioctl c0306201 200000000500 returned -22
[  615.098505][ T5917] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  615.146785][ T5917] usb 5-1: found format II with max.bitrate = 2418, frame size=7
[  615.154864][ T5917] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  615.164586][ T5917] usb 5-1: found format II with max.bitrate = 2418, frame size=7
[  615.304517][ T5917] usb 5-1: USB disconnect, device number 79
[  615.648458][ T5960] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  615.802613][ T5960] usb 2-1: Using ep0 maxpacket: 16
[  615.833893][ T5960] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.839440][T12854] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1838'.
[  615.903350][ T5960] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  615.954159][ T5960] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.967411][ T5960] usb 2-1: config 0 descriptor??
[  616.144575][T12858] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  616.618896][   T30] audit: type=1326 audit(2000000040.354:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12841 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f574dd8eec9 code=0x7fc00000
[  616.844598][ T5960] mcp2221 0003:04D8:00DD.0036: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  616.883485][T12854] netlink: 'syz.4.1838': attribute type 1 has an invalid length.
[  616.899015][T12854] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1838'.
[  618.244491][   T24] usb 2-1: USB disconnect, device number 69
[  618.253262][   T30] audit: type=1326 audit(2000000041.992:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12841 comm="syz.1.1835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f574dd8eec9 code=0x7fc00000
[  618.277158][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  618.284194][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  618.345436][    T9] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  618.614577][T12892] Failed to get privilege flags for destination (handle=0x2:0x0)
[  618.706904][    T9] usb 3-1: Using ep0 maxpacket: 16
[  618.754362][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  619.276963][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  619.294919][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  619.322258][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.334401][    T9] usb 3-1: Product: syz
[  619.340212][    T9] usb 3-1: Manufacturer: syz
[  619.346967][    T9] usb 3-1: SerialNumber: syz
[  619.353604][    T9] usb 3-1: config 0 descriptor??
[  619.365324][    T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  619.460540][    T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  619.775199][   T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  619.926258][   T24] usb 2-1: Using ep0 maxpacket: 32
[  619.933048][   T24] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  619.942667][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.952643][   T24] usb 2-1: config 0 descriptor??
[  619.959870][   T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  619.966958][    T9] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  619.975870][    T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  619.982646][ T5917] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[  620.001665][ T5882] usb 1-1: new full-speed USB device number 67 using dummy_hcd
[  620.130224][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short
[  620.139776][ T5917] usb 5-1: not running at top speed; connect to a high speed hub
[  620.150139][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short
[  620.158857][ T5917] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  620.170311][ T5882] usb 1-1: not running at top speed; connect to a high speed hub
[  620.192685][ T5917] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  620.193072][    T9] em28xx 3-1:0.0: AC97 command still being executed: not handled properly!
[  620.205489][ T5882] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  620.222169][    T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  620.227384][ T5882] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  620.229318][    T9] em28xx 3-1:0.0: No AC97 audio processor
[  620.249451][ T5917] usb 5-1: string descriptor 0 read error: -22
[  620.255769][ T5917] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  620.268927][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.284105][ T5882] usb 1-1: string descriptor 0 read error: -22
[  620.291944][ T5882] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  620.305282][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.318608][ T5917] usb 5-1: 0:2 : does not exist
[  620.470808][ T5971] usb 3-1: USB disconnect, device number 80
[  620.477955][ T5971] em28xx 3-1:0.0: Disconnecting em28xx
[  620.485231][ T5971] em28xx 3-1:0.0: Freeing device
[  621.046770][ T5917] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  621.064381][ T5917] usb 5-1: Warning! Unlikely big volume range (=17677), cval->res is probably wrong.
[  621.087613][ T5917] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/17677/1
[  621.108154][ T5917] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  621.129381][ T5917] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  621.166870][ T5917] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  621.190805][ T5917] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  621.209130][ T5882] usb 1-1: 0:2 : does not exist
[  621.223057][ T5917] usb 5-1: USB disconnect, device number 80
[  621.869068][   T30] audit: type=1326 audit(2000000045.708:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe058eec9 code=0x7fc00000
[  621.872804][   T24] gspca_vc032x: reg_w err -71
[  621.907931][ T5882] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  621.926382][ T5882] usb 1-1: Warning! Unlikely big volume range (=17677), cval->res is probably wrong.
[  621.940156][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  621.943027][T12929] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1859'.
[  621.951699][ T5882] usb 1-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/17677/1
[  621.963147][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  621.974678][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  621.985162][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  621.996884][ T5882] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  622.006978][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.021343][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.032106][ T5882] usb 1-1: 5:0: failed to get current value for ch 1 (-22)
[  622.042451][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.053364][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.068428][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.082594][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.095274][ T5882] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5)
[  622.104355][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.117450][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.133566][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.144654][ T5882] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5)
[  622.153445][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.166596][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.180889][ T5882] usb 1-1: USB disconnect, device number 67
[  622.190235][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.201857][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.224927][   T24] gspca_vc032x: I2c Bus Busy Wait 00
[  622.237514][   T24] gspca_vc032x: Unknown sensor...
[  622.249208][   T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  622.277468][   T24] usb 2-1: USB disconnect, device number 70
[  622.459418][ T5917] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  622.621322][ T5917] usb 5-1: Using ep0 maxpacket: 8
[  622.634207][ T5917] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  622.661871][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.682760][ T5917] usb 5-1: Product: syz
[  622.693329][ T5917] usb 5-1: Manufacturer: syz
[  622.705407][ T5917] usb 5-1: SerialNumber: syz
[  622.862507][ T5917] usb 5-1: config 0 descriptor??
[  622.881176][ T5917] gspca_main: sq930x-2.14.0 probing 2770:930c
[  624.050616][ T5917] gspca_sq930x: ucbus_write failed -110
[  624.059637][ T5917] sq930x 5-1:0.0: probe with driver sq930x failed with error -110
[  624.064741][   T30] audit: type=1326 audit(2000000048.175:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12919 comm="syz.3.1858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefe058eec9 code=0x7fc00000
[  624.625915][   T30] audit: type=1400 audit(2000000048.763:1425): avc:  denied  { create } for  pid=12971 comm="syz.2.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  624.795288][ T5917] libceph: connect (1)[c::]:6789 error -101
[  624.801552][ T5917] libceph: mon0 (1)[c::]:6789 connect error
[  624.819225][T12975] ceph: No mds server is up or the cluster is laggy
[  625.342673][    T9] usb 5-1: USB disconnect, device number 81
[  625.503624][T12987] 9pnet_fd: Insufficient options for proto=fd
[  625.689205][ T5904] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  625.803584][    T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  625.841788][ T5960] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  625.849424][ T5904] usb 2-1: Using ep0 maxpacket: 32
[  625.857162][ T5904] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  625.869626][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.879177][ T5904] usb 2-1: config 0 descriptor??
[  625.909498][ T5904] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state
[  625.926112][ T5904] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  625.936567][ T5904] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  625.982580][    T9] usb 5-1: Using ep0 maxpacket: 16
[  625.991326][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  626.004075][ T5960] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  626.016945][ T5960] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.031726][    T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  626.045164][ T5960] usb 1-1: config 0 descriptor??
[  626.051545][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.074795][    T9] usb 5-1: config 0 descriptor??
[  626.097888][ T5904] usb 2-1: USB disconnect, device number 71
[  626.453193][T12998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=12998 comm=syz.0.1881
[  626.719547][   T30] audit: type=1326 audit(2000000050.957:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12990 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154698eec9 code=0x7fc00000
[  626.926899][ T5960] ath6kl: Failed to read usb control message: -71
[  626.938815][    T9] mcp2221 0003:04D8:00DD.0037: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  626.949645][ T5960] ath6kl: Unable to read the bmi data from the device: -71
[  626.957370][ T5960] ath6kl: Unable to recv target info: -71
[  626.995081][ T5960] ath6kl: Failed to init ath6kl core: -71
[  627.001324][ T5960] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  627.023833][ T5960] usb 1-1: USB disconnect, device number 68
[  628.392268][   T30] audit: type=1326 audit(2000000052.615:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12990 comm="syz.4.1879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f154698eec9 code=0x7fc00000
[  628.416833][    T9] usb 5-1: USB disconnect, device number 82
[  629.236275][    T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  629.387277][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  629.396647][    T9] usb 5-1: config 63 has an invalid interface number: 66 but max is 0
[  629.407731][    T9] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  629.427013][    T9] usb 5-1: config 63 has no interface number 0
[  629.451797][    T9] usb 5-1: config 63 interface 66 has no altsetting 0
[  629.459381][    T9] usb 5-1: language id specifier not provided by device, defaulting to English
[  629.473110][    T9] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  629.483128][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.492527][    T9] usb 5-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ
[  629.652511][   T24] usb 2-1: new full-speed USB device number 72 using dummy_hcd
[  629.820457][T13063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.856768][T13063] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  629.931369][   T24] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  629.955450][   T24] usb 2-1: config 0 has no interface number 0
[  630.467178][   T24] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  630.557920][   T24] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  630.569296][   T24] usb 2-1: config 0 interface 113 has no altsetting 0
[  630.580005][   T24] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  630.600014][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.609533][   T24] usb 2-1: Product: syz
[  630.613823][   T24] usb 2-1: Manufacturer: syz
[  630.618787][   T24] usb 2-1: SerialNumber: syz
[  630.631797][   T24] usb 2-1: config 0 descriptor??
[  630.760388][   T24] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  631.279035][   T30] audit: type=1326 audit(2000000055.744:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13043 comm="syz.4.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154698eec9 code=0x7fc00000
[  631.302592][    C1] vkms_vblank_simulate: vblank timer overrun
[  631.400916][    T9] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22
[  631.419315][    T9] usb 5-1: USB disconnect, device number 83
[  632.309083][    T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  632.628036][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  632.644377][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  632.800018][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  632.813912][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  632.823745][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  632.903916][    T9] usb 5-1: config 0 descriptor??
[  633.090099][   T24] usb 2-1: USB disconnect, device number 72
[  633.236797][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1908'.
[  633.246491][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1908'.
[  633.261713][   T30] audit: type=1400 audit(2000000057.823:1429): avc:  denied  { connect } for  pid=13095 comm="syz.3.1908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  633.344958][    T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  633.364455][    T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  633.844953][   T30] audit: type=1400 audit(2000000057.823:1430): avc:  denied  { ioctl } for  pid=13095 comm="syz.3.1908" path="socket:[46231]" dev="sockfs" ino=46231 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  633.870764][    T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  633.878848][    T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  633.960614][    T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  633.982413][    T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  633.990547][    T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  633.998922][    T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  634.007047][    T9] plantronics 0003:047F:FFFF.0038: unknown main item tag 0x0
[  634.246385][    T9] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  634.661648][   T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  634.835155][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  634.853655][   T24] usb 2-1: config 1 interface 1 has no altsetting 0
[  634.861878][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  634.871703][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.898226][   T24] usb 2-1: Product: syz
[  634.915983][   T24] usb 2-1: Manufacturer: syz
[  634.923631][   T24] usb 2-1: SerialNumber: syz
[  635.057943][  T979] usb 5-1: USB disconnect, device number 84
[  635.085595][ T5917] libceph: connect (1)[c::]:6789 error -101
[  635.093104][ T5917] libceph: mon0 (1)[c::]:6789 connect error
[  635.143534][T13125] ceph: No mds server is up or the cluster is laggy
[  635.154129][T13120] binder: BC_ACQUIRE_RESULT not supported
[  635.164543][T13120] binder: 13119:13120 ioctl c0306201 200000000500 returned -22
[  635.195192][T13129] ceph: No mds server is up or the cluster is laggy
[  635.254813][   T24] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  635.284935][   T24] usb 2-1: found format II with max.bitrate = 2418, frame size=7
[  635.367124][   T24] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  635.375177][   T24] usb 2-1: found format II with max.bitrate = 2418, frame size=7
[  635.424960][   T24] usb 2-1: USB disconnect, device number 73
[  637.976912][  T979] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  638.035785][    T9] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  638.250884][  T979] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  638.263654][  T979] usb 2-1: config 0 has no interface number 0
[  638.274523][  T979] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  638.287744][  T979] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  638.298481][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  638.313720][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  638.324637][  T979] usb 2-1: config 0 interface 113 has no altsetting 0
[  638.332122][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  638.345952][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  638.397008][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  638.443522][  T979] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  638.453140][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.461156][  T979] usb 2-1: Product: syz
[  638.465732][  T979] usb 2-1: Manufacturer: syz
[  638.470387][  T979] usb 2-1: SerialNumber: syz
[  638.484027][    T9] usb 1-1: config 0 descriptor??
[  638.959279][  T979] usb 2-1: config 0 descriptor??
[  638.974172][  T979] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  639.524866][    T9] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  640.412726][ T5917] usb 1-1: USB disconnect, device number 69
[  640.853825][    T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  641.098773][ T5917] usb 2-1: USB disconnect, device number 74
[  641.112878][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  641.124707][    T9] usb 5-1: config 1 interface 1 has no altsetting 0
[  641.157215][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  641.182216][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  641.213667][    T9] usb 5-1: Product: syz
[  641.252528][    T9] usb 5-1: Manufacturer: syz
[  641.262466][    T9] usb 5-1: SerialNumber: syz
[  641.684115][T13210] tc_dump_action: action bad kind
[  641.740390][T13210] : Can't lookup blockdev
[  641.785665][T13212] binder: BC_ACQUIRE_RESULT not supported
[  641.793571][T13212] binder: 13191:13212 ioctl c0306201 200000000500 returned -22
[  641.831908][    T9] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  641.840513][    T9] usb 5-1: found format II with max.bitrate = 2418, frame size=7
[  641.852333][    T9] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  641.869597][    T9] usb 5-1: found format II with max.bitrate = 2418, frame size=7
[  641.959274][    T9] usb 5-1: USB disconnect, device number 85
[  644.540313][    T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  644.559235][  T979] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  644.654193][   T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  644.829502][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  644.929194][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  645.026239][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  645.078794][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  645.088677][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.095033][  T979] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  645.101098][   T24] usb 5-1: config 0 descriptor??
[  645.105414][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  645.131169][  T979] usb 1-1: config 0 has no interface number 0
[  645.138463][  T979] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  645.151201][  T979] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  645.151345][    T9] usb 2-1: config 1 interface 1 has no altsetting 0
[  645.168992][  T979] usb 1-1: config 0 interface 113 has no altsetting 0
[  645.178809][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  645.188813][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.201843][    T9] usb 2-1: Product: syz
[  645.206251][    T9] usb 2-1: Manufacturer: syz
[  645.211706][  T979] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  645.220907][    T9] usb 2-1: SerialNumber: syz
[  645.225593][  T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.234456][  T979] usb 1-1: Product: syz
[  645.239925][  T979] usb 1-1: Manufacturer: syz
[  645.245325][  T979] usb 1-1: SerialNumber: syz
[  645.254827][  T979] usb 1-1: config 0 descriptor??
[  645.264972][  T979] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  645.334450][T13253] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  645.461500][T13240] binder: BC_ACQUIRE_RESULT not supported
[  645.469656][T13240] binder: 13238:13240 ioctl c0306201 200000000500 returned -22
[  645.490244][    T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  645.508256][    T9] usb 2-1: found format II with max.bitrate = 2418, frame size=7
[  645.517907][    T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  645.529780][    T9] usb 2-1: found format II with max.bitrate = 2418, frame size=7
[  645.535307][   T24] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  645.591182][    T9] usb 2-1: USB disconnect, device number 75
[  645.951310][   T24] usb 1-1: USB disconnect, device number 70
[  646.211973][T13266] i2c i2c-0: Invalid block write size 33
[  646.828412][  T979] usb 5-1: reset high-speed USB device number 86 using dummy_hcd
[  647.647747][T13289] tc_dump_action: action bad kind
[  647.735528][T13289] : Can't lookup blockdev
[  647.880392][   T30] audit: type=1400 audit(2000000073.171:1431): avc:  denied  { getopt } for  pid=13285 comm="syz.4.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  647.951184][    T9] usb 5-1: USB disconnect, device number 86
[  647.979945][T13294] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  648.028097][T13294] syzkaller0: entered promiscuous mode
[  648.051610][T13294] syzkaller0: entered allmulticast mode
[  648.196382][T13294] tipc: Resetting bearer <eth:syzkaller0>
[  648.262007][T13293] tipc: Resetting bearer <eth:syzkaller0>
[  648.356359][T13293] tipc: Disabling bearer <eth:syzkaller0>
[  648.571029][   T10] usb 2-1: new full-speed USB device number 76 using dummy_hcd
[  649.080780][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  649.089730][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  649.132305][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  649.144490][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  649.238759][   T10] usb 2-1: string descriptor 0 read error: -22
[  649.246997][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  649.269340][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.323746][   T10] usb 2-1: 0:2 : does not exist
[  649.624194][T13309] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  649.820042][   T10] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  649.836858][   T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  649.859876][   T10] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  649.970373][   T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  650.395825][   T10] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  650.432859][   T10] usb 2-1: USB disconnect, device number 76
[  650.904475][T13329] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1974'.
[  651.542910][T13324] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  651.836805][ T5971] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  652.031311][ T5971] usb 1-1: Using ep0 maxpacket: 16
[  652.578636][ T5971] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  652.587218][ T5971] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  652.602288][ T5971] usb 1-1: config 0 has no interface number 0
[  652.701422][ T5971] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  653.017878][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.017904][ T5971] usb 1-1: Product: syz
[  653.017918][ T5971] usb 1-1: Manufacturer: syz
[  653.017933][ T5971] usb 1-1: SerialNumber: syz
[  653.020828][ T5971] usb 1-1: config 0 descriptor??
[  653.022542][ T5971] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  653.022562][ T5971] usb 1-1: No valid video chain found.
[  653.227613][   T10] usb 2-1: new full-speed USB device number 77 using dummy_hcd
[  653.381302][   T10] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  653.389962][   T10] usb 2-1: config 0 has no interface number 0
[  653.408629][   T10] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  653.441024][   T10] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  653.452167][   T10] usb 2-1: config 0 interface 113 has no altsetting 0
[  653.463447][   T10] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  653.491970][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.500570][   T10] usb 2-1: Product: syz
[  653.507534][   T10] usb 2-1: Manufacturer: syz
[  653.512198][   T10] usb 2-1: SerialNumber: syz
[  653.521109][   T10] usb 2-1: config 0 descriptor??
[  653.534321][   T10] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  654.500787][   T10] usb 1-1: USB disconnect, device number 71
[  655.027857][   T10] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  655.181297][   T10] usb 1-1: Using ep0 maxpacket: 16
[  655.202101][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  655.222494][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  655.245344][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  655.258060][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.347469][   T10] usb 1-1: Product: syz
[  655.439879][   T10] usb 1-1: Manufacturer: syz
[  655.472626][   T10] usb 1-1: SerialNumber: syz
[  655.489122][   T10] usb 1-1: config 0 descriptor??
[  655.521452][   T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  655.544353][   T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  656.423397][   T10] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  656.430569][   T10] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  656.486635][    T9] usb 5-1: new full-speed USB device number 87 using dummy_hcd
[  656.585607][   T24] usb 2-1: USB disconnect, device number 77
[  656.705119][   T10] em28xx 1-1:0.0: AC97 command still being executed: not handled properly!
[  657.003064][   T10] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  657.019697][   T10] em28xx 1-1:0.0: No AC97 audio processor
[  657.033895][   T10] usb 1-1: USB disconnect, device number 72
[  657.041530][   T10] em28xx 1-1:0.0: Disconnecting em28xx
[  657.047531][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  657.060003][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  657.071075][   T10] em28xx 1-1:0.0: Freeing device
[  657.080219][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  657.091057][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  657.245919][    T9] usb 5-1: string descriptor 0 read error: -22
[  657.255192][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  657.264821][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.280131][    T9] usb 5-1: 0:2 : does not exist
[  657.285492][ T5904] usb 2-1: new full-speed USB device number 78 using dummy_hcd
[  657.439332][ T5904] usb 2-1: unable to get BOS descriptor or descriptor too short
[  657.447846][ T5904] usb 2-1: not running at top speed; connect to a high speed hub
[  657.458302][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  657.487955][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  657.539303][ T5904] usb 2-1: string descriptor 0 read error: -22
[  657.550301][ T5904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  657.571706][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.737223][    T9] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  657.880916][    T9] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  657.911674][    T9] usb 5-1: 5:0: failed to get current value for ch 1 (-22)
[  657.952464][    T9] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5)
[  657.968690][    T9] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5)
[  657.992236][ T5904] usb 2-1: 0:2 : does not exist
[  658.002576][    T9] usb 5-1: USB disconnect, device number 87
[  658.257783][ T5904] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  658.317671][ T5904] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  658.348273][ T5904] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  658.463475][ T5904] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5)
[  658.564423][ T5904] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  658.600568][ T5904] usb 2-1: USB disconnect, device number 78
[  658.629182][T13410] tc_dump_action: action bad kind
[  658.645156][T13410] : Can't lookup blockdev
[  658.725344][T13421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2002'.
[  659.293972][T13432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  659.317019][T13432] syzkaller0: entered promiscuous mode
[  659.324765][T13432] syzkaller0: entered allmulticast mode
[  659.357189][T13431] tipc: Resetting bearer <eth:syzkaller0>
[  659.395283][T13431] tipc: Disabling bearer <eth:syzkaller0>
[  659.428709][ T5904] usb 2-1: new full-speed USB device number 79 using dummy_hcd
[  659.653782][ T5904] usb 2-1: config 0 has an invalid interface number: 113 but max is 0
[  659.682168][ T5904] usb 2-1: config 0 has no interface number 0
[  659.699003][ T5904] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  659.731489][ T5904] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  659.757368][ T5904] usb 2-1: config 0 interface 113 has no altsetting 0
[  659.773627][ T5904] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  659.786634][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.795707][ T5904] usb 2-1: Product: syz
[  659.806065][ T5904] usb 2-1: Manufacturer: syz
[  659.811243][ T5904] usb 2-1: SerialNumber: syz
[  659.825634][ T5904] usb 2-1: config 0 descriptor??
[  659.836289][ T5904] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  660.314633][  T979] usb 3-1: new full-speed USB device number 81 using dummy_hcd
[  660.492997][  T979] usb 3-1: unable to get BOS descriptor or descriptor too short
[  660.504229][  T979] usb 3-1: not running at top speed; connect to a high speed hub
[  660.576055][  T979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  660.645075][  T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  660.677209][  T979] usb 3-1: string descriptor 0 read error: -22
[  660.685438][  T979] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  660.705397][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.849835][  T979] usb 3-1: 0:2 : does not exist
[  661.843219][  T979] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  661.866725][  T979] usb 3-1: Warning! Unlikely big volume range (=17677), cval->res is probably wrong.
[  661.901725][  T979] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/17677/1
[  661.985532][  T979] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  662.047603][  T979] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  662.081985][  T979] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  662.110786][  T979] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  662.164526][  T979] usb 3-1: USB disconnect, device number 81
[  662.488543][   T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  662.541313][ T5971] usb 2-1: USB disconnect, device number 79
[  662.622214][T13474] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2018'.
[  663.232774][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  663.284986][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  663.317192][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  663.332980][   T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  663.342470][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  663.373688][   T24] usb 5-1: config 0 descriptor??
[  663.774243][   T24] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[  663.785568][   T24] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[  663.793737][   T24] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[  663.803372][   T24] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[  663.813098][   T24] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[  663.822801][   T24] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[  663.834355][   T24] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[  663.846043][   T24] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[  663.856461][   T24] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0
[  663.931770][   T24] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  664.010107][ T5971] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  664.211984][ T5971] usb 1-1: unable to get BOS descriptor or descriptor too short
[  664.453106][ T5971] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[  664.466643][ T5971] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  664.488842][ T5971] usb 1-1: config 63 has no interface number 0
[  664.495266][ T5971] usb 1-1: config 63 interface 66 has no altsetting 0
[  664.505547][ T5971] usb 1-1: language id specifier not provided by device, defaulting to English
[  664.530926][ T5971] usb 1-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  664.541582][   T24] libceph: connect (1)[c::]:6789 error -101
[  664.549413][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  664.557926][T13498] ceph: No mds server is up or the cluster is laggy
[  664.583480][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.658908][ T5971] usb 1-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ
[  664.899308][T13507] overlayfs: failed to clone upperpath
[  665.331529][T13496] usb 5-1: string descriptor 0 read error: -71
[  665.389440][T13512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  665.405337][T13512] syzkaller0: entered promiscuous mode
[  665.412380][T13512] syzkaller0: entered allmulticast mode
[  665.441723][   T30] audit: type=1326 audit(2000000091.616:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13491 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280af8eec9 code=0x7fc00000
[  665.546671][T13511] tipc: Resetting bearer <eth:syzkaller0>
[  666.224209][T13511] tipc: Disabling bearer <eth:syzkaller0>
[  666.392635][    T9] usb 5-1: USB disconnect, device number 88
[  666.545412][   T30] audit: type=1326 audit(2000000092.707:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13491 comm="syz.0.2025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280af8eec9 code=0x7fc00000
[  666.546342][T13524] SELinux:  Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  666.568906][    C0] vkms_vblank_simulate: vblank timer overrun
[  666.665899][    C0] vkms_vblank_simulate: vblank timer overrun
[  666.674525][ T5971] uvcvideo 1-1:63.66: probe with driver uvcvideo failed with error -22
[  666.687528][ T5971] usb 1-1: USB disconnect, device number 73
[  666.750189][  T979] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[  667.203902][  T979] usb 3-1: config 0 has an invalid interface number: 113 but max is 0
[  667.449690][  T979] usb 3-1: config 0 has no interface number 0
[  667.477959][  T979] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  667.497146][  T979] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  667.587671][  T979] usb 3-1: config 0 interface 113 has no altsetting 0
[  667.619110][  T979] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  667.628606][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  667.638090][  T979] usb 3-1: Product: syz
[  667.655938][  T979] usb 3-1: Manufacturer: syz
[  667.665493][  T979] usb 3-1: SerialNumber: syz
[  667.770544][  T979] usb 3-1: config 0 descriptor??
[  667.782606][    T9] libceph: connect (1)[c::]:6789 error -101
[  667.818329][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  667.835713][T13548] ceph: No mds server is up or the cluster is laggy
[  667.849132][    T9] libceph: connect (1)[c::]:6789 error -101
[  667.876671][   T30] audit: type=1400 audit(2000000094.156:1434): avc:  denied  { setattr } for  pid=13534 comm="syz.4.2035" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  667.878542][T13551] 9pnet_fd: Insufficient options for proto=fd
[  667.899718][    C0] vkms_vblank_simulate: vblank timer overrun
[  667.931691][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  668.175237][  T979] pn533_usb 3-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  669.716800][  T979] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  669.734713][T13573] 9pnet_fd: Insufficient options for proto=fd
[  669.909728][  T979] usb 5-1: unable to get BOS descriptor or descriptor too short
[  669.920921][  T979] usb 5-1: config 63 has an invalid interface number: 66 but max is 0
[  669.932358][  T979] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  669.946583][  T979] usb 5-1: config 63 has no interface number 0
[  670.056881][ T5882] usb 3-1: USB disconnect, device number 82
[  670.058634][  T979] usb 5-1: config 63 interface 66 has no altsetting 0
[  670.095825][  T979] usb 5-1: language id specifier not provided by device, defaulting to English
[  670.222897][  T979] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  670.232324][  T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.240621][  T979] usb 5-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ
[  671.249032][   T30] audit: type=1326 audit(2000000097.704:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154698eec9 code=0x7fc00000
[  671.577045][T13595] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0)
[  671.853908][T13602] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  671.890822][T13602] syzkaller0: entered promiscuous mode
[  671.920905][T13602] syzkaller0: entered allmulticast mode
[  671.989067][T13597] tipc: Resetting bearer <eth:syzkaller0>
[  672.014176][T13597] tipc: Disabling bearer <eth:syzkaller0>
[  672.240024][   T30] audit: type=1326 audit(2000000098.744:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13564 comm="syz.4.2044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154698eec9 code=0x7fc00000
[  672.282893][  T979] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22
[  672.293237][  T979] usb 5-1: USB disconnect, device number 89
[  672.583910][    T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  672.660321][  T979] usb 5-1: new full-speed USB device number 90 using dummy_hcd
[  672.770356][    T9] usb 3-1: Using ep0 maxpacket: 16
[  672.975504][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  673.010840][    T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  673.023748][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.123255][  T979] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  673.170039][    T9] usb 3-1: config 0 descriptor??
[  673.184717][  T979] usb 5-1: config 0 has no interface number 0
[  673.205145][  T979] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  673.238060][  T979] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  673.287918][  T979] usb 5-1: config 0 interface 113 has no altsetting 0
[  673.297130][  T979] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  673.374281][  T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  673.412413][  T979] usb 5-1: Product: syz
[  673.421404][  T979] usb 5-1: Manufacturer: syz
[  673.426925][  T979] usb 5-1: SerialNumber: syz
[  673.434968][  T979] usb 5-1: config 0 descriptor??
[  673.442369][  T979] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  673.935863][   T30] audit: type=1326 audit(2000000100.476:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ccf8eec9 code=0x7fc00000
[  674.120142][    T9] mcp2221 0003:04D8:00DD.003C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[  674.255671][T13643] tc_dump_action: action bad kind
[  674.262293][T13643] : Can't lookup blockdev
[  675.368383][T13647] tc_dump_action: action bad kind
[  675.542126][ T5882] usb 3-1: USB disconnect, device number 83
[  675.552669][   T30] audit: type=1326 audit(2000000102.156:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13612 comm="syz.2.2056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff2ccf8eec9 code=0x7fc00000
[  675.797888][T13647] : Can't lookup blockdev
[  676.326741][ T5882] usb 5-1: USB disconnect, device number 90
[  676.753377][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  676.760124][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  677.073341][  T979] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  677.270927][  T979] usb 2-1: Using ep0 maxpacket: 32
[  677.277675][  T979] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  677.287248][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.302103][  T979] usb 2-1: config 0 descriptor??
[  677.310187][  T979] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state
[  677.317021][  T979] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  677.325083][  T979] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  677.522303][ T5971] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  677.541191][  T979] usb 2-1: USB disconnect, device number 80
[  677.758830][ T5971] usb 3-1: Using ep0 maxpacket: 16
[  677.769007][ T5971] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  677.784137][ T5971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  677.877252][ T5971] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  677.888303][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  677.899531][ T5971] usb 3-1: Product: syz
[  677.903734][ T5971] usb 3-1: Manufacturer: syz
[  677.914562][ T5971] usb 3-1: SerialNumber: syz
[  677.928555][ T5971] usb 3-1: config 0 descriptor??
[  677.948382][ T5971] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  677.950448][T13704] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2084'.
[  677.973579][ T5971] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  678.249095][T13707] netlink: 'syz.3.2085': attribute type 10 has an invalid length.
[  678.350956][T13707] veth0_vlan: left promiscuous mode
[  678.486843][T13707] veth0_vlan: entered promiscuous mode
[  678.644385][T13707] team0: Device veth0_vlan failed to register rx_handler
[  678.651749][ T5971] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  678.674475][ T5971] em28xx 3-1:0.0: Config register raw data: 0xee
[  678.691268][ T5971] em28xx 3-1:0.0: I2S Audio (1 sample rate(s))
[  678.697460][ T5971] em28xx 3-1:0.0: No AC97 audio processor
[  678.718486][    T9] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  678.860921][    T9] usb 2-1: Using ep0 maxpacket: 16
[  678.871934][    T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  678.880660][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  678.930962][    T9] usb 2-1: config 0 has no interface number 0
[  678.942516][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  678.963806][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.973760][    T9] usb 2-1: Product: syz
[  678.981356][    T9] usb 2-1: Manufacturer: syz
[  678.987826][    T9] usb 2-1: SerialNumber: syz
[  678.999683][    T9] usb 2-1: config 0 descriptor??
[  679.015264][    T9] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  679.024469][    T9] usb 2-1: No valid video chain found.
[  679.085874][ T5971] usb 3-1: USB disconnect, device number 84
[  679.273593][    T9] usb 2-1: USB disconnect, device number 81
[  680.029979][T13748] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2097'.
[  680.043284][   T30] audit: type=1400 audit(2000000106.943:1439): avc:  denied  { setopt } for  pid=13746 comm="syz.1.2097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  680.064531][T13749] tc_dump_action: action bad kind
[  680.098744][T13743] : Can't lookup blockdev
[  681.329902][ T5971] libceph: connect (1)[c::]:6789 error -101
[  681.342689][ T5971] libceph: mon0 (1)[c::]:6789 connect error
[  681.423610][T13777] ceph: No mds server is up or the cluster is laggy
[  681.652034][ T5971] usb 3-1: new full-speed USB device number 85 using dummy_hcd
[  681.690954][T13787] tc_dump_action: action bad kind
[  681.691568][T13787] : Can't lookup blockdev
[  681.814896][ T5971] usb 3-1: unable to get BOS descriptor or descriptor too short
[  681.815327][ T5971] usb 3-1: not running at top speed; connect to a high speed hub
[  681.861332][ T5971] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  681.861358][ T5971] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  681.874148][ T5971] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  681.874181][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  681.874200][ T5971] usb 3-1: Product: syz
[  681.874215][ T5971] usb 3-1: Manufacturer: syz
[  681.874231][ T5971] usb 3-1: SerialNumber: syz
[  682.637219][ T5971] usb 3-1: 0:2 : does not exist
[  682.659179][ T5971] usb 3-1: USB disconnect, device number 85
[  682.718805][ T5917] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  682.891658][ T5917] usb 2-1: Using ep0 maxpacket: 16
[  682.911127][ T5917] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  682.928187][ T5917] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  682.956732][ T5917] usb 2-1: config 0 has no interface number 0
[  682.982442][ T5917] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  682.994766][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.008709][ T5917] usb 2-1: Product: syz
[  683.018619][ T5917] usb 2-1: Manufacturer: syz
[  683.028579][ T5917] usb 2-1: SerialNumber: syz
[  683.066024][ T5917] usb 2-1: config 0 descriptor??
[  683.086723][ T5917] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  683.094487][ T5917] usb 2-1: No valid video chain found.
[  683.330591][   T10] usb 2-1: USB disconnect, device number 82
[  683.395536][    T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  683.788796][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  683.817005][    T9] usb 3-1: config 1 interface 1 has no altsetting 0
[  683.844927][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  683.869826][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.878606][    T9] usb 3-1: Product: syz
[  683.886227][    T9] usb 3-1: Manufacturer: syz
[  683.891999][    T9] usb 3-1: SerialNumber: syz
[  683.915947][   T30] audit: type=1400 audit(2000000111.005:1440): avc:  denied  { append } for  pid=13809 comm="syz.4.2119" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  683.939220][    C0] vkms_vblank_simulate: vblank timer overrun
[  684.141076][    T9] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  684.293788][    T9] usb 3-1: found format II with max.bitrate = 2418, frame size=7
[  684.384156][    T9] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  684.406463][    T9] usb 3-1: found format II with max.bitrate = 2418, frame size=7
[  685.085003][    T9] usb 3-1: USB disconnect, device number 86
[  685.238140][T13831] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2125'.
[  686.206359][   T30] audit: type=1400 audit(2000000113.399:1441): avc:  denied  { ioctl } for  pid=13828 comm="syz.1.2126" path="socket:[48925]" dev="sockfs" ino=48925 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  686.340435][T13853] 9pnet_fd: Insufficient options for proto=fd
[  686.367455][    T9] usb 3-1: new full-speed USB device number 87 using dummy_hcd
[  686.674412][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  686.685917][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  686.697661][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  686.717145][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  686.732053][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  686.745100][T13861] ceph: No mds server is up or the cluster is laggy
[  686.758508][ T5971] libceph: connect (1)[c::]:6789 error -101
[  686.772429][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  686.786696][ T5971] libceph: mon0 (1)[c::]:6789 connect error
[  686.800029][    T9] usb 3-1: Product: syz
[  686.838139][    T9] usb 3-1: Manufacturer: syz
[  686.862739][   T10] usb 2-1: new full-speed USB device number 83 using dummy_hcd
[  686.878641][    T9] usb 3-1: SerialNumber: syz
[  687.016927][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[  687.069283][   T10] usb 2-1: not running at top speed; connect to a high speed hub
[  687.561802][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  687.578203][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  687.615185][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  687.626658][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.640131][   T10] usb 2-1: Product: syz
[  687.645641][   T10] usb 2-1: Manufacturer: syz
[  687.650307][   T10] usb 2-1: SerialNumber: syz
[  687.782316][    T9] usb 3-1: 0:2 : does not exist
[  687.822577][    T9] usb 3-1: USB disconnect, device number 87
[  687.859762][   T10] usb 2-1: 0:2 : does not exist
[  687.928029][   T10] usb 2-1: USB disconnect, device number 83
[  688.825509][   T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  689.416729][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  689.462206][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  689.570425][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  689.583589][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  689.637159][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  689.673429][   T10] usb 3-1: config 0 descriptor??
[  689.726152][   T30] audit: type=1400 audit(2000000117.105:1442): avc:  denied  { map } for  pid=13909 comm="syz.0.2150" path="socket:[49833]" dev="sockfs" ino=49833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  690.095039][   T10] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  690.404229][T13924] fuse: Unknown parameter 'fdڨ!'
[  691.383543][ T5971] libceph: connect (1)[c::]:6789 error -101
[  691.389781][ T5971] libceph: mon0 (1)[c::]:6789 connect error
[  691.417440][T13942] ceph: No mds server is up or the cluster is laggy
[  691.453574][ T5917] usb 3-1: reset high-speed USB device number 88 using dummy_hcd
[  692.243938][ T5917] usb 3-1: device descriptor read/64, error -71
[  692.567843][ T5917] usb 3-1: reset high-speed USB device number 88 using dummy_hcd
[  692.727223][ T5917] usb 3-1: device firmware changed
[  692.733144][ T5971] usb 3-1: USB disconnect, device number 88
[  692.755960][T13972] netlink: 4772 bytes leftover after parsing attributes in process `syz.3.2168'.
[  692.891977][ T5971] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  693.608408][ T5971] usb 3-1: unable to get BOS descriptor or descriptor too short
[  693.620892][ T5971] usb 3-1: config 1 interface 1 has no altsetting 0
[  693.645894][ T5971] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  693.655085][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.663093][ T5971] usb 3-1: Product: syz
[  693.670312][ T5971] usb 3-1: Manufacturer: syz
[  693.678729][ T5971] usb 3-1: SerialNumber: syz
[  693.966674][ T5971] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  693.974781][ T5971] usb 3-1: found format II with max.bitrate = 2418, frame size=7
[  693.982851][ T5971] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  693.990868][ T5971] usb 3-1: found format II with max.bitrate = 2418, frame size=7
[  693.999049][ T5882] usb 2-1: new full-speed USB device number 84 using dummy_hcd
[  694.026502][   T10] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  694.036922][T13988] program syz.4.2172 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  694.062006][ T5971] usb 3-1: USB disconnect, device number 89
[  694.180091][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short
[  694.238111][ T5882] usb 2-1: not running at top speed; connect to a high speed hub
[  694.255373][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  694.273119][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  694.285729][ T5882] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  694.302769][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  694.315154][ T5882] usb 2-1: Product: syz
[  694.319335][ T5882] usb 2-1: Manufacturer: syz
[  694.326802][ T5882] usb 2-1: SerialNumber: syz
[  694.456361][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  694.467941][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  694.478183][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  694.495350][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  694.509316][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.521425][   T10] usb 1-1: config 0 descriptor??
[  694.799231][ T5882] usb 2-1: 0:2 : does not exist
[  694.824970][ T5882] usb 2-1: USB disconnect, device number 84
[  695.380288][   T10] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  695.395855][T13995] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  696.709019][ T5971] usb 1-1: USB disconnect, device number 74
[  697.473784][T14028] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  697.530946][ T5971] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  697.732362][ T5971] usb 1-1: config 8 has an invalid interface number: 223 but max is 0
[  697.751022][ T5971] usb 1-1: config 8 has no interface number 0
[  697.757169][ T5971] usb 1-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  697.798296][ T5971] usb 1-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  697.838295][ T5971] usb 1-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  697.860054][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.892870][ T5971] usb 1-1: Product: syz
[  697.909094][ T5971] usb 1-1: Manufacturer: syz
[  697.929655][ T5971] usb 1-1: SerialNumber: syz
[  698.005051][T14040] libceph: resolve '4.' (ret=-3): failed
[  698.288906][ T5971] usb 1-1: USB disconnect, device number 75
[  699.601226][T14062] FAULT_INJECTION: forcing a failure.
[  699.601226][T14062] name failslab, interval 1, probability 0, space 0, times 0
[  699.607316][ T5882] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  699.621651][T14062] CPU: 0 UID: 0 PID: 14062 Comm: syz.2.2193 Not tainted syzkaller #0 PREEMPT(full) 
[  699.621677][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  699.621686][T14062] Call Trace:
[  699.621691][T14062]  <TASK>
[  699.621698][T14062]  dump_stack_lvl+0x16c/0x1f0
[  699.621725][T14062]  should_fail_ex+0x512/0x640
[  699.621746][T14062]  ? __kmalloc_cache_noprof+0x57/0x3e0
[  699.621774][T14062]  should_failslab+0xc2/0x120
[  699.621793][T14062]  __kmalloc_cache_noprof+0x6a/0x3e0
[  699.621819][T14062]  ? alloc_pipe_info+0x10e/0x590
[  699.621844][T14062]  alloc_pipe_info+0x10e/0x590
[  699.621866][T14062]  splice_direct_to_actor+0x77d/0xa30
[  699.621886][T14062]  ? __lock_acquire+0x62e/0x1ce0
[  699.621909][T14062]  ? __pfx_direct_splice_actor+0x10/0x10
[  699.621931][T14062]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  699.621948][T14062]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  699.621975][T14062]  do_splice_direct+0x174/0x240
[  699.621995][T14062]  ? __pfx_do_splice_direct+0x10/0x10
[  699.622014][T14062]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  699.622040][T14062]  ? bpf_lsm_file_permission+0x9/0x10
[  699.622061][T14062]  ? security_file_permission+0x71/0x210
[  699.622088][T14062]  ? rw_verify_area+0xcf/0x6c0
[  699.622114][T14062]  do_sendfile+0xb06/0xe50
[  699.622133][T14062]  ? __pfx_do_sendfile+0x10/0x10
[  699.622152][T14062]  ? ksys_write+0x1a2/0x250
[  699.622169][T14062]  ? ksys_write+0x20e/0x250
[  699.622190][T14062]  __x64_sys_sendfile64+0x1d8/0x220
[  699.622212][T14062]  ? ksys_write+0x1ac/0x250
[  699.622230][T14062]  ? __pfx___x64_sys_sendfile64+0x10/0x10
[  699.622261][T14062]  do_syscall_64+0xcd/0x4e0
[  699.622287][T14062]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  699.622306][T14062] RIP: 0033:0x7ff2ccf8eec9
[  699.622322][T14062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  699.622339][T14062] RSP: 002b:00007ff2cde63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  699.622357][T14062] RAX: ffffffffffffffda RBX: 00007ff2cd1e6090 RCX: 00007ff2ccf8eec9
[  699.622369][T14062] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006
[  699.622379][T14062] RBP: 00007ff2cde63090 R08: 0000000000000000 R09: 0000000000000000
[  699.622390][T14062] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001
[  699.622401][T14062] R13: 00007ff2cd1e6128 R14: 00007ff2cd1e6090 R15: 00007ffe13b5dd88
[  699.622425][T14062]  </TASK>
[  699.901322][   T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  700.103184][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  700.122007][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  700.131946][   T10] usb 1-1: Using ep0 maxpacket: 32
[  700.221880][   T10] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  700.233020][ T5882] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  700.245867][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.254955][   T10] usb 1-1: Product: syz
[  700.325587][   T10] usb 1-1: Manufacturer: syz
[  700.333730][ T5882] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  700.338301][   T10] usb 1-1: SerialNumber: syz
[  700.350234][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.378827][ T5882] usb 2-1: config 0 descriptor??
[  700.387920][   T10] usb 1-1: config 0 descriptor??
[  700.399125][   T10] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  700.540865][ T5971] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  700.695311][ T5971] usb 3-1: unable to get BOS descriptor or descriptor too short
[  700.705010][ T5971] usb 3-1: config 63 has an invalid interface number: 66 but max is 0
[  700.721183][ T5971] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  700.769981][ T5971] usb 3-1: config 63 has no interface number 0
[  700.770831][ T5971] usb 3-1: config 63 interface 66 has no altsetting 0
[  700.772925][ T5971] usb 3-1: language id specifier not provided by device, defaulting to English
[  700.776448][ T5971] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  700.776477][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.776498][ T5971] usb 3-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ
[  700.817946][   T30] audit: type=1400 audit(2000000128.747:1443): avc:  denied  { append } for  pid=14049 comm="syz.0.2191" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  700.818308][ T5882] plantronics 0003:047F:FFFF.003F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  700.890659][   T10] gspca_stk1135: reg_w 0x2 err -110
[  700.891702][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  700.891710][   T10] gspca_stk1135: Sensor write failed
[  700.891730][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  700.891736][   T10] gspca_stk1135: Sensor write failed
[  700.891759][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  700.891769][   T10] gspca_stk1135: Sensor read failed
[  700.891800][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  700.891808][   T10] gspca_stk1135: Sensor read failed
[  700.891815][   T10] gspca_stk1135: Detected sensor type unknown (0x0)
[  700.891845][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  700.891851][   T10] gspca_stk1135: Sensor read failed
[  700.891871][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  700.891877][   T10] gspca_stk1135: Sensor read failed
[  700.891896][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  700.891905][   T10] gspca_stk1135: Sensor write failed
[  700.891931][   T10] gspca_stk1135: serial bus timeout: status=0x00
[  700.891939][   T10] gspca_stk1135: Sensor write failed
[  700.891989][   T10] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110
[  701.015548][    C0] vkms_vblank_simulate: vblank timer overrun
[  701.078998][   T30] audit: type=1326 audit(2000000129.020:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ccf8eec9 code=0x7fc00000
[  701.520746][T14091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2201'.
[  701.924661][    T9] usb 1-1: USB disconnect, device number 76
[  701.958805][    C0] vkms_vblank_simulate: vblank timer overrun
[  702.189099][ T5882] usb 2-1: reset high-speed USB device number 85 using dummy_hcd
[  703.126296][   T30] audit: type=1326 audit(2000000131.172:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.2.2197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2ccf8eec9 code=0x7fc00000
[  703.562152][ T5971] uvcvideo 3-1:63.66: probe with driver uvcvideo failed with error -22
[  703.580715][   T24] usb 2-1: USB disconnect, device number 85
[  703.634903][ T5971] usb 3-1: USB disconnect, device number 90
[  704.074559][T14122] lo speed is unknown, defaulting to 1000
[  704.151405][    T9] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[  704.315764][    T9] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  704.330070][    T9] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  704.344913][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  704.353535][    T9] usb 2-1: Product: syz
[  704.357770][    T9] usb 2-1: Manufacturer: syz
[  704.364542][    T9] usb 2-1: SerialNumber: syz
[  704.397914][    T9] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  705.353548][    T9] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  705.605700][ T5971] usb 2-1: USB disconnect, device number 86
[  707.330874][T14156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2220'.
[  708.599499][ T5971] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  708.714460][T14183] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[14183]
[  708.821801][ T5971] usb 3-1: Using ep0 maxpacket: 16
[  708.846797][ T5971] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  708.883070][ T5971] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  708.895424][ T5971] usb 3-1: config 0 has no interface number 0
[  708.906515][ T5971] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  708.915775][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.923906][ T5971] usb 3-1: Product: syz
[  708.928572][ T5971] usb 3-1: Manufacturer: syz
[  708.933427][ T5971] usb 3-1: SerialNumber: syz
[  708.959732][ T5971] usb 3-1: config 0 descriptor??
[  708.969558][ T5971] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  708.976624][ T5971] usb 3-1: No valid video chain found.
[  709.166095][ T5971] usb 3-1: USB disconnect, device number 91
[  709.734303][   T24] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  710.161636][   T24] usb 2-1: Using ep0 maxpacket: 32
[  710.211619][   T24] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  710.281615][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.298176][   T24] usb 2-1: config 0 descriptor??
[  710.307497][   T24] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state
[  710.316879][   T24] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  710.323375][   T24] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  711.036283][   T10] usb 2-1: USB disconnect, device number 87
[  712.552273][T14230] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2240'.
[  712.972482][  T979] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  713.020229][   T10] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  713.535981][  T979] usb 3-1: Using ep0 maxpacket: 16
[  713.546597][  T979] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  713.573884][   T10] usb 5-1: Using ep0 maxpacket: 16
[  713.589417][  T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  713.602128][   T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  713.612882][   T30] audit: type=1400 audit(2000000142.121:1446): avc:  denied  { read } for  pid=14240 comm="syz.1.2243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  713.641368][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  713.668226][  T979] usb 3-1: config 0 has no interface number 0
[  713.674483][   T10] usb 5-1: config 0 has no interface number 0
[  713.684230][  T979] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  713.695456][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.707695][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  713.924965][T14251] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2245'.
[  714.354423][  T979] usb 3-1: Product: syz
[  714.359601][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.368215][  T979] usb 3-1: Manufacturer: syz
[  714.373470][  T979] usb 3-1: SerialNumber: syz
[  714.381356][   T10] usb 5-1: Product: syz
[  714.388675][   T10] usb 5-1: Manufacturer: syz
[  714.455568][  T979] usb 3-1: config 0 descriptor??
[  714.463981][   T10] usb 5-1: SerialNumber: syz
[  714.540783][  T979] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  714.562151][   T10] usb 5-1: config 0 descriptor??
[  714.568947][  T979] usb 3-1: No valid video chain found.
[  714.600341][   T10] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  714.619580][   T10] usb 5-1: No valid video chain found.
[  714.751149][   T10] usb 3-1: USB disconnect, device number 92
[  714.819591][  T979] usb 5-1: USB disconnect, device number 91
[  716.797396][T14283] : Can't lookup blockdev
[  719.746441][T14282] tc_dump_action: action bad kind
[  720.230694][   T24] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  720.243685][   T30] audit: type=1400 audit(2000000149.008:1447): avc:  denied  { connect } for  pid=14307 comm="syz.2.2262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  720.632885][T14316] overlayfs: failed to clone upperpath
[  721.100505][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  721.138174][   T24] usb 1-1: config 1 interface 1 has no altsetting 0
[  721.268740][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  721.268835][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.268891][   T24] usb 1-1: Product: syz
[  721.268940][   T24] usb 1-1: Manufacturer: syz
[  721.268974][   T24] usb 1-1: SerialNumber: syz
[  722.072995][T14305] binder: BC_ACQUIRE_RESULT not supported
[  722.073012][T14305] binder: 14303:14305 ioctl c0306201 200000000500 returned -22
[  722.120342][   T24] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  722.120370][   T24] usb 1-1: found format II with max.bitrate = 2418, frame size=7
[  722.120502][   T24] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  722.120521][   T24] usb 1-1: found format II with max.bitrate = 2418, frame size=7
[  722.170832][   T24] usb 1-1: USB disconnect, device number 77
[  722.189939][   T30] audit: type=1326 audit(2000000151.181:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14329 comm="syz.3.2268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefe058eec9 code=0x0
[  722.580569][T14339] tc_dump_action: action bad kind
[  722.601234][T14339] : Can't lookup blockdev
[  722.842900][   T30] audit: type=1400 audit(2000000151.675:1449): avc:  denied  { write } for  pid=14340 comm="syz.3.2271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  723.467301][   T30] audit: type=1400 audit(2000000151.675:1450): avc:  denied  { setattr } for  pid=14340 comm="syz.3.2271" name="PINGv6" dev="sockfs" ino=51938 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  723.490177][    C0] vkms_vblank_simulate: vblank timer overrun
[  725.417351][   T24] libceph: connect (1)[c::]:6789 error -101
[  725.443175][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  725.545621][T14373] ceph: No mds server is up or the cluster is laggy
[  725.862388][T14384] FAULT_INJECTION: forcing a failure.
[  725.862388][T14384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  725.875917][T14384] CPU: 0 UID: 0 PID: 14384 Comm: syz.0.2282 Not tainted syzkaller #0 PREEMPT(full) 
[  725.875942][T14384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  725.875950][T14384] Call Trace:
[  725.875955][T14384]  <TASK>
[  725.875965][T14384]  dump_stack_lvl+0x16c/0x1f0
[  725.875984][T14384]  should_fail_ex+0x512/0x640
[  725.876002][T14384]  _copy_to_iter+0x29f/0x1710
[  725.876020][T14384]  ? chacha_block_generic+0x211/0x330
[  725.876037][T14384]  ? __pfx__copy_to_iter+0x10/0x10
[  725.876060][T14384]  get_random_bytes_user+0x17f/0x3c0
[  725.876080][T14384]  ? __pfx_get_random_bytes_user+0x10/0x10
[  725.876096][T14384]  ? lockdep_hardirqs_on+0x7c/0x110
[  725.876116][T14384]  ? __pfx___sanitizer_cov_trace_pc+0x10/0x10
[  725.876131][T14384]  ? import_ubuf+0x1b6/0x220
[  725.876148][T14384]  __x64_sys_getrandom+0x183/0x290
[  725.876166][T14384]  ? __pfx___x64_sys_getrandom+0x10/0x10
[  725.876190][T14384]  do_syscall_64+0xcd/0x4e0
[  725.876206][T14384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  725.876219][T14384] RIP: 0033:0x7f280af8eec9
[  725.876228][T14384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  725.876239][T14384] RSP: 002b:00007f280be19038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e
[  725.876250][T14384] RAX: ffffffffffffffda RBX: 00007f280b1e6090 RCX: 00007f280af8eec9
[  725.876257][T14384] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240
[  725.876264][T14384] RBP: 00007f280be19090 R08: 0000000000000000 R09: 0000000000000000
[  725.876271][T14384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  725.876277][T14384] R13: 00007f280b1e6128 R14: 00007f280b1e6090 R15: 00007fffe58f0d28
[  725.876292][T14384]  </TASK>
[  726.049568][    C0] vkms_vblank_simulate: vblank timer overrun
[  726.465136][ T5882] usb 2-1: new full-speed USB device number 88 using dummy_hcd
[  727.463021][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short
[  727.505399][ T5882] usb 2-1: not running at top speed; connect to a high speed hub
[  727.563084][ T5882] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  727.616160][ T5882] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  727.700944][ T5882] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  727.778867][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.800798][ T5882] usb 2-1: Product: syz
[  727.821925][ T5882] usb 2-1: Manufacturer: syz
[  727.828670][ T5882] usb 2-1: SerialNumber: syz
[  727.847340][  T979] usb 3-1: new full-speed USB device number 93 using dummy_hcd
[  727.996840][  T979] usb 3-1: unable to get BOS descriptor or descriptor too short
[  728.015812][  T979] usb 3-1: not running at top speed; connect to a high speed hub
[  728.037284][  T979] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  728.051701][  T979] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  728.063696][  T979] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  728.073683][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.082561][  T979] usb 3-1: Product: syz
[  728.086943][  T979] usb 3-1: Manufacturer: syz
[  728.094012][  T979] usb 3-1: SerialNumber: syz
[  728.297426][ T5882] usb 2-1: 0:2 : does not exist
[  728.348879][ T5882] usb 2-1: USB disconnect, device number 88
[  728.609044][T14413] overlayfs: failed to clone upperpath
[  729.015059][  T979] usb 3-1: 0:2 : does not exist
[  729.049331][  T979] usb 3-1: USB disconnect, device number 93
[  730.008192][   T30] audit: type=1400 audit(2000000159.359:1451): avc:  denied  { getopt } for  pid=14424 comm="syz.3.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  732.556923][  T979] usb 1-1: new full-speed USB device number 78 using dummy_hcd
[  732.631961][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2304'.
[  732.649665][T14463] netlink: 'syz.3.2304': attribute type 4 has an invalid length.
[  732.659271][T14463] overlay: Bad value for 'workdir'
[  732.767476][  T979] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  732.776103][  T979] usb 1-1: config 0 has no interface number 0
[  732.782196][  T979] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  732.882990][  T979] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  732.893562][  T979] usb 1-1: config 0 interface 113 has no altsetting 0
[  732.925809][  T979] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  732.935876][  T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.144499][  T979] usb 1-1: Product: syz
[  733.144522][  T979] usb 1-1: Manufacturer: syz
[  733.144538][  T979] usb 1-1: SerialNumber: syz
[  733.148491][  T979] usb 1-1: config 0 descriptor??
[  733.159535][  T979] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  733.377493][T14476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  733.566435][ T5882] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  733.952133][T14489] FAULT_INJECTION: forcing a failure.
[  733.952133][T14489] name failslab, interval 1, probability 0, space 0, times 0
[  733.966712][T14489] CPU: 1 UID: 0 PID: 14489 Comm: syz.4.2311 Not tainted syzkaller #0 PREEMPT(full) 
[  733.966740][T14489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  733.966751][T14489] Call Trace:
[  733.966757][T14489]  <TASK>
[  733.966765][T14489]  dump_stack_lvl+0x16c/0x1f0
[  733.966793][T14489]  should_fail_ex+0x512/0x640
[  733.966815][T14489]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  733.966840][T14489]  should_failslab+0xc2/0x120
[  733.966862][T14489]  kmem_cache_alloc_node_noprof+0x71/0x3b0
[  733.966882][T14489]  ? __alloc_skb+0x2b2/0x380
[  733.966913][T14489]  __alloc_skb+0x2b2/0x380
[  733.966933][T14489]  ? __pfx___alloc_skb+0x10/0x10
[  733.966952][T14489]  ? lock_acquire+0x179/0x350
[  733.966972][T14489]  ? find_held_lock+0x2b/0x80
[  733.966999][T14489]  ndisc_alloc_skb+0xd8/0x530
[  733.967023][T14489]  ndisc_send_rs+0x73/0x670
[  733.967048][T14489]  inet6_set_link_af+0x8db/0xd40
[  733.967072][T14489]  ? __pfx_inet6_set_link_af+0x10/0x10
[  733.967093][T14489]  ? reacquire_held_locks+0xcd/0x1f0
[  733.967129][T14489]  ? rtnl_af_lookup+0x19c/0x330
[  733.967158][T14489]  ? do_setlink.constprop.0+0x2ca2/0x4380
[  733.967180][T14489]  do_setlink.constprop.0+0x2ca2/0x4380
[  733.967212][T14489]  ? __pfx_do_setlink.constprop.0+0x10/0x10
[  733.967242][T14489]  ? __lock_acquire+0xb97/0x1ce0
[  733.967279][T14489]  ? __mutex_trylock_common+0xe9/0x250
[  733.967308][T14489]  ? __pfx___mutex_trylock_common+0x10/0x10
[  733.967337][T14489]  ? __pfx___might_resched+0x10/0x10
[  733.967361][T14489]  ? rcu_is_watching+0x12/0xc0
[  733.967384][T14489]  ? trace_contention_end+0xdd/0x130
[  733.967402][T14489]  ? __mutex_lock+0x1c5/0x1060
[  733.967435][T14489]  ? __pfx___mutex_lock+0x10/0x10
[  733.967458][T14489]  ? cap_capable+0xb3/0x250
[  733.967486][T14489]  ? full_name_hash+0xbc/0x110
[  733.967512][T14489]  ? netdev_name_node_lookup+0x127/0x180
[  733.967534][T14489]  rtnl_newlink+0x1446/0x2000
[  733.967567][T14489]  ? __pfx_rtnl_newlink+0x10/0x10
[  733.967588][T14489]  ? find_held_lock+0x2b/0x80
[  733.967611][T14489]  ? avc_has_perm_noaudit+0x117/0x3b0
[  733.967635][T14489]  ? avc_has_perm_noaudit+0x149/0x3b0
[  733.967660][T14489]  ? __lock_acquire+0x62e/0x1ce0
[  733.967703][T14489]  ? __pfx_rtnl_newlink+0x10/0x10
[  733.967724][T14489]  ? __pfx_rtnl_newlink+0x10/0x10
[  733.967745][T14489]  ? rtnetlink_rcv_msg+0x93a/0xe90
[  733.967768][T14489]  ? __pfx_rtnl_newlink+0x10/0x10
[  733.967791][T14489]  rtnetlink_rcv_msg+0x95e/0xe90
[  733.967817][T14489]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  733.967847][T14489]  ? ref_tracker_free+0x37c/0x830
[  733.967875][T14489]  netlink_rcv_skb+0x155/0x420
[  733.967905][T14489]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  733.967930][T14489]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  733.967963][T14489]  ? netlink_deliver_tap+0x1ae/0xd30
[  733.967991][T14489]  netlink_unicast+0x5aa/0x870
[  733.968019][T14489]  ? __pfx_netlink_unicast+0x10/0x10
[  733.968043][T14489]  ? __pfx_netlink_autobind.isra.0+0x10/0x10
[  733.968075][T14489]  netlink_sendmsg+0x8d1/0xdd0
[  733.968104][T14489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  733.968138][T14489]  ____sys_sendmsg+0xa98/0xc70
[  733.968165][T14489]  ? copy_msghdr_from_user+0x10a/0x160
[  733.968188][T14489]  ? __pfx_____sys_sendmsg+0x10/0x10
[  733.968227][T14489]  ___sys_sendmsg+0x134/0x1d0
[  733.968250][T14489]  ? __pfx____sys_sendmsg+0x10/0x10
[  733.968306][T14489]  __sys_sendmsg+0x16d/0x220
[  733.968329][T14489]  ? __pfx___sys_sendmsg+0x10/0x10
[  733.968369][T14489]  do_syscall_64+0xcd/0x4e0
[  733.968395][T14489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.968413][T14489] RIP: 0033:0x7f154698eec9
[  733.968429][T14489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  733.968446][T14489] RSP: 002b:00007f15477bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  733.968464][T14489] RAX: ffffffffffffffda RBX: 00007f1546be6180 RCX: 00007f154698eec9
[  733.968476][T14489] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008
[  733.968488][T14489] RBP: 00007f15477bd090 R08: 0000000000000000 R09: 0000000000000000
[  733.968499][T14489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  733.968509][T14489] R13: 00007f1546be6218 R14: 00007f1546be6180 R15: 00007ffc244b9298
[  733.968535][T14489]  </TASK>
[  734.728112][   T30] audit: type=1326 audit(2000000164.283:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14487 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe058eec9 code=0x7fc00000
[  734.766764][ T5882] usb 3-1: Using ep0 maxpacket: 16
[  734.774376][ T5882] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  734.783346][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  734.793510][ T5882] usb 3-1: config 0 has no interface number 0
[  734.801404][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  734.810497][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  734.818736][ T5882] usb 3-1: Product: syz
[  734.823105][ T5882] usb 3-1: Manufacturer: syz
[  734.827842][ T5882] usb 3-1: SerialNumber: syz
[  734.947111][ T5882] usb 3-1: config 0 descriptor??
[  734.978316][ T5882] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  734.984925][ T5882] usb 3-1: No valid video chain found.
[  735.177560][ T5882] usb 3-1: USB disconnect, device number 94
[  735.273426][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  735.279758][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  735.809857][  T943] usb 1-1: USB disconnect, device number 78
[  736.636640][T14510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2316'.
[  736.646504][   T30] audit: type=1326 audit(2000000166.330:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14487 comm="syz.3.2312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefe058eec9 code=0x7fc00000
[  736.860212][  T943] libceph: connect (1)[c::]:6789 error -101
[  736.868508][  T943] libceph: mon0 (1)[c::]:6789 connect error
[  737.009520][T14520] ceph: No mds server is up or the cluster is laggy
[  737.501790][ T5882] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  737.588223][   T30] audit: type=1400 audit(2000000167.348:1454): avc:  denied  { mounton } for  pid=14512 comm="syz.1.2318" path="/406/file0" dev="tmpfs" ino=2193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  737.755097][   T30] audit: type=1400 audit(2000000167.516:1455): avc:  denied  { mounton } for  pid=14512 comm="syz.1.2318" path="/406/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  738.752040][ T5882] usb 3-1: unable to get BOS descriptor or descriptor too short
[  739.599123][ T5882] usb 3-1: config 1 interface 1 has no altsetting 0
[  739.615115][ T5882] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  739.624323][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.633020][ T5882] usb 3-1: Product: syz
[  739.637267][ T5882] usb 3-1: Manufacturer: syz
[  739.641896][ T5882] usb 3-1: SerialNumber: syz
[  740.151658][ T5882] usb 3-1: can't set config #1, error -71
[  740.167223][ T5882] usb 3-1: USB disconnect, device number 95
[  740.901158][ T5960] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  741.025247][ T5960] usb 2-1: device descriptor read/64, error -71
[  741.272840][ T5960] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  741.389322][   T30] audit: type=1400 audit(2000000171.337:1456): avc:  denied  { mount } for  pid=14574 comm="syz.4.2335" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  741.413491][ T5960] usb 2-1: device descriptor read/64, error -71
[  741.511203][ T5960] usb usb2-port1: attempt power cycle
[  741.599390][T14575] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.288221][ T5960] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  742.311674][ T5960] usb 2-1: device descriptor read/8, error -71
[  742.570352][ T5960] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  742.598194][ T5960] usb 2-1: device descriptor read/8, error -71
[  743.123301][ T5960] usb usb2-port1: unable to enumerate USB device
[  743.251218][T14597] binder: BC_ACQUIRE_RESULT not supported
[  743.316135][T14597] binder: 14595:14597 ioctl c0306201 200000000500 returned -22
[  743.730153][   T30] audit: type=1800 audit(2000000173.794:1457): pid=14609 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2345" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  744.000337][T14617] : Can't lookup blockdev
[  744.051782][T14612] tc_dump_action: action bad kind
[  744.514521][T14626] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2347'.
[  746.933738][T14627] lo speed is unknown, defaulting to 1000
[  747.327524][T14632] overlayfs: failed to clone upperpath
[  748.428574][ T5960] usb 1-1: new full-speed USB device number 79 using dummy_hcd
[  748.630101][ T5960] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[  748.658679][T14651] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  748.670131][ T5960] usb 1-1: config 0 has no interface number 0
[  748.688139][ T5960] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  748.733584][ T5960] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  748.745972][ T5960] usb 1-1: config 0 interface 113 has no altsetting 0
[  748.756788][ T5960] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  748.781530][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.795869][ T5960] usb 1-1: Product: syz
[  748.839921][ T5960] usb 1-1: Manufacturer: syz
[  748.857106][ T5960] usb 1-1: SerialNumber: syz
[  748.889771][ T5960] usb 1-1: config 0 descriptor??
[  748.910028][ T5960] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  749.633863][ T5960] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  749.895650][ T5960] usb 5-1: Using ep0 maxpacket: 16
[  749.935537][ T5960] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  749.953000][ T5960] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  749.967690][ T5960] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.982713][ T5960] usb 5-1: config 0 descriptor??
[  750.343058][T14670] 9pnet_fd: Insufficient options for proto=fd
[  750.801333][   T30] audit: type=1326 audit(2000000181.143:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154698eec9 code=0x7fc00000
[  750.958801][ T5960] mcp2221 0003:04D8:00DD.0040: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  752.316058][   T30] audit: type=1326 audit(2000000182.812:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f154698eec9 code=0x7fc00000
[  752.372589][   T24] usb 5-1: USB disconnect, device number 92
[  752.380391][  T943] usb 1-1: USB disconnect, device number 79
[  752.488827][T14695] tc_dump_action: action bad kind
[  752.700079][T14695] : Can't lookup blockdev
[  752.804795][T14703] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  753.627700][   T24] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  753.693714][ T5882] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  753.710244][T14710] ceph: No mds server is up or the cluster is laggy
[  753.792021][   T24] usb 1-1: Using ep0 maxpacket: 8
[  753.874439][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  753.912370][ T5882] usb 3-1: Using ep0 maxpacket: 16
[  753.980914][   T24] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[  754.012066][ T5882] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  754.039893][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.091056][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  754.104278][   T24] usb 1-1: Product: syz
[  754.108538][   T24] usb 1-1: Manufacturer: syz
[  754.138677][ T5882] usb 3-1: config 0 has no interface number 0
[  754.146957][   T24] usb 1-1: SerialNumber: syz
[  754.169586][T14717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2374'.
[  754.197183][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  754.206989][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.222569][ T5882] usb 3-1: Product: syz
[  754.226787][ T5882] usb 3-1: Manufacturer: syz
[  754.315752][ T5882] usb 3-1: SerialNumber: syz
[  754.423230][ T5882] usb 3-1: config 0 descriptor??
[  754.435643][ T5882] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  754.953563][ T5882] usb 3-1: No valid video chain found.
[  754.961736][ T5882] usb 3-1: USB disconnect, device number 96
[  754.970761][ T5960] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  755.168515][ T5960] usb 2-1: unable to get BOS descriptor or descriptor too short
[  755.180535][ T5960] usb 2-1: config 1 interface 1 has no altsetting 0
[  755.200235][ T5960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  755.213163][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.222275][ T5960] usb 2-1: Product: syz
[  755.226614][ T5960] usb 2-1: Manufacturer: syz
[  755.231871][ T5960] usb 2-1: SerialNumber: syz
[  755.436616][T14723] binder: BC_ACQUIRE_RESULT not supported
[  755.443502][T14723] binder: 14720:14723 ioctl c0306201 200000000500 returned -22
[  755.456544][ T5882] usb 5-1: new full-speed USB device number 93 using dummy_hcd
[  755.477952][ T5960] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  755.492215][ T5960] usb 2-1: found format II with max.bitrate = 2418, frame size=7
[  755.508930][ T5960] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[  755.518668][ T5960] usb 2-1: found format II with max.bitrate = 2418, frame size=7
[  755.543507][ T5960] usb 2-1: USB disconnect, device number 93
[  755.650721][ T5882] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  755.738828][ T5882] usb 5-1: config 0 has no interface number 0
[  755.745310][ T5882] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  755.757629][ T5882] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  755.767637][ T5882] usb 5-1: config 0 interface 113 has no altsetting 0
[  755.778318][ T5882] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  755.790613][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.798699][ T5882] usb 5-1: Product: syz
[  755.803127][  T943] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  755.826563][ T5882] usb 5-1: Manufacturer: syz
[  755.831475][ T5882] usb 5-1: SerialNumber: syz
[  755.854076][ T5882] usb 5-1: config 0 descriptor??
[  755.897214][ T5882] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  755.951429][  T943] usb 3-1: Using ep0 maxpacket: 32
[  755.960649][  T943] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  755.969908][  T943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.981450][  T943] usb 3-1: config 0 descriptor??
[  755.988623][  T943] usb 3-1: dvb_usb_v2: found a 'Anysee' in warm state
[  755.995984][  T943] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  756.003467][  T943] dvb_usb_anysee 3-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  756.079609][   T24] asix 1-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  756.269991][   T24] asix 1-1:7.0: probe with driver asix failed with error -71
[  756.327864][   T10] usb 3-1: USB disconnect, device number 97
[  756.409914][   T24] usb 1-1: USB disconnect, device number 80
[  756.569379][T14748] tc_dump_action: action bad kind
[  756.644890][T14748] : Can't lookup blockdev
[  757.310772][   T30] audit: type=1400 audit(2000000188.050:1460): avc:  denied  { setopt } for  pid=14757 comm="syz.0.2390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  757.658854][ T5960] usb 5-1: USB disconnect, device number 93
[  758.978883][T14796] netdevsim netdevsim2: Direct firmware load for .
[  758.978883][T14796]  failed with error -2
[  758.982711][T14796] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  758.982711][T14796] 
[  758.999253][   T30] audit: type=1400 audit(2000000189.803:1461): avc:  denied  { firmware_load } for  pid=14783 comm="syz.2.2398" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  759.556064][T14809] tc_dump_action: action bad kind
[  759.601330][T14809] : Can't lookup blockdev
[  759.723563][  T943] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[  759.878057][  T943] usb 2-1: unable to get BOS descriptor or descriptor too short
[  759.896801][  T943] usb 2-1: not running at top speed; connect to a high speed hub
[  759.930533][  T943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  760.035087][  T943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  760.050562][  T943] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  760.059935][  T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.075781][  T943] usb 2-1: Product: syz
[  760.081184][  T943] usb 2-1: Manufacturer: syz
[  760.124174][  T943] usb 2-1: SerialNumber: syz
[  760.309091][   T10] usb 5-1: new full-speed USB device number 94 using dummy_hcd
[  760.537653][  T943] usb 2-1: 0:2 : does not exist
[  760.812835][   T10] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  760.822259][   T10] usb 5-1: config 0 has no interface number 0
[  760.827837][  T943] usb 2-1: USB disconnect, device number 94
[  760.831658][   T10] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  760.863423][   T10] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  760.884220][   T10] usb 5-1: config 0 interface 113 has no altsetting 0
[  760.904074][   T10] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  760.916857][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.946383][   T10] usb 5-1: Product: syz
[  760.956437][   T10] usb 5-1: Manufacturer: syz
[  760.967880][   T10] usb 5-1: SerialNumber: syz
[  761.032835][   T10] usb 5-1: config 0 descriptor??
[  761.048110][   T10] pn533_usb 5-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  761.299820][   T30] audit: type=1400 audit(2000000192.239:1462): avc:  denied  { mounton } for  pid=14825 comm="syz.1.2412" path=2F3431392FE91F7189591E9233614B dev="tmpfs" ino=2263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  761.324602][    C0] vkms_vblank_simulate: vblank timer overrun
[  761.707464][   T10] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  762.353389][   T10] usb 2-1: Using ep0 maxpacket: 16
[  762.636548][   T10] usb 2-1: config 2 has an invalid interface number: 151 but max is 2
[  762.649657][   T10] usb 2-1: config 2 has an invalid interface number: 180 but max is 2
[  762.659371][   T10] usb 2-1: config 2 has an invalid interface number: 142 but max is 2
[  762.782932][   T10] usb 2-1: config 2 has an invalid interface number: 133 but max is 2
[  762.802086][   T10] usb 2-1: config 2 has 4 interfaces, different from the descriptor's value: 3
[  763.252952][   T10] usb 2-1: config 2 has no interface number 0
[  763.307679][   T10] usb 2-1: config 2 has no interface number 1
[  763.323264][   T10] usb 2-1: config 2 has no interface number 2
[  763.332748][T14847] tc_dump_action: action bad kind
[  763.333463][   T10] usb 2-1: config 2 has no interface number 3
[  763.369703][   T10] usb 2-1: config 2 interface 151 altsetting 4 has a duplicate endpoint with address 0x8, skipping
[  763.376896][T14847] : Can't lookup blockdev
[  763.381069][   T10] usb 2-1: config 2 interface 151 altsetting 4 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  763.397907][   T10] usb 2-1: config 2 interface 151 altsetting 4 has 7 endpoint descriptors, different from the interface descriptor's value: 13
[  763.411610][   T10] usb 2-1: config 2 interface 142 altsetting 130 has a duplicate endpoint with address 0xD, skipping
[  763.540068][   T10] usb 2-1: config 2 interface 142 altsetting 130 bulk endpoint 0xF has invalid maxpacket 32
[  763.646950][   T10] usb 2-1: config 2 interface 142 altsetting 130 endpoint 0x6 has an invalid bInterval 47, changing to 9
[  763.690588][   T10] usb 2-1: config 2 interface 142 altsetting 130 has a duplicate endpoint with address 0xC, skipping
[  763.722687][  T943] usb 5-1: USB disconnect, device number 94
[  763.729440][   T10] usb 2-1: config 2 interface 142 altsetting 130 has 4 endpoint descriptors, different from the interface descriptor's value: 7
[  763.785107][   T10] usb 2-1: too many endpoints for config 2 interface 133 altsetting 35: 37, using maximum allowed: 30
[  763.821828][   T10] usb 2-1: config 2 interface 133 altsetting 35 has an invalid descriptor for endpoint zero, skipping
[  763.834724][   T10] usb 2-1: config 2 interface 133 altsetting 35 has a duplicate endpoint with address 0x6, skipping
[  763.870070][   T10] usb 2-1: config 2 interface 133 altsetting 35 endpoint 0xB has invalid maxpacket 512, setting to 64
[  763.882258][   T10] usb 2-1: config 2 interface 133 altsetting 35 has 3 endpoint descriptors, different from the interface descriptor's value: 37
[  763.896686][   T10] usb 2-1: config 2 interface 151 has no altsetting 0
[  763.903643][   T10] usb 2-1: config 2 interface 180 has no altsetting 0
[  763.911183][   T10] usb 2-1: config 2 interface 142 has no altsetting 0
[  763.919326][   T10] usb 2-1: config 2 interface 133 has no altsetting 0
[  763.938475][   T10] usb 2-1: New USB device found, idVendor=0403, idProduct=df35, bcdDevice=5c.a5
[  763.948664][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.958070][   T10] usb 2-1: Product: ￠ⱱ涄厯Ḭྛ舛胜ﻏ먛垂￾糌侲赇嵪낊矰嗱篓浹闁隓П搁빁蜹⧍왐﫿媿슨쁸찅諚㘽汾侻洧輩粦鎴킟佇˔䬨飒蝕Ჺ쑭䓇퍤㰓ઘ꫅寶縁勚퉇죻쳆䫽桓氩⾵ૅ冁‥⠮豛ᵍ丹栠孅둗뺞聞
[  763.992899][   T10] usb 2-1: Manufacturer: и
[  763.997527][   T10] usb 2-1: SerialNumber: ᠉
[  764.062851][   T10] usb 2-1: can't set config #2, error -71
[  764.082906][   T10] usb 2-1: USB disconnect, device number 95
[  764.206765][  T943] usb 5-1: new full-speed USB device number 95 using dummy_hcd
[  764.342578][T14871] dvmrp0: entered allmulticast mode
[  764.739310][  T943] usb 5-1: unable to get BOS descriptor or descriptor too short
[  764.748595][  T943] usb 5-1: not running at top speed; connect to a high speed hub
[  764.759594][  T943] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  764.770976][  T943] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  764.785456][  T943] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  764.794675][  T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.802817][  T943] usb 5-1: Product: syz
[  764.807020][  T943] usb 5-1: Manufacturer: syz
[  764.824762][  T943] usb 5-1: SerialNumber: syz
[  764.889979][T14866] delete_channel: no stack
[  765.085177][  T943] usb 5-1: 0:2 : does not exist
[  765.110965][  T943] usb 5-1: unit 0 not found!
[  765.215228][  T943] usb 5-1: USB disconnect, device number 95
[  765.243239][T14882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2428'.
[  765.243372][T14875] lo speed is unknown, defaulting to 1000
[  767.125139][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2433'.
[  767.134231][T14910] netdevsim netdevsim0 netdevsim2: left allmulticast mode
[  767.491190][T14910] netdevsim netdevsim0 netdevsim2: left promiscuous mode
[  767.565625][T14910] bridge0: port 3(netdevsim2) entered disabled state
[  767.651176][T14910] bridge_slave_1: left allmulticast mode
[  767.657601][T14910] bridge_slave_1: left promiscuous mode
[  767.665959][T14910] bridge0: port 2(bridge_slave_1) entered disabled state
[  767.687034][T14910] bridge_slave_0: left allmulticast mode
[  767.692910][T14910] bridge_slave_0: left promiscuous mode
[  767.700578][T14910] bridge0: port 1(bridge_slave_0) entered disabled state
[  768.610991][   T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  768.764258][   T10] usb 3-1: Using ep0 maxpacket: 16
[  768.785814][   T10] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  768.795699][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  768.833755][   T10] usb 3-1: config 0 has no interface number 0
[  768.850946][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  768.861362][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.878480][   T10] usb 3-1: Product: syz
[  768.883621][   T10] usb 3-1: Manufacturer: syz
[  768.888568][   T10] usb 3-1: SerialNumber: syz
[  768.996374][   T10] usb 3-1: config 0 descriptor??
[  769.034840][   T10] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  769.053682][   T10] usb 3-1: No valid video chain found.
[  769.266555][   T10] usb 3-1: USB disconnect, device number 98
[  771.773358][ T5882] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  771.811667][   T24] usb 1-1: new full-speed USB device number 81 using dummy_hcd
[  771.928464][ T5882] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  771.953617][ T5882] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  771.973626][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  771.988514][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[  771.999080][ T5882] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  772.011016][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  772.011516][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  772.038859][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  772.048836][ T5882] usb 5-1: config 0 descriptor??
[  772.059119][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  772.068464][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.142096][   T24] usb 1-1: Product: syz
[  772.154563][   T24] usb 1-1: Manufacturer: syz
[  772.197331][   T24] usb 1-1: SerialNumber: syz
[  772.265793][ T5882] IPVS: starting estimator thread 0...
[  772.383514][T14968] IPVS: using max 73 ests per chain, 175200 per kthread
[  772.490749][   T24] usb 1-1: 0:2 : does not exist
[  772.510145][   T24] usb 1-1: unit 0 not found!
[  772.561121][   T24] usb 1-1: USB disconnect, device number 81
[  772.920797][T14985] ALSA: mixer_oss: invalid OSS volume '8'
[  773.432393][   T30] audit: type=1326 audit(2000000204.763:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14981 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe058eec9 code=0x7fc00000
[  774.069847][   T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  774.307712][  T979] usb 3-1: new full-speed USB device number 99 using dummy_hcd
[  774.347059][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  774.362317][   T10] usb 1-1: config 63 has an invalid interface number: 66 but max is 0
[  774.374976][   T10] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  774.386631][   T10] usb 1-1: config 63 has no interface number 0
[  774.393591][   T10] usb 1-1: config 63 interface 66 has no altsetting 0
[  774.394806][  T943] usb 5-1: USB disconnect, device number 96
[  774.412695][   T10] usb 1-1: language id specifier not provided by device, defaulting to English
[  774.433373][   T10] usb 1-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  774.448947][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.465412][   T10] usb 1-1: SerialNumber: ₯⬒᥋녽썶ᇎ귀금괢Г瞣ㄭ
[  774.465705][  T979] usb 3-1: unable to get BOS descriptor or descriptor too short
[  774.490602][  T979] usb 3-1: unable to read config index 0 descriptor/start: -71
[  774.499171][  T979] usb 3-1: can't read configurations, error -71
[  774.790635][   T30] audit: type=1326 audit(2000000206.401:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14994 comm="syz.0.2456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f280af8eec9 code=0x7fc00000
[  774.816413][T14997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.825632][T14997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.833681][  T943] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  775.031088][  T943] usb 5-1: Using ep0 maxpacket: 16
[  775.082448][  T943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  775.204875][  T943] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  775.312513][  T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.398300][  T943] usb 5-1: config 0 descriptor??
[  775.741062][   T30] audit: type=1326 audit(2000000207.398:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14981 comm="syz.3.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fefe058eec9 code=0x7fc00000
[  776.055185][   T30] audit: type=1326 audit(2000000207.723:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15006 comm="syz.4.2460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f154698eec9 code=0x7fc00000
[  776.287069][  T943] mcp2221 0003:04D8:00DD.0041: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  776.337432][  T979] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  776.438396][    C1] ==================================================================
[  776.446483][    C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x1070/0x10a0
[  776.454466][    C1] Read of size 1 at addr ffff888056273fff by task swapper/1/0
[  776.461901][    C1] 
[  776.464206][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  776.464225][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  776.464238][    C1] Call Trace:
[  776.464246][    C1]  <IRQ>
[  776.464256][    C1]  dump_stack_lvl+0x116/0x1f0
[  776.464285][    C1]  print_report+0xcd/0x630
[  776.464304][    C1]  ? __virt_addr_valid+0x81/0x610
[  776.464320][    C1]  ? __phys_addr+0xe8/0x180
[  776.464334][    C1]  ? mcp2221_raw_event+0x1070/0x10a0
[  776.464353][    C1]  kasan_report+0xe0/0x110
[  776.464371][    C1]  ? mcp2221_raw_event+0x1070/0x10a0
[  776.464402][    C1]  mcp2221_raw_event+0x1070/0x10a0
[  776.464429][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  776.464448][    C1]  __hid_input_report.constprop.0+0x311/0x450
[  776.464462][    C1]  ? __pfx_mcp2221_raw_event+0x10/0x10
[  776.464478][    C1]  hid_irq_in+0x35e/0x870
[  776.464497][    C1]  __usb_hcd_giveback_urb+0x388/0x610
[  776.464513][    C1]  usb_hcd_giveback_urb+0x39b/0x450
[  776.464534][    C1]  dummy_timer+0x1814/0x3a30
[  776.464573][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  776.464595][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  776.464617][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  776.464629][    C1]  __hrtimer_run_queues+0x202/0xad0
[  776.464644][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  776.464658][    C1]  ? read_tsc+0x9/0x20
[  776.464685][    C1]  hrtimer_run_softirq+0x17d/0x350
[  776.464709][    C1]  handle_softirqs+0x219/0x8e0
[  776.464735][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  776.464751][    C1]  __irq_exit_rcu+0x109/0x170
[  776.464763][    C1]  irq_exit_rcu+0x9/0x30
[  776.464776][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  776.464789][    C1]  </IRQ>
[  776.464793][    C1]  <TASK>
[  776.464797][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  776.464819][    C1] RIP: 0010:sched_core_balance+0xa0/0xeb0
[  776.464844][    C1] Code: 15 5c 8e e8 62 3a 0d 00 e8 5d 50 0a 0a 41 5b 85 c0 0f 85 31 0a 00 00 4c 89 e7 e8 7b 72 fe ff e8 86 e5 38 00 fb 48 63 44 24 50 <48> c7 c3 00 83 d8 93 48 89 44 24 08 48 83 f8 07 0f 87 9c 0c 00 00
[  776.464863][    C1] RSP: 0018:ffffc90000197b00 EFLAGS: 00000206
[  776.464879][    C1] RAX: 0000000000000001 RBX: ffff8880b8523f10 RCX: ffffffff81c3849f
[  776.464887][    C1] RDX: 0000000000000000 RSI: ffffffff8de52e89 RDI: ffffffff8c163400
[  776.464894][    C1] RBP: ffffc90000197c20 R08: 0000000000000001 R09: 0000000000000001
[  776.464900][    C1] R10: ffffffff90ab7797 R11: 0000000000000000 R12: ffff8880b853a300
[  776.464907][    C1] R13: ffff88807b8d8000 R14: 0000000000000000 R15: dffffc0000000000
[  776.464916][    C1]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  776.464934][    C1]  ? lock_acquire+0x179/0x350
[  776.464950][    C1]  finish_task_switch.isra.0+0x46f/0xc10
[  776.464977][    C1]  __schedule+0x1198/0x5de0
[  776.465005][    C1]  ? __pfx___schedule+0x10/0x10
[  776.465024][    C1]  ? find_held_lock+0x2b/0x80
[  776.465040][    C1]  ? rcu_is_watching+0x12/0xc0
[  776.465054][    C1]  schedule_idle+0x5c/0x90
[  776.465067][    C1]  do_idle+0x2b6/0x510
[  776.465082][    C1]  ? __pfx_do_idle+0x10/0x10
[  776.465105][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[  776.465128][    C1]  cpu_startup_entry+0x4f/0x60
[  776.465152][    C1]  start_secondary+0x21d/0x2b0
[  776.465178][    C1]  ? __pfx_start_secondary+0x10/0x10
[  776.465197][    C1]  common_startup_64+0x13e/0x148
[  776.465215][    C1]  </TASK>
[  776.465220][    C1] 
[  776.786055][    C1] Allocated by task 2906:
[  776.790375][    C1]  kasan_save_stack+0x33/0x60
[  776.795035][    C1]  kasan_save_track+0x14/0x30
[  776.799696][    C1]  __kasan_kmalloc+0xaa/0xb0
[  776.804274][    C1]  __ipv6_dev_mc_inc+0x2f1/0xbc0
[  776.809205][    C1]  addrconf_dad_work+0x28c/0x14e0
[  776.814218][    C1]  process_one_work+0x9cc/0x1b70
[  776.819137][    C1]  worker_thread+0x6c8/0xf10
[  776.823724][    C1]  kthread+0x3c2/0x780
[  776.827788][    C1]  ret_from_fork+0x56a/0x730
[  776.832369][    C1]  ret_from_fork_asm+0x1a/0x30
[  776.837118][    C1] 
[  776.839416][    C1] The buggy address belongs to the object at ffff888056273c00
[  776.839416][    C1]  which belongs to the cache kmalloc-512 of size 512
[  776.853469][    C1] The buggy address is located 735 bytes to the right of
[  776.853469][    C1]  allocated 288-byte region [ffff888056273c00, ffff888056273d20)
[  776.868131][    C1] 
[  776.870432][    C1] The buggy address belongs to the physical page:
[  776.876816][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56270
[  776.885569][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  776.894071][    C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  776.902036][    C1] page_type: f5(slab)
[  776.906004][    C1] raw: 00fff00000000040 ffff88801b841c80 0000000000000000 dead000000000001
[  776.914577][    C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  776.923157][    C1] head: 00fff00000000040 ffff88801b841c80 0000000000000000 dead000000000001
[  776.931820][    C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  776.940464][    C1] head: 00fff00000000002 ffffea0001589c01 00000000ffffffff 00000000ffffffff
[  776.949108][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  776.957747][    C1] page dumped because: kasan: bad access detected
[  776.964129][    C1] page_owner tracks the page as allocated
[  776.969828][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2906, tgid 2906 (kworker/u8:6), ts 65906824807, free_ts 16185183968
[  776.991183][    C1]  post_alloc_hook+0x1c0/0x230
[  776.995957][    C1]  get_page_from_freelist+0x132b/0x38e0
[  777.001490][    C1]  __alloc_frozen_pages_noprof+0x261/0x23f0
[  777.007392][    C1]  alloc_pages_mpol+0x1fb/0x550
[  777.012229][    C1]  new_slab+0x247/0x330
[  777.016372][    C1]  ___slab_alloc+0xcf2/0x1750
[  777.021045][    C1]  __slab_alloc.constprop.0+0x56/0xb0
[  777.026413][    C1]  __kmalloc_cache_noprof+0xfb/0x3e0
[  777.031695][    C1]  __ipv6_dev_mc_inc+0x2f1/0xbc0
[  777.036624][    C1]  addrconf_dad_work+0x28c/0x14e0
[  777.041638][    C1]  process_one_work+0x9cc/0x1b70
[  777.046556][    C1]  worker_thread+0x6c8/0xf10
[  777.051137][    C1]  kthread+0x3c2/0x780
[  777.055189][    C1]  ret_from_fork+0x56a/0x730
[  777.059765][    C1]  ret_from_fork_asm+0x1a/0x30
[  777.064520][    C1] page last free pid 1 tgid 1 stack trace:
[  777.070296][    C1]  __free_frozen_pages+0x7d5/0x10f0
[  777.075475][    C1]  free_contig_range+0x183/0x4b0
[  777.080406][    C1]  destroy_args+0x794/0xc10
[  777.084893][    C1]  debug_vm_pgtable+0x1a32/0x3640
[  777.089890][    C1]  do_one_initcall+0x120/0x6e0
[  777.094630][    C1]  kernel_init_freeable+0x5c2/0x910
[  777.099817][    C1]  kernel_init+0x1c/0x2b0
[  777.104116][    C1]  ret_from_fork+0x56a/0x730
[  777.108688][    C1]  ret_from_fork_asm+0x1a/0x30
[  777.113429][    C1] 
[  777.115730][    C1] Memory state around the buggy address:
[  777.121341][    C1]  ffff888056273e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  777.129380][    C1]  ffff888056273f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  777.137421][    C1] >ffff888056273f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  777.145460][    C1]                                                                 ^
[  777.153409][    C1]  ffff888056274000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  777.161453][    C1]  ffff888056274080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  777.169499][    C1] ==================================================================
[  777.177540][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  777.184718][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  777.193627][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  777.203663][    C1] Call Trace:
[  777.206922][    C1]  <IRQ>
[  777.209756][    C1]  dump_stack_lvl+0x3d/0x1f0
[  777.214346][    C1]  vpanic+0x6e8/0x7a0
[  777.218335][    C1]  ? __pfx_vpanic+0x10/0x10
[  777.222836][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  777.227842][    C1]  ? mcp2221_raw_event+0x1070/0x10a0
[  777.233124][    C1]  panic+0xca/0xd0
[  777.236833][    C1]  ? __pfx_panic+0x10/0x10
[  777.241238][    C1]  ? end_report+0x4c/0x170
[  777.245642][    C1]  ? rcu_is_watching+0x12/0xc0
[  777.250385][    C1]  ? lock_release+0x201/0x2f0
[  777.255053][    C1]  check_panic_on_warn+0xab/0xb0
[  777.259984][    C1]  end_report+0x107/0x170
[  777.264313][    C1]  kasan_report+0xee/0x110
[  777.268722][    C1]  ? mcp2221_raw_event+0x1070/0x10a0
[  777.273999][    C1]  mcp2221_raw_event+0x1070/0x10a0
[  777.279094][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  777.284885][    C1]  __hid_input_report.constprop.0+0x311/0x450
[  777.290944][    C1]  ? __pfx_mcp2221_raw_event+0x10/0x10
[  777.296403][    C1]  hid_irq_in+0x35e/0x870
[  777.300717][    C1]  __usb_hcd_giveback_urb+0x388/0x610
[  777.306066][    C1]  usb_hcd_giveback_urb+0x39b/0x450
[  777.311244][    C1]  dummy_timer+0x1814/0x3a30
[  777.315830][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  777.320745][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  777.326545][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  777.331474][    C1]  __hrtimer_run_queues+0x202/0xad0
[  777.336672][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  777.342370][    C1]  ? read_tsc+0x9/0x20
[  777.346423][    C1]  hrtimer_run_softirq+0x17d/0x350
[  777.351533][    C1]  handle_softirqs+0x219/0x8e0
[  777.356291][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  777.361553][    C1]  __irq_exit_rcu+0x109/0x170
[  777.366216][    C1]  irq_exit_rcu+0x9/0x30
[  777.370446][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  777.376089][    C1]  </IRQ>
[  777.379001][    C1]  <TASK>
[  777.381931][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  777.387906][    C1] RIP: 0010:sched_core_balance+0xa0/0xeb0
[  777.393620][    C1] Code: 15 5c 8e e8 62 3a 0d 00 e8 5d 50 0a 0a 41 5b 85 c0 0f 85 31 0a 00 00 4c 89 e7 e8 7b 72 fe ff e8 86 e5 38 00 fb 48 63 44 24 50 <48> c7 c3 00 83 d8 93 48 89 44 24 08 48 83 f8 07 0f 87 9c 0c 00 00
[  777.413225][    C1] RSP: 0018:ffffc90000197b00 EFLAGS: 00000206
[  777.419279][    C1] RAX: 0000000000000001 RBX: ffff8880b8523f10 RCX: ffffffff81c3849f
[  777.427246][    C1] RDX: 0000000000000000 RSI: ffffffff8de52e89 RDI: ffffffff8c163400
[  777.435203][    C1] RBP: ffffc90000197c20 R08: 0000000000000001 R09: 0000000000000001
[  777.443165][    C1] R10: ffffffff90ab7797 R11: 0000000000000000 R12: ffff8880b853a300
[  777.451132][    C1] R13: ffff88807b8d8000 R14: 0000000000000000 R15: dffffc0000000000
[  777.459108][    C1]  ? trace_irq_enable.constprop.0+0x2f/0x120
[  777.465099][    C1]  ? lock_acquire+0x179/0x350
[  777.469765][    C1]  finish_task_switch.isra.0+0x46f/0xc10
[  777.475385][    C1]  __schedule+0x1198/0x5de0
[  777.479898][    C1]  ? __pfx___schedule+0x10/0x10
[  777.484726][    C1]  ? find_held_lock+0x2b/0x80
[  777.489392][    C1]  ? rcu_is_watching+0x12/0xc0
[  777.494155][    C1]  schedule_idle+0x5c/0x90
[  777.498577][    C1]  do_idle+0x2b6/0x510
[  777.502644][    C1]  ? __pfx_do_idle+0x10/0x10
[  777.507235][    C1]  ? trace_sched_exit_tp+0x2f/0x120
[  777.512415][    C1]  cpu_startup_entry+0x4f/0x60
[  777.517174][    C1]  start_secondary+0x21d/0x2b0
[  777.521940][    C1]  ? __pfx_start_secondary+0x10/0x10
[  777.527201][    C1]  common_startup_64+0x13e/0x148
[  777.532134][    C1]  </TASK>
[  777.535342][    C1] Kernel Offset: disabled
[  777.539644][    C1] Rebooting in 86400 seconds..