last executing test programs:

2m19.076423326s ago: executing program 4 (id=4507):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1)
socket$inet6(0x10, 0x80000, 0x3)
r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}})
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYBLOB, @ANYRES32], 0x48)
bpf$BPF_GET_MAP_INFO(0x3, &(0x7f00000006c0)={r2, 0x0, 0x0}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0)
r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, 0x0)
ioctl$HIDIOCGPHYS(r4, 0x80404827, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000e00)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setsig(0x4203, r5, 0x5, &(0x7f0000000140)={0x24, 0x4, 0xfffffff7})

2m16.355949609s ago: executing program 4 (id=4513):
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x642400, 0x0) (async)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) (async)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0xb) (async, rerun: 32)
ioctl$BTRFS_IOC_INO_PATHS(r1, 0xc0389423, &(0x7f0000000180)={0x7, 0x50, [0x100000000, 0x5, 0x2, 0xbbe], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async, rerun: 32)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000540)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
syz_usb_connect(0x5, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c291492099042a102d850102030109024c0001000010000904000b2402010302057ff49bfd052406000105240000080624037f000109050602ff"], 0x0) (async)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000300)={0x2, {0x2, 0x2, 0x2, 0x1000}})

2m15.880300765s ago: executing program 4 (id=4515):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async, rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
add_key$user(0x0, &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd)
keyctl$read(0xb, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @void, @value}, 0x28) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x32}, 0x0, @in6=@loopback, 0x1, 0x3, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) (async, rerun: 32)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) (async, rerun: 32)
r6 = socket(0x26, 0x4, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (rerun: 64)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000"], 0x64}}, 0x0) (async)
sendmsg$NFT_BATCH(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async, rerun: 64)
ioctl$BLKZEROOUT(r7, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600}) (rerun: 64)

2m13.982221593s ago: executing program 4 (id=4521):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r1 = fsopen(&(0x7f0000000480)='adfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000040))
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa042, 0x0)
fallocate(r3, 0x0, 0x5, 0x3)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000240)={0x18, 0x0, {0x4, @empty, 'veth0_to_team\x00'}})
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f00000007c0)={0x0, 0xea60}, 0x10)
recvfrom(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$fuseblk(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x20000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0)
shutdown(r3, 0x1)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

2m10.836269799s ago: executing program 4 (id=4528):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x13, r0, 0xf45f2000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000380)={0x0, 0x1, 0x10, 0x7})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r2)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x20, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000024)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond0\x00', <r7=>0x0})
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r6, &(0x7f00000000c0)="3f03fe7fdce0140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)

2m9.61233959s ago: executing program 4 (id=4532):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
epoll_create(0x101)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x40000000000001})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000000000000000100000000000000", @ANYRES32=r6])
ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040))

2m9.038572343s ago: executing program 32 (id=4532):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'geneve0\x00'})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
epoll_create(0x101)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x40000000000001})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000000000000000000000100000000000000", @ANYRES32=r6])
ioctl$KVM_GET_MSRS(r5, 0xc008ae88, &(0x7f0000000040))

8.577612747s ago: executing program 2 (id=5032):
syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x7, 0x24, 0x6, 0x1, 0x4, 0x0, [], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x6, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0xa], 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x2, 0x50, 0x80, 0x9, 0x1}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0x7}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x5, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

6.746806092s ago: executing program 5 (id=5043):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'})
socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x9)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
fsetxattr$security_ima(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x2, "b9e713d6c035a06b"}, 0x9, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="66baf80cb83cecb78cef66bafc0ced66ba400066b8ffff66ef0f78d164646565470fc77d9fb9240b0000b809000000ba000000000f3048b805000000000000000f23c00f21f835010004000f23f80f005300364b0fc729360fc77c8ffd0f20c035000000400f22c0", 0x68}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0xeeee8000}}, "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", "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"})
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2400000076001f"], 0x24}], 0x1}, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socket$netlink(0x10, 0x3, 0xc)

6.523681877s ago: executing program 2 (id=5044):
timer_create(0x0, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000080000000d"], 0xd0060)

6.523004285s ago: executing program 0 (id=5045):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x53d, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff2, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000885d}, 0x20000800)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, 0x0, 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880)

5.95841392s ago: executing program 0 (id=5048):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x775, 0x0, 0x0, 'queue0\x00'})
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}})
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r4 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000001c0)='\x00', 0x1008400, &(0x7f0000000300)={{}, 0x2c, {'rootmode', 0x3d, 0x34550c152e5501b3}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@blksize}], [{@subj_role={'subj_role', 0x3d, '/dev/snd/seq\x00'}}, {@pcr={'pcr', 0x3d, 0x26}}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@appraise_type}, {@dont_appraise}]}}, 0x0, 0x0, &(0x7f0000000440)="40c3266cd7753f97bf7950e6a76c8504b39c339b382daf2399514382623cc8ff3c8afea0b70bd04c92dd599b0b8255394107d0564df733923a5b59a270bbbbf5fb833e3fce4a503e661bfec84af6e602b25ff64c2196f5") (async, rerun: 32)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) (rerun: 32)
syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_UNLINKAT={0x24, 0x40, 0x0, r4, 0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, {0x0, r5}}) (async)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r9, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r10, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) (async)
sendmsg$NL80211_CMD_ASSOCIATE(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x20, r9, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x20}, 0x1, 0x0, 0x0, 0x8005}, 0xc0c5) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x100, 0xfffffffffffff001, 0x8, 0x2, 0x20c3, 0x8, 0x0, 0xa08, 0x9, 0x6, 0x101, 0x9, 0x2, 0x9}})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1e, {}, {}, @raw32}], 0xffc8) (async)
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
write$sndseq(r11, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x1}, {}, @result}], 0x1c)

5.553350316s ago: executing program 0 (id=5050):
syz_usb_connect$uac1(0x2, 0x96, &(0x7f0000000700)=ANY=[@ANYRES32=0x0], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0})

3.816156402s ago: executing program 5 (id=5052):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = io_uring_setup(0x50e4, &(0x7f0000000280)={0x0, 0x9a75, 0x2, 0x2, 0x78e})
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="ad73364256", 0x5)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000880)=0x2, 0x4)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0)
bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @empty}, 0xffffffffffffffb3)
syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x9, 0x450001)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x40, 0x18, 0x4, 0xffff, 0xee, 0x4, &(0x7f0000000180)="180f9efc11ef49af49c7f78960359efe133bace9470722c5449e59eb4f83277488cf346c497d825d6eb720e84ca22f1009ea1d0fd90c270fa821f759c6ba1e65230e33f7ac37cfb88c8b1a73cc41f3ea8522f57f19d841289d4b2b51ac36dd5d64486ce98c04428964a31f882efb44e7d5ce54a0ebb702360897d2e97899f65eaf8f203747219039e277cec83fd3c614778691fddeb1e281e500cc5d67283660a45609c0f73eb4e84a8a5324e7c34cb1335326679314f37aa899d5f45c0a56046558a0cdc570121b5f8c42029aa375f9a89e98369c699e43e151215d08c0a063a0f4272ae1b80eb956344e6d8019"})
r4 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000010200)=@newqdisc={0x24, 0x24, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0x0, 0xe}, {0xf, 0x8}}}, 0x24}}, 0x20008000)
recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001680)=""/4096, 0x1000}], 0x1}, 0x24}], 0x1, 0x40000000, 0x0)
ioctl$IOCTL_VMCI_VERSION(0xffffffffffffffff, 0x79f, &(0x7f0000000000)=0x10000)
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6})
sendmsg$kcm(r5, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000300)={<r8=>0x0})
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000340)={r8, 0x2})
sendmsg$can_j1939(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x1)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10)

3.789444425s ago: executing program 2 (id=5053):
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x3, 0x8, {0x7, 0x25, 0x1, 0x1, 0x8, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x0, 0x6, {0x7, 0x25, 0x1, 0x80, 0xc0, 0x5}}}}}}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x3a, &(0x7f0000000540)={0x5, 0xf, 0x3a, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0xfd, 0x2, 0x1, 0xf00, 0x7, [0x5f, 0x3f00]}, @generic={0x15, 0x10, 0x4, "9ce9a87ec521263bbbb0398c7bad98901e2a"}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x47, 0x1e000, 0xac}]}})
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x92, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xf7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x9, 0x50, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x51, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x19}, [@dmm={0x7, 0x24, 0x14, 0xfffe, 0x8000}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x2d}, @country_functional={0x12, 0x24, 0x7, 0x0, 0x1, [0x200, 0x3, 0x80, 0x3, 0xc96, 0x4]}, @acm={0x4, 0x24, 0x2, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x80, 0x3, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xb4, 0xd, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7, 0x3, 0x90}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0xb, 0x0, 0x3e, 0x40, 0x3}, 0x16, &(0x7f0000000140)={0x5, 0xf, 0x16, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x81, 0x44}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xc, 0x9}]}, 0x7, [{0x6a, &(0x7f0000000180)=@string={0x6a, 0x3, "82a54742ba5f4a8f2d25c5a7037d884f7e6214cff213f86054bd604dbd30785e16dc840a7682e21cbfac9c4becd575e6ef37acd87aee656ca64d923b81e636a2ec1d5ed240f3dca6916801ad573db7bd9a1908c843c772e8ada5838798d437c36de77c65fdb85a76"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc09}}, {0x45, &(0x7f0000000240)=@string={0x45, 0x3, "f24527ac99bc1fe6df134db4c8c583b4a07288adb440fb05bf8e9d67c9dbd30038155079bb507f4e9820ef95dd04f24e4e3b02ed075377bea23f5c3e8d5daca5ff6453"}}, {0x1d, &(0x7f00000002c0)=@string={0x1d, 0x3, "24b1ec2e395f61fe0b738c4c9e67e932970a035cb437c2b179ef2c"}}, {0x59, &(0x7f0000000300)=@string={0x59, 0x3, "93bb91abf1c7c010345e173816d1424835ea711ba33608b6f9cb4a54a282c30080accdf42ae66da99664590dea5d2613486e6224f1e14128120682003f0c1d6169fb129ccdb5091e4f61f6af3ff94fa15fddd08751a05a"}}, {0x6b, &(0x7f0000000380)=@string={0x6b, 0x3, "6b7a59d2fda427ad4acd711ab8778851a6856d1db39cf0d06e94cdf041bfddfb235a891a736c3fd4e421151c139ddd1ff8d1d2434d367f947ed509a64fdb23be7edcb3d7c7dee6c3d1020c803d27c9538eb069bd7e89e510ee79c551bfd1be21d411513b121d53ca66"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x410}}]})

3.475102413s ago: executing program 3 (id=5055):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
semget$private(0x0, 0x1, 0x420)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x840}, 0x1)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x11c)

3.344912467s ago: executing program 1 (id=5056):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
unshare(0x28020480)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
recvmsg(r1, 0x0, 0x1f00)

3.295317982s ago: executing program 1 (id=5057):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/run\x00', 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x100, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xb6)
sendfile(r0, r0, 0x0, 0xffffffff)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
msync(&(0x7f0000d5b000/0x3000)=nil, 0x3000, 0x2)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x11c, r4, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd0, 0xa8, @random="f4702dbb1242aca7796aadc77cfb9acbb9bc7f0a949d68c24214120d1a864f7ba8cb496155b24b3277f7833958670a865dcecef687e1ab54be94c4ecbe1ac05c81ca729d746090df7bb6fa5ddbe5cf679150b9963570b38d4b5ef746967852cd010c7c00b07dc0547ae6becec618de70569d5fbf053d3cfd6763095464406b402460ec314d82cfece37c779ec7bca97f0c0036e0ca753f722110923c744996a35b6ac0420fbd335034003d96382d22b8b51cf2df1917cb9752fef519555d1846e2fcf43cf2482b47d7d11482"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x11c}, 0x1, 0x0, 0x0, 0xc0}, 0x20004040)
r5 = socket$igmp6(0xa, 0x3, 0x2)
sendto$inet6(r5, &(0x7f00000001c0)="d33207f08f65d157e21a04a773fe93358e363ce33400ac0bcbf9d6f4a8df846ab6f2c88f4ef647b0bd991848e4e5bfa143d873315f94a9a9a9514b681c7570f061b504690e8e67961953ac41da226bca7a0f8b5ba17364e2dd9c349ef35caebb2a24d31953ec31cccd217494863807ba06453eab9a9f36a98cd3f48fdf9697f04995b1428b0bba61a43560289789802d063512468319fcc14b5549a6f67068307721ea48440aac35328d2dd7756c46242f751f824e7319f63faa1ebe7f4ddddda08deea6bd", 0xc5, 0x10, &(0x7f00000000c0)={0xa, 0x4e20, 0x7fff, @remote, 0xffff}, 0x1c)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310401bd70000d000200160000001800018014000200636169663000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000004)

3.184374405s ago: executing program 1 (id=5058):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x53d, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff2, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000885d}, 0x20000800)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x20001880)

3.071071546s ago: executing program 1 (id=5059):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0) (async)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r3, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1ff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/208, 0xd0}, {&(0x7f0000000900)=""/236, 0xec}, {&(0x7f0000000a00)=""/4098, 0x1002}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x99}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4087, 0xff7}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/109, 0x6d}, {&(0x7f0000000040)=""/113, 0x71}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x2}], 0x8, 0x40000120, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') (async)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000140)=0x9, 0x4) (async)
setsockopt$sock_int(r6, 0x1, 0x12, &(0x7f0000000140)=0x9, 0x4)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r7, 0x0, 0x0) (async)
bind$vsock_stream(r7, 0x0, 0x0)
listen(r7, 0x6) (async)
listen(r7, 0x6)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x40000015, 0x4, 0x1, 'queue0\x00', 0x7}) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000200)={0x40000015, 0x4, 0x1, 'queue0\x00', 0x7})
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r8, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
close_range(r5, 0xffffffffffffffff, 0x200000000000000)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000440)={0xb2d, r2, 'id1\x00'})
socket(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}}, 0x20000490) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}}, 0x20000490)

2.872777597s ago: executing program 5 (id=5060):
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001400190100000000000000002800000092409ecf13dc49aa3800000000000034754c9fe4"], 0x14}}, 0x10)
r0 = fsopen(&(0x7f0000000100)='vfat\x00', 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x9, 0x10000)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f00000001c0)=0xe241)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='utf8', &(0x7f00000000c0)='/dev/vcsu\x00', 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d00"], 0x2c}}, 0x0)

2.664073287s ago: executing program 5 (id=5061):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r1=>0x0})
statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, &(0x7f0000000000)='\x00\xdb\xf9}\x94\xd7\xe5\x1f\xab{\xd0E\xbc\x1f\xb5<\xe4f=\b\x00\x00\x00\x00\x00\x00\x00\xe2\xde\x8c\x10boj\xd3X\x86\v\x8clx=\xbc0F\x94k\x8d\xe0\xeeP\xa8\xa9\x10\xd4\x0f\x1eL!\x82\x8d\x80\xd0#\xca\xaf#\xf6\x95\xf4\xf2\xce\x8f\x8c\xa4\t\xac\x96\x13\x96\xf76\xc1', 0x53)
ioprio_set$uid(0x3, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=@deltclass={0x60, 0x29, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x5}, {0x6, 0xa}, {0x8, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x57, 0x7a}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x4800000}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x10001}, @TCA_QFQ_LMAX={0x8, 0x2, 0x554}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x41)
r8 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0)
fallocate(r8, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0)
r9 = fanotify_init(0x202, 0x0)
fanotify_mark(r9, 0x1, 0x4800003e, r3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x24}}, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000340)=@sg0, 0x0, &(0x7f0000000380)='./file0\x00')
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4000)

2.575981619s ago: executing program 3 (id=5062):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, 0x5bdc, 0x4000000, 0x0, 0x6, 0x5})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x3a, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, <r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2})

2.314011615s ago: executing program 2 (id=5063):
timer_create(0x0, 0x0, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000004000/0x4000)=nil)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000080000000d"], 0xd0060)

2.243951533s ago: executing program 3 (id=5064):
syz_usb_connect$uac1(0x5, 0xcd, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbb, 0x3, 0x1, 0x60, 0x40, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x5, 0x408, 0x3, 0x8, 0x3, 0x3, 0x9}, @processing_unit={0xc, 0x24, 0x7, 0x4, 0x4, 0xaa, "261418862e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x80, 0x1, 0x3}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x0, 0xb3ae, 0x2, "c3"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x81, 0x2, 0xc, 0x7, "519633a8468e37"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xe, 0x2, 0xf, "6cf7ebaa87"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xc09, 0x7ff, 0x81, "3f805802"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0x2, ';'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xfd, 0x66, 0xa, {0x7, 0x25, 0x1, 0x0, 0xf1, 0xff41}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xe, 0x9, 0x5, {0x7, 0x25, 0x1, 0x2, 0x5, 0x8}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x8, 0x0, 0xff, 0x2}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1, [{0xe8, &(0x7f0000001340)=@string={0xe8, 0x3, "baeab161e1fd7395d973ef5f790ec7fa644489043971ec79fcc2605ca750e009810fa9f25ace7bc6e7848144f00abe40892b00d3bd40fb56394bfd24c350e4cee8a6413c6174e7121bae569f758d4f0bccf4f4c708f6146a52c737828b6d4d401f587caa43f2ac2528cff1a7c9aba3dcf2305a527ef95d52a404efea2e3a12f68dfbf3cae60d41e49dda6080609b3af5e14a9e9292bdafd54653e94589ae058e2a8dc1636a0e3cd76421443d5b4cd9a0feb068092631f90a01d1e0a91d81596323f9149900f9e576f92bc6ba5775f81c3fb1373f4e0403e9fe61b5ab8361b7e48eca286e8c2b"}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$apparmor_current(r0, &(0x7f0000000100)=@hat={'permhat ', 0x0, 0x5e, ['changehat ']}, 0x25)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x100000000000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006380)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021500000000c0a01030000000000000000000000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000b8010000180080001006475700004000280140000001000010000000000000000000084000a094d2309371a21abcd3982ea"], 0xd4}}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000006480)={[0x9, 0x8000, 0x44, 0x7, 0x3, 0x6, 0x1, 0x81, 0xcdd1, 0xfff, 0x9, 0x1, 0x9, 0x1, 0xd8, 0x5], 0x8000000, 0x10})
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r3)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r4, &(0x7f00000000c0)=""/55, 0x37)
getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
getdents64(r9, 0x0, 0x0)
syz_fuse_handle_req(r5, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x150, 0x0, 0x0, [{{0x3, 0x2, 0x0, 0x8000, 0xfffffff7, 0x7f, {0x1, 0x200, 0x4, 0x20, 0x81, 0x1, 0xffffffff, 0x3, 0x2, 0x4000, 0x4, 0x0, r8, 0x0, 0xffffffff}}, {0x3, 0xdbb, 0x7, 0x177, 'user_id'}}, {{0x6, 0x0, 0x6, 0x8, 0x3, 0xfef1, {0x0, 0x0, 0x2, 0x4, 0x101, 0x8, 0x7f, 0x3, 0x7, 0x4000, 0x982e, r7, r8, 0x900000, 0x5}}, {0x2, 0x8, 0x2, 0x3, '..'}}]}, 0x0, 0x0, 0x0})
syz_clone(0x82180000, &(0x7f0000000340)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="a4f31ebd293514b54603a83c0606d99b4a")

2.243287225s ago: executing program 0 (id=5065):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r4=>0x0, &(0x7f0000000340)=<r5=>0x0)
r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0xf00001, 0x2})
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x51)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r8 = openat$cgroup_type(r7, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r8, &(0x7f0000000280), 0x9)
r9 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r9, &(0x7f0000000c40), 0x12)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r11 = openat$cgroup_ro(r10, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r12 = openat$binfmt_format(0xffffff9c, &(0x7f0000000380)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
writev(r12, &(0x7f0000000100)=[{&(0x7f0000000000)="d6cd65a2", 0x4}], 0x1)
write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12)

1.307459284s ago: executing program 3 (id=5066):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf2501000000000000000941000000140018020000007564158c28b5703a73797a3200"], 0x30}, 0x1, 0x0, 0x0, 0x4880}, 0x40090)
write$binfmt_script(r1, &(0x7f0000000280)={'#! ', './file0', [{0x20, '\a\x00'}, {0x20, '/)&'}, {}, {0x20, 'gre0\x00'}, {0x20, '*\xb1'}, {0x20, ']*@'}, {}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}], 0xa, "441e565eda2fd3a99cd62977eac6cdbb87505aac9090209c1c3504f837d8ffa501e709ea95e6a6"}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000040)={&(0x7f0000001800)=[{0x8, 0x2800, 0x4f, &(0x7f0000000180)="6a76c1b175920a71f6191f9737343e385b6d1ff480e12dd63c7ed3fa0f835bcc00bab83ec0ba50c32ab216d8fe44aa662fb97e72db483d1e5e62d03cb5ec22a28b6d388c5d70e05a8c58c38ab960e0"}, {0xfff3, 0x24f972aeb8675bb2, 0x0, 0x0}], 0x2})
r5 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'gre0\x00', <r6=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010061e00cb2f4359b648d5ed0000388dcf66ac141415ef06e63a808a5e5cbd"], 0x3000}], 0x1}, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x80004700)

1.077820488s ago: executing program 0 (id=5067):
r0 = gettid()
timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
unshare(0x28020480)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)

692.296784ms ago: executing program 1 (id=5068):
mmap(&(0x7f00008c2000/0x4000)=nil, 0x4000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 64)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (rerun: 64)
mmap(&(0x7f0000c38000/0x2000)=nil, 0x2000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) (async)
r0 = socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) (async)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r4, 0xffff8000) (async)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) (async)
r6 = landlock_create_ruleset(&(0x7f0000000280)={0x2050, 0x0, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000340)={0x2000}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061108b000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) (async)
rt_sigaction(0x40, &(0x7f0000000140)={&(0x7f0000000000)="24339e9e0f1c2bdfd5c4a2f10027c6c43b640febce41d3ca6566f00fc02c101c65d2150e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380))
r7 = syz_open_procfs(0x0, &(0x7f00000004c0)='stat\x00')
read$FUSE(r7, &(0x7f0000004180)={0x2020}, 0x2020) (async)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x34000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
syz_usb_connect(0x0, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000085826d20ffd56600b0d8000000010902290001000000000904000000e0010300052406000005240000000d240f"], 0x0)

480.585859ms ago: executing program 3 (id=5069):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0x53d, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff2, 0xb}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000885d}, 0x20000800)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x20001880)

322.972106ms ago: executing program 2 (id=5070):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x8, &(0x7f0000000300)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x61, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xe2, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)

216.427137ms ago: executing program 5 (id=5071):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x40000000000000}}, [@tmpl={0x4}]}, 0xbc}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000000180c200000000000000000000000000ff0200000000000000000000000000018600907800000000000000000000000000000000000000000000000000000000f2a0364930b3440d83c05a49e0d7feb25fd0c3c83c31c91d913d22625ae435bf042819e71c923f0f55ae5823a4c2b9ab184e9a4d654e1c1ddb3d6438bb9bf582b946fc7223f8ff4065ba7997d6f4bad3141b7d0d7f56bdca60090049365a1410e38c995b6b5f255fcf6e60cebe5938ebbf69469c85431d8818f0176640b4f671fc522593a5cc8626abcd5afad352673c3ea66c11c9aacf76b5d50749efe9a46fde80820f4d4161d97a3131b6f58adcb3a4e73a38438814e351498df17432ab959f4d211d73c08ffbf0b10b63e3b4376d022bad06c5ce6fcbc790bd3a41e006806b98e5d1527b5e8fb83fa72af1e349bfff75ac"], 0x0)

170.992111ms ago: executing program 2 (id=5072):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000200)={0x0, 0x1, 0x3, 0x7fffffffffffffff})
r1 = syz_open_procfs(0x0, &(0x7f0000000780)='net/softnet_stat\x00')
read$eventfd(r1, &(0x7f0000000800), 0x6)
mount_setattr(r0, &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={0x100082, 0x100000, 0x120000, {r1}}, 0x20)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0xfd, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1}}}}}]}}]}}, 0x0)
add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={'sha1-generic\x00'}})
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x20, 0xb, 0x2f, {0x2f, 0x30, "b9d02d1fbb42de954ec615971eb4206a1a18d9405fe05a85b06532d3ca97d4e0b4f35a7179ba7831eca5a173c2"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

83.972717ms ago: executing program 0 (id=5073):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
read$char_usb(r2, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x73, &(0x7f0000000440)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x5, 0x130, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "ce47e70e07"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xcf, 0xe, 0xd}, {0x6, 0x24, 0x1a, 0x3}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x10, 0x7f, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0xa, 0x64}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xfd, 0x1, 0x1}}}}}}}]}}, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)
lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
close(r3)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80)
futex(&(0x7f000000cffc), 0xa, 0x301, 0x0, 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000040)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0x33, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, [<r8=>0x0], [], [], [0xd]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={r7, 0x10, 0x3ff, 0x34325241, 0x3, [r8, 0x0, 0x0, r8], [0x2b8], [0x35b], [0x1a7a]})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

83.662719ms ago: executing program 1 (id=5074):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x5)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffe, 0x0, {0x0, 0x1}, {0x80, 0x2}, @const={0x0, {0x8, 0x0, 0xfffc}}})
write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000400)={0x0, 0x0})
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="f000000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0008000000020000bc0012800c0001006d6163766c616e00ac000280080003000100000008000100100000000a0006000180c200000300000a00040000000000030000000800070005000000080007000a0000004c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaabb00000a0004004ac92f9d35ed00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaabb00000a000400aa"], 0xf0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0xd1ae})

393.507µs ago: executing program 5 (id=5075):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000002c0)=@newsa={0x180, 0x1a, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@remote, 0x16, 0x6c}, @in=@multicast2, {0x0, 0x0, 0x0, 0xffffffe7ffffffff, 0x0, 0xfffffffffffffffc, 0x1000000000000000, 0x80}, {0x0, 0x4, 0x0, 0x1}, {0x0, 0x5}, 0x0, 0x1, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'ctr-aes-neon\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x4004050}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"})
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)

0s ago: executing program 3 (id=5076):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xffffffff, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbb"], 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

rialNumber: syz
[ 1332.349269][   T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1332.368818][  T918] usb 3-1: config 0 descriptor??
[ 1332.519109][   T24] usb 4-1: Using ep0 maxpacket: 16
[ 1332.540419][   T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 1332.562789][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1332.573118][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1332.606556][  T918] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1332.615749][   T24] usb 4-1: Product: ఌ
[ 1332.625594][   T24] usb 4-1: Manufacturer: �
[ 1332.631125][   T24] usb 4-1: SerialNumber: ￚ꛿ߨ업筒팜��栦�晲
[ 1333.447714][   T24] cdc_ncm 4-1:1.0: bind() failure
[ 1333.457497][   T24] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[ 1333.484665][   T24] cdc_ncm 4-1:1.1: bind() failure
[ 1333.516327][   T24] usb 4-1: USB disconnect, device number 23
[ 1333.667733][T23295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4529'.
[ 1333.784977][T23211] raw-gadget.4 gadget.4: failed to queue disconnect event
[ 1333.830054][  T918] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1333.865520][  T918] usb 3-1: USB disconnect, device number 36
[ 1333.973341][T21041] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.112049][T21041] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.196359][T21041] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1334.727623][T21041] bridge_slave_1: left allmulticast mode
[ 1334.742406][T21041] bridge_slave_1: left promiscuous mode
[ 1334.755470][T21041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1334.778766][T21041] bridge_slave_0: left allmulticast mode
[ 1334.794687][T21041] bridge_slave_0: left promiscuous mode
[ 1334.807261][T21041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1334.899739][  T918] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 1335.089230][  T918] usb 4-1: Using ep0 maxpacket: 8
[ 1335.096931][  T918] usb 4-1: config index 0 descriptor too short (expected 165, got 18)
[ 1335.118297][  T918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1335.139028][  T918] usb 4-1: config 0 has no interfaces?
[ 1335.147700][  T918] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=40.f3
[ 1335.160736][  T918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1335.168892][  T918] usb 4-1: Product: syz
[ 1335.176239][  T918] usb 4-1: Manufacturer: syz
[ 1335.180953][  T918] usb 4-1: SerialNumber: syz
[ 1335.192492][  T918] usb 4-1: config 0 descriptor??
[ 1335.377705][T21041] bond2 (unregistering): (slave gretap1): Releasing active interface
[ 1335.406676][  T918] usb 4-1: USB disconnect, device number 24
[ 1335.602395][ T5939] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1335.770795][ T5939] usb 3-1: Using ep0 maxpacket: 16
[ 1335.791619][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1335.810203][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1335.816662][T16767] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1335.820704][ T5939] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1335.851820][T16767] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1335.861552][T16767] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1335.866366][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.895042][ T5939] usb 3-1: config 0 descriptor??
[ 1335.920336][T16767] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1335.928717][T16767] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1336.335678][ T5939] savu 0003:1E7D:2D5A.0037: unknown main item tag 0x0
[ 1336.345593][T21041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1336.362249][ T5939] savu 0003:1E7D:2D5A.0037: unknown main item tag 0x0
[ 1336.380339][ T5939] savu 0003:1E7D:2D5A.0037: unknown main item tag 0x0
[ 1336.387303][ T5939] savu 0003:1E7D:2D5A.0037: unknown main item tag 0x0
[ 1336.404620][ T5939] savu 0003:1E7D:2D5A.0037: unknown main item tag 0x0
[ 1336.412342][T21041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1336.446067][T21041] bond0 (unregistering): Released all slaves
[ 1336.472086][T21041] bond1 (unregistering): Released all slaves
[ 1336.484546][ T5939] savu 0003:1E7D:2D5A.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0
[ 1336.518600][T23326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1336.528460][T23326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1336.615540][ T5939] usb 3-1: USB disconnect, device number 37
[ 1336.729176][  T918] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[ 1336.754867][T23327] fido_id[23327]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1336.955826][  T918] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1336.964754][  T918] usb 4-1: config 0 has no interface number 0
[ 1336.971815][  T918] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1337.002054][  T918] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1337.017000][  T918] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1337.042226][  T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1337.081098][  T918] usb 4-1: config 0 descriptor??
[ 1337.094501][T23324] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1337.115327][  T918] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1337.217894][T21041] bond2 (unregistering): Released all slaves
[ 1337.455811][T23332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1337.466574][T23332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1337.649652][ T5939] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1337.809231][ T5939] usb 3-1: Using ep0 maxpacket: 16
[ 1337.817825][ T5939] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1337.828347][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1337.843294][ T5939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1337.844187][T21041] bond3 (unregistering): (slave bond4): Releasing backup interface
[ 1337.857237][ T5939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1337.871412][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1337.874861][T21041] bond4 (unregistering): left promiscuous mode
[ 1337.887437][ T5939] usb 3-1: Product: syz
[ 1337.894095][ T5939] usb 3-1: Manufacturer: syz
[ 1337.894498][T21041] bond3 (unregistering): Released all slaves
[ 1337.910879][ T5939] usb 3-1: SerialNumber: syz
[ 1338.027803][T23216] Bluetooth: hci3: command tx timeout
[ 1338.513968][ T5939] usb 3-1: 0:2 : does not exist
[ 1338.556291][T21041] bond4 (unregistering): Released all slaves
[ 1338.752723][T21041] IPVS: stopping backup sync thread 22965 ...
[ 1338.908706][T23331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1338.946853][T23331] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1339.656246][T21697] usb 4-1: USB disconnect, device number 25
[ 1339.884448][T21041] hsr_slave_0: left promiscuous mode
[ 1339.896347][T21041] hsr_slave_1: left promiscuous mode
[ 1339.950635][T21041] veth1_macvtap: left allmulticast mode
[ 1339.964574][T21041] veth1_macvtap: left promiscuous mode
[ 1339.970518][T21041] veth0_macvtap: left promiscuous mode
[ 1339.981104][T21041] veth1_vlan: left promiscuous mode
[ 1339.986760][T21041] veth0_vlan: left promiscuous mode
[ 1340.100128][T23216] Bluetooth: hci3: command tx timeout
[ 1340.159361][T21697] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1340.300387][ T5939] usb 3-1: USB disconnect, device number 38
[ 1340.321344][T21697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1340.349727][T21697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1340.381286][T21697] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[ 1340.391864][ T6448] udevd[6448]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1340.399371][T21697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1340.441622][T21697] usb 4-1: config 0 descriptor??
[ 1340.900421][T23355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1340.946073][T23355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1340.995768][T23371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1341.035303][T23371] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1341.120283][T21697] usbhid 4-1:0.0: can't add hid device: -71
[ 1341.128589][T21697] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1341.165003][T21697] usb 4-1: USB disconnect, device number 26
[ 1342.188991][T23216] Bluetooth: hci3: command tx timeout
[ 1343.263549][T23389] syz.3.4556 (23389): drop_caches: 2
[ 1343.670016][T23315] chnl_net:caif_netlink_parms(): no params data found
[ 1344.023069][T23428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1344.054483][T23428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1344.339660][T23216] Bluetooth: hci3: command tx timeout
[ 1344.474244][   T30] audit: type=1326 audit(1749893936.615:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23413 comm="syz.3.4562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65d078e929 code=0x0
[ 1344.497231][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1344.841366][T23315] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1344.853927][T23315] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1344.892295][T23315] bridge_slave_0: entered allmulticast mode
[ 1344.943994][T23315] bridge_slave_0: entered promiscuous mode
[ 1345.002272][T23315] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1345.017671][T23315] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1345.034177][T23315] bridge_slave_1: entered allmulticast mode
[ 1345.062911][T23315] bridge_slave_1: entered promiscuous mode
[ 1345.174346][T23315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1345.232897][T23315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1345.578462][T23315] team0: Port device team_slave_0 added
[ 1345.604773][T23315] team0: Port device team_slave_1 added
[ 1345.649222][   T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1345.716000][T23315] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1345.727107][T23315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1345.754591][T23315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1345.768466][T23315] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1345.776977][T23315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1345.809978][   T24] usb 3-1: Using ep0 maxpacket: 16
[ 1345.811609][T23315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1345.818655][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1345.840572][   T24] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00
[ 1345.850932][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.874580][   T24] usb 3-1: config 0 descriptor??
[ 1346.010031][T23315] hsr_slave_0: entered promiscuous mode
[ 1346.017911][T23315] hsr_slave_1: entered promiscuous mode
[ 1346.031088][T23315] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1346.053206][T23315] Cannot create hsr debugfs directory
[ 1346.199473][ T5914] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[ 1346.331669][   T24] uclogic 0003:5543:0005.0038: unknown main item tag 0x0
[ 1346.367140][   T24] uclogic 0003:5543:0005.0038: unknown main item tag 0x0
[ 1346.431650][   T24] uclogic 0003:5543:0005.0038: unknown main item tag 0x0
[ 1346.448663][ T5914] usb 4-1: config 0 has no interfaces?
[ 1346.496436][   T24] uclogic 0003:5543:0005.0038: No inputs registered, leaving
[ 1346.507605][T23443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1346.538883][ T5914] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1346.551202][T23443] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1346.610934][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1346.629071][   T24] uclogic 0003:5543:0005.0038: hidraw0: USB HID v0.05 Device [HID 5543:0005] on usb-dummy_hcd.2-1/input0
[ 1346.755584][ T5914] usb 4-1: Product: syz
[ 1346.784161][ T5914] usb 4-1: Manufacturer: syz
[ 1346.858323][   T24] usb 3-1: USB disconnect, device number 39
[ 1346.865791][ T5914] usb 4-1: SerialNumber: syz
[ 1346.885154][T23315] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1346.907436][ T5914] usb 4-1: config 0 descriptor??
[ 1347.043868][T23315] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1347.163924][T23315] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1347.199991][T23448] program syz.3.4565 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1347.227624][T23448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1347.240707][T23448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1347.367698][T23315] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1347.967054][T23465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1347.978048][T23465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1348.195800][T23478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1348.222304][T23478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1348.725090][T23492] FAULT_INJECTION: forcing a failure.
[ 1348.725090][T23492] name failslab, interval 1, probability 0, space 0, times 0
[ 1348.926151][T23492] CPU: 1 UID: 0 PID: 23492 Comm: syz.0.4571 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) 
[ 1348.926182][T23492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1348.926194][T23492] Call Trace:
[ 1348.926203][T23492]  <TASK>
[ 1348.926213][T23492]  dump_stack_lvl+0x189/0x250
[ 1348.926249][T23492]  ? __pfx____ratelimit+0x10/0x10
[ 1348.926280][T23492]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1348.926310][T23492]  ? __pfx__printk+0x10/0x10
[ 1348.926339][T23492]  ? __pfx___might_resched+0x10/0x10
[ 1348.926368][T23492]  ? fs_reclaim_acquire+0x7d/0x100
[ 1348.926396][T23492]  should_fail_ex+0x414/0x560
[ 1348.926428][T23492]  should_failslab+0xa8/0x100
[ 1348.926451][T23492]  kmem_cache_alloc_lru_noprof+0x78/0x3d0
[ 1348.926481][T23492]  ? __d_alloc+0x31/0x6f0
[ 1348.926511][T23492]  __d_alloc+0x31/0x6f0
[ 1348.926543][T23492]  d_alloc+0x4b/0x190
[ 1348.926566][T23492]  ? lookup_one_qstr_excl_raw+0xb4/0x280
[ 1348.926596][T23492]  lookup_one_qstr_excl_raw+0xc8/0x280
[ 1348.926625][T23492]  filename_create+0x225/0x470
[ 1348.926661][T23492]  ? __pfx_filename_create+0x10/0x10
[ 1348.926693][T23492]  ? getname_kernel+0x20e/0x2f0
[ 1348.926718][T23492]  kern_path_create+0x33/0x50
[ 1348.926746][T23492]  unix_bind+0x2ad/0xd90
[ 1348.926776][T23492]  ? tomoyo_socket_bind_permission+0x1af/0x290
[ 1348.926807][T23492]  ? __pfx_unix_bind+0x10/0x10
[ 1348.926836][T23492]  ? bpf_lsm_socket_bind+0x9/0x20
[ 1348.926866][T23492]  __sys_bind+0x2c3/0x3e0
[ 1348.926893][T23492]  ? __pfx___sys_bind+0x10/0x10
[ 1348.926930][T23492]  ? __pfx_ksys_write+0x10/0x10
[ 1348.926946][T23492]  ? rcu_is_watching+0x15/0xb0
[ 1348.926986][T23492]  __x64_sys_bind+0x7a/0x90
[ 1348.927009][T23492]  do_syscall_64+0xfa/0x3b0
[ 1348.927028][T23492]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1348.927055][T23492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1348.927075][T23492]  ? clear_bhb_loop+0x60/0xb0
[ 1348.927109][T23492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1348.927129][T23492] RIP: 0033:0x7f8f6478e929
[ 1348.927149][T23492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1348.927166][T23492] RSP: 002b:00007f8f65640038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1348.927189][T23492] RAX: ffffffffffffffda RBX: 00007f8f649b5fa0 RCX: 00007f8f6478e929
[ 1348.927204][T23492] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000003
[ 1348.927217][T23492] RBP: 00007f8f65640090 R08: 0000000000000000 R09: 0000000000000000
[ 1348.927228][T23492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1348.927241][T23492] R13: 0000000000000000 R14: 00007f8f649b5fa0 R15: 00007f8f64adfa28
[ 1348.927272][T23492]  </TASK>
[ 1349.039450][ T5939] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[ 1349.040432][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1349.216638][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1349.400573][ T5939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1349.423463][T23315] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1349.433454][ T5939] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1349.495232][ T5939] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 1349.603652][T23315] 8021q: adding VLAN 0 to HW filter on device team0
[ 1349.656846][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1349.689534][T21041] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1349.697624][T21041] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1349.732678][T21041] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1349.739863][T21041] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1349.796567][ T5939] usb 3-1: SerialNumber: syz
[ 1350.053626][ T5939] usb 3-1: bad CDC descriptors
[ 1350.063093][T23505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1350.107766][ T5939] usb-storage 3-1:1.0: USB Mass Storage device detected
[ 1350.156501][T23505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1350.204944][ T5939] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 1350.231451][T23315] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1350.262772][T23505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1350.283425][T23505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1350.445197][ T5939] usb 4-1: USB disconnect, device number 27
[ 1350.652787][T23315] veth0_vlan: entered promiscuous mode
[ 1350.709994][T23512] tipc: Cannot configure node identity twice
[ 1350.802937][T23315] veth1_vlan: entered promiscuous mode
[ 1350.898476][T23518] ptrace attach of "./syz-executor exec"[17096] was attempted by "./syz-executor exec"[23518]
[ 1351.229711][T23315] veth0_macvtap: entered promiscuous mode
[ 1351.242120][T23315] veth1_macvtap: entered promiscuous mode
[ 1351.358117][T23315] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1351.457653][T23315] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1351.547858][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4576'.
[ 1351.564375][T23315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.586074][T23315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.644877][T23315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.703491][T23315] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1351.814347][T23529] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4576'.
[ 1352.167481][ T5939] usb 3-1: USB disconnect, device number 40
[ 1352.424955][T23535] loop4: detected capacity change from 0 to 524255231
[ 1352.477615][T22303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1352.559763][T22303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.017079][   T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 1353.092726][T13007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1353.149460][T13007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1353.233020][   T24] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1353.259649][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1353.291897][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1353.369196][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1353.422424][   T24] usb 3-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9
[ 1353.446685][T23549] FAULT_INJECTION: forcing a failure.
[ 1353.446685][T23549] name failslab, interval 1, probability 0, space 0, times 0
[ 1353.474252][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1353.500979][   T24] usb 3-1: config 0 descriptor??
[ 1353.523910][   T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1353.538375][   T24] usb 3-1: MIDIStreaming interface descriptor not found
[ 1353.588093][T23549] CPU: 0 UID: 0 PID: 23549 Comm: syz.3.4582 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) 
[ 1353.588124][T23549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1353.588136][T23549] Call Trace:
[ 1353.588146][T23549]  <TASK>
[ 1353.588164][T23549]  dump_stack_lvl+0x189/0x250
[ 1353.588200][T23549]  ? __pfx____ratelimit+0x10/0x10
[ 1353.588232][T23549]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1353.588263][T23549]  ? __pfx__printk+0x10/0x10
[ 1353.588294][T23549]  ? __pfx___might_resched+0x10/0x10
[ 1353.588323][T23549]  ? fs_reclaim_acquire+0x7d/0x100
[ 1353.588353][T23549]  should_fail_ex+0x414/0x560
[ 1353.588387][T23549]  should_failslab+0xa8/0x100
[ 1353.588411][T23549]  __kmalloc_noprof+0xcb/0x4f0
[ 1353.588429][T23549]  ? kfree+0x4d/0x440
[ 1353.588455][T23549]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[ 1353.588490][T23549]  tomoyo_realpath_from_path+0xe3/0x5d0
[ 1353.588522][T23549]  ? tomoyo_domain+0xd9/0x130
[ 1353.588558][T23549]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1353.588583][T23549]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1353.588611][T23549]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1353.588645][T23549]  ? kasan_save_track+0x4f/0x80
[ 1353.588715][T23549]  ? __pfx_current_check_access_path+0x10/0x10
[ 1353.588751][T23549]  tomoyo_path_mknod+0x142/0x190
[ 1353.588780][T23549]  ? kasan_quarantine_put+0xdd/0x220
[ 1353.588810][T23549]  ? __pfx_tomoyo_path_mknod+0x10/0x10
[ 1353.588847][T23549]  ? kern_path_create+0x3e/0x50
[ 1353.588872][T23549]  ? kmem_cache_free+0x18f/0x400
[ 1353.588896][T23549]  security_path_mknod+0x17e/0x3a0
[ 1353.588934][T23549]  unix_bind+0x3ca/0xd90
[ 1353.588970][T23549]  ? __pfx_unix_bind+0x10/0x10
[ 1353.588999][T23549]  ? bpf_lsm_socket_bind+0x9/0x20
[ 1353.589029][T23549]  __sys_bind+0x2c3/0x3e0
[ 1353.589055][T23549]  ? __pfx___sys_bind+0x10/0x10
[ 1353.589094][T23549]  ? __pfx_ksys_write+0x10/0x10
[ 1353.589109][T23549]  ? rcu_is_watching+0x15/0xb0
[ 1353.589150][T23549]  __x64_sys_bind+0x7a/0x90
[ 1353.589182][T23549]  do_syscall_64+0xfa/0x3b0
[ 1353.589200][T23549]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1353.589230][T23549]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.589249][T23549]  ? clear_bhb_loop+0x60/0xb0
[ 1353.589275][T23549]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1353.589294][T23549] RIP: 0033:0x7f65d078e929
[ 1353.589314][T23549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1353.589331][T23549] RSP: 002b:00007f65d16a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1353.589354][T23549] RAX: ffffffffffffffda RBX: 00007f65d09b5fa0 RCX: 00007f65d078e929
[ 1353.589369][T23549] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000003
[ 1353.589382][T23549] RBP: 00007f65d16a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1353.589394][T23549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1353.589406][T23549] R13: 0000000000000000 R14: 00007f65d09b5fa0 R15: 00007f65d0adfa28
[ 1353.589439][T23549]  </TASK>
[ 1353.927140][T23549] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1354.133416][   T24] usb 3-1: USB disconnect, device number 41
[ 1354.367719][T23566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4585'.
[ 1354.984766][T23577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1354.995496][T23577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1355.359830][ T5914] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[ 1355.560330][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1355.571593][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1355.606790][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 1355.616712][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1355.628700][ T5914] usb 4-1: SerialNumber: syz
[ 1355.667725][ T5914] usb 4-1: bad CDC descriptors
[ 1355.681298][ T5914] usb-storage 4-1:1.0: USB Mass Storage device detected
[ 1355.753958][ T5914] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 1355.842015][T23592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1355.880384][T23592] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1355.900665][T23592] netlink: 'syz.1.4590': attribute type 1 has an invalid length.
[ 1356.813820][T23606] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1357.321242][T23613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1357.352438][T23613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1357.508881][T23613] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4595'.
[ 1357.619381][T21697] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1358.020716][T21697] usb 6-1: Using ep0 maxpacket: 32
[ 1358.114452][T21697] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.9f
[ 1358.145693][T21697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1358.192703][T21697] usb 6-1: Product: syz
[ 1358.196956][T21697] usb 6-1: Manufacturer: syz
[ 1358.235900][T21697] usb 6-1: SerialNumber: syz
[ 1358.300385][T21697] usb 6-1: config 0 descriptor??
[ 1358.313955][T21697] empeg 6-1:0.0: empeg converter detected
[ 1358.331508][T21697] usb 6-1: active config #0 != 1 ??
[ 1358.384711][T23627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1358.458291][T23627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1358.514882][ T5939] usb 6-1: USB disconnect, device number 2
[ 1358.652304][T21697] usb 4-1: USB disconnect, device number 28
[ 1358.737709][T23627] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4599'.
[ 1358.749535][T23627] netlink: 'syz.1.4599': attribute type 7 has an invalid length.
[ 1358.775818][T23627] netlink: 'syz.1.4599': attribute type 8 has an invalid length.
[ 1358.804441][T23627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4599'.
[ 1359.288609][T23646] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4602'.
[ 1360.204113][T23663] input: syz0 as /devices/virtual/input/input97
[ 1360.217886][T23663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4604'.
[ 1360.218008][T23663] netlink: 972 bytes leftover after parsing attributes in process `syz.1.4604'.
[ 1360.377582][T23663] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1360.433581][T23663] bond0: (slave bond3): Enslaving as an active interface with an up link
[ 1360.499672][T21697] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 1360.639349][T21697] usb 3-1: device descriptor read/64, error -71
[ 1360.851135][T23676] netlink: 'syz.5.4607': attribute type 27 has an invalid length.
[ 1360.885925][T21697] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 1361.080059][T21697] usb 3-1: device descriptor read/64, error -71
[ 1361.223504][T21697] usb usb3-port1: attempt power cycle
[ 1361.273412][T23687] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4607'.
[ 1361.293729][T23690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1361.372191][T23690] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1361.392703][T23676] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1361.400515][T23676] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1361.475758][T23691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1361.484647][T23691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1361.635782][T21697] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1361.899486][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.906326][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.962337][T21697] usb 3-1: device descriptor read/8, error -71
[ 1362.198079][T23676] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1362.221904][T21697] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1362.228137][T23676] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1362.398875][T21697] usb 3-1: device descriptor read/8, error -71
[ 1362.479702][T23676] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.491900][T23676] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.502552][T23676] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.512710][T23676] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1362.530620][T21697] usb usb3-port1: unable to enumerate USB device
[ 1362.615671][ T6292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1362.632974][ T6292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1363.281924][  T918] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[ 1363.459784][  T918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1363.511012][  T918] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1363.538881][T23718] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4614'.
[ 1363.626525][  T918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 1363.628354][T23722] input: syz1 as /devices/virtual/input/input98
[ 1363.637644][T23718] loop4: detected capacity change from 0 to 524255231
[ 1363.666408][  T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1363.764489][  T918] usb 4-1: SerialNumber: syz
[ 1363.868020][  T918] usb 4-1: bad CDC descriptors
[ 1363.918450][  T918] usb-storage 4-1:1.0: USB Mass Storage device detected
[ 1363.970710][T21697] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1364.061952][  T918] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 1364.161584][T21697] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1364.240202][T21697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1364.333270][T23733] IPVS: set_ctl: invalid protocol: 136 224.0.0.2:20003
[ 1364.349126][T21697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1364.373858][T21697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1364.474255][T21697] usb 3-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9
[ 1364.519033][T21697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1364.571366][T21697] usb 3-1: config 0 descriptor??
[ 1364.593413][T21697] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1364.642692][T21697] usb 3-1: MIDIStreaming interface descriptor not found
[ 1364.867871][T21697] usb 3-1: USB disconnect, device number 46
[ 1366.001485][  T918] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1366.156601][   T24] usb 4-1: USB disconnect, device number 29
[ 1366.189081][  T918] usb 3-1: Using ep0 maxpacket: 16
[ 1366.228529][  T918] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[ 1366.258391][  T918] usb 3-1: can't read configurations, error -22
[ 1366.282546][T23770] bridge5: entered promiscuous mode
[ 1366.287840][T23770] bridge5: entered allmulticast mode
[ 1366.409429][  T918] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1366.556016][T23778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1366.590880][T23778] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1366.596624][  T918] usb 3-1: Using ep0 maxpacket: 16
[ 1366.618777][  T918] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[ 1366.632135][  T918] usb 3-1: can't read configurations, error -22
[ 1366.646917][  T918] usb usb3-port1: attempt power cycle
[ 1366.693195][T23781] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4629'.
[ 1366.989550][  T918] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1367.023691][  T918] usb 3-1: Using ep0 maxpacket: 16
[ 1367.044790][  T918] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[ 1367.064144][  T918] usb 3-1: can't read configurations, error -22
[ 1367.210235][  T918] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1367.240402][  T918] usb 3-1: Using ep0 maxpacket: 16
[ 1367.249458][  T918] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[ 1367.262226][  T918] usb 3-1: can't read configurations, error -22
[ 1367.282015][  T918] usb usb3-port1: unable to enumerate USB device
[ 1368.138761][T23812] netlink: 'syz.3.4635': attribute type 14 has an invalid length.
[ 1368.982125][T23825] bridge_slave_0: entered promiscuous mode
[ 1369.159414][    T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1369.330529][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1369.375148][    T9] usb 4-1: config 0 has an invalid interface number: 236 but max is 0
[ 1369.409155][    T9] usb 4-1: config 0 has no interface number 0
[ 1369.447433][    T9] usb 4-1: New USB device found, idVendor=f205, idProduct=b038, bcdDevice=26.19
[ 1369.508785][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.551864][    T9] usb 4-1: Product: syz
[ 1369.564467][    T9] usb 4-1: Manufacturer: syz
[ 1369.579876][    T9] usb 4-1: SerialNumber: syz
[ 1369.589779][    T9] usb 4-1: config 0 descriptor??
[ 1369.639092][  T918] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[ 1369.721525][T23839] program syz.1.4641 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1369.753720][   T30] audit: type=1326 audit(1749893961.885:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.1.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1369.912332][  T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1369.931782][    T9] usb-storage 4-1:0.236: USB Mass Storage device detected
[ 1369.936292][  T918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1369.979334][   T30] audit: type=1326 audit(1749893961.885:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.1.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1370.049211][   T30] audit: type=1326 audit(1749893961.895:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.1.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1370.097702][  T918] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1370.139384][  T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1370.164408][   T30] audit: type=1326 audit(1749893961.895:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.1.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1370.165893][T23823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1370.234510][  T918] usb 3-1: config 0 descriptor??
[ 1370.249530][T23823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1370.335039][  T918] hdpvr 3-1:0.0: Could not find bulk-in endpoint
[ 1370.359180][  T918] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[ 1370.367078][   T30] audit: type=1326 audit(1749893961.895:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.1.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1370.412142][   T30] audit: type=1326 audit(1749893961.895:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.1.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1370.435479][   T30] audit: type=1326 audit(1749893961.895:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.1.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1370.458064][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1370.784513][T23832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1370.994948][T23832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1371.020119][   T30] audit: type=1326 audit(1749893961.895:7565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.1.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1371.043139][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1371.084779][  T918] usb 3-1: USB disconnect, device number 51
[ 1371.230668][   T30] audit: type=1326 audit(1749893961.895:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23835 comm="syz.1.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1371.926176][  T918] usb 4-1: USB disconnect, device number 30
[ 1372.408327][T23880] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4650'.
[ 1372.466472][T23880] loop4: detected capacity change from 0 to 524255232
[ 1373.229188][ T5939] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1373.289924][T23909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1373.338512][T23909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1373.359696][T23909] netlink: 'syz.1.4656': attribute type 4 has an invalid length.
[ 1373.399043][ T5939] usb 6-1: Using ep0 maxpacket: 32
[ 1373.416844][ T5939] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[ 1373.443899][ T5939] usb 6-1: config 0 has no interface number 0
[ 1373.457467][ T5939] usb 6-1: config 0 interface 12 has no altsetting 0
[ 1373.484492][ T5939] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1373.501579][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1373.551508][ T5939] usb 6-1: Product: syz
[ 1373.559914][ T5939] usb 6-1: Manufacturer: syz
[ 1373.564798][ T5939] usb 6-1: SerialNumber: syz
[ 1373.583533][ T5939] usb 6-1: config 0 descriptor??
[ 1374.320998][T23925] kvm: pic: non byte read
[ 1374.326076][T23925] kvm: pic: non byte read
[ 1374.331872][T23925] kvm: pic: non byte read
[ 1374.336748][T23925] kvm: pic: non byte read
[ 1374.392905][T23930] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4661'.
[ 1374.409426][T23930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4661'.
[ 1374.533352][T23935] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4662'.
[ 1374.684959][T23921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4659'.
[ 1374.832306][  T918] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1374.853776][T23921] input: syz0 as /devices/virtual/input/input99
[ 1374.996772][T23944] ip6tnl1: entered promiscuous mode
[ 1375.111840][T23942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4664'.
[ 1375.809988][T21697] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1375.981812][T21697] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1375.999558][T21697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1376.016501][T21697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1376.026676][T21697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1376.041065][T21697] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1376.051056][T21697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1376.081510][T21697] usb 3-1: config 0 descriptor??
[ 1376.101954][ T5939] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1376.115666][ T5939] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[ 1376.162870][ T5939] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1376.190850][ T5939] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[ 1376.213942][ T5939] usb 6-1: USB disconnect, device number 3
[ 1376.448831][T23955] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4667'.
[ 1376.463469][T23953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1376.479835][T23953] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1376.481095][T23954] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1376.498140][T23954] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1376.507481][T23954] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1376.516441][T23954] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1376.846026][T21697] usbhid 3-1:0.0: can't add hid device: -71
[ 1376.858066][T21697] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1376.895683][T21697] usb 3-1: USB disconnect, device number 52
[ 1378.241990][T23995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1378.282422][T23995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1378.317377][T23994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1378.338887][T23994] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1379.978513][T24027] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1380.106653][T24027] macvtap1: entered allmulticast mode
[ 1380.132715][T24027] batadv0: entered allmulticast mode
[ 1380.141195][T24027] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1380.763765][T24037] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4681'.
[ 1380.829979][T24037] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1381.100022][T21697] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1381.279353][T21697] usb 6-1: Using ep0 maxpacket: 16
[ 1381.287051][T21697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1381.433596][T21697] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1381.458795][T21697] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1381.485667][T21697] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1381.522941][T21697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1381.556551][T21697] usb 6-1: config 0 descriptor??
[ 1382.522073][T24048] netlink: 'syz.0.4682': attribute type 3 has an invalid length.
[ 1383.012898][T24061] Unknown options in mask 5
[ 1383.456264][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4686'.
[ 1383.511507][T21697] usbhid 6-1:0.0: can't add hid device: -71
[ 1383.536015][T21697] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1383.615545][T21697] usb 6-1: USB disconnect, device number 4
[ 1383.894748][   T30] audit: type=1800 audit(1749893976.015:7567): pid=24077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4686" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[ 1384.581700][T24091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1384.656096][T24092] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1384.669692][T24091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1385.496109][T24109] ptrace attach of "./syz-executor exec"[17096] was attempted by "./syz-executor exec"[24109]
[ 1385.731110][T24111] fuse: Unknown parameter 'g†oup_id
ÂbE(ž�ó~0O¸³~¡¹'
[ 1385.751697][T24111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1385.761243][T24111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1386.450913][T24128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1386.472233][T24128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1386.577455][T24128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1386.684692][T24128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1386.745346][T24128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1386.812932][T24128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1386.878244][T24128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1387.049486][T24128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1387.226433][T24128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1387.370491][T24128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1388.718045][T24173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4708'.
[ 1388.763379][T24173] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4708'.
[ 1388.799286][    T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1388.973388][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1389.008621][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1389.033064][    T9] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1389.059443][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1389.073344][    T9] usb 3-1: Product: syz
[ 1389.077596][    T9] usb 3-1: Manufacturer: syz
[ 1389.089441][  T918] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1389.094162][    T9] usb 3-1: SerialNumber: syz
[ 1389.122633][    T9] usb 3-1: config 0 descriptor??
[ 1389.319464][  T918] usb 4-1: Using ep0 maxpacket: 16
[ 1389.340300][  T918] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[ 1389.353120][  T918] usb 4-1: can't read configurations, error -22
[ 1389.363454][    T9] gs_usb 3-1:0.0: Couldn't send data format (err=-71)
[ 1389.392325][    T9] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[ 1389.416460][    T9] usb 3-1: USB disconnect, device number 53
[ 1389.499323][  T918] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1389.659994][  T918] usb 4-1: Using ep0 maxpacket: 16
[ 1389.675657][  T918] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[ 1389.685767][  T918] usb 4-1: can't read configurations, error -22
[ 1389.695078][  T918] usb usb4-port1: attempt power cycle
[ 1390.059323][  T918] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1390.097973][  T918] usb 4-1: Using ep0 maxpacket: 16
[ 1390.151844][  T918] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[ 1390.177523][  T918] usb 4-1: can't read configurations, error -22
[ 1390.319248][  T918] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1390.350719][  T918] usb 4-1: Using ep0 maxpacket: 16
[ 1390.363684][  T918] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[ 1390.374396][  T918] usb 4-1: can't read configurations, error -22
[ 1390.389290][    T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1390.419630][  T918] usb usb4-port1: unable to enumerate USB device
[ 1390.560932][T24217] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4717'.
[ 1390.570587][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 1390.588316][    T9] usb 3-1: config 1 interface 0 altsetting 176 endpoint 0x81 has an invalid bInterval 23, changing to 8
[ 1390.625857][    T9] usb 3-1: config 1 interface 0 altsetting 176 endpoint 0x2 has an invalid bInterval 253, changing to 11
[ 1390.654228][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1390.700183][    T9] usb 3-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.40
[ 1390.719302][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1390.743069][    T9] usb 3-1: Product: à –
[ 1390.747416][    T9] usb 3-1: Manufacturer: 簨⭗�럓堣�έ캙㩫ᅥꩽ䠪뱷蟌༺똘✞韥�엺쭦�隗羀࡮借낶裿﷟撾呖ꎜ忎Ḝ⺷뻱泛뎙ꀷ촽罚毦ఢ�∂잾�沾킕䱼倎��뼲䖧瞟ஈ霈�Ԇ
[ 1390.814521][    T9] usb 3-1: SerialNumber: syz
[ 1390.817805][T24222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1390.836261][T24222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1391.263582][    T9] usbhid 3-1:1.0: can't add hid device: -71
[ 1391.469108][    T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 1391.492655][    T9] usb 3-1: USB disconnect, device number 54
[ 1391.830884][T24246] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[ 1391.842369][T24246] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[ 1391.851469][T24246] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 1392.299434][    T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1392.449546][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1392.477750][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1392.507250][    T9] usb 3-1: config 127 has an invalid interface number: 158 but max is 0
[ 1392.549823][    T9] usb 3-1: config 127 has no interface number 0
[ 1392.556606][    T9] usb 3-1: config 127 interface 158 has no altsetting 0
[ 1392.587615][    T9] usb 3-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=36.f5
[ 1392.607923][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1392.625054][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4725'.
[ 1392.635024][    T9] usb 3-1: Product: syz
[ 1392.649592][    T9] usb 3-1: Manufacturer: syz
[ 1392.654438][    T9] usb 3-1: SerialNumber: syz
[ 1392.932192][T24250] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[ 1393.027096][    T9] comedi comedi0: could not switch to alternate setting 1
[ 1393.048582][    T9] usbduxfast 3-1:127.158: driver 'usbduxfast' failed to auto-configure device.
[ 1393.109423][    T9] usb 3-1: USB disconnect, device number 55
[ 1393.655882][T24277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1393.691391][T24277] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1394.189284][    T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1394.226444][T24292] fuse: Unknown parameter 'default_permissionskvm'
[ 1394.284361][T24294] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[ 1394.293353][T24294] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1394.359062][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1394.404560][    T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1394.444631][    T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1394.469686][    T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1394.483986][T24298] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4737'.
[ 1394.492045][    T9] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1394.539259][    T9] usb 3-1: Product: syz
[ 1394.547530][    T9] usb 3-1: Manufacturer: syz
[ 1394.587942][    T9] hub 3-1:4.0: USB hub found
[ 1394.784710][    T9] hub 3-1:4.0: 2 ports detected
[ 1395.110092][    T9] hub 3-1:4.0: hub_hub_status failed (err = -71)
[ 1395.289059][   T30] audit: type=1326 audit(1749893987.225:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1395.327569][   T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1395.368483][    T9] hub 3-1:4.0: config failed, can't get hub status (err -71)
[ 1395.368874][   T30] audit: type=1326 audit(1749893987.225:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1395.529042][   T24] usb 4-1: Using ep0 maxpacket: 8
[ 1395.597921][    T9] usb 3-1: USB disconnect, device number 56
[ 1395.632857][   T30] audit: type=1326 audit(1749893987.225:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1395.656401][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1395.808776][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1395.870473][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1395.912173][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1396.019199][   T30] audit: type=1326 audit(1749893987.225:7571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1396.042766][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1396.059458][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1396.070369][   T30] audit: type=1326 audit(1749893987.225:7572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1396.095614][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.110331][   T30] audit: type=1326 audit(1749893987.225:7573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1396.181596][   T30] audit: type=1326 audit(1749893987.225:7574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1396.264516][   T30] audit: type=1326 audit(1749893987.235:7575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1396.300335][   T30] audit: type=1326 audit(1749893987.235:7576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1396.500718][T24304] program syz.3.4738 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1396.584795][   T30] audit: type=1326 audit(1749893987.235:7577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24286 comm="syz.2.4733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f342398e929 code=0x7ffc0000
[ 1396.609518][    T9] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[ 1396.776132][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1396.814239][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1396.868132][    T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1396.912094][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1396.954869][    T9] usb 3-1: SerialNumber: syz
[ 1397.222977][    T9] usb 3-1: 0:2 : does not exist
[ 1397.249898][    T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 1397.284186][    T9] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[ 1397.309705][    T9] usb 3-1: 5:0: failed to get current value for ch 16 (-22)
[ 1397.363100][    T9] usb 3-1: USB disconnect, device number 57
[ 1397.476961][ T6448] udevd[6448]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1397.697520][T24331] loop6: detected capacity change from 0 to 63
[ 1397.735907][T24331] buffer_io_error: 8 callbacks suppressed
[ 1397.735922][T24331] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1397.784915][T24331] Buffer I/O error on dev loop6, logical block 1, async page read
[ 1397.802264][T24331] Buffer I/O error on dev loop6, logical block 2, async page read
[ 1397.836587][T24331] Buffer I/O error on dev loop6, logical block 3, async page read
[ 1397.887580][ T6278] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1397.899391][T24333] netlink: 356 bytes leftover after parsing attributes in process `syz.5.4748'.
[ 1397.926367][   T24] usb 4-1: usb_control_msg returned -71
[ 1397.941252][   T24] usbtmc 4-1:16.0: can't read capabilities
[ 1397.969144][ T6278] Buffer I/O error on dev loop6, logical block 1, async page read
[ 1397.977309][ T6278] Buffer I/O error on dev loop6, logical block 2, async page read
[ 1397.991802][   T24] usb 4-1: USB disconnect, device number 36
[ 1398.006029][ T6278] Buffer I/O error on dev loop6, logical block 3, async page read
[ 1398.049499][T24336] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.074339][T24336] Buffer I/O error on dev loop6, logical block 1, async page read
[ 1398.144855][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4751'.
[ 1398.596841][T24354] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1398.708354][T24358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1398.732458][T24358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1398.875489][T24364] loop4: detected capacity change from 0 to 524255231
[ 1399.129026][ T5914] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1399.303767][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1399.350811][ T5914] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1399.363339][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1399.377591][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1399.390046][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1399.405625][ T5914] usb 4-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9
[ 1399.415862][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.436512][ T5914] usb 4-1: config 0 descriptor??
[ 1399.462749][ T5914] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1399.471233][ T5914] usb 4-1: MIDIStreaming interface descriptor not found
[ 1399.500034][    T9] usb 6-1: config 0 has an invalid descriptor of length 76, skipping remainder of the config
[ 1399.515709][    T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1399.645420][    T9] usb 6-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[ 1399.669850][T21697] usb 4-1: USB disconnect, device number 37
[ 1399.716760][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1399.803683][    T9] usb 6-1: config 0 descriptor??
[ 1399.830221][T24378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4762'.
[ 1399.959854][T24383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4762'.
[ 1400.011953][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4763'.
[ 1400.021352][T24368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1400.021767][T24368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1400.075228][T24368] autofs4:pid:24368:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.31), cmd(0xc018937e)
[ 1400.089956][T24368] autofs4:pid:24368:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e)
[ 1400.511678][T24397] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1400.683632][    T9] usb 6-1: string descriptor 0 read error: -71
[ 1400.703215][    T9] usb 6-1: USB disconnect, device number 5
[ 1400.780479][T16829] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1400.941081][T16829] usb 3-1: config 0 has no interfaces?
[ 1400.953164][T16829] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1400.962881][T16829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1400.971613][T16829] usb 3-1: Product: syz
[ 1400.976188][T16829] usb 3-1: Manufacturer: syz
[ 1400.981316][T16829] usb 3-1: SerialNumber: syz
[ 1400.992420][T16829] usb 3-1: config 0 descriptor??
[ 1401.286277][T24398] fuse: Unknown parameter 'id'
[ 1401.767911][T24413] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.4772'.
[ 1401.777700][T24413] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[ 1401.788665][T24413] openvswitch: netlink: Message has 8454 unknown bytes.
[ 1402.119275][T21697] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[ 1402.186629][T24419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4774'.
[ 1402.281666][T21697] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1402.300076][T21697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1402.323824][T21697] usb 4-1: config 0 descriptor??
[ 1402.542132][T21697] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1402.744332][T21697] [drm:udl_init] *ERROR* Selecting channel failed
[ 1402.744580][T24440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1402.784809][T21697] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[ 1402.793598][T24440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1402.925513][T21697] [drm] Initialized udl on minor 2
[ 1402.953405][T21697] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1402.989775][T21697] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1403.019264][    T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1403.043613][T21697] usb 4-1: USB disconnect, device number 38
[ 1403.096110][    T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 1403.249064][ T5949] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[ 1403.423213][   T30] kauditd_printk_skb: 34 callbacks suppressed
[ 1403.423229][   T30] audit: type=1326 audit(1749893995.565:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24434 comm="syz.1.4778" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c25f8e929 code=0x0
[ 1403.456204][ T5949] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1403.516568][   T24] usb 3-1: USB disconnect, device number 58
[ 1403.559907][ T5949] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1403.646810][ T5949] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[ 1403.671925][T24448] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1403.726927][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1403.735518][ T5949] usb 6-1: SerialNumber: syz
[ 1403.858007][T24453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1403.908759][T24453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1403.944190][ T5949] usb 6-1: bad CDC descriptors
[ 1403.958872][ T5949] usb-storage 6-1:1.0: USB Mass Storage device detected
[ 1404.017089][ T5949] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[ 1404.733811][T24464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4785'.
[ 1405.326043][T24470] netlink: 'syz.2.4787': attribute type 10 has an invalid length.
[ 1405.337430][T24470] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4787'.
[ 1405.348829][T24470] dummy0: entered promiscuous mode
[ 1405.356060][T24470] bridge0: port 1(dummy0) entered blocking state
[ 1405.363713][T24470] bridge0: port 1(dummy0) entered disabled state
[ 1405.371014][T24470] dummy0: entered allmulticast mode
[ 1405.433288][T24470] bridge0: port 1(dummy0) entered blocking state
[ 1405.439887][T24470] bridge0: port 1(dummy0) entered forwarding state
[ 1406.129769][T21697] usb 6-1: USB disconnect, device number 6
[ 1406.261182][T24486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1406.299184][T24486] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1406.569075][T24502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4796'.
[ 1406.940273][T24508] gretap0: entered promiscuous mode
[ 1406.947323][T24508] gretap0: left promiscuous mode
[ 1407.384059][T24513] loop4: detected capacity change from 0 to 524255231
[ 1408.530564][T24540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1408.555834][T24540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1408.739395][    T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1408.848250][T24547] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4807'.
[ 1408.915757][    T9] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[ 1408.938658][    T9] usb 3-1: config 0 has no interface number 0
[ 1408.943981][T24549] loop6: detected capacity change from 0 to 7
[ 1408.960723][T21697] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1408.972716][T24549] Dev loop6: unable to read RDB block 7
[ 1408.983686][T24549]  loop6: unable to read partition table
[ 1408.989539][    T9] usb 3-1: too many endpoints for config 0 interface 32 altsetting 109: 97, using maximum allowed: 30
[ 1409.001898][T24549] loop6: partition table beyond EOD, truncated
[ 1409.010724][    T9] usb 3-1: config 0 interface 32 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 97
[ 1409.029372][T24549] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1409.052590][    T9] usb 3-1: config 0 interface 32 has no altsetting 0
[ 1409.065043][    T9] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[ 1409.082720][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.149806][    T9] usb 3-1: Product: syz
[ 1409.160294][T21697] usb 4-1: Using ep0 maxpacket: 8
[ 1409.174067][    T9] usb 3-1: Manufacturer: syz
[ 1409.181372][    T9] usb 3-1: SerialNumber: syz
[ 1409.189911][T21697] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1409.216818][    T9] usb 3-1: config 0 descriptor??
[ 1409.229266][T21697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.249483][T21697] usb 4-1: Product: syz
[ 1409.254466][T21697] usb 4-1: Manufacturer: syz
[ 1409.265143][T21697] usb 4-1: SerialNumber: syz
[ 1409.302960][T21697] usb 4-1: config 0 descriptor??
[ 1409.492583][    T9] usb 3-1: USB disconnect, device number 59
[ 1409.548480][T21697] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1410.219928][T24560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1410.234933][T24560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1410.289336][T16829] usb 3-1: new full-speed USB device number 60 using dummy_hcd
[ 1410.451041][T16829] usb 3-1: config 252 has an invalid interface number: 107 but max is 0
[ 1410.524949][T16829] usb 3-1: config 252 has no interface number 0
[ 1410.534348][T16829] usb 3-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[ 1410.552371][T16829] usb 3-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1410.566642][T16829] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67
[ 1410.598069][T16829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1410.614106][T16829] usb 3-1: Product: syz
[ 1410.618611][T16829] usb 3-1: Manufacturer: syz
[ 1410.634584][T16829] usb 3-1: SerialNumber: syz
[ 1410.775979][T24544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1410.791441][T24544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1410.932532][ T5949] usb 3-1: USB disconnect, device number 60
[ 1411.028551][T21697] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1411.086298][T24579] loop7: detected capacity change from 0 to 524287999
[ 1411.099724][T21697] usb 4-1: USB disconnect, device number 39
[ 1411.107366][T24579] buffer_io_error: 774 callbacks suppressed
[ 1411.107393][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.133346][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.142448][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.179407][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.203427][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.219852][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.233911][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.248757][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.258803][T24579] ldm_validate_partition_table(): Disk read failed.
[ 1411.269446][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.283779][T24579] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1411.307722][T24579] Dev loop7: unable to read RDB block 0
[ 1411.315262][T24579]  loop7: unable to read partition table
[ 1411.322785][T24579] loop_reread_partitions: partition scan of loop7 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 1411.429468][T24580] Invalid logical block size (8)
[ 1411.708856][T24587] loop6: detected capacity change from 0 to 7
[ 1411.727804][T24587] Dev loop6: unable to read RDB block 7
[ 1411.749172][T24587]  loop6: unable to read partition table
[ 1411.755124][T24587] loop6: partition table beyond EOD, truncated
[ 1411.800001][T24587] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1412.097397][T24596] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4823'.
[ 1412.157435][T24596] usb usb8: usbfs: process 24596 (syz.1.4823) did not claim interface 1 before use
[ 1412.383738][T24608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1412.412140][T24608] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1413.023110][T24618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1413.045260][T24618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1413.546035][T24628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4832'.
[ 1413.624362][T16829] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1413.771935][T24630] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4834'.
[ 1413.791250][T16829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1413.842323][T16829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1413.856935][T16829] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1413.876834][T16829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1413.921252][T16829] usb 4-1: config 0 descriptor??
[ 1414.411990][T16829] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[ 1414.436171][T16829] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[ 1414.452998][T24640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1414.456215][T16829] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[ 1414.473709][T24640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1414.482006][T16829] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[ 1414.492802][T16829] playstation 0003:054C:0DF2.0039: unknown main item tag 0x0
[ 1414.539651][T16829] playstation 0003:054C:0DF2.0039: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0
[ 1414.677980][T16829] playstation 0003:054C:0DF2.0039: Invalid byte count transferred, expected 20 got 0
[ 1414.704152][T16829] playstation 0003:054C:0DF2.0039: Failed to retrieve DualSense pairing info: -22
[ 1414.737079][T16829] playstation 0003:054C:0DF2.0039: Failed to get MAC address from DualSense
[ 1414.767375][T16829] playstation 0003:054C:0DF2.0039: Failed to create dualsense.
[ 1414.788287][T16829] playstation 0003:054C:0DF2.0039: probe with driver playstation failed with error -22
[ 1414.889220][T24625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1414.911825][T24625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1414.946449][    T9] usb 4-1: USB disconnect, device number 40
[ 1415.269225][T16829] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1415.421311][T16829] usb 3-1: config 0 has an invalid interface number: 216 but max is 0
[ 1415.443458][T16829] usb 3-1: config 0 has no interface number 0
[ 1415.452783][T16829] usb 3-1: config 0 interface 216 altsetting 4 bulk endpoint 0x8F has invalid maxpacket 64
[ 1415.464790][T16829] usb 3-1: config 0 interface 216 has no altsetting 0
[ 1415.477570][T16829] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.2e
[ 1415.487542][T16829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1415.509250][T16829] usb 3-1: config 0 descriptor??
[ 1415.523095][T24653] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1415.540964][T16829] usb 3-1: NFC: intf ffff8880711fa000 id ffffffff8eb53240
[ 1415.653427][T24663] netlink: 'syz.3.4845': attribute type 10 has an invalid length.
[ 1415.716577][T24663] 8021q: adding VLAN 0 to HW filter on device team0
[ 1415.731406][T24663] team0: entered promiscuous mode
[ 1415.736675][T24663] team_slave_0: entered promiscuous mode
[ 1415.745744][T24663] team_slave_1: entered promiscuous mode
[ 1415.747863][T16829] usb 3-1: USB disconnect, device number 61
[ 1415.757575][T24663] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1416.045159][T24677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1416.054706][T24677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1416.509858][T24697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4855'.
[ 1416.532917][T24697] bridge0: port 1(dummy0) entered disabled state
[ 1416.753203][T24701] input: syz0 as /devices/virtual/input/input101
[ 1417.071289][T24706] tipc: Enabling of bearer <udp:ser> rejected, failed to enable media
[ 1417.369436][T24718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4858'.
[ 1418.517428][T24728] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1419.004303][   T30] audit: type=1800 audit(1749894011.145:7613): pid=24744 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4864" name="file0" dev="tmpfs" ino=1539 res=0 errno=0
[ 1419.258801][T24751] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4867'.
[ 1419.516217][T24756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1419.532099][T24756] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1419.540239][   T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1419.699413][   T24] usb 4-1: Using ep0 maxpacket: 8
[ 1419.708755][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1419.730987][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1419.758786][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1419.784665][   T24] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82
[ 1419.826288][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1419.887270][T24760] trusted_key: encrypted_key: keylen parameter is missing
[ 1419.906687][   T24] usb 4-1: Product: syz
[ 1419.923484][T24761] trusted_key: encrypted_key: keylen parameter is missing
[ 1419.950731][   T24] usb 4-1: Manufacturer: syz
[ 1419.955498][   T24] usb 4-1: SerialNumber: syz
[ 1420.027942][   T24] usb 4-1: config 0 descriptor??
[ 1420.248109][   T24] usb 4-1: USB disconnect, device number 41
[ 1420.683275][T24781] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1420.759109][   T24] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1420.939943][   T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1421.439245][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1421.497885][   T24] usb 3-1: Product: syz
[ 1421.534518][   T24] usb 3-1: Manufacturer: syz
[ 1421.551766][   T24] usb 3-1: SerialNumber: syz
[ 1421.573080][   T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1421.678506][T16829] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1421.770982][  T918] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1421.977777][    T9] usb 3-1: USB disconnect, device number 62
[ 1421.999209][  T918] usb 4-1: Using ep0 maxpacket: 32
[ 1422.012956][  T918] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[ 1422.043230][  T918] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1422.062246][T24798] IPv6: NLM_F_REPLACE set, but no existing node found!
[ 1422.091087][  T918] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1422.111339][  T918] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1422.125661][  T918] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1422.138138][T24798] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1422.140903][  T918] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1422.155732][  T918] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1422.164628][  T918] usb 4-1: Product: syz
[ 1422.170066][  T918] usb 4-1: Manufacturer: syz
[ 1422.174726][  T918] usb 4-1: SerialNumber: syz
[ 1422.183332][  T918] usb 4-1: config 0 descriptor??
[ 1422.201515][  T918] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1422.204529][T24800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1422.213547][  T918] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1422.247267][T24800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1422.297054][T24800] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4879'.
[ 1422.367023][T24806] dvmrp0: entered allmulticast mode
[ 1422.381738][T24799] dvmrp0: left allmulticast mode
[ 1422.410094][T21697] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1422.414859][  T918] usb 4-1: USB disconnect, device number 42
[ 1422.417966][    C0] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[ 1422.453668][  T918] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[ 1422.639322][T21697] usb 6-1: Using ep0 maxpacket: 8
[ 1422.651405][T21697] usb 6-1: config 0 has an invalid interface number: 148 but max is 0
[ 1422.665335][T21697] usb 6-1: config 0 has no interface number 0
[ 1422.685100][T21697] usb 6-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36
[ 1422.714941][T21697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1422.723125][T21697] usb 6-1: Product: syz
[ 1422.731862][T21697] usb 6-1: Manufacturer: syz
[ 1422.736962][T21697] usb 6-1: SerialNumber: syz
[ 1422.749288][T16829] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1422.756806][T16829] ath9k_htc: Failed to initialize the device
[ 1422.757634][T21697] usb 6-1: config 0 descriptor??
[ 1422.787899][    T9] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1422.798485][T21697] kobil_sct 6-1:0.148: required endpoints missing
[ 1423.004518][T21697] usb 6-1: USB disconnect, device number 7
[ 1423.099102][    T9] usb 3-1: new full-speed USB device number 63 using dummy_hcd
[ 1423.239427][    T9] usb 3-1: device descriptor read/64, error -71
[ 1423.309105][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.315637][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.489972][    T9] usb 3-1: new full-speed USB device number 64 using dummy_hcd
[ 1423.586472][T24824] snd_dummy snd_dummy.0: control 0:0:0:syz0:4 is already present
[ 1424.085762][T24841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1424.098433][T24841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1424.150511][    T9] usb usb3-port1: attempt power cycle
[ 1424.329152][T21697] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[ 1424.482501][T21697] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1424.491325][T21697] usb 6-1: config 0 has no interface number 0
[ 1424.497524][T21697] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1424.515072][    T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1424.524505][T21697] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1424.541076][T21697] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1424.554726][T21697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1424.566970][    T9] usb 3-1: device descriptor read/8, error -71
[ 1424.600798][T21697] usb 6-1: config 0 descriptor??
[ 1424.616982][T24842] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[ 1424.642329][T21697] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1424.710490][T24850] netlink: 1072 bytes leftover after parsing attributes in process `syz.1.4895'.
[ 1424.809273][    T9] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1424.839524][    T9] usb 3-1: device descriptor read/8, error -71
[ 1424.847708][   T24] usb 6-1: USB disconnect, device number 8
[ 1424.949508][    T9] usb usb3-port1: unable to enumerate USB device
[ 1425.259026][    T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1425.415178][T24863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4898'.
[ 1425.429748][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1425.460584][    T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1425.504980][    T9] usb 4-1: config 0 has no interface number 0
[ 1425.529825][    T9] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1425.554766][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1425.574611][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1425.588385][    T9] usb 4-1: Product: syz
[ 1425.593921][    T9] usb 4-1: Manufacturer: syz
[ 1426.131371][    T9] usb 4-1: SerialNumber: syz
[ 1426.190926][    T9] usb 4-1: config 0 descriptor??
[ 1426.211357][    T9] smsc75xx v1.0.0
[ 1426.241584][    T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[ 1426.279250][    T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22
[ 1427.492510][T24880] xt_recent: hitcount (16777216) is larger than allowed maximum (65535)
[ 1427.799425][T16829] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1427.833719][    T9] usb 4-1: USB disconnect, device number 43
[ 1428.069831][ T5939] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1428.093281][T16829] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[ 1428.142315][T16829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1428.198318][T16829] usb 3-1: config 0 descriptor??
[ 1428.655605][T16829] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1428.722964][T16829] asix 3-1:0.0: probe with driver asix failed with error -71
[ 1428.810705][T16829] usb 3-1: USB disconnect, device number 67
[ 1428.888194][T24903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1428.904288][T24903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1429.089111][ T5914] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1429.251588][ T5914] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has an invalid bInterval 136, changing to 11
[ 1429.263602][ T5914] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 42760, setting to 1024
[ 1429.276086][ T5914] usb 4-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid maxpacket 50841, setting to 1024
[ 1429.290827][ T5914] usb 4-1: config 16 interface 0 has no altsetting 0
[ 1429.297616][ T5914] usb 4-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[ 1429.307631][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1429.322484][T24900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1429.330677][T24900] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1429.449354][T16829] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1429.465827][T24909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1429.481788][T24909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1429.619333][T16829] usb 3-1: Using ep0 maxpacket: 32
[ 1429.638704][T24912] loop6: detected capacity change from 0 to 7
[ 1429.641267][T16829] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1429.650497][ T6448] Dev loop6: unable to read RDB block 7
[ 1429.660837][ T6448]  loop6: unable to read partition table
[ 1429.661730][T16829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1429.667154][ T6448] loop6: partition table beyond EOD, truncated
[ 1429.684534][T24912] Dev loop6: unable to read RDB block 7
[ 1429.692331][T16829] usb 3-1: config 0 descriptor??
[ 1429.693024][T24912]  loop6: unable to read partition table
[ 1429.705123][T24912] loop6: partition table beyond EOD, truncated
[ 1429.715072][T24912] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1429.909129][T16829] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1429.925935][T16829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1429.951089][T16829] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1429.973754][T16829] usb 3-1: media controller created
[ 1430.035275][T16829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1430.113533][T16829] az6027: usb out operation failed. (-71)
[ 1430.126723][T16829] az6027: usb out operation failed. (-71)
[ 1430.143882][T16829] stb0899_attach: Driver disabled by Kconfig
[ 1430.160081][T16829] az6027: no front-end attached
[ 1430.160081][T16829] 
[ 1430.184841][T16829] az6027: usb out operation failed. (-71)
[ 1430.204040][T16829] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1430.244115][T24925] vivid-000: disconnect
[ 1430.248577][T16829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input103
[ 1430.249793][T24925] sg_write: data in/out 268435436/14 bytes for SCSI command 0x0-- guessing data in;
[ 1430.249793][T24925]    program syz.1.4917 not setting count and/or reply_len properly
[ 1430.288350][T16829] dvb-usb: schedule remote query interval to 400 msecs.
[ 1430.298487][T16829] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1430.313537][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4916'.
[ 1430.341663][T16829] usb 3-1: USB disconnect, device number 68
[ 1430.366819][T24923] vivid-000: reconnect
[ 1430.537388][T16829] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1430.603506][T24928] syzkaller1: entered promiscuous mode
[ 1430.612675][T24928] syzkaller1: entered allmulticast mode
[ 1430.695571][T24933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4916'.
[ 1430.905895][T24936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1430.918764][T24936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1431.686273][ T5914] usb 4-1: string descriptor 0 read error: -71
[ 1431.732238][ T5914] imon:imon_find_endpoints: no valid input (IR) endpoint found
[ 1431.768090][ T5914] imon 4-1:16.0: unable to initialize intf0, err -19
[ 1431.810250][ T5914] imon:imon_probe: failed to initialize context!
[ 1431.820115][ T5914] imon 4-1:16.0: unable to register, err -19
[ 1431.893684][ T5914] usb 4-1: USB disconnect, device number 44
[ 1432.416663][T24948] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1432.882756][  T918] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1433.295095][  T918] usb 3-1: device descriptor read/64, error -71
[ 1433.760444][  T918] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1433.899041][  T918] usb 3-1: device descriptor read/64, error -71
[ 1434.009331][  T918] usb usb3-port1: attempt power cycle
[ 1434.169067][T16829] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1434.331755][T16829] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1434.347264][T16829] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1434.356900][  T918] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1434.370206][T16829] usb 6-1: config 1 has no interface number 1
[ 1434.379518][T16829] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1434.394411][  T918] usb 3-1: device descriptor read/8, error -71
[ 1434.406176][T16829] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1434.416028][T16829] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1434.425228][T16829] usb 6-1: Product: syz
[ 1434.430316][T16829] usb 6-1: Manufacturer: syz
[ 1434.435344][T16829] usb 6-1: SerialNumber: syz
[ 1434.639977][  T918] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1434.694383][  T918] usb 3-1: device descriptor read/8, error -71
[ 1434.820147][  T918] usb usb3-port1: unable to enumerate USB device
[ 1434.921809][T16829] usb 6-1: found format II with max.bitrate = 26774, frame size=2
[ 1434.938250][T16829] usb 6-1: found format II with max.bitrate = 26774, frame size=2
[ 1434.950344][T21697] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1434.973765][T16829] usb 6-1: failed to enable PITCH for EP 0x82
[ 1435.084230][T16829] usb 6-1: USB disconnect, device number 10
[ 1435.110537][T21697] usb 4-1: Using ep0 maxpacket: 8
[ 1435.125937][T21697] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 1435.136449][T21697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1435.203770][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1435.226840][T21697] usb 4-1: Product: syz
[ 1435.246466][T21697] usb 4-1: Manufacturer: syz
[ 1435.271177][T21697] usb 4-1: SerialNumber: syz
[ 1435.297879][T24991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1435.301625][T21697] usb 4-1: config 0 descriptor??
[ 1435.334748][T24991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1435.357615][T21697] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 1435.369506][T21697] usb 4-1: setting power ON
[ 1435.374291][T21697] dvb-usb: bulk message failed: -22 (2/0)
[ 1435.433468][T21697] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1435.465332][T24992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1435.475093][T24992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1435.527341][T21697] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 1435.603167][T21697] usb 4-1: media controller created
[ 1435.692962][T21697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1435.813900][T21697] usb 4-1: selecting invalid altsetting 6
[ 1435.829636][T21697] usb 4-1: digital interface selection failed (-22)
[ 1435.856325][T21697] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 1435.912024][T25001] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1435.916419][T21697] usb 4-1: setting power OFF
[ 1435.923382][T21697] dvb-usb: bulk message failed: -22 (2/0)
[ 1435.932284][T21697] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 1435.942243][T21697] (NULL device *): no alternate interface
[ 1436.040803][T21697] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 1436.254323][T21697] usb 4-1: USB disconnect, device number 45
[ 1436.812145][T21697] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1436.979257][T21697] usb 4-1: Using ep0 maxpacket: 8
[ 1436.995426][T21697] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1437.012072][T21697] usb 4-1: config 0 has an invalid interface number: 39 but max is 3
[ 1437.023687][T21697] usb 4-1: config 0 has an invalid interface number: 246 but max is 3
[ 1437.035463][T21697] usb 4-1: config 0 has an invalid interface number: 4 but max is 3
[ 1437.048243][T21697] usb 4-1: config 0 has an invalid interface number: 23 but max is 3
[ 1437.063254][T21697] usb 4-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[ 1437.075522][T21697] usb 4-1: config 0 has an invalid descriptor of length 82, skipping remainder of the config
[ 1437.098126][T21697] usb 4-1: config 0 has 5 interfaces, different from the descriptor's value: 4
[ 1437.114374][T21697] usb 4-1: config 0 has no interface number 1
[ 1437.125898][T21697] usb 4-1: config 0 has no interface number 2
[ 1437.136900][T21697] usb 4-1: config 0 has no interface number 3
[ 1437.148681][T21697] usb 4-1: config 0 interface 39 altsetting 14 has an invalid descriptor for endpoint zero, skipping
[ 1437.169393][T21697] usb 4-1: config 0 interface 39 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[ 1437.183547][T21697] usb 4-1: too many endpoints for config 0 interface 246 altsetting 210: 41, using maximum allowed: 30
[ 1437.195793][T21697] usb 4-1: config 0 interface 246 altsetting 210 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1437.209615][T21697] usb 4-1: config 0 interface 246 altsetting 210 endpoint 0x9 has an invalid bInterval 0, changing to 7
[ 1437.221631][T21697] usb 4-1: config 0 interface 246 altsetting 210 has an invalid descriptor for endpoint zero, skipping
[ 1437.233219][T21697] usb 4-1: config 0 interface 246 altsetting 210 has a duplicate endpoint with address 0xC, skipping
[ 1437.244758][T21697] usb 4-1: config 0 interface 246 altsetting 210 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[ 1437.256777][T21697] usb 4-1: config 0 interface 246 altsetting 210 has an invalid descriptor for endpoint zero, skipping
[ 1437.269488][T21697] usb 4-1: config 0 interface 246 altsetting 210 has a duplicate endpoint with address 0x3, skipping
[ 1437.287457][T21697] usb 4-1: config 0 interface 246 altsetting 210 has a duplicate endpoint with address 0xE, skipping
[ 1437.308308][T21697] usb 4-1: config 0 interface 246 altsetting 210 has an invalid descriptor for endpoint zero, skipping
[ 1437.325851][T21697] usb 4-1: config 0 interface 246 altsetting 210 has 12 endpoint descriptors, different from the interface descriptor's value: 41
[ 1437.346803][T21697] usb 4-1: config 0 interface 4 altsetting 92 endpoint 0xA has invalid maxpacket 1024, setting to 64
[ 1437.358654][T21697] usb 4-1: config 0 interface 4 altsetting 92 has an invalid descriptor for endpoint zero, skipping
[ 1437.375905][T21697] usb 4-1: config 0 interface 4 altsetting 92 has an invalid descriptor for endpoint zero, skipping
[ 1437.401971][T21697] usb 4-1: config 0 interface 4 altsetting 92 has a duplicate endpoint with address 0x3, skipping
[ 1437.416297][T21697] usb 4-1: config 0 interface 4 altsetting 92 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[ 1437.428117][T21697] usb 4-1: config 0 interface 4 altsetting 92 has a duplicate endpoint with address 0x9, skipping
[ 1437.444481][T21697] usb 4-1: config 0 interface 4 altsetting 92 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[ 1437.534892][T21697] usb 4-1: config 0 interface 4 altsetting 92 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1437.561986][T21697] usb 4-1: config 0 interface 4 altsetting 92 has a duplicate endpoint with address 0x9, skipping
[ 1437.587379][T21697] usb 4-1: config 0 interface 4 altsetting 92 has a duplicate endpoint with address 0x5, skipping
[ 1437.616750][T21697] usb 4-1: config 0 interface 23 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[ 1437.728239][T21697] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1437.739277][    T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1437.753951][T21697] usb 4-1: config 0 interface 39 has no altsetting 0
[ 1437.762185][T21697] usb 4-1: config 0 interface 246 has no altsetting 0
[ 1437.773495][T21697] usb 4-1: config 0 interface 4 has no altsetting 0
[ 1437.781585][T21697] usb 4-1: config 0 interface 23 has no altsetting 0
[ 1437.788426][T21697] usb 4-1: New USB device found, idVendor=1199, idProduct=9009, bcdDevice=98.4d
[ 1437.808391][T21697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1437.940526][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1437.968927][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1437.981613][T21697] usb 4-1: config 0 descriptor??
[ 1437.996083][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1438.015705][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1438.042564][    T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1438.056375][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1438.080812][    T9] usb 3-1: config 0 descriptor??
[ 1438.231213][T21697] usb 4-1: string descriptor 0 read error: -71
[ 1438.247525][T21697] usb 4-1: unknown number of interfaces: 5
[ 1438.416645][T21697] usb 4-1: unknown number of interfaces: 5
[ 1438.449337][T21697] usb 4-1: USB disconnect, device number 46
[ 1438.458632][T25036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1438.515699][T25036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1438.540098][T25036] netlink: 'syz.1.4951': attribute type 1 has an invalid length.
[ 1439.409111][ T5914] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1439.689947][ T5914] usb 4-1: Using ep0 maxpacket: 16
[ 1439.710971][ T5914] usb 4-1: config 166 has an invalid interface number: 177 but max is 1
[ 1439.754442][ T5914] usb 4-1: config 166 has an invalid interface number: 34 but max is 1
[ 1439.829131][ T5914] usb 4-1: config 166 has no interface number 0
[ 1439.835573][ T5914] usb 4-1: config 166 has no interface number 1
[ 1439.907803][ T5914] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1440.050554][T21697] usb 3-1: USB disconnect, device number 73
[ 1440.064357][ T5914] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[ 1440.159227][ T5914] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 1440.196507][ T5914] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1440.233811][ T5914] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[ 1440.295228][ T5914] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[ 1440.330132][ T5914] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1440.394203][ T5914] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1440.439066][ T5914] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 1440.493327][ T5914] usb 4-1: config 166 interface 177 has no altsetting 0
[ 1440.509855][ T5914] usb 4-1: config 166 interface 34 has no altsetting 0
[ 1440.535910][ T5914] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[ 1440.545618][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.567012][ T5914] usb 4-1: Product: syz
[ 1440.571466][ T5914] usb 4-1: Manufacturer: syz
[ 1440.576199][ T5914] usb 4-1: SerialNumber: syz
[ 1440.650622][T21697] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1440.718076][T25066] netlink: 778 bytes leftover after parsing attributes in process `syz.1.4960'.
[ 1440.736246][T25066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1440.748526][T25066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1440.821528][T21697] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1440.832108][T21697] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1440.893433][T21697] usb 6-1: config 0 descriptor??
[ 1440.915669][T21697] cp210x 6-1:0.0: cp210x converter detected
[ 1440.938755][ T5914] ums-realtek 4-1:166.177: USB Mass Storage device detected
[ 1441.042008][ T5914] ums-realtek 4-1:166.34: USB Mass Storage device detected
[ 1441.115245][ T5914] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5
[ 1441.130893][ T5914] usb 4-1: Found UVC 0.00 device syz (0bda:0138)
[ 1441.138280][ T5914] usb 4-1: No valid video chain found.
[ 1441.154136][ T5914] usb 4-1: USB disconnect, device number 47
[ 1441.342171][T21697] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1441.359077][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4963'.
[ 1441.380976][T25078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4963'.
[ 1441.479284][ T5914] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1441.554151][T25082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1441.568281][T25082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1441.584100][T21697] usb 6-1: cp210x converter now attached to ttyUSB0
[ 1441.609871][ T5914] usb 4-1: device descriptor read/64, error -71
[ 1441.759256][  T918] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1441.781690][   T24] usb 6-1: USB disconnect, device number 11
[ 1441.794129][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1441.845608][   T24] cp210x 6-1:0.0: device disconnected
[ 1441.853535][ T5914] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1441.913030][  T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1441.927205][  T918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1441.938580][  T918] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 1441.951077][  T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1441.964174][  T918] usb 3-1: config 0 descriptor??
[ 1442.009111][ T5914] usb 4-1: device descriptor read/64, error -71
[ 1442.120340][ T5914] usb usb4-port1: attempt power cycle
[ 1442.413269][  T918] petalynx 0003:18B1:0037.003A: hidraw0: USB HID v0.00 Device [HID 18b1:0037] on usb-dummy_hcd.2-1/input0
[ 1442.492458][ T5914] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1442.544596][ T5914] usb 4-1: device descriptor read/8, error -71
[ 1442.608769][   T24] usb 3-1: USB disconnect, device number 74
[ 1442.809268][ T5914] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1442.840745][ T5914] usb 4-1: device descriptor read/8, error -71
[ 1442.885626][   T30] audit: type=1326 audit(1749894035.025:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1442.937337][   T30] audit: type=1326 audit(1749894035.025:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1442.949967][ T5914] usb usb4-port1: unable to enumerate USB device
[ 1442.997533][   T30] audit: type=1326 audit(1749894035.025:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1443.027358][   T30] audit: type=1326 audit(1749894035.025:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1443.051204][   T30] audit: type=1326 audit(1749894035.025:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1443.079265][   T30] audit: type=1326 audit(1749894035.025:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1443.103079][   T30] audit: type=1326 audit(1749894035.025:7620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1443.127026][   T30] audit: type=1326 audit(1749894035.025:7621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1443.154506][   T30] audit: type=1326 audit(1749894035.025:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1443.178305][   T30] audit: type=1326 audit(1749894035.025:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25104 comm="syz.1.4973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c25f8e929 code=0x7ffc0000
[ 1443.308041][T25115] bridge_slave_0: left promiscuous mode
[ 1443.334687][T25115] vti0: left promiscuous mode
[ 1443.342155][T25115] bridge1: left promiscuous mode
[ 1443.348160][T25115] gtp0: left promiscuous mode
[ 1443.357508][T25115] gtp0: left allmulticast mode
[ 1443.368523][T25115] ip6tnl1: left promiscuous mode
[ 1443.377331][T25115] macvtap1: left allmulticast mode
[ 1443.387481][T25115] batadv0: left allmulticast mode
[ 1443.902585][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4979'.
[ 1443.932491][T25122] netlink: 15 bytes leftover after parsing attributes in process `syz.1.4979'.
[ 1443.979092][T21697] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[ 1444.183117][T21697] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1444.221698][T25131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4982'.
[ 1444.223390][T21697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1444.290522][T21697] usb 3-1: config 0 descriptor??
[ 1444.634129][T21697] ath6kl: Failed to submit usb control message: -71
[ 1444.641110][T21697] ath6kl: unable to send the bmi data to the device: -71
[ 1444.648776][T21697] ath6kl: Unable to send get target info: -71
[ 1444.729050][T21697] ath6kl: Failed to init ath6kl core: -71
[ 1444.743886][T21697] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1444.841097][T21697] usb 3-1: USB disconnect, device number 75
[ 1445.042979][T25147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1445.069758][T25147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1445.116772][T25148] binder: BINDER_SET_CONTEXT_MGR already set
[ 1445.168640][T25148] binder: 25145:25148 ioctl 4018620d 200000000040 returned -16
[ 1446.199376][  T918] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1446.349293][  T918] usb 3-1: Using ep0 maxpacket: 16
[ 1446.360644][  T918] usb 3-1: config index 0 descriptor too short (expected 36, got 16)
[ 1446.369418][  T918] usb 3-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[ 1446.390588][  T918] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1446.407154][  T918] usb 3-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[ 1446.423547][  T918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1446.447171][  T918] usb 3-1: config 0 descriptor??
[ 1447.437509][T25168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4990'.
[ 1447.907298][   T30] kauditd_printk_skb: 29 callbacks suppressed
[ 1447.907438][   T30] audit: type=1326 audit(1749894040.045:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25176 comm="syz.5.4994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc0c38e929 code=0x0
[ 1448.104881][   T30] audit: type=1326 audit(1749894040.235:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25176 comm="syz.5.4994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc0c38e929 code=0x0
[ 1448.734956][T25194] mmap: syz.0.4998 (25194): VmData 37593088 exceed data ulimit 1070. Update limits or use boot option ignore_rlimit_data.
[ 1449.073474][   T24] usb 3-1: USB disconnect, device number 76
[ 1449.100869][   T30] audit: type=1326 audit(1749894041.225:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.3.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d078e929 code=0x7ffc0000
[ 1449.259897][   T30] audit: type=1326 audit(1749894041.235:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.3.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d078e929 code=0x7ffc0000
[ 1449.300719][T16767] Bluetooth: hci3: command 0x0405 tx timeout
[ 1449.316646][T25203] geneve3: entered promiscuous mode
[ 1449.334179][   T30] audit: type=1326 audit(1749894041.235:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.3.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f65d078e929 code=0x7ffc0000
[ 1449.420000][   T30] audit: type=1326 audit(1749894041.375:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.3.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d078e929 code=0x7ffc0000
[ 1449.474574][   T30] audit: type=1326 audit(1749894041.375:7659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25210 comm="syz.3.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f65d07c11e5 code=0x7ffc0000
[ 1449.504834][   T30] audit: type=1326 audit(1749894041.375:7660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.3.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d078e929 code=0x7ffc0000
[ 1449.528549][   T30] audit: type=1326 audit(1749894041.375:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.3.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f65d078e929 code=0x7ffc0000
[ 1449.557481][   T30] audit: type=1326 audit(1749894041.465:7662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25202 comm="syz.3.5001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d078e929 code=0x7ffc0000
[ 1449.909284][T25232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5007'.
[ 1450.062723][T25236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5010'.
[ 1450.092690][T25236] macvtap1: entered promiscuous mode
[ 1450.101669][T25236] macvtap1: entered allmulticast mode
[ 1450.110748][T25236] bond0: entered allmulticast mode
[ 1450.116326][T25236] bond_slave_0: entered allmulticast mode
[ 1450.320678][T25236] bond_slave_1: entered allmulticast mode
[ 1450.342735][T25236] team0: entered allmulticast mode
[ 1450.378462][T25236] team_slave_0: entered allmulticast mode
[ 1450.400541][T25236] team_slave_1: entered allmulticast mode
[ 1450.429212][T21697] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1450.437482][T25236] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1450.615322][T25255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5011'.
[ 1450.721665][T21697] usb 3-1: Using ep0 maxpacket: 16
[ 1450.743653][T21697] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1450.860956][T21697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1450.922394][T21697] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1450.932016][T21697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1450.934827][T25264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1450.962256][T21697] usb 3-1: Product: syz
[ 1451.015793][T21697] usb 3-1: Manufacturer: syz
[ 1451.022082][T25264] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1451.046143][T21697] usb 3-1: SerialNumber: syz
[ 1451.090395][T21697] usb 3-1: config 0 descriptor??
[ 1451.162594][T21697] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1451.228078][T21697] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1451.548770][T25277] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1451.742245][T25279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1451.754342][T25279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1451.887012][ T5949] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1452.164104][ T5949] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1452.177258][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.187130][ T5949] usb 4-1: Product: syz
[ 1452.200665][ T5949] usb 4-1: Manufacturer: syz
[ 1452.219585][ T5949] usb 4-1: SerialNumber: syz
[ 1452.254751][ T5949] usb 4-1: config 0 descriptor??
[ 1452.316741][ T5949] ch341 4-1:0.0: ch341-uart converter detected
[ 1452.524818][T25286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1452.559996][T21697] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1452.567942][T21697] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1452.582503][T25286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1452.598618][T21697] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 1452.626875][T21697] em28xx 3-1:0.0: No AC97 audio processor
[ 1452.735092][T21697] usb 3-1: USB disconnect, device number 77
[ 1452.743512][T21697] em28xx 3-1:0.0: Disconnecting em28xx
[ 1452.749656][   T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[ 1452.761338][T21697] em28xx 3-1:0.0: Freeing device
[ 1452.867928][T25289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1452.883786][T25289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1452.901444][T25289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1452.913810][T25289] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1452.923026][   T24] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[ 1452.944539][   T24] usb 6-1: config 8 has no interface number 0
[ 1452.953574][   T24] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1452.973660][   T24] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[ 1453.002101][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1453.015754][   T24] usb 6-1: Product: syz
[ 1453.024479][   T24] usb 6-1: Manufacturer: syz
[ 1453.029735][   T24] usb 6-1: SerialNumber: syz
[ 1453.153733][T25276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1453.180709][T25276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1453.201018][T21697] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1453.212463][T25276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1453.239628][T25276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1453.270353][ T5949] usb 4-1: failed to send control message: -71
[ 1453.280198][ T5949] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1453.305119][   T24] usb 6-1: USB disconnect, device number 12
[ 1453.308146][ T5949] usb 4-1: USB disconnect, device number 52
[ 1453.365298][ T5949] ch341 4-1:0.0: device disconnected
[ 1453.394193][T21697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1453.414135][T21697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1453.432164][T21697] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[ 1453.441717][T21697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1453.473748][T21697] usb 3-1: config 0 descriptor??
[ 1453.694538][T21697] usbhid 3-1:0.0: can't add hid device: -71
[ 1453.738985][T25296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1453.748547][T25296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1453.761704][T21697] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1453.789446][T21697] usb 3-1: USB disconnect, device number 78
[ 1453.820877][T25296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1453.831182][T25296] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1454.192709][T25302] fuse: Bad value for 'fd'
[ 1454.249227][   T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1454.400780][ T5949] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1454.410858][   T24] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 1454.425271][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1454.438025][   T24] usb 6-1: config 0 descriptor??
[ 1454.457277][   T24] gspca_main: spca508-2.14.0 probing 8086:0110
[ 1454.609996][ T5949] usb 4-1: Using ep0 maxpacket: 16
[ 1454.634732][ T5949] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1454.655353][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1454.667259][   T24] gspca_spca508: reg_read err -32
[ 1454.678189][ T5949] usb 4-1: Product: syz
[ 1454.693433][   T24] gspca_spca508: reg_read err -32
[ 1454.702681][ T5949] usb 4-1: Manufacturer: syz
[ 1454.713444][ T5949] usb 4-1: SerialNumber: syz
[ 1454.747664][ T5949] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1454.768507][ T5949] r8152-cfgselector 4-1: config 0 descriptor??
[ 1454.911821][T25310] netlink: 'syz.2.5028': attribute type 10 has an invalid length.
[ 1454.920426][   T24] gspca_spca508: reg_read err -71
[ 1454.929441][   T24] gspca_spca508: reg_read err -71
[ 1454.935435][   T24] gspca_spca508: reg write: error -71
[ 1454.941710][   T24] spca508 6-1:0.0: probe with driver spca508 failed with error -71
[ 1454.980495][   T24] usb 6-1: USB disconnect, device number 13
[ 1454.988206][T25310] bond0: (slave wlan1): Enslaving as an active interface with an up link
[ 1456.034938][T25329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1456.077138][T25329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1456.159524][T21697] usb 3-1: new full-speed USB device number 79 using dummy_hcd
[ 1456.336814][T21697] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1456.349927][T21697] usb 3-1: not running at top speed; connect to a high speed hub
[ 1456.366567][T21697] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1456.384382][T21697] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1456.435012][T21697] usb 3-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config
[ 1456.574657][T25336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 34553 - 0
[ 1456.589700][T25336] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 34553 - 0
[ 1456.629499][T21697] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1456.638820][T25336] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 34553 - 0
[ 1456.646474][T21697] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[ 1456.721933][T25336] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 34553 - 0
[ 1456.732069][T21697] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1456.746448][T25336] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 43926 - 0
[ 1456.769280][T25336] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 43926 - 0
[ 1456.784255][T25336] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 43926 - 0
[ 1456.796099][T25336] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 43926 - 0
[ 1456.805904][T21697] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1456.816409][T21697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1456.827369][T21697] usb 3-1: Product: syz
[ 1456.831932][T21697] usb 3-1: Manufacturer: syz
[ 1456.841660][T21697] usb 3-1: SerialNumber: syz
[ 1456.846627][T25336] geneve2: entered promiscuous mode
[ 1456.861293][T25336] geneve2: entered allmulticast mode
[ 1457.118092][T21697] usb 3-1: 0:2 : does not exist
[ 1457.197639][T25349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5038'.
[ 1457.239472][T21697] usb 3-1: USB disconnect, device number 79
[ 1457.351189][ T6278] udevd[6278]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1459.408134][T25348] can: request_module (can-proto-0) failed.
[ 1459.887454][ T5949] r8152-cfgselector 4-1: Unknown version 0x0000
[ 1459.938389][ T5949] r8152-cfgselector 4-1: bad CDC descriptors
[ 1460.311187][T25390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1460.359479][T25390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1460.661006][T25398] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5054'.
[ 1460.779053][ T5914] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1460.979515][ T5914] usb 3-1: Using ep0 maxpacket: 8
[ 1460.987799][ T5914] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1460.998352][ T5914] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1461.013200][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1461.027770][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1461.042358][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1461.051039][ T5914] usb 3-1: Product: syz
[ 1461.055650][ T5914] usb 3-1: Manufacturer: syz
[ 1461.061297][ T5914] usb 3-1: SerialNumber: syz
[ 1461.222752][T23216] Bluetooth: hci3: command 0x0405 tx timeout
[ 1461.286719][T25395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1461.307065][T25395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1461.334059][ T5914] usb 3-1: 0:2 : does not exist
[ 1461.357805][ T5914] usb 3-1: USB disconnect, device number 80
[ 1461.447203][ T6448] udevd[6448]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1461.523240][T25415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5060'.
[ 1461.864414][T25423] macsec1: entered allmulticast mode
[ 1462.074245][T25428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1462.097478][T25428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1462.346246][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1462.346271][   T30] audit: type=1400 audit(1749894054.455:7665): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=25427 comm="syz.3.5064"
[ 1463.072579][T25438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1463.102084][T25438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1464.315902][T25459] 
[ 1464.318466][T25459] =====================================================
[ 1464.325454][T25459] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1464.333380][T25459] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted
[ 1464.341298][T25459] -----------------------------------------------------
[ 1464.348609][T25459] syz.1.5074/25459 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1464.356464][T25459] ffff888028789600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1464.365334][T25459] 
[ 1464.365334][T25459] and this task is already holding:
[ 1464.372718][T25459] ffff888050421028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1464.382777][T25459] which would create a new lock dependency:
[ 1464.388934][T25459]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 1464.397047][T25459] 
[ 1464.397047][T25459] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1464.406589][T25459]  (&dev->event_lock#2){..-.}-{3:3}
[ 1464.406625][T25459] 
[ 1464.406625][T25459] ... which became SOFTIRQ-irq-safe at:
[ 1464.419534][T25459]   lock_acquire+0x120/0x360
[ 1464.424269][T25459]   _raw_spin_lock_irqsave+0xa7/0xf0
[ 1464.429656][T25459]   input_inject_event+0xab/0x320
[ 1464.434693][T25459]   led_trigger_event+0x138/0x210
[ 1464.439813][T25459]   kbd_bh+0x1c6/0x2e0
[ 1464.443920][T25459]   tasklet_action_common+0x36c/0x580
[ 1464.449301][T25459]   handle_softirqs+0x286/0x870
[ 1464.454221][T25459]   run_ksoftirqd+0x9b/0x100
[ 1464.458814][T25459]   smpboot_thread_fn+0x53f/0xa60
[ 1464.463941][T25459]   kthread+0x70e/0x8a0
[ 1464.468222][T25459]   ret_from_fork+0x3fc/0x770
[ 1464.472954][T25459]   ret_from_fork_asm+0x1a/0x30
[ 1464.477825][T25459] 
[ 1464.477825][T25459] to a SOFTIRQ-irq-unsafe lock:
[ 1464.484861][T25459]  (tasklist_lock){.+.+}-{3:3}
[ 1464.484892][T25459] 
[ 1464.484892][T25459] ... which became SOFTIRQ-irq-unsafe at:
[ 1464.497623][T25459] ...
[ 1464.497632][T25459]   lock_acquire+0x120/0x360
[ 1464.505326][T25459]   _raw_read_lock+0x36/0x50
[ 1464.510172][T25459]   __do_wait+0xde/0x740
[ 1464.514538][T25459]   do_wait+0x1f8/0x520
[ 1464.518723][T25459]   kernel_wait+0xab/0x170
[ 1464.523434][T25459]   call_usermodehelper_exec_work+0xbe/0x230
[ 1464.529449][T25459]   process_scheduled_works+0xae1/0x17b0
[ 1464.535287][T25459]   worker_thread+0x8a0/0xda0
[ 1464.539969][T25459]   kthread+0x70e/0x8a0
[ 1464.544129][T25459]   ret_from_fork+0x3fc/0x770
[ 1464.548852][T25459]   ret_from_fork_asm+0x1a/0x30
[ 1464.553828][T25459] 
[ 1464.553828][T25459] other info that might help us debug this:
[ 1464.553828][T25459] 
[ 1464.564075][T25459] Chain exists of:
[ 1464.564075][T25459]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[ 1464.564075][T25459] 
[ 1464.577737][T25459]  Possible interrupt unsafe locking scenario:
[ 1464.577737][T25459] 
[ 1464.586062][T25459]        CPU0                    CPU1
[ 1464.591543][T25459]        ----                    ----
[ 1464.596923][T25459]   lock(tasklist_lock);
[ 1464.601176][T25459]                                local_irq_disable();
[ 1464.608111][T25459]                                lock(&dev->event_lock#2);
[ 1464.615325][T25459]                                lock(&client->buffer_lock);
[ 1464.622723][T25459]   <Interrupt>
[ 1464.626175][T25459]     lock(&dev->event_lock#2);
[ 1464.631244][T25459] 
[ 1464.631244][T25459]  *** DEADLOCK ***
[ 1464.631244][T25459] 
[ 1464.639420][T25459] 7 locks held by syz.1.5074/25459:
[ 1464.644718][T25459]  #0: ffff888029976118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[ 1464.654001][T25459]  #1: ffff88802981d230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320
[ 1464.664239][T25459]  #2: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320
[ 1464.674224][T25459]  #3: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1464.683904][T25459]  #4: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 1464.693076][T25459]  #5: ffff888050421028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1464.703400][T25459]  #6: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1464.712562][T25459] 
[ 1464.712562][T25459] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1464.723058][T25459]  -> (&dev->event_lock#2){..-.}-{3:3} {
[ 1464.728821][T25459]     IN-SOFTIRQ-W at:
[ 1464.732931][T25459]                       lock_acquire+0x120/0x360
[ 1464.739389][T25459]                       _raw_spin_lock_irqsave+0xa7/0xf0
[ 1464.746605][T25459]                       input_inject_event+0xab/0x320
[ 1464.753486][T25459]                       led_trigger_event+0x138/0x210
[ 1464.760257][T25459]                       kbd_bh+0x1c6/0x2e0
[ 1464.766164][T25459]                       tasklet_action_common+0x36c/0x580
[ 1464.773552][T25459]                       handle_softirqs+0x286/0x870
[ 1464.780560][T25459]                       run_ksoftirqd+0x9b/0x100
[ 1464.786997][T25459]                       smpboot_thread_fn+0x53f/0xa60
[ 1464.793775][T25459]                       kthread+0x70e/0x8a0
[ 1464.799987][T25459]                       ret_from_fork+0x3fc/0x770
[ 1464.806452][T25459]                       ret_from_fork_asm+0x1a/0x30
[ 1464.813141][T25459]     INITIAL USE at:
[ 1464.817312][T25459]                      lock_acquire+0x120/0x360
[ 1464.823750][T25459]                      _raw_spin_lock_irqsave+0xa7/0xf0
[ 1464.831260][T25459]                      input_inject_event+0xab/0x320
[ 1464.838037][T25459]                      kbd_led_trigger_activate+0xbc/0x100
[ 1464.845595][T25459]                      led_trigger_set+0x52a/0x950
[ 1464.852284][T25459]                      led_trigger_set_default+0x260/0x2a0
[ 1464.860023][T25459]                      led_classdev_register_ext+0x73d/0x930
[ 1464.867432][T25459]                      input_leds_connect+0x517/0x790
[ 1464.874199][T25459]                      input_register_device+0xcee/0x10b0
[ 1464.881663][T25459]                      atkbd_connect+0x70e/0x9c0
[ 1464.888263][T25459]                      serio_driver_probe+0x7f/0xa0
[ 1464.895155][T25459]                      really_probe+0x26a/0x9a0
[ 1464.901502][T25459]                      __driver_probe_device+0x18c/0x2f0
[ 1464.908907][T25459]                      driver_probe_device+0x4f/0x430
[ 1464.917112][T25459]                      __driver_attach+0x452/0x700
[ 1464.924285][T25459]                      bus_for_each_dev+0x230/0x2b0
[ 1464.932069][T25459]                      serio_handle_event+0x1a2/0x860
[ 1464.938901][T25459]                      process_scheduled_works+0xae1/0x17b0
[ 1464.946809][T25459]                      worker_thread+0x8a0/0xda0
[ 1464.953153][T25459]                      kthread+0x70e/0x8a0
[ 1464.959093][T25459]                      ret_from_fork+0x3fc/0x770
[ 1464.965480][T25459]                      ret_from_fork_asm+0x1a/0x30
[ 1464.972188][T25459]   }
[ 1464.974790][T25459]   ... key      at: [<ffffffff99e04200>] input_allocate_device.__key.5+0x0/0x20
[ 1464.984005][T25459] -> (&client->buffer_lock){....}-{3:3} {
[ 1464.989776][T25459]    INITIAL USE at:
[ 1464.993696][T25459]                    lock_acquire+0x120/0x360
[ 1465.000181][T25459]                    _raw_spin_lock+0x2e/0x40
[ 1465.006941][T25459]                    evdev_pass_values+0xb9/0xbd0
[ 1465.013662][T25459]                    evdev_events+0x1e6/0x340
[ 1465.019754][T25459]                    input_pass_values+0x288/0x890
[ 1465.026455][T25459]                    input_event_dispose+0x330/0x6b0
[ 1465.033494][T25459]                    input_inject_event+0x1fe/0x320
[ 1465.040294][T25459]                    evdev_write+0x2fc/0x480
[ 1465.046484][T25459]                    vfs_write+0x27b/0xa90
[ 1465.052611][T25459]                    ksys_write+0x145/0x250
[ 1465.059241][T25459]                    do_syscall_64+0xfa/0x3b0
[ 1465.065702][T25459]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.073703][T25459]  }
[ 1465.076227][T25459]  ... key      at: [<ffffffff99e044a0>] evdev_open.__key.25+0x0/0x20
[ 1465.084819][T25459]  ... acquired at:
[ 1465.089680][T25459]    lock_acquire+0x120/0x360
[ 1465.094468][T25459]    _raw_spin_lock+0x2e/0x40
[ 1465.099384][T25459]    evdev_pass_values+0xb9/0xbd0
[ 1465.104540][T25459]    evdev_events+0x1e6/0x340
[ 1465.109669][T25459]    input_pass_values+0x288/0x890
[ 1465.115048][T25459]    input_event_dispose+0x330/0x6b0
[ 1465.120357][T25459]    input_inject_event+0x1fe/0x320
[ 1465.125571][T25459]    evdev_write+0x2fc/0x480
[ 1465.130236][T25459]    vfs_write+0x27b/0xa90
[ 1465.134868][T25459]    ksys_write+0x145/0x250
[ 1465.139931][T25459]    do_syscall_64+0xfa/0x3b0
[ 1465.144997][T25459]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.151257][T25459] 
[ 1465.153690][T25459] 
[ 1465.153690][T25459] the dependencies between the lock to be acquired
[ 1465.153705][T25459]  and SOFTIRQ-irq-unsafe lock:
[ 1465.167862][T25459]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1465.173190][T25459]      HARDIRQ-ON-R at:
[ 1465.177353][T25459]                         lock_acquire+0x120/0x360
[ 1465.184054][T25459]                         _raw_read_lock+0x36/0x50
[ 1465.190861][T25459]                         __do_wait+0xde/0x740
[ 1465.197114][T25459]                         do_wait+0x1f8/0x520
[ 1465.203376][T25459]                         kernel_wait+0xab/0x170
[ 1465.209816][T25459]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1465.217741][T25459]                         process_scheduled_works+0xae1/0x17b0
[ 1465.225318][T25459]                         worker_thread+0x8a0/0xda0
[ 1465.231917][T25459]                         kthread+0x70e/0x8a0
[ 1465.238100][T25459]                         ret_from_fork+0x3fc/0x770
[ 1465.244994][T25459]                         ret_from_fork_asm+0x1a/0x30
[ 1465.251947][T25459]      SOFTIRQ-ON-R at:
[ 1465.256646][T25459]                         lock_acquire+0x120/0x360
[ 1465.263799][T25459]                         _raw_read_lock+0x36/0x50
[ 1465.270522][T25459]                         __do_wait+0xde/0x740
[ 1465.276872][T25459]                         do_wait+0x1f8/0x520
[ 1465.283142][T25459]                         kernel_wait+0xab/0x170
[ 1465.289485][T25459]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1465.299075][T25459]                         process_scheduled_works+0xae1/0x17b0
[ 1465.306741][T25459]                         worker_thread+0x8a0/0xda0
[ 1465.313774][T25459]                         kthread+0x70e/0x8a0
[ 1465.320466][T25459]                         ret_from_fork+0x3fc/0x770
[ 1465.327157][T25459]                         ret_from_fork_asm+0x1a/0x30
[ 1465.334036][T25459]      INITIAL USE at:
[ 1465.338203][T25459]                        lock_acquire+0x120/0x360
[ 1465.344630][T25459]                        _raw_write_lock_irq+0xa2/0xf0
[ 1465.351852][T25459]                        copy_process+0x224f/0x3c00
[ 1465.358455][T25459]                        kernel_clone+0x21e/0x870
[ 1465.364980][T25459]                        user_mode_thread+0xdd/0x140
[ 1465.371749][T25459]                        rest_init+0x23/0x300
[ 1465.377828][T25459]                        start_kernel+0x47d/0x500
[ 1465.384333][T25459]                        x86_64_start_reservations+0x24/0x30
[ 1465.391729][T25459]                        x86_64_start_kernel+0x143/0x1c0
[ 1465.399169][T25459]                        common_startup_64+0x13e/0x147
[ 1465.406308][T25459]      INITIAL READ USE at:
[ 1465.410905][T25459]                             lock_acquire+0x120/0x360
[ 1465.417854][T25459]                             _raw_read_lock+0x36/0x50
[ 1465.424818][T25459]                             __do_wait+0xde/0x740
[ 1465.431417][T25459]                             do_wait+0x1f8/0x520
[ 1465.437931][T25459]                             kernel_wait+0xab/0x170
[ 1465.444909][T25459]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1465.453252][T25459]                             process_scheduled_works+0xae1/0x17b0
[ 1465.461175][T25459]                             worker_thread+0x8a0/0xda0
[ 1465.468313][T25459]                             kthread+0x70e/0x8a0
[ 1465.474915][T25459]                             ret_from_fork+0x3fc/0x770
[ 1465.481885][T25459]                             ret_from_fork_asm+0x1a/0x30
[ 1465.489004][T25459]    }
[ 1465.491704][T25459]    ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[ 1465.499727][T25459]    ... acquired at:
[ 1465.503768][T25459]    lock_acquire+0x120/0x360
[ 1465.508508][T25459]    _raw_read_lock+0x36/0x50
[ 1465.513205][T25459]    send_sigio+0x101/0x370
[ 1465.517839][T25459]    dnotify_handle_event+0x169/0x440
[ 1465.523225][T25459]    fsnotify+0x1814/0x1a80
[ 1465.527881][T25459]    vfs_mkdir+0x477/0x510
[ 1465.532436][T25459]    do_mkdirat+0x247/0x590
[ 1465.537491][T25459]    __x64_sys_mkdirat+0x87/0xa0
[ 1465.542461][T25459]    do_syscall_64+0xfa/0x3b0
[ 1465.547145][T25459]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.553626][T25459] 
[ 1465.555963][T25459]  -> (&f_owner->lock){....}-{3:3} {
[ 1465.561847][T25459]     INITIAL USE at:
[ 1465.565873][T25459]                      lock_acquire+0x120/0x360
[ 1465.572147][T25459]                      _raw_write_lock_irq+0xa2/0xf0
[ 1465.578930][T25459]                      __f_setown+0x67/0x370
[ 1465.584924][T25459]                      generic_setlease+0xd60/0x1240
[ 1465.591789][T25459]                      fcntl_setlease+0x3a2/0x4c0
[ 1465.598217][T25459]                      do_fcntl+0x6a9/0x1910
[ 1465.604210][T25459]                      __se_sys_fcntl+0xc8/0x150
[ 1465.610725][T25459]                      do_syscall_64+0xfa/0x3b0
[ 1465.617163][T25459]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.625067][T25459]     INITIAL READ USE at:
[ 1465.629624][T25459]                           lock_acquire+0x120/0x360
[ 1465.638225][T25459]                           _raw_read_lock_irqsave+0xaf/0x100
[ 1465.646357][T25459]                           send_sigio+0x38/0x370
[ 1465.652889][T25459]                           kill_fasync+0x24d/0x4d0
[ 1465.659676][T25459]                           lease_break_callback+0x26/0x30
[ 1465.666977][T25459]                           __break_lease+0x6a2/0x1620
[ 1465.674546][T25459]                           do_dentry_open+0xd62/0x1970
[ 1465.681688][T25459]                           vfs_open+0x3b/0x340
[ 1465.687954][T25459]                           path_openat+0x2ee5/0x3830
[ 1465.694763][T25459]                           do_filp_open+0x1fa/0x410
[ 1465.701452][T25459]                           do_sys_openat2+0x121/0x1c0
[ 1465.708313][T25459]                           __x64_sys_open+0x11e/0x150
[ 1465.715254][T25459]                           do_syscall_64+0xfa/0x3b0
[ 1465.722027][T25459]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.730103][T25459]   }
[ 1465.732934][T25459]   ... key      at: [<ffffffff99af5400>] file_f_owner_allocate.__key+0x0/0x20
[ 1465.742001][T25459]   ... acquired at:
[ 1465.746099][T25459]    lock_acquire+0x120/0x360
[ 1465.750821][T25459]    _raw_read_lock_irqsave+0xaf/0x100
[ 1465.756475][T25459]    send_sigio+0x38/0x370
[ 1465.760912][T25459]    kill_fasync+0x24d/0x4d0
[ 1465.765523][T25459]    lease_break_callback+0x26/0x30
[ 1465.770735][T25459]    __break_lease+0x6a2/0x1620
[ 1465.776117][T25459]    do_dentry_open+0xd62/0x1970
[ 1465.781159][T25459]    vfs_open+0x3b/0x340
[ 1465.785582][T25459]    path_openat+0x2ee5/0x3830
[ 1465.790361][T25459]    do_filp_open+0x1fa/0x410
[ 1465.795579][T25459]    do_sys_openat2+0x121/0x1c0
[ 1465.800576][T25459]    __x64_sys_open+0x11e/0x150
[ 1465.805544][T25459]    do_syscall_64+0xfa/0x3b0
[ 1465.810251][T25459]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.816383][T25459] 
[ 1465.818823][T25459] -> (&new->fa_lock){....}-{3:3} {
[ 1465.823988][T25459]    INITIAL USE at:
[ 1465.827896][T25459]                    lock_acquire+0x120/0x360
[ 1465.833984][T25459]                    _raw_write_lock_irq+0xa2/0xf0
[ 1465.840711][T25459]                    fasync_remove_entry+0xf1/0x1c0
[ 1465.847451][T25459]                    lease_modify+0x1ca/0x3c0
[ 1465.853904][T25459]                    locks_remove_file+0x4bf/0xea0
[ 1465.860448][T25459]                    __fput+0x3ab/0xa70
[ 1465.866035][T25459]                    task_work_run+0x1d1/0x260
[ 1465.872622][T25459]                    exit_to_user_mode_loop+0xec/0x110
[ 1465.879503][T25459]                    do_syscall_64+0x2bd/0x3b0
[ 1465.885898][T25459]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.893449][T25459]    INITIAL READ USE at:
[ 1465.898155][T25459]                         lock_acquire+0x120/0x360
[ 1465.904686][T25459]                         _raw_read_lock_irqsave+0xaf/0x100
[ 1465.912074][T25459]                         kill_fasync+0x199/0x4d0
[ 1465.918503][T25459]                         lease_break_callback+0x26/0x30
[ 1465.926237][T25459]                         __break_lease+0x6a2/0x1620
[ 1465.932937][T25459]                         do_dentry_open+0xd62/0x1970
[ 1465.939816][T25459]                         vfs_open+0x3b/0x340
[ 1465.945982][T25459]                         path_openat+0x2ee5/0x3830
[ 1465.953103][T25459]                         do_filp_open+0x1fa/0x410
[ 1465.959616][T25459]                         do_sys_openat2+0x121/0x1c0
[ 1465.966405][T25459]                         __x64_sys_open+0x11e/0x150
[ 1465.973176][T25459]                         do_syscall_64+0xfa/0x3b0
[ 1465.979686][T25459]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1465.987758][T25459]  }
[ 1465.990263][T25459]  ... key      at: [<ffffffff99af5420>] fasync_insert_entry.__key+0x0/0x20
[ 1465.999042][T25459]  ... acquired at:
[ 1466.002863][T25459]    lock_acquire+0x120/0x360
[ 1466.007643][T25459]    _raw_read_lock_irqsave+0xaf/0x100
[ 1466.013204][T25459]    kill_fasync+0x199/0x4d0
[ 1466.017860][T25459]    evdev_pass_values+0x627/0xbd0
[ 1466.022981][T25459]    evdev_events+0x1e6/0x340
[ 1466.027840][T25459]    input_pass_values+0x288/0x890
[ 1466.032958][T25459]    input_event_dispose+0x330/0x6b0
[ 1466.038256][T25459]    input_inject_event+0x1fe/0x320
[ 1466.043469][T25459]    evdev_write+0x2fc/0x480
[ 1466.048069][T25459]    vfs_write+0x27b/0xa90
[ 1466.052512][T25459]    ksys_write+0x145/0x250
[ 1466.057016][T25459]    do_syscall_64+0xfa/0x3b0
[ 1466.061787][T25459]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1466.067951][T25459] 
[ 1466.070279][T25459] 
[ 1466.070279][T25459] stack backtrace:
[ 1466.076191][T25459] CPU: 0 UID: 0 PID: 25459 Comm: syz.1.5074 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) 
[ 1466.076212][T25459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1466.076222][T25459] Call Trace:
[ 1466.076229][T25459]  <TASK>
[ 1466.076236][T25459]  dump_stack_lvl+0x189/0x250
[ 1466.076264][T25459]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1466.076288][T25459]  ? __pfx__printk+0x10/0x10
[ 1466.076308][T25459]  validate_chain+0x1f05/0x2140
[ 1466.076331][T25459]  __lock_acquire+0xab9/0xd20
[ 1466.076354][T25459]  ? kill_fasync+0x199/0x4d0
[ 1466.076374][T25459]  lock_acquire+0x120/0x360
[ 1466.076402][T25459]  ? kill_fasync+0x199/0x4d0
[ 1466.076426][T25459]  _raw_read_lock_irqsave+0xaf/0x100
[ 1466.076449][T25459]  ? kill_fasync+0x199/0x4d0
[ 1466.076469][T25459]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[ 1466.076491][T25459]  ? do_raw_spin_lock+0x121/0x290
[ 1466.076511][T25459]  kill_fasync+0x199/0x4d0
[ 1466.076531][T25459]  ? kill_fasync+0x53/0x4d0
[ 1466.076552][T25459]  evdev_pass_values+0x627/0xbd0
[ 1466.076572][T25459]  ? evdev_pass_values+0x691/0xbd0
[ 1466.076592][T25459]  evdev_events+0x1e6/0x340
[ 1466.076609][T25459]  ? evdev_events+0x79/0x340
[ 1466.076625][T25459]  ? input_pass_values+0x8d/0x890
[ 1466.076642][T25459]  input_pass_values+0x288/0x890
[ 1466.076661][T25459]  ? input_handle_event+0x70c/0xf30
[ 1466.076685][T25459]  input_event_dispose+0x330/0x6b0
[ 1466.076710][T25459]  input_inject_event+0x1fe/0x320
[ 1466.076734][T25459]  ? input_inject_event+0xbc/0x320
[ 1466.076758][T25459]  evdev_write+0x2fc/0x480
[ 1466.076778][T25459]  ? __pfx_evdev_write+0x10/0x10
[ 1466.076796][T25459]  ? bpf_lsm_file_permission+0x9/0x20
[ 1466.076819][T25459]  ? security_file_permission+0x75/0x290
[ 1466.076836][T25459]  ? rw_verify_area+0x258/0x650
[ 1466.076859][T25459]  ? __pfx_evdev_write+0x10/0x10
[ 1466.076877][T25459]  vfs_write+0x27b/0xa90
[ 1466.076903][T25459]  ? __pfx_vfs_write+0x10/0x10
[ 1466.076927][T25459]  ? __fget_files+0x2a/0x420
[ 1466.076944][T25459]  ? __fget_files+0x2a/0x420
[ 1466.076960][T25459]  ? __fget_files+0x3a0/0x420
[ 1466.076976][T25459]  ? __fget_files+0x2a/0x420
[ 1466.076995][T25459]  ksys_write+0x145/0x250
[ 1466.077010][T25459]  ? __pfx_ksys_write+0x10/0x10
[ 1466.077025][T25459]  ? do_syscall_64+0xbe/0x3b0
[ 1466.077040][T25459]  do_syscall_64+0xfa/0x3b0
[ 1466.077054][T25459]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1466.077076][T25459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1466.077091][T25459]  ? clear_bhb_loop+0x60/0xb0
[ 1466.077109][T25459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1466.077124][T25459] RIP: 0033:0x7f9c25f8e929
[ 1466.077140][T25459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1466.077155][T25459] RSP: 002b:00007f9c26e2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1466.077173][T25459] RAX: ffffffffffffffda RBX: 00007f9c261b5fa0 RCX: 00007f9c25f8e929
[ 1466.077185][T25459] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000006
[ 1466.077196][T25459] RBP: 00007f9c26010b39 R08: 0000000000000000 R09: 0000000000000000
[ 1466.077206][T25459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1466.077216][T25459] R13: 0000000000000000 R14: 00007f9c261b5fa0 R15: 00007f9c262dfa28
[ 1466.077231][T25459]  </TASK>
[ 1466.478997][   T24] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1466.649004][   T24] usb 3-1: Using ep0 maxpacket: 32
[ 1466.659401][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1466.674037][   T24] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[ 1466.683458][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.836890][   T24] usb 3-1: Product: syz
[ 1466.843547][   T24] usb 3-1: Manufacturer: syz
[ 1466.853184][   T24] usb 3-1: SerialNumber: syz
[ 1466.869817][   T24] usb 3-1: config 0 descriptor??
[ 1466.880958][   T24] usb 3-1: bad CDC descriptors
[ 1466.886608][   T24] usb 3-1: unsupported MDLM descriptors
[ 1467.083811][T25454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1467.093918][T25454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1467.109572][ T5949] usb 3-1: USB disconnect, device number 81