last executing test programs:

9m22.596339683s ago: executing program 0 (id=1099):
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000200)})
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x80082, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0d, &(0x7f0000000040))

9m19.019001899s ago: executing program 0 (id=1117):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

9m18.835200865s ago: executing program 0 (id=1118):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x15, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
close(r8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
lsm_get_self_attr(0x65, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x1b, ""/27}, &(0x7f0000000240)=0x3b, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000107, 0x0, 0x8000000000000000}]})
membarrier(0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

9m17.033282023s ago: executing program 0 (id=1128):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', <r2=>0x0})
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)

9m16.852606422s ago: executing program 0 (id=1131):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000001000010400000000030000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a34001280110001006272696467655f736c617665000000001c00058008000300ff07040005000600010000000600020001000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

9m16.569520127s ago: executing program 0 (id=1132):
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000200)})
mknod(0x0, 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x80082, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0d, &(0x7f0000000040))

9m1.302852699s ago: executing program 32 (id=1132):
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, &(0x7f0000000200)})
mknod(0x0, 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x80082, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x12a8f, 0xf264, 0x40, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0d, &(0x7f0000000040))

15.313835876s ago: executing program 5 (id=2668):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000402505a8a4412001020b0109021b00010100c0000904000002070101000905"], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000540)={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x1}})
close(0x3)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x7ffa, 0xba1c, 0x40, 0x0, 0x39)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
recvmmsg(r5, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0)
sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="d558", 0x2}, {0x0}], 0x2)

13.588497756s ago: executing program 2 (id=2671):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, 0x0)
ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x2000000000000198, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x9}, 0x94)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x5)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x801, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x880e)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0xf0)

13.573111815s ago: executing program 3 (id=2672):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r7, 0x10e, 0x1, 0x0, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a050001000700000028d4d71d9ebb85b733c27808bdd661dfb23ad199462f76146200d26d04c4adc50721a2383b8bff3e8dc144ffc1716ff8bb1f024dce658ffe3d3e640fdf142edec04371024607ca695f2d0bbd67da7747c81a4f04f7b6db7ae4558154823be364698f94b3b3a6c9534e32dd10345993c6993bed8b2675d773d264f515b789e996734f0ecf8bf02c75ffb7e88e5713b601e1a3167195c7abc2c23e81108afce3e66288624403ac587631427dbe6d8a4491a3afebf4688787e051f8aa28a36fd32354728e03bc1b3147ed4b9f60c6a93e9446a4474483795c84ac4bdc1b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x5, 0x1, 0xdf4, "d3e2ae09a105"}})
read(r5, 0x0, 0xff40)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0)

12.41978688s ago: executing program 2 (id=2676):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', <r4=>0x0, 0x0, 0x80, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1, {[@noop, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x7, [0x8, 0x0, 0x9]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0xc, "e2edeb658a96b84887d8"}, {0x6, 0x7, "c829ceafb9"}, {0x5, 0xf, "f72c6684427e7f1e0b4c96e9ee"}, {0x1, 0x2}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r5 = socket(0x10, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}})
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2})

12.079747834s ago: executing program 5 (id=2677):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
lseek(r1, 0x289e0cb5, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x0, 0x2}, 0x18, 0x2)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000028340000000000000a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x0, 0xc, 0x0, 0x0, 0x0, [{}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x1}, {0x10, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x1, '\x00', 0x5}, {}, {}, {}, {0x3, 0x0, 0x1, '\x00', 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {0x6}, {0x0, 0x0, 0x2, '\x00', 0x4}, {0x0, 0x2}, {0x81, 0x7}, {0x0, 0x0, 0x4}]}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r8=>0x0})
ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x7)
gettid()
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r9, 0x6, 0x0)
write$uinput_user_dev(r9, &(0x7f0000000980)={'syz0\x00', {0x2, 0x1, 0xff70, 0x5}, 0x1e, [0x100, 0x9, 0x7, 0x8000, 0x1, 0x8001, 0x40, 0x7fff, 0x3, 0x5, 0x4, 0x1, 0x0, 0xa3c, 0x5, 0xfffffff7, 0x2, 0x81, 0x10, 0x5, 0x1, 0x4, 0xd, 0x2, 0x6, 0x7, 0x0, 0x51, 0xd, 0x2, 0x9, 0x9, 0x73cb290a, 0xfff, 0x5, 0x7fff, 0x400, 0x5, 0x60000, 0xfffffffe, 0x1000000, 0x8, 0x2, 0x8, 0x0, 0x40, 0xb, 0x1, 0x7fff, 0x7fff, 0x8, 0x7ff, 0x4, 0x2, 0x2, 0xffffffbd, 0xe1, 0xfffffffb, 0xa63, 0x101, 0x9, 0x2, 0x3, 0x4], [0xb, 0x7faa2fe, 0x3, 0x8, 0xc, 0x6, 0x4, 0x0, 0x1, 0x2, 0x0, 0x416f, 0x3, 0x784, 0x5, 0x57e3, 0x3, 0x5, 0x5, 0xfffff771, 0xfff, 0x6, 0x7f, 0x9d, 0x9, 0x9, 0x3, 0xb, 0x1, 0x400, 0x0, 0x2, 0x5, 0x0, 0x1ab7, 0xfffffff7, 0x1, 0x6, 0x0, 0x9, 0x0, 0x1, 0x796, 0x3, 0x10000, 0x8, 0x4, 0x3, 0xe, 0x5, 0x0, 0xfffffff7, 0x7, 0xc0000, 0x1, 0x1, 0x1, 0x5, 0xb, 0x72, 0x8, 0x8, 0x2, 0x8], [0x580a, 0x8, 0x9, 0x10000, 0x8, 0x2, 0x4, 0x1, 0x3, 0x4, 0xe38, 0x9d, 0x2, 0x9, 0x1ff, 0x0, 0x946, 0x8, 0x7, 0x8, 0xff, 0xffffffff, 0x6, 0x0, 0x3, 0x8, 0x0, 0x1, 0x6, 0xfffeffff, 0x3, 0x84, 0x2, 0xe, 0x4, 0x2, 0x5, 0x2, 0x1, 0x2, 0x3, 0x2, 0x6, 0xff, 0xeba2, 0x9, 0x9, 0xfdda, 0x7, 0x3ff, 0x6225, 0xff5, 0x8, 0x2, 0x2, 0x5, 0x6, 0x8, 0x400, 0x4b2, 0x9, 0x8000, 0xb2d, 0x5], [0x8f, 0x5, 0x8, 0x3e5, 0x1, 0x4, 0x7, 0x400, 0x4, 0x1, 0x6, 0xfffffffe, 0xd1e0, 0xda9, 0x3, 0x66a4, 0xa, 0x1, 0x80, 0x9, 0x2, 0x4, 0x80, 0x6, 0x0, 0xc, 0x80000000, 0x0, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x6, 0x3, 0x5, 0xffffffff, 0xfffffffb, 0x9, 0x400, 0x1, 0xd8a2, 0x5, 0x80, 0xfffffff9, 0x4, 0x4, 0x151b, 0xfffffff7, 0xa7, 0xe38, 0x813, 0x7, 0x6, 0x7, 0x1, 0x67, 0x5, 0xfffff801, 0x1, 0x8, 0x8, 0x6, 0x9]}, 0x45c)
sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="01002abd70ec00ffdbdf252800000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80)
pipe2(&(0x7f0000000040), 0x0)

10.518716194s ago: executing program 1 (id=2679):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa8242, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8)
syz_mount_image$fuse(&(0x7f0000003640), &(0x7f0000003680)='./file0\x00', 0x400, &(0x7f00000036c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0)
ioctl$FBIOBLANK(r4, 0x4611, 0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
quotactl_fd$Q_GETFMT(r4, 0xffffffff80000402, 0x0, 0x0)
ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f00000000c0)={0x9, 0x14, 0x12, 0x15, 0x9, 0xc0c9, 0x2, 0x8c, 0xffffffffffffffff})
r5 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f00000008c0), 0x4)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
ioprio_get$uid(0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pread64(0xffffffffffffffff, &(0x7f0000001600)=""/4103, 0x1007, 0x97)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="0d882dbd7000fdfc11250100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x8c0}, 0x10)
ioctl$BLKROSET(r0, 0x401070cd, 0x0)
io_setup(0x20fe, &(0x7f0000000540)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_pgetevents(r7, 0x4, 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000040), 0x0)

10.401981858s ago: executing program 3 (id=2681):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', <r4=>0x0, 0x0, 0x80, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1, {[@noop, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x7, [0x8, 0x0, 0x9]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0xc, "e2edeb658a96b84887d8"}, {0x6, 0x7, "c829ceafb9"}, {0x5, 0xf, "f72c6684427e7f1e0b4c96e9ee"}, {0x1, 0x2}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r4, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r5 = socket(0x10, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}})
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})
sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2})

10.34125769s ago: executing program 2 (id=2682):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x15, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open(0x0, 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
close(r8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
lsm_get_self_attr(0x65, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x1b, ""/27}, &(0x7f0000000240)=0x3b, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000107, 0x0, 0x8000000000000000}]})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000)
membarrier(0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

9.94322409s ago: executing program 5 (id=2683):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x15, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
close(r8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
lsm_get_self_attr(0x65, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x1b, ""/27}, &(0x7f0000000240)=0x3b, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000107, 0x0, 0x8000000000000000}]})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000)
membarrier(0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

8.695434304s ago: executing program 1 (id=2684):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000400)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926bae1efd7e0054a863f3d5cfe6cb55b5bb9ed884e7cb51726b360fbb37b4fe035bba15e43007160ffc0f0685e839e9047e39be95994a1ea25c50e54c8e3f55fa579fad3904e9fc29cd900000000000000000000000095493a09e9d4857d5ef95dd41767d160478bd3e77bdbf293afcea4c14cb260d49b24ad6e6ddc0afc", 0x9d}], 0x2, &(0x7f0000000740)=[@assoc={0x10, 0x117, 0x4, 0xcb}], 0x10, 0x4}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000140)=""/90, 0x5a}], 0x2}, 0x0)

8.692917745s ago: executing program 4 (id=2685):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', <r5=>0x0, 0x0, 0x80, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1, {[@noop, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x7, [0x8, 0x0, 0x9]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0xc, "e2edeb658a96b84887d8"}, {0x6, 0x7, "c829ceafb9"}, {0x5, 0xf, "f72c6684427e7f1e0b4c96e9ee"}, {0x1, 0x2}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r6 = socket(0x10, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}})
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2})

8.59196419s ago: executing program 1 (id=2686):
r0 = socket$igmp6(0xa, 0x3, 0x2)
socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xc, 0x400)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r4=>0x0], &(0x7f0000000180)=[<r5=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r7 = syz_open_dev$dri(&(0x7f0000000300), 0x3ff, 0x50b4c0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "3bf72a99"}]}}, 0x0}, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000240)={r9, r4, 0x0, 0x0, 0x502, 0x8, 0x7, 0x1, 0x7, 0x0, 0x6983, 0xca98})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, <r10=>0x0], 0x0, 0x0, 0x0, 0x3})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, r10, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x2, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0xe6, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x3e0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@NFQUEUE0={0x24}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x1fc, 0x22c, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x43c)

7.803068213s ago: executing program 3 (id=2687):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', <r5=>0x0, 0x0, 0x80, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1, {[@noop, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x7, [0x8, 0x0, 0x9]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0xc, "e2edeb658a96b84887d8"}, {0x6, 0x7, "c829ceafb9"}, {0x5, 0xf, "f72c6684427e7f1e0b4c96e9ee"}, {0x1, 0x2}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r6 = socket(0x10, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}})
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2})

5.970940549s ago: executing program 2 (id=2688):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
writev(r0, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1}], 0x10}, 0x8000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
r4 = syz_clone(0x22000000, 0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(r4, 0x0, &(0x7f0000000000)={0x5, 0xd}, 0x0)
getuid()
sendmmsg$unix(r3, 0x0, 0x0, 0x84)
listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)=""/186, 0xba)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x2, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
listen(0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sync()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=<r5=>0x0)
setpriority(0x2, r5, 0x8)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904000002"], 0x0)
syz_open_dev$midi(0x0, 0x500, 0xc900)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x5, 0x7}, 0x50)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, &(0x7f0000000300), 0x0}, 0x1c)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r7, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_to_hsr\x00'})

5.920323406s ago: executing program 5 (id=2689):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, r1, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff8f}]}]}, 0x28}}, 0x0) (fail_nth: 5)

5.271459452s ago: executing program 5 (id=2690):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xca, 0x37, 0x5b, 0x20, 0x6f8, 0x301b, 0xb84d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x38, 0x0, 0x1, 0xa6, 0xd5, 0xc7, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d05, 0x0, 0x2b34988d}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="000d1310000013228afcf2470e2a968db2fe66e936d0798a9d"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x10, &(0x7f0000000100)={0x20, 0xb, 0x5, "66db65e232"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x81}})
sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @multicast2}}}], 0x20}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000001f40)={0x2, 0xc001001f, 0x0, 0x0, 0x0, 0x54})
r6 = inotify_init1(0x0)
r7 = syz_open_dev$midi(&(0x7f00000000c0), 0x2, 0x20000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0205710, &(0x7f0000000140)={0x1, 0x6f18, 0x800, 0x0, 0x800})
inotify_add_watch(r6, &(0x7f00000006c0)='.\x00', 0xaa)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fffffff}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000600)={0xc, &(0x7f0000000980)={0x0, 0x5, 0xcf, {0xcf, 0x11, "2e452bf205e86985d79c5ec30deec41890a375e9fc15e8d66ed45e3c0d447a14e45822d839579cf2f216f823c90cfd9735d68c1b662f3a710414bc9eaf32ca99fd88e7f59159adbdc12b172777ceb86ec12680ce2f32500b92b73acbeae8e186e8f18127f22f96f48239ed3fedc010afe5a70df10610c68f6f4e20d55934ad5d62f6692757bab52f2b7a16b5ae7a587a5ae9cd20593b2b77c4386408a96e1ea59b2660ca96778c18fbe904b67553012c4723025b6b5fc9c6ded30ab514c12f4489ded72f871c307b5928fea2d6"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000c40)={0x18, &(0x7f0000000a80)={0x0, 0xb, 0xd3, "c827a49d9e939f113e114368107f6dcb6f588da3f9d54c3a5076da91aa1c0ac1ce60051606cf9d2d6f9e5a8ecee315e320236104bf7ea13dc8b5b5a045538213d7459e2b026a483d3e8e86ca928f4444120518aa1ba300bea85b37dd73f1f63d5a76033563b84fcac32f7800eec4f5874997b215b73db1e91ebe9a847dcdab9b88e698b8272cbe20402f73f9fe78fccdc0aa6381ea0f693f009c05b4505a1bfac009bfa838d2836d4a558169b5977a10aa11a0414b4945475713b2f5302cbf61fa0b18227ed4023b1e1fa636c4fca8a23ce1b2"}, &(0x7f0000000680)={0x0, 0xa, 0x1}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000bc0), &(0x7f0000000c00)={0x40, 0x5, 0x5, "26d137678e"}})
r9 = dup3(r6, 0xffffffffffffffff, 0x0)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130000000000000000000000fc00000000000000000000000000000000000000000000000000000000000000000000000000000000000010"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000340)=""/48, 0x30}], 0x50)
read(r4, &(0x7f0000000880)=""/247, 0xf7)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000400)={0x6c, 0x0, &(0x7f0000000580)=[@release, @dead_binder_done, @acquire_done={0x40106309, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000480)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/220, 0xdc, 0x1, 0x35}, @fda={0x66646185, 0x8, 0x2, 0x8}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/98, 0x62, 0x0, 0x3b}}, &(0x7f0000000300)={0x0, 0x28, 0x44}}}], 0x5d, 0x0, &(0x7f0000000780)="7ac70fa75a6ed2bc53398497468cf47d0d39e3925b26b847aee92360d1943c4fd7304272a6095370bc763849ffb8455a39e2cc2e4c7ea595d63f2fe30e10a11bb5372fda026534eab169589cb5259b5a1d1e4ee9d1927637b82bf53511"})
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000340)={0x40, 0x14, 0x2, 'W]'}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x7, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x9}, 0x0, 0x0})
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x14)

5.270588653s ago: executing program 4 (id=2691):
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, 0x0, 0x11, 0x0, 0x3, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x34}}, 0x0)
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba7144cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

5.256601324s ago: executing program 3 (id=2692):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x7)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840)
r7 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r7, 0x10e, 0x1, 0x0, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a050001000700000028d4d71d9ebb85b733c27808bdd661dfb23ad199462f76146200d26d04c4adc50721a2383b8bff3e8dc144ffc1716ff8bb1f024dce658ffe3d3e640fdf142edec04371024607ca695f2d0bbd67da7747c81a4f04f7b6db7ae4558154823be364698f94b3b3a6c9534e32dd10345993c6993bed8b2675d773d264f515b789e996734f0ecf8bf02c75ffb7e88e5713b601e1a3167195c7abc2c23e81108afce3e66288624403ac587631427dbe6d8a4491a3afebf4688787e051f8aa28a36fd32354728e03bc1b3147ed4b9f60c6a93e9446a4474483795c84ac4bdc1b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_wolinfo={0x5, 0x1, 0xdf4, "d3e2ae09a105"}})
read(r5, 0x0, 0xff40)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_RESET(r4, 0x4141, 0x0)

5.128360726s ago: executing program 1 (id=2693):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
lseek(r1, 0x289e0cb5, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000080)={0x10, 0x0, 0x2}, 0x18, 0x2)
landlock_restrict_self(r3, 0x0)
landlock_restrict_self(r2, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x40080, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000028340000000000000a140000001100010000000000000000000100000a"], 0x28}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000740)={0x2, 0x0, @ioapic={0x0, 0xc, 0x0, 0x0, 0x0, [{}, {0x0, 0x4}, {}, {0x0, 0x2}, {0x0, 0x0, 0x2, '\x00', 0x4}, {0x6, 0x0, 0x0, '\x00', 0x3}, {0x0, 0x1}, {0x10, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x1, '\x00', 0x5}, {}, {}, {}, {0x3, 0x0, 0x1, '\x00', 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, '\x00', 0x8}, {}, {0x6}, {0x0, 0x0, 0x2, '\x00', 0x4}, {0x0, 0x2}, {0x81, 0x7}, {0x0, 0x0, 0x4}]}})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000005c0)={'wlan1\x00', <r9=>0x0})
ioctl$AUTOFS_IOC_FAIL(r7, 0x9361, 0x7)
gettid()
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r10, 0x6, 0x0)
write$uinput_user_dev(r10, &(0x7f0000000980)={'syz0\x00', {0x2, 0x1, 0xff70, 0x5}, 0x1e, [0x100, 0x9, 0x7, 0x8000, 0x1, 0x8001, 0x40, 0x7fff, 0x3, 0x5, 0x4, 0x1, 0x0, 0xa3c, 0x5, 0xfffffff7, 0x2, 0x81, 0x10, 0x5, 0x1, 0x4, 0xd, 0x2, 0x6, 0x7, 0x0, 0x51, 0xd, 0x2, 0x9, 0x9, 0x73cb290a, 0xfff, 0x5, 0x7fff, 0x400, 0x5, 0x60000, 0xfffffffe, 0x1000000, 0x8, 0x2, 0x8, 0x0, 0x40, 0xb, 0x1, 0x7fff, 0x7fff, 0x8, 0x7ff, 0x4, 0x2, 0x2, 0xffffffbd, 0xe1, 0xfffffffb, 0xa63, 0x101, 0x9, 0x2, 0x3, 0x4], [0xb, 0x7faa2fe, 0x3, 0x8, 0xc, 0x6, 0x4, 0x0, 0x1, 0x2, 0x0, 0x416f, 0x3, 0x784, 0x5, 0x57e3, 0x3, 0x5, 0x5, 0xfffff771, 0xfff, 0x6, 0x7f, 0x9d, 0x9, 0x9, 0x3, 0xb, 0x1, 0x400, 0x0, 0x2, 0x5, 0x0, 0x1ab7, 0xfffffff7, 0x1, 0x6, 0x0, 0x9, 0x0, 0x1, 0x796, 0x3, 0x10000, 0x8, 0x4, 0x3, 0xe, 0x5, 0x0, 0xfffffff7, 0x7, 0xc0000, 0x1, 0x1, 0x1, 0x5, 0xb, 0x72, 0x8, 0x8, 0x2, 0x8], [0x580a, 0x8, 0x9, 0x10000, 0x8, 0x2, 0x4, 0x1, 0x3, 0x4, 0xe38, 0x9d, 0x2, 0x9, 0x1ff, 0x0, 0x946, 0x8, 0x7, 0x8, 0xff, 0xffffffff, 0x6, 0x0, 0x3, 0x8, 0x0, 0x1, 0x6, 0xfffeffff, 0x3, 0x84, 0x2, 0xe, 0x4, 0x2, 0x5, 0x2, 0x1, 0x2, 0x3, 0x2, 0x6, 0xff, 0xeba2, 0x9, 0x9, 0xfdda, 0x7, 0x3ff, 0x6225, 0xff5, 0x8, 0x2, 0x2, 0x5, 0x6, 0x8, 0x400, 0x4b2, 0x9, 0x8000, 0xb2d, 0x5], [0x8f, 0x5, 0x8, 0x3e5, 0x1, 0x4, 0x7, 0x400, 0x4, 0x1, 0x6, 0xfffffffe, 0xd1e0, 0xda9, 0x3, 0x66a4, 0xa, 0x1, 0x80, 0x9, 0x2, 0x4, 0x80, 0x6, 0x0, 0xc, 0x80000000, 0x0, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x6, 0x3, 0x5, 0xffffffff, 0xfffffffb, 0x9, 0x400, 0x1, 0xd8a2, 0x5, 0x80, 0xfffffff9, 0x4, 0x4, 0x151b, 0xfffffff7, 0xa7, 0xe38, 0x813, 0x7, 0x6, 0x7, 0x1, 0x67, 0x5, 0xfffff801, 0x1, 0x8, 0x8, 0x6, 0x9]}, 0x45c)
sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYBLOB="01002abd70ec00ffdbdf252800000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40420d5}, 0x80)
pipe2(&(0x7f0000000040), 0x0)

5.060709276s ago: executing program 4 (id=2694):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_rdma(0x10, 0x3, 0x14)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x9)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x58}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
ustat(0x1, 0x0)
read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r4}, 0x10)
close(0xffffffffffffffff)

4.128019474s ago: executing program 1 (id=2695):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0x0, &(0x7f0000000000))
sched_setattr(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
futex(&(0x7f0000004000)=0x7, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb2020000)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000740)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0})

3.661856678s ago: executing program 4 (id=2696):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$ndb(&(0x7f0000003b80), 0x0, 0x2082)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r7, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffffc8, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0)
sendmsg$nl_route(r0, 0x0, 0x24040040)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r9, &(0x7f0000000580)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x1, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xce, [@private=0xa010101, @empty]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)

2.593429453s ago: executing program 4 (id=2697):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000010000000000000080000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x40f, &(0x7f0000000000))
r7 = socket$unix(0x1, 0x1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000290000/0x4000)=nil)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r9, 0x29, 0xc8, &(0x7f00000000c0), 0x4)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000019c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x3}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.576845009s ago: executing program 2 (id=2698):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_rdma(0x10, 0x3, 0x14)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000100)=0x9)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x58}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010)
mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0)
read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000001200)={0x50, 0x0, r3, {0x7, 0x2b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50)
ustat(0x1, 0x0)
read$FUSE(r2, &(0x7f0000004340)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r4}, 0x10)
close(0xffffffffffffffff)

2.160565268s ago: executing program 3 (id=2699):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket(0x15, 0x5, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000000040)=""/10, &(0x7f0000000000)=0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
r8 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r8, 0x2007ffb)
close(r8)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
lsm_get_self_attr(0x65, &(0x7f0000000200)={0x0, 0x0, 0x3b, 0x1b, ""/27}, &(0x7f0000000240)=0x3b, 0x0)
r9 = syz_open_dev$sg(&(0x7f0000000000), 0x3de765c3, 0x0)
ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x20000000)
r10 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000107, 0x0, 0x8000000000000000}]})
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000)
membarrier(0x2, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)

2.071861845s ago: executing program 5 (id=2700):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x18000)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r0)
sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000180)='A')
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101040)
syz_usb_connect$uac1(0x3, 0xda, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201b0c63e0739086b1d01014000010203010902c80003010000730904000000010100000a24010000060201020c24020502020602060006ff090401000001020000097801010101020000072401090100000924020206000300060c240201270320cbb2bb9bcb0905010900021f0504071001000006000900020000040000000904020101ff", @ANYRES32=r3], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0})
syz_emit_ethernet(0x12b6, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0)

474.28058ms ago: executing program 2 (id=2701):
r0 = epoll_create1(0x80000)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa0028000, 0x2000000})

251.567451ms ago: executing program 1 (id=2702):
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', <r5=>0x0, 0x0, 0x80, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1, {[@noop, @timestamp={0x44, 0x10, 0x9e, 0x0, 0x7, [0x8, 0x0, 0x9]}, @cipso={0x86, 0x2a, 0xffffffffffffffff, [{0x5, 0xc, "e2edeb658a96b84887d8"}, {0x6, 0x7, "c829ceafb9"}, {0x5, 0xf, "f72c6684427e7f1e0b4c96e9ee"}, {0x1, 0x2}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x91}, @multicast2}}}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'tunl0\x00', r5, 0x700, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})
setsockopt$inet_int(r3, 0x0, 0x1, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r6 = socket(0x10, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x6, [0xc000000000, 0x8, 0x3, 0x0, 0x0, 0x0]}})
r7 = socket$kcm(0x10, 0x2, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})
sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2})

144.120884ms ago: executing program 4 (id=2703):
r0 = socket$igmp6(0xa, 0x3, 0x2)
socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xc, 0x400)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r4=>0x0], &(0x7f0000000180)=[<r5=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r4, r5], 0x2, 0x0, 0x0, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94)
r7 = syz_open_dev$dri(&(0x7f0000000300), 0x3ff, 0x50b4c0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x80, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xa}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "3bf72a99"}]}}, 0x0}, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000240)={r9, r4, 0x0, 0x0, 0x502, 0x8, 0x7, 0x1, 0x7, 0x0, 0x6983, 0xca98})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, <r10=>0x0], 0x0, 0x0, 0x0, 0x3})
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000005c0)={0x0, 0x0, r4, r10, 0xf8, 0x8, 0x7ff, 0x6, {0x8, 0x8, 0x2, 0x5, 0x0, 0x2, 0x1, 0x1, 0x0, 0xffff, 0x8, 0xe6, 0xffffffff, 0x77, "ba9a42184edc4097e01b52f22e2cbb318719fb31f6699332292cc81f89f07580"}})
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x3e0, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@unspec=@NFQUEUE0={0x24}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x1fc, 0x22c, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x43c)

0s ago: executing program 3 (id=2704):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaf264e244"], 0x0)
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0806", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

kernel console output (not intermixed with test programs):

4894]  should_failslab+0xa8/0x100
[  814.294942][T14894]  kmem_cache_alloc_noprof+0x88/0x710
[  814.294976][T14894]  ? __netlink_lookup+0xbd/0x8a0
[  814.295007][T14894]  ? skb_clone+0x212/0x3a0
[  814.295039][T14894]  skb_clone+0x212/0x3a0
[  814.295073][T14894]  __netlink_deliver_tap+0x404/0x850
[  814.295124][T14894]  ? netlink_deliver_tap+0x2e/0x1b0
[  814.295160][T14894]  netlink_deliver_tap+0x19c/0x1b0
[  814.295202][T14894]  netlink_unicast+0x7fa/0x9e0
[  814.295237][T14894]  ? __pfx_netlink_unicast+0x10/0x10
[  814.295261][T14894]  ? __alloc_skb+0x198/0x3a0
[  814.295285][T14894]  ? netlink_sendmsg+0x642/0xb30
[  814.295316][T14894]  ? skb_put+0x11b/0x210
[  814.295344][T14894]  netlink_sendmsg+0x805/0xb30
[  814.295384][T14894]  ? __pfx_netlink_sendmsg+0x10/0x10
[  814.295416][T14894]  ? __import_iovec+0x5d4/0x7f0
[  814.295441][T14894]  ? aa_sock_msg_perm+0xf1/0x1b0
[  814.295472][T14894]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  814.295493][T14894]  ? __pfx_netlink_sendmsg+0x10/0x10
[  814.295523][T14894]  __sock_sendmsg+0x21c/0x270
[  814.295559][T14894]  ____sys_sendmsg+0x505/0x820
[  814.295593][T14894]  ? __pfx_____sys_sendmsg+0x10/0x10
[  814.295627][T14894]  ? kstrtouint+0x6e/0xe0
[  814.295669][T14894]  ___sys_sendmsg+0x21f/0x2a0
[  814.295699][T14894]  ? __pfx____sys_sendmsg+0x10/0x10
[  814.295725][T14894]  ? get_pid_task+0x20/0x1f0
[  814.295754][T14894]  ? get_pid_task+0x20/0x1f0
[  814.295779][T14894]  ? get_pid_task+0x20/0x1f0
[  814.295839][T14894]  ? __fget_files+0x2a/0x420
[  814.295866][T14894]  ? __fget_files+0x3a0/0x420
[  814.295905][T14894]  __sys_sendmsg+0x164/0x220
[  814.295934][T14894]  ? __pfx___sys_sendmsg+0x10/0x10
[  814.295971][T14894]  ? __pfx_ksys_write+0x10/0x10
[  814.296005][T14894]  __do_fast_syscall_32+0x1dc/0x570
[  814.296030][T14894]  ? lockdep_hardirqs_on+0x7b/0x110
[  814.296051][T14894]  ? do_fast_syscall_32+0x34/0x80
[  814.296075][T14894]  ? irqentry_exit+0x10f/0x670
[  814.296102][T14894]  do_fast_syscall_32+0x34/0x80
[  814.296128][T14894]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  814.296155][T14894] RIP: 0023:0xf7f57539
[  814.296183][T14894] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  814.296210][T14894] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  814.296233][T14894] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000940
[  814.296249][T14894] RDX: 000000000000a084 RSI: 0000000000000000 RDI: 0000000000000000
[  814.296263][T14894] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  814.296277][T14894] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  814.296291][T14894] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  814.296323][T14894]  </TASK>
[  814.619091][   T10] usblp0: removed
[  815.011327][T14891] syz_tun: entered promiscuous mode
[  815.027671][T14891] vlan2: entered promiscuous mode
[  815.098451][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.105649][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.112679][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.119695][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.126791][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.133885][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.141033][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.148042][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.156090][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.163100][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.170435][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.177848][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.184846][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.191912][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.198947][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.205963][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.212968][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.220003][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.227019][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.234080][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.241193][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.248273][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.255317][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.262342][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.270872][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.278260][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.285275][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.292461][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.301389][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.309378][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.316946][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.324447][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.332652][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.339656][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.346667][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.353685][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.360772][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.367751][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.374931][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.382178][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.389265][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.396257][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.403231][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.410204][    C0] gspca_pac7302 3-1:0.56: URB error -71, resubmitting
[  815.417011][    C0] gspca_main: Resubmit URB failed with error -19
[  815.423459][   T10] usb 3-1: USB disconnect, device number 9
[  815.614141][T14900] netlink: 'syz.4.2486': attribute type 10 has an invalid length.
[  815.660357][T14900] bond0: (slave netdevsim0): Releasing backup interface
[  815.669792][T14906] netlink: 'syz.4.2486': attribute type 10 has an invalid length.
[  815.699769][T14900] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  815.743815][T14900] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  815.759534][T14900] team0: Port device netdevsim0 added
[  815.771713][T14906] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  815.821591][T14906] team0: Port device netdevsim0 removed
[  815.853980][T14906] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  815.869599][T14906] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  816.133375][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2489'.
[  816.275989][T14916] fuse: Unknown parameter '0x0000000000000003'
[  816.314399][T14917] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2490'.
[  816.404457][   T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  816.572758][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  816.596622][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  816.647028][   T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  816.657057][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.672820][   T10] usb 2-1: config 0 descriptor??
[  816.927028][T14925] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2492'.
[  817.177100][   T10] elan 0003:04F3:0755.006E: unknown main item tag 0x0
[  817.208013][   T10] elan 0003:04F3:0755.006E: unknown main item tag 0x0
[  817.216154][   T10] elan 0003:04F3:0755.006E: unknown main item tag 0x1
[  817.583527][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2493'.
[  817.684619][   T10] elan 0003:04F3:0755.006E: unknown main item tag 0x0
[  817.691461][   T10] elan 0003:04F3:0755.006E: unknown main item tag 0x0
[  817.705502][   T10] elan 0003:04F3:0755.006E: failed to start in urb: -90
[  817.745931][   T10] elan 0003:04F3:0755.006E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  817.849604][   T10] usb 2-1: USB disconnect, device number 11
[  818.051700][T14934] fido_id[14934]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  818.439368][T14936] netlink: 'syz.5.2494': attribute type 61 has an invalid length.
[  818.447546][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2494'.
[  818.826149][   T30] audit: type=1800 audit(1767687969.856:246): pid=14942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2495" name="bus" dev="ramfs" ino=58867 res=0 errno=0
[  818.877564][T14944] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  818.975037][T14954] fuse: Unknown parameter 'groep_id'
[  819.080463][T14956] netlink: 'syz.4.2500': attribute type 21 has an invalid length.
[  819.130758][T14956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2500'.
[  819.154551][T12820] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[  819.429692][T12820] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  819.444670][T12820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.472666][T12820] usb 6-1: Product: syz
[  819.484634][T12820] usb 6-1: Manufacturer: syz
[  819.492593][T12820] usb 6-1: SerialNumber: syz
[  819.604119][   T30] audit: type=1800 audit(1767687970.626:247): pid=14960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2502" name="bus" dev="ramfs" ino=59024 res=0 errno=0
[  819.920543][T12820] rtl8150 6-1:1.0: couldn't reset the device
[  819.934189][T12820] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[  819.958118][T12820] usb 6-1: USB disconnect, device number 87
[  820.256837][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2505'.
[  820.534492][T12820] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  820.683081][T14983] netlink: 'syz.3.2506': attribute type 61 has an invalid length.
[  820.691231][T14983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2506'.
[  820.706338][T12820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  820.731431][T12820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  820.759526][T12820] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  820.789030][T12820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.874016][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2504'.
[  820.913809][T12820] usb 2-1: config 0 descriptor??
[  821.166211][T14987] netlink: 'syz.4.2508': attribute type 1 has an invalid length.
[  821.360946][T12820] elan 0003:04F3:0755.006F: unknown main item tag 0x0
[  821.392636][T14993] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2509'.
[  821.414634][T12820] elan 0003:04F3:0755.006F: unknown main item tag 0x0
[  821.421482][T12820] elan 0003:04F3:0755.006F: unknown main item tag 0x1
[  821.428322][T12820] elan 0003:04F3:0755.006F: unknown main item tag 0x0
[  821.435395][T12820] elan 0003:04F3:0755.006F: unknown main item tag 0x0
[  821.442762][T12820] elan 0003:04F3:0755.006F: failed to start in urb: -90
[  821.513872][T12820] elan 0003:04F3:0755.006F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  821.572829][T13468] usb 2-1: USB disconnect, device number 12
[  821.651165][T14999] vivid-004: disconnect
[  821.701801][T15002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2511'.
[  821.994493][T13468] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  822.018038][T15000] fido_id[15000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  822.194641][T13468] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  822.212366][T13468] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  822.311797][T13468] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  822.346291][T13468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  822.424533][T13468] usb 3-1: Product: syz
[  822.428758][T13468] usb 3-1: Manufacturer: syz
[  822.433353][T13468] usb 3-1: SerialNumber: syz
[  822.471560][T13468] usb 3-1: config 0 descriptor??
[  822.495339][T15011] FAULT_INJECTION: forcing a failure.
[  822.495339][T15011] name failslab, interval 1, probability 0, space 0, times 0
[  822.508845][T15011] CPU: 0 UID: 0 PID: 15011 Comm: syz.1.2513 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  822.508871][T15011] Tainted: [L]=SOFTLOCKUP
[  822.508878][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  822.508888][T15011] Call Trace:
[  822.508894][T15011]  <TASK>
[  822.508901][T15011]  dump_stack_lvl+0xe8/0x150
[  822.508926][T15011]  should_fail_ex+0x414/0x560
[  822.508956][T15011]  should_failslab+0xa8/0x100
[  822.508977][T15011]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  822.509003][T15011]  ? __alloc_skb+0x1dc/0x3a0
[  822.509019][T15011]  ? __local_bh_enable_ip+0xd0/0x130
[  822.509036][T15011]  ? __alloc_skb+0x198/0x3a0
[  822.509052][T15011]  __alloc_skb+0x1dc/0x3a0
[  822.509072][T15011]  netlink_dump+0x1b7/0xe90
[  822.509095][T15011]  ? __netlink_lookup+0xbd/0x8a0
[  822.509128][T15011]  ? __pfx_netlink_dump+0x10/0x10
[  822.509145][T15011]  ? __netlink_lookup+0x7db/0x8a0
[  822.509178][T15011]  ? netlink_lookup+0x30/0x200
[  822.509196][T15011]  ? netlink_lookup+0x30/0x200
[  822.509213][T15011]  ? netlink_lookup+0x30/0x200
[  822.509236][T15011]  __netlink_dump_start+0x5cb/0x7e0
[  822.509261][T15011]  rtnetlink_rcv_msg+0x9eb/0xb70
[  822.509280][T15011]  ? __pfx_rtnl_net_dumpid+0x10/0x10
[  822.509298][T15011]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  822.509314][T15011]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  822.509331][T15011]  ? __pfx_rtnl_net_dumpid+0x10/0x10
[  822.509359][T15011]  netlink_rcv_skb+0x208/0x470
[  822.509380][T15011]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  822.509398][T15011]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  822.509426][T15011]  ? netlink_deliver_tap+0x2e/0x1b0
[  822.509452][T15011]  netlink_unicast+0x82f/0x9e0
[  822.509515][T15011]  ? __pfx_netlink_unicast+0x10/0x10
[  822.509532][T15011]  ? __alloc_skb+0x198/0x3a0
[  822.509548][T15011]  ? netlink_sendmsg+0x642/0xb30
[  822.509567][T15011]  ? skb_put+0x11b/0x210
[  822.509586][T15011]  netlink_sendmsg+0x805/0xb30
[  822.509613][T15011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  822.509635][T15011]  ? __import_iovec+0x5d4/0x7f0
[  822.509654][T15011]  ? aa_sock_msg_perm+0xf1/0x1b0
[  822.509675][T15011]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  822.509690][T15011]  ? __pfx_netlink_sendmsg+0x10/0x10
[  822.509712][T15011]  __sock_sendmsg+0x21c/0x270
[  822.509737][T15011]  ____sys_sendmsg+0x505/0x820
[  822.509760][T15011]  ? __pfx_____sys_sendmsg+0x10/0x10
[  822.509783][T15011]  ? kstrtouint+0x6e/0xe0
[  822.509812][T15011]  ___sys_sendmsg+0x21f/0x2a0
[  822.509832][T15011]  ? __pfx____sys_sendmsg+0x10/0x10
[  822.509851][T15011]  ? get_pid_task+0x20/0x1f0
[  822.509871][T15011]  ? get_pid_task+0x20/0x1f0
[  822.509889][T15011]  ? get_pid_task+0x20/0x1f0
[  822.509930][T15011]  ? __fget_files+0x2a/0x420
[  822.509949][T15011]  ? __fget_files+0x3a0/0x420
[  822.509975][T15011]  __sys_sendmsg+0x164/0x220
[  822.509996][T15011]  ? __pfx___sys_sendmsg+0x10/0x10
[  822.510021][T15011]  ? __pfx_ksys_write+0x10/0x10
[  822.510045][T15011]  __do_fast_syscall_32+0x1dc/0x570
[  822.510063][T15011]  ? lockdep_hardirqs_on+0x7b/0x110
[  822.510078][T15011]  ? do_fast_syscall_32+0x34/0x80
[  822.510095][T15011]  ? irqentry_exit+0x10f/0x670
[  822.510113][T15011]  do_fast_syscall_32+0x34/0x80
[  822.510131][T15011]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  822.510151][T15011] RIP: 0023:0xf7ff6539
[  822.510164][T15011] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  822.510178][T15011] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  822.510195][T15011] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240
[  822.510207][T15011] RDX: 0000000004004090 RSI: 0000000000000000 RDI: 0000000000000000
[  822.510217][T15011] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  822.510226][T15011] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  822.510236][T15011] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  822.510258][T15011]  </TASK>
[  823.328188][   T30] audit: type=1326 audit(1767687974.336:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  823.419573][   T30] audit: type=1326 audit(1767687974.346:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  823.496816][   T30] audit: type=1326 audit(1767687974.346:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  823.573152][   T30] audit: type=1326 audit(1767687974.346:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  823.629240][   T30] audit: type=1326 audit(1767687974.346:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  823.946717][   T30] audit: type=1326 audit(1767687974.346:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.098817][ T5839] Bluetooth: hci5: Opcode 0x206a failed: -110
[  824.144497][ T5839] Bluetooth: hci5: command 0x0406 tx timeout
[  824.160934][   T30] audit: type=1326 audit(1767687974.406:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.194574][   T30] audit: type=1326 audit(1767687974.406:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.226394][   T30] audit: type=1326 audit(1767687974.406:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.250478][   T30] audit: type=1326 audit(1767687974.406:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.273511][   T30] audit: type=1326 audit(1767687974.406:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.296538][   T30] audit: type=1326 audit(1767687974.406:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.431928][   T30] audit: type=1326 audit(1767687974.406:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.509084][   T30] audit: type=1326 audit(1767687974.406:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.592430][   T30] audit: type=1326 audit(1767687974.406:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15010 comm="syz.5.2514" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f03539 code=0x7ffc0000
[  824.773146][T14999] vivid-004: reconnect
[  824.906752][T13468] usb 3-1: USB disconnect, device number 10
[  825.335626][T15037] netlink: 'syz.3.2519': attribute type 10 has an invalid length.
[  825.402963][T15038] netlink: 'syz.3.2519': attribute type 10 has an invalid length.
[  825.477497][T15037] bond0: (slave netdevsim0): Releasing backup interface
[  825.593478][T15037] team0: Port device netdevsim0 added
[  826.261692][T15042] netlink: 'syz.5.2521': attribute type 61 has an invalid length.
[  826.269840][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2521'.
[  826.283169][T15038] team0: Port device netdevsim0 removed
[  826.315056][T15038] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  826.471215][T15036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2520'.
[  826.644523][T12820] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  826.818584][T12820] usb 3-1: Using ep0 maxpacket: 32
[  826.830423][T15050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2523'.
[  826.866117][T12820] usb 3-1: config index 0 descriptor too short (expected 249, got 27)
[  826.882189][T12820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  826.912645][T12820] usb 3-1: config 0 has no interfaces?
[  826.930025][T12820] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  826.950814][T12820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.966618][T12820] usb 3-1: config 0 descriptor??
[  827.243838][T15057] FAULT_INJECTION: forcing a failure.
[  827.243838][T15057] name failslab, interval 1, probability 0, space 0, times 0
[  827.256837][T12820] usb 6-1: new full-speed USB device number 88 using dummy_hcd
[  827.307831][T15057] CPU: 1 UID: 0 PID: 15057 Comm: syz.4.2525 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  827.307865][T15057] Tainted: [L]=SOFTLOCKUP
[  827.307874][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  827.307887][T15057] Call Trace:
[  827.307895][T15057]  <TASK>
[  827.307905][T15057]  dump_stack_lvl+0xe8/0x150
[  827.307943][T15057]  should_fail_ex+0x414/0x560
[  827.307983][T15057]  should_failslab+0xa8/0x100
[  827.308013][T15057]  kmem_cache_alloc_noprof+0x88/0x710
[  827.308055][T15057]  ? __netlink_lookup+0xbd/0x8a0
[  827.308086][T15057]  ? skb_clone+0x212/0x3a0
[  827.308115][T15057]  skb_clone+0x212/0x3a0
[  827.308138][T15057]  __netlink_deliver_tap+0x404/0x850
[  827.308166][T15057]  ? netlink_deliver_tap+0x2e/0x1b0
[  827.308187][T15057]  netlink_deliver_tap+0x19c/0x1b0
[  827.308207][T15057]  netlink_unicast+0x7fa/0x9e0
[  827.308250][T15057]  ? __pfx_netlink_unicast+0x10/0x10
[  827.308282][T15057]  ? __alloc_skb+0x198/0x3a0
[  827.308307][T15057]  ? netlink_sendmsg+0x642/0xb30
[  827.308326][T15057]  ? skb_put+0x11b/0x210
[  827.308346][T15057]  netlink_sendmsg+0x805/0xb30
[  827.308373][T15057]  ? __pfx_netlink_sendmsg+0x10/0x10
[  827.308396][T15057]  ? __import_iovec+0x5d4/0x7f0
[  827.308421][T15057]  ? aa_sock_msg_perm+0xf1/0x1b0
[  827.308443][T15057]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  827.308458][T15057]  ? __pfx_netlink_sendmsg+0x10/0x10
[  827.308480][T15057]  __sock_sendmsg+0x21c/0x270
[  827.308511][T15057]  ____sys_sendmsg+0x505/0x820
[  827.308534][T15057]  ? __pfx_____sys_sendmsg+0x10/0x10
[  827.308556][T15057]  ? kstrtouint+0x6e/0xe0
[  827.308586][T15057]  ___sys_sendmsg+0x21f/0x2a0
[  827.308607][T15057]  ? __pfx____sys_sendmsg+0x10/0x10
[  827.308625][T15057]  ? get_pid_task+0x20/0x1f0
[  827.308649][T15057]  ? get_pid_task+0x20/0x1f0
[  827.308667][T15057]  ? get_pid_task+0x20/0x1f0
[  827.308708][T15057]  ? __fget_files+0x2a/0x420
[  827.308727][T15057]  ? __fget_files+0x3a0/0x420
[  827.308754][T15057]  __sys_sendmsg+0x164/0x220
[  827.308784][T15057]  ? __pfx___sys_sendmsg+0x10/0x10
[  827.308810][T15057]  ? __pfx_ksys_write+0x10/0x10
[  827.308837][T15057]  __do_fast_syscall_32+0x1dc/0x570
[  827.308859][T15057]  ? lockdep_hardirqs_on+0x7b/0x110
[  827.308877][T15057]  ? do_fast_syscall_32+0x34/0x80
[  827.308900][T15057]  ? irqentry_exit+0x10f/0x670
[  827.308925][T15057]  do_fast_syscall_32+0x34/0x80
[  827.308949][T15057]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  827.308969][T15057] RIP: 0023:0xf7f57539
[  827.308983][T15057] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  827.308997][T15057] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  827.309015][T15057] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000ac0
[  827.309027][T15057] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000
[  827.309041][T15057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  827.309051][T15057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  827.309061][T15057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  827.309090][T15057]  </TASK>
[  827.916832][T12820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  827.927929][T12820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  827.937873][T12820] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  827.947320][T12820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.958404][T12820] usb 6-1: config 0 descriptor??
[  828.372602][T12820] elan 0003:04F3:0755.0070: unknown main item tag 0x0
[  828.380179][T12820] elan 0003:04F3:0755.0070: unknown main item tag 0x0
[  828.395275][  T794] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  828.406502][T12820] elan 0003:04F3:0755.0070: unknown main item tag 0x1
[  828.420497][T12820] elan 0003:04F3:0755.0070: unknown main item tag 0x0
[  828.429964][T12820] elan 0003:04F3:0755.0070: unknown main item tag 0x0
[  828.438396][T12820] elan 0003:04F3:0755.0070: failed to start in urb: -90
[  828.447726][T12820] elan 0003:04F3:0755.0070: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  828.578809][  T794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  828.622155][T15076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2530'.
[  828.657429][T12820] usb 6-1: USB disconnect, device number 88
[  828.671154][  T794] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  828.681060][  T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  828.722796][  T794] usb 5-1: Product: syz
[  828.728966][  T794] usb 5-1: Manufacturer: syz
[  828.733610][  T794] usb 5-1: SerialNumber: syz
[  829.311505][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2533'.
[  829.326333][T15084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2533'.
[  829.408854][T12820] usb 3-1: USB disconnect, device number 11
[  829.798162][T15098] syzkaller0: entered promiscuous mode
[  829.803738][T15098] syzkaller0: entered allmulticast mode
[  830.160624][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2536'.
[  830.625237][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  830.625266][   T30] audit: type=1800 audit(1767687981.626:282): pid=15117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2541" name="bus" dev="ramfs" ino=60494 res=0 errno=0
[  830.735973][   T30] audit: type=1800 audit(1767687981.696:283): pid=15116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2540" name="bus" dev="ramfs" ino=60492 res=0 errno=0
[  831.131119][  T794] usb 5-1: USB disconnect, device number 28
[  831.624749][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2545'.
[  831.724520][  T794] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  831.773273][T15138] xt_bpf: check failed: parse error
[  831.956016][  T794] usb 6-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  831.992906][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.995077][T13468] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  832.029079][  T794] usb 6-1: Product: syz
[  832.033318][  T794] usb 6-1: Manufacturer: syz
[  832.130608][  T794] usb 6-1: SerialNumber: syz
[  832.137044][T15131] team0: Port device team_slave_0 removed
[  832.264493][T13468] usb 3-1: Using ep0 maxpacket: 32
[  832.303713][T13468] usb 3-1: config index 0 descriptor too short (expected 249, got 27)
[  832.337693][T13468] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  832.354544][   T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  832.396291][T13468] usb 3-1: config 0 has no interfaces?
[  832.411714][  T794] gspca_main: pac207-2.14.0 probing 093a:2476
[  832.420847][  T794] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  832.430460][T13468] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  832.459898][T13468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.489514][  T794] uvcvideo 6-1:13.0: Found UVC 0.00 device syz (093a:2476)
[  832.514500][  T794] uvcvideo 6-1:13.0: No valid video chain found.
[  832.515533][   T10] usb 5-1: device descriptor read/64, error -71
[  832.528010][T13468] usb 3-1: config 0 descriptor??
[  832.567039][  T794] usb 6-1: USB disconnect, device number 89
[  832.770583][T15146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2548'.
[  832.816194][   T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  832.867697][T13468] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  832.982573][   T10] usb 5-1: device descriptor read/64, error -71
[  833.082517][T13468] usb 4-1: config 0 interface 0 has no altsetting 0
[  833.094776][T13468] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00
[  833.104765][T13468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.120394][T13468] usb 4-1: config 0 descriptor??
[  833.164962][   T10] usb usb5-port1: attempt power cycle
[  833.604494][   T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  833.720776][T15151] FAULT_INJECTION: forcing a failure.
[  833.720776][T15151] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  834.084431][   T10] usb 5-1: device descriptor read/8, error -71
[  834.314753][T15155] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2549'.
[  834.404531][T15151] CPU: 0 UID: 0 PID: 15151 Comm: syz.5.2550 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  834.404568][T15151] Tainted: [L]=SOFTLOCKUP
[  834.404577][T15151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  834.404591][T15151] Call Trace:
[  834.404600][T15151]  <TASK>
[  834.404615][T15151]  dump_stack_lvl+0xe8/0x150
[  834.404645][T15151]  should_fail_ex+0x414/0x560
[  834.404677][T15151]  prepare_alloc_pages+0x22b/0x650
[  834.404710][T15151]  __alloc_frozen_pages_noprof+0x123/0x370
[  834.404741][T15151]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  834.404769][T15151]  ? policy_nodemask+0x27c/0x720
[  834.404794][T15151]  alloc_pages_mpol+0x232/0x4a0
[  834.404819][T15151]  vma_alloc_folio_noprof+0xe4/0x200
[  834.404842][T15151]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  834.404862][T15151]  ? css_rstat_updated+0x239/0x520
[  834.404899][T15151]  ? ___pte_offset_map+0x29/0x240
[  834.404926][T15151]  folio_prealloc+0x30/0x180
[  834.404955][T15151]  do_pte_missing+0x14e8/0x3330
[  834.404989][T15151]  handle_mm_fault+0x1b26/0x32b0
[  834.405013][T15151]  ? __pte_offset_map_lock+0x13e/0x210
[  834.405048][T15151]  ? handle_mm_fault+0xdb/0x32b0
[  834.405079][T15151]  ? __pfx_handle_mm_fault+0x10/0x10
[  834.405105][T15151]  ? follow_page_pte+0x7ef/0x13e0
[  834.405142][T15151]  ? __pfx_follow_page_pte+0x10/0x10
[  834.405175][T15151]  __get_user_pages+0x1650/0x29f0
[  834.405222][T15151]  populate_vma_page_range+0x29f/0x3a0
[  834.405247][T15151]  ? __pfx_populate_vma_page_range+0x10/0x10
[  834.405273][T15151]  ? down_read+0x274/0x2e0
[  834.405293][T15151]  ? __mm_populate+0x160/0x380
[  834.405316][T15151]  __mm_populate+0x24c/0x380
[  834.405341][T15151]  ? __pfx___mm_populate+0x10/0x10
[  834.405385][T15151]  do_mlock+0x612/0x720
[  834.405414][T15151]  ? __pfx_do_mlock+0x10/0x10
[  834.405436][T15151]  ? fput+0xa0/0xd0
[  834.405459][T15151]  ? ksys_write+0x22a/0x250
[  834.405479][T15151]  ? __pfx_ksys_write+0x10/0x10
[  834.405502][T15151]  __ia32_sys_mlock+0x5f/0x70
[  834.405523][T15151]  __do_fast_syscall_32+0x1dc/0x570
[  834.405543][T15151]  ? lockdep_hardirqs_on+0x7b/0x110
[  834.405560][T15151]  ? do_fast_syscall_32+0x34/0x80
[  834.405578][T15151]  ? irqentry_exit+0x10f/0x670
[  834.405599][T15151]  do_fast_syscall_32+0x34/0x80
[  834.405619][T15151]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  834.405640][T15151] RIP: 0023:0xf7f03539
[  834.405656][T15151] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  834.405672][T15151] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000096
[  834.405690][T15151] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000800000
[  834.405703][T15151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  834.405720][T15151] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  834.405731][T15151] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  834.405742][T15151] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  834.405767][T15151]  </TASK>
[  834.786780][   T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  834.814688][T15155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  835.064463][   T10] usb 5-1: device not accepting address 32, error -71
[  835.078115][   T10] usb usb5-port1: unable to enumerate USB device
[  835.174296][  T794] usb 3-1: USB disconnect, device number 12
[  835.484634][T12820] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  835.505400][ T5970] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  835.645656][T12820] usb 2-1: Using ep0 maxpacket: 16
[  835.656731][T12820] usb 2-1: unable to get BOS descriptor or descriptor too short
[  835.664973][ T5970] usb 6-1: Using ep0 maxpacket: 32
[  835.673985][ T5970] usb 6-1: config 0 has an invalid interface number: 56 but max is 0
[  835.683256][ T5970] usb 6-1: config 0 has no interface number 0
[  835.694526][  T794] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  835.702365][ T5970] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d
[  835.713044][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.727756][ T5970] usb 6-1: Product: syz
[  835.732373][ T5970] usb 6-1: Manufacturer: syz
[  835.737623][T12820] usb 2-1: config 2 has an invalid interface number: 251 but max is 0
[  835.746137][T12820] usb 2-1: config 2 has no interface number 0
[  835.752820][T12820] usb 2-1: config 2 interface 251 altsetting 156 bulk endpoint 0xA has invalid maxpacket 8
[  835.763313][ T5970] usb 6-1: SerialNumber: syz
[  835.768995][T12820] usb 2-1: config 2 interface 251 altsetting 156 endpoint 0x3 has an invalid bInterval 241, changing to 7
[  835.783201][T12820] usb 2-1: config 2 interface 251 has no altsetting 0
[  835.791708][ T5970] usb 6-1: config 0 descriptor??
[  835.863000][ T5970] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  835.872303][  T794] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  835.883605][  T794] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  835.911090][T12820] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=ea.ae
[  835.920893][  T794] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  835.931402][T12820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.940607][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  835.950709][T12820] usb 2-1: Product: syz
[  835.963673][T12820] usb 2-1: Manufacturer: syz
[  835.973341][  T794] usb 3-1: Product: syz
[  835.978537][T12820] usb 2-1: SerialNumber: syz
[  835.983604][  T794] usb 3-1: Manufacturer: syz
[  835.993533][  T794] usb 3-1: SerialNumber: syz
[  836.012948][T15158] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  836.787311][T15160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2552'.
[  836.827912][T15160] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2552'.
[  836.894576][T15160] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2552'.
[  836.981792][ T5970] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input85
[  836.994722][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2554'.
[  837.512205][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  837.519154][    C1] gspca_main: Resubmit URB failed with error -19
[  837.563868][   T10] usb 6-1: USB disconnect, device number 90
[  837.755855][T13468] usbhid 4-1:0.0: can't add hid device: -71
[  837.782612][T13468] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  837.814934][T13468] usb 4-1: USB disconnect, device number 6
[  838.043207][T15179] kernel read not supported for file / 
œ7±ÏüâW)ësPÈmàQ�öì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀ™ (pid: 15179 comm: syz.4.2556)
[  838.104549][   T30] audit: type=1800 audit(1767687989.126:284): pid=15179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2556" name=20019C1437B1CFFCC3A25729EB7350C86DE0518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C099 dev="mqueue" ino=60743 res=0 errno=0
[  838.197872][T15179] Invalid argument reading file caps for ./file0
[  838.220059][T15179] syzkaller0: entered promiscuous mode
[  838.226444][T15179] syzkaller0: entered allmulticast mode
[  838.274558][T13468] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  838.408315][T15184] fuse: Unknown parameter '0x0000000000000003'
[  838.463065][T12820] redrat3 2-1:2.251: Couldn't find all endpoints
[  838.469837][T13468] usb 4-1: config 26 has an invalid interface number: 142 but max is 0
[  838.500694][T13468] usb 4-1: config 26 has no interface number 0
[  838.514961][T12820] usb 2-1: USB disconnect, device number 13
[  838.524427][T13468] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=a4.f4
[  838.545674][T13468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.586376][T13468] gspca_main: touptek-2.14.0 probing 0547:6801
[  838.661687][T13468] usb 3-1: USB disconnect, device number 13
[  838.791714][   T10] usb 4-1: USB disconnect, device number 7
[  838.855163][T15191] syzkaller0: entered promiscuous mode
[  838.861025][T15191] syzkaller0: entered allmulticast mode
[  838.943662][T15191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2561'.
[  839.075400][   T30] audit: type=1800 audit(1767687990.086:285): pid=15194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2559" name="bus" dev="ramfs" ino=60304 res=0 errno=0
[  839.231242][T15199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2562'.
[  839.903102][   T30] audit: type=1800 audit(1767687990.926:286): pid=15207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2563" name="bus" dev="ramfs" ino=60313 res=0 errno=0
[  840.044501][T12820] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  840.204448][T12820] usb 6-1: Using ep0 maxpacket: 32
[  840.227545][T12820] usb 6-1: config index 0 descriptor too short (expected 249, got 27)
[  840.243132][T12820] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  840.274475][T12820] usb 6-1: config 0 has no interfaces?
[  840.294473][T12820] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  840.304942][T12820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  840.342656][T12820] usb 6-1: config 0 descriptor??
[  840.802859][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2566'.
[  840.944491][T12820] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  841.094630][T12820] usb 4-1: Using ep0 maxpacket: 32
[  841.102425][T12820] usb 4-1: config 0 has an invalid interface number: 56 but max is 0
[  841.111473][T12820] usb 4-1: config 0 has no interface number 0
[  841.122050][T12820] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d
[  841.140269][T15228] fuse: Unknown parameter '0x0000000000000003'
[  841.192297][T12820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.208095][T12820] usb 4-1: Product: syz
[  841.213564][T12820] usb 4-1: Manufacturer: syz
[  841.224857][T12820] usb 4-1: SerialNumber: syz
[  841.247906][T12820] usb 4-1: config 0 descriptor??
[  841.277999][T12820] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  841.604533][  T794] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  841.776673][  T794] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  841.791125][  T794] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  841.820987][  T794] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  841.839574][  T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  841.855584][  T794] usb 5-1: Product: syz
[  841.862637][  T794] usb 5-1: Manufacturer: syz
[  841.870805][  T794] usb 5-1: SerialNumber: syz
[  842.224830][T12820] gspca_pac7302: reg_w() failed i: ff v: 01 error -110
[  842.236485][T12820] gspca_pac7302 4-1:0.56: probe with driver gspca_pac7302 failed with error -110
[  842.507546][T15219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'.
[  842.518615][T15219] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2568'.
[  842.528405][T15219] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2568'.
[  842.758544][   T30] audit: type=1800 audit(1767687993.786:287): pid=15245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2575" name="bus" dev="ramfs" ino=61485 res=0 errno=0
[  842.797383][  T794] usb 6-1: USB disconnect, device number 91
[  843.294688][   T10] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  843.463299][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[  843.471588][   T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  843.481380][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.493720][   T10] usb 6-1: config 0 descriptor??
[  843.614104][T15253] syzkaller0: entered promiscuous mode
[  843.619988][T15253] syzkaller0: entered allmulticast mode
[  843.632931][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2577'.
[  843.923177][   T10] arvo 0003:1E7D:30D4.0071: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0
[  844.068657][  T794] usb 4-1: USB disconnect, device number 8
[  844.224775][T12820] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  844.257051][T15264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2580'.
[  844.396760][  T794] usb 5-1: USB disconnect, device number 33
[  844.528313][T12820] usb 3-1: config 0 interface 0 has no altsetting 0
[  844.535286][T12820] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  844.586712][T12820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.626710][T12820] usb 3-1: config 0 descriptor??
[  844.984043][T15271] fuse: Unknown parameter 'fd0x0000000000000003'
[  845.141434][T12820] arvo 0003:1E7D:30D4.0072: hidraw1: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[  845.173622][T15273] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2583'.
[  845.527040][T15282] tipc: Can't bind to reserved service type 2
[  845.534198][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2584'.
[  845.913310][  T794] usb 6-1: USB disconnect, device number 92
[  845.974485][T12820] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  846.124455][T12820] usb 4-1: Using ep0 maxpacket: 32
[  846.131741][T12820] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  846.143415][T12820] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  846.161049][T12820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  846.176442][T12820] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  846.189544][T12820] usb 4-1: config 1 has no interface number 0
[  846.212519][T12820] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  846.233666][T12820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.266542][T12820] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  846.462081][T12820] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[  846.477549][T12820] snd_usb_pod 4-1:1.1: invalid control EP
[  846.483525][T12820] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  846.492666][T12820] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  846.500031][  T794] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  846.510026][T12820] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22
[  846.654585][  T794] usb 6-1: Using ep0 maxpacket: 8
[  846.663809][  T794] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  846.676479][  T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  846.685492][  T794] usb 6-1: Product: syz
[  846.689745][  T794] usb 6-1: Manufacturer: syz
[  846.694559][  T794] usb 6-1: SerialNumber: syz
[  846.708927][T13468] usb 4-1: USB disconnect, device number 9
[  846.715480][  T794] usb 6-1: config 0 descriptor??
[  846.856175][   T30] audit: type=1800 audit(1767687997.886:288): pid=15289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2588" name="bus" dev="ramfs" ino=61250 res=0 errno=0
[  846.910190][T13468] usb 3-1: USB disconnect, device number 14
[  846.925492][  T794] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  847.125800][  T794] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  847.158628][  T794] usb 6-1: USB disconnect, device number 93
[  847.535000][  T794] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  847.694762][  T794] usb 4-1: Using ep0 maxpacket: 32
[  847.711105][  T794] usb 4-1: config 0 has an invalid interface number: 56 but max is 0
[  847.737093][  T794] usb 4-1: config 0 has no interface number 0
[  847.757595][  T794] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d
[  847.788625][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.813807][  T794] usb 4-1: Product: syz
[  847.830458][  T794] usb 4-1: Manufacturer: syz
[  847.841838][  T794] usb 4-1: SerialNumber: syz
[  847.872494][  T794] usb 4-1: config 0 descriptor??
[  847.885622][  T794] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  847.960630][T12820] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  847.985834][T15302] syzkaller0: entered promiscuous mode
[  847.991376][T15302] syzkaller0: entered allmulticast mode
[  848.001281][T15302] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2592'.
[  848.105159][T15304] fuse: Unknown parameter 'fd0x0000000000000003'
[  848.116274][T12820] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  848.128048][T12820] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  848.165429][T12820] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  848.192794][T12820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  848.212124][T12820] usb 2-1: Product: syz
[  848.222290][T12820] usb 2-1: Manufacturer: syz
[  848.234480][T12820] usb 2-1: SerialNumber: syz
[  848.491314][T15313] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  848.499841][T15313] batadv_slave_0: entered promiscuous mode
[  848.626402][T15317] input: syz0 as /devices/virtual/input/input86
[  848.695681][T15319] netlink: 'syz.5.2594': attribute type 10 has an invalid length.
[  848.755749][T15320] netlink: 'syz.5.2594': attribute type 10 has an invalid length.
[  848.880976][T15298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2590'.
[  848.891867][T15298] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2590'.
[  848.901216][T15298] netlink: 312 bytes leftover after parsing attributes in process `syz.3.2590'.
[  848.914540][  T794] input: gspca_pac7302 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input87
[  849.091955][T15319] bond0: (slave netdevsim0): Releasing backup interface
[  849.226980][T15319] team0: Port device netdevsim0 added
[  849.311362][    C1] gspca_pac7302 4-1:0.56: URB error -71, resubmitting
[  849.315153][T13468] usb 4-1: USB disconnect, device number 10
[  849.318273][    C1] gspca_main: Resubmit URB failed with error -19
[  849.381261][T15320] team0: Port device netdevsim0 removed
[  849.429989][T15320] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  850.154948][  T794] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  850.294932][   T30] audit: type=1800 audit(1767688001.326:289): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2601" name="bus" dev="ramfs" ino=61348 res=0 errno=0
[  850.324507][  T794] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  850.335010][T12820] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  850.343027][  T794] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  850.357136][  T794] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  850.366582][  T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.409319][  T794] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  850.468204][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: Permission denied
[  850.484008][  T794] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[  850.514490][T12820] usb 4-1: Using ep0 maxpacket: 8
[  850.534726][T12820] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  850.544479][T12820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.552715][T12820] usb 4-1: Product: syz
[  850.568116][T12820] usb 4-1: Manufacturer: syz
[  850.579096][T12820] usb 4-1: SerialNumber: syz
[  850.597699][T12820] usb 4-1: config 0 descriptor??
[  850.609566][T12820] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  850.659414][T15326] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  850.701745][  T794] usb 2-1: USB disconnect, device number 14
[  851.144514][T13468] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  851.168964][T15347] syzkaller0: entered promiscuous mode
[  851.174698][T15347] syzkaller0: entered allmulticast mode
[  851.182474][T15347] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2604'.
[  851.216227][  T794] usb 4-1: USB disconnect, device number 11
[  851.364684][T13468] usb 3-1: Using ep0 maxpacket: 8
[  851.383428][T13468] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  851.393269][T13468] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  851.401894][T13468] usb 3-1: Product: syz
[  851.406994][T13468] usb 3-1: Manufacturer: syz
[  851.411991][T13468] usb 3-1: SerialNumber: syz
[  851.445097][T13468] usb 3-1: config 0 descriptor??
[  851.459171][T15350] fuse: Unknown parameter 'fd0x0000000000000003'
[  851.769636][T13468] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  851.894458][  T794] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  851.973513][T13468] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  851.992248][T13468] usb 3-1: USB disconnect, device number 15
[  852.046764][  T794] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  852.061723][  T794] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  852.086939][  T794] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  852.105760][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  852.124134][  T794] usb 4-1: SerialNumber: syz
[  852.214561][   T10] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  852.231019][ T5970] usb 5-1: USB disconnect, device number 34
[  852.255776][T15326] delete_channel: no stack
[  852.362561][  T794] usb 4-1: 0:2 : does not exist
[  852.374783][   T10] usb 6-1: Using ep0 maxpacket: 16
[  852.426815][T15364] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  852.489119][T15363] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2609'.
[  852.526727][   T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  852.535083][   T10] usb 6-1: config 0 has no interface number 0
[  852.545270][   T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  852.575580][   T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  852.587467][   T10] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  852.598515][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  852.622562][  T794] usb 4-1: USB disconnect, device number 12
[  852.739721][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  852.765630][   T10] usb 6-1: config 0 descriptor??
[  853.002742][T15370] xt_bpf: check failed: parse error
[  853.495487][T13468] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  853.520491][   T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0073/input/input88
[  853.644537][T13468] usb 3-1: device descriptor read/64, error -71
[  853.693107][T15356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  853.704783][   T10] input: HID 28bd:0071 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.0073/input/input89
[  853.742469][T15356] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  853.838683][   T10] uclogic 0003:28BD:0071.0073: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1
[  853.931921][T13468] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  854.084480][T13468] usb 3-1: device descriptor read/64, error -71
[  854.265845][T13468] usb usb3-port1: attempt power cycle
[  854.527259][ T5920] usb 6-1: USB disconnect, device number 94
[  854.625503][T13468] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  854.706887][T13468] usb 3-1: device descriptor read/8, error -71
[  854.735494][ T5970] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  854.871361][   T30] audit: type=1800 audit(1767688005.896:290): pid=15389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2614" name="bus" dev="ramfs" ino=62063 res=0 errno=0
[  854.915800][ T5970] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  854.939212][ T5970] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  854.974477][T13468] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  854.987009][ T5970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  855.012924][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  855.018648][T13468] usb 3-1: device descriptor read/8, error -71
[  855.031191][ T5970] usb 2-1: Product: syz
[  855.047163][ T5970] usb 2-1: Manufacturer: syz
[  855.057583][ T5970] usb 2-1: SerialNumber: syz
[  855.104600][  T794] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  855.164818][T13468] usb usb3-port1: unable to enumerate USB device
[  855.206464][T15394] netlink: 'syz.5.2616': attribute type 1 has an invalid length.
[  855.266519][  T794] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  855.282138][  T794] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  855.314392][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  855.345114][T15394] 8021q: adding VLAN 0 to HW filter on device bond1
[  855.358809][  T794] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  855.371943][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.393730][  T794] usb 4-1: Product: syz
[  855.406103][  T794] usb 4-1: Manufacturer: syz
[  855.418708][  T794] usb 4-1: SerialNumber: syz
[  855.446788][  T794] usb 4-1: config 0 descriptor??
[  855.472524][T15390] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  855.500074][  T794] usb 4-1: ucan: probing device on interface #0
[  855.515933][  T794] usb 4-1: ucan: invalid endpoint configuration
[  855.545347][  T794] usb 4-1: ucan: probe failed; try to update the device firmware
[  857.014503][  T794] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  857.014530][T13468] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  857.164460][T13468] usb 6-1: Using ep0 maxpacket: 32
[  857.174182][T13468] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[  857.183112][T13468] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  857.194120][T13468] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  857.205075][T13468] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[  857.214131][T13468] usb 6-1: config 1 has no interface number 0
[  857.214205][  T794] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  857.223692][T13468] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  857.246489][T13468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.255673][  T794] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  857.292800][T13468] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[  857.295509][  T794] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  857.324189][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  857.355093][  T794] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  857.399693][  T794] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  857.404126][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  857.480690][T13468] snd_usb_pod 6-1:1.1: endpoint not available, using fallback values
[  857.490712][T13468] snd_usb_pod 6-1:1.1: invalid control EP
[  857.497549][T13468] snd_usb_pod 6-1:1.1: cannot start listening: -22
[  857.510438][T13468] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[  857.522753][T13468] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -22
[  857.593728][T15426] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  857.620497][  T794] usb 2-1: USB disconnect, device number 15
[  857.703218][T13468] usb 6-1: USB disconnect, device number 95
[  857.822648][ T5920] usb 4-1: USB disconnect, device number 13
[  858.046853][T15436] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  858.904451][T13468] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  859.064464][T13468] usb 4-1: Using ep0 maxpacket: 16
[  859.078921][T13468] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  859.104482][T13468] usb 4-1: config 0 has no interface number 0
[  859.111119][T13468] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  859.143198][T13468] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  859.162954][T13468] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  859.188519][T13468] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  859.200056][T15448] FAULT_INJECTION: forcing a failure.
[  859.200056][T15448] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  859.216448][T15448] CPU: 1 UID: 0 PID: 15448 Comm: syz.4.2628 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  859.216490][T15448] Tainted: [L]=SOFTLOCKUP
[  859.216500][T15448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  859.216514][T15448] Call Trace:
[  859.216524][T15448]  <TASK>
[  859.216535][T15448]  dump_stack_lvl+0xe8/0x150
[  859.216570][T15448]  should_fail_ex+0x414/0x560
[  859.216611][T15448]  _copy_to_user+0x31/0xb0
[  859.216642][T15448]  simple_read_from_buffer+0xe1/0x170
[  859.216676][T15448]  proc_fail_nth_read+0x1b3/0x220
[  859.216703][T15448]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  859.216730][T15448]  ? rw_verify_area+0x2a6/0x4d0
[  859.216763][T15448]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  859.216787][T15448]  vfs_read+0x200/0xa30
[  859.216807][T15448]  ? fdget_pos+0x247/0x320
[  859.216838][T15448]  ? __pfx___mutex_lock+0x10/0x10
[  859.216864][T15448]  ? __pfx_vfs_read+0x10/0x10
[  859.216886][T15448]  ? __fget_files+0x2a/0x420
[  859.216917][T15448]  ? __fget_files+0x3a0/0x420
[  859.216944][T15448]  ? __fget_files+0x2a/0x420
[  859.216980][T15448]  ksys_read+0x145/0x250
[  859.217002][T15448]  ? __pfx_ksys_read+0x10/0x10
[  859.217034][T15448]  __do_fast_syscall_32+0x1dc/0x570
[  859.217059][T15448]  ? lockdep_hardirqs_on+0x7b/0x110
[  859.217079][T15448]  ? do_fast_syscall_32+0x34/0x80
[  859.217104][T15448]  ? irqentry_exit+0x10f/0x670
[  859.217131][T15448]  do_fast_syscall_32+0x34/0x80
[  859.217156][T15448]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  859.217182][T15448] RIP: 0023:0xf7f57539
[  859.217202][T15448] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  859.217222][T15448] RSP: 002b:00000000f5446590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  859.217246][T15448] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5446620
[  859.217261][T15448] RDX: 000000000000000f RSI: 00000000f73e6ff4 RDI: 0000000000000000
[  859.217276][T15448] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  859.217288][T15448] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  859.217302][T15448] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  859.217334][T15448]  </TASK>
[  859.218683][T13468] usb 4-1: config 0 descriptor??
[  859.523797][   T30] audit: type=1800 audit(1767688010.536:291): pid=15449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2629" name="bus" dev="ramfs" ino=62281 res=0 errno=0
[  859.629213][ T5920] usb 3-1: USB disconnect, device number 20
[  859.662132][T15426] delete_channel: no stack
[  859.830500][T15458] xt_bpf: check failed: parse error
[  860.177788][T13468] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0074/input/input90
[  860.264472][  T794] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  860.276170][T13468] input: HID 28bd:0071 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:28BD:0071.0074/input/input91
[  860.346931][T13468] uclogic 0003:28BD:0071.0074: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.3-1/input1
[  860.372646][T15441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  860.403445][T15441] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  860.442512][  T794] usb 3-1: config 0 has an invalid interface number: 199 but max is 1
[  860.451519][  T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  860.468971][  T794] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  860.530793][  T794] usb 3-1: config 0 has no interface number 0
[  860.549897][  T794] usb 3-1: config 0 interface 199 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  860.586078][  T794] usb 3-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  860.621717][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  860.632658][  T794] usb 3-1: SerialNumber: syz
[  860.669509][  T794] usb 3-1: config 0 descriptor??
[  861.056178][  T794] uvcvideo 3-1:0.199: Found UVC 0.00 device <unnamed> (0002:0000)
[  861.081510][  T794] uvcvideo 3-1:0.199: No valid video chain found.
[  861.299717][ T5920] usb 4-1: USB disconnect, device number 14
[  861.316024][T13468] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  861.526713][T13468] usb 5-1: Using ep0 maxpacket: 32
[  861.547502][T13468] usb 5-1: config 0 has an invalid interface number: 56 but max is 0
[  861.588431][T13468] usb 5-1: config 0 has no interface number 0
[  861.603325][T13468] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d
[  861.614670][T13468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  861.634457][T13468] usb 5-1: Product: syz
[  861.638744][T13468] usb 5-1: Manufacturer: syz
[  861.645890][T13468] usb 5-1: SerialNumber: syz
[  861.796440][T13468] usb 5-1: config 0 descriptor??
[  861.843074][T13468] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  862.306774][T15482] netlink: 'syz.3.2636': attribute type 10 has an invalid length.
[  862.328216][ T5920] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  862.370254][T15483] netlink: 'syz.3.2636': attribute type 10 has an invalid length.
[  862.390994][T15482] bond0: (slave netdevsim0): Releasing backup interface
[  862.480468][T15482] team0: Port device netdevsim0 added
[  862.535508][T15483] team0: Port device netdevsim0 removed
[  862.563576][T15483] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  862.661615][ T5920] usb 2-1: Using ep0 maxpacket: 32
[  862.696086][ T5920] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  862.717643][T12820] usb 3-1: USB disconnect, device number 21
[  862.723630][ T5920] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  862.723661][ T5920] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  862.723683][ T5920] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  862.723708][ T5920] usb 2-1: config 1 has no interface number 0
[  862.790951][T15484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2635'.
[  862.833109][ T5920] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  862.851980][T15470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2634'.
[  862.868214][T15470] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2634'.
[  863.132085][T15470] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2634'.
[  863.151649][ T5920] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  863.222894][T13468] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110
[  863.243307][T13468] gspca_pac7302 5-1:0.56: probe with driver gspca_pac7302 failed with error -110
[  863.253097][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  863.307580][ T5920] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  863.516053][ T5920] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values
[  863.534944][ T5920] snd_usb_pod 2-1:1.1: invalid control EP
[  863.544954][ T5920] snd_usb_pod 2-1:1.1: cannot start listening: -22
[  863.551749][ T5920] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  863.575375][ T5920] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22
[  863.725219][ T5920] usb 2-1: USB disconnect, device number 16
[  863.746224][T12820] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  863.821998][T15496] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  863.944425][T12820] usb 3-1: Using ep0 maxpacket: 32
[  863.952754][T12820] usb 3-1: config 0 has an invalid interface number: 56 but max is 0
[  863.961694][T12820] usb 3-1: config 0 has no interface number 0
[  863.971872][T12820] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d
[  863.989181][T12820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.002348][T12820] usb 3-1: Product: syz
[  864.007860][T12820] usb 3-1: Manufacturer: syz
[  864.013573][T12820] usb 3-1: SerialNumber: syz
[  864.026335][T12820] usb 3-1: config 0 descriptor??
[  864.039383][T12820] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  864.064773][   T40] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  864.217623][   T40] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  864.229681][   T40] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  864.248679][   T40] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  864.278594][   T40] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  864.291629][   T40] usb 6-1: SerialNumber: syz
[  864.593851][   T40] usb 6-1: 0:2 : does not exist
[  864.633653][   T40] usb 6-1: USB disconnect, device number 96
[  864.735483][ T6034] udevd[6034]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  864.786905][ T5920] usb 5-1: USB disconnect, device number 35
[  865.077106][   T40] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  865.126535][T15511] input: syz0 as /devices/virtual/input/input92
[  865.176530][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'.
[  865.188179][T15490] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2638'.
[  865.444759][T12820] gspca_pac7302: reg_w() failed i: 78 v: 40 error -110
[  865.455196][T15490] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2638'.
[  865.464625][T12820] gspca_pac7302 3-1:0.56: probe with driver gspca_pac7302 failed with error -110
[  865.558546][T15510] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  865.571596][   T40] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  865.802143][   T40] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  865.825202][   T40] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  865.873538][   T40] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.923972][   T40] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  865.998940][   T40] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[  866.275853][T15501] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  867.343266][   T40] usb 3-1: USB disconnect, device number 22
[  867.479309][T15501] delete_channel: no stack
[  867.497640][ T5920] usb 2-1: USB disconnect, device number 17
[  867.825334][T15538] netlink: 'syz.3.2646': attribute type 10 has an invalid length.
[  867.875687][T15542] netlink: 'syz.3.2646': attribute type 10 has an invalid length.
[  867.972301][T15538] bond0: (slave netdevsim0): Releasing backup interface
[  868.028171][T15538] team0: Port device netdevsim0 added
[  868.090767][T15542] team0: Port device netdevsim0 removed
[  868.106262][T15542] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  868.557525][T13468] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  868.596970][T15545] fuse: Bad value for 'fd'
[  868.924240][T13468] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  868.961637][T13468] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  868.982898][T13468] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  869.014747][T13468] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  869.023280][T13468] usb 2-1: Product: syz
[  869.027892][T13468] usb 2-1: Manufacturer: syz
[  869.033372][T13468] usb 2-1: SerialNumber: syz
[  869.774488][   T40] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  869.934885][   T40] usb 4-1: Using ep0 maxpacket: 32
[  869.945865][   T40] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  869.957213][   T40] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  869.968426][   T40] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  869.999029][   T40] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  870.009281][   T40] usb 4-1: config 1 has no interface number 0
[  870.019638][   T40] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  870.035511][   T40] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  870.047499][   T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.081448][   T40] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  870.293514][T15564] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2655'.
[  870.315063][T12820] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  870.352635][   T40] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values
[  870.571483][T12820] usb 5-1: Using ep0 maxpacket: 32
[  870.586005][T12820] usb 5-1: config 0 has an invalid interface number: 56 but max is 0
[  870.598467][T12820] usb 5-1: config 0 has no interface number 0
[  870.611835][T12820] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d
[  870.624426][T12820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.633227][   T40] snd_usb_pod 4-1:1.1: invalid control EP
[  870.642842][   T40] snd_usb_pod 4-1:1.1: cannot start listening: -22
[  870.651601][T12820] usb 5-1: Product: syz
[  870.657050][T12820] usb 5-1: Manufacturer: syz
[  870.662702][   T40] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  870.670367][T12820] usb 5-1: SerialNumber: syz
[  870.682323][   T40] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22
[  870.699974][T12820] usb 5-1: config 0 descriptor??
[  870.737732][T12820] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  870.752852][   T40] usb 4-1: USB disconnect, device number 15
[  871.213676][ T5920] usb 2-1: USB disconnect, device number 18
[  871.858301][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2653'.
[  871.895630][T15556] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2653'.
[  871.937638][T15556] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2653'.
[  871.958897][T12820] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input93
[  872.405439][T15578] input: syz0 as /devices/virtual/input/input94
[  872.729790][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2662'.
[  872.836362][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.843393][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.850645][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.857832][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.865141][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.872136][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.879627][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.886701][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.893805][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.900936][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.907904][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.914896][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.922413][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.929404][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.936529][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.943596][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.950583][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.957665][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.964690][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.971690][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.978694][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.985687][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.992744][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  872.999739][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.006799][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.013785][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.020779][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.028079][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.035092][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.042124][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.049239][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.056272][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.063320][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.070303][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.077280][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.084245][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.091288][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.098303][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.105308][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.112407][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.119524][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.126527][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.133541][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.140538][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.147624][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.154636][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.161773][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.168799][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.175915][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.183076][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.190106][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.197085][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.204074][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.211146][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.218164][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.225219][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.232391][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.239573][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.246601][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.253725][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.260702][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.267889][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.274994][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.281996][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.289102][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.296196][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.303228][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.310244][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.317325][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.324504][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.331683][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.338674][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.345874][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.352839][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.359832][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.366867][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.374064][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.381094][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.388083][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.395083][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.402130][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.409212][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.416203][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.423137][ T5970] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  873.430852][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.437761][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.444689][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.451578][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.458510][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.465414][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.472275][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.479172][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.486302][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.493213][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.500177][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.507052][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.513964][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.520929][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.527842][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.534756][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.541647][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.548710][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.555724][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.562594][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.569482][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.576338][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.583175][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.590135][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.597009][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.603928][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.610922][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.617822][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.624715][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.631587][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.638496][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.645390][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.652234][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.659241][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.666185][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.673045][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.679912][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.686786][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.693640][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.700556][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.707446][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.714306][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.721325][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.728292][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.735379][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.742221][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.749174][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.756052][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.762891][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.769821][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.776927][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.783773][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.790707][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.797583][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.804697][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.811727][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.818610][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.825541][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.832372][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.839226][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.846111][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.852986][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.859831][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.866693][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.873964][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.880814][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.887771][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.894715][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.901623][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.908661][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.915525][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.922556][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.929523][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.936444][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.943249][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.950107][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.956962][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.963786][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.970663][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.977504][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.984367][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.991303][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  873.998302][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.005180][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.012358][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.019316][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.026235][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.033076][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.040070][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.046975][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.053857][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.060819][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.067711][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.074566][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.081449][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.088477][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.095369][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.102243][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.109122][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.115985][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.122922][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.129891][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.136767][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.143597][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.150617][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.157671][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.164563][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.171420][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.178281][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.185147][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.192140][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.199032][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.206217][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.213107][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.220092][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.227033][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.233880][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.240745][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.247648][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.254693][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.261699][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.268684][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.275640][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.282474][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.289440][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.296314][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.303227][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.310092][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.316982][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.323845][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.330763][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.337677][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.344710][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.351759][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.358725][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.365672][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.372595][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.379453][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.386688][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.393649][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.400553][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.407457][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.414466][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.421354][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.428245][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.435137][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.442066][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.449090][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.456229][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.463149][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.470048][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.477019][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.483894][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.490965][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.497837][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.504798][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.511769][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.518666][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.525554][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.532511][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.539750][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.546681][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.553542][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.560439][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.567343][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.574184][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.581165][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.588077][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.594954][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.601824][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.608738][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.615716][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.622618][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.629594][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.636474][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.643315][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.650197][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.657167][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.664004][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.670886][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.677768][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.684694][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.691518][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.698373][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.705242][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.712076][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.718977][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.725868][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.732723][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.739600][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.746679][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.753537][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.760514][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.767492][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.774368][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.781277][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.788154][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.795103][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.801960][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.808930][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.815893][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.822723][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.829638][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.836503][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.843377][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.850276][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.857244][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.864084][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.870992][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.877954][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.884886][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.891763][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.898774][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.905707][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.912638][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.919501][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.926559][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.933402][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.940286][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.947152][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.953970][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.960853][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.967827][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.974718][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.981580][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.988564][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  874.995565][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.002416][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.009330][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.016207][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.023027][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.029941][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.036880][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.043758][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.050731][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.057639][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.064536][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.071417][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.078492][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.085364][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.092292][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.099346][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.106222][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.113217][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.120067][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.126922][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.133745][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.140589][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.147453][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.154430][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.161530][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.168442][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.175294][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.182194][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.189045][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.195902][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.202713][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.209581][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.216435][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.223342][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.230336][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.237180][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.244048][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.251055][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.257918][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.268630][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.275830][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.282715][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.289643][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.296590][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.303447][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.310316][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.317200][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.324022][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.330965][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.337896][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.344939][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.351862][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.358726][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.365615][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.372592][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.379531][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.386935][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.394953][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.402220][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.409746][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.416812][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.423661][   T40] usb 5-1: USB disconnect, device number 36
[  875.429841][    C1] gspca_pac7302 5-1:0.56: URB error -71, resubmitting
[  875.429857][    C1] gspca_main: Resubmit URB failed with error -19
[  875.444961][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  875.451306][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  875.499132][T12820] usb 6-1: new full-speed USB device number 97 using dummy_hcd
[  875.712513][T15590] delete_channel: no stack
[  875.885670][ T5920] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  876.189614][ T5920] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  876.209137][ T5920] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  876.248873][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  876.281264][T15613] netlink: 'syz.4.2663': attribute type 10 has an invalid length.
[  876.314016][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  876.528763][T15613] bond0: (slave netdevsim0): Releasing backup interface
[  876.803026][T15613] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  876.810403][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  876.820603][T15615] netlink: 'syz.4.2663': attribute type 10 has an invalid length.
[  876.940921][ T5920] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  876.956738][ T5920] usb 3-1: USB disconnect, device number 23
[  877.001493][T15595] delete_channel: no stack
[  877.013310][ T5884] udevd[5884]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  877.077276][T15613] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  877.128742][T15613] team0: Port device netdevsim0 added
[  877.554873][T15615] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  877.972130][T15615] team0: Port device netdevsim0 removed
[  878.035526][T15615] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  878.063458][T15615] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  878.394458][ T5970] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  878.599202][ T5970] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  878.646871][ T5970] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  878.730900][ T5970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  878.740209][   T40] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  878.754665][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  878.790724][ T5970] usb 6-1: Product: syz
[  878.798096][ T5970] usb 6-1: Manufacturer: syz
[  878.813582][ T5970] usb 6-1: SerialNumber: syz
[  878.904475][   T40] usb 5-1: Using ep0 maxpacket: 32
[  878.911611][   T40] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  878.924434][   T40] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  879.363292][   T40] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  879.404057][   T40] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  879.439023][   T40] usb 5-1: config 1 has no interface number 0
[  879.456280][   T40] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17
[  879.494492][   T40] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  879.514646][   T40] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.570729][   T40] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  879.782354][   T40] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values
[  879.796429][   T40] snd_usb_pod 5-1:1.1: invalid control EP
[  879.796452][   T40] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  879.796683][   T40] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  879.798446][   T40] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22
[  880.001209][T13468] usb 5-1: USB disconnect, device number 37
[  880.084693][ T5920] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  880.244653][ T5920] usb 2-1: Using ep0 maxpacket: 32
[  880.251875][ T5920] usb 2-1: config 0 has an invalid interface number: 56 but max is 0
[  880.260395][ T5920] usb 2-1: config 0 has no interface number 0
[  880.268812][ T5920] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d
[  880.278342][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.286545][ T5920] usb 2-1: Product: syz
[  880.290799][ T5920] usb 2-1: Manufacturer: syz
[  880.296381][ T5920] usb 2-1: SerialNumber: syz
[  880.303334][ T5920] usb 2-1: config 0 descriptor??
[  880.313418][ T5920] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  880.807090][T15654] fuse: Bad value for 'fd'
[  881.096491][   T10] usb 6-1: USB disconnect, device number 98
[  881.164218][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2674'.
[  881.189362][T15659] netlink: 'syz.2.2676': attribute type 10 has an invalid length.
[  881.205142][T15647] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2674'.
[  881.217075][T15647] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2674'.
[  881.298777][T15660] netlink: 'syz.2.2676': attribute type 10 has an invalid length.
[  881.312255][T15659] bond0: (slave netdevsim0): Releasing backup interface
[  881.323136][ T5920] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input95
[  881.403877][T15660] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  882.106542][    C0] gspca_pac7302 2-1:0.56: URB error -71, resubmitting
[  882.110087][   T40] usb 2-1: USB disconnect, device number 19
[  882.113503][    C0] gspca_main: Resubmit URB failed with error -19
[  882.791591][T15672] fuse: blksize only supported for fuseblk
[  883.347148][T15685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2680'.
[  883.760658][T15694] netlink: 'syz.3.2681': attribute type 10 has an invalid length.
[  884.005810][T15696] netlink: 'syz.3.2681': attribute type 10 has an invalid length.
[  884.028089][T15694] bond0: (slave netdevsim0): Releasing backup interface
[  884.060230][T15694] team0: Port device netdevsim0 added
[  884.527400][T15696] team0: Port device netdevsim0 removed
[  884.586533][T15696] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  885.283442][T15708] netlink: 'syz.4.2685': attribute type 10 has an invalid length.
[  885.350295][T15709] netlink: 'syz.4.2685': attribute type 10 has an invalid length.
[  885.364459][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  885.498558][T15708] bond0: (slave netdevsim0): Releasing backup interface
[  885.518747][T15708] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  885.548850][T15708] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  885.563213][T15708] team0: Port device netdevsim0 added
[  885.574735][T15709] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  885.722019][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  885.728955][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  885.774014][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.812741][T15709] team0: Port device netdevsim0 removed
[  885.818964][   T10] usb 2-1: config 0 descriptor??
[  886.100212][T15709] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  886.185659][T15709] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  886.296811][T15714] netlink: 'syz.3.2687': attribute type 10 has an invalid length.
[  886.330029][T15714] bond0: (slave netdevsim0): Releasing backup interface
[  886.352540][   T10] arvo 0003:1E7D:30D4.0075: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0
[  886.365807][T15715] netlink: 'syz.3.2687': attribute type 10 has an invalid length.
[  886.389529][T15714] team0: Port device netdevsim0 added
[  886.606517][T15715] team0: Port device netdevsim0 removed
[  886.623351][T15715] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  887.467200][T15723] FAULT_INJECTION: forcing a failure.
[  887.467200][T15723] name failslab, interval 1, probability 0, space 0, times 0
[  887.541121][T15723] CPU: 0 UID: 0 PID: 15723 Comm: syz.5.2689 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  887.541156][T15723] Tainted: [L]=SOFTLOCKUP
[  887.541164][T15723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  887.541177][T15723] Call Trace:
[  887.541186][T15723]  <TASK>
[  887.541195][T15723]  dump_stack_lvl+0xe8/0x150
[  887.541233][T15723]  should_fail_ex+0x414/0x560
[  887.541269][T15723]  should_failslab+0xa8/0x100
[  887.541295][T15723]  kmem_cache_alloc_noprof+0x88/0x710
[  887.541325][T15723]  ? __netlink_lookup+0xbd/0x8a0
[  887.541353][T15723]  ? skb_clone+0x212/0x3a0
[  887.541383][T15723]  skb_clone+0x212/0x3a0
[  887.541411][T15723]  __netlink_deliver_tap+0x404/0x850
[  887.541448][T15723]  ? netlink_deliver_tap+0x2e/0x1b0
[  887.541475][T15723]  netlink_deliver_tap+0x19c/0x1b0
[  887.541501][T15723]  netlink_unicast+0x7fa/0x9e0
[  887.541532][T15723]  ? __pfx_netlink_unicast+0x10/0x10
[  887.541553][T15723]  ? __alloc_skb+0x198/0x3a0
[  887.541574][T15723]  ? netlink_sendmsg+0x642/0xb30
[  887.541597][T15723]  ? skb_put+0x11b/0x210
[  887.541622][T15723]  netlink_sendmsg+0x805/0xb30
[  887.541655][T15723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  887.541683][T15723]  ? __import_iovec+0x5d4/0x7f0
[  887.541705][T15723]  ? aa_sock_msg_perm+0xf1/0x1b0
[  887.541732][T15723]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  887.541750][T15723]  ? __pfx_netlink_sendmsg+0x10/0x10
[  887.541785][T15723]  __sock_sendmsg+0x21c/0x270
[  887.541816][T15723]  ____sys_sendmsg+0x505/0x820
[  887.541846][T15723]  ? __pfx_____sys_sendmsg+0x10/0x10
[  887.541875][T15723]  ? kstrtouint+0x6e/0xe0
[  887.541911][T15723]  ___sys_sendmsg+0x21f/0x2a0
[  887.541937][T15723]  ? __pfx____sys_sendmsg+0x10/0x10
[  887.541960][T15723]  ? get_pid_task+0x20/0x1f0
[  887.541985][T15723]  ? get_pid_task+0x20/0x1f0
[  887.542007][T15723]  ? get_pid_task+0x20/0x1f0
[  887.542070][T15723]  ? __fget_files+0x2a/0x420
[  887.542097][T15723]  ? __fget_files+0x3a0/0x420
[  887.542139][T15723]  __sys_sendmsg+0x164/0x220
[  887.542169][T15723]  ? __pfx___sys_sendmsg+0x10/0x10
[  887.542204][T15723]  ? rcu_is_watching+0x15/0xb0
[  887.542240][T15723]  __do_fast_syscall_32+0x1dc/0x570
[  887.542266][T15723]  ? lockdep_hardirqs_on+0x7b/0x110
[  887.542288][T15723]  ? do_fast_syscall_32+0x34/0x80
[  887.542311][T15723]  ? irqentry_exit+0x10f/0x670
[  887.542336][T15723]  do_fast_syscall_32+0x34/0x80
[  887.542362][T15723]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  887.542389][T15723] RIP: 0023:0xf7f03539
[  887.542410][T15723] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  887.542430][T15723] RSP: 002b:00000000f53f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  887.542451][T15723] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  887.542466][T15723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  887.542480][T15723] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  887.542492][T15723] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  887.542505][T15723] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  887.542539][T15723]  </TASK>
[  888.050848][   T10] usb 2-1: USB disconnect, device number 20
[  888.244541][ T5970] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  888.334510][   T40] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  888.409428][ T5970] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  888.430227][T15741] fuse: Bad value for 'fd'
[  888.455238][ T5970] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  888.468991][ T5970] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  888.480757][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  888.490729][   T40] usb 6-1: Using ep0 maxpacket: 32
[  888.500933][   T40] usb 6-1: config 0 has an invalid interface number: 56 but max is 0
[  888.514821][   T40] usb 6-1: config 0 has no interface number 0
[  888.540063][ T5970] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  888.549156][   T40] usb 6-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=b8.4d
[  888.558745][   T40] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.580855][   T40] usb 6-1: Product: syz
[  888.590687][   T40] usb 6-1: Manufacturer: syz
[  888.604512][   T40] usb 6-1: SerialNumber: syz
[  888.627919][   T40] usb 6-1: config 0 descriptor??
[  888.635823][ T5970] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  888.653145][   T40] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  888.735794][T15725] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  889.605299][   T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  889.656029][T15747] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2696'.
[  889.725333][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2690'.
[  889.737653][T15732] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2690'.
[  889.751665][T15732] netlink: 312 bytes leftover after parsing attributes in process `syz.5.2690'.
[  889.764397][   T10] usb 2-1: Using ep0 maxpacket: 32
[  889.773974][   T40] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input96
[  889.777918][   T10] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  889.793372][   T10] usb 2-1: config 0 has no interface number 0
[  889.800351][   T10] usb 2-1: config 0 interface 89 has no altsetting 0
[  889.820142][   T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  889.841190][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.866226][   T10] usb 2-1: Product: syz
[  889.876235][   T10] usb 2-1: Manufacturer: syz
[  889.886273][   T10] usb 2-1: SerialNumber: syz
[  889.916278][   T10] usb 2-1: config 0 descriptor??
[  889.936111][   T10] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  889.947001][   T10] em28xx 2-1:0.89: Video interface 89 found: bulk
[  890.137034][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.144186][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.151580][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.159029][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.166240][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.173696][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.180855][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.188069][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.195444][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.202574][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.210039][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.218102][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.225309][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.232312][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.239366][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.246384][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.253397][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.260430][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.267558][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.274766][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.281814][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.288964][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.296011][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.303041][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.310146][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.317227][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.324433][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.331452][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.338718][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.345879][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.353042][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.360033][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.367033][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.374047][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.381108][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.388108][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.395202][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.402208][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.409206][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.416203][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.423209][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.430329][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.437461][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.444459][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.451567][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.458683][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.465756][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.472790][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.479828][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.487208][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.494149][   T40] usb 6-1: USB disconnect, device number 99
[  890.494236][    C1] gspca_pac7302 6-1:0.56: URB error -71, resubmitting
[  890.494255][    C1] gspca_main: Resubmit URB failed with error -19
[  890.600067][ T5970] usb 3-1: USB disconnect, device number 24
[  890.616657][T15725] delete_channel: no stack
[  890.690833][   T10] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  890.897579][T15757] fuse: Bad value for 'fd'
[  890.927101][ T5920] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  891.097154][ T5920] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  891.122630][ T5920] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  891.151890][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.188148][ T5920] usb 5-1: config 0 descriptor??
[  891.218485][ T5920] pwc: Askey VC010 type 2 USB webcam detected.
[  891.240510][T15759] futex_wake_op: syz.1.2695 tries to shift op by 32; fix this program
[  891.524548][   T10] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  891.546517][   T10] em28xx 2-1:0.89: board has no eeprom
[  891.734423][ T5970] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  892.064944][ T5970] usb 6-1: Using ep0 maxpacket: 16
[  892.076161][ T5970] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  892.090318][ T5970] usb 6-1: config 0 interface 0 has no altsetting 0
[  892.107074][ T5970] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  892.129864][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.274004][ T5920] pwc: recv_control_msg error -32 req 02 val 2b00
[  892.365973][ T5920] pwc: recv_control_msg error -71 req 02 val 2700
[  892.373345][ T5920] pwc: recv_control_msg error -71 req 02 val 2c00
[  892.416672][ T5920] pwc: recv_control_msg error -71 req 04 val 1000
[  892.441709][ T5920] pwc: recv_control_msg error -71 req 04 val 1300
[  892.448580][ T5970] usb 6-1: config 0 descriptor??
[  892.467015][ T5920] pwc: recv_control_msg error -71 req 04 val 1400
[  892.500737][ T5920] pwc: recv_control_msg error -71 req 02 val 2000
[  892.521845][ T5920] pwc: recv_control_msg error -71 req 02 val 2100
[  892.552406][ T5920] pwc: recv_control_msg error -71 req 04 val 1500
[  892.576946][ T5920] pwc: recv_control_msg error -71 req 02 val 2500
[  892.602546][ T5920] pwc: recv_control_msg error -71 req 02 val 2400
[  892.634636][ T5920] pwc: recv_control_msg error -71 req 02 val 2600
[  892.657847][ T5920] pwc: recv_control_msg error -71 req 02 val 2900
[  892.678693][ T5920] pwc: recv_control_msg error -71 req 02 val 2800
[  892.724976][ T5920] pwc: recv_control_msg error -71 req 04 val 1100
[  892.753996][ T5920] pwc: recv_control_msg error -71 req 04 val 1200
[  892.764531][   T10] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  892.773058][   T10] em28xx 2-1:0.89: analog set to bulk mode.
[  892.791346][ T5920] pwc: Registered as video103.
[  892.797704][T13468] em28xx 2-1:0.89: Registering V4L2 extension
[  892.847730][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input97
[  892.906479][   T10] usb 2-1: USB disconnect, device number 21
[  892.947556][ T5920] usb 5-1: USB disconnect, device number 38
[  892.988550][   T10] em28xx 2-1:0.89: Disconnecting em28xx
[  893.000534][T13468] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  893.018898][ T5970] nzxt-smart2 0003:1E71:2009.0076: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0
[  893.072847][T13468] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  893.114448][T13468] em28xx 2-1:0.89: No AC97 audio processor
[  893.175600][T13468] usb 2-1: Decoder not found
[  893.180279][T13468] em28xx 2-1:0.89: failed to create media graph
[  893.225962][T13468] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  893.315470][T13468] em28xx 2-1:0.89: Registering snapshot button...
[  893.322478][T15770] ==================================================================
[  893.330645][T15770] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  893.338077][T15770] Read of size 8 at addr ffff88807c128740 by task v4l_id/15770
[  893.345757][T15770] 
[  893.348120][T15770] CPU: 0 UID: 0 PID: 15770 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  893.348152][T15770] Tainted: [L]=SOFTLOCKUP
[  893.348161][T15770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  893.348175][T15770] Call Trace:
[  893.348184][T15770]  <TASK>
[  893.348194][T15770]  dump_stack_lvl+0xe8/0x150
[  893.348233][T15770]  print_report+0xca/0x240
[  893.348257][T15770]  ? v4l2_fh_open+0xac/0x420
[  893.348287][T15770]  kasan_report+0x118/0x150
[  893.348315][T15770]  ? v4l2_fh_open+0xac/0x420
[  893.348349][T15770]  v4l2_fh_open+0xac/0x420
[  893.348381][T15770]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  893.348409][T15770]  em28xx_v4l2_open+0x157/0x9a0
[  893.348440][T15770]  ? do_raw_spin_lock+0x121/0x290
[  893.348474][T15770]  v4l2_open+0x1bf/0x3a0
[  893.348510][T15770]  chrdev_open+0x4cc/0x5e0
[  893.348536][T15770]  ? __pfx_chrdev_open+0x10/0x10
[  893.348561][T15770]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  893.348597][T15770]  ? __pfx_chrdev_open+0x10/0x10
[  893.348620][T15770]  do_dentry_open+0x7ce/0x1420
[  893.348655][T15770]  vfs_open+0x3b/0x340
[  893.348681][T15770]  ? path_openat+0x33f3/0x3dd0
[  893.348702][T15770]  path_openat+0x340e/0x3dd0
[  893.348728][T15770]  ? __pfx_stack_trace_save+0x10/0x10
[  893.348765][T15770]  ? __pfx_filemap_map_pages+0x10/0x10
[  893.348790][T15770]  ? kmem_cache_alloc_noprof+0x37d/0x710
[  893.348824][T15770]  ? getname_flags+0xb8/0x540
[  893.348850][T15770]  ? __pfx_path_openat+0x10/0x10
[  893.348871][T15770]  ? __lock_acquire+0x6b6/0x2cf0
[  893.348900][T15770]  do_filp_open+0x1fa/0x410
[  893.348921][T15770]  ? __pfx_do_filp_open+0x10/0x10
[  893.348951][T15770]  ? _raw_spin_unlock+0x28/0x50
[  893.348984][T15770]  ? alloc_fd+0x64c/0x6c0
[  893.349015][T15770]  do_sys_openat2+0x121/0x200
[  893.349046][T15770]  ? __pfx_do_sys_openat2+0x10/0x10
[  893.349075][T15770]  ? exc_page_fault+0x71/0xd0
[  893.349098][T15770]  ? do_user_addr_fault+0xc85/0x1380
[  893.349123][T15770]  __x64_sys_openat+0x138/0x170
[  893.349156][T15770]  do_syscall_64+0xec/0xf80
[  893.349178][T15770]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  893.349210][T15770]  ? trace_irq_disable+0x37/0x100
[  893.349240][T15770]  ? clear_bhb_loop+0x60/0xb0
[  893.349265][T15770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  893.349287][T15770] RIP: 0033:0x7fc4502a7407
[  893.349308][T15770] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  893.349328][T15770] RSP: 002b:00007ffdb87c8de0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  893.349352][T15770] RAX: ffffffffffffffda RBX: 00007fc450997880 RCX: 00007fc4502a7407
[  893.349369][T15770] RDX: 0000000000000000 RSI: 00007ffdb87caf1d RDI: ffffffffffffff9c
[  893.349386][T15770] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  893.349400][T15770] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  893.349415][T15770] R13: 00007ffdb87c9030 R14: 00007fc450afe000 R15: 000055a2b549c4d8
[  893.349441][T15770]  </TASK>
[  893.349449][T15770] 
[  893.647938][T15770] Allocated by task 13468:
[  893.652427][T15770]  kasan_save_track+0x3e/0x80
[  893.657148][T15770]  __kasan_kmalloc+0x93/0xb0
[  893.661953][T15770]  __kmalloc_cache_noprof+0x3e2/0x700
[  893.667467][T15770]  em28xx_v4l2_init+0x10b/0x2e70
[  893.672455][T15770]  em28xx_init_extension+0x120/0x1c0
[  893.678245][T15770]  process_scheduled_works+0xad1/0x1770
[  893.683847][T15770]  worker_thread+0x8a0/0xda0
[  893.688483][T15770]  kthread+0x711/0x8a0
[  893.692591][T15770]  ret_from_fork+0x510/0xa50
[  893.697438][T15770]  ret_from_fork_asm+0x1a/0x30
[  893.702277][T15770] 
[  893.704712][T15770] Freed by task 13468:
[  893.708906][T15770]  kasan_save_track+0x3e/0x80
[  893.713643][T15770]  kasan_save_free_info+0x46/0x50
[  893.718797][T15770]  __kasan_slab_free+0x5c/0x80
[  893.723614][T15770]  kfree+0x1c0/0x660
[  893.727579][T15770]  em28xx_v4l2_init+0x1683/0x2e70
[  893.732646][T15770]  em28xx_init_extension+0x120/0x1c0
[  893.737988][T15770]  process_scheduled_works+0xad1/0x1770
[  893.743573][T15770]  worker_thread+0x8a0/0xda0
[  893.748211][T15770]  kthread+0x711/0x8a0
[  893.752313][T15770]  ret_from_fork+0x510/0xa50
[  893.756922][T15770]  ret_from_fork_asm+0x1a/0x30
[  893.761709][T15770] 
[  893.764077][T15770] The buggy address belongs to the object at ffff88807c128000
[  893.764077][T15770]  which belongs to the cache kmalloc-8k of size 8192
[  893.778388][T15770] The buggy address is located 1856 bytes inside of
[  893.778388][T15770]  freed 8192-byte region [ffff88807c128000, ffff88807c12a000)
[  893.792435][T15770] 
[  893.794846][T15770] The buggy address belongs to the physical page:
[  893.801297][T15770] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c128
[  893.810098][T15770] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  893.818732][T15770] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  893.826399][T15770] page_type: f5(slab)
[  893.830431][T15770] raw: 00fff00000000040 ffff88813ffa7280 dead000000000100 dead000000000122
[  893.839096][T15770] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  893.847722][T15770] head: 00fff00000000040 ffff88813ffa7280 dead000000000100 dead000000000122
[  893.856427][T15770] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  893.865191][T15770] head: 00fff00000000003 ffffea0001f04a01 00000000ffffffff 00000000ffffffff
[  893.874183][T15770] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  893.883418][T15770] page dumped because: kasan: bad access detected
[  893.889873][T15770] page_owner tracks the page as allocated
[  893.895602][T15770] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 15167, tgid 15157 (syz.1.2551), ts 836493643623, free_ts 835267516425
[  893.918760][T15770]  post_alloc_hook+0x234/0x290
[  893.923579][T15770]  get_page_from_freelist+0x24e0/0x2580
[  893.929170][T15770]  __alloc_frozen_pages_noprof+0x181/0x370
[  893.935018][T15770]  alloc_pages_mpol+0x232/0x4a0
[  893.939935][T15770]  allocate_slab+0x86/0x3b0
[  893.944492][T15770]  ___slab_alloc+0xe53/0x1820
[  893.949220][T15770]  __slab_alloc+0x65/0x100
[  893.953684][T15770]  __kmalloc_noprof+0x47d/0x800
[  893.958558][T15770]  cache_create_net+0x92/0x260
[  893.963443][T15770]  gss_svc_init_net+0x58/0x570
[  893.968237][T15770]  ops_init+0x35c/0x5c0
[  893.972425][T15770]  setup_net+0x110/0x330
[  893.976770][T15770]  copy_net_ns+0x3e3/0x570
[  893.981399][T15770]  create_new_namespaces+0x3e7/0x6a0
[  893.987257][T15770]  unshare_nsproxy_namespaces+0x11c/0x170
[  893.993110][T15770]  ksys_unshare+0x4c8/0x8c0
[  893.997797][T15770] page last free pid 15160 tgid 15159 stack trace:
[  894.004353][T15770]  __free_frozen_pages+0xbc8/0xd30
[  894.009513][T15770]  __put_partials+0x146/0x170
[  894.014232][T15770]  __slab_free+0x294/0x320
[  894.018704][T15770]  qlist_free_all+0x97/0x100
[  894.023365][T15770]  kasan_quarantine_reduce+0x148/0x160
[  894.028865][T15770]  __kasan_slab_alloc+0x22/0x80
[  894.034167][T15770]  __kmalloc_node_track_caller_noprof+0x526/0x820
[  894.040640][T15770]  kstrdup+0x42/0x100
[  894.044707][T15770]  __kernfs_new_node+0x9c/0x8a0
[  894.049698][T15770]  kernfs_new_node+0x102/0x210
[  894.054707][T15770]  kernfs_create_link+0xa7/0x200
[  894.059690][T15770]  sysfs_do_create_link_sd+0x83/0x110
[  894.065113][T15770]  module_add_driver+0x253/0x310
[  894.070278][T15770]  bus_add_driver+0x391/0x670
[  894.076062][T15770]  driver_register+0x23a/0x320
[  894.080868][T15770]  usb_gadget_register_driver_owner+0xf9/0x270
[  894.087222][T15770] 
[  894.090099][T15770] Memory state around the buggy address:
[  894.095895][T15770]  ffff88807c128600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  894.104000][T15770]  ffff88807c128680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  894.112293][T15770] >ffff88807c128700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  894.120631][T15770]                                            ^
[  894.126833][T15770]  ffff88807c128780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  894.135134][T15770]  ffff88807c128800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  894.143312][T15770] ==================================================================
[  894.178241][T13468] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input98
[  894.202932][T15762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  894.239842][T13468] em28xx 2-1:0.89: Remote control support is not available for this card.
[  894.262024][   T10] em28xx 2-1:0.89: Closing input extension
[  894.269462][   T10] em28xx 2-1:0.89: Deregistering snapshot button
[  894.296920][T15770] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  894.304234][T15770] CPU: 0 UID: 0 PID: 15770 Comm: v4l_id Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  894.314966][T15770] Tainted: [L]=SOFTLOCKUP
[  894.319327][T15770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  894.329444][T15770] Call Trace:
[  894.332768][T15770]  <TASK>
[  894.335716][T15770]  vpanic+0x1e0/0x670
[  894.339719][T15770]  panic+0xb9/0xc0
[  894.343461][T15770]  ? __pfx_panic+0x10/0x10
[  894.347912][T15770]  ? preempt_schedule_common+0x83/0xd0
[  894.353447][T15770]  ? v4l2_fh_open+0xac/0x420
[  894.358088][T15770]  check_panic_on_warn+0x89/0xb0
[  894.363104][T15770]  ? v4l2_fh_open+0xac/0x420
[  894.367749][T15770]  end_report+0x6f/0x140
[  894.372031][T15770]  kasan_report+0x129/0x150
[  894.376605][T15770]  ? v4l2_fh_open+0xac/0x420
[  894.381222][T15770]  v4l2_fh_open+0xac/0x420
[  894.385663][T15770]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  894.391719][T15770]  em28xx_v4l2_open+0x157/0x9a0
[  894.396626][T15770]  ? do_raw_spin_lock+0x121/0x290
[  894.401739][T15770]  v4l2_open+0x1bf/0x3a0
[  894.406158][T15770]  chrdev_open+0x4cc/0x5e0
[  894.410644][T15770]  ? __pfx_chrdev_open+0x10/0x10
[  894.415639][T15770]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  894.422180][T15770]  ? __pfx_chrdev_open+0x10/0x10
[  894.427174][T15770]  do_dentry_open+0x7ce/0x1420
[  894.432005][T15770]  vfs_open+0x3b/0x340
[  894.436117][T15770]  ? path_openat+0x33f3/0x3dd0
[  894.440920][T15770]  path_openat+0x340e/0x3dd0
[  894.445583][T15770]  ? __pfx_stack_trace_save+0x10/0x10
[  894.451020][T15770]  ? __pfx_filemap_map_pages+0x10/0x10
[  894.456516][T15770]  ? kmem_cache_alloc_noprof+0x37d/0x710
[  894.462208][T15770]  ? getname_flags+0xb8/0x540
[  894.467030][T15770]  ? __pfx_path_openat+0x10/0x10
[  894.472031][T15770]  ? __lock_acquire+0x6b6/0x2cf0
[  894.477106][T15770]  do_filp_open+0x1fa/0x410
[  894.481758][T15770]  ? __pfx_do_filp_open+0x10/0x10
[  894.486943][T15770]  ? _raw_spin_unlock+0x28/0x50
[  894.491841][T15770]  ? alloc_fd+0x64c/0x6c0
[  894.496207][T15770]  do_sys_openat2+0x121/0x200
[  894.501138][T15770]  ? __pfx_do_sys_openat2+0x10/0x10
[  894.506419][T15770]  ? exc_page_fault+0x71/0xd0
[  894.511153][T15770]  ? do_user_addr_fault+0xc85/0x1380
[  894.516484][T15770]  __x64_sys_openat+0x138/0x170
[  894.521407][T15770]  do_syscall_64+0xec/0xf80
[  894.526076][T15770]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  894.532278][T15770]  ? trace_irq_disable+0x37/0x100
[  894.537368][T15770]  ? clear_bhb_loop+0x60/0xb0
[  894.542100][T15770]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  894.548155][T15770] RIP: 0033:0x7fc4502a7407
[  894.552607][T15770] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  894.572444][T15770] RSP: 002b:00007ffdb87c8de0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  894.580992][T15770] RAX: ffffffffffffffda RBX: 00007fc450997880 RCX: 00007fc4502a7407
[  894.589045][T15770] RDX: 0000000000000000 RSI: 00007ffdb87caf1d RDI: ffffffffffffff9c
[  894.597176][T15770] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  894.605269][T15770] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  894.613307][T15770] R13: 00007ffdb87c9030 R14: 00007fc450afe000 R15: 000055a2b549c4d8
[  894.621337][T15770]  </TASK>
[  894.625017][T15770] Kernel Offset: disabled
[  894.629373][T15770] Rebooting in 86400 seconds..