last executing test programs:

52m48.219864897s ago: executing program 1 (id=98):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
write$binfmt_aout(r1, 0x0, 0xffffffdb)

52m47.546356552s ago: executing program 1 (id=101):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x65, 0x0, 0xf, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0xffff, 0x0, 0x0, {[@mss={0x2, 0x4, 0x80}]}}}}}}}, 0x0)

52m47.079266688s ago: executing program 1 (id=103):
r0 = epoll_create(0x7)
r1 = epoll_create1(0x0)
r2 = epoll_create(0x7)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0))
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100))
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x60000000})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000080)={0x1008})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000))

52m46.872978401s ago: executing program 1 (id=104):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

52m45.864340407s ago: executing program 1 (id=107):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
userfaultfd(0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0, 0x7}, 0x94)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB])
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x2, 0x30, 0x95f6, 0x6}, &(0x7f0000000340)=0x18)

52m45.47563106s ago: executing program 1 (id=109):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = eventfd2(0x0, 0x80000)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r1, 0xf})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000008010040000000000600000000000000f035dee80d92182f07dcbba8152992a2f406649edb7b7455bb28a753a5359cc49d"])
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x58, {"0f01cbb801000000f0f69500180000c4827d79247b6465430f09d0f30f01c566baf80c43d02233400f891c0c3831b6b80e000b00000f088866b819c201c201d0c4e1815944b209"}}], 0x88})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

52m44.826140891s ago: executing program 32 (id=109):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = eventfd2(0x0, 0x80000)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000100)={0x203, 0x0, 0x2, r1, 0xf})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000008010040000000000600000000000000f035dee80d92182f07dcbba8152992a2f406649edb7b7455bb28a753a5359cc49d"])
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x58, {"0f01cbb801000000f0f69500180000c4827d79247b6465430f09d0f30f01c566baf80c43d02233400f891c0c3831b6b80e000b00000f088866b819c201c201d0c4e1815944b209"}}], 0x88})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

52m37.799848988s ago: executing program 2 (id=131):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
r4 = dup(r0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000100)={0x20b, 0x7, 0x0, 0xffff, 0x5b9a, 0x6d4, 0x6, 0x0, r3}, 0x20)

52m37.467842955s ago: executing program 2 (id=132):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="401724"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0})

52m34.210161473s ago: executing program 2 (id=143):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0x4, 0x4, 0x1a56, 0x4, 0xc0, 0xffffffffffffffff})
memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0xc], 0x8000000, 0x2010d3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x40001, 0x0)

52m33.692465327s ago: executing program 2 (id=148):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000200)={0x3, 0xfffffffa, 0x9, 0x1, 0x2, 0x10000})
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x2641)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
dup2(r2, r0)

52m32.729003801s ago: executing program 2 (id=150):
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000023c0), 0x1, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
unshare(0x22020600)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)

52m32.353849079s ago: executing program 2 (id=151):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r3=>0x0})
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

52m31.392735134s ago: executing program 33 (id=151):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', <r3=>0x0})
socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
socket$packet(0x11, 0xa, 0x300)
sendto$packet(r2, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$nl_generic(0x11, 0x3, 0x10)
sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)

16.641615099s ago: executing program 0 (id=7063):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setrlimit(0x40000000000008, &(0x7f00000002c0)={0x0, 0x5})
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8)
sendto$inet6(r0, 0x0, 0x0, 0x88c0, &(0x7f0000000040)={0xa, 0x4a1f, 0xfffffffc, @loopback, 0x87ff}, 0x1c)
sendto$inet6(r0, &(0x7f0000000c80)='\r', 0x1, 0x24040084, 0x0, 0x0)

13.55592282s ago: executing program 0 (id=7072):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x1}}, 0x8, 0xb63, 0x8, 0x7, 0xbd, 0x1, 0xa}, &(0x7f0000000080)=0x9c)

10.674677272s ago: executing program 3 (id=7087):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000100)={0x18, r2, 0x1, 0x0, &(0x7f00000000c0)=[{0x80000001, 0xfffffffffffffffa}]})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2})
syz_open_dev$media(0x0, 0x0, 0x101d01)
socket$netlink(0x10, 0x3, 0x0)
r3 = fsopen(&(0x7f0000000200)='overlay\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000002c0)='\x17@\\\x00', &(0x7f0000000800)='\x02\x93\"}qu\x87n\x9e\xf5/\xffp\x95\x00T\xc1]\xf5\xbe\xde0]|\xc9`t{Svh4\x1ee?\v\xf9<5\xf6{\xc4,\xe18\x01\xbf\xbd\xf19\xee\xc3\xee\x85\xf97\xaap\xe2\x99\xe3\xf5\xf4[\xca\xe9j\xfdO4', 0x0)
r4 = fsopen(&(0x7f0000000280)='nfs\x00', 0x1)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000080)='acl\x00\t\x00\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xd3\x0f\x99R\xb3\x16n\rO\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:.\xf1!\x9d`YQ\xc3N\n\xbbWN:\xd3\x98', 0x0, r4)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000780)='#@^\\-$^\x00', &(0x7f00000007c0)='\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, r3)
fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000000a40)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\x10\xa0Vh\x9c\xf2\xc4^\x93\xd3\xab\x7f69\xd7\xa3\x02\x8aY\xe5\xddX`\xd0\x12\x17\xe4\xe6E<\"s\xcf\x93\xe6<-+B\xe2\x14\xa8\xc5\xd3N\xb6\x0e\bW;\xd0\x98\x87\xc6x\x1e>\x8a\xa6=\x86~\x9a\xce\x9f\xf0b\xea\x85\xb0\x82\xe5I\xd9\xd0\xec3\xb16DO\xa9D\x9e\xd3\n\x19;\xb8\xb1\xa6#\xc7\xd8J\x80\xd3?|\x04=\xfc\xdf\xb5\xc2\x81\xd3', &(0x7f0000000540)='./file0\x00', 0xffffffffffffff9c)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000480)='fuseblk\x00', &(0x7f00000004c0)='\x1c@\\\x00', 0x0)
read(r3, 0x0, 0x0)
close(r3)

10.41695176s ago: executing program 0 (id=7089):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r0)
open(0x0, 0x0, 0x0)
chroot(&(0x7f0000000300)='.\x00')
syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)

7.111853184s ago: executing program 0 (id=7096):
rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8)
r0 = getpgrp(0x0)
r1 = gettid()
rt_tgsigqueueinfo(r0, r1, 0x1f, &(0x7f00000003c0)={0x33, 0x1, 0x10004})
io_setup(0x1, &(0x7f00000001c0)=<r2=>0x0)
io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={[0xb]}, 0x8})

7.100130986s ago: executing program 3 (id=7097):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010000104000000001001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036677265000024000280060002000700000008000d0009000000080014000500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0)
mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xab24d000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000600)={{0x3, 0x1, 0x7, 0x3}, 0x1, 0x405})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000000000008400000006"], 0xd0}, 0x807)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0))
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', <r10=>0x0})
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r10}, 0x14)

5.587416357s ago: executing program 5 (id=7102):
socket$alg(0x26, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb)
pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r5, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x14)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x100000000000f7)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$DEVLINK_CMD_TRAP_SET(r6, 0x0, 0x8000)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xf8ee}}, @ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x30}, 0x0)
keyctl$revoke(0x3, r3)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)

5.473473197s ago: executing program 3 (id=7104):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010000104000000001001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036677265000024000280060002000700000008000d0009000000080014000500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0)
mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xab24d000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000600)={{0x3, 0x1, 0x7, 0x3}, 0x1, 0x405})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000000000008400000006"], 0xd0}, 0x807)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0))
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', <r10=>0x0})
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r10}, 0x14)

5.250644081s ago: executing program 6 (id=7106):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x20008005, &(0x7f00000001c0)={0x2, 0x4e20}, 0x10)
shutdown(r1, 0x1)
ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4}, {r1, 0x40}, {0xffffffffffffffff, 0x9}, {r0, 0x3000}], 0x4, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0)

4.855783811s ago: executing program 6 (id=7107):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x1, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)=ANY=[@ANYBLOB="0405000027"], 0x504}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040091)

4.768790412s ago: executing program 6 (id=7108):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x1, &(0x7f0000000200))
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20040810)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0))
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x20000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)

4.547881985s ago: executing program 4 (id=7109):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x2012})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gre0\x00', <r3=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x85, 0x6, @broadcast}, 0x14)

4.033230719s ago: executing program 0 (id=7110):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xefff}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x2, {[@window={0x3, 0x3, 0x8}]}}}}}}}}, 0x0)

4.032315141s ago: executing program 3 (id=7111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb})
io_setup(0x8, &(0x7f0000000000))
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0)
read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

3.889352664s ago: executing program 4 (id=7112):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r4=>0x0})
open(&(0x7f00009e1000)='./file0\x00', 0x68800, 0x4)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r7, 0x1}, 0x8)
close(0xffffffffffffffff)
ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r8, &(0x7f0000000380)="e6aebb12ee41b11d1e4d617d681744949b945f6601d49a", 0x17, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r8, 0x1)
recvfrom(r8, 0x0, 0x0, 0x61, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})

2.702369583s ago: executing program 5 (id=7113):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0)
close(r0)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f", 0x29}], 0x2}], 0x1, 0x40800)
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

2.496353887s ago: executing program 5 (id=7114):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010000104000000001001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036677265000024000280060002000700000008000d0009000000080014000500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0)
mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xab24d000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000600)={{0x3, 0x1, 0x7, 0x3}, 0x1, 0x405})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000000000008400000006"], 0xd0}, 0x807)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0))
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', <r10=>0x0})
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r10}, 0x14)

2.271779435s ago: executing program 4 (id=7115):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1e, 0x2, 0x0)
r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe9e2, 0x800, 0x1, 0x40000330}, &(0x7f0000000dc0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x8})
io_uring_enter(r0, 0x2ffb, 0x0, 0x0, 0x0, 0x0)

2.222831098s ago: executing program 3 (id=7116):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x4, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"})

2.12927474s ago: executing program 6 (id=7117):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000005c0)='6', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000380)="e4", 0x1}], 0x1, &(0x7f0000004000)=ANY=[], 0x10}}], 0x2, 0x4004044)

2.055404901s ago: executing program 6 (id=7118):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r4=>0x0})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000100)={r8, 0x1}, 0x8)
close(r5)
ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r9, &(0x7f0000000380)="e6aebb12ee41b11d1e4d617d681744949b945f6601d49a", 0x17, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r9, 0x1)
recvfrom(r9, 0x0, 0x0, 0x61, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})

1.811890671s ago: executing program 4 (id=7119):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}})

1.276061306s ago: executing program 4 (id=7120):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000000c0)={0x0, 0x8}, 0x8)

896.126091ms ago: executing program 0 (id=7121):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r3 = socket(0x10, 0x8000000803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="5400000010000104000000001001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b000100697036677265000024000280060002000700000008000d0009000000080014000500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0)
mmap(&(0x7f0000405000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xab24d000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x88400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r4, 0x40485404, &(0x7f0000000600)={{0x3, 0x1, 0x7, 0x3}, 0x1, 0x405})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000000000008400000006"], 0xd0}, 0x807)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f00000001c0))
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', <r10=>0x0})
setsockopt$inet6_mreq(r9, 0x29, 0x1b, &(0x7f00000000c0)={@remote, r10}, 0x14)

755.984317ms ago: executing program 4 (id=7122):
r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, &(0x7f00000011c0)=""/221, 0x8)

422.603486ms ago: executing program 5 (id=7123):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

153.230662ms ago: executing program 5 (id=7124):
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000006900)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})

117.31802ms ago: executing program 3 (id=7125):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r4=>0x0})
open(&(0x7f00009e1000)='./file0\x00', 0x68800, 0x4)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
truncate(&(0x7f00000001c0)='./file0\x00', 0x100000000)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={r7, 0x1}, 0x8)
close(0xffffffffffffffff)
ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r8, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r8, &(0x7f0000000380)="e6aebb12ee41b11d1e4d617d681744949b945f6601d49a", 0x17, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
shutdown(r8, 0x1)
recvfrom(r8, 0x0, 0x0, 0x61, 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r4, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})

116.376436ms ago: executing program 6 (id=7126):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
sendto$inet6(r4, &(0x7f0000000340)="d4d7efad020efa27e4b5b271825ef53d030f992ff58468566c6fc090ac508f876b89a6004f4d6aa59f13c8afda4bfc2137c8a1d584595b77c2a5f6a72a6d627f3408143aae7315bb608e1557b707b38c30f447a288036c", 0x57, 0x10, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000001600)={0x5, 0x10, 0xfffffffb})
io_setup(0x8, &(0x7f0000000000))
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/cpuinfo\x00', 0x0, 0x0)
read$hiddev(r5, &(0x7f00000000c0)=""/4092, 0xffc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[@ANYBLOB="280300002d00090027bd70000000000004000000130317"], 0x328}}, 0x84)

0s ago: executing program 5 (id=7127):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000440)={0x0, 0x0, 0x1, 'I'}, 0x0, 0x0, 0x0, 0x0})
ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068)

kernel console output (not intermixed with test programs):

control failed: -71
[ 3132.360641][   T10] usb 5-1: USB disconnect, device number 28
[ 3132.397335][T31694] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[ 3132.399712][   T10] yurex 5-1:0.0: USB YUREX #0 now disconnected
[ 3132.430140][T31694] usb 6-1: config 179 has no interface number 0
[ 3132.452174][T31694] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 3132.487765][T31694] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 3132.554746][T31694] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3132.576333][T31694] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 3132.590419][T31694] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 3132.608523][T31694] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 3132.654741][T31694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3132.689341][ T1376] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 3132.855169][   T30] audit: type=1326 audit(1758930214.658:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1387 comm="syz.3.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3132.925011][T31694] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input88
[ 3133.144444][T31694] usb 6-1: USB disconnect, device number 5
[ 3133.144509][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 3133.158816][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 3134.306409][ T1399] fuse: Invalid rootmode
[ 3134.722570][ T1394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6577'.
[ 3137.246915][ T1422] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3137.490563][ T1429] netlink: 'syz.6.6584': attribute type 23 has an invalid length.
[ 3139.067566][   T30] kauditd_printk_skb: 36 callbacks suppressed
[ 3139.067587][   T30] audit: type=1326 audit(1758930220.908:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3139.127981][   T30] audit: type=1326 audit(1758930220.908:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3139.178013][   T30] audit: type=1326 audit(1758930220.908:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3139.282444][   T30] audit: type=1326 audit(1758930220.908:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3139.333785][   T30] audit: type=1326 audit(1758930220.908:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3139.366882][   T30] audit: type=1326 audit(1758930220.908:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3139.507505][   T30] audit: type=1326 audit(1758930220.908:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3139.672536][   T30] audit: type=1326 audit(1758930220.918:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f192798d710 code=0x7ffc0000
[ 3140.199641][   T30] audit: type=1326 audit(1758930220.918:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3140.348036][   T30] audit: type=1326 audit(1758930220.918:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1445 comm="syz.4.6590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3141.044190][ T1463] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6593'.
[ 3141.462866][ T1467] fuse: Bad value for 'rootmode'
[ 3141.494506][ T1467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3141.503210][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3141.513211][ T1467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3141.523562][ T1467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3141.532206][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3141.540766][ T1467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3141.550529][ T1467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3141.559621][ T1467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3141.568219][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3141.578022][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3142.574192][ T1484] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3142.866758][ T1494] netlink: 'syz.4.6603': attribute type 23 has an invalid length.
[ 3143.288157][   T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 3143.458546][   T10] usb 6-1: Using ep0 maxpacket: 32
[ 3143.669014][   T10] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 3143.678531][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3143.720013][   T10] usb 6-1: config 0 descriptor??
[ 3143.949858][   T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 3143.959981][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3143.994746][   T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 3144.030732][   T10] usb 6-1: media controller created
[ 3144.119859][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3144.184436][ T1496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3144.195127][ T1496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3144.548064][T23397] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[ 3144.706982][T23397] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3144.724602][T23397] usb 4-1: no configurations
[ 3144.738427][T23397] usb 4-1: can't read configurations, error -22
[ 3145.388346][   T30] kauditd_printk_skb: 26 callbacks suppressed
[ 3145.388368][   T30] audit: type=1326 audit(1758930227.218:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3145.448970][   T30] audit: type=1326 audit(1758930227.218:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3146.140653][   T30] audit: type=1326 audit(1758930227.218:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3146.212186][   T30] audit: type=1326 audit(1758930227.218:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3146.268324][   T10] az6027: usb out operation failed. (-110)
[ 3146.308068][   T30] audit: type=1326 audit(1758930227.218:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3146.318161][   T10] az6027: usb out operation failed. (-32)
[ 3146.372367][   T10] stb0899_attach: Driver disabled by Kconfig
[ 3146.378981][   T30] audit: type=1326 audit(1758930227.218:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3147.300123][   T10] az6027: no front-end attached
[ 3147.300123][   T10] 
[ 3147.318086][   T10] az6027: usb out operation failed. (-32)
[ 3147.344262][   T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 3147.344320][   T30] audit: type=1326 audit(1758930227.218:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3147.436709][   T30] audit: type=1326 audit(1758930227.218:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3147.468431][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input89
[ 3147.523698][   T10] dvb-usb: schedule remote query interval to 400 msecs.
[ 3147.526795][   T30] audit: type=1326 audit(1758930227.218:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5814d8d710 code=0x7ffc0000
[ 3147.604914][   T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 3147.726997][ T1523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6612'.
[ 3147.768510][   T30] audit: type=1326 audit(1758930227.218:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1507 comm="syz.6.6609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3147.880471][T31688] usb 6-1: USB disconnect, device number 6
[ 3148.055219][T31688] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 3148.662834][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[ 3148.676259][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[ 3148.807710][ T1542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6613'.
[ 3148.998009][ T1548] netlink: 'syz.6.6620': attribute type 23 has an invalid length.
[ 3149.101481][ T1549] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6619'.
[ 3150.180254][ T1555] netlink: 'syz.3.6621': attribute type 23 has an invalid length.
[ 3151.099414][T31688] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 3151.228171][T31694] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[ 3151.277711][T31688] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 3151.297727][T31688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3151.417497][T31688] usb 6-1: Product: syz
[ 3151.425944][T31688] usb 6-1: Manufacturer: syz
[ 3151.430813][T31694] usb 7-1: Using ep0 maxpacket: 16
[ 3151.461413][T31688] usb 6-1: SerialNumber: syz
[ 3151.470052][T31694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3151.994825][T31694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3152.008817][T31688] usb 6-1: config 0 descriptor??
[ 3152.041202][T31688] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 3152.055585][T31694] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 3152.112162][T31688] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3152.121864][T31694] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 3152.131707][T31694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3152.140985][T31688] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 3152.164802][T31694] usb 7-1: config 0 descriptor??
[ 3152.178013][T31688] usb 6-1: media controller created
[ 3152.221876][ T1557] dvb-usb: bulk message failed: -22 (7/0)
[ 3152.298713][ T1570] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3152.352571][T31688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3152.412100][ T1572] net_ratelimit: 4 callbacks suppressed
[ 3152.412122][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3152.426735][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3152.435417][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3152.444051][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3152.452582][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3152.462291][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3152.471485][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3152.692009][T31688] DVB: Unable to find symbol mt352_attach()
[ 3152.802633][T31694] microsoft 0003:045E:07DA.003A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[ 3152.829112][T31688] DVB: Unable to find symbol nxt6000_attach()
[ 3152.836698][T31694] microsoft 0003:045E:07DA.003A: no inputs found
[ 3152.942235][T31688] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 3152.952390][T31694] microsoft 0003:045E:07DA.003A: could not initialize ff, continuing anyway
[ 3152.964819][T31688] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input90
[ 3152.989081][T31694] usb 7-1: USB disconnect, device number 17
[ 3153.011639][T31688] dvb-usb: schedule remote query interval to 1000 msecs.
[ 3153.026029][T31688] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 3153.036811][T31688] dvb-usb: bulk message failed: -22 (7/0)
[ 3153.046583][T31688] dvb-usb: bulk message failed: -22 (7/0)
[ 3153.064697][T31688] usb 6-1: USB disconnect, device number 7
[ 3153.282689][ T1575] fido_id[1575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 3153.358946][T31688] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 3153.826475][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 3153.826494][   T30] audit: type=1326 audit(1758930235.688:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3153.872820][   T30] audit: type=1326 audit(1758930235.688:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3153.896170][   T30] audit: type=1326 audit(1758930235.688:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3153.919044][T31688] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 3153.928211][   T30] audit: type=1326 audit(1758930235.698:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3154.055356][   T30] audit: type=1326 audit(1758930235.698:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3154.098944][T31688] usb 6-1: Using ep0 maxpacket: 8
[ 3154.105086][   T30] audit: type=1326 audit(1758930235.718:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3154.110327][T31688] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 3154.159360][   T30] audit: type=1326 audit(1758930235.728:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3154.215915][T31688] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3154.256800][T31688] pvrusb2: Hardware description: Terratec Grabster AV400
[ 3154.285427][T31688] pvrusb2: **********
[ 3154.297143][T31688] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 3154.318701][T31688] pvrusb2: Important functionality might not be entirely working.
[ 3154.335872][T31688] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 3154.338805][   T30] audit: type=1326 audit(1758930235.728:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3154.358505][T31688] pvrusb2: **********
[ 3154.461547][ T2347] pvrusb2: Invalid write control endpoint
[ 3154.493060][   T30] audit: type=1326 audit(1758930235.728:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3154.613533][   T30] audit: type=1326 audit(1758930235.728:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1585 comm="syz.4.6630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f192798d710 code=0x7ffc0000
[ 3154.656226][   T10] usb 6-1: USB disconnect, device number 8
[ 3154.750370][ T2347] pvrusb2: Invalid write control endpoint
[ 3154.766785][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 3154.797057][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 3154.806490][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 3154.825311][ T2347] pvrusb2: Device being rendered inoperable
[ 3154.835708][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 3154.868753][ T1596] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6631'.
[ 3154.895600][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 3154.938850][ T2347] pvrusb2: Attached sub-driver cx25840
[ 3154.944910][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 3154.972911][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 3155.458071][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3155.579568][ T1602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6633'.
[ 3155.795934][ T1603] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3156.545022][ T1613] netlink: 'syz.4.6636': attribute type 23 has an invalid length.
[ 3157.494705][ T1622] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6639'.
[ 3157.848024][T31694] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[ 3158.002033][T31694] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 3158.015438][T31694] usb 6-1: config 0 has no interface number 0
[ 3158.031027][T31694] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3158.042851][T31694] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 3158.091497][ T1629] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6643'.
[ 3158.111751][T31694] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 3158.134205][T31694] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 3158.160507][T31694] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 3158.172879][T31694] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 3158.186530][T31694] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 3158.196084][T31694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3158.226249][T31694] usb 6-1: config 0 descriptor??
[ 3158.233282][ T1625] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3158.241320][ T1625] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 3158.272780][T31694] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 3158.482669][ T1625] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped
[ 3158.540712][T23397] usb 6-1: USB disconnect, device number 9
[ 3158.560076][T23397] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 3159.911747][ T1653] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6649'.
[ 3160.873585][ T1650] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6650'.
[ 3160.894886][ T1650] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6650'.
[ 3161.315841][ T1660] netlink: 'syz.6.6652': attribute type 23 has an invalid length.
[ 3162.139667][ T1671] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3162.754750][   T30] kauditd_printk_skb: 64 callbacks suppressed
[ 3162.754774][   T30] audit: type=1326 audit(1758930244.588:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1673 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3162.879833][   T30] audit: type=1326 audit(1758930244.588:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1673 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3163.045927][   T30] audit: type=1326 audit(1758930244.588:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1673 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3163.124594][   T30] audit: type=1326 audit(1758930244.588:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1673 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3163.167096][   T30] audit: type=1326 audit(1758930244.588:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1673 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3163.207312][   T30] audit: type=1326 audit(1758930244.588:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1673 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3163.438035][   T30] audit: type=1326 audit(1758930244.588:4044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1673 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f192792af79 code=0x7ffc0000
[ 3163.468072][   T30] audit: type=1326 audit(1758930244.588:4045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1673 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3163.490865][   T30] audit: type=1326 audit(1758930244.588:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1673 comm="syz.4.6657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3163.753491][ T1684] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6659'.
[ 3164.165933][ T1689] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3164.921176][ T1694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6662'.
[ 3165.508657][ T1705] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0
[ 3165.876823][ T1710] fuse: Unknown parameter 'user_id00000000000000000000'
[ 3167.295699][ T1721] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6668'.
[ 3167.307029][ T1721] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6668'.
[ 3167.308202][T23397] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 3167.398304][ T1725] netlink: 'syz.4.6671': attribute type 23 has an invalid length.
[ 3167.708017][T23397] usb 6-1: Using ep0 maxpacket: 8
[ 3167.715082][T23397] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 3167.734811][T23397] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3167.751658][T23397] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3167.764600][T23397] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3167.782948][T23397] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3167.810286][T23397] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 3167.834764][T23397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3167.888381][T14841] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 3168.040272][T14841] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3168.052379][T14841] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 3168.070069][T14841] usb 4-1: config 1 has no interface number 0
[ 3168.083451][T14841] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3168.115204][T14841] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 3168.148103][T23397] usb 6-1: GET_CAPABILITIES returned 0
[ 3168.153784][T23397] usbtmc 6-1:16.0: can't read capabilities
[ 3168.172870][T14841] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3168.201012][T14841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3168.264105][T14841] usb 4-1: Product: syz
[ 3168.274759][T14841] usb 4-1: Manufacturer: syz
[ 3168.325599][T14841] usb 4-1: SerialNumber: syz
[ 3168.400523][   T43] usb 6-1: USB disconnect, device number 10
[ 3168.878384][   T30] audit: type=1326 audit(1758930250.698:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.6.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3168.913886][   T30] audit: type=1326 audit(1758930250.708:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.6.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3168.949123][   T30] audit: type=1326 audit(1758930250.708:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.6.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3169.042073][ T1734] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3169.066708][   T30] audit: type=1326 audit(1758930250.708:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.6.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3169.101333][   T30] audit: type=1326 audit(1758930250.708:4051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.6.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3169.176182][T14841] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS
[ 3169.176443][   T30] audit: type=1326 audit(1758930250.708:4052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.6.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5814d2af79 code=0x7ffc0000
[ 3169.188840][T14841] cdc_ncm 4-1:1.1: bind() failure
[ 3169.255481][   T30] audit: type=1326 audit(1758930250.708:4053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.6.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3169.263133][T14841] usb 4-1: USB disconnect, device number 25
[ 3169.351497][ T1740] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6675'.
[ 3169.848359][   T30] audit: type=1326 audit(1758930250.708:4054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1728 comm="syz.6.6673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3170.333169][ T1745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6676'.
[ 3170.772718][ T1754] fuse: Unknown parameter 'user_id00000000000000000000'
[ 3170.793693][ T1754] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 3170.985102][ T1757] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 3171.074325][ T1756] IPVS: Unknown mcast interface: batadv0
[ 3173.783857][ T1777] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6683'.
[ 3174.074192][ T1783] fuse: Invalid rootmode
[ 3174.443495][   T43] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[ 3174.524402][ T1792] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3174.658544][   T43] usb 7-1: too many configurations: 9, using maximum allowed: 8
[ 3174.668589][   T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3174.677750][   T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3174.711044][   T43] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3174.784177][   T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3174.858161][   T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3174.883045][   T43] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3174.898760][   T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3174.908732][   T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3174.925585][   T43] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3174.939255][   T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3174.950281][   T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3174.963856][   T43] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3174.979110][   T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3174.988680][   T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3175.007547][   T43] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3175.027523][   T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3175.045342][   T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3175.138249][   T43] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3175.149970][   T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3175.161287][   T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3175.182836][   T43] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3175.202724][   T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3175.219974][   T43] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3175.237981][ T1796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6692'.
[ 3175.257550][   T43] usb 7-1: config 0 interface 0 has no altsetting 0
[ 3175.286919][   T43] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3175.298036][ T1796] macvlan2: entered allmulticast mode
[ 3175.305484][   T43] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3175.318620][ T1796] hsr0: entered allmulticast mode
[ 3175.325832][ T1796] hsr_slave_0: entered allmulticast mode
[ 3175.332028][   T43] usb 7-1: Product: syz
[ 3175.336435][   T43] usb 7-1: Manufacturer: syz
[ 3175.341306][ T1796] hsr_slave_1: entered allmulticast mode
[ 3175.349313][   T43] usb 7-1: SerialNumber: syz
[ 3175.379047][   T43] usb 7-1: config 0 descriptor??
[ 3175.413098][   T43] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[ 3175.721470][    C1] usb 7-1: yurex_control_callback - control failed: -71
[ 3175.732406][   T43] usb 7-1: USB disconnect, device number 18
[ 3175.744410][   T43] yurex 7-1:0.0: USB YUREX #0 now disconnected
[ 3176.741889][ T1817] fuse: Unknown parameter 'user_id00000000000000000000'
[ 3176.827522][ T1818] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6694'.
[ 3177.798070][   T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[ 3177.971440][   T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3177.995356][   T43] usb 7-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[ 3178.021421][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3178.068988][   T43] usb 7-1: config 0 descriptor??
[ 3178.397448][ T1835] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6705'.
[ 3178.968092][   T43] razer 0003:1532:010E.003B: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.6-1/input0
[ 3179.218054][ T1838] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6702'.
[ 3179.515411][   T43] usb 7-1: USB disconnect, device number 19
[ 3179.682016][ T1846] fido_id[1846]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[ 3179.745740][ T1844] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6706'.
[ 3180.604560][ T1853] fuse: Unknown parameter 'user_i00000000000000000000'
[ 3180.625429][ T1853] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 3180.685114][ T1856] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 3180.844566][ T1858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6711'.
[ 3181.108308][   T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 3181.277997][   T43] usb 6-1: Using ep0 maxpacket: 32
[ 3181.375802][   T43] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 3181.463771][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3181.568095][ T1869] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6712'.
[ 3181.657985][T14841] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 3181.843174][T14841] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 3181.852127][T14841] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 3181.874330][   T43] usb 6-1: config 0 descriptor??
[ 3181.904289][T14841] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 3181.934819][T14841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 3181.987652][T14841] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 3182.081512][T14841] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 3182.107589][T14841] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 3182.156704][T14841] usb 5-1: Product: syz
[ 3182.179425][T14841] usb 5-1: Manufacturer: syz
[ 3182.205670][T14841] cdc_wdm 5-1:1.0: skipping garbage
[ 3182.233729][T14841] cdc_wdm 5-1:1.0: skipping garbage
[ 3182.264886][   T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 3182.274141][T14841] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 3182.286714][T14841] cdc_wdm 5-1:1.0: Unknown control protocol
[ 3182.355686][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3182.426585][   T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 3182.479090][ T1862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3182.489205][   T43] usb 6-1: media controller created
[ 3182.489748][ T1862] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3182.780678][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3182.945848][T23397] usb 5-1: USB disconnect, device number 29
[ 3182.977949][T14841] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[ 3183.138092][T14841] usb 7-1: Using ep0 maxpacket: 16
[ 3183.146099][T14841] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 3183.194961][T14841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3183.936332][T14841] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 3183.956792][T14841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3183.975434][T14841] usb 7-1: Product: syz
[ 3183.980226][T14841] usb 7-1: Manufacturer: syz
[ 3183.985012][T14841] usb 7-1: SerialNumber: syz
[ 3184.011770][T14841] usb 7-1: config 0 descriptor??
[ 3184.043282][ T1885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6720'.
[ 3184.058280][T14841] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 3184.083507][T14841] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[ 3184.396264][   T43] az6027: usb out operation failed. (-71)
[ 3184.404651][   T43] az6027: usb out operation failed. (-71)
[ 3184.437175][   T43] stb0899_attach: Driver disabled by Kconfig
[ 3184.473930][   T43] az6027: no front-end attached
[ 3184.473930][   T43] 
[ 3184.509329][   T43] az6027: usb out operation failed. (-71)
[ 3184.520887][   T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 3184.532051][   T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input91
[ 3184.564937][   T43] dvb-usb: schedule remote query interval to 400 msecs.
[ 3184.575733][   T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 3184.606578][   T43] usb 6-1: USB disconnect, device number 11
[ 3184.683663][T14841] em28xx 7-1:0.0: chip ID is em28178
[ 3184.743594][   T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 3184.909602][T31694] usb 7-1: USB disconnect, device number 20
[ 3184.940072][T31694] em28xx 7-1:0.0: Disconnecting em28xx
[ 3185.000385][T31694] em28xx 7-1:0.0: Freeing device
[ 3185.067990][   T43] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 3185.227966][   T43] usb 6-1: Using ep0 maxpacket: 32
[ 3185.237390][   T43] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[ 3185.247157][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3185.288000][   T43] usb 6-1: Product: syz
[ 3185.303472][   T43] usb 6-1: Manufacturer: syz
[ 3185.327926][   T43] usb 6-1: SerialNumber: syz
[ 3185.349506][   T43] usb 6-1: config 0 descriptor??
[ 3185.531781][ T1901] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6727'.
[ 3185.631612][ T1906] fuse: Unknown parameter 'user_i00000000000000000000'
[ 3185.932844][ T1913] trusted_key: encrypted_key: insufficient parameters specified
[ 3185.968823][ T1915] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3186.264331][   T43] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels)
[ 3186.428272][   T43] peak_usb 6-1:0.0 can0: sending command failure: -22
[ 3186.481923][   T43] peak_usb 6-1:0.0 can0: sending command failure: -22
[ 3186.742191][   T43] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22
[ 3186.758318][   T43] usb 6-1: USB disconnect, device number 12
[ 3188.103094][ T1935] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6731'.
[ 3188.112965][T23397] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 3188.322417][T23397] usb 5-1: Using ep0 maxpacket: 32
[ 3188.369286][T23397] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 3188.465047][T23397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3188.496189][T23397] usb 5-1: config 0 descriptor??
[ 3188.831033][T23397] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 3188.858987][T23397] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3188.923399][T23397] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 3189.055409][T23397] usb 5-1: media controller created
[ 3189.094039][ T1931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3189.105303][ T1931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3189.138218][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3189.177398][ T1938] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6734'.
[ 3189.266544][T23397] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3190.242090][   T43] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[ 3190.400832][   T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 3190.409719][   T43] usb 6-1: config 0 has no interface number 0
[ 3190.420864][   T43] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 3190.469971][   T43] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 3190.511766][   T43] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 3190.532602][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3190.567051][   T43] usb 6-1: config 0 descriptor??
[ 3190.593099][ T1945] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[ 3190.622428][   T43] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 3190.916285][   T43] usb 6-1: USB disconnect, device number 13
[ 3191.073911][T23397] az6027: usb out operation failed. (-71)
[ 3191.080390][T23397] az6027: usb out operation failed. (-71)
[ 3191.088447][T23397] stb0899_attach: Driver disabled by Kconfig
[ 3191.096400][T23397] az6027: no front-end attached
[ 3191.096400][T23397] 
[ 3191.129034][T23397] az6027: usb out operation failed. (-71)
[ 3191.134835][T23397] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 3191.189978][T23397] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input92
[ 3191.237416][T23397] dvb-usb: schedule remote query interval to 400 msecs.
[ 3191.255205][T23397] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 3191.285742][T23397] usb 5-1: USB disconnect, device number 30
[ 3191.390077][T23397] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 3191.482700][ T1962] trusted_key: encrypted_key: insufficient parameters specified
[ 3191.630965][ T1964] trusted_key: encrypted_key: insufficient parameters specified
[ 3192.137705][ T1973] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3193.082517][ T1980] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6748'.
[ 3194.087945][T14841] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 3194.301238][T14841] usb 4-1: Using ep0 maxpacket: 32
[ 3194.637957][T23397] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 3194.646517][T14841] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 3194.888036][T14841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3194.943725][T14841] usb 4-1: config 0 descriptor??
[ 3194.957930][T23397] usb 6-1: Using ep0 maxpacket: 8
[ 3194.974600][T23397] usb 6-1: config 0 has no interfaces?
[ 3194.993312][T23397] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[ 3195.017205][T23397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3195.036980][T23397] usb 6-1: Product: syz
[ 3195.046997][T23397] usb 6-1: Manufacturer: syz
[ 3195.064206][T23397] usb 6-1: SerialNumber: syz
[ 3195.077394][T23397] usb 6-1: config 0 descriptor??
[ 3195.329218][T14841] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 3195.344368][T14841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3195.399448][T14841] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 3195.430050][ T1995] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6756'.
[ 3195.465127][ T1995] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6756'.
[ 3195.497031][   T43] usb 6-1: USB disconnect, device number 14
[ 3195.514766][T14841] usb 4-1: media controller created
[ 3195.611475][T14841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3195.623005][ T2007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3195.632621][ T2007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3195.830008][ T2012] trusted_key: encrypted_key: insufficient parameters specified
[ 3196.532770][ T2020] trusted_key: encrypted_key: insufficient parameters specified
[ 3196.788102][   T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[ 3197.050119][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 3197.062576][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 3197.077987][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3197.109834][   T10] usb 7-1: Product: syz
[ 3197.116599][   T10] usb 7-1: Manufacturer: syz
[ 3197.125736][   T10] usb 7-1: SerialNumber: syz
[ 3197.163599][   T10] usb 7-1: config 0 descriptor??
[ 3197.200742][T14841] az6027: usb out operation failed. (-71)
[ 3197.220031][T14841] az6027: usb out operation failed. (-71)
[ 3197.258412][T14841] stb0899_attach: Driver disabled by Kconfig
[ 3197.300638][T14841] az6027: no front-end attached
[ 3197.300638][T14841] 
[ 3197.348055][T14841] az6027: usb out operation failed. (-71)
[ 3197.354027][T14841] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 3197.448373][T14841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input93
[ 3197.529955][T14841] dvb-usb: schedule remote query interval to 400 msecs.
[ 3197.561691][T14841] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 3197.652432][T14841] usb 4-1: USB disconnect, device number 26
[ 3197.694825][T23397] usb 7-1: USB disconnect, device number 21
[ 3197.935278][T14841] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 3198.429835][ T2034] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3198.718549][T14841] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[ 3198.929521][T14841] usb 7-1: Using ep0 maxpacket: 8
[ 3198.968163][T14841] usb 7-1: config 0 has an invalid interface number: 186 but max is 0
[ 3198.979391][T14841] usb 7-1: config 0 has no interface number 0
[ 3198.985654][T14841] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 3199.132254][T14841] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[ 3199.177870][T14841] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 3199.182068][ T2046] 8021q: adding VLAN 0 to HW filter on device bond13
[ 3199.190127][T14841] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 3199.217765][T14841] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[ 3199.227162][T14841] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3199.235278][T14841] usb 7-1: Product: syz
[ 3199.239546][T14841] usb 7-1: Manufacturer: syz
[ 3199.247499][T14841] usb 7-1: SerialNumber: syz
[ 3199.267441][T14841] usb 7-1: config 0 descriptor??
[ 3199.496377][T14841] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[ 3199.703388][T14841] usb 7-1: USB disconnect, device number 22
[ 3200.558450][   T43] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[ 3200.724717][   T43] usb 7-1: Using ep0 maxpacket: 8
[ 3200.851173][   T43] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 3200.891215][   T43] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 3200.908852][   T43] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3200.928762][   T43] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3200.942852][   T43] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3200.960754][   T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3201.934074][ T2068] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6774'.
[ 3201.955835][   T43] usb 7-1: GET_CAPABILITIES returned 0
[ 3201.974108][   T43] usbtmc 7-1:16.0: can't read capabilities
[ 3202.044294][   T43] usb 7-1: USB disconnect, device number 23
[ 3202.328258][   T30] audit: type=1326 audit(1758930284.068:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3202.441828][   T30] audit: type=1326 audit(1758930284.068:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3202.499099][   T30] audit: type=1326 audit(1758930284.068:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3202.573167][   T30] audit: type=1326 audit(1758930284.068:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3202.654454][   T30] audit: type=1326 audit(1758930284.068:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3202.754634][   T30] audit: type=1326 audit(1758930284.068:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3202.805846][   T30] audit: type=1326 audit(1758930284.068:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3202.877918][   T30] audit: type=1326 audit(1758930284.078:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46be78d710 code=0x7ffc0000
[ 3202.971948][   T30] audit: type=1326 audit(1758930284.078:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3203.032283][   T30] audit: type=1326 audit(1758930284.078:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2072 comm="syz.3.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3203.448040][   T10] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 3203.631075][   T10] usb 7-1: config 0 has no interfaces?
[ 3203.644254][   T10] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 3203.666419][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3203.698093][ T2094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6783'.
[ 3203.707576][ T2094] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6783'.
[ 3203.892336][   T10] usb 7-1: Product: syz
[ 3203.896594][   T10] usb 7-1: Manufacturer: syz
[ 3203.907741][ T2099] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3204.033279][   T10] usb 7-1: SerialNumber: syz
[ 3204.066791][   T10] usb 7-1: config 0 descriptor??
[ 3205.226204][ T2110] fuse: Bad value for 'rootmode'
[ 3206.008202][T23397] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 3206.072231][   T10] usb 7-1: USB disconnect, device number 24
[ 3206.162275][T23397] usb 5-1: config 0 has no interfaces?
[ 3206.168402][T23397] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[ 3206.188425][T23397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3206.211783][T23397] usb 5-1: config 0 descriptor??
[ 3206.283499][ T2114] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 3206.433485][ T2112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3206.468640][ T2112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3206.569770][T31694] usb 5-1: USB disconnect, device number 31
[ 3207.138176][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3207.247953][T31694] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 3207.427920][T31694] usb 5-1: Using ep0 maxpacket: 8
[ 3207.449820][T31694] usb 5-1: config index 0 descriptor too short (expected 72, got 36)
[ 3207.468065][T31694] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[ 3207.553796][T31694] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08
[ 3207.578285][T31694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3207.604150][T31694] usb 5-1: Product: syz
[ 3207.628241][T31694] usb 5-1: Manufacturer: syz
[ 3207.632907][T31694] usb 5-1: SerialNumber: syz
[ 3208.025594][T31694] usb 5-1: USB disconnect, device number 32
[ 3208.223269][ T2136] netlink: 'syz.5.6796': attribute type 23 has an invalid length.
[ 3208.857916][T23397] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 3208.858308][   T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 3208.911958][ T2146] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3209.068913][T23397] usb 7-1: Using ep0 maxpacket: 16
[ 3209.078931][T23397] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3209.089735][T23397] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3209.104938][T23397] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3209.114447][T23397] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3209.138073][T23397] usb 7-1: Product: syz
[ 3209.150862][T23397] usb 7-1: Manufacturer: syz
[ 3209.160814][T23397] usb 7-1: SerialNumber: syz
[ 3209.168560][   T43] usb 5-1: Using ep0 maxpacket: 8
[ 3209.182171][   T43] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[ 3209.194560][   T43] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 3209.210687][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3209.247752][   T43] usb 5-1: Product: syz
[ 3209.260595][   T43] usb 5-1: Manufacturer: syz
[ 3209.353333][   T43] usb 5-1: SerialNumber: syz
[ 3209.394179][   T43] usb 5-1: config 0 descriptor??
[ 3209.403427][   T43] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 3209.415921][   T43] usb 5-1: setting power ON
[ 3209.424908][   T43] dvb-usb: bulk message failed: -22 (2/0)
[ 3209.483883][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3209.555793][   T43] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 3209.573646][   T43] usb 5-1: media controller created
[ 3209.607002][ T2140] dvb-usb: bulk message failed: -22 (3/0)
[ 3209.607606][T23397] usb 7-1: 0:2 : does not exist
[ 3209.634967][ T2140] dvb-usb: bulk message failed: -22 (5/0)
[ 3209.693731][ T2151] dvb-usb: bulk message failed: -22 (3/0)
[ 3209.696516][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3209.823293][   T43] usb 5-1: selecting invalid altsetting 6
[ 3209.838314][   T43] usb 5-1: digital interface selection failed (-22)
[ 3209.855487][   T43] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 3209.884289][   T43] usb 5-1: setting power OFF
[ 3209.889391][   T43] dvb-usb: bulk message failed: -22 (2/0)
[ 3209.910375][   T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 3209.950827][   T43] (NULL device *): no alternate interface
[ 3210.020413][T23397] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 3210.069821][   T43] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 3210.102276][   T43] usb 5-1: USB disconnect, device number 33
[ 3210.113186][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[ 3210.113253][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[ 3210.259645][ T2158] fuse: Unknown parameter 'use00000000000000000000'
[ 3210.450023][T23397] usb 7-1: USB disconnect, device number 25
[ 3211.191935][ T2171] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3211.303899][T31692] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 3211.484081][T31692] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[ 3211.517628][T31692] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 3211.536140][T31692] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 3211.547347][T31692] usb 7-1: config 220 has no interface number 2
[ 3211.554005][T31692] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 3211.683046][T31692] usb 7-1: config 220 interface 0 has no altsetting 0
[ 3211.751962][T31692] usb 7-1: config 220 interface 76 has no altsetting 0
[ 3211.773731][T31692] usb 7-1: config 220 interface 1 has no altsetting 0
[ 3211.852838][T31692] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 3211.924594][T31692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3211.973815][T31692] usb 7-1: Product: syz
[ 3211.980834][T31692] usb 7-1: Manufacturer: syz
[ 3211.996694][T31692] usb 7-1: SerialNumber: syz
[ 3212.178592][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3212.236615][T31692] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[ 3212.293535][T31692] usb 7-1: No valid video chain found.
[ 3212.312533][T31692] usb 7-1: selecting invalid altsetting 0
[ 3212.343330][T31692] usb 7-1: selecting invalid altsetting 0
[ 3212.350523][T31692] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[ 3212.396567][T31692] usb 7-1: USB disconnect, device number 26
[ 3212.877962][T31694] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 3213.038108][T31694] usb 6-1: Using ep0 maxpacket: 8
[ 3213.053379][T31694] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 3213.073180][T31694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3213.108975][T31694] usb 6-1: config 0 descriptor??
[ 3213.253779][ T2200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6820'.
[ 3213.287962][T23397] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 3213.337818][T31694] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 3213.360032][ T2203] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3213.467891][T23397] usb 7-1: Using ep0 maxpacket: 8
[ 3213.477511][T23397] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 3213.487328][T23397] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3213.503165][T23397] usb 7-1: Product: syz
[ 3213.508117][T23397] usb 7-1: Manufacturer: syz
[ 3213.517734][T23397] usb 7-1: SerialNumber: syz
[ 3213.529039][T23397] usb 7-1: config 0 descriptor??
[ 3213.760268][T23397] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 3213.965094][T31694] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 3213.984470][T31694] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9
[ 3214.032866][T31694] asix 6-1:0.0: probe with driver asix failed with error -71
[ 3214.066201][T31694] usb 6-1: USB disconnect, device number 15
[ 3214.173593][T23397] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 3214.197529][T23397] usb 7-1: USB disconnect, device number 27
[ 3215.013675][ T2226] netlink: 'syz.3.6827': attribute type 23 has an invalid length.
[ 3215.178277][T14841] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[ 3215.444991][T14841] usb 7-1: Using ep0 maxpacket: 32
[ 3215.464615][T14841] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 3215.478221][T14841] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3215.498066][T14841] usb 7-1: config 0 descriptor??
[ 3215.517609][T14841] as10x_usb: device has been detected
[ 3215.525891][T14841] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 3215.628132][T14841] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 3215.663589][T14841] as10x_usb: error during firmware upload part1
[ 3215.688267][T14841] Registered device nBox DVB-T Dongle
[ 3215.732997][T14841] usb 7-1: USB disconnect, device number 28
[ 3215.834292][T14841] Unregistered device nBox DVB-T Dongle
[ 3215.837498][T14841] as10x_usb: device has been disconnected
[ 3216.576789][T14841] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[ 3216.587996][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3216.616029][   T30] kauditd_printk_skb: 65 callbacks suppressed
[ 3216.634768][   T30] audit: type=1326 audit(1758930298.478:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3216.663193][   T30] audit: type=1326 audit(1758930298.478:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3216.721358][   T30] audit: type=1326 audit(1758930298.478:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3216.779800][T14841] usb 4-1: too many configurations: 248, using maximum allowed: 8
[ 3216.793000][T14841] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[ 3216.806098][T14841] usb 4-1: config 0 has no interface number 0
[ 3216.853576][   T30] audit: type=1326 audit(1758930298.478:4133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3216.877358][T14841] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[ 3216.896883][T14841] usb 4-1: config 0 has no interface number 0
[ 3216.959566][T14841] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[ 3216.984931][   T30] audit: type=1326 audit(1758930298.478:4134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3217.007572][T14841] usb 4-1: config 0 has no interface number 0
[ 3217.008205][   T30] audit: type=1326 audit(1758930298.478:4135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3217.044911][   T30] audit: type=1326 audit(1758930298.488:4136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3217.046279][T14841] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[ 3217.170856][T14841] usb 4-1: config 0 has no interface number 0
[ 3217.177355][   T30] audit: type=1326 audit(1758930298.488:4137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3217.249170][   T30] audit: type=1326 audit(1758930298.488:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5814d8d710 code=0x7ffc0000
[ 3217.290103][ T2246] trusted_key: encrypted_key: insufficient parameters specified
[ 3217.326913][   T30] audit: type=1326 audit(1758930298.488:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2234 comm="syz.6.6831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3217.349834][T14841] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[ 3217.366214][T14841] usb 4-1: config 0 has no interface number 0
[ 3217.374586][T14841] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[ 3217.397891][T14841] usb 4-1: config 0 has no interface number 0
[ 3217.414237][T14841] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[ 3217.461255][T23397] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 3217.495524][T14841] usb 4-1: config 0 has no interface number 0
[ 3217.506880][T14841] usb 4-1: config 0 has an invalid interface number: 3 but max is 0
[ 3217.518241][T14841] usb 4-1: config 0 has no interface number 0
[ 3217.530318][T14841] usb 4-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59
[ 3217.544750][T14841] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=34
[ 3217.554200][T14841] usb 4-1: SerialNumber: syz
[ 3217.585539][T14841] usb 4-1: config 0 descriptor??
[ 3217.628037][T14841] hub 4-1:0.3: Invalid hub with more than one config or interface
[ 3217.638152][T23397] usb 6-1: too many configurations: 9, using maximum allowed: 8
[ 3217.646492][T14841] hub 4-1:0.3: probe with driver hub failed with error -22
[ 3217.658597][T23397] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3217.707494][T23397] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3217.722903][T14841] sierra 4-1:0.3: Sierra USB modem converter detected
[ 3217.730293][T23397] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3217.739747][T23397] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3217.749918][T23397] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3217.769412][T23397] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3217.819740][T23397] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3217.838317][T23397] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3217.872695][T23397] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3217.880734][T14841] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[ 3217.968219][T14841] usb 4-1: USB disconnect, device number 27
[ 3218.034676][T23397] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3218.044029][T23397] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3218.066643][T14841] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[ 3218.080071][T23397] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3218.090842][T14841] sierra 4-1:0.3: device disconnected
[ 3218.104816][T23397] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3218.140960][T23397] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3218.165021][T23397] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3218.192772][T23397] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3218.213289][T23397] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3218.246318][T23397] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3218.265341][T23397] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3218.303509][T23397] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3218.366123][T23397] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3218.390933][T23397] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 3218.424418][T23397] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 3218.469186][T23397] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3218.489767][T23397] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 3218.526364][T23397] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 3218.542486][T23397] usb 6-1: Product: syz
[ 3218.567080][T23397] usb 6-1: Manufacturer: syz
[ 3218.585203][T23397] usb 6-1: SerialNumber: syz
[ 3218.615613][T23397] usb 6-1: config 0 descriptor??
[ 3218.658540][T23397] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0
[ 3218.862274][ T2261] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3219.043804][    C0] usb 6-1: yurex_control_callback - control failed: -71
[ 3219.060014][T14841] usb 6-1: USB disconnect, device number 16
[ 3219.072429][T14841] yurex 6-1:0.0: USB YUREX #0 now disconnected
[ 3219.226530][ T2272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3219.238488][ T2272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3219.249790][ T2272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3219.295294][ T2272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3219.307161][ T2272] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3219.333286][ T2274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3219.365795][ T2274] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3222.258046][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3222.362196][   T30] kauditd_printk_skb: 27 callbacks suppressed
[ 3222.362220][   T30] audit: type=1326 audit(1758930304.228:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3222.403332][ T2312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3222.411893][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3222.491049][   T30] audit: type=1326 audit(1758930304.228:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3222.519285][   T30] audit: type=1326 audit(1758930304.228:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3222.547304][   T30] audit: type=1326 audit(1758930304.228:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3222.684316][   T30] audit: type=1326 audit(1758930304.228:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3222.708554][   T30] audit: type=1326 audit(1758930304.228:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3222.831807][   T30] audit: type=1326 audit(1758930304.258:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3222.904252][   T30] audit: type=1326 audit(1758930304.258:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3222.942228][   T30] audit: type=1326 audit(1758930304.258:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3222.976093][   T30] audit: type=1326 audit(1758930304.258:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2306 comm="syz.3.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46be78d710 code=0x7ffc0000
[ 3223.204660][ T2332] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3224.328640][ T2340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6855'.
[ 3224.478298][T31692] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 3224.633724][T31692] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 3224.662274][T31692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3224.671368][T31692] usb 5-1: Product: syz
[ 3224.682727][T31692] usb 5-1: Manufacturer: syz
[ 3224.688626][T31692] usb 5-1: SerialNumber: syz
[ 3224.711847][T31692] usb 5-1: config 0 descriptor??
[ 3224.777989][T23397] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 3224.962574][T23397] usb 6-1: Using ep0 maxpacket: 8
[ 3224.969695][T31692] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22
[ 3224.970400][T23397] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 3225.008160][T23397] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3225.040150][T23397] pvrusb2: Hardware description: Terratec Grabster AV400
[ 3225.059243][T23397] pvrusb2: **********
[ 3225.063380][T23397] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 3225.097302][T23397] pvrusb2: Important functionality might not be entirely working.
[ 3225.112073][T23397] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 3225.123824][T23397] pvrusb2: **********
[ 3225.245425][ T2347] pvrusb2: Invalid write control endpoint
[ 3225.383561][T31692] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 3225.409246][ T2347] pvrusb2: Invalid write control endpoint
[ 3225.437664][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 3225.484012][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 3225.499573][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 3225.517357][ T2347] pvrusb2: Device being rendered inoperable
[ 3225.527607][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[ 3225.536915][T31692] usb 6-1: USB disconnect, device number 17
[ 3225.541031][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[ 3225.560274][ T2347] pvrusb2: Attached sub-driver cx25840
[ 3225.565997][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 3225.584930][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 3225.606077][   T43] usb 5-1: USB disconnect, device number 34
[ 3226.099849][ T2368] fuse: Unknown parameter 'user_i00000000000000000000'
[ 3226.674801][ T2377] netlink: 'syz.4.6865': attribute type 23 has an invalid length.
[ 3228.128004][T23397] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[ 3228.268058][T14841] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[ 3228.288031][T23397] usb 7-1: Using ep0 maxpacket: 16
[ 3228.337707][ T2389] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3228.385039][T23397] usb 7-1: config index 0 descriptor too short (expected 1316, got 36)
[ 3228.451525][T23397] usb 7-1: config 0 has an invalid interface number: 157 but max is -1
[ 3228.481674][T23397] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 3228.491092][T23397] usb 7-1: config 0 has no interface number 0
[ 3228.500325][T23397] usb 7-1: config 0 interface 157 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 16
[ 3228.510692][T23397] usb 7-1: config 0 interface 157 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 3228.520722][T23397] usb 7-1: config 0 interface 157 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 3228.553046][T23397] usb 7-1: New USB device found, idVendor=0483, idProduct=3746, bcdDevice=94.86
[ 3228.562762][T23397] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3228.571943][T23397] usb 7-1: Product: syz
[ 3228.576636][T23397] usb 7-1: Manufacturer: syz
[ 3228.583376][T14841] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3228.594431][T14841] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 3228.604352][T23397] usb 7-1: SerialNumber: syz
[ 3228.612967][T14841] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 3228.649494][T23397] usb 7-1: config 0 descriptor??
[ 3228.655441][T14841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3228.665934][ T2382] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 3228.690611][T14841] usb 5-1: config 0 descriptor??
[ 3228.718333][T14841] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 3228.725935][T14841] dvb-usb: bulk message failed: -22 (3/0)
[ 3228.752441][T14841] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 3228.809886][T14841] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 3228.862881][T14841] usb 5-1: media controller created
[ 3228.889804][ T2382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3228.905904][ T2395] netlink: 'syz.5.6872': attribute type 1 has an invalid length.
[ 3228.911276][T14841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3228.964307][ T2382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3229.019285][T23397] ftdi_sio 7-1:0.157: FTDI USB Serial Device converter detected
[ 3229.067256][T23397] ftdi_sio ttyUSB0: unknown device type: 0x9486
[ 3229.082024][T14841] dvb-usb: bulk message failed: -22 (6/0)
[ 3229.094566][T14841] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 3229.130751][T23397] usb 7-1: USB disconnect, device number 29
[ 3229.174034][T14841] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input94
[ 3229.191432][T23397] ftdi_sio 7-1:0.157: device disconnected
[ 3229.239322][T14841] dvb-usb: schedule remote query interval to 150 msecs.
[ 3229.261531][T14841] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 3229.418489][T23397] dvb-usb: bulk message failed: -22 (1/0)
[ 3229.428284][T23397] dvb-usb: error while querying for an remote control event.
[ 3229.556128][   T43] usb 5-1: USB disconnect, device number 35
[ 3229.575670][   T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 3230.020461][   T30] kauditd_printk_skb: 32 callbacks suppressed
[ 3230.020482][   T30] audit: type=1326 audit(1758930311.878:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2405 comm="syz.6.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3230.050938][   T30] audit: type=1326 audit(1758930311.878:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2405 comm="syz.6.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3230.435958][   T30] audit: type=1326 audit(1758930311.878:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2405 comm="syz.6.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3230.467360][   T30] audit: type=1326 audit(1758930311.878:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2405 comm="syz.6.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3230.765919][   T30] audit: type=1326 audit(1758930311.878:4213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2405 comm="syz.6.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3230.898332][   T30] audit: type=1326 audit(1758930311.888:4214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2405 comm="syz.6.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3230.976019][   T30] audit: type=1326 audit(1758930311.888:4215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2405 comm="syz.6.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5814d2af79 code=0x7ffc0000
[ 3231.088705][   T30] audit: type=1326 audit(1758930311.888:4216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2405 comm="syz.6.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3231.183271][   T30] audit: type=1326 audit(1758930311.888:4217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2405 comm="syz.6.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3231.262454][ T2426] netlink: 'syz.4.6879': attribute type 23 has an invalid length.
[ 3231.538078][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3232.867996][T31692] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 3233.028878][T31692] usb 4-1: Using ep0 maxpacket: 16
[ 3233.036212][T31692] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[ 3233.046318][T31692] usb 4-1: config 0 has no interface number 0
[ 3233.062379][T31692] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 3233.075817][T31692] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 3233.137008][T31692] usb 4-1: config 0 interface 41 has no altsetting 0
[ 3233.166387][T31692] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 3233.263176][T31692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3233.276891][T31692] usb 4-1: Product: syz
[ 3233.283456][T31692] usb 4-1: Manufacturer: syz
[ 3233.288592][   T43] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 3233.307113][T31692] usb 4-1: SerialNumber: syz
[ 3233.323411][T31692] usb 4-1: config 0 descriptor??
[ 3233.332864][ T2443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3233.367482][ T2443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3233.439853][   T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3233.450577][   T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3233.466950][   T43] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 3233.478272][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 3233.486582][   T43] usb 6-1: SerialNumber: syz
[ 3233.596327][ T2443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3233.605157][ T2443] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 3233.704588][   T43] usb 6-1: 0:2 : does not exist
[ 3233.783560][   T43] usb 6-1: USB disconnect, device number 18
[ 3233.936371][ T1577] udevd[1577]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3234.475490][T31692] dm9601 4-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 3234.516159][T31692] dm9601 4-1:0.41 eth9: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, ae:d2:e1:a3:12:0f
[ 3234.562555][T31692] usb 4-1: USB disconnect, device number 28
[ 3234.580397][T31692] dm9601 4-1:0.41 eth9: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet
[ 3234.673914][ T2483] netlink: 'syz.6.6895': attribute type 23 has an invalid length.
[ 3235.445624][ T2489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6898'.
[ 3236.164796][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.172785][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.262604][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.271559][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.286001][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.340401][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.371274][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.434345][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.449805][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.464843][T31692] hid-generic 0006:0004:0009.003C: unknown main item tag 0x0
[ 3236.587032][T31692] hid-generic 0006:0004:0009.003C: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 3236.626645][ T2518] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3237.090816][ T2517] fido_id[2517]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 3238.109636][T14841] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 3238.208322][T31692] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 3238.272833][T14841] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 3238.285663][T14841] usb 6-1: config 0 has no interface number 0
[ 3238.297351][T14841] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 3238.315439][T14841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3238.323962][T14841] usb 6-1: Product: syz
[ 3238.353043][ T2551] netlink: 'syz.4.6915': attribute type 23 has an invalid length.
[ 3238.471518][T31692] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3238.477910][T14841] usb 6-1: Manufacturer: syz
[ 3238.486457][T31692] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3238.500510][T14841] usb 6-1: SerialNumber: syz
[ 3238.528775][T31692] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 3238.538261][T31692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 3238.546259][T31692] usb 4-1: SerialNumber: syz
[ 3238.580149][T14841] usb 6-1: config 0 descriptor??
[ 3238.814650][T14841] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 3238.821245][T31692] usb 4-1: 0:2 : does not exist
[ 3238.832463][T14841] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 3238.901372][T14841] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 3238.914535][T14841] usb 6-1: media controller created
[ 3238.940424][T31692] usb 4-1: USB disconnect, device number 29
[ 3239.054521][ T1485] udevd[1485]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3239.136140][T14841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3239.238630][T14841] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[ 3239.339362][T14841] usb 6-1: USB disconnect, device number 19
[ 3239.520071][ T2554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3239.539805][ T2554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3239.578309][ T2554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3239.610155][ T2555] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3239.640003][ T2553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3239.688793][ T2553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3240.020434][   T30] audit: type=1326 audit(1758930321.888:4218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3240.055004][   T30] audit: type=1326 audit(1758930321.888:4219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3240.079025][T14841] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 3240.087330][   T30] audit: type=1326 audit(1758930321.888:4220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3240.132804][   T10] usb 4-1: new full-speed USB device number 30 using dummy_hcd
[ 3240.234256][   T30] audit: type=1326 audit(1758930321.888:4221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3240.263619][   T30] audit: type=1326 audit(1758930321.888:4222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3240.299190][T14841] usb 6-1: Using ep0 maxpacket: 8
[ 3240.311168][   T30] audit: type=1326 audit(1758930321.888:4223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3240.356952][T14841] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[ 3240.365531][T14841] usb 6-1: config 0 has no interface number 0
[ 3240.376522][T14841] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice= 4.16
[ 3240.386539][T14841] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3240.400958][T14841] usb 6-1: Product: syz
[ 3240.405370][T14841] usb 6-1: Manufacturer: syz
[ 3240.410487][T14841] usb 6-1: SerialNumber: syz
[ 3240.417231][   T10] usb 4-1: config index 0 descriptor too short (expected 69, got 36)
[ 3240.426447][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3240.440228][   T30] audit: type=1326 audit(1758930321.888:4224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3240.487623][ T2573] trusted_key: encrypted_key: insufficient parameters specified
[ 3240.725184][T14841] usb 6-1: config 0 descriptor??
[ 3240.758311][   T10] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[ 3240.767730][   T30] audit: type=1326 audit(1758930321.888:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5814d8d710 code=0x7ffc0000
[ 3240.793327][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3240.803306][   T10] usb 4-1: Product: syz
[ 3240.807563][   T10] usb 4-1: Manufacturer: syz
[ 3240.815816][   T10] usb 4-1: SerialNumber: syz
[ 3240.822071][  T918] kworker/1:2 (918) used greatest stack depth: 15928 bytes left
[ 3240.859725][   T30] audit: type=1326 audit(1758930321.888:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3240.891813][   T10] usb 4-1: config 0 descriptor??
[ 3240.963815][T14841] uvcvideo 6-1:0.31: probe with driver uvcvideo failed with error -22
[ 3240.977045][   T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[ 3240.989772][T14841] usb 6-1: USB disconnect, device number 20
[ 3241.034041][   T30] audit: type=1326 audit(1758930321.888:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2563 comm="syz.6.6919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3241.753675][   T10] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[ 3241.763338][   T10] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71
[ 3241.817631][   T10] usb 4-1: USB disconnect, device number 30
[ 3241.929949][ T2588] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3242.467590][   T10] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[ 3242.546447][ T2611] netlink: 'syz.3.6930': attribute type 23 has an invalid length.
[ 3242.669516][   T10] usb 7-1: Using ep0 maxpacket: 32
[ 3242.679325][   T10] usb 7-1: config 0 has an invalid interface number: 85 but max is 0
[ 3242.696328][   T10] usb 7-1: config 0 has no interface number 0
[ 3242.730515][   T10] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3242.765311][   T10] usb 7-1: config 0 interface 85 has no altsetting 0
[ 3242.797162][   T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 3242.834054][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3242.862075][   T10] usb 7-1: Product: syz
[ 3242.878146][   T10] usb 7-1: Manufacturer: syz
[ 3242.937987][   T10] usb 7-1: SerialNumber: syz
[ 3242.954017][   T10] usb 7-1: config 0 descriptor??
[ 3243.458434][   T10] appletouch 7-1:0.85: Geyser mode initialized.
[ 3243.475164][   T10] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input95
[ 3243.929519][T31692] usb 7-1: USB disconnect, device number 30
[ 3244.080323][T31692] appletouch 7-1:0.85: input: appletouch disconnected
[ 3245.217898][ T2641] trusted_key: encrypted_key: insufficient parameters specified
[ 3246.766234][ T2657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3246.838645][ T2657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3247.017408][   T30] kauditd_printk_skb: 71 callbacks suppressed
[ 3247.017426][   T30] audit: type=1326 audit(1758930328.878:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2645 comm="syz.5.6939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3247.032095][ T2664] usb usb8: usbfs: process 2664 (syz.6.6945) did not claim interface 0 before use
[ 3247.121614][ T2666] netlink: 'syz.3.6944': attribute type 23 has an invalid length.
[ 3247.370677][   T30] audit: type=1326 audit(1758930329.188:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2645 comm="syz.5.6939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3247.943664][   T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[ 3248.107891][   T10] usb 7-1: Using ep0 maxpacket: 32
[ 3248.125473][   T10] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[ 3248.136490][   T10] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 3248.194094][   T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 3248.238015][   T10] usb 7-1: config 1 has no interface number 0
[ 3248.274679][   T10] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3248.322608][   T10] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 10229, setting to 1024
[ 3248.354392][   T10] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 3248.408121][   T10] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 3248.444422][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3248.475417][ T2675] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 3248.497670][   T10] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[ 3248.687061][ T2675] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 3248.716789][   T10] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached
[ 3248.938645][   T10] usb 7-1: USB disconnect, device number 31
[ 3248.946209][   T10] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[ 3249.153452][ T2697] trusted_key: encrypted_key: insufficient parameters specified
[ 3250.114285][ T2717] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3251.976783][ T2738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6963'.
[ 3252.138497][   T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 3252.178067][T23397] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 3252.308092][   T10] usb 6-1: Using ep0 maxpacket: 16
[ 3252.324532][   T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 3252.348285][T23397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3252.364478][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3252.375103][T23397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3252.378067][T31688] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[ 3252.392716][   T10] usb 6-1: Product: syz
[ 3252.399419][ T2749] trusted_key: encrypted_key: insufficient parameters specified
[ 3252.495844][   T10] usb 6-1: Manufacturer: syz
[ 3252.579018][   T10] usb 6-1: SerialNumber: syz
[ 3252.660280][T31688] usb 7-1: Using ep0 maxpacket: 32
[ 3252.666002][T23397] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3252.681422][T31688] usb 7-1: config 0 has an invalid interface number: 235 but max is 0
[ 3252.682926][   T10] usb 6-1: config 0 descriptor??
[ 3252.690662][T31688] usb 7-1: config 0 has no interface number 0
[ 3252.698325][T23397] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3252.713782][T31688] usb 7-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[ 3252.719338][   T10] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 3252.732527][T31688] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3252.759324][T23397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3252.759863][T31688] usb 7-1: Product: syz
[ 3252.774047][T31688] usb 7-1: Manufacturer: syz
[ 3252.779641][T31688] usb 7-1: SerialNumber: syz
[ 3252.810082][T23397] usb 4-1: config 0 descriptor??
[ 3252.815344][T31688] usb 7-1: config 0 descriptor??
[ 3253.112210][T31688] kaweth 7-1:0.235: Firmware present in device.
[ 3253.304463][T23397] hid_parser_main: 7 callbacks suppressed
[ 3253.304486][T23397] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0
[ 3253.305340][T31688] kaweth 7-1:0.235: Statistics collection: 0
[ 3253.319594][T23397] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0
[ 3253.335493][T23397] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0
[ 3253.345657][T23397] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0
[ 3253.353909][T23397] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0
[ 3253.355856][T31688] kaweth 7-1:0.235: Multicast filter limit: 0
[ 3253.371888][T23397] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0
[ 3253.387998][T23397] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0
[ 3253.394888][T31688] kaweth 7-1:0.235: MTU: 0
[ 3253.395853][T23397] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0
[ 3253.401102][T31688] kaweth 7-1:0.235: Read MAC address 00:00:00:00:00:00
[ 3253.425722][T23397] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0
[ 3253.460666][T23397] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 3253.608832][T31692] usb 4-1: USB disconnect, device number 31
[ 3253.742193][   T10] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71
[ 3253.769745][   T10] usb 6-1: USB disconnect, device number 21
[ 3253.907523][T31688] kaweth 7-1:0.235: Error setting receive filter
[ 3253.919506][T31688] kaweth 7-1:0.235: probe with driver kaweth failed with error -5
[ 3253.936361][T31688] usb 7-1: USB disconnect, device number 32
[ 3254.764399][ T2780] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3255.027944][T31688] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[ 3255.440179][T31688] usb 7-1: Using ep0 maxpacket: 32
[ 3255.490839][T31688] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 3255.500920][T31688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3255.544451][T31688] usb 7-1: config 0 descriptor??
[ 3255.559777][T31688] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 3256.317959][   T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 3256.500016][   T10] usb 6-1: Using ep0 maxpacket: 8
[ 3256.505803][   T30] audit: type=1326 audit(1758930338.348:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3256.530127][   T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 3256.538624][   T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3256.548894][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 3256.559244][   T30] audit: type=1326 audit(1758930338.348:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3256.583663][T31688] gspca_sunplus: reg_w_riv err -71
[ 3256.657992][T31688] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[ 3256.658520][   T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 3256.677129][   T30] audit: type=1326 audit(1758930338.348:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3256.712173][T31688] usb 7-1: USB disconnect, device number 33
[ 3256.731404][   T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3256.832953][   T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 3256.853317][   T30] audit: type=1326 audit(1758930338.348:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3256.884869][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3256.907359][   T30] audit: type=1326 audit(1758930338.348:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3257.053659][ T2801] netlink: 'syz.4.6981': attribute type 23 has an invalid length.
[ 3257.221249][   T10] usb 6-1: GET_CAPABILITIES returned 0
[ 3257.232042][   T10] usbtmc 6-1:16.0: can't read capabilities
[ 3257.265256][   T30] audit: type=1326 audit(1758930338.348:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3257.307126][   T30] audit: type=1326 audit(1758930338.348:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3257.429258][   T10] usb 6-1: USB disconnect, device number 22
[ 3257.560595][   T30] audit: type=1326 audit(1758930338.348:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f46be78d710 code=0x7ffc0000
[ 3257.655680][   T30] audit: type=1326 audit(1758930338.348:4309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3257.787118][   T30] audit: type=1326 audit(1758930338.348:4310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2789 comm="syz.3.6979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46be78eec9 code=0x7ffc0000
[ 3257.937994][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3258.843384][ T2827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6988'.
[ 3258.852939][ T2827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6988'.
[ 3259.950613][ T2851] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 3260.270790][ T2857] 8021q: adding VLAN 0 to HW filter on device bond13
[ 3261.688056][   T30] kauditd_printk_skb: 26 callbacks suppressed
[ 3261.688077][   T30] audit: type=1326 audit(1758930343.508:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3261.973530][   T30] audit: type=1326 audit(1758930343.508:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3262.284512][   T30] audit: type=1326 audit(1758930343.508:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3262.354620][   T30] audit: type=1326 audit(1758930343.508:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3262.438165][   T30] audit: type=1326 audit(1758930343.508:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3262.567668][   T30] audit: type=1326 audit(1758930343.508:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3262.808388][   T30] audit: type=1326 audit(1758930343.518:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3262.969268][   T30] audit: type=1326 audit(1758930343.518:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3263.117404][   T30] audit: type=1326 audit(1758930343.518:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f192798d710 code=0x7ffc0000
[ 3263.247940][   T30] audit: type=1326 audit(1758930343.518:4346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2870 comm="syz.4.6997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3265.268120][T31692] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[ 3265.421834][T31692] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 3265.440314][T31692] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 3265.459192][T31692] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 3265.468824][T31692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3265.528977][ T2933] netlink: 60 bytes leftover after parsing attributes in process `syz.6.7015'.
[ 3265.647983][   T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 3265.692153][T31692] usb 4-1: usb_control_msg returned -32
[ 3265.718613][T31692] usbtmc 4-1:16.0: can't read capabilities
[ 3265.807920][   T43] usb 6-1: Using ep0 maxpacket: 8
[ 3265.828300][   T43] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 3265.838267][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3265.846730][   T43] usb 6-1: Product: syz
[ 3265.889479][   T43] usb 6-1: Manufacturer: syz
[ 3265.897141][   T43] usb 6-1: SerialNumber: syz
[ 3265.916094][   T43] usb 6-1: config 0 descriptor??
[ 3265.933034][   T43] gspca_main: sq905-2.14.0 probing 2770:9120
[ 3266.955771][   T43] gspca_sq905: sq905_read_data: usb_control_msg failed (-71)
[ 3266.968166][   T43] sq905 6-1:0.0: probe with driver sq905 failed with error -71
[ 3267.001073][   T43] usb 6-1: USB disconnect, device number 23
[ 3267.992507][   T30] kauditd_printk_skb: 140 callbacks suppressed
[ 3267.992524][   T30] audit: type=1326 audit(1758930349.598:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2945 comm="syz.6.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3268.076682][   T30] audit: type=1326 audit(1758930349.598:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2945 comm="syz.6.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3268.166643][T23397] usb 4-1: USB disconnect, device number 32
[ 3268.217623][   T30] audit: type=1326 audit(1758930349.598:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2945 comm="syz.6.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3268.252933][ T2952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7020'.
[ 3268.305056][   T30] audit: type=1326 audit(1758930349.598:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2945 comm="syz.6.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3268.366187][   T30] audit: type=1326 audit(1758930349.598:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2945 comm="syz.6.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3268.431151][   T30] audit: type=1326 audit(1758930349.598:4492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2945 comm="syz.6.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3268.467456][   T30] audit: type=1326 audit(1758930349.598:4493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2945 comm="syz.6.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5814d2af79 code=0x7ffc0000
[ 3268.495156][   T30] audit: type=1326 audit(1758930349.598:4494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2945 comm="syz.6.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3268.532941][   T30] audit: type=1326 audit(1758930349.598:4495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2945 comm="syz.6.7019" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d8eec9 code=0x7ffc0000
[ 3268.662966][ T2964] netlink: 'syz.4.7025': attribute type 11 has an invalid length.
[ 3268.698195][T23397] usb 4-1: new low-speed USB device number 33 using dummy_hcd
[ 3268.864844][T23397] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 3268.872826][T23397] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 3268.915783][T23397] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3268.947524][T23397] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 3268.971726][T23397] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 3268.995592][T23397] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 3269.021089][T23397] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 3269.387129][ T2973] netlink: 'syz.4.7028': attribute type 23 has an invalid length.
[ 3269.628448][T23397] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3269.845089][T23397] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 3269.869723][ T2975] trusted_key: encrypted_key: insufficient parameters specified
[ 3269.887984][T23397] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 3270.019609][T23397] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[ 3270.033637][T23397] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 3270.044595][T23397] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3270.064386][T23397] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 3270.096163][T23397] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 3270.161259][T23397] usb 4-1: string descriptor 0 read error: -22
[ 3270.168671][T23397] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 3270.178632][T23397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3270.242705][T23397] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 3270.968768][   T43] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 3271.026099][   T30] audit: type=1326 audit(1758930352.888:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2981 comm="syz.4.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192798eec9 code=0x7ffc0000
[ 3271.140539][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3271.152318][   T43] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 3271.161781][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3271.172431][   T43] usb 6-1: config 0 descriptor??
[ 3271.178401][T23397] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[ 3271.340035][T23397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3271.351725][T23397] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3271.362782][T23397] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3271.375950][T23397] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3271.385281][T23397] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3271.397470][T23397] usb 7-1: config 0 descriptor??
[ 3271.541944][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[ 3271.548944][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[ 3271.599612][   T43] keytouch 0003:0926:3333.003E: fixing up Keytouch IEC report descriptor
[ 3271.623390][   T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.003E/input/input96
[ 3271.859945][T23397] plantronics 0003:047F:FFFF.003F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 3271.890817][   T43] keytouch 0003:0926:3333.003E: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0
[ 3272.050273][   T10] usb 7-1: USB disconnect, device number 34
[ 3272.582756][   T43] usb 4-1: USB disconnect, device number 33
[ 3273.848184][T31688] usb 6-1: USB disconnect, device number 24
[ 3273.924908][ T3023] syz_tun: entered allmulticast mode
[ 3273.944202][ T3022] syz_tun: left allmulticast mode
[ 3274.202023][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 3274.202037][   T30] audit: type=1326 audit(1758930356.008:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3020 comm="syz.5.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3274.288323][   T30] audit: type=1326 audit(1758930356.008:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3020 comm="syz.5.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3274.347064][   T30] audit: type=1326 audit(1758930356.038:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3020 comm="syz.5.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3274.414220][   T30] audit: type=1326 audit(1758930356.038:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3020 comm="syz.5.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3274.510784][   T30] audit: type=1326 audit(1758930356.038:4509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3020 comm="syz.5.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3274.551331][   T30] audit: type=1326 audit(1758930356.038:4510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3020 comm="syz.5.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3274.579818][   T30] audit: type=1326 audit(1758930356.038:4511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3020 comm="syz.5.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7de0d2af79 code=0x7ffc0000
[ 3274.644148][   T30] audit: type=1326 audit(1758930356.038:4512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3020 comm="syz.5.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3274.688913][ T3032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7047'.
[ 3274.711249][   T30] audit: type=1326 audit(1758930356.038:4513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3020 comm="syz.5.7044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3275.687957][T31688] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 3275.768114][   T43] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[ 3275.853348][T31688] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 3275.874182][T31688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3275.938004][   T43] usb 7-1: config 0 has no interfaces?
[ 3275.945404][T31688] usb 4-1: config 0 descriptor??
[ 3275.993870][   T43] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 3276.037903][T31692] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[ 3276.049675][T31688] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 3276.074881][   T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3276.099463][   T43] usb 7-1: Product: syz
[ 3276.103701][   T43] usb 7-1: Manufacturer: syz
[ 3276.161159][ T3073] netlink: 'syz.5.7062': attribute type 23 has an invalid length.
[ 3276.423760][   T43] usb 7-1: SerialNumber: syz
[ 3276.432408][T31692] usb 5-1: config 0 has no interfaces?
[ 3276.485754][T31692] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 3276.555441][   T43] usb 7-1: config 0 descriptor??
[ 3276.600145][T31692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3276.700483][T31692] usb 5-1: config 0 descriptor??
[ 3276.858955][T31688] gspca_stv06xx: I2C: Read error writing address: -71
[ 3276.898833][T31688] usb 4-1: USB disconnect, device number 34
[ 3276.938271][T23397] usb 5-1: USB disconnect, device number 36
[ 3278.755268][T31688] usb 7-1: USB disconnect, device number 35
[ 3279.638839][ T3111] netlink: 'syz.6.7074': attribute type 23 has an invalid length.
[ 3281.680802][T31692] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 3281.689449][ T3137] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7084'.
[ 3281.708254][ T3137] netlink: 'syz.4.7084': attribute type 7 has an invalid length.
[ 3281.735915][ T3137] netlink: 'syz.4.7084': attribute type 8 has an invalid length.
[ 3281.818033][ T3137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7084'.
[ 3281.892141][T31692] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3281.923913][T31692] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3281.955638][T31692] usb 6-1: config 0 interface 0 has no altsetting 0
[ 3281.979208][T31692] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[ 3282.001683][T31692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3282.047842][T31692] usb 6-1: config 0 descriptor??
[ 3282.763813][T31692] usb 6-1: string descriptor 0 read error: -22
[ 3282.883170][T31692] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0040/input/input97
[ 3283.053754][T31692] uclogic 0003:256C:006D.0040: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input0
[ 3283.121498][T31692] usb 6-1: USB disconnect, device number 25
[ 3283.382093][ T3158] fido_id[3158]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 3283.485939][ T3161] 8021q: adding VLAN 0 to HW filter on device bond13
[ 3285.137304][ T3180] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3285.222951][ T3181] netlink: 'syz.6.7095': attribute type 23 has an invalid length.
[ 3287.305357][ T3211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7105'.
[ 3287.363364][   T30] audit: type=1326 audit(1758930369.208:4514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3287.422431][   T30] audit: type=1326 audit(1758930369.208:4515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3287.608437][   T30] audit: type=1326 audit(1758930369.208:4516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3287.694958][   T30] audit: type=1326 audit(1758930369.208:4517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3287.720055][   T30] audit: type=1326 audit(1758930369.218:4518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3287.743745][   T30] audit: type=1326 audit(1758930369.218:4519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3287.816944][   T30] audit: type=1326 audit(1758930369.218:4520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3287.900909][   T30] audit: type=1326 audit(1758930369.218:4521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3287.972668][   T30] audit: type=1326 audit(1758930369.218:4522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7de0d8d710 code=0x7ffc0000
[ 3287.998908][   T30] audit: type=1326 audit(1758930369.218:4523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3198 comm="syz.5.7102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7de0d8eec9 code=0x7ffc0000
[ 3288.487944][ T3225] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 3288.699232][ T3225] 8021q: adding VLAN 0 to HW filter on device bond14
[ 3288.887727][ T3234] netlink: 'syz.3.7111': attribute type 23 has an invalid length.
[ 3289.568311][ T3241] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3290.906282][   T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 3290.952930][ T3261] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3291.080342][   T10] usb 4-1: Using ep0 maxpacket: 16
[ 3291.087470][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3291.099159][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3291.119839][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 3291.210917][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[ 3291.255096][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3291.306052][   T10] usb 4-1: config 0 descriptor??
[ 3291.818967][   T10] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0041/input/input98
[ 3291.967823][   T10] appleir 0003:05AC:8241.0041: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[ 3292.044146][   T10] usb 4-1: USB disconnect, device number 35
[ 3292.311338][ T3275] fido_id[3275]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 3292.826773][ T3286] netlink: 'syz.6.7126': attribute type 23 has an invalid length.
[ 3292.945900][ T3288] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3293.039293][ T3290] 
[ 3293.041693][ T3290] =====================================================
[ 3293.048642][ T3290] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 3293.056117][ T3290] syzkaller #0 Not tainted
[ 3293.060882][ T3290] -----------------------------------------------------
[ 3293.067923][ T3290] syz.5.7127/3290 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 3293.075578][ T3290] ffff888079b6c558 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 3293.084321][ T3290] 
[ 3293.084321][ T3290] and this task is already holding:
[ 3293.091689][ T3290] ffff8880269ab028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 3293.101572][ T3290] which would create a new lock dependency:
[ 3293.107492][ T3290]  (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 3293.115607][ T3290] 
[ 3293.115607][ T3290] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 3293.125064][ T3290]  (&client->buffer_lock){..-.}-{3:3}
[ 3293.125122][ T3290] 
[ 3293.125122][ T3290] ... which became SOFTIRQ-irq-safe at:
[ 3293.138194][ T3290]   lock_acquire+0x120/0x360
[ 3293.142821][ T3290]   _raw_spin_lock+0x2e/0x40
[ 3293.147431][ T3290]   evdev_pass_values+0xb9/0xbd0
[ 3293.152380][ T3290]   evdev_events+0x1e6/0x340
[ 3293.156982][ T3290]   input_pass_values+0x288/0x890
[ 3293.162035][ T3290]   input_event_dispose+0x3e5/0x6b0
[ 3293.167284][ T3290]   input_event+0x89/0xe0
[ 3293.171643][ T3290]   hidinput_hid_event+0x1362/0x1ca0
[ 3293.176971][ T3290]   hid_process_event+0x4be/0x620
[ 3293.182013][ T3290]   hid_report_raw_event+0xe91/0x16d0
[ 3293.187400][ T3290]   hid_input_report+0x43e/0x520
[ 3293.192377][ T3290]   hid_irq_in+0x47e/0x6d0
[ 3293.196826][ T3290]   __usb_hcd_giveback_urb+0x376/0x540
[ 3293.202300][ T3290]   dummy_timer+0x862/0x4550
[ 3293.207013][ T3290]   __hrtimer_run_queues+0x529/0xc60
[ 3293.212334][ T3290]   hrtimer_run_softirq+0x187/0x2b0
[ 3293.217571][ T3290]   handle_softirqs+0x283/0x870
[ 3293.222462][ T3290]   __irq_exit_rcu+0xca/0x1f0
[ 3293.227261][ T3290]   irq_exit_rcu+0x9/0x30
[ 3293.231625][ T3290]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 3293.237374][ T3290]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3293.243469][ T3290]   lock_acquire+0x175/0x360
[ 3293.248104][ T3290]   unwind_next_frame+0xc2/0x2390
[ 3293.253247][ T3290]   arch_stack_walk+0x11c/0x150
[ 3293.258145][ T3290]   stack_trace_save+0x9c/0xe0
[ 3293.262951][ T3290]   kasan_save_track+0x3e/0x80
[ 3293.267768][ T3290]   kasan_save_free_info+0x46/0x50
[ 3293.272918][ T3290]   __kasan_slab_free+0x5b/0x80
[ 3293.277838][ T3290]   kfree+0x18e/0x440
[ 3293.281860][ T3290]   tomoyo_check_open_permission+0x2c2/0x3b0
[ 3293.287886][ T3290]   security_file_open+0xb1/0x270
[ 3293.292955][ T3290]   do_dentry_open+0x384/0x13f0
[ 3293.297860][ T3290]   vfs_open+0x3b/0x340
[ 3293.302045][ T3290]   path_openat+0x2ee5/0x3830
[ 3293.306846][ T3290]   do_filp_open+0x1fa/0x410
[ 3293.311507][ T3290]   do_sys_openat2+0x121/0x1c0
[ 3293.316302][ T3290]   __x64_sys_openat+0x138/0x170
[ 3293.321276][ T3290]   do_syscall_64+0xfa/0x3b0
[ 3293.325904][ T3290]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3293.331916][ T3290] 
[ 3293.331916][ T3290] to a SOFTIRQ-irq-unsafe lock:
[ 3293.338968][ T3290]  (tasklist_lock){.+.+}-{3:3}
[ 3293.339039][ T3290] 
[ 3293.339039][ T3290] ... which became SOFTIRQ-irq-unsafe at:
[ 3293.351722][ T3290] ...
[ 3293.351735][ T3290]   lock_acquire+0x120/0x360
[ 3293.358956][ T3290]   _raw_read_lock+0x36/0x50
[ 3293.363582][ T3290]   __do_wait+0xde/0x740
[ 3293.367861][ T3290]   do_wait+0x1f8/0x520
[ 3293.372048][ T3290]   kernel_wait+0xab/0x170
[ 3293.376509][ T3290]   call_usermodehelper_exec_work+0xbe/0x230
[ 3293.382557][ T3290]   process_scheduled_works+0xae1/0x17b0
[ 3293.388224][ T3290]   worker_thread+0x8a0/0xda0
[ 3293.392937][ T3290]   kthread+0x70e/0x8a0
[ 3293.397153][ T3290]   ret_from_fork+0x439/0x7d0
[ 3293.401860][ T3290]   ret_from_fork_asm+0x1a/0x30
[ 3293.406754][ T3290] 
[ 3293.406754][ T3290] other info that might help us debug this:
[ 3293.406754][ T3290] 
[ 3293.417024][ T3290] Chain exists of:
[ 3293.417024][ T3290]   &client->buffer_lock --> &new->fa_lock --> tasklist_lock
[ 3293.417024][ T3290] 
[ 3293.430295][ T3290]  Possible interrupt unsafe locking scenario:
[ 3293.430295][ T3290] 
[ 3293.438631][ T3290]        CPU0                    CPU1
[ 3293.444007][ T3290]        ----                    ----
[ 3293.449442][ T3290]   lock(tasklist_lock);
[ 3293.453701][ T3290]                                local_irq_disable();
[ 3293.460479][ T3290]                                lock(&client->buffer_lock);
[ 3293.467869][ T3290]                                lock(&new->fa_lock);
[ 3293.474645][ T3290]   <Interrupt>
[ 3293.478105][ T3290]     lock(&client->buffer_lock);
[ 3293.483229][ T3290] 
[ 3293.483229][ T3290]  *** DEADLOCK ***
[ 3293.483229][ T3290] 
[ 3293.491898][ T3290] 7 locks held by syz.5.7127/3290:
[ 3293.497103][ T3290]  #0: ffff8880294b1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[ 3293.506269][ T3290]  #1: ffff888141369230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 3293.516430][ T3290]  #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 3293.526114][ T3290]  #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 3293.535708][ T3290]  #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 3293.544860][ T3290]  #5: ffff8880269ab028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 3293.555058][ T3290]  #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 3293.564162][ T3290] 
[ 3293.564162][ T3290] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 3293.574576][ T3290] -> (&client->buffer_lock){..-.}-{3:3} {
[ 3293.580331][ T3290]    IN-SOFTIRQ-W at:
[ 3293.584401][ T3290]                     lock_acquire+0x120/0x360
[ 3293.590595][ T3290]                     _raw_spin_lock+0x2e/0x40
[ 3293.596768][ T3290]                     evdev_pass_values+0xb9/0xbd0
[ 3293.603283][ T3290]                     evdev_events+0x1e6/0x340
[ 3293.609452][ T3290]                     input_pass_values+0x288/0x890
[ 3293.616060][ T3290]                     input_event_dispose+0x3e5/0x6b0
[ 3293.622849][ T3290]                     input_event+0x89/0xe0
[ 3293.628759][ T3290]                     hidinput_hid_event+0x1362/0x1ca0
[ 3293.635653][ T3290]                     hid_process_event+0x4be/0x620
[ 3293.642258][ T3290]                     hid_report_raw_event+0xe91/0x16d0
[ 3293.649202][ T3290]                     hid_input_report+0x43e/0x520
[ 3293.655720][ T3290]                     hid_irq_in+0x47e/0x6d0
[ 3293.661716][ T3290]                     __usb_hcd_giveback_urb+0x376/0x540
[ 3293.668748][ T3290]                     dummy_timer+0x862/0x4550
[ 3293.674909][ T3290]                     __hrtimer_run_queues+0x529/0xc60
[ 3293.681772][ T3290]                     hrtimer_run_softirq+0x187/0x2b0
[ 3293.688543][ T3290]                     handle_softirqs+0x283/0x870
[ 3293.694973][ T3290]                     __irq_exit_rcu+0xca/0x1f0
[ 3293.701223][ T3290]                     irq_exit_rcu+0x9/0x30
[ 3293.707124][ T3290]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[ 3293.714504][ T3290]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 3293.722142][ T3290]                     lock_acquire+0x175/0x360
[ 3293.728326][ T3290]                     unwind_next_frame+0xc2/0x2390
[ 3293.734925][ T3290]                     arch_stack_walk+0x11c/0x150
[ 3293.741349][ T3290]                     stack_trace_save+0x9c/0xe0
[ 3293.747710][ T3290]                     kasan_save_track+0x3e/0x80
[ 3293.754075][ T3290]                     kasan_save_free_info+0x46/0x50
[ 3293.760776][ T3290]                     __kasan_slab_free+0x5b/0x80
[ 3293.767218][ T3290]                     kfree+0x18e/0x440
[ 3293.772794][ T3290]                     tomoyo_check_open_permission+0x2c2/0x3b0
[ 3293.780373][ T3290]                     security_file_open+0xb1/0x270
[ 3293.787096][ T3290]                     do_dentry_open+0x384/0x13f0
[ 3293.793535][ T3290]                     vfs_open+0x3b/0x340
[ 3293.799355][ T3290]                     path_openat+0x2ee5/0x3830
[ 3293.805622][ T3290]                     do_filp_open+0x1fa/0x410
[ 3293.811850][ T3290]                     do_sys_openat2+0x121/0x1c0
[ 3293.818332][ T3290]                     __x64_sys_openat+0x138/0x170
[ 3293.824858][ T3290]                     do_syscall_64+0xfa/0x3b0
[ 3293.831220][ T3290]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3293.838981][ T3290]    INITIAL USE at:
[ 3293.842898][ T3290]                    lock_acquire+0x120/0x360
[ 3293.848992][ T3290]                    _raw_spin_lock_irqsave+0xa7/0xf0
[ 3293.855786][ T3290]                    evdev_ioctl_handler+0x1969/0x1f10
[ 3293.862658][ T3290]                    __se_sys_ioctl+0xf9/0x170
[ 3293.868832][ T3290]                    do_syscall_64+0xfa/0x3b0
[ 3293.874927][ T3290]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3293.882433][ T3290]  }
[ 3293.884941][ T3290]  ... key      at: [<ffffffff99e342a0>] evdev_open.__key.25+0x0/0x20
[ 3293.893143][ T3290] 
[ 3293.893143][ T3290] the dependencies between the lock to be acquired
[ 3293.893158][ T3290]  and SOFTIRQ-irq-unsafe lock:
[ 3293.906809][ T3290]   -> (tasklist_lock){.+.+}-{3:3} {
[ 3293.912142][ T3290]      HARDIRQ-ON-R at:
[ 3293.916327][ T3290]                         lock_acquire+0x120/0x360
[ 3293.922847][ T3290]                         _raw_read_lock+0x36/0x50
[ 3293.929368][ T3290]                         __do_wait+0xde/0x740
[ 3293.935561][ T3290]                         do_wait+0x1f8/0x520
[ 3293.941641][ T3290]                         kernel_wait+0xab/0x170
[ 3293.947990][ T3290]                         call_usermodehelper_exec_work+0xbe/0x230
[ 3293.955912][ T3290]                         process_scheduled_works+0xae1/0x17b0
[ 3293.963471][ T3290]                         worker_thread+0x8a0/0xda0
[ 3293.970069][ T3290]                         kthread+0x70e/0x8a0
[ 3293.976206][ T3290]                         ret_from_fork+0x439/0x7d0
[ 3293.982802][ T3290]                         ret_from_fork_asm+0x1a/0x30
[ 3293.989577][ T3290]      SOFTIRQ-ON-R at:
[ 3293.993855][ T3290]                         lock_acquire+0x120/0x360
[ 3294.000460][ T3290]                         _raw_read_lock+0x36/0x50
[ 3294.007056][ T3290]                         __do_wait+0xde/0x740
[ 3294.013231][ T3290]                         do_wait+0x1f8/0x520
[ 3294.019327][ T3290]                         kernel_wait+0xab/0x170
[ 3294.025755][ T3290]                         call_usermodehelper_exec_work+0xbe/0x230
[ 3294.033662][ T3290]                         process_scheduled_works+0xae1/0x17b0
[ 3294.041212][ T3290]                         worker_thread+0x8a0/0xda0
[ 3294.047811][ T3290]                         kthread+0x70e/0x8a0
[ 3294.053896][ T3290]                         ret_from_fork+0x439/0x7d0
[ 3294.060492][ T3290]                         ret_from_fork_asm+0x1a/0x30
[ 3294.067271][ T3290]      INITIAL USE at:
[ 3294.071347][ T3290]                        lock_acquire+0x120/0x360
[ 3294.077777][ T3290]                        _raw_write_lock_irq+0xa2/0xf0
[ 3294.084633][ T3290]                        copy_process+0x224f/0x3c00
[ 3294.091229][ T3290]                        kernel_clone+0x21e/0x840
[ 3294.097652][ T3290]                        user_mode_thread+0xdd/0x140
[ 3294.104352][ T3290]                        rest_init+0x23/0x300
[ 3294.110457][ T3290]                        start_kernel+0x3a9/0x410
[ 3294.116900][ T3290]                        x86_64_start_reservations+0x24/0x30
[ 3294.124288][ T3290]                        x86_64_start_kernel+0x143/0x1c0
[ 3294.131326][ T3290]                        common_startup_64+0x13e/0x147
[ 3294.138448][ T3290]      INITIAL READ USE at:
[ 3294.142956][ T3290]                             lock_acquire+0x120/0x360
[ 3294.149820][ T3290]                             _raw_read_lock+0x36/0x50
[ 3294.156703][ T3290]                             __do_wait+0xde/0x740
[ 3294.163239][ T3290]                             do_wait+0x1f8/0x520
[ 3294.169687][ T3290]                             kernel_wait+0xab/0x170
[ 3294.176487][ T3290]                             call_usermodehelper_exec_work+0xbe/0x230
[ 3294.184776][ T3290]                             process_scheduled_works+0xae1/0x17b0
[ 3294.192678][ T3290]                             worker_thread+0x8a0/0xda0
[ 3294.199622][ T3290]                             kthread+0x70e/0x8a0
[ 3294.206046][ T3290]                             ret_from_fork+0x439/0x7d0
[ 3294.213001][ T3290]                             ret_from_fork_asm+0x1a/0x30
[ 3294.220125][ T3290]    }
[ 3294.222795][ T3290]    ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[ 3294.230702][ T3290]    ... acquired at:
[ 3294.234694][ T3290]    lock_acquire+0x120/0x360
[ 3294.239398][ T3290]    _raw_read_lock+0x36/0x50
[ 3294.244187][ T3290]    send_sigurg+0x12b/0x420
[ 3294.248796][ T3290]    sk_send_sigurg+0x6c/0x2e0
[ 3294.253580][ T3290]    queue_oob+0x420/0x4f0
[ 3294.258014][ T3290]    unix_stream_sendmsg+0xc3f/0xdf0
[ 3294.263310][ T3290]    __sock_sendmsg+0x219/0x270
[ 3294.268173][ T3290]    ____sys_sendmsg+0x505/0x830
[ 3294.273226][ T3290]    ___sys_sendmsg+0x21f/0x2a0
[ 3294.278154][ T3290]    __x64_sys_sendmsg+0x19b/0x260
[ 3294.283307][ T3290]    do_syscall_64+0xfa/0x3b0
[ 3294.288010][ T3290]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3294.294135][ T3290] 
[ 3294.296474][ T3290]  -> (&f_owner->lock){....}-{3:3} {
[ 3294.301793][ T3290]     INITIAL USE at:
[ 3294.305798][ T3290]                      lock_acquire+0x120/0x360
[ 3294.312060][ T3290]                      _raw_write_lock_irq+0xa2/0xf0
[ 3294.318747][ T3290]                      __f_setown+0x67/0x370
[ 3294.324752][ T3290]                      f_setown+0x23a/0x300
[ 3294.330659][ T3290]                      do_fcntl+0x11d/0x1910
[ 3294.336737][ T3290]                      __se_sys_fcntl+0xc8/0x150
[ 3294.343074][ T3290]                      do_syscall_64+0xfa/0x3b0
[ 3294.349329][ T3290]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3294.357109][ T3290]     INITIAL READ USE at:
[ 3294.361541][ T3290]                           lock_acquire+0x120/0x360
[ 3294.368241][ T3290]                           _raw_read_lock_irqsave+0xaf/0x100
[ 3294.375706][ T3290]                           send_sigio+0x38/0x370
[ 3294.382129][ T3290]                           kill_fasync+0x24d/0x4d0
[ 3294.388732][ T3290]                           sock_wake_async+0x137/0x160
[ 3294.395676][ T3290]                           sk_wake_async+0x184/0x280
[ 3294.402454][ T3290]                           unix_release_sock+0x78c/0xd50
[ 3294.409666][ T3290]                           unix_release+0x92/0xd0
[ 3294.416212][ T3290]                           sock_close+0xc0/0x240
[ 3294.422644][ T3290]                           __fput+0x449/0xa70
[ 3294.428811][ T3290]                           task_work_run+0x1d1/0x260
[ 3294.435685][ T3290]                           get_signal+0x11ed/0x1340
[ 3294.442392][ T3290]                           arch_do_signal_or_restart+0x9a/0x750
[ 3294.450135][ T3290]                           exit_to_user_mode_loop+0x75/0x110
[ 3294.457627][ T3290]                           do_syscall_64+0x2bd/0x3b0
[ 3294.464397][ T3290]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3294.472483][ T3290]   }
[ 3294.475153][ T3290]   ... key      at: [<ffffffff99b34fe0>] file_f_owner_allocate.__key+0x0/0x20
[ 3294.484138][ T3290]   ... acquired at:
[ 3294.488039][ T3290]    lock_acquire+0x120/0x360
[ 3294.492756][ T3290]    _raw_read_lock_irqsave+0xaf/0x100
[ 3294.498236][ T3290]    send_sigio+0x38/0x370
[ 3294.502680][ T3290]    kill_fasync+0x24d/0x4d0
[ 3294.507280][ T3290]    sock_wake_async+0x137/0x160
[ 3294.512222][ T3290]    sk_wake_async+0x184/0x280
[ 3294.517002][ T3290]    unix_release_sock+0x78c/0xd50
[ 3294.522130][ T3290]    unix_release+0x92/0xd0
[ 3294.526644][ T3290]    sock_close+0xc0/0x240
[ 3294.531069][ T3290]    __fput+0x449/0xa70
[ 3294.535231][ T3290]    task_work_run+0x1d1/0x260
[ 3294.540010][ T3290]    get_signal+0x11ed/0x1340
[ 3294.544691][ T3290]    arch_do_signal_or_restart+0x9a/0x750
[ 3294.550440][ T3290]    exit_to_user_mode_loop+0x75/0x110
[ 3294.555925][ T3290]    do_syscall_64+0x2bd/0x3b0
[ 3294.560697][ T3290]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3294.566785][ T3290] 
[ 3294.569117][ T3290] -> (&new->fa_lock){....}-{3:3} {
[ 3294.574259][ T3290]    INITIAL USE at:
[ 3294.578242][ T3290]                    lock_acquire+0x120/0x360
[ 3294.584324][ T3290]                    _raw_write_lock_irq+0xa2/0xf0
[ 3294.590832][ T3290]                    fasync_remove_entry+0xf1/0x1c0
[ 3294.597431][ T3290]                    sock_fasync+0x85/0xf0
[ 3294.603335][ T3290]                    __fput+0x89f/0xa70
[ 3294.608883][ T3290]                    task_work_run+0x1d1/0x260
[ 3294.615100][ T3290]                    exit_to_user_mode_loop+0xec/0x110
[ 3294.621966][ T3290]                    do_syscall_64+0x2bd/0x3b0
[ 3294.628160][ T3290]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3294.635629][ T3290]    INITIAL READ USE at:
[ 3294.639977][ T3290]                         lock_acquire+0x120/0x360
[ 3294.646492][ T3290]                         _raw_read_lock_irqsave+0xaf/0x100
[ 3294.653793][ T3290]                         kill_fasync+0x199/0x4d0
[ 3294.660327][ T3290]                         sock_wake_async+0x137/0x160
[ 3294.667091][ T3290]                         sk_wake_async+0x184/0x280
[ 3294.673690][ T3290]                         unix_release_sock+0x78c/0xd50
[ 3294.680640][ T3290]                         unix_release+0x92/0xd0
[ 3294.686986][ T3290]                         sock_close+0xc0/0x240
[ 3294.693237][ T3290]                         __fput+0x449/0xa70
[ 3294.699225][ T3290]                         task_work_run+0x1d1/0x260
[ 3294.705835][ T3290]                         get_signal+0x11ed/0x1340
[ 3294.712345][ T3290]                         arch_do_signal_or_restart+0x9a/0x750
[ 3294.719934][ T3290]                         exit_to_user_mode_loop+0x75/0x110
[ 3294.727234][ T3290]                         do_syscall_64+0x2bd/0x3b0
[ 3294.733830][ T3290]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3294.741739][ T3290]  }
[ 3294.744254][ T3290]  ... key      at: [<ffffffff99b35000>] fasync_insert_entry.__key+0x0/0x20
[ 3294.753092][ T3290]  ... acquired at:
[ 3294.756903][ T3290]    lock_acquire+0x120/0x360
[ 3294.761600][ T3290]    _raw_read_lock_irqsave+0xaf/0x100
[ 3294.767066][ T3290]    kill_fasync+0x199/0x4d0
[ 3294.771668][ T3290]    evdev_pass_values+0x627/0xbd0
[ 3294.776874][ T3290]    evdev_events+0x1e6/0x340
[ 3294.781569][ T3290]    input_pass_values+0x288/0x890
[ 3294.786694][ T3290]    input_event_dispose+0x330/0x6b0
[ 3294.791988][ T3290]    input_inject_event+0x1dd/0x340
[ 3294.797208][ T3290]    evdev_write+0x2fc/0x480
[ 3294.801807][ T3290]    vfs_write+0x27e/0xb30
[ 3294.806237][ T3290]    ksys_write+0x145/0x250
[ 3294.810769][ T3290]    do_syscall_64+0xfa/0x3b0
[ 3294.815540][ T3290]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3294.821613][ T3290] 
[ 3294.823945][ T3290] 
[ 3294.823945][ T3290] stack backtrace:
[ 3294.829857][ T3290] CPU: 1 UID: 0 PID: 3290 Comm: syz.5.7127 Not tainted syzkaller #0 PREEMPT(full) 
[ 3294.829879][ T3290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 3294.829897][ T3290] Call Trace:
[ 3294.829908][ T3290]  <TASK>
[ 3294.829917][ T3290]  dump_stack_lvl+0x189/0x250
[ 3294.829942][ T3290]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3294.829963][ T3290]  ? __pfx__printk+0x10/0x10
[ 3294.829992][ T3290]  validate_chain+0x1f05/0x2140
[ 3294.830019][ T3290]  __lock_acquire+0xab9/0xd20
[ 3294.830047][ T3290]  ? kill_fasync+0x199/0x4d0
[ 3294.830066][ T3290]  lock_acquire+0x120/0x360
[ 3294.830089][ T3290]  ? kill_fasync+0x199/0x4d0
[ 3294.830114][ T3290]  _raw_read_lock_irqsave+0xaf/0x100
[ 3294.830131][ T3290]  ? kill_fasync+0x199/0x4d0
[ 3294.830149][ T3290]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[ 3294.830165][ T3290]  ? do_raw_spin_lock+0x121/0x290
[ 3294.830195][ T3290]  kill_fasync+0x199/0x4d0
[ 3294.830214][ T3290]  ? kill_fasync+0x53/0x4d0
[ 3294.830234][ T3290]  evdev_pass_values+0x627/0xbd0
[ 3294.830255][ T3290]  ? evdev_pass_values+0x5c1/0xbd0
[ 3294.830275][ T3290]  evdev_events+0x1e6/0x340
[ 3294.830291][ T3290]  ? evdev_events+0x79/0x340
[ 3294.830308][ T3290]  ? input_pass_values+0x8d/0x890
[ 3294.830324][ T3290]  input_pass_values+0x288/0x890
[ 3294.830343][ T3290]  ? input_handle_event+0x70c/0xf30
[ 3294.830368][ T3290]  input_event_dispose+0x330/0x6b0
[ 3294.830393][ T3290]  input_inject_event+0x1dd/0x340
[ 3294.830417][ T3290]  ? input_inject_event+0xb6/0x340
[ 3294.830441][ T3290]  evdev_write+0x2fc/0x480
[ 3294.830462][ T3290]  ? __pfx_evdev_write+0x10/0x10
[ 3294.830480][ T3290]  ? bpf_lsm_file_permission+0x9/0x20
[ 3294.830502][ T3290]  ? security_file_permission+0x75/0x290
[ 3294.830525][ T3290]  ? rw_verify_area+0x255/0x4d0
[ 3294.830546][ T3290]  ? __lock_acquire+0xab9/0xd20
[ 3294.830570][ T3290]  ? __pfx_evdev_write+0x10/0x10
[ 3294.830588][ T3290]  vfs_write+0x27e/0xb30
[ 3294.830613][ T3290]  ? __pfx_vfs_write+0x10/0x10
[ 3294.830635][ T3290]  ? __fget_files+0x2a/0x420
[ 3294.830651][ T3290]  ? __fget_files+0x2a/0x420
[ 3294.830665][ T3290]  ? __fget_files+0x3a0/0x420
[ 3294.830678][ T3290]  ? __fget_files+0x2a/0x420
[ 3294.830696][ T3290]  ksys_write+0x145/0x250
[ 3294.830719][ T3290]  ? __pfx_ksys_write+0x10/0x10
[ 3294.830741][ T3290]  ? rcu_is_watching+0x15/0xb0
[ 3294.830760][ T3290]  ? do_syscall_64+0xbe/0x3b0
[ 3294.830781][ T3290]  do_syscall_64+0xfa/0x3b0
[ 3294.830799][ T3290]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3294.830817][ T3290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3294.830834][ T3290]  ? clear_bhb_loop+0x60/0xb0
[ 3294.830853][ T3290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3294.830875][ T3290] RIP: 0033:0x7f7de0d8eec9
[ 3294.830896][ T3290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3294.830912][ T3290] RSP: 002b:00007f7de1c72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3294.830930][ T3290] RAX: ffffffffffffffda RBX: 00007f7de0fe5fa0 RCX: 00007f7de0d8eec9
[ 3294.830944][ T3290] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004
[ 3294.830956][ T3290] RBP: 00007f7de0e11f91 R08: 0000000000000000 R09: 0000000000000000
[ 3294.830967][ T3290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3294.830978][ T3290] R13: 00007f7de0fe6038 R14: 00007f7de0fe5fa0 R15: 00007f7de110fa28
[ 3294.830997][ T3290]  </TASK>