last executing test programs:

3m1.575604482s ago: executing program 2 (id=1162):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
r0 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x0, 0x12d}, &(0x7f0000000100), &(0x7f0000000640))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000140)={0x5, 0xf}, 0x1)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0))
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0)
bind$unix(r1, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0xc000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x804)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002ee3b25205a06090065600102030109021b0001040840000904080101b9"], 0x0)

2m58.520467643s ago: executing program 2 (id=1171):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="00000000000000007b080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000180000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8d0}, 0x94)

2m58.336321779s ago: executing program 2 (id=1172):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40), 0x0, 0x0)
clock_getres(0x7ffffffff000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000000c0), 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x0, 0x40000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$inet6(0xa, 0x1, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680))
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000001c0)='source', 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, 0x0)
close(0x3)
r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x940c, 0x3002, 0x160, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x19}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffe], 0x3, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xff, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x81, 0x7, 0x33dd, 0x80000000}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'virt_wifi0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x70}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gre0\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8)
ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000005e0f5240fa606f500000a140000001100010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x60c1}, 0x10)
dup2(r6, r6)

2m57.363566829s ago: executing program 2 (id=1175):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100001000000000000000000001266f68ffc760c000000", @ANYRES32=0x0, @ANYBLOB="0401010000000000140003006970365f767469300000000000000000"], 0x34}}, 0x0)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x2, 0x5, 0x87, 0xffffffff, 0x42})
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00')
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x1}, 0x10)
bind$tipc(r3, 0x0, 0x0)
close(r3)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000300)='./file0\x00', 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x220)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x44400001}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd03000000df2502000000060001000500000008000c00040000000500120008fffffe06000100e1350d0fe0c624d8a6b65077b83492e200000000b5c3b3137df055b08c6ed9d33c6761d62759e6e4a2eff0fc4395879929364bdea5ce3d56a52b1960ff91205f28cf2ab098361e0ac787fc905bdeac823148512c8dd5cdbcc44c78ba337fbfbb2c819d7340f331df39"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x20008865)
r5 = syz_io_uring_setup(0x24f1, &(0x7f0000000080)={0x0, 0x89aa, 0x10100, 0x0, 0xe6}, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000380)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}})
io_uring_enter(r5, 0x31fa, 0x9cd9, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000180)={0xfff, r5, 0x1, {0x16, 0x5}, 0x6}, 0x1)
r8 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000000340)={0x0, 'bridge_slave_1\x00', {0x4}, 0x1083})
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000040)={0x1})
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)

2m56.994251535s ago: executing program 2 (id=1176):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x8dy\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x16\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba$v\x8e\x9e\xef\xbc\x86f)\x01\xba\xdb\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4\x83Mav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/679, 0x6)
fcntl$addseals(r2, 0x409, 0xc)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = dup(0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]})
modify_ldt$read(0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1e, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f0000000040)=r4, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x0, 0x0, 0x0, 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0), 0x4)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x30, 0xe, 0x3, {0xa, @ah_ip4_spec={@private=0xa010102, @rand_addr=0x64010102, 0x3}, {0x0, @local, 0xff80, 0x2, [0x8000, 0xfffffff8]}, @tcp_ip4_spec={@rand_addr=0x64010100, @rand_addr=0x64010100, 0x4e20, 0x4e22, 0x2}, {0x0, @random="4e9a47f7c43e", 0x7fff, 0x4, [0xd, 0x4]}, 0x7ff, 0x40}, 0x1, [0xffff0000]}})
ioctl$BTRFS_IOC_DEV_REPLACE(r6, 0xca289435, &(0x7f0000000180)={0x0, 0x8, @status={[0xfff, 0x7, 0x1, 0xd30, 0x6, 0x3]}, [0x3, 0x0, 0xfffffffffffffffe, 0x8000, 0x3, 0x400, 0x2, 0x2, 0x5, 0x10000, 0x3, 0x18, 0x4, 0xfffffffffffffffd, 0x7fff, 0x1, 0x0, 0x80000000, 0x7287, 0x4, 0x72, 0x2ce0, 0x7, 0x1, 0x0, 0x60, 0x6, 0x80000001, 0x88, 0xd, 0x4206, 0x5, 0x7f, 0x0, 0x1, 0x94e4, 0x16, 0x9, 0x3, 0x62cb, 0xfffffffffffffff7, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0x3, 0x7, 0x4, 0x8, 0x2, 0x3ff, 0x4b86, 0x6, 0x8000000000000000, 0x3, 0xffff, 0x1, 0x0, 0x2, 0x5, 0x5, 0x6, 0x5]})

2m56.803003461s ago: executing program 2 (id=1177):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', &(0x7f0000001600)={0x204100, 0x89, 0x20}, 0x18)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"])
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
sendmsg(r0, &(0x7f0000003600)={&(0x7f0000003300)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001780)=[{&(0x7f0000003380)="3eff324cc205fd678a86631cc66b0edececd6e4554a11270079670cb9603c7e066c2304e2c118e5e16ff90ef26fbf8669a9dc9a04ed8e0fcb18583950bdef08298c40c02d794066bd3ed69705b36e8d18e58eab3295aebfea2ec4ba04928f93a61ab8c52ef2e4ee68452d17019dfcf44338625f11b67800b386e2c01fe8fb8d2973ea172e8dd76145c7843076e7bd52a953e582335d9bffe3a6b97bfdf580c83cc84a54db4742ba48afc3d023e619685a68312d2e34fcfecf35ccb5e9854713cd1c59d37450f675e0a42ddfdfe24800fbbf1aa", 0xd3}, {&(0x7f00000015c0)="da1d5081cdf6e355fa5681d6cbe6cfb1f6b973075e4db8b83433a71a085c98039f9d798a5746be0093fb9be082c390e29b88c1ddc4a3cec3b2c278351aab", 0x3e}], 0x2, &(0x7f0000003480)=[{0x70, 0x116, 0x539, "b3fe92b9b09d9c80aa130de5c7cdc4a0d011e9626464b8310c7998c95eccd908547dc2bda3f9cbc5f1cc765ebeb2d51c4e2f85fc1288f65dcf0102a327f33f5b3684a88b4e9bba56bf4b4c477a6f88c800d6370297f395509d0df52b"}, {0xe0, 0x101, 0x8, "6348f41a60789e3a1bea320e4c14e836b7ea873cf77e77513c22ce1bb4cb7d28d5956315788ba6d449f244c4286548df086d5ce119744b760b8ae1ea54621f10295a9dba8c74fda476dd0e525ee417e7196e66e4d16dbdc683e9e6d4d6082cf9920f52e31c24113114f469050d2c9dd0853afb821f12c2b5b69303c27f01177ae6e2e7d002181081da703e438db5757d6081625b710a9285c7b4f0b0d324eb0f58bda47fab4ae06d0580279219be26b26bd65c25e1eb4e376359b29f34d7a802a556205c8099b5113377f7"}], 0x150}, 0xc000)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x1d1, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffb]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"8022e64e74e6f67b82f0d8a62127912e8e0facb291d8f00126635901181631134a20c7ef49c18bc0bbece53852b95bb8302f6c2286d6b0fb5b13bbdd128c382cebf211c3853f6fb48ab335f3ac853cf7c64d4f27ece7c262cdabfa5660cde1d28dc3eab72b8cfa5b08d6129c86ca79bd9dc43c37e75246dcf04b3816fd90365c877a2c10e8ef4c444ecb4784a0afbf5e962e390bb1ad3bbce049ae51325e79f5ab8bfa80b35fff1da6833ec7fa9ebfc93da9e4b190e5e3a752eca97dc669a937e6ab654169108a38d414fb90e1b894494f314298428ef482b0ff9084c95e735b6b09ca2de115d77f6a657fb7da142c896f9dce212aa58af72879da88687ce4620501a4ba17e906a02662f902745e8ddfb50874ce099ac0fc00ed05470d176364b1f30495b4a088bdde663172734fa8107e5fc0cd4fa60869c83a6669a4ea3040dbaa38f2571543d8521e37ab5aa5be850e3ade4b9eb09e6de146aa0c8fc98fea7bb50efa589af6978ec8d970f908dc4676ea3d15b3b6ebe8ae56a6292704900e611367b278b6716b4d04279792aeb649688ac6bcb7a5e58cbab0c07c8916a7cef3bb0d6303523bad9c0ad5f3024dfbdf364792b75f0ba19d56c5b3bf645fc40061edf7e042de07fc652ec4958373d9f3af542adc030334cc63caa85c8a2628bb1d257c746b2cc57798c23e30f2799f5f392f6af7a3d0cc47299928634afd54ce987c1951989ef81b39f5c7ba4cb2a74250f15261fedf3a25396b83199151ea4b406c2e1aa3135f2a77a8d75b75ef0b25efcdb3b031d8eaed29862173e93994f8d6e6e70df79978551804744eefa635c71d4b38da513f3ea8f48853322cfe5ef1b1ee632e0fcd3eae1993d883fc91f0f2437dce252b6ce5175e7d119afcb9c3c92baf3df6716ce61b54d0dd7dda2360a4c93e26f3eaa4a1637d108966074638697f5b374cf9ae6b32dce29da73fece352c94a1bdb45d6e0fe98533562ee5e55d2f2d3ce5c301ca9c5706a1d0605414f103878eb88169e6681297616b4e1c8c1a43a33f5d99b619962066e7c5698470772696f58dbed61d8507119769e30101f229e012a08b76c0d752cdb290d46f2504177164282fbd084a4817b5ed7448586bc3de1d30af5472e6b67d2ad120e1401ebdcc5358c8eff7e68f4a48aed32f55970a5a6a7c7dcba4887bc4bb1c7fde1610ed25f4f64f25a9f79fad21b5e558fcc97c120c0977a92f5471cc391edf228ff4bf7f9fc7b92737e32b3af48780cb96f5623b5f01dcd3cea45d72ccdb7a36682fd3094542726b24790534728f2c0b2757edc7599ccb170b2db42c9460c42082081ab86d9d5fc971b4d7987ee2c70ced65e08d74474763c6d6ec671c42f6acaa4ccbd2fe981121c04571c1794450b9650b0249f2a633e880ab386510ea86298112a2f01f0ac7f81ee00"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)=@x86={0x81, 0xbf, 0x81, 0x0, 0xffffffff, 0x0, 0x2, 0x81, 0x6, 0x1, 0x2, 0xf7, 0x0, 0x8001, 0x8, 0x0, 0x1, 0xf0, 0x7, '\x00', 0xe, 0x20000000001})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
fanotify_mark(r0, 0x20, 0x22, r1, &(0x7f0000001640)='./file0\x00')
r7 = socket(0x80000000000000a, 0x1, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000500)={0xfffffffd, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f007f0000007b00000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r8, 0x0, 0x0}, 0x20)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x4, 0x815, 0x13, 0xfffffff9, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000003e040000000000003f00000000000000b604000001ede0ff2500000017ffff17cc040000000000007b0a00fe000000000f04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9e104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f1300010000949b3aab06b1e042ff2164d80c8ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1e0600bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee6330000000000000000000000000000000000004000000000000000038600008fb854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8265e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb66701f4578ba4cb9b706e605a88c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f6a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cf026657a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2cccb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400090300000021911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a8f01bc4b73cc31df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21c24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a3c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68000000000099347593f67da85d1c962bfb320d1553a74ec3bf003ba62b1784dbf0168a7e85f28b77bdebce96bf386a6dd5df162a16f2b7e8a4de0ffc464a87f91f81866d2ef0af71ebb07a739c3cb1b7000000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
syz_open_procfs$pagemap(0x0, &(0x7f0000000040))

2m56.47829735s ago: executing program 32 (id=1177):
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001740)='./file0\x00', &(0x7f0000001600)={0x204100, 0x89, 0x20}, 0x18)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"])
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
sendmsg(r0, &(0x7f0000003600)={&(0x7f0000003300)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001780)=[{&(0x7f0000003380)="3eff324cc205fd678a86631cc66b0edececd6e4554a11270079670cb9603c7e066c2304e2c118e5e16ff90ef26fbf8669a9dc9a04ed8e0fcb18583950bdef08298c40c02d794066bd3ed69705b36e8d18e58eab3295aebfea2ec4ba04928f93a61ab8c52ef2e4ee68452d17019dfcf44338625f11b67800b386e2c01fe8fb8d2973ea172e8dd76145c7843076e7bd52a953e582335d9bffe3a6b97bfdf580c83cc84a54db4742ba48afc3d023e619685a68312d2e34fcfecf35ccb5e9854713cd1c59d37450f675e0a42ddfdfe24800fbbf1aa", 0xd3}, {&(0x7f00000015c0)="da1d5081cdf6e355fa5681d6cbe6cfb1f6b973075e4db8b83433a71a085c98039f9d798a5746be0093fb9be082c390e29b88c1ddc4a3cec3b2c278351aab", 0x3e}], 0x2, &(0x7f0000003480)=[{0x70, 0x116, 0x539, "b3fe92b9b09d9c80aa130de5c7cdc4a0d011e9626464b8310c7998c95eccd908547dc2bda3f9cbc5f1cc765ebeb2d51c4e2f85fc1288f65dcf0102a327f33f5b3684a88b4e9bba56bf4b4c477a6f88c800d6370297f395509d0df52b"}, {0xe0, 0x101, 0x8, "6348f41a60789e3a1bea320e4c14e836b7ea873cf77e77513c22ce1bb4cb7d28d5956315788ba6d449f244c4286548df086d5ce119744b760b8ae1ea54621f10295a9dba8c74fda476dd0e525ee417e7196e66e4d16dbdc683e9e6d4d6082cf9920f52e31c24113114f469050d2c9dd0853afb821f12c2b5b69303c27f01177ae6e2e7d002181081da703e438db5757d6081625b710a9285c7b4f0b0d324eb0f58bda47fab4ae06d0580279219be26b26bd65c25e1eb4e376359b29f34d7a802a556205c8099b5113377f7"}], 0x150}, 0xc000)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x1d1, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x7, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffb]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000002c0)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000000)=@x86={0x81, 0xbf, 0x81, 0x0, 0xffffffff, 0x0, 0x2, 0x81, 0x6, 0x1, 0x2, 0xf7, 0x0, 0x8001, 0x8, 0x0, 0x1, 0xf0, 0x7, '\x00', 0xe, 0x20000000001})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
fanotify_mark(r0, 0x20, 0x22, r1, &(0x7f0000001640)='./file0\x00')
r7 = socket(0x80000000000000a, 0x1, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2f, &(0x7f0000000500)={0xfffffffd, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0500000001f01f007f0000007b00000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r8, 0x0, 0x0}, 0x20)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x4, 0x815, 0x13, 0xfffffff9, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
syz_open_procfs$pagemap(0x0, &(0x7f0000000040))

9.204597075s ago: executing program 0 (id=1998):
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000040))
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
r0 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x7, 0x480400)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
timer_create(0x6, &(0x7f00000002c0)={0x0, 0x1d, 0x1, @thr={&(0x7f0000000180)="5cb83dc577a2f26c871af3b2fe127d4a2a10d386f949f87864dc8caca7afd2159972488606df64fa785cc6c2f634ab54f4", &(0x7f00000001c0)="b87f6bff84ead0f4d5b27c53fc0f0ee3e5203ed6c8f166ec34d9831447c05af8e44671a5b6188bec8a43fd92a1aea57617e965e512e0b4446de36def56e0677ea0314fcf5b2decb106525e3f31defaef29941a7b831894aa592dd9c7ef7f7a8330bc5d8eab5fc11182e2cd05e7fffdca66fb2c04015197cb06a235f96ca77041d2ae7b41e0b07e3a1518085b8ac25fb387cea730e5a90518c7636baa564f19f4b115453e840e3fdd86bf5da9d02b2e123192d75759cdddf83e08235c321fea9f9f491f2bb5b7f210ce40786d8aa6950f9bb31b1c63fa834d93"}}, &(0x7f0000000300)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x77359400}}, &(0x7f0000000380))
io_setup(0x2, &(0x7f00000003c0))
r2 = epoll_create1(0x80000)
epoll_pwait(r2, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1, &(0x7f0000000480)={[0x7]}, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x624000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000500)={{0x1, 0x1, 0x18, <r3=>r0, {0xee01, 0xee01}}, './file0\x00'})
ppoll(&(0x7f0000000540)=[{r0, 0x1125}, {r3, 0x14}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0x1]}, 0x8)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x4e0, &(0x7f0000000680)={[{0xde, 0x4e00, "ec2f536f9cea3b6fc6a85c40f7c9cd7334cc08dc3b1ba57d705e51777c4f0675487f5f618503f08d37626734d7d89c4e83831e94831a57b16d8996feb0f4347a5638fb2085d865721840edb0703f07b8c8194d852de64f177d3c5323f4bc45e70df465841f4d4a8bf76f8aa3aa10eb061c1301cbd71be27d6107bd008ccb5078d08a6099684c3ad39d88a23f379b408686ae916ee6b93710693c18cab212c0cca62050275196f39afc234e76651d4f5cf3c74dc7dfb04fe120018d0cac25b0ba7264fa3b984927310f70c9f0ff41381dc837c905a9d7bf75ee05e640a759"}, {0xa1, 0x4e00, "bad1b33f5da10a4d067788e4917dd0ed52f15143d017947a9fa2cdd50a780b2682b609254445670347f94aad11e69a92f780daad9d75b22aef402c8dfc555778d3f6dd8abf08218d7c6e28b873a95308c7e04b6603bafc5c35a8a439e2521a7cfe02be34ac8b76e273cc3d1ecc58251a245b51c284f183bbc131349fc5b67d8bc707f6d3448a901f42ac4e85b5cc149fb4ebeda38c42aa7dabe10e29ecca3ba1be"}, {0x23, 0x4e00, "cf0b4f886c24f71658b4a7e8b47353d8f40dddac185b508579e8b22cfc1ff32ccf18fa"}, {0x5, 0x4e00, "5183c2a206"}, {0xb5, 0x4e00, "86a459e048a40ad5ee5d0806c9dfd345786957626de7da4636d8187560de6bb363b36ac00b853a8af7978930c23e1840ccbb841f70be7017ebbb33beae07fc9b1d66357b995fe304ba53f6d6c6cff4f73a7457dacee65d43492ef3ce888640009f2de89bd6f87a44cae953d84d1067bd6c70c7502f58cba35d184ba214c1e8f89e3f871081026b60f39e49173fa24e1b90169dccf50b277936ab6a81cd74aea7e4d51cf4a45c7ff5753df849093ddb37114978caed"}, {0xc0, 0x4e00, "6149631d712c699329b258cfe431efea07017e9424cbd5bc425c1f144c72a67cd0e1e01216e5028918bf25dca3a7ea6301f6f6baf5c74de8223eec6e745dcc724fc4584900f6b8f06af4156c7959b668122f41a4a6b75e4c62c37b09ddff95ef96cc5ee7abb1dacbd9628b6a233988ca58a83d9518012c2fe483ee14032857c00e287f3ac8675d7f9fc77b4df2062af6808128d3fe70c1c8c9423db75ccc30537e01dea26d3ce31f50ea01c11fb97e353f634bbbff7aae36fa72042724332020"}, {0x53, 0x4e00, "3ab244d78f488586a33accfa0718419262fe8b496d9b8ab36ff2c66e220cb8666b262ea8bc733b6d8168e19d0d9fa118d8793f8b467fd5299adf4139e9c4823c6e88a65bf0d86e2e92232568625feb518a90ab"}, {0x82, 0x4e00, "c10cfca9365aa33a1077846fa64d977429c5093c6a7b4f2ca2d80689844cf9381d0516c2e3105033604575c333d8c120720246993d31f84f4f2d10f58de9c6ac367c31fc0c40bde4468755dc8f2a5c8373eb17ae68ac69413f6d41ae6c11987b166c9770af3a2e8911377c9f54eecca914e357d7c608100503d8697805b3b119897c"}, {0xbb, 0x4e00, "a71c0b01dcfbd104ea7504eb774e6d9c1dff01d70541db09e46c4c102997ba42642e0793c46b187bc01cdee5619aaedcc432aa6eab1743dc6b7483efd014400ac3ab8a6a1e04fcc520ad934609b8f0e8eb8c265127c70b5c42ecfd9cb4adafc55c36c8fb50e9d00ca701c5cc461f021135b63ab32d8f6b9046d5b6c3ae44def5e2527e3406bc039d2ca46c577a5f4b83b9b75c0e9a0415ce86e6f0e58fb9dba709608676a6d884700b52c1a7df01db33b6886dcf28d5836d0c3d15"}]})
readv(r2, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/89, 0x59}, {&(0x7f0000000c00)=""/212, 0xd4}, {&(0x7f0000000d00)=""/61, 0x3d}], 0x3)
clock_gettime(0x0, &(0x7f0000000dc0)={<r5=>0x0, <r6=>0x0})
utimensat(r3, &(0x7f0000000d80)='./file0/file0\x00', &(0x7f0000000e00)={{r5, r6/1000+10000}, {0x0, 0x2710}}, 0x0)
syz_io_uring_setup(0x7279, &(0x7f0000000e40)={0x0, 0x8c01, 0x3098, 0x3, 0x11b}, &(0x7f0000000ec0)=<r7=>0x0, &(0x7f0000000f00))
r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x12, 0x50, r3, 0x10000000)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000f40)=@IORING_OP_WRITE_FIXED={0x5, 0x10, 0x4000, @fd_index=0x1, 0x4, 0x9, 0x9, 0x11, 0x1, {0x2, r9}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x3, &(0x7f0000000f80)=0x1)
ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000fc0)={0x7, 0xffffffffffffffff, 0x1})
r10 = add_key(&(0x7f0000001100)='rxrpc\x00', &(0x7f0000001140)={'syz', 0x0}, &(0x7f0000001180)="725d40afbcbc1bc0d115bac97079022fd25eb128facc5710d0c2977a50a3bd10e8cb58ff7563df607e1ad171afa39fc1bdf58be0cb2bdc32ea7bf8c2630093fba7a050c6462db772b1564cc2b7931243343f3e93267e5ee2b87616d52ec0aece4389b5246164693203dc4efef133b25a5a6dd79e25f2933104d14f38d7fd25bd42952579ee997d8bf2b65bdc9b9ad1620152e927a01fea174691e2", 0x9b, 0xfffffffffffffffd)
add_key$user(&(0x7f0000001000), &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)="24b166bdbe9c3fa7a21db57a9e6cf2e51afb68e9cda10725473c65e83223e35ed55eae800cd34d115c8480fbd25e9426c809670bfd9c606b5df221bd4fcbf0f28d42e74d9c3056ec5b7e4e5237aa08cbb27cbca41746c87ce6aa7ce714a7458fc2bbab328a1a168ff9b4a8e2139feca97969532e", 0x74, r10)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000001240)=0x80)
keyctl$link(0x8, r10, r10)
timer_create(0x7, &(0x7f00000013c0)={0x0, 0x1a, 0x4, @thr={&(0x7f0000001280)="1f3775d3e74a555709200308655a9dcca3173c759acd3218c74321d01e18cc66b7795a7286e9492ad5802830f816baf7c042a7ad2f4ede704474d67aae722a9883a9503b480a03208bdcc9a945ca74111a033dd51cfa762b1ba9c9c6d84e0ee541eea0749d1f5914b3703b6d368a9f5b1dfcffbe4255d86d8041394cbda2e172cebe513e702485179f65813fcc13fe194674b61cc616a129e1646ffbb601ff501efd11e053dbb94219ad8982f6c9fdb924bb382c146c898aa07da303ea18974ecb8c7873b408feb19b99aef55485cf4b9bd0e14de8c525ae123236063f3e162553afe6791d977847a887d557de62552e09a617459011", &(0x7f0000001380)="68413431bdb3f980a92bdcd820c9fcf20f9e23234e"}}, &(0x7f0000001400))
r11 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000001440)={0x6, 0x4, 0x1, 0x4}, 0x10)

7.324960686s ago: executing program 5 (id=2008):
r0 = socket(0x10, 0x803, 0x0)
r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1, 0x0, 0x1})
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405668, &(0x7f00000000c0)={0x5, 0x0, 0x1, "0000087aba10fdfffffb05001400", 0x384c4150})
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0)
keyctl$get_persistent(0x16, 0x0, r1)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89ff, &(0x7f0000000040)={'sit0\x00', 0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x6a}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x9, 0x5}, {0xf, 0x84}, 0x402, 0x1, 0x44})

6.839614915s ago: executing program 5 (id=2009):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file0', [], 0xa, "0d3bfeff01000007000000e45f661b9c02ed33a45f84cfa620c9ea60b500b89219d10c9da0dac90bffffffff4fece35011049e64441ecc6d11f14e8dd9d228f85325775d216eb968a9ba9197d5f88b56efb55f9d4f4cceaf0f747a543ca851c74bf90000000000000054ee067176b6d4f6e379028134e5931142b2e2f3ff07ad4280348b029e0fdb6c100000000000000000"}, 0x9d)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d03, 0x0, 0x7}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x0, 0x1e4})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @private0, 0x5}}}, 0x88)
close(r0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000240)={0x4000, 0x2, 0x2}, 0x18, 0x3)
execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={[&(0x7f0000000140)='\x00']}, &(0x7f0000000200)={[&(0x7f00000001c0)='#! ']}, 0x100)

6.839016641s ago: executing program 4 (id=2010):
io_uring_setup(0x1a94, &(0x7f0000000200)={0x0, 0x638c, 0x10, 0x1, 0x2ed})
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4)
write$P9_RREADLINK(r1, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080021000c547d03d8a0f4bd000000000000000d00", [0x0, 0x6]}})

6.741883399s ago: executing program 4 (id=2011):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'syztnl0\x00', 0x0})
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @string=&(0x7f0000000140)}})
ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0)
sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x55, 0x80, 0x0, 0xb49, 0x200000000002, 0x7, 0x1a, 0xfffffffa}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c000440000000002df31ab30c000080080003400000000204000080140000001100010000000000000700000000000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$inet_sctp(0x2, 0x5, 0x84)
r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
r5 = msgget$private(0x0, 0x3ac)
msgsnd(r5, &(0x7f0000000540)={0x2}, 0x8, 0x800)
msgsnd(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="03"], 0xbe, 0x800)
msgrcv(r5, 0x0, 0x0, 0x1, 0x4800)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
io_setup(0x61, 0x0)
ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x40, r6, 0x0, 0x0, 0x36, 0x0, 0x2}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)

6.302263884s ago: executing program 1 (id=2012):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000580)=0x10)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = epoll_create1(0x80000)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2)
io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x410000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0x4})
write$dsp(r0, &(0x7f0000000380)="8f02", 0x2)
close(0x3)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040), 0x4)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x38, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}, @nested={0x4, 0x1}, @typed={0x4, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x400}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x79)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.535610427s ago: executing program 0 (id=2014):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0)
readv(r0, &(0x7f0000000340), 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000))

5.234189598s ago: executing program 1 (id=2015):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000480)=@known='user.incfs.size\x00')
r1 = userfaultfd(0x80001)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="f3120000", @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf2503000000400001802c0004001400010002000000ac14142f000000000000000014000200020000000000000000000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) (async)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="f3120000", @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf2503000000400001802c0004001400010002000000ac14142f000000000000000014000200020000000000000000000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x58, r6, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x401}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100))
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) (async)
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
pipe(&(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$inet_udp(0x2, 0x2, 0x0)
close(r11)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
write$binfmt_misc(r10, &(0x7f0000000000), 0xfffffecc)
splice(r9, 0x0, r11, 0x0, 0x4ffe2, 0x0)
r13 = fanotify_init(0x200, 0x0)
fanotify_mark(r13, 0x2d, 0x8000000, r8, 0x0)
fanotify_mark(r13, 0x2, 0x4800002c, r8, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r14, 0x4090ae82, &(0x7f0000000300)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x1, 0x2000000000000000, 0x80000004000000, 0xffffffffffffffff], 0x8000000, 0x2010d3})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0)
ioctl$KVM_RUN(r14, 0xae80, 0x0)

5.035885775s ago: executing program 5 (id=2016):
syz_open_dev$video(0x0, 0x4a6, 0x4420c2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000016000b63d25a8064000000000124fc60", 0x14}], 0x1}, 0x0)
shmget$private(0x0, 0x1000, 0x100, &(0x7f0000ffc000/0x1000)=nil)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x200000, 0x0, 0x10})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0xfffffffd, 0x7eac0, 0x3d3b4e})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
file_setattr(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x80020849, 0x3, 0x1, 0x2, 0xffffff01}, 0x20, 0x100)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40a000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz1\x00', {0x4, 0x6e2f, 0x11f9, 0xfff8}, 0x4c, [0x8, 0x8, 0xfffffff7, 0x7f, 0x5, 0x9, 0x7fffffff, 0x0, 0x6235, 0x838, 0xffffff0c, 0x3, 0x101, 0x9, 0x2, 0xc, 0x3, 0x6, 0x3, 0x2, 0x0, 0x6, 0x6, 0x6, 0x5, 0x10001, 0x7, 0x4, 0x77, 0x8000, 0x7, 0xd, 0x401, 0x7, 0x5, 0xc687, 0x200, 0xff, 0x1, 0x0, 0xfffffe01, 0x0, 0x59e6, 0x102, 0x4, 0xdb, 0x1, 0xe, 0x9, 0xf, 0x4, 0x1, 0x3, 0x800, 0x7f, 0x9, 0x6, 0x23c2, 0x0, 0xc10d, 0x7, 0x8, 0x2, 0x3], [0x2, 0xc, 0xff, 0x7, 0xa, 0x9, 0x1000, 0x100, 0xfffffffb, 0x6, 0x9, 0x2, 0x4, 0x7, 0x40, 0x6, 0x60, 0xb, 0x1, 0x6, 0x71e4, 0x1, 0x10000, 0x3, 0x9f3, 0x800, 0x0, 0xe842, 0x40, 0xca, 0x9, 0x7, 0x7, 0x6, 0x9, 0x6, 0xc5, 0x2ff, 0xf, 0x1, 0x550, 0x2, 0x100003, 0x8, 0x80000001, 0x0, 0x3d, 0x13d, 0x101, 0x9, 0x10001, 0x9f, 0xe2d9, 0x783, 0x5, 0x0, 0x4, 0x8, 0x3460, 0xffff, 0x8a42, 0x4000, 0x100, 0x1], [0x62e2adfb, 0x9f57, 0x4, 0x3, 0x9e, 0x8, 0x1, 0xfffffff7, 0x1, 0x5, 0x4, 0x4, 0x6, 0x4800000, 0x0, 0x9, 0x7, 0x9, 0x5, 0x2, 0x1, 0x7, 0xffff8000, 0x8, 0x100003, 0x6, 0x2, 0xfff, 0x0, 0x8, 0xffff2f9e, 0x9, 0x6, 0x3, 0x8, 0x3ff, 0x3, 0x5, 0x4, 0x690bd85f, 0x7, 0x3, 0x9, 0x5, 0xb3, 0xcf, 0x2, 0x6, 0x0, 0x7fff, 0xc8, 0x8, 0x2, 0x5, 0x100, 0x7ff, 0x102, 0x5, 0x6, 0x4, 0x5, 0xa0, 0x1, 0x7825], [0x3, 0x0, 0x1, 0xffc0, 0x2, 0xf, 0x5, 0xfffffffd, 0x10001, 0x2, 0x2, 0x2, 0x2, 0x9, 0x7ffffffe, 0x3, 0x2, 0x400, 0x10009, 0x5, 0x5, 0x1002, 0xffffff7d, 0x0, 0x1, 0x5, 0x8, 0xc6d9, 0x631, 0x200, 0x4, 0xfffffffc, 0x4, 0x5, 0xe, 0xffff, 0x5, 0x7ff, 0x6, 0x10, 0x6, 0x1, 0x6, 0x80000000, 0x1, 0x3, 0x10000, 0x9, 0x2, 0x2, 0x4, 0x4, 0x3, 0x2, 0x8001, 0xfffffffd, 0x5, 0xb8, 0xfff, 0x400, 0x22, 0x2, 0x75, 0x9]}, 0x45c)
restart_syscall()
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00', 0x0, 0x0)

4.85117534s ago: executing program 0 (id=2017):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0xa6d63000) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
readv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1) (async)
syz_emit_ethernet(0xfc3, &(0x7f0000003200)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb5, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xfa1, 0x0, @opaque="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"}}}}}, 0x0) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000005680), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x7, 0x1, 0x10, "268100ba7af9819e79b058d9f2a15b8c4800000000010011000000000200", 0x32314d56})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r3, r3, 0x0, 0x4) (async)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000180))
r4 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r5 = socket$igmp6(0xa, 0x3, 0x3a) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000feffffff0b00000008000300", @ANYRES32=r8, @ANYBLOB="20005080090001"], 0x3c}}, 0x0) (async)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0x22, &(0x7f00000004c0)={{0xa, 0x4e24, 0x9, @empty}, {0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x0, {[0x0, 0x6, 0x0, 0x0, 0x899, 0x1, 0xfffffffe]}}, 0x5c) (async)
setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) (async, rerun: 64)
sendmsg$tipc(r3, &(0x7f0000000300)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x4}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000080)="b6efcd8602faabd578d5236dc9622ebbf9616dae54c48b64e0ad3590ef70c2481fc68046b7a1b40f23135513b7f7d230ce305a4ed823f3d6e9cdd8e93688ba277874ca0423c1d0751f6cf1695e83f4583938af6fb4116c4e182ae7a18d23077d1663f174c5070bf7b0269c786515ce24c5be118cad2cd2485f76bfc48c02c044b7c40396ba70b40a74e4559edf5ac5ad3efc10c3592a27f9bd18b809b3", 0x9d}, {&(0x7f0000000140)="1373303d5a20d89e5a502601560bf2ca92dd308ac1867ec5167f0eb605539a1b10ba6cd46331b5009fadf248fd8fadf465a3034c7a0e16f4f5a459ec90a3d008b9fef84276b3b57df05b6878eb8573d2174a8c4d33b34e6f95cddf4a193882bd05949fc48f612757433a30d84c59713e5d33e390576b0a2f7292a2324a854770090515ac3d966bfd549c9b53377a87ac7a8d360964e9992f", 0x98}, {&(0x7f0000000200)="cbd2dff54486442619dabc53e6c15be6aba8ba45ffffb74bb4ae79b44c0a78c1167a29d3d11240192e460f49d390e4b5c8a62d5b94f9e2984d555351acea93782733fa6ade46ffb16a4612716533e4c82280df044013db584eb79f856be45e8eb73dfc59628153281fd544fae7084fa14fc80276", 0x74}], 0x4, &(0x7f00000002c0)="7a39d1a7521b307eaa43288471fdff8d5e316cf17973d145b8a232d14825816504143f223ac8ea285a2ac82bb96a7f542d104c3e19fc", 0x36, 0x20000801}, 0xc050) (async, rerun: 64)
syz_emit_ethernet(0x6e, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "001040", 0x38, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0xe, 0x0, 0x4, 0x0, 0x0, {[@md5sig={0x13, 0x0, "345f8cf949a01b515682f44cecac91ba"}, @md5sig={0x1d, 0xa, "d2b653e0c9d32072c19dd6ca814b7d7b"}]}}}}}}}}, 0x0)

4.774945253s ago: executing program 1 (id=2018):
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$evdev(&(0x7f00000002c0), 0x4, 0x8370b3e6f3e61021)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0xff7fffff}, 0xffffffffffffffc4)
bind$xdp(0xffffffffffffffff, 0x0, 0x7f0708a0f43113d0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000700)=[{{&(0x7f0000000380)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f0000000740)=""/210, 0xd2}, {&(0x7f0000000340)=""/8, 0x8}, {&(0x7f0000000540)=""/25, 0x19}, {&(0x7f0000000480)=""/79, 0x4f}], 0x4, &(0x7f0000000440)}, 0x9b1a}], 0x1, 0x411265b5d728bd1, 0x0)
r2 = socket$kcm(0xa, 0x7, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x3b, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e20, 0x3, 'lblcr\x00', 0x1c, 0x660f537f, 0x7f}, 0x2c)
sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x5, 0x4, "17b64eb52d184b3241c21522985a502e7f8c57b823c50a2cdbf920ea8f113c5b88acbc3d1a17c80d99e420ac9221680c84d22c62c57b9091203db2fe73d1f5", 0x3b}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x30}, 0x0)
syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000080408205820540000102030109028e000301018005080b0001010130040904000000010130000a2401062a00060000000d240a04030000000002000000132403060703058404"], 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000000040), 0x4)
sendmsg$sock(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)='M', 0x1}], 0x1}, 0x4040800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc1044438bbd6223b}}]}}, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x21)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000580)=@file={0x1, './file0\x00'}, 0xffffffffffffff91)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

4.681051586s ago: executing program 4 (id=2019):
unshare(0x6020400)
pipe2(&(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00')
splice(r2, &(0x7f0000000000)=0x2, r1, 0x0, 0x401, 0xc)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0)
syz_usb_disconnect(r3)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1ffec2c01020301090212000100001000000000000000"], 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r0)
unshare(0x6020400) (async)
pipe2(&(0x7f0000000280), 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_matches\x00') (async)
splice(r2, &(0x7f0000000000)=0x2, r1, 0x0, 0x401, 0xc) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904"], 0x0) (async)
syz_usb_disconnect(r3) (async)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1ffec2c01020301090212000100001000000000000000"], 0x0) (async)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000080)=r0) (async)

4.636918552s ago: executing program 0 (id=2020):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r1, 0xc008ae88, &(0x7f0000000000))
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r3 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000)
syz_usb_disconnect(r3)
writev(r4, &(0x7f0000003480)=[{&(0x7f00000021c0)="81", 0x1}], 0x1)
socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f0000000040), 0x95)
socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x0, 0x8001, 0x100, 0x9, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, 0x0)
recvmmsg(r8, 0x0, 0x0, 0x122, 0x0)
shutdown(r8, 0x2)
add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173", 0x68, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e875988b147043022effffb3"], 0x0}, 0x0)

3.439314146s ago: executing program 5 (id=2022):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r2, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fsetxattr$security_evm(r3, &(0x7f0000000140), &(0x7f0000001600)=@v2={0x3, 0x1, 0x8, 0x3}, 0x9, 0x2)
bind$inet6(r3, &(0x7f0000001980)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8}, 0x1c)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c000780080006000000000505000500020000000900020073797a300000000600000000686173683a69702c6d61726b00"/88], 0x58}}, 0x0)
r6 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil)
r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f0000000200), 0x10})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000001880)={<r9=>0x0, 0x1}, &(0x7f00000018c0)=0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000001900)={r9, 0x2}, &(0x7f0000001940)=0x8)
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000240))
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r13, 0x4018aee2, 0x0)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001800)={0x14, r15, 0x1, 0x70bd2d, 0x25dfdbfd, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000800)
recvmmsg(r10, &(0x7f00000021c0), 0x5b, 0x40, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001780)={{r0, &(0x7f0000000040)='\xf8!]$.\x00', 0xa002, &(0x7f0000000080)={@_ha_fsid={[0x7, 0x800]}, {0x0, 0x7, 0x6, 0x1}}, 0xca, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}, 0x7, &(0x7f0000001680)=[{0x2, 0x4, &(0x7f0000000140)='\x00', &(0x7f00000019c0)="056019d10e6a0f24cd717725a5bd601f885571e02bc61e7c8b8be376a4ac999aa5de8ed7b0ba608ceeef3779685d186a534206ce769dec48440b17106758411c1c8dd3b1921f70011280697a8d53e00bf903da4f6e50c9473b2273308c5fd50de9f7e04fea174af713ac9685d8b11e796d267eb6adfcb7311bc27f3167aad5a0207782c5ec0faf1431de6b37b19b0661f48ca561c90059d980c600688d786b5de0488a6574b4de31bd7bbd1eb4a694899f18e8c2fe30d5f057138defacec8e512f71e04d2a7e6695b41b7687921e19fe7937227eb6f8edd3a9bd97cbe6c5b7b83c32925ae8635b1c5a81069396b8432656", 0xf1}, {0x1, 0x0, &(0x7f0000000180)='\'^$}\',,:})([\x00', &(0x7f00000001c0)="395399aed277974e9a6bb8403610136495460d3ae2d2489834a1f0cd194c8901224d7eff4085b267a15cfa", 0x2b, 0x20}, {0x2, 0xe, &(0x7f0000000200)='&\xfc[\\]+\x00', &(0x7f0000000380)="d11d1f89c17c1aa70bc561dd412b03769d11f73eb839920a4c37bcd8e99f522a36207d660a20a9e77aef7b67840fca697f66ccee3478751c9e83f4374f8bc437e0cd5c45a36155393b75bab2df9e4faf603f5c696bebf54cc04aadd8551585ab6a45048e88ce9eca8f25ef6b4186d75919d7e2bf80d7ea808988307271515870830b41b2d241825d73494ceffcb9bc96a0fa3a7902bd18d29ec61018a9e765a5b530d7cf3e48e1f6233897a334eb", 0xae, 0x20}, {0x3, 0x0, &(0x7f0000000440)=']/\x90[(@*)>#,,,\'\x00', &(0x7f0000000480)="0691d0fa7b7abda86c7b0fbfd5dda3c13c5d828c29a81b0bb74b22b7f90438465e30cd8f0dba0f5e0b0fc93ae478bf7519a3e30fa1a162e5550356c8a1ea4b695349ac9a31719a3733fed085adfdc885e87f41d37e1a33c7a2ef616404d4f2ac6ceb179f75dc82d8e009dc29390758b4e2e031964c4c6735df7ce0edb1e15b6f5fdfb6c14c36c6a1891b1b2e3067cae8ff6f3242ef65d28534c2080a3d5f3468b9eeee2f700c171795e1cabb03808e493aa30289a869822f4b6aebe20a4250045cc5331f6ff7c3cf2e510760c798ee110c4161cbb7e1b883bf2c40efd7f1cbca7f5a727a25bf5e92c7e0ff2edf98bc49f562085d4aaaaecf88827e43700d24be68d808e14d1847681e59d1acbaac2a01138f81b57b524d62ba90ed91bbe72fea3430a7aec57c41cadd2ee2705264bc797d6f43322454c74940de58626f86698d8e652ce532ef206126dbb5be69fee44e8d2ea93a5279c4453888c3895bfdc10063b748cad00c46f305e344ba03b08e43eb2348184d47f9a161a286f6d045cdb991230c340ce95d5e7498b672f7fe181848487e08eb83564408943bc516ab57464f837ffdac6ecb9e73683a7d27dce228a0097ab36750da745c394220f43ef648fc1942523908a8df99b755e02ecb8cfeddb1dab8cbd93dc85eb720a52b56bddd7d4dc73925d0b89a4340032b6f6179fc3cf0accaeba9cba0459a21818c53e20838f11bc4f4eba5e8498a3f96160ed435d711c06e8603481f385da2b3a3dee5c1a5487b7ca848593c70170df6f92a4a30dba9c1cf55151dcb076d37f74a828bdc604b8dd3989fdac0c0f4d99616202629048ff60225ee3d2dd43df0257f05c4ebdf5e2924b50f2231c148489866febefe5ee5437172eb18fe3e279b3dbe3cf7ed73b9b356d25da504b02bdc6a6f90bbe65d7533aed66fcfb361ca60575d43676c62f4e2b07a86bb8a42d819e9c2de313fc59157fd18df356e8ed5cc3f5219884f14b8a8f08fe929bb7d38627c284df3d8292daf8e9ea03e885b79a407c18a3bebde937327ef917bc7e37ae6500df53fbc4daf90b79ef755ed5d4b4a418aa4c933ea2a201cd702c06081105524021a9c1cac3b7bc42d761af152346c49d9661330fb0b312f664ad377703fbd694b91eff1020613325d60cc1968b107e4e8c4f4c98b4d24e78eb3a7e4ab069b169006cc803e68a9d87e466f62433f384aa33bdf8e020d71431a6c575b87a6e9aad2a907d87a6113a5760272ddc2aed9048096e9f32e059409eeb4b5f52d2197eda27bb5745cb7ebd7aa9aa7e6e3088d4cf1d81e494b895a669ef6d0f68e1788ca554191f59b0c2f342a3fcbf312066174e783df94f70d5c270a5ed23a51d290d0efe05d74735dd0f637888a8b5d032f33c2f50785fc3561bc78fcfeb22012ec9c05daa383345c9c5faa45d5845b1f3ffcfc643b8f40cdad3c256a96c95598c9721d6ccc693c64de876db1771d9ac4304a63f9639835ee8eb4cdd655b3a8a8149b156565f0e2d5c4fc09a312312e90e5e8c0096f6d3fca3f380315fb0f596cdc774562c031ba37170f905954ec7ecc882869720e05715a2d9dc3232fb8ec82d64e597871b6a0c27bf747638b8fb82a598d89b76aac20f5ddbbedd03fe2f4cfa5d22ecbc6c49cf0d5e91e0b7fbd636419e1702d5715c0ea8a8477845a67dbbd9fa36c170223d9418c7f54db24a5337e3c08d01a2c7153c530e4444c718d3b5b9fc873a6823e7a3b7fce13225d1162ec104f0ce7cdd02e26b3a253dd8d3bb63a6e9ec47ddb64fa30e4382b48af5f7c806949df6d470578160d17e665d0185d740901db2da4012198cbc51b5bd8249f22d71b8ca6bce121e5546d70966cf456fd41589756d18cc5e47d2d540b5eb12d4db0d6255051438455fcb38d856af6ab14e1f3deffc6bd1ccf81de305802595ba4ae661b0e96ab5cdb53ef1251bad6fdd4f18a42068ebb40ed1e5b13de1482ed59ccafb56ca86cc2d1f2e1421adafccf7693a51f78a96db334283a1cbaeaa894fcb48e9723945111c0d7649dc5f02ac3fe7aa9e83cae967e69c209cae6e79ea7130743df4ba604304a85a7ecab36ab4b1d290eb1d7f3a7d2666ba7e6b629333b155f1f5e5d99b0430e446d83c9188a32fadab3cac25c2a871afe5e3cfac3704444866077e2c727ed5596822ffc3e3e77054bbf8b7162e211a74b3757b259e31ebfe9f085bac19c0f7dc0d524ee9529f730f2c7fce91a2f3ef1db8cf6fb21caf88530034e9edbcec227a0f62953bd7ec419e9b6b0c9d485a021b5a7f9630ac616ea11dd581a8f068bca0ca648c62258f22417cbd3e878d2103a62c1a0896e549a2d1e5483a69ec3a9cfa1eb316991bd2a01f5e1151a5d8a4186cdfc85554b088db55f54ae8fe6e937f26d2b5018c943147073faf057544f8829d068bdf1b26ff74b27e41bf74220f0ab06862dfa9fd4207d6260bb500146c7ab42cc0a783befd6a5aab2c61b84139caf21597726991e03e1e88eea242136a019f8627902867bee4bdc4ae022d81c15129e75e397629e2de4e8f2787905a0697ad5ea5d53a172bcb30d1bdab8e2b6a8428b8f84c83f953ebd875d9707f83bd78e4cd3f881fff816087fffaecab94856f2942f6a8337d8046724f4802902d6ffa65fcc3ed8b33aff2e63c923f8cf4c9cae399b0dc97b673b1fecec0bfc1bb09e568f270120ebc27bca40a3728fc999b865a8d3570d7ec552dc86b5aa553264a827fcf6f78f1bbf0adbd71a32675ee2e03e395b81f04bf71d6ea83d54754c02b8b8d19d84537225e8c2d78f088603b02adc18e3ba78c8b043e8d66aebaab2820d0f061a64427c8c2dec2d18cd64bcc417b98d84e7e4740a65694bca2b6f883748c5ea3e1361ce2d1ab86f7fb27f7633f7787d9628692d4a7a69f5c4878eb85685d81c695cca350ab23527c73e1e7d35ebee22c19693ffed90e5c1bff3cd60b41c13e97246aefc7aaa9edde5ba31b73c4a1bfccf9d100b32f2f0bb4ac10af541635450d02a2df47b1c8ac89bd74750f02b95288ec87c162a404bedef3a86dbe0f4e8e5914d66ac9a26241071a6cc982a2d5e2bb3169749e2f26e923c8d8cbf088a93f29ece79d7774a82e0d5538624f48b491d2549b40edfd8f39188e406ecfe0496e533be8bb662e22e4c0057e37bd8cdc45f1963a6ac6449ff8eaa77805913ea8d9db96c28cd62de613c5a10896e5c52aefb3784f5ffa78e22cd42332beffe4ae4b512da33ed02c0c4befa591158c02ab5f03a56dda5e39d8eb260d706cfff5dc8e13b88dbd82595a14e11bcc9afa9018b5e4963fc9e56871595e317406445e12ebb2c3ad182d5933b9888db77e1fd633e6c6098dfcc005c932dc70adc685855437e75d2238bfa7dce3b9c6c9a270a5401ca33688dcc2160047d4015dce8b96b018085e26aefd3dd4e67c7a71c3c832380786a598cfcea58ad82a8799f0870b979322335159060eb716d400647d515fa1ec35c210651dbdf6f7760fe565c239beb165bfefcef0e0d3cbdb581b35389ac3e32f3fc3af3f182ce1a57fd73941a2e5cec61394e69272f8aa3003a401a11799260f5c6ebed1f3f6416e7b042ee17834ea5f2c79fb40a82663dffaa910ecf3c84403702252a0a706801126fa5141179fb52748ec9028ea5751dbbe6dab7f9db76ab9bb3508b1b0d6c0b39bb6e4cbcb807a5c28bdf88cc42b52d6347d4047cfe6eb3a311afdce73fde05c3f764af29c24d7c7fc2670de7b8cc12df4780105fd1d2daa7df006d05647393c22b24f0ace3706a26fd9e977f5687cbbb5f9212d4a88dc31719e1587fb99f0d5a9508d159970cf3be185607a78935933cd931db538cb649cf3441478250a6bb2f4bfc8838694befed8915826d66a70b4ea84f4688b9c37aded815263059fb2cf73c5c94477192cf7f59a8d419169240c124969ec179591002f983315b95c1c6308dfa49a4a56b312f6e9d6338a21f3a6a6ed4377a60a074eea7d67f8dfe14ef21069790136622b7fec3b8880c39bd6959f6ea7de1d6d814b51b3a2e4c8d341f953b40eea286792f18c481b3697d4ac61bc329ca9e6bb33f29b88b8617ee10f8618f36d24e61b4808dd6ffb19cacfdd85ed55024d9deb288d35d684aab766a2ce9e5167f6d28b20d6282b82503a6b2844f8cdacdf13841b9cd239cf41f94ec6ae3fbc4d8f30264bafde89bb6ebbb5127e8d276053497036d8b9ee556643ab6fd9d19418931970a2c1bf3bf3bc5518b4228c97206dc3a337e587b5637e271e3e8202b9108b18939485c49c7e8047ec1c3d41478e0b7c7e9fd290c55932cc7983ab9602d06573bac7d461889e31ccd0302cd77630f43c368c75235bf7842a8197f38c1caf8d26576fc72ea96e58ccabbc970d459203d519815b338b6a90adb531467cd8a05ac3e31377654b175aeb6872171d0844dc33a4e0484615dd631355ad656516735e76ff504b2a0f2ce9332765eb1404eed10a606c96d95087d2c10a2f39d060fd2a1eb82b2000a2205ae0f4704e9619dd43127169c5ff6f020932513c49d0f5ae3d34ec1b30dd43370b1eb3fbed99686f9dd0445adac6837d5c250b2b7ff40d662b507cbadc583f5c9c0151f4c819fc782148330f3abcd0e304c95441d29a15b0371b10b1c61c59f38e54e6e4cba1fe94ca45a7cf713d58d693d9f47b33e65b13f4c50623da147a1a38b1b58dce5d277c3baa8157f14fc1c625ad414eb3c80920e857cb287600c34c388334dc9ff9c798eb3565168b72cdeeab46828870752b196df55d48711c63e88f6b205cc69a092d020186f5c0dcfc09c1c1539fd6c4c7f054fc633d135e0f71e9d61c2541ffbf7d36616dd9267eb431108fea04b952ba1ee61fe4ddd48fb931c6c4e163984b06c328a9fae3b3b0d43df6f08053282cb3876e9e74350caac842440296153b23f96d412ec13426677517e36cdaf698978013a3807bdd033c35748cd24dfe88a4ea18be242ddca5e622ff3a21eea6f715a7e790be8e0983d5743795c367b5a9c97c90e11d334c341656b52bd34db481aac572b06727d18ec33697ad4209b0b8b326715f94a39fdf48c02f3cb74eecee11a697b314646fbd67837d35ff7ee55756d179d3aa16f71c3265dbf06b0fdc0d0dcd6ad0d0bd2a79f999ec2d2d493b990b9dcebdf3b9e9c701545004bcac67eac20687bce4a24c5f03a9758d7d5756604c3882b8395debdb552adfa216ad9266462be609ab84b9c0ba9945c9140bf6b44689118ead4e9e4c2d5c64ee6dc237059c20105473dd865e545e997f4d6d590382e09fbb037ebc7b22882b5599affb7a41a747d4308f0c5e35845e5b0ad2b60aad76512e03fd12b663c4084586f177dee9921437765f5ded48168de03e922d4d10e2fb0a12285408f2d77d79e6ffa186af77a9c5cd386419775d51d3efcf3b4dea0a535304c1f2a8123082cca86d89b4c62941d1cc4f7ff81e956c209eac06f6ea89c7efe6139f2c8e4a88368a41517f6d071884f45bdd136635f430e74fdb7dfba297b078a02e57c2d03db611a88d11f41f8293b41783fe312b9d11ba4a6ac5024e42224e3c938c20d9cf12cecc1b2e797d20da8351c3fc9e915362e6e34d8c2ddf171b7eb2002c9e99448c4bac8c7bef5fe706dbf5bfaab015dbd01eca98c10eb93221db79ae634a5e205ac2ed441dcb73458c1e30821a8a9471f171cee1eb29cedda93219a58b1266a4de351f9c18c4bc5c7102d1c1927f959acd26fa89b2d5bcbabe326a030ec1861d7e6091ca59f09841897e47250ec1451b700ffc2ad5701cc8d89", 0x1000, 0x28}, {0x1, 0x8001, &(0x7f0000001480)='\xf3}@.@\\+^\x00', &(0x7f00000014c0)="ff37a2b51c77e9bc18", 0x9, 0x2}, {0x2, 0x4, &(0x7f0000001500)='-\x00', &(0x7f0000001540)="9f15696adfa0b1f9e0fce91b413620ff350cae18a7e06527a81be72b2f04b5998aff7d8993c09b68ab661d587358819ae0deac0c5bcb10f001a988c86a56ad7967616c427c8b21ccfdbadb2194d90565e3b8eea0a0bd7355a4688af043538071fc8893dfbea5014583fb8ea3bc3d291e64b09bfa11deefed484089f6df025e2f6013e9bb8b8675d5af56aebb9954d3a905345083ac25786fcaab52ffb767c7cb7f10967935f946fecea4ba164e105392f2bb1c0e19838f2d5cc4", 0xba, 0x10}, {0x1, 0x9, &(0x7f0000001600)='\a', &(0x7f0000001640)="c82b40fa", 0x4, 0x22}]})

3.085504907s ago: executing program 3 (id=2023):
creat(&(0x7f0000000080)='./file0\x00', 0x40)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
fcntl$setstatus(r0, 0x4, 0x40800)
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r1, 0x1)
listen(r1, 0x7)
close(0x3)
r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0x4bdd, 0x1000, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000100)={0x30a32c0, 0x1, @qpsk={0xf4240, 0x1b}})

2.852130238s ago: executing program 5 (id=2024):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@host})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0xcd6, 0x4000000000000e9, 0x1000000, 0x10000}) (async)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000040)={0x4, 0x0, 0xcd6, 0x4000000000000e9, 0x1000000, 0x10000})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40010, r2, 0x4849b000)

2.706670474s ago: executing program 3 (id=2025):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b3c359", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f84bd7", 0x0, 0x2c, 0x0, @private1, @private2}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0xffffffffffffffff, &(0x7f00000004c0), 0x4003)
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.685410164s ago: executing program 5 (id=2026):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_clone3(&(0x7f00000002c0)={0x200004100, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x23}, &(0x7f0000000140)=""/215, 0xd7, &(0x7f0000000240)=""/39, &(0x7f0000000280)=[0x0], 0x1}, 0x58)
capset(&(0x7f0000002300)={0x20071026, r1}, &(0x7f0000002340)={0x7, 0xffff, 0x1, 0x1000, 0x7, 0xfffffffd})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000400)={0x14, &(0x7f0000000340)={0x40, 0x30, 0x4f, {0x4f, 0x1, "04f6f95a4699345d372d90aa0d13c62a8f39a4029e3d9bdc819572412dad37db391d7057109e39970cbd1ea266f3ae7c2dafcfdadc4016de7d1a2d880e5c323ed59fe1d4c13b9e21935f659e52"}}, &(0x7f00000003c0)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "16817e7479613194a456b622d86d8cec40541c433ff8707af811ba"}}}, &(0x7f0000000a40)={0x1c, &(0x7f0000000440)={0x40, 0x14, 0xcf, "94638807e4b5c569cb5367bbc71ca3bbffc5b7f28e7892b368cf54ee6a7c59e6b5bc5f02e4a930b8dcccfffad7a321159b2441fae022f55607b6e021fde7af7ea9126e7bd654a1b2f1fe4bc65514020bec556ec01d3b952d8abbc090c0df806c8906cfe31f4b782ef59672d0a5e1dd9d04e2c3c84515f95b1fa3531d9f179eb182be276e616d2b17a63864df283939c20a866044a19facc040fdab0c34d683a365b48627ccd2f01f76069a8ca7ce14f96d13f8800cdae246d47f08303e3a27df49c9c1f5f2f1b5e4b63f79d26a4164"}, &(0x7f00000005c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000a00)={0x21, 0x0, 0x2, "d907"}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

2.599360104s ago: executing program 3 (id=2027):
add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800, 0x0, 0x0)
sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x100000000000000, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)

1.610748063s ago: executing program 3 (id=2028):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x80800, 0x0, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000400)={0x0, 0xff6b, r4})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{}, [@NFT_MSG_NEWCHAIN={0x0, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_NAME={0x0, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0)

1.609851622s ago: executing program 4 (id=2029):
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x3}, 0x18, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
fcntl$notify(r1, 0x402, 0x52ac2efed35e5ffc)
landlock_restrict_self(r1, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0)
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
setsockopt(0xffffffffffffffff, 0x5, 0x5486ccd1, &(0x7f0000000100)="b80a623e239e3ad53f", 0x9)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x26c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x294}}, 0x4048010)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r2, 0x3)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ff"], 0x0)

1.571863359s ago: executing program 0 (id=2030):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406a05100000000000000109022d00010000000009040000010300000009210000080122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0) (async)
ioctl$sock_ifreq(0xffffffffffffffff, 0x8971, 0x0) (async)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) (async)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000900)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x1, 0x28, "dd687f0092fe7cd76fe7b6beacb4a7dfc8921fe3f2a7034b1798e32c0cfe4646c989bc130ddf17b6"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x2}}) (async)
syz_open_dev$evdev(&(0x7f0000000040), 0x75c, 0x10d840)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020) (rerun: 64)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000200)={{0x1, 0x4, 0x5, 0x7, '\x00', 0x4}, 0x0, [0x502, 0x2, 0x404, 0x5, 0x65ed, 0x8a, 0x2, 0x8, 0xe2f2, 0x8, 0x1, 0x8000000000000000, 0x7, 0x1, 0x7fffffffffffffff, 0xcbf6, 0x8, 0x2, 0xc, 0x7fffffff, 0x0, 0x10001, 0x0, 0xfff, 0x92, 0xdf, 0x3, 0x0, 0x1, 0x5, 0x8f1, 0x1, 0x8, 0x7fff, 0x8, 0x0, 0x6, 0xa, 0xaf4, 0x1, 0x7, 0x800, 0x1, 0x1ff, 0x100000001, 0xf, 0xff, 0x7, 0x8, 0x0, 0x1e, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1, 0x7fffffffffffffff, 0x7, 0x7, 0x3, 0x0, 0xb, 0x5, 0x7fff, 0x2, 0x8, 0x1, 0x8000, 0x4, 0x0, 0x2, 0x8, 0xffffffff, 0x2, 0x5, 0x8, 0x5, 0x0, 0x2, 0x5, 0x32e, 0x53d, 0xd, 0x0, 0x40, 0xf0, 0x2854, 0x2, 0x7, 0xd07, 0x8, 0x9, 0x39738df3, 0xfffffffffffffff8, 0x7, 0x8000000000000001, 0x5b, 0x5, 0x8, 0x2, 0x7, 0xffffffff, 0x10001, 0x8e2, 0x4, 0x6, 0x8, 0x3, 0x6, 0x2, 0x3, 0x182, 0x7ff, 0xc, 0x80000000, 0xf, 0xffffffff, 0x4, 0x3, 0x3, 0x8, 0x5, 0x10000, 0x7, 0x7f, 0x2]})
fallocate(r3, 0x11, 0x440f, 0x40000000200003) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x439, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1040, 0xdfa4539d32493641}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast2}]}}}]}, 0x48}}, 0x20000098) (async)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010300453b88400819151300000000000109022d0001000000000904ffff486bb22b000904fffffd0000000009"], 0x0)

1.540209634s ago: executing program 1 (id=2031):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000))
r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x6)
r2 = syz_io_uring_setup(0x8d5, &(0x7f0000000240)={0x0, 0x6093, 0x800, 0x0, 0x21}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffefffd, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd_index=0x4, 0x3, 0x0, 0x0, 0x0, 0x0, {0x80}})
io_uring_enter(r2, 0x6c1a, 0xa25d, 0x1, 0x0, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000100)={0x1, 0x101, 0x4, 0x8, 0x10, "f8fe9b8a9eb00dc84aa20d84f6b83ec926c978"})

1.354590924s ago: executing program 3 (id=2032):
r0 = socket$kcm(0x10, 0x0, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="b8e28b31b3d74cc947466a8a75e9991244c347c6446ea84386ac09e073514165f504ddc7ca00741eb5d85a55246d474164c9ebaf8b83e7dc804e6e13a5fc98a3d0fc", 0x42}], 0x1}, 0x4080000)

1.264145247s ago: executing program 3 (id=2033):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000500)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$vbi(0x0, 0x3, 0x2)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r2, &(0x7f00000003c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_int(r5, &(0x7f00000000c0), 0x12)
write$cgroup_pid(r3, &(0x7f0000000040), 0x12)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x3, 0xa5cf2, 0x15207f})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000380)={0x40, 0xf, 0x2, "4493"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x86, &(0x7f0000000500)=ANY=[@ANYRESOCT=r1, @ANYRES8, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r9=>0x0})
connect$can_bcm(r8, &(0x7f00000000c0)={0x1d, r9}, 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRES64=r7], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)

1.065268664s ago: executing program 1 (id=2034):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}, @AF_INET6={0x4, 0x2d}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)

470.745624ms ago: executing program 1 (id=2035):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x8) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x1, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400003366"], 0x48) (async)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
fcntl$dupfd(r2, 0x406, r3) (async)
close(r5) (async)
r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0)
close(r6) (async)
execveat$binfmt(0xffffffffffffff9c, r4, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x1000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x8, 0x0, 0x3, 0xfa11, 0xfffffffe}, 0x0) (async)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r8=>0x0}) (async)
r9 = socket(0x10, 0x80002, 0x0)
ioctl$VIDIOC_DBG_G_CHIP_INFO(0xffffffffffffffff, 0xc0c85666, &(0x7f0000000580)={{0x3, @addr=0x466c}, "8d869b4c905f2c1df5db16184a48fa5c68fef7a23465f29f9c58263f0771eeea"}) (async)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r8, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000780873ed00"/20, @ANYRES32=0x0, @ANYBLOB="00000000004000002000128008000100677470001400028008000400000000000500060002000000"], 0x40}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x4000831}, 0x0)

320.612805ms ago: executing program 0 (id=2036):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000040)=0x481824ec, 0x4)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000009000/0x18000)=nil, 0x0, 0x0, 0x3, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0)
r3 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}})
ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000000)={0x5, 0x6, 0x2})
bind$inet6(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x8001)
r6 = getpgid(0x0)
fcntl$setownex(r5, 0xf, &(0x7f0000000140)={0x2, r6})
sendmmsg$unix(r4, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
r9 = inotify_init1(0x0)
inotify_add_watch(r9, &(0x7f00000006c0)='.\x00', 0xaa)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
dup3(r9, r10, 0x0)
readv(r10, &(0x7f0000001980)=[{&(0x7f0000000100)=""/48, 0x30}], 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @empty}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x1e}}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r10}]}, 0x60}, 0x1, 0x0, 0x0, 0x2}, 0x4)
syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000100), &(0x7f0000000240))

99.676794ms ago: executing program 4 (id=2037):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b3c359", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f84bd7", 0x0, 0x2c, 0x0, @private1, @private2}}}}}}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, 0xffffffffffffffff, &(0x7f00000004c0), 0x4003)
socket$packet(0x11, 0x3, 0x300)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

0s ago: executing program 4 (id=2038):
syz_io_uring_setup(0x7, &(0x7f0000001140)={0x0, 0xcdc5, 0x6, 0x1, 0xe5}, &(0x7f00000011c0), &(0x7f0000001200))
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000fa070000bf6500000600000000000000", @ANYRES32=0x1, @ANYBLOB="02cb00000000000000000001"], 0x50)
r0 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c})
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x86c, 0x1000, &(0x7f0000000040)=0x1)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0xffffffffc7637e23, 0x642100)
ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f)
socket$packet(0x11, 0x2, 0x300)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1)
r4 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101050000142413099f33760bf14377323063f9c8a44d11390524151000090581030002080004090401"], 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0)

kernel console output (not intermixed with test programs):

e UDC or it's busy
[  427.095064][T12300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.115701][T10990] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  427.165180][T12322] netlink: 'syz.5.1693': attribute type 2 has an invalid length.
[  427.220208][T12322] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1693'.
[  427.289444][T10990] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  427.303703][T10990] usb 2-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[  427.334338][T12329] syzkaller1: entered promiscuous mode
[  427.345658][T12329] syzkaller1: entered allmulticast mode
[  427.345773][T10990] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  427.402811][T10990] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  427.421156][T10990] usb 2-1: Manufacturer: syz
[  427.431283][T10990] usb 2-1: SerialNumber: syz
[  427.641553][T12337] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1697'.
[  427.715223][   T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  427.846867][T12346] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  427.883044][   T10] usb 6-1: Using ep0 maxpacket: 32
[  427.891262][T10990] usb 2-1: USB disconnect, device number 122
[  427.891502][T12348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  427.907904][   T10] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  427.914866][T12348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.919463][   T10] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  427.934975][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  427.945621][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  427.955428][   T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  427.966596][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  427.980856][   T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  428.011593][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.037105][   T10] usb 6-1: config 0 descriptor??
[  428.053131][ T5894] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  428.191049][T12356] tipc: Started in network mode
[  428.196403][T12356] tipc: Node identity 4, cluster identity 4711
[  428.206055][T12356] tipc: Node number set to 4
[  428.214028][ T5894] usb 5-1: Using ep0 maxpacket: 16
[  428.221173][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  428.239015][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  428.260425][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  428.275959][   T10] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  428.287505][  T982] usb 1-1: reset high-speed USB device number 107 using dummy_hcd
[  428.308219][   T10] usb 6-1: USB disconnect, device number 20
[  428.318713][ T5894] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00
[  428.343103][   T10] usblp1: removed
[  428.346325][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.354818][T10993] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  428.398237][ T5894] usb 5-1: config 0 descriptor??
[  428.524770][T10993] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  428.535067][T10993] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  428.544185][T10993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.555052][T10993] usb 4-1: config 0 descriptor??
[  428.570323][T10993] pwc: Askey VC010 type 2 USB webcam detected.
[  428.621206][T12345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.630199][T12345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.640748][T12345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.650415][T12345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.664919][T12345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.673938][T12345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.702700][   T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  428.768900][T10993] pwc: send_video_command error -71
[  428.775986][T10993] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  428.784290][T10993] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71
[  428.796167][T10993] usb 4-1: USB disconnect, device number 114
[  428.875134][   T10] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  428.893096][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253
[  428.908796][   T10] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  428.925871][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.943027][   T10] usb 2-1: Product: syz
[  428.948439][   T10] usb 2-1: Manufacturer: syz
[  428.957062][   T10] usb 2-1: SerialNumber: syz
[  428.965477][   T10] usb 2-1: config 0 descriptor??
[  428.980886][   T10] gspca_main: sunplus-2.14.0 probing 055f:c630
[  429.179658][   T10] gspca_sunplus: reg_r err -71
[  429.184837][   T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  429.201247][   T10] usb 2-1: USB disconnect, device number 123
[  429.223113][ T5905] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[  429.285758][T10993] usb 6-1: new full-speed USB device number 21 using dummy_hcd
[  429.375610][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  429.387650][ T5905] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  429.397962][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.410427][ T5905] usb 4-1: config 0 descriptor??
[  429.421665][ T5905] pwc: Askey VC010 type 2 USB webcam detected.
[  429.465188][T10993] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  429.481265][T10993] usb 6-1: config 0 has no interface number 0
[  429.495843][T10993] usb 6-1: config 0 interface 41 has no altsetting 0
[  429.517744][T10994] usb 1-1: USB disconnect, device number 107
[  429.530421][T10993] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  429.559205][T10993] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.571793][T10993] usb 6-1: Product: syz
[  429.579957][T10993] usb 6-1: Manufacturer: syz
[  429.589068][T10993] usb 6-1: SerialNumber: syz
[  429.605007][T10993] usb 6-1: config 0 descriptor??
[  429.827956][ T5905] pwc: recv_control_msg error -32 req 02 val 2b00
[  429.863863][ T5905] pwc: recv_control_msg error -32 req 02 val 2700
[  429.881399][ T5905] pwc: recv_control_msg error -32 req 02 val 2c00
[  429.897075][ T5905] pwc: recv_control_msg error -32 req 04 val 1000
[  429.906468][ T5905] pwc: recv_control_msg error -32 req 04 val 1300
[  429.923993][ T5905] pwc: recv_control_msg error -32 req 04 val 1400
[  429.940803][ T5905] pwc: recv_control_msg error -32 req 02 val 2000
[  429.954115][ T5905] pwc: recv_control_msg error -32 req 02 val 2100
[  429.962344][ T5905] pwc: recv_control_msg error -32 req 04 val 1500
[  429.970317][ T5905] pwc: recv_control_msg error -32 req 02 val 2500
[  430.185118][ T5905] pwc: recv_control_msg error -71 req 02 val 2600
[  430.206478][ T5905] pwc: recv_control_msg error -71 req 02 val 2900
[  430.215148][ T5905] pwc: recv_control_msg error -71 req 02 val 2800
[  430.241057][ T5905] pwc: recv_control_msg error -71 req 04 val 1100
[  430.255106][T10993] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -32
[  430.255494][ T5905] pwc: recv_control_msg error -71 req 04 val 1200
[  430.275399][ T5905] pwc: Registered as video103.
[  430.304754][ T5905] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61
[  430.378577][ T5905] usb 4-1: USB disconnect, device number 115
[  430.854575][ T5894] usbhid 5-1:0.0: can't add hid device: -71
[  430.878589][ T5894] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  430.909382][ T5894] usb 5-1: USB disconnect, device number 114
[  431.082196][T12396] netlink: 'syz.4.1714': attribute type 11 has an invalid length.
[  431.959202][T12421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1720'.
[  432.069806][ T5894] usb 6-1: USB disconnect, device number 21
[  432.374501][ T5905] usb 5-1: new full-speed USB device number 115 using dummy_hcd
[  432.525345][ T5894] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  432.683258][ T5894] usb 6-1: Using ep0 maxpacket: 32
[  432.690483][ T5894] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  432.707753][ T5894] usb 6-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  432.717498][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.728495][T12430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  432.738600][ T5894] usb 6-1: Product: syz
[  432.743847][ T5894] usb 6-1: Manufacturer: syz
[  432.827095][ T5894] usb 6-1: SerialNumber: syz
[  433.089884][ T5894] usb 6-1: BAAD HEADPHONE p_chmask mismatch
[  433.153059][T12435] fuse: Unknown parameter 'subj_type'
[  433.371494][   T30] audit: type=1326 audit(1774755451.485:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  433.397888][ T5894] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22
[  433.449181][ T5894] usb 6-1: USB disconnect, device number 22
[  433.457682][   T30] audit: type=1326 audit(1774755451.495:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  433.513670][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  433.554036][   T30] audit: type=1326 audit(1774755451.495:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  433.610145][   T30] audit: type=1326 audit(1774755451.495:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  433.721934][   T30] audit: type=1326 audit(1774755451.495:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  433.809293][   T30] audit: type=1326 audit(1774755451.495:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  433.864000][   T30] audit: type=1326 audit(1774755451.495:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  433.928967][   T30] audit: type=1326 audit(1774755451.495:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  433.982423][   T30] audit: type=1326 audit(1774755451.495:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  434.022976][T10994] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[  434.049955][   T30] audit: type=1326 audit(1774755451.495:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12434 comm="syz.3.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  434.176576][T12454] netlink: 'syz.5.1730': attribute type 61 has an invalid length.
[  434.195827][T10994] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  434.212028][T10994] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  434.223681][T10994] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  434.237218][T10994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.245818][T10994] usb 2-1: Product: syz
[  434.250241][T10994] usb 2-1: Manufacturer: syz
[  434.255921][T10994] usb 2-1: SerialNumber: syz
[  434.292044][T12456] fuse: Bad value for 'fd'
[  434.312730][  T982] usb 1-1: new low-speed USB device number 108 using dummy_hcd
[  434.362672][T10993] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  434.452719][  T982] usb 1-1: device descriptor read/64, error -71
[  434.514936][T10993] usb 4-1: Using ep0 maxpacket: 32
[  434.527395][T10993] usb 4-1: string descriptor 0 read error: -22
[  434.533814][T10993] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  434.542920][   T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  434.550639][T10993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.683647][T10994] usb 2-1: 0:2 : does not exist
[  434.692682][  T982] usb 1-1: new low-speed USB device number 109 using dummy_hcd
[  434.716513][   T10] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  434.725808][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  434.734863][   T10] usb 6-1: Product: syz
[  434.739133][   T10] usb 6-1: Manufacturer: syz
[  434.744031][   T10] usb 6-1: SerialNumber: syz
[  434.751307][   T10] usb 6-1: config 0 descriptor??
[  434.760418][   T10] gspca_main: sq905c-2.14.0 probing 2770:9052
[  434.832740][  T982] usb 1-1: device descriptor read/64, error -71
[  434.912677][T10993] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  434.919718][T10993] usb 4-1: MIDIStreaming interface descriptor not found
[  434.944045][  T982] usb usb1-port1: attempt power cycle
[  435.004156][ T5905] usb 5-1: unable to read config index 0 descriptor/start: -71
[  435.019155][ T5905] usb 5-1: can't read configurations, error -71
[  435.074965][T10993] usb 4-1: USB disconnect, device number 116
[  435.106834][ T5894] usb 2-1: USB disconnect, device number 124
[  435.302917][  T982] usb 1-1: new low-speed USB device number 110 using dummy_hcd
[  435.323924][  T982] usb 1-1: device descriptor read/8, error -71
[  435.453181][ T5905] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  435.562731][  T982] usb 1-1: new low-speed USB device number 111 using dummy_hcd
[  435.563154][ T5894] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  435.583776][  T982] usb 1-1: device descriptor read/8, error -71
[  435.587943][  T798] usb 6-1: USB disconnect, device number 23
[  435.613005][ T5905] usb 5-1: Using ep0 maxpacket: 16
[  435.621084][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  435.635324][ T5905] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  435.647278][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.661833][ T5905] usb 5-1: config 0 descriptor??
[  435.692903][  T982] usb usb1-port1: unable to enumerate USB device
[  435.723306][ T5894] usb 2-1: Using ep0 maxpacket: 16
[  435.729981][ T5894] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  435.738414][ T5894] usb 2-1: config 0 has no interface number 0
[  435.745901][ T5894] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  435.757324][ T5894] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  435.769628][ T5894] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  435.779100][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  435.787570][ T5894] usb 2-1: Product: syz
[  435.791745][ T5894] usb 2-1: SerialNumber: syz
[  435.803081][ T5894] usb 2-1: config 0 descriptor??
[  435.813427][ T5894] cm109 2-1:0.8: invalid payload size 0, expected 4
[  435.821517][ T5894] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input62
[  436.012468][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  436.012622][  T982] usb 2-1: USB disconnect, device number 125
[  436.019734][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  436.039586][  T982] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  436.145646][ T5905] mcp2221 0003:04D8:00DD.0029: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  436.412343][T12476] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1736'.
[  436.703236][T12479] syzkaller0: entered promiscuous mode
[  436.714990][T12479] syzkaller0: entered allmulticast mode
[  436.760361][T12479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  437.023236][ T5894] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  437.183520][ T5894] usb 2-1: Using ep0 maxpacket: 8
[  437.194549][ T5894] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  437.230407][ T5894] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  437.260587][ T5894] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  437.283790][ T5894] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  437.294417][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.311292][ T5894] usb 2-1: Product: syz
[  437.316028][ T5894] usb 2-1: Manufacturer: syz
[  437.332195][ T5894] usb 2-1: SerialNumber: syz
[  437.542806][  T982] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  437.561451][T12478] tipc: Resetting bearer <eth:syzkaller0>
[  437.566564][ T5894] cdc_ncm 2-1:1.0: bind() failure
[  437.599355][ T5894] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  437.615230][T12478] tipc: Disabling bearer <eth:syzkaller0>
[  437.622641][T10994] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  437.623480][ T5894] cdc_ncm 2-1:1.1: bind() failure
[  437.761158][  T982] usb 4-1: device descriptor read/64, error -71
[  437.791725][ T5894] usb 2-1: USB disconnect, device number 126
[  437.822663][T10993] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  437.843558][T10994] usb 1-1: Using ep0 maxpacket: 32
[  437.853081][T10994] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  437.862874][T10994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.870999][T10994] usb 1-1: Product: syz
[  437.878211][T10994] usb 1-1: Manufacturer: syz
[  437.884554][T10994] usb 1-1: SerialNumber: syz
[  437.893635][T10994] usb 1-1: config 0 descriptor??
[  437.902309][T10994] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  437.963173][T10993] usb 6-1: device descriptor read/64, error -71
[  438.022663][  T982] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  438.134398][ T5894] usb 5-1: USB disconnect, device number 116
[  438.153142][  T982] usb 4-1: device descriptor read/64, error -71
[  438.212808][T10993] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  438.264749][  T982] usb usb4-port1: attempt power cycle
[  438.392674][T10993] usb 6-1: device descriptor read/64, error -71
[  438.503077][T10993] usb usb6-port1: attempt power cycle
[  438.633137][ T5894] usb 5-1: new full-speed USB device number 117 using dummy_hcd
[  438.643036][  T982] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  438.673513][  T982] usb 4-1: device descriptor read/8, error -71
[  438.785553][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  438.797007][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 13961, setting to 64
[  438.808478][ T5894] usb 5-1: New USB device found, idVendor=04d9, idProduct=a0c2, bcdDevice= 0.00
[  438.818046][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  438.828609][ T5894] usb 5-1: config 0 descriptor??
[  438.834893][T12502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  438.842731][T10993] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  438.884202][T10993] usb 6-1: device descriptor read/8, error -71
[  438.922684][  T982] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  438.943581][  T982] usb 4-1: device descriptor read/8, error -71
[  439.052895][  T982] usb usb4-port1: unable to enumerate USB device
[  439.132668][T10993] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  439.153666][T10993] usb 6-1: device descriptor read/8, error -71
[  439.273456][T10993] usb usb6-port1: unable to enumerate USB device
[  439.480475][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.497095][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.513112][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.520805][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.531927][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.547893][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.559448][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.573111][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.581110][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.592637][ T5894] holtek_mouse 0003:04D9:A0C2.002A: unknown main item tag 0x0
[  439.609936][ T5894] holtek_mouse 0003:04D9:A0C2.002A: hidraw0: USB HID v7f.fd Device [HID 04d9:a0c2] on usb-dummy_hcd.4-1/input0
[  439.929935][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  439.936720][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  440.134463][T10994] gspca_ov534_9: sccb_write failed
[  440.444112][T12514] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1747'.
[  440.542344][T10994] gspca_ov534_9: reg_w failed -71
[  440.590725][T12518] syzkaller1: entered promiscuous mode
[  440.599222][T12518] syzkaller1: entered allmulticast mode
[  440.792626][T10994] gspca_ov534_9: Unknown sensor 0000
[  440.792727][T10994] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22
[  440.825214][T10994] usb 1-1: USB disconnect, device number 112
[  440.853801][T12534] FAULT_INJECTION: forcing a failure.
[  440.853801][T12534] name failslab, interval 1, probability 0, space 0, times 0
[  440.866851][T12534] CPU: 0 UID: 0 PID: 12534 Comm: syz.5.1754 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  440.866877][T12534] Tainted: [L]=SOFTLOCKUP
[  440.866884][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  440.866895][T12534] Call Trace:
[  440.866903][T12534]  <TASK>
[  440.866911][T12534]  dump_stack_lvl+0xe8/0x150
[  440.866941][T12534]  should_fail_ex+0x412/0x560
[  440.866970][T12534]  should_failslab+0xa8/0x100
[  440.866993][T12534]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  440.867015][T12534]  ? __alloc_skb+0x1d0/0x7d0
[  440.867031][T12534]  ? __local_bh_enable_ip+0xd0/0x130
[  440.867058][T12534]  __alloc_skb+0x1d0/0x7d0
[  440.867082][T12534]  tcp_v6_send_response+0x2cb/0x1d70
[  440.867125][T12534]  ? __pfx_tcp_v6_send_response+0x10/0x10
[  440.867148][T12534]  ? inet6_ehashfn+0xaf/0x5a0
[  440.867185][T12534]  ? lock_acquire+0xf0/0x2e0
[  440.867210][T12534]  tcp_v6_send_reset+0xc99/0x1490
[  440.867245][T12534]  ? tcp_v6_send_reset+0x2d1/0x1490
[  440.867269][T12534]  ? __pfx_tcp_v6_send_reset+0x10/0x10
[  440.867292][T12534]  ? tcp_v6_fill_cb+0x3d/0x4c0
[  440.867319][T12534]  ? tcp_v6_fill_cb+0x260/0x4c0
[  440.867339][T12534]  ? xfrm6_policy_check+0x65a/0x870
[  440.867361][T12534]  ? tcp_checksum_complete+0x152/0x200
[  440.867387][T12534]  tcp_v6_rcv+0x1fca/0x2f60
[  440.867444][T12534]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  440.867463][T12534]  ? nf_nat_ipv6_fn+0xf3/0x2f0
[  440.867489][T12534]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  440.867519][T12534]  ? raw6_local_deliver+0x116/0x950
[  440.867544][T12534]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  440.867565][T12534]  ip6_protocol_deliver_rcu+0xa73/0x1600
[  440.867611][T12534]  ip6_input_finish+0x191/0x370
[  440.867635][T12534]  NF_HOOK+0x336/0x3c0
[  440.867657][T12534]  ? __pfx_ip6_input_finish+0x10/0x10
[  440.867676][T12534]  ? NF_HOOK+0x9e/0x3c0
[  440.867694][T12534]  ? __pfx_NF_HOOK+0x10/0x10
[  440.867715][T12534]  ? __pfx_ip6_input_finish+0x10/0x10
[  440.867745][T12534]  ip6_input+0x16a/0x270
[  440.867764][T12534]  ? ip6_input+0x23/0x270
[  440.867787][T12534]  NF_HOOK+0x336/0x3c0
[  440.867804][T12534]  ? skb_orphan+0x4f/0xd0
[  440.867826][T12534]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  440.867845][T12534]  ? NF_HOOK+0x9e/0x3c0
[  440.867864][T12534]  ? __pfx_NF_HOOK+0x10/0x10
[  440.867887][T12534]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  440.867912][T12534]  ? netif_receive_skb+0x102/0xc50
[  440.867936][T12534]  netif_receive_skb+0x278/0xc50
[  440.867964][T12534]  ? __pfx_netif_receive_skb+0x10/0x10
[  440.867984][T12534]  ? __lock_acquire+0x6b5/0x2cf0
[  440.868009][T12534]  ? tun_rx_batched+0x185/0x790
[  440.868030][T12534]  tun_rx_batched+0x1de/0x790
[  440.868047][T12534]  ? __build_skb+0x62/0x440
[  440.868070][T12534]  ? __pfx_tun_rx_batched+0x10/0x10
[  440.868097][T12534]  ? tun_get_user+0x2354/0x3dd0
[  440.868116][T12534]  ? __local_bh_enable_ip+0xd0/0x130
[  440.868139][T12534]  ? tun_get_user+0x2669/0x3dd0
[  440.868156][T12534]  tun_get_user+0x2a78/0x3dd0
[  440.868189][T12534]  ? aa_file_perm+0x50e/0x15e0
[  440.868206][T12534]  ? __pfx_tun_get_user+0x10/0x10
[  440.868221][T12534]  ? aa_file_perm+0x192/0x15e0
[  440.868254][T12534]  ? ref_tracker_alloc+0x35c/0x4c0
[  440.868274][T12534]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  440.868296][T12534]  ? tun_get+0x1c/0x2f0
[  440.868320][T12534]  ? tun_get+0x1c/0x2f0
[  440.868339][T12534]  ? tun_get+0x1c/0x2f0
[  440.868363][T12534]  tun_chr_write_iter+0x113/0x200
[  440.868385][T12534]  vfs_write+0x61d/0xb90
[  440.868412][T12534]  ? __pfx_vfs_write+0x10/0x10
[  440.868441][T12534]  ? __fget_files+0x2a/0x420
[  440.868471][T12534]  ksys_write+0x150/0x270
[  440.868493][T12534]  ? __pfx_ksys_write+0x10/0x10
[  440.868531][T12534]  do_syscall_64+0x14d/0xf80
[  440.868552][T12534]  ? trace_irq_disable+0x3b/0x150
[  440.868568][T12534]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.868586][T12534]  ? clear_bhb_loop+0x40/0x90
[  440.868608][T12534]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  440.868626][T12534] RIP: 0033:0x7fa28a35cfce
[  440.868643][T12534] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  440.868660][T12534] RSP: 002b:00007fa28b274fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  440.868679][T12534] RAX: ffffffffffffffda RBX: 00007fa28b2756c0 RCX: 00007fa28a35cfce
[  440.868693][T12534] RDX: 000000000000004a RSI: 0000200000000180 RDI: 00000000000000c8
[  440.868704][T12534] RBP: 00007fa28b275090 R08: 0000000000000000 R09: 0000000000000000
[  440.868716][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  440.868727][T12534] R13: 00007fa28a616038 R14: 00007fa28a615fa0 R15: 00007fa28a73fa48
[  440.868755][T12534]  </TASK>
[  441.776111][T12560] bond1: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms
[  441.842521][T12560] bond1 (unregistering): Released all slaves
[  441.842984][T10994] usb 5-1: USB disconnect, device number 117
[  441.995093][T12565] syzkaller1: entered promiscuous mode
[  442.020589][T12565] syzkaller1: entered allmulticast mode
[  442.451989][T12582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.485604][T12582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.510686][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.566327][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.567147][T12582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.607299][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.610745][T12582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.624231][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.645308][T12587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  442.677811][T12587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  442.689153][ T5894] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  442.753544][  T798] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  442.913134][  T798] usb 1-1: Using ep0 maxpacket: 16
[  442.925120][  T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  442.940931][  T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.953763][  T798] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  443.444965][  T798] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  443.454849][  T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.477299][  T798] usb 1-1: config 0 descriptor??
[  443.740907][T12616] syzkaller0: entered promiscuous mode
[  443.746691][T12616] syzkaller0: entered allmulticast mode
[  443.781918][  T798] usbhid 1-1:0.0: can't add hid device: -71
[  443.789725][  T798] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  443.965540][  T798] usb 1-1: USB disconnect, device number 113
[  444.052928][ T5961] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  444.083735][ T5827] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  444.344431][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  444.420902][ T5827] Bluetooth: hci4: SCO packet for unknown connection handle 0
[  444.753416][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  444.865378][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  444.890778][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  444.925297][ T5961] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  444.941769][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.973577][ T5961] usb 6-1: config 0 descriptor??
[  445.101764][T12643] netlink: 'syz.0.1783': attribute type 1 has an invalid length.
[  445.406907][ T5961] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  445.726872][   T30] kauditd_printk_skb: 71 callbacks suppressed
[  445.726891][   T30] audit: type=1326 audit(1774755463.825:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.019193][   T30] audit: type=1326 audit(1774755463.825:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.043633][T12649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.070239][T12649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.164688][   T30] audit: type=1326 audit(1774755463.825:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.333236][T10993] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[  446.403333][T10994] usb 6-1: USB disconnect, device number 28
[  446.463509][   T30] audit: type=1326 audit(1774755463.825:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.522826][T10993] usb 2-1: device descriptor read/64, error -71
[  446.535918][   T30] audit: type=1326 audit(1774755463.825:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.603290][   T30] audit: type=1326 audit(1774755463.825:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.640083][   T30] audit: type=1326 audit(1774755463.825:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.689679][   T30] audit: type=1326 audit(1774755463.835:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.782650][T10993] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  446.794760][   T30] audit: type=1326 audit(1774755463.835:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.895378][   T30] audit: type=1326 audit(1774755463.835:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12644 comm="syz.3.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5019c799 code=0x7ffc0000
[  446.942638][T10993] usb 2-1: device descriptor read/64, error -71
[  447.094358][T10993] usb usb2-port1: attempt power cycle
[  447.129278][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  447.472668][T10990] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  447.480362][T10993] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  447.507417][T10993] usb 2-1: device descriptor read/8, error -71
[  447.634388][T10990] usb 4-1: Using ep0 maxpacket: 16
[  447.642051][T10990] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  447.650805][T10990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  447.662410][T10990] usb 4-1: config 0 has no interface number 0
[  447.672106][T10990] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  447.681470][T10990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.689958][T10990] usb 4-1: Product: syz
[  447.694442][T10990] usb 4-1: Manufacturer: syz
[  447.699043][T10990] usb 4-1: SerialNumber: syz
[  447.713121][ T5961] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  447.716260][T10990] usb 4-1: config 0 descriptor??
[  447.762971][T10993] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  447.785959][T10993] usb 2-1: device descriptor read/8, error -71
[  447.902932][T10993] usb usb2-port1: unable to enumerate USB device
[  447.903126][ T5961] usb 6-1: Using ep0 maxpacket: 16
[  447.917808][ T5961] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  447.933749][ T5961] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.964787][ T5961] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  448.005684][ T5961] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  448.047514][ T5961] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  448.076009][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  448.099496][ T5961] usb 6-1: SerialNumber: syz
[  448.138485][ T5961] hub 6-1:1.0: bad descriptor, ignoring hub
[  448.145637][ T5961] hub 6-1:1.0: probe with driver hub failed with error -5
[  448.174868][T10990] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3)
[  448.214586][ T5961] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  448.232970][T10990] uvcvideo 4-1:0.105: No valid video chain found.
[  448.255191][T10990] usb 4-1: USB disconnect, device number 121
[  448.672713][T10990] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  448.744808][T12684] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1795'.
[  448.842865][T10990] usb 5-1: Using ep0 maxpacket: 16
[  448.855811][T10990] usb 5-1: unable to get BOS descriptor or descriptor too short
[  448.876879][T10990] usb 5-1: config 1 has an invalid interface number: 237 but max is 0
[  448.885876][T10990] usb 5-1: config 1 has no interface number 0
[  448.897620][T10990] usb 5-1: config 1 interface 237 has no altsetting 0
[  448.918592][T10990] usb 5-1: New USB device found, idVendor=045e, idProduct=0445, bcdDevice=87.ed
[  448.928433][T10990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  448.942335][T10990] usb 5-1: Product: syz
[  448.946607][T10990] usb 5-1: Manufacturer: syz
[  448.953211][T10990] usb 5-1: SerialNumber: syz
[  449.167854][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.217801][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.228757][ T5961] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  449.253813][T10990] ipaq 5-1:1.237: PocketPC PDA converter detected
[  449.268355][T10990] ipaq 5-1:1.237: probe with driver ipaq failed with error -71
[  449.355889][T10990] usb 5-1: USB disconnect, device number 119
[  449.415587][ T5961] usb 1-1: Using ep0 maxpacket: 16
[  449.422188][ T5961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  449.433081][ T5961] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  449.446312][ T5961] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  449.457442][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  449.466227][ T5961] usb 1-1: Product: syz
[  449.470506][ T5961] usb 1-1: Manufacturer: syz
[  449.476838][ T5961] usb 1-1: SerialNumber: syz
[  449.668625][T12704] binder: BINDER_SET_CONTEXT_MGR already set
[  449.676377][T12704] binder: 12702:12704 ioctl 4018620d 200000004a80 returned -16
[  449.695462][ T5961] usb 1-1: 0:2 : does not exist
[  449.702059][T12704] binder_alloc: binder_alloc_mmap_handler: 12702 200000ffe000-200001000000 already mapped failed -16
[  449.713430][ T5961] usb 1-1: unit 9 not found!
[  449.722017][ T5961] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4)
[  449.735381][ T5961] usb 1-1: 4:0: cannot get min/max values for control 9 (id 4)
[  449.788379][T12706] binder_alloc: 12702: binder_alloc_buf, no vma
[  449.875074][ T5961] usb 1-1: USB disconnect, device number 114
[  450.323595][T10990] usb 6-1: USB disconnect, device number 29
[  450.702405][T10990] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  450.791364][T12729] netlink: 'syz.4.1805': attribute type 7 has an invalid length.
[  450.799589][T12729] netlink: 'syz.4.1805': attribute type 7 has an invalid length.
[  450.925096][T10990] usb 4-1: Using ep0 maxpacket: 16
[  450.932211][T10990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.942903][T10990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  450.954447][T10990] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  450.964524][T10990] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  450.985272][T10990] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  451.007191][T10990] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  451.016709][T10990] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  451.026201][T10990] usb 4-1: Manufacturer: syz
[  451.030966][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1807'.
[  451.045570][T10990] usb 4-1: config 0 descriptor??
[  451.100067][T12733] 8021q: adding VLAN 0 to HW filter on device bond4
[  451.200509][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1807'.
[  451.543377][T10990] rc_core: IR keymap rc-hauppauge not found
[  451.549298][T10990] Registered IR keymap rc-empty
[  451.560869][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  451.602941][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  451.638450][T12741] loop5: detected capacity change from 0 to 7
[  451.645432][T12741] Dev loop5: unable to read RDB block 7
[  451.651027][T12741]  loop5: unable to read partition table
[  451.657568][T12741] loop5: partition table beyond EOD, truncated
[  451.664322][T12741] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  451.701411][T10990] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  451.769531][T10990] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input64
[  451.792414][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  451.806037][T12743] loop5: detected capacity change from 0 to 7
[  451.835978][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  451.868430][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  451.896944][T12743] Dev loop5: unable to read RDB block 7
[  451.917418][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  451.937887][T12743]  loop5: AHDI p3 p4
[  451.944942][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  451.958056][T12743] loop5: partition table partially beyond EOD, truncated
[  451.972823][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  452.003027][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  452.011287][T12743] loop5: p3 start 3976331264 is beyond EOD, truncated
[  452.029034][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  452.073155][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  452.102689][T10990] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  452.124338][T10990] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  452.142148][T10990] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  452.142645][ T5961] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  452.232055][T12749] ip6_vti0: left promiscuous mode
[  452.289827][T12752] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1813'.
[  452.333800][ T5961] usb 5-1: Using ep0 maxpacket: 32
[  452.341248][ T5961] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  452.359935][T12749] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  452.378816][ T5961] usb 5-1: config 0 has no interface number 0
[  452.393292][ T5961] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  452.416746][ T5961] usb 5-1: config 0 interface 196 has no altsetting 0
[  452.482232][ T5961] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  452.517549][ T5961] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  452.548427][T12757] syz_tun: entered allmulticast mode
[  452.550422][ T5961] usb 5-1: Product: syz
[  452.563322][T12757] IPVS: set_ctl: invalid protocol: 25 172.30.0.6:20000
[  452.570321][ T5961] usb 5-1: Manufacturer: syz
[  452.589944][ T5961] usb 5-1: SerialNumber: syz
[  452.622300][ T5961] usb 5-1: config 0 descriptor??
[  452.645376][T12746] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  452.825504][T12763] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  452.850500][T12763] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  453.089951][T12767] netlink: 'syz.1.1817': attribute type 3 has an invalid length.
[  453.196019][  T798] usb 4-1: USB disconnect, device number 122
[  453.552638][T10990] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  453.560632][T12770] tipc: Enabling of bearer <hb:l> rejected, media not registered
[  453.585160][T12780] loop5: detected capacity change from 0 to 7
[  453.610826][T12780] Dev loop5: unable to read RDB block 7
[  453.627554][T12780]  loop5: unable to read partition table
[  453.643412][T12780] loop5: partition table beyond EOD, truncated
[  453.673306][T12780] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  453.720362][T10990] usb 2-1: device descriptor read/64, error -71
[  453.753262][  T798] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  453.829095][ T5961] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  453.862233][ T5961] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached
[  453.883180][  T798] usb 4-1: device descriptor read/64, error -71
[  453.983103][T10990] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  454.003421][T12787] syz_tun: entered allmulticast mode
[  454.061684][ T5961] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  454.134280][  T798] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  454.163105][T10990] usb 2-1: device descriptor read/64, error -71
[  454.232897][ T5961] usb 6-1: Using ep0 maxpacket: 16
[  454.246660][ T5961] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  454.266866][ T5961] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  454.276481][  T798] usb 4-1: device descriptor read/64, error -71
[  454.285891][T10990] usb usb2-port1: attempt power cycle
[  454.294967][T10994] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  454.309653][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.317967][ T5961] usb 6-1: Product: syz
[  454.322208][ T5961] usb 6-1: Manufacturer: syz
[  454.326976][ T5961] usb 6-1: SerialNumber: syz
[  454.354931][ T5961] r8152-cfgselector 6-1: Unknown version 0x0000
[  454.361185][ T5961] r8152-cfgselector 6-1: config 0 descriptor??
[  454.393711][  T798] usb usb4-port1: attempt power cycle
[  454.454407][T10994] usb 1-1: device descriptor read/64, error -71
[  454.615099][T12782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  454.645085][T10990] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  454.655514][T12782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  454.679933][T12782] x_tables: duplicate underflow at hook 2
[  454.694123][T10990] usb 2-1: device descriptor read/8, error -71
[  454.722799][T10994] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  454.736872][    C1] ipheth 5-1:0.196: ipheth_rcvbulk_callback: callback retval: -22
[  454.745091][  T798] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[  454.774207][  T798] usb 4-1: device descriptor read/8, error -71
[  454.813225][T12782] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  454.892648][T10994] usb 1-1: device descriptor read/64, error -71
[  454.972708][T10990] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  455.004227][T10990] usb 2-1: device descriptor read/8, error -71
[  455.022920][  T798] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  455.053425][  T798] usb 4-1: device descriptor read/8, error -71
[  455.063394][T10994] usb usb1-port1: attempt power cycle
[  455.139973][ T5961] r8152-cfgselector 6-1: Unknown version 0x0000
[  455.150018][ T5961] r8152-cfgselector 6-1: bad CDC descriptors
[  455.156461][T10990] usb usb2-port1: unable to enumerate USB device
[  455.174134][  T798] usb usb4-port1: unable to enumerate USB device
[  455.188263][ T5961] r8152-cfgselector 6-1: USB disconnect, device number 30
[  455.432633][T10994] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  455.483459][T10994] usb 1-1: device descriptor read/8, error -71
[  455.732668][T10994] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  455.757250][T12818] ip6_vti0: entered promiscuous mode
[  455.767340][T10994] usb 1-1: device descriptor read/8, error -71
[  455.768712][  T798] ipheth 5-1:0.196: ipheth_carrier_set: usb_control_msg: -32
[  455.787295][  T982] usb 5-1: USB disconnect, device number 120
[  455.803524][T12818] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1823'.
[  455.813176][T12818] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1823'.
[  455.896733][T10994] usb usb1-port1: unable to enumerate USB device
[  455.904262][  T982] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected
[  456.730488][T12849] fuse: Bad value for 'fd'
[  457.620388][T12888] loop5: detected capacity change from 0 to 7
[  457.657971][T12888] Dev loop5: unable to read RDB block 7
[  457.736850][T12888]  loop5: unable to read partition table
[  457.756725][T12888] loop5: partition table beyond EOD, truncated
[  457.773345][T12888] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  457.863098][T12891] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  458.374093][  T798] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  458.568914][  T798] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 32
[  458.580374][  T798] usb 2-1: config 1 interface 0 has no altsetting 0
[  458.617537][  T798] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  458.627226][  T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.635842][  T798] usb 2-1: Product: Џ
[  458.717347][  T798] usb 2-1: Manufacturer: А
[  458.730822][  T798] usb 2-1: SerialNumber: 쳺ⱱ఻䰡먂걱ꔖꦷ웣㐭䱥浇螚ؼꋃ䡊鏔歕㉍쏂뵗埖ㄞጚ䭛⅙㝰ﹷ砻떻齽☙辅乲袾齀䖤ᛔⰠㆤƿ얦휬偸熡Ơ씊໾骂⾧㿊털賡♒賋橹ġ撿챦掽ᗮ㖃鎻쟺푴ꉁႡ⠌ᑶ䕓柹탥
[  459.063617][T12902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  459.278644][T12902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.327700][T12902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.367462][T12902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.414550][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1840'.
[  459.428331][T12928] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1840'.
[  459.443437][T12902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.459591][T12930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  459.479091][T12930] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  459.533734][  T798] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  459.572338][  T798] usb 2-1: USB disconnect, device number 9
[  459.752793][  T982] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  459.902752][  T982] usb 4-1: Using ep0 maxpacket: 32
[  459.913456][  T982] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  459.936840][  T982] usb 4-1: config 0 has no interface number 0
[  459.951997][  T982] usb 4-1: config 0 interface 184 has no altsetting 0
[  459.971417][  T982] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  459.981535][  T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.984666][T12947] loop5: detected capacity change from 0 to 7
[  459.989988][  T982] usb 4-1: Product: syz
[  459.997026][T12947] Dev loop5: unable to read RDB block 7
[  460.004591][  T982] usb 4-1: Manufacturer: syz
[  460.005965][T12947]  loop5: unable to read partition table
[  460.010140][  T982] usb 4-1: SerialNumber: syz
[  460.016388][T12947] loop5: partition table beyond EOD, truncated
[  460.032111][  T982] usb 4-1: config 0 descriptor??
[  460.044950][T12947] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  460.449448][T12933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.493648][T12933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.538311][T12962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'.
[  460.570071][T12962] 8021q: adding VLAN 0 to HW filter on device bond5
[  460.654508][T12962] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  460.739617][  T982] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  460.769080][  T982] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  460.786102][  T982] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  460.800427][  T982] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  460.813383][  T982] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  460.825442][  T982] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  460.839212][  T982] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  460.877098][  T982] usb 4-1: USB disconnect, device number 127
[  461.005631][ T5961] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  461.153186][T12986] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1��^!�l�1�*�$pOc�ɔ��r$�G����
[  461.179046][ T5961] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  461.218260][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.268629][ T5961] usb 2-1: config 0 descriptor??
[  461.278388][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1856'.
[  461.679968][ T5961] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  461.756609][ T5894] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  461.914340][ T5961] [drm:udl_init] *ERROR* Selecting channel failed
[  461.984876][ T5961] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  462.086909][ T5961] [drm] Initialized udl on minor 2
[  462.123189][ T5894] usb 4-1: device descriptor read/64, error -71
[  462.134410][ T5961] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  462.164810][ T5961] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  462.174014][ T5960] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  462.192243][ T5960] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  462.200969][ T5961] usb 2-1: USB disconnect, device number 10
[  462.362951][ T5894] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  462.478185][T13003] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'.
[  462.523269][ T5894] usb 4-1: Using ep0 maxpacket: 8
[  462.523447][T13003] snd_dummy snd_dummy.0: control 6:0:8:syz0:-6 is already present
[  462.530464][ T5894] usb 4-1: unable to get BOS descriptor or descriptor too short
[  462.594247][ T5894] usb 4-1: config 7 has an invalid interface number: 115 but max is 0
[  462.604754][ T5894] usb 4-1: config 7 has no interface number 0
[  462.610870][ T5894] usb 4-1: config 7 interface 115 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  462.628458][ T5894] usb 4-1: config 7 interface 115 has no altsetting 0
[  462.641648][ T5894] usb 4-1: New USB device found, idVendor=0675, idProduct=0200, bcdDevice=e1.e3
[  462.651607][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.660237][ T5894] usb 4-1: Product: syz
[  462.668864][ T5894] usb 4-1: Manufacturer: syz
[  462.674027][ T5894] usb 4-1: SerialNumber: syz
[  462.760770][T13012] loop5: detected capacity change from 0 to 7
[  462.770339][ T5838] Dev loop5: unable to read RDB block 7
[  462.792610][ T5838]  loop5: AHDI p3 p4
[  462.798971][ T5838] loop5: partition table partially beyond EOD, truncated
[  462.817762][ T5961] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  462.831630][ T5838] loop5: p3 start 3976331264 is beyond EOD, truncated
[  462.840963][T13012] Dev loop5: unable to read RDB block 7
[  462.848660][T13012]  loop5: AHDI p3 p4
[  462.853675][T13012] loop5: partition table partially beyond EOD, truncated
[  462.861008][T13012] loop5: p3 start 3976331264 is beyond EOD, truncated
[  462.974779][ T5961] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  462.992923][ T5961] usb 2-1: config 0 interface 0 has no altsetting 0
[  463.012703][ T5961] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  463.021822][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  463.043129][ T5961] usb 2-1: Product: syz
[  463.047365][ T5961] usb 2-1: Manufacturer: syz
[  463.051991][ T5961] usb 2-1: SerialNumber: syz
[  463.070450][ T5961] usb 2-1: config 0 descriptor??
[  463.093807][ T5961] usb 2-1: selecting invalid altsetting 0
[  463.290343][T13005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.307016][T13005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.337702][T13005] fuse: Unknown parameter 'no'
[  463.429824][T13021] bond6: entered allmulticast mode
[  463.448282][T10990] usb 2-1: USB disconnect, device number 11
[  463.514725][T13025] macvlan2: entered promiscuous mode
[  463.520043][T13025] macvlan2: entered allmulticast mode
[  463.552684][T13025] bond6: (slave macvlan2): Opening slave failed
[  464.473789][T10994] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  464.672665][T10994] usb 2-1: Using ep0 maxpacket: 16
[  464.679638][T10994] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  464.695452][T10994] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  464.723310][T10994] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  464.751839][T10994] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  464.770254][T10994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.795158][T10994] usb 2-1: Product: syz
[  464.819600][T10994] usb 2-1: Manufacturer: syz
[  464.834584][T10994] usb 2-1: SerialNumber: syz
[  464.960001][ T5894] cxacru 4-1:7.115: cxacru_bind: interface has incorrect endpoints
[  464.993245][ T5894] cxacru 4-1:7.115: usbatm_usb_probe: bind failed: -19!
[  465.058999][ T5894] usb 4-1: USB disconnect, device number 3
[  465.491203][T13042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.513160][T13042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.549267][T10994] usb 2-1: 0:2 : does not exist
[  465.568552][T10994] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[  465.588865][T13058] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1874'.
[  465.642032][T13058] bond_slave_0: entered promiscuous mode
[  465.648155][T13058] bond_slave_1: entered promiscuous mode
[  465.654033][T13058] team_slave_0: entered promiscuous mode
[  465.660039][T13058] team_slave_1: entered promiscuous mode
[  465.667304][T13058] macsec1: entered allmulticast mode
[  465.673774][T10994] usb 2-1: USB disconnect, device number 12
[  465.716402][T13058] bond0: entered allmulticast mode
[  465.743120][T13058] bond_slave_0: entered allmulticast mode
[  465.773149][T13058] bond_slave_1: entered allmulticast mode
[  465.810256][T13058] team0: entered allmulticast mode
[  465.822699][T13058] team_slave_0: entered allmulticast mode
[  465.852746][T13058] team_slave_1: entered allmulticast mode
[  465.865552][   T30] kauditd_printk_skb: 25 callbacks suppressed
[  465.865568][   T30] audit: type=1326 audit(1774755484.055:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  465.914869][T13058] bond0: left allmulticast mode
[  465.919899][T13058] bond_slave_0: left allmulticast mode
[  465.945695][T13058] bond_slave_1: left allmulticast mode
[  465.948053][   T30] audit: type=1326 audit(1774755484.055:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  465.979714][   T30] audit: type=1326 audit(1774755484.055:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  465.984997][T13058] team0: left allmulticast mode
[  466.050868][   T30] audit: type=1326 audit(1774755484.055:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  466.072643][T13058] team_slave_0: left allmulticast mode
[  466.074323][   T30] audit: type=1326 audit(1774755484.055:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  466.111740][T13058] team_slave_1: left allmulticast mode
[  466.142029][T13058] bond_slave_0: left promiscuous mode
[  466.147507][T13058] bond_slave_1: left promiscuous mode
[  466.152931][T13058] team_slave_0: left promiscuous mode
[  466.158321][T13058] team_slave_1: left promiscuous mode
[  466.207419][   T30] audit: type=1326 audit(1774755484.055:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  466.278376][   T30] audit: type=1326 audit(1774755484.055:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  466.337869][   T30] audit: type=1326 audit(1774755484.055:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  466.366372][   T30] audit: type=1326 audit(1774755484.205:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  466.414953][   T30] audit: type=1326 audit(1774755484.205:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13060 comm="syz.0.1875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03dd9c799 code=0x7ffc0000
[  466.504562][T13077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1879'.
[  466.514342][ T5894] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  466.612045][T13079] netlink: 'syz.5.1881': attribute type 11 has an invalid length.
[  466.643701][T13079] netlink: 'syz.5.1881': attribute type 11 has an invalid length.
[  466.685148][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  466.696857][ T5894] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  466.732097][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.746584][T13071] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.771251][ T5894] usb 5-1: config 0 descriptor??
[  466.788950][T13069] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  467.342003][ T5894] hid_parser_main: 221 callbacks suppressed
[  467.342027][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.371155][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.386208][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.405379][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.427698][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.461216][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.479969][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.498235][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.516611][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.548122][ T5894] logitech-djreceiver 0003:046D:C71F.002C: unknown main item tag 0x0
[  467.570574][ T5894] logitech-djreceiver 0003:046D:C71F.002C: collection stack underflow
[  467.587969][ T5894] logitech-djreceiver 0003:046D:C71F.002C: item 0 2 0 12 parsing failed
[  467.598346][ T5894] logitech-djreceiver 0003:046D:C71F.002C: logi_dj_probe: parse failed
[  467.607926][ T5894] logitech-djreceiver 0003:046D:C71F.002C: probe with driver logitech-djreceiver failed with error -22
[  468.109656][ T5894] usb 5-1: USB disconnect, device number 121
[  469.253254][T10994] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  469.323284][  T982] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  469.412657][T10994] usb 4-1: Using ep0 maxpacket: 8
[  469.420122][T10994] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  469.428898][T10994] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  469.438291][T10994] usb 4-1: config 0 has no interface number 0
[  469.451184][T10994] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  469.471146][T10994] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  469.488554][  T982] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30
[  469.503838][T10994] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  469.518387][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  469.538108][T10994] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  469.549711][T10994] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0
[  469.558607][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  469.576121][T10994] usb 4-1: Product: syz
[  469.580538][  T982] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[  469.617645][T10994] usb 4-1: Manufacturer: syz
[  469.631296][T10994] usb 4-1: config 0 descriptor??
[  469.643494][  T982] usb 6-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00
[  469.659931][  T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.677031][  T982] usb 6-1: config 0 descriptor??
[  469.861379][T13125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.880527][T13125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.896748][T10994] usb 4-1: USB disconnect, device number 4
[  470.087184][T10993] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  470.112714][T13131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.121388][T13131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.142204][T13131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.160797][T13131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.211423][T13140] Lens A: =================  START STATUS  =================
[  470.219466][T13140] Lens A: Focus, Absolute: 0
[  470.224633][T13140] Lens A: ==================  END STATUS  ==================
[  470.284001][T10993] usb 5-1: Using ep0 maxpacket: 32
[  470.291274][T10993] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  470.299830][T10993] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  470.308782][T10993] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  470.338084][T10993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  470.371641][T10993] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  470.418856][ T5894] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  470.753097][ T5961] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  470.787328][ T5894] usb 4-1: Using ep0 maxpacket: 8
[  470.829603][ T5894] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  470.843861][ T5894] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  470.856098][ T5894] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  470.867995][T10993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  470.871680][ T5894] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  470.899228][T10993] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  470.933204][T10993] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  470.946266][ T5961] usb 1-1: Using ep0 maxpacket: 16
[  470.952932][T10993] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  470.956761][ T5961] usb 1-1: config 0 has no interfaces?
[  471.021938][ T5961] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  471.031626][ T5961] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  471.045688][ T5961] usb 1-1: Manufacturer: syz
[  471.050476][T10993] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.156945][ T5961] usb 1-1: config 0 descriptor??
[  471.157940][T10993] usb 5-1: config 0 descriptor??
[  471.163401][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.249093][ T5894] hub 4-1:32.0: bad descriptor, ignoring hub
[  471.256381][ T5894] hub 4-1:32.0: probe with driver hub failed with error -5
[  471.441463][T10993] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 122 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  471.486975][T10993] usb 5-1: USB disconnect, device number 122
[  471.507780][T10993] usblp0: removed
[  471.582989][   T10] usb 4-1: USB disconnect, device number 5
[  472.013346][T10993] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  472.149750][  T982] usbhid 6-1:0.0: can't add hid device: -71
[  472.168320][  T982] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  472.188521][  T982] usb 6-1: USB disconnect, device number 31
[  472.194885][T10993] usb 5-1: Using ep0 maxpacket: 16
[  472.207153][T10993] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 157
[  472.225411][T10993] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  472.235737][T10993] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  472.250930][T10993] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  472.263690][T10993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.272065][T10993] usb 5-1: Product: syz
[  472.293376][T10993] usb 5-1: Manufacturer: syz
[  472.302621][T10993] usb 5-1: SerialNumber: syz
[  472.309042][T10993] usb 5-1: config 0 descriptor??
[  472.328733][    C0] port100 5-1:0.0: NFC: Urb failure (status -71)
[  472.339434][T10993] port100 5-1:0.0: NFC: Could not get supported command types
[  472.546251][ T5894] usb 5-1: USB disconnect, device number 123
[  472.583414][T13159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1899'.
[  472.693023][  T798] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  472.845050][  T798] usb 2-1: config 0 has an invalid interface number: 64 but max is 0
[  472.853879][   T30] audit: type=1800 audit(1774755491.035:1415): pid=13152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1897" name="/" dev="fuse" ino=9 res=0 errno=0
[  472.874472][ T5894] usb 6-1: new full-speed USB device number 32 using dummy_hcd
[  472.884039][  T798] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.895236][  T798] usb 2-1: config 0 has no interface number 0
[  472.904703][  T798] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  472.914357][  T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.922481][  T798] usb 2-1: Product: syz
[  472.927253][  T798] usb 2-1: Manufacturer: syz
[  472.931866][  T798] usb 2-1: SerialNumber: syz
[  472.939936][  T798] usb 2-1: config 0 descriptor??
[  473.044992][ T5894] usb 6-1: config 0 has an invalid interface number: 11 but max is 0
[  473.065433][ T5894] usb 6-1: config 0 has no interface number 0
[  473.071583][ T5894] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  473.088810][ T5894] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10
[  473.101961][ T5894] usb 6-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 255, setting to 64
[  473.114492][ T5894] usb 6-1: config 0 interface 11 has no altsetting 0
[  473.121569][ T5894] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  473.153590][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.201486][ T5894] usb 6-1: config 0 descriptor??
[  473.213203][  T798] uvcvideo 2-1:0.64: Found UVC 0.00 device syz (046d:0823)
[  473.226614][T13159] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  473.243502][  T798] uvcvideo 2-1:0.64: No valid video chain found.
[  473.266534][T13159] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  473.281693][   T10] usb 1-1: USB disconnect, device number 119
[  473.284438][  T798] usb 2-1: USB disconnect, device number 13
[  473.306081][ T5894] keyspan 6-1:0.11: Keyspan 2 port adapter converter detected
[  473.349982][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 81
[  473.388172][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 82
[  473.423747][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 1
[  473.431664][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 2
[  473.442921][T10993] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  473.451100][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 85
[  473.486480][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 5
[  473.504771][T13178] FAULT_INJECTION: forcing a failure.
[  473.504771][T13178] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  473.518965][ T5894] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  473.539697][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 83
[  473.548046][T13178] CPU: 1 UID: 0 PID: 13178 Comm: syz.0.1906 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  473.548072][T13178] Tainted: [L]=SOFTLOCKUP
[  473.548078][T13178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  473.548086][T13178] Call Trace:
[  473.548093][T13178]  <TASK>
[  473.548099][T13178]  dump_stack_lvl+0xe8/0x150
[  473.548127][T13178]  should_fail_ex+0x412/0x560
[  473.548156][T13178]  _copy_to_iter+0x1e4/0x17d0
[  473.548173][T13178]  ? __pfx_drbg_kcapi_random+0x10/0x10
[  473.548200][T13178]  ? is_bpf_text_address+0x26/0x2b0
[  473.548223][T13178]  ? __pfx__copy_to_iter+0x10/0x10
[  473.548238][T13178]  ? is_bpf_text_address+0x26/0x2b0
[  473.548269][T13178]  rng_recvmsg+0x1db/0x2a0
[  473.548302][T13178]  ? __pfx_rng_recvmsg+0x10/0x10
[  473.548329][T13178]  ? aa_sock_msg_perm+0xf1/0x1b0
[  473.548355][T13178]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  473.548373][T13178]  ? security_socket_recvmsg+0x7e/0x2c0
[  473.548392][T13178]  ? __pfx_rng_recvmsg+0x10/0x10
[  473.548411][T13178]  sock_recvmsg+0x172/0x1b0
[  473.548438][T13178]  sock_read_iter+0x251/0x320
[  473.548463][T13178]  ? __pfx_sock_read_iter+0x10/0x10
[  473.548492][T13178]  ? bpf_lsm_file_permission+0x9/0x20
[  473.548511][T13178]  ? security_file_permission+0x75/0x260
[  473.548533][T13178]  ? rw_verify_area+0x2a6/0x4d0
[  473.548553][T13178]  ? __pfx_sock_read_iter+0x10/0x10
[  473.548574][T13178]  __io_read+0x724/0x1520
[  473.548597][T13178]  ? rcu_is_watching+0x15/0xb0
[  473.548626][T13178]  ? __kmalloc_noprof+0x37d/0x760
[  473.548650][T13178]  ? __pfx___io_read+0x10/0x10
[  473.548676][T13178]  io_read+0x4a/0x1c0
[  473.548699][T13178]  __io_issue_sqe+0x180/0x4b0
[  473.548718][T13178]  ? io_file_get_normal+0xe9/0x310
[  473.548737][T13178]  io_issue_sqe+0x164/0xf90
[  473.548764][T13178]  io_submit_sqes+0xcb1/0x2400
[  473.548807][T13178]  __se_sys_io_uring_enter+0x2cc/0x18c0
[  473.548827][T13178]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  473.548851][T13178]  ? __fget_files+0x3a0/0x420
[  473.548876][T13178]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  473.548894][T13178]  ? fput+0xa0/0xd0
[  473.548916][T13178]  ? ksys_write+0x242/0x270
[  473.548934][T13178]  ? __pfx_ksys_write+0x10/0x10
[  473.548955][T13178]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  473.548976][T13178]  do_syscall_64+0x14d/0xf80
[  473.548992][T13178]  ? trace_irq_disable+0x3b/0x150
[  473.549007][T13178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.549025][T13178]  ? clear_bhb_loop+0x40/0x90
[  473.549046][T13178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  473.549064][T13178] RIP: 0033:0x7ff03dd9c799
[  473.549082][T13178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  473.549096][T13178] RSP: 002b:00007ff03ecb5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  473.549115][T13178] RAX: ffffffffffffffda RBX: 00007ff03e015fa0 RCX: 00007ff03dd9c799
[  473.549129][T13178] RDX: 00000000000004c1 RSI: 0000000000000627 RDI: 0000000000000003
[  473.549139][T13178] RBP: 00007ff03ecb5090 R08: 0000000000000000 R09: 0000000000000030
[  473.549151][T13178] R10: 0000000000000043 R11: 0000000000000246 R12: 0000000000000001
[  473.549161][T13178] R13: 00007ff03e016038 R14: 00007ff03e015fa0 R15: 00007ff03e13fa48
[  473.549208][T13178]  </TASK>
[  473.869429][T10993] usb 4-1: device descriptor read/64, error -71
[  473.907029][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 84
[  473.915786][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 3
[  473.923733][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 4
[  473.931385][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 86
[  473.939767][ T5894] keyspan 6-1:0.11: found no endpoint descriptor for endpoint 6
[  473.961260][ T5894] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  473.974426][ T5894] usb 6-1: USB disconnect, device number 32
[  473.983509][ T5894] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  473.994934][ T5894] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  474.005561][ T5894] keyspan 6-1:0.11: device disconnected
[  474.065520][T13179] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1907'.
[  474.152761][T10993] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  474.302652][T10993] usb 4-1: device descriptor read/64, error -71
[  474.402777][  T982] usb 1-1: new full-speed USB device number 120 using dummy_hcd
[  474.427667][T10993] usb usb4-port1: attempt power cycle
[  474.695901][  T982] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  474.747292][  T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.755399][  T982] usb 1-1: Product: syz
[  474.906400][T13198] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1911'.
[  474.930807][T10993] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  474.940114][T13198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1911'.
[  475.061233][T10993] usb 4-1: device descriptor read/8, error -71
[  475.230329][  T982] usb 1-1: Manufacturer: syz
[  475.371318][T10993] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  475.384682][  T982] usb 1-1: SerialNumber: syz
[  475.398627][T10993] usb 4-1: device descriptor read/8, error -71
[  475.415748][  T982] usb 1-1: config 0 descriptor??
[  475.441374][  T982] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  475.559972][T10993] usb usb4-port1: unable to enumerate USB device
[  475.788337][T13207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  475.797288][T13207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  475.963425][  T982] gspca_stk1135: reg_w 0x2 err -110
[  475.969673][  T982] gspca_stk1135: serial bus timeout: status=0x00
[  476.004191][  T982] gspca_stk1135: Sensor write failed
[  476.022593][  T982] gspca_stk1135: serial bus timeout: status=0x00
[  476.028972][  T982] gspca_stk1135: Sensor write failed
[  476.039169][  T982] gspca_stk1135: serial bus timeout: status=0x00
[  476.059438][  T982] gspca_stk1135: Sensor read failed
[  476.069609][  T982] gspca_stk1135: serial bus timeout: status=0x00
[  476.095259][  T982] gspca_stk1135: Sensor read failed
[  476.112647][  T982] gspca_stk1135: Detected sensor type unknown (0x0)
[  476.137528][  T982] gspca_stk1135: serial bus timeout: status=0x00
[  476.152277][T13212] loop5: detected capacity change from 0 to 7
[  476.159367][T13212] Dev loop5: unable to read RDB block 7
[  476.169105][T13212]  loop5: unable to read partition table
[  476.323428][T13212] loop5: partition table beyond EOD, truncated
[  476.336989][T13212] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  476.393360][  T982] gspca_stk1135: Sensor read failed
[  476.406476][T13215] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1914'.
[  476.436094][  T982] gspca_stk1135: serial bus timeout: status=0x00
[  476.467559][T13219] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1914'.
[  476.484714][  T982] gspca_stk1135: Sensor read failed
[  476.489948][  T982] gspca_stk1135: serial bus timeout: status=0x00
[  476.506381][T13222] xt_cgroup: invalid path, errno=-2
[  476.605962][  T982] gspca_stk1135: Sensor write failed
[  476.632182][  T982] gspca_stk1135: serial bus timeout: status=0x00
[  476.657591][  T982] gspca_stk1135: Sensor write failed
[  476.705729][T10993] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  476.729055][  T982] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110
[  476.852407][T13228] team0: entered promiscuous mode
[  476.858534][T13228] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  476.902653][T10993] usb 4-1: Using ep0 maxpacket: 32
[  476.909314][T10993] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  476.919875][T10993] usb 4-1: config 0 has no interface number 0
[  476.952304][T10993] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  476.970166][T10993] usb 4-1: config 0 interface 85 has no altsetting 0
[  476.981973][T10993] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  476.991712][T10993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.999829][  T982] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  477.021481][T10993] usb 4-1: Product: syz
[  477.023556][T13230] IPv6: NLM_F_CREATE should be specified when creating new route
[  477.034501][T10993] usb 4-1: Manufacturer: syz
[  477.039126][T10993] usb 4-1: SerialNumber: syz
[  477.063518][T10993] usb 4-1: config 0 descriptor??
[  477.165936][  T982] usb 6-1: Using ep0 maxpacket: 32
[  477.179407][  T982] usb 6-1: config 0 has an invalid interface number: 188 but max is 0
[  477.188254][  T982] usb 6-1: config 0 has no interface number 0
[  477.194696][  T982] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  477.217403][  T982] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  477.233339][  T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.253473][  T982] usb 6-1: Product: syz
[  477.260670][  T982] usb 6-1: Manufacturer: syz
[  477.279114][  T982] usb 6-1: SerialNumber: syz
[  477.299482][  T982] usb 6-1: config 0 descriptor??
[  477.315808][T13225] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  477.528513][T13225] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  477.653013][ T5894] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  477.677752][T10993] appletouch 4-1:0.85: Geyser mode initialized.
[  477.686494][T10993] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input67
[  477.740683][  T982] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  477.762976][  T982] asix 6-1:0.188: probe with driver asix failed with error -32
[  477.802684][ T5894] usb 2-1: Using ep0 maxpacket: 16
[  477.809196][ T5894] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  477.818575][ T5894] usb 2-1: config 0 has no interface number 0
[  477.825758][ T5894] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  477.837230][ T5894] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  477.848917][ T5894] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  477.858591][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  477.867031][ T5894] usb 2-1: Product: syz
[  477.871203][ T5894] usb 2-1: SerialNumber: syz
[  477.878106][ T5894] usb 2-1: config 0 descriptor??
[  477.895176][  T798] usb 4-1: USB disconnect, device number 10
[  477.916052][  T798] appletouch 4-1:0.85: input: appletouch disconnected
[  477.946801][ T5894] cm109 2-1:0.8: invalid payload size 0, expected 4
[  477.963212][ T5894] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input68
[  478.141547][    C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[  478.142752][  T982] usb 2-1: USB disconnect, device number 14
[  478.148524][    C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  478.169724][  T982] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  478.544419][  T982] usb 1-1: USB disconnect, device number 120
[  478.816254][  T798] usb 6-1: USB disconnect, device number 33
[  478.905327][T13263] syzkaller1: entered promiscuous mode
[  478.910999][T13263] syzkaller1: entered allmulticast mode
[  479.206222][   T30] audit: type=1800 audit(1774755497.395:1416): pid=13274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1926" name="bus" dev="ramfs" ino=52060 res=0 errno=0
[  479.313505][T13274] vxcan3: entered promiscuous mode
[  479.318731][T13274] vxcan3: entered allmulticast mode
[  479.740740][ T5960] hid_parser_main: 51 callbacks suppressed
[  479.740757][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  479.756399][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  479.780358][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  479.796138][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  479.814224][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  479.948233][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  479.964724][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  479.972291][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  479.980043][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  479.987589][ T5960] hid-generic 0000:0000:0004.002D: unknown main item tag 0x0
[  480.001025][ T5960] hid-generic 0000:0000:0004.002D: hidraw0: <UNKNOWN> HID v0.03 Device [syz1] on syz0
[  480.088015][T13287] fido_id[13287]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  480.102644][  T982] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  480.266176][T13296] netlink: 'syz.4.1934': attribute type 10 has an invalid length.
[  480.282669][  T982] usb 6-1: Using ep0 maxpacket: 32
[  480.290060][  T982] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  480.312150][T13296] 8021q: adding VLAN 0 to HW filter on device batadv0
[  480.320453][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  480.325550][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1934'.
[  480.334601][  T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  480.352093][T13296] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  480.362620][  T982] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  480.374861][  T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.388673][T13296] bond0: (slave batadv0): Releasing backup interface
[  480.398432][  T982] usb 6-1: config 0 descriptor??
[  480.406382][T13282] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  480.423863][  T982] hub 6-1:0.0: USB hub found
[  480.634351][  T982] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  480.749726][T13308] syzkaller1: entered promiscuous mode
[  480.762350][T13308] syzkaller1: entered allmulticast mode
[  481.075225][  T982] hid-generic 0003:046D:C314.002E: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.5-1/input0
[  481.250086][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1931'.
[  481.672695][  T982] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  481.680812][   T10] usb 6-1: USB disconnect, device number 34
[  482.012642][  T982] usb 2-1: Using ep0 maxpacket: 16
[  482.019578][  T982] usb 2-1: config 0 has an invalid interface number: 136 but max is 0
[  482.028605][  T982] usb 2-1: config 0 has no interface number 0
[  482.037574][  T982] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  482.052653][  T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  482.060859][  T982] usb 2-1: Product: syz
[  482.065398][  T982] usb 2-1: Manufacturer: syz
[  482.069991][  T982] usb 2-1: SerialNumber: syz
[  482.079453][  T982] usb 2-1: config 0 descriptor??
[  482.243039][  T798] usb 5-1: new high-speed USB device number 124 using dummy_hcd
[  482.298675][  T982] dvb_usb_dtv5100 2-1:0.136: probe with driver dvb_usb_dtv5100 failed with error -71
[  482.329928][  T982] usb 2-1: USB disconnect, device number 15
[  482.393106][  T798] usb 5-1: Using ep0 maxpacket: 8
[  482.399902][  T798] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  482.433096][  T798] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  482.450988][  T798] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  482.473101][  T798] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  482.496962][  T798] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  482.513257][  T798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.666169][T13338] loop2: detected capacity change from 0 to 7
[  482.677501][ T5829]  loop2:
[  482.680793][ T5829] loop2: partition table partially beyond EOD, truncated
[  482.704719][T13338]  loop2:
[  482.707751][T13338] loop2: partition table partially beyond EOD, truncated
[  482.747305][  T798] usb 5-1: GET_CAPABILITIES returned 0
[  482.753054][  T798] usbtmc 5-1:16.0: can't read capabilities
[  482.901552][T13341] fuse: Bad value for 'fd'
[  483.019507][T13347] syzkaller1: entered promiscuous mode
[  483.030217][   T10] usb 5-1: USB disconnect, device number 124
[  483.041544][T13347] syzkaller1: entered allmulticast mode
[  483.166762][T13351] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1952'.
[  483.176438][  T798] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  483.194982][T13351] macsec1: entered allmulticast mode
[  483.200276][T13351] team0: entered allmulticast mode
[  483.207319][T13351] team0: left allmulticast mode
[  483.356153][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.368249][T13355] kvm: pic: single mode not supported
[  483.368414][T13355] kvm: pic: level sensitive irq not supported
[  483.374868][T13355] kvm: pic: single mode not supported
[  483.380943][T13355] kvm: pic: level sensitive irq not supported
[  483.386702][T13355] kvm: pic: single mode not supported
[  483.394091][T13355] kvm: pic: level sensitive irq not supported
[  483.401132][T13355] kvm: pic: single mode not supported
[  483.408613][T13355] kvm: pic: single mode not supported
[  483.432878][  T798] usb 6-1: Using ep0 maxpacket: 16
[  483.433245][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.462388][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.466444][  T798] usb 6-1: config index 0 descriptor too short (expected 51443, got 18)
[  483.470199][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.487904][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.495187][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.504794][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.511133][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.514609][  T798] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  483.519656][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.549026][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.560642][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.567358][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.580881][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.581131][  T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.587411][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.612917][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.618989][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.632604][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.638764][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.643167][  T798] usb 6-1: Product: syz
[  483.659535][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.660630][  T798] usb 6-1: Manufacturer: syz
[  483.678171][  T798] usb 6-1: SerialNumber: syz
[  483.693311][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.702450][  T798] r8152-cfgselector 6-1: Unknown version 0x0000
[  483.708765][  T798] r8152-cfgselector 6-1: config 0 descriptor??
[  483.721670][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.738004][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.748219][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.766033][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.783402][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.793651][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.888599][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.897924][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.908788][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  483.915639][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  483.964000][  T798] r8152-cfgselector 6-1: USB disconnect, device number 35
[  483.998868][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  484.020821][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  484.032414][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  484.041663][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  484.050359][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  484.057901][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  484.066940][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  484.075843][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  484.104684][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  484.131136][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  484.140952][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  484.148187][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  484.156771][T13357] binder: BINDER_SET_CONTEXT_MGR already set
[  484.165426][T13357] binder: 13356:13357 ioctl 4018620d 200000004a80 returned -16
[  484.181833][T13373] loop2: detected capacity change from 0 to 7
[  484.190356][ T5829]  loop2:
[  484.208563][ T5829] loop2: partition table partially beyond EOD, truncated
[  484.235017][T13373]  loop2:
[  484.250858][T13373] loop2: partition table partially beyond EOD, truncated
[  484.409367][T13379] binder: BINDER_SET_CONTEXT_MGR already set
[  484.415735][T13379] binder: 13374:13379 ioctl 4018620d 200000004a80 returned -16
[  484.923104][   T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  485.084843][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  485.094127][   T10] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  485.115830][   T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  485.125360][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.166561][   T10] usb 6-1: Product: syz
[  485.170808][   T10] usb 6-1: Manufacturer: syz
[  485.175635][   T10] usb 6-1: SerialNumber: syz
[  485.552922][T13388] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1962'.
[  485.582898][T13388] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  485.640135][T13383] syzkaller0: entered promiscuous mode
[  485.654459][T13383] syzkaller0: entered allmulticast mode
[  485.773905][T13392] syzkaller1: entered promiscuous mode
[  485.779459][T13392] syzkaller1: entered allmulticast mode
[  486.028264][   T10] usb 6-1: USB disconnect, device number 36
[  486.083001][  T798] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  486.172867][   T10] usb 6-1: new full-speed USB device number 37 using dummy_hcd
[  486.302726][   T10] usb 6-1: device descriptor read/64, error -71
[  486.522084][  T798] usb 4-1: unable to get BOS descriptor or descriptor too short
[  486.535098][  T798] usb 4-1: config 3 has an invalid interface number: 4 but max is 0
[  486.554174][  T798] usb 4-1: config 3 has no interface number 0
[  486.560597][  T798] usb 4-1: config 3 interface 4 altsetting 184 endpoint 0x5 has invalid wMaxPacketSize 0
[  486.608167][  T798] usb 4-1: config 3 interface 4 has no altsetting 0
[  486.625461][  T798] usb 4-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=7a.1f
[  486.637468][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.649827][  T798] usb 4-1: Product: syz
[  486.657444][  T798] usb 4-1: Manufacturer: syz
[  486.663733][  T798] usb 4-1: SerialNumber: syz
[  486.669320][T13417] loop2: detected capacity change from 0 to 7
[  486.677572][ T5829]  loop2:
[  486.681009][ T5829] loop2: partition table partially beyond EOD, truncated
[  486.690044][T13417]  loop2:
[  486.706194][T13417] loop2: partition table partially beyond EOD, truncated
[  486.732728][   T10] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[  486.873219][   T10] usb 6-1: device descriptor read/64, error -71
[  486.886612][  T798] radio-si470x 4-1:3.4: could not find interrupt in endpoint
[  486.995713][   T10] usb usb6-port1: attempt power cycle
[  487.008261][  T798] radio-si470x 4-1:3.4: probe with driver radio-si470x failed with error -5
[  487.009781][T13421] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1972'.
[  487.041328][  T798] usbhid 4-1:3.4: couldn't find an input interrupt endpoint
[  487.073477][  T798] usb 4-1: USB disconnect, device number 11
[  487.353146][   T10] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[  487.373367][   T10] usb 6-1: device descriptor read/8, error -71
[  487.645323][  T798] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  487.652626][   T10] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  487.752940][ T5894] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  487.808757][  T798] usb 2-1: config 0 has an invalid interface number: 101 but max is 0
[  487.822226][T13439] syzkaller1: entered promiscuous mode
[  487.824427][  T798] usb 2-1: config 0 has no interface number 0
[  487.828421][T13439] syzkaller1: entered allmulticast mode
[  487.835364][  T798] usb 2-1: config 0 interface 101 has no altsetting 0
[  487.855603][  T798] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  487.865355][  T798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.874424][   T10] usb 6-1: device not accepting address 40, error -71
[  487.882309][   T10] usb usb6-port1: unable to enumerate USB device
[  487.894085][  T798] usb 2-1: config 0 descriptor??
[  487.905248][ T5894] usb 4-1: config 0 has no interfaces?
[  487.913142][  T798] cp210x 2-1:0.101: cp210x converter detected
[  487.933990][ T5894] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  487.945065][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  487.954491][ T5894] usb 4-1: Product: syz
[  487.958886][ T5894] usb 4-1: Manufacturer: syz
[  487.964134][ T5960] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  487.988128][ T5894] usb 4-1: SerialNumber: syz
[  488.012275][ T5894] usb 4-1: config 0 descriptor??
[  488.133181][ T5960] usb 5-1: Using ep0 maxpacket: 16
[  488.142287][ T5960] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  488.151255][ T5960] usb 5-1: config 0 has no interface number 0
[  488.157812][ T5960] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  488.168256][ T5960] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  488.180531][ T5960] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  488.190661][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.200172][ T5960] usb 5-1: Product: syz
[  488.205075][ T5960] usb 5-1: Manufacturer: syz
[  488.209669][ T5960] usb 5-1: SerialNumber: syz
[  488.218355][ T5960] usb 5-1: config 0 descriptor??
[  488.232490][T13434] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  488.240424][T13434] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  488.241992][T13426] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1974'.
[  488.296979][T10994] usb 4-1: USB disconnect, device number 12
[  488.301397][  T798] cp210x 2-1:0.101: failed to get vendor val 0x000e size 3: -32
[  488.392632][   T10] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  488.452274][T13434] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  488.459882][T13434] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  488.543676][  T798] cp210x 2-1:0.101: GPIO initialisation failed: -19
[  488.559025][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  488.569973][  T798] usb 2-1: cp210x converter now attached to ttyUSB0
[  488.578504][   T10] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[  488.593579][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.649638][   T10] usb 1-1: Product: syz
[  488.662627][   T10] usb 1-1: Manufacturer: 롚婾ä᤼⁴䬋ᶔ쓹龯긳탲ӻ⧋㉔렐뵉唅㢯ୢ⫵꫌끮䆱퉥
[  488.688476][   T10] usb 1-1: SerialNumber: syz
[  488.756427][T13453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.768602][T13453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.802361][T10994] usb 2-1: USB disconnect, device number 16
[  488.819635][T10994] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  488.842647][T10994] cp210x 2-1:0.101: device disconnected
[  488.893224][ T5960] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  488.917812][ T5960] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read software interface selection register: -61
[  488.929013][T13456] loop2: detected capacity change from 0 to 7
[  488.948511][ T5960] asix 5-1:0.251: probe with driver asix failed with error -61
[  488.958584][T13456] Dev loop2: unable to read RDB block 7
[  488.971061][T13456]  loop2: AHDI p1 p2 p3
[  488.976731][T13456] loop2: partition table partially beyond EOD, truncated
[  488.986549][T13456] loop2: p1 start 1818582900 is beyond EOD, truncated
[  489.006122][T13456] loop2: p3 start 335544320 is beyond EOD, truncated
[  489.013839][   T30] audit: type=1326 audit(1774755507.205:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13447 comm="syz.0.1982" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff03dd9c799 code=0x0
[  489.242977][T10994] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  489.327979][T13471] loop5: detected capacity change from 0 to 7
[  489.335389][T13471] Dev loop5: unable to read RDB block 7
[  489.340975][T13471]  loop5: AHDI p3 p4
[  489.345807][T13471] loop5: partition table partially beyond EOD, truncated
[  489.353733][T13471] loop5: p3 start 3976331264 is beyond EOD, truncated
[  489.407445][T10994] usb 6-1: unable to get BOS descriptor or descriptor too short
[  489.417419][T10994] usb 6-1: not running at top speed; connect to a high speed hub
[  489.429183][T10994] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  489.439967][T10994] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  489.451464][T10994] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  489.460833][T10994] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.469986][T10994] usb 6-1: Product: syz
[  489.473313][ T5960] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  489.474493][T10994] usb 6-1: Manufacturer: syz
[  489.487524][T10994] usb 6-1: SerialNumber: syz
[  489.644887][ T5960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  489.663029][ T5960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  489.685263][ T5960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  489.703060][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.711088][ T5960] usb 2-1: Product: syz
[  489.733290][ T5960] usb 2-1: Manufacturer: syz
[  489.737929][ T5960] usb 2-1: SerialNumber: syz
[  489.971926][ T5960] usb 2-1: cannot find UAC_HEADER
[  490.009991][T13484] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  490.072167][ T5960] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  490.099032][ T5960] usb 2-1: USB disconnect, device number 17
[  490.133892][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  490.683145][ T5894] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  490.789712][ T5960] usb 5-1: USB disconnect, device number 125
[  490.847041][ T5894] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config
[  490.859021][ T5894] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  490.869256][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.887931][ T5894] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1
[  490.960697][  T798] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  491.489354][  T798] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  491.499281][  T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  491.508131][  T798] usb 4-1: Product: syz
[  491.515794][  T798] usb 4-1: Manufacturer: syz
[  491.537097][  T798] usb 4-1: SerialNumber: syz
[  491.569406][   T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  491.590848][ T5960] usb 2-1: USB disconnect, device number 18
[  491.603578][   T10] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  491.622007][  T798] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  491.651504][ T5894] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  491.754214][T13517] loop5: detected capacity change from 0 to 7
[  491.796501][T13517] Dev loop5: unable to read RDB block 7
[  491.811080][T13517]  loop5: AHDI p3 p4
[  491.817666][   T10] usb 1-1: USB disconnect, device number 121
[  491.823816][T13517] loop5: partition table partially beyond EOD, truncated
[  491.842320][T13517] loop5: p3 start 3976331264 is beyond EOD, truncated
[  491.875273][T10990] usb 4-1: USB disconnect, device number 13
[  491.914226][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  492.046084][T10994] usb 6-1: 0:2 : does not exist
[  492.057774][T10994] usb 6-1: unit 4 not found!
[  492.078655][T10994] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  492.106407][T10994] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  492.118078][T13523] loop3: detected capacity change from 0 to 7
[  492.136246][T13523] Dev loop3: unable to read RDB block 7
[  492.141854][T13523]  loop3: unable to read partition table
[  492.156295][T13523] loop3: partition table beyond EOD, truncated
[  492.165993][T10994] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  492.176725][T13523] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  492.236969][T10994] usb 6-1: USB disconnect, device number 41
[  492.252906][   T10] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  492.288700][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  492.305192][T13531] netlink: 'syz.5.2004': attribute type 1 has an invalid length.
[  492.348342][T13531] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2004'.
[  492.373036][  T798] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  492.568124][  T798] usb 2-1: unable to get BOS descriptor or descriptor too short
[  492.586871][  T798] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  492.603738][  T798] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  492.617357][  T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.629709][  T798] usb 2-1: Product: syz
[  492.664200][   T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  492.682007][  T798] usb 2-1: Manufacturer: syz
[  492.683730][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.697535][   T10] usb 1-1: Product: syz
[  492.715378][  T798] usb 2-1: SerialNumber: syz
[  492.724992][ T5894] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  492.766111][ T5894] ath9k_htc: Failed to initialize the device
[  492.776858][T10990] usb 4-1: ath9k_htc: USB layer deinitialized
[  492.785932][   T10] usb 1-1: Manufacturer: syz
[  492.805795][   T10] usb 1-1: SerialNumber: syz
[  492.864572][   T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  492.891343][T10993] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  493.272876][T10990] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  493.442975][T10990] usb 4-1: Using ep0 maxpacket: 32
[  493.480401][T10990] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  493.509514][T10990] usb 4-1: config 0 has no interface number 0
[  493.532021][T10990] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  493.551563][T10990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  493.571891][T10990] usb 4-1: Product: syz
[  493.581783][T10990] usb 4-1: Manufacturer: syz
[  493.591989][T10990] usb 4-1: SerialNumber: syz
[  493.605837][T10990] usb 4-1: config 0 descriptor??
[  493.614384][  T798] usb 2-1: reset high-speed USB device number 19 using dummy_hcd
[  493.823482][  T798] usb 2-1: unable to get BOS descriptor or descriptor too short
[  493.854711][  T798] usb 2-1: device firmware changed
[  493.886275][  T798] usb 2-1: USB disconnect, device number 19
[  493.949345][T13552] loop5: detected capacity change from 0 to 7
[  493.957267][T13552] Dev loop5: unable to read RDB block 7
[  493.963903][T13552]  loop5: AHDI p3 p4
[  493.968016][T13552] loop5: partition table partially beyond EOD, truncated
[  493.977844][T13552] loop5: p3 start 3976331264 is beyond EOD, truncated
[  494.014525][T10993] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  494.019586][T13545] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2007'.
[  494.021709][T10993] ath9k_htc: Failed to initialize the device
[  494.053748][T10990] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  494.071880][T10990] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  494.112851][T10994] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  494.135724][T10993] usb 1-1: ath9k_htc: USB layer deinitialized
[  494.244221][T10990] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  494.265807][T10990] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  494.275931][T10994] usb 6-1: Using ep0 maxpacket: 32
[  494.287688][T10994] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  494.300718][T10990] usb 4-1: USB disconnect, device number 14
[  494.313992][T10994] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  494.356609][T10994] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  494.373272][T10994] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  494.386509][T10994] usb 6-1: config 0 interface 0 has no altsetting 0
[  494.395499][T10994] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  494.409110][T10994] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  494.422587][T10994] usb 6-1: Product: syz
[  494.426800][T10994] usb 6-1: Manufacturer: syz
[  494.431409][T10994] usb 6-1: SerialNumber: syz
[  494.448233][T10994] usb 6-1: config 0 descriptor??
[  494.860258][T10994] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  494.873529][T10994] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  495.181537][ T5894] usb 6-1: USB disconnect, device number 42
[  495.189798][T13563] binder: 13562:13563 ioctl c0306201 200000000040 returned -14
[  495.204694][ T5894] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[  495.240429][  T798] usb 1-1: USB disconnect, device number 122
[  495.422126][T13565] binder: 13562:13565 ioctl c0f85403 200000000700 returned -22
[  495.431516][T13565] xt_TCPMSS: Only works on TCP SYN packets
[  496.045910][T13582] binder: 13573:13582 ioctl 4018620d 0 returned -22
[  496.149088][T13588] IPVS: set_ctl: invalid protocol: 59 172.20.20.42:20000
[  496.422659][  T798] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  496.512909][ T5894] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[  496.578162][  T798] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  496.593103][  T798] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  496.607577][  T798] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  496.618428][  T798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  496.637712][ T5905] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  496.651599][  T798] usb 2-1: Product: syz
[  496.658647][  T798] usb 2-1: Manufacturer: syz
[  496.667446][  T798] usb 2-1: SerialNumber: syz
[  496.689882][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  496.703152][ T5894] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  496.778472][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.795748][ T5905] usb 1-1: Using ep0 maxpacket: 16
[  496.808936][ T5894] usb 5-1: config 0 descriptor??
[  496.818812][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  496.838191][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  496.850959][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  496.853085][T13594] netlink: 'syz.3.2021': attribute type 1 has an invalid length.
[  496.872060][ T5905] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  496.872097][T13594] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2021'.
[  496.882473][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  496.902223][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  496.911227][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  496.923064][T13583] binder: 13575:13583 ioctl 4018620d 0 returned -22
[  496.967194][ T5905] usb 1-1: config 0 descriptor??
[  497.016908][ T5894] usb 5-1: USB disconnect, device number 126
[  497.352120][   T30] audit: type=1326 audit(1774755515.535:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.383454][   T30] audit: type=1326 audit(1774755515.535:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.385230][T13590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  497.411643][   T30] audit: type=1326 audit(1774755515.565:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.441637][T13590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  497.462953][T13598] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2022'.
[  497.472030][ T5894] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  497.483838][   T30] audit: type=1326 audit(1774755515.565:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.506859][   T30] audit: type=1326 audit(1774755515.565:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.530079][   T30] audit: type=1326 audit(1774755515.565:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.553757][   T30] audit: type=1326 audit(1774755515.565:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.576471][   T30] audit: type=1326 audit(1774755515.565:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.600189][   T30] audit: type=1326 audit(1774755515.565:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.623207][ T5894] usb 5-1: device descriptor read/64, error -71
[  497.631544][   T30] audit: type=1326 audit(1774755515.565:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13597 comm="syz.5.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa28a39c799 code=0x7ffc0000
[  497.739062][ T5905] microsoft 0003:045E:07DA.002F: ignoring exceeding usage max
[  497.760575][ T5905] microsoft 0003:045E:07DA.002F: unsupported Resolution Multiplier 0
[  497.775561][ T5905] microsoft 0003:045E:07DA.002F: implement() called with n (152) > 32! (kworker/1:4)
[  497.862985][ T5894] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  497.993127][ T5894] usb 5-1: device descriptor read/64, error -71
[  498.114986][ T5894] usb usb5-port1: attempt power cycle
[  498.282544][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  498.403131][ T5961] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  498.593046][ T5894] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  498.623611][ T5894] usb 5-1: device descriptor read/8, error -71
[  498.695824][ T5961] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  498.707285][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  499.104699][ T5961] usb 6-1: config 0 descriptor??
[  499.137726][ T5961] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  499.248401][ T5905] microsoft 0003:045E:07DA.002F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  499.250310][T13621] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2029'.
[  499.269811][  T798] usb 2-1: unit 132 not found!
[  499.279661][ T5905] microsoft 0003:045E:07DA.002F: no inputs found
[  499.335123][ T5905] microsoft 0003:045E:07DA.002F: could not initialize ff, continuing anyway
[  499.379324][ T5905] usb 1-1: USB disconnect, device number 123
[  499.411036][  T798] usb 2-1: USB disconnect, device number 20
[  499.473183][T13625] fido_id[13625]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  499.693125][ T5894] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  499.715448][ T5894] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.762595][ T5894] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  499.777883][ T5905] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  499.793177][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  499.818642][T10995] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  499.842735][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  499.859243][ T5894] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  499.869513][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  499.878218][ T5894] usb 5-1: Product: syz
[  499.882407][ T5894] usb 5-1: Manufacturer: syz
[  499.887143][ T5894] usb 5-1: SerialNumber: syz
[  499.894973][ T5894] usb 5-1: config 0 descriptor??
[  499.973263][ T5894] rc_core: IR keymap rc-imon-rsc not found
[  499.981460][ T5894] Registered IR keymap rc-empty
[  499.989171][ T5905] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  499.999913][T10995] usb 4-1: device descriptor read/64, error -71
[  500.008830][ T5894] rc rc0: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  500.019038][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.022908][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  500.034010][ T5894] input: iMON Station as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input70
[  500.047757][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  500.061306][ T5905] usb 1-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00
[  500.071619][ T5894] imon_raw 5-1:0.0: probe with driver imon_raw failed with error -90
[  500.076527][T13632] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  500.080632][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.115424][ T5894] usb 5-1: USB disconnect, device number 4
[  500.146125][T13632] veth1_vlan: left allmulticast mode
[  500.155075][ T5905] usb 1-1: config 0 descriptor??
[  500.207749][ T6648] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.233645][ T6648] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.243682][ T6648] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.254245][T10995] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  500.255327][ T6648] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  500.393574][T10995] usb 4-1: device descriptor read/64, error -71
[  500.406569][ T5905] usbhid 1-1:0.0: can't add hid device: -71
[  500.413929][ T5905] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  500.447115][ T5905] usb 1-1: USB disconnect, device number 124
[  500.514043][T10995] usb usb4-port1: attempt power cycle
[  500.850588][T13644] 
[  500.852926][T13644] =====================================================
[  500.859836][T13644] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  500.867277][T13644] syzkaller #0 Tainted: G             L     
[  500.873227][T13644] -----------------------------------------------------
[  500.880130][T13644] syz.0.2036/13644 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  500.887823][T13644] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x12b/0x420
[  500.896499][T13644] 
[  500.896499][T13644] and this task is already holding:
[  500.903844][T13644] ffff888033e0f120 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  500.912529][T13644] which would create a new lock dependency:
[  500.918396][T13644]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  500.925952][T13644] 
[  500.925952][T13644] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  500.935379][T13644]  (&dev->event_lock#2){..-.}-{3:3}
[  500.935406][T13644] 
[  500.935406][T13644] ... which became SOFTIRQ-irq-safe at:
[  500.948258][T13644]   lock_acquire+0xf0/0x2e0
[  500.952752][T13644]   _raw_spin_lock_irqsave+0x40/0x60
[  500.958021][T13644]   input_event+0x76/0xe0
[  500.962337][T13644]   xpad360_process_packet+0x1fe/0xdd0
[  500.967781][T13644]   xpad_irq_in+0x1583/0x25e0
[  500.972443][T13644]   __usb_hcd_giveback_urb+0x376/0x540
[  500.977887][T13644]   dummy_timer+0xbbd/0x45d0
[  500.982482][T13644]   __hrtimer_run_queues+0x53a/0xcc0
[  500.987759][T13644]   hrtimer_run_softirq+0x182/0x5a0
[  500.992948][T13644]   handle_softirqs+0x22a/0x870
[  500.997785][T13644]   __irq_exit_rcu+0x5f/0x150
[  501.002446][T13644]   irq_exit_rcu+0x9/0x30
[  501.006762][T13644]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  501.012466][T13644]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  501.018516][T13644]   rcu_preempt_deferred_qs_irqrestore+0x7c4/0xbc0
[  501.025003][T13644]   __rcu_read_unlock+0x83/0xe0
[  501.029839][T13644]   unwind_next_frame+0x1aaf/0x23c0
[  501.035024][T13644]   __unwind_start+0x5b8/0x760
[  501.039773][T13644]   arch_stack_walk+0xe3/0x150
[  501.044523][T13644]   stack_trace_save+0xa9/0x100
[  501.049354][T13644]   kasan_save_track+0x3e/0x80
[  501.054101][T13644]   kasan_save_free_info+0x46/0x50
[  501.059198][T13644]   __kasan_slab_free+0x5c/0x80
[  501.064031][T13644]   kmem_cache_free+0x187/0x630
[  501.068863][T13644]   jbd2_journal_stop+0x8dd/0xda0
[  501.073876][T13644]   __ext4_journal_stop+0xf6/0x1a0
[  501.078970][T13644]   __mark_inode_dirty+0x3a4/0x1470
[  501.084150][T13644]   file_update_time_flags+0x3ee/0x4a0
[  501.089590][T13644]   ext4_page_mkwrite+0x219/0x11a0
[  501.094685][T13644]   do_page_mkwrite+0x14d/0x310
[  501.099525][T13644]   do_pte_missing+0x69d/0x3490
[  501.104357][T13644]   handle_mm_fault+0x1bec/0x3310
[  501.109372][T13644]   do_user_addr_fault+0xa73/0x1340
[  501.114555][T13644]   exc_page_fault+0x6a/0xc0
[  501.119128][T13644]   asm_exc_page_fault+0x26/0x30
[  501.124048][T13644] 
[  501.124048][T13644] to a SOFTIRQ-irq-unsafe lock:
[  501.131047][T13644]  (tasklist_lock){.+.+}-{3:3}
[  501.131073][T13644] 
[  501.131073][T13644] ... which became SOFTIRQ-irq-unsafe at:
[  501.143664][T13644] ...
[  501.143672][T13644]   lock_acquire+0xf0/0x2e0
[  501.150733][T13644]   _raw_read_lock+0x36/0x50
[  501.155324][T13644]   __do_wait+0xde/0x740
[  501.159558][T13644]   do_wait+0x1e7/0x540
[  501.163701][T13644]   kernel_wait+0xd6/0x1c0
[  501.168110][T13644]   call_usermodehelper_exec_work+0xbe/0x230
[  501.174078][T13644]   process_scheduled_works+0xb6e/0x18c0
[  501.179712][T13644]   worker_thread+0xa53/0xfc0
[  501.184394][T13644]   kthread+0x388/0x470
[  501.188543][T13644]   ret_from_fork+0x51e/0xb90
[  501.193215][T13644]   ret_from_fork_asm+0x1a/0x30
[  501.198072][T13644] 
[  501.198072][T13644] other info that might help us debug this:
[  501.198072][T13644] 
[  501.208284][T13644] Chain exists of:
[  501.208284][T13644]   &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock
[  501.208284][T13644] 
[  501.221320][T13644]  Possible interrupt unsafe locking scenario:
[  501.221320][T13644] 
[  501.229622][T13644]        CPU0                    CPU1
[  501.234970][T13644]        ----                    ----
[  501.240312][T13644]   lock(tasklist_lock);
[  501.244539][T13644]                                local_irq_disable();
[  501.251275][T13644]                                lock(&dev->event_lock#2);
[  501.258493][T13644]                                lock(&f_owner->lock);
[  501.265339][T13644]   <Interrupt>
[  501.268796][T13644]     lock(&dev->event_lock#2);
[  501.273654][T13644] 
[  501.273654][T13644]  *** DEADLOCK ***
[  501.273654][T13644] 
[  501.281785][T13644] 2 locks held by syz.0.2036/13644:
[  501.286965][T13644]  #0: ffff8880207ba120 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x1b6/0x4f0
[  501.295493][T13644]  #1: ffff888033e0f120 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x420
[  501.304622][T13644] 
[  501.304622][T13644] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  501.315003][T13644]    -> (&dev->event_lock#2){..-.}-{3:3} {
[  501.320815][T13644]       IN-SOFTIRQ-W at:
[  501.325039][T13644]                           lock_acquire+0xf0/0x2e0
[  501.331612][T13644]                           _raw_spin_lock_irqsave+0x40/0x60
[  501.338968][T13644]                           input_event+0x76/0xe0
[  501.345365][T13644]                           xpad360_process_packet+0x1fe/0xdd0
[  501.352895][T13644]                           xpad_irq_in+0x1583/0x25e0
[  501.359641][T13644]                           __usb_hcd_giveback_urb+0x376/0x540
[  501.367168][T13644]                           dummy_timer+0xbbd/0x45d0
[  501.373830][T13644]                           __hrtimer_run_queues+0x53a/0xcc0
[  501.381183][T13644]                           hrtimer_run_softirq+0x182/0x5a0
[  501.388466][T13644]                           handle_softirqs+0x22a/0x870
[  501.395413][T13644]                           __irq_exit_rcu+0x5f/0x150
[  501.402172][T13644]                           irq_exit_rcu+0x9/0x30
[  501.408575][T13644]                           sysvec_apic_timer_interrupt+0xa6/0xc0
[  501.416373][T13644]                           asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  501.424505][T13644]                           rcu_preempt_deferred_qs_irqrestore+0x7c4/0xbc0
[  501.433072][T13644]                           __rcu_read_unlock+0x83/0xe0
[  501.439987][T13644]                           unwind_next_frame+0x1aaf/0x23c0
[  501.447258][T13644]                           __unwind_start+0x5b8/0x760
[  501.454101][T13644]                           arch_stack_walk+0xe3/0x150
[  501.460934][T13644]                           stack_trace_save+0xa9/0x100
[  501.467851][T13644]                           kasan_save_track+0x3e/0x80
[  501.474680][T13644]                           kasan_save_free_info+0x46/0x50
[  501.481863][T13644]                           __kasan_slab_free+0x5c/0x80
[  501.488780][T13644]                           kmem_cache_free+0x187/0x630
[  501.495698][T13644]                           jbd2_journal_stop+0x8dd/0xda0
[  501.502793][T13644]                           __ext4_journal_stop+0xf6/0x1a0
[  501.509974][T13644]                           __mark_inode_dirty+0x3a4/0x1470
[  501.517244][T13644]                           file_update_time_flags+0x3ee/0x4a0
[  501.524769][T13644]                           ext4_page_mkwrite+0x219/0x11a0
[  501.531948][T13644]                           do_page_mkwrite+0x14d/0x310
[  501.538863][T13644]                           do_pte_missing+0x69d/0x3490
[  501.545779][T13644]                           handle_mm_fault+0x1bec/0x3310
[  501.552878][T13644]                           do_user_addr_fault+0xa73/0x1340
[  501.560147][T13644]                           exc_page_fault+0x6a/0xc0
[  501.566805][T13644]                           asm_exc_page_fault+0x26/0x30
[  501.573809][T13644]       INITIAL USE at:
[  501.577947][T13644]                          lock_acquire+0xf0/0x2e0
[  501.584435][T13644]                          _raw_spin_lock_irqsave+0x40/0x60
[  501.591703][T13644]                          input_inject_event+0xa5/0x340
[  501.598714][T13644]                          kbd_led_trigger_activate+0xbc/0x100
[  501.606246][T13644]                          led_trigger_set+0x535/0x960
[  501.613078][T13644]                          led_trigger_set_default+0x260/0x2a0
[  501.620604][T13644]                          led_classdev_register_ext+0x787/0x9c0
[  501.628301][T13644]                          input_leds_connect+0x517/0x790
[  501.635396][T13644]                          input_register_device+0xd00/0x1160
[  501.642841][T13644]                          atkbd_connect+0x731/0xa50
[  501.649504][T13644]                          serio_driver_probe+0x82/0xd0
[  501.656428][T13644]                          really_probe+0x267/0xaf0
[  501.663008][T13644]                          __driver_probe_device+0x18c/0x320
[  501.670368][T13644]                          driver_probe_device+0x4f/0x240
[  501.677464][T13644]                          __driver_attach+0x34c/0x640
[  501.684298][T13644]                          bus_for_each_dev+0x23b/0x2c0
[  501.691217][T13644]                          serio_handle_event+0x20a/0xdd0
[  501.698308][T13644]                          process_scheduled_works+0xb6e/0x18c0
[  501.705926][T13644]                          worker_thread+0xa53/0xfc0
[  501.712588][T13644]                          kthread+0x388/0x470
[  501.718721][T13644]                          ret_from_fork+0x51e/0xb90
[  501.725382][T13644]                          ret_from_fork_asm+0x1a/0x30
[  501.732219][T13644]     }
[  501.734957][T13644]     ... key      at: [<ffffffff9a612700>] input_allocate_device.__key.7+0x0/0x20
[  501.744221][T13644]   -> (&client->buffer_lock){....}-{3:3} {
[  501.750113][T13644]      INITIAL USE at:
[  501.754160][T13644]                        lock_acquire+0xf0/0x2e0
[  501.760474][T13644]                        _raw_spin_lock+0x2e/0x40
[  501.766873][T13644]                        evdev_pass_values+0xb9/0xbd0
[  501.773616][T13644]                        evdev_events+0x1e6/0x340
[  501.780012][T13644]                        input_pass_values+0x288/0x890
[  501.786849][T13644]                        input_event_dispose+0x330/0x6b0
[  501.793859][T13644]                        input_inject_event+0x1dd/0x340
[  501.800781][T13644]                        evdev_write+0x325/0x4c0
[  501.807088][T13644]                        vfs_write+0x29a/0xb90
[  501.813227][T13644]                        ksys_write+0x150/0x270
[  501.819449][T13644]                        do_syscall_64+0x14d/0xf80
[  501.825946][T13644]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.833748][T13644]    }
[  501.836422][T13644]    ... key      at: [<ffffffff9a6129a0>] evdev_open.__key.27+0x0/0x20
[  501.844788][T13644]    ... acquired at:
[  501.848767][T13644]    _raw_spin_lock+0x2e/0x40
[  501.853448][T13644]    evdev_pass_values+0xb9/0xbd0
[  501.858470][T13644]    evdev_events+0x1e6/0x340
[  501.863148][T13644]    input_pass_values+0x288/0x890
[  501.868262][T13644]    input_event_dispose+0x330/0x6b0
[  501.873547][T13644]    input_inject_event+0x1dd/0x340
[  501.878747][T13644]    evdev_write+0x325/0x4c0
[  501.883324][T13644]    vfs_write+0x29a/0xb90
[  501.887732][T13644]    ksys_write+0x150/0x270
[  501.892222][T13644]    do_syscall_64+0x14d/0xf80
[  501.896970][T13644]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.903017][T13644] 
[  501.905324][T13644]  -> (&new->fa_lock){....}-{3:3} {
[  501.910520][T13644]     INITIAL USE at:
[  501.914479][T13644]                      lock_acquire+0xf0/0x2e0
[  501.920617][T13644]                      _raw_write_lock_irq+0x3d/0x50
[  501.927280][T13644]                      fasync_remove_entry+0xf1/0x1c0
[  501.934023][T13644]                      tty_fasync+0x13c/0x350
[  501.940073][T13644]                      __fput+0x8a5/0xa70
[  501.945779][T13644]                      task_work_run+0x1d9/0x270
[  501.952089][T13644]                      exit_to_user_mode_loop+0xed/0x480
[  501.959093][T13644]                      do_syscall_64+0x32d/0xf80
[  501.965415][T13644]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  501.973024][T13644]     INITIAL READ USE at:
[  501.977420][T13644]                           lock_acquire+0xf0/0x2e0
[  501.984003][T13644]                           _raw_read_lock_irqsave+0x48/0x60
[  501.991357][T13644]                           kill_fasync+0x199/0x4d0
[  501.997926][T13644]                           evdev_pass_values+0x627/0xbd0
[  502.005013][T13644]                           evdev_events+0x1e6/0x340
[  502.011666][T13644]                           input_pass_values+0x288/0x890
[  502.018763][T13644]                           input_event_dispose+0x330/0x6b0
[  502.026031][T13644]                           input_inject_event+0x1dd/0x340
[  502.033209][T13644]                           evdev_write+0x325/0x4c0
[  502.039789][T13644]                           vfs_write+0x29a/0xb90
[  502.046206][T13644]                           ksys_write+0x150/0x270
[  502.052702][T13644]                           do_syscall_64+0x14d/0xf80
[  502.059457][T13644]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.067515][T13644]   }
[  502.070097][T13644]   ... key      at: [<ffffffff9a2f3200>] fasync_insert_entry.__key+0x0/0x20
[  502.078871][T13644]   ... acquired at:
[  502.082752][T13644]    _raw_read_lock_irqsave+0x48/0x60
[  502.088115][T13644]    kill_fasync+0x199/0x4d0
[  502.092688][T13644]    evdev_pass_values+0x627/0xbd0
[  502.097780][T13644]    evdev_events+0x1e6/0x340
[  502.102461][T13644]    input_pass_values+0x288/0x890
[  502.107561][T13644]    input_event_dispose+0x330/0x6b0
[  502.112833][T13644]    input_inject_event+0x1dd/0x340
[  502.118015][T13644]    evdev_write+0x325/0x4c0
[  502.122586][T13644]    vfs_write+0x29a/0xb90
[  502.126986][T13644]    ksys_write+0x150/0x270
[  502.131471][T13644]    do_syscall_64+0x14d/0xf80
[  502.136218][T13644]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.142264][T13644] 
[  502.144566][T13644] -> (&f_owner->lock){....}-{3:3} {
[  502.149764][T13644]    INITIAL USE at:
[  502.153638][T13644]                    lock_acquire+0xf0/0x2e0
[  502.159606][T13644]                    _raw_write_lock_irq+0x3d/0x50
[  502.166090][T13644]                    __f_setown+0x67/0x370
[  502.171876][T13644]                    tty_fasync+0x2db/0x350
[  502.177752][T13644]                    do_fcntl+0x1201/0x1a20
[  502.183628][T13644]                    __se_sys_fcntl+0xc8/0x150
[  502.189763][T13644]                    do_syscall_64+0x14d/0xf80
[  502.195904][T13644]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.203345][T13644]    INITIAL READ USE at:
[  502.207655][T13644]                         lock_acquire+0xf0/0x2e0
[  502.214053][T13644]                         _raw_read_lock_irqsave+0x48/0x60
[  502.221228][T13644]                         send_sigio+0x38/0x370
[  502.227451][T13644]                         dnotify_handle_event+0x169/0x440
[  502.234629][T13644]                         fsnotify+0x168e/0x1ae0
[  502.240936][T13644]                         __fsnotify_parent+0x50d/0x620
[  502.247848][T13644]                         notify_change+0xc55/0xf40
[  502.254421][T13644]                         do_truncate+0x1c2/0x250
[  502.260815][T13644]                         vfs_truncate+0x4b4/0x540
[  502.267299][T13644]                         do_sys_truncate+0xf3/0x1c0
[  502.273966][T13644]                         __x64_sys_truncate+0x5b/0x70
[  502.280797][T13644]                         do_syscall_64+0x14d/0xf80
[  502.287378][T13644]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.295277][T13644]  }
[  502.297773][T13644]  ... key      at: [<ffffffff9a2f31e0>] file_f_owner_allocate.__key+0x0/0x20
[  502.306617][T13644]  ... acquired at:
[  502.310411][T13644]    _raw_read_lock_irqsave+0x48/0x60
[  502.315769][T13644]    send_sigio+0x38/0x370
[  502.320170][T13644]    kill_fasync+0x24d/0x4d0
[  502.324741][T13644]    lease_break_callback+0x26/0x30
[  502.329922][T13644]    __break_lease+0x81c/0x1e80
[  502.334768][T13644]    path_openat+0x1eaa/0x3860
[  502.339532][T13644]    do_file_open+0x23e/0x4a0
[  502.344209][T13644]    do_sys_openat2+0x113/0x200
[  502.349062][T13644]    __x64_sys_openat+0x138/0x170
[  502.354083][T13644]    do_syscall_64+0x14d/0xf80
[  502.358836][T13644]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.364891][T13644] 
[  502.367196][T13644] 
[  502.367196][T13644] the dependencies between the lock to be acquired
[  502.367205][T13644]  and SOFTIRQ-irq-unsafe lock:
[  502.380680][T13644] -> (tasklist_lock){.+.+}-{3:3} {
[  502.385793][T13644]    HARDIRQ-ON-R at:
[  502.389753][T13644]                     lock_acquire+0xf0/0x2e0
[  502.395825][T13644]                     _raw_read_lock+0x36/0x50
[  502.401962][T13644]                     __do_wait+0xde/0x740
[  502.407758][T13644]                     do_wait+0x1e7/0x540
[  502.413476][T13644]                     kernel_wait+0xd6/0x1c0
[  502.419451][T13644]                     call_usermodehelper_exec_work+0xbe/0x230
[  502.426985][T13644]                     process_scheduled_works+0xb6e/0x18c0
[  502.434176][T13644]                     worker_thread+0xa53/0xfc0
[  502.440421][T13644]                     kthread+0x388/0x470
[  502.446130][T13644]                     ret_from_fork+0x51e/0xb90
[  502.452364][T13644]                     ret_from_fork_asm+0x1a/0x30
[  502.458771][T13644]    SOFTIRQ-ON-R at:
[  502.462737][T13644]                     lock_acquire+0xf0/0x2e0
[  502.468788][T13644]                     _raw_read_lock+0x36/0x50
[  502.474931][T13644]                     __do_wait+0xde/0x740
[  502.480740][T13644]                     do_wait+0x1e7/0x540
[  502.486449][T13644]                     kernel_wait+0xd6/0x1c0
[  502.492415][T13644]                     call_usermodehelper_exec_work+0xbe/0x230
[  502.499948][T13644]                     process_scheduled_works+0xb6e/0x18c0
[  502.507132][T13644]                     worker_thread+0xa53/0xfc0
[  502.513371][T13644]                     kthread+0x388/0x470
[  502.519095][T13644]                     ret_from_fork+0x51e/0xb90
[  502.525337][T13644]                     ret_from_fork_asm+0x1a/0x30
[  502.531745][T13644]    INITIAL USE at:
[  502.535622][T13644]                    lock_acquire+0xf0/0x2e0
[  502.541598][T13644]                    _raw_write_lock_irq+0x3d/0x50
[  502.548087][T13644]                    copy_process+0x247a/0x3cd0
[  502.554321][T13644]                    kernel_clone+0x248/0x8e0
[  502.560375][T13644]                    user_mode_thread+0x110/0x180
[  502.566774][T13644]                    rest_init+0x23/0x300
[  502.572489][T13644]                    start_kernel+0x385/0x3d0
[  502.578546][T13644]                    x86_64_start_reservations+0x24/0x30
[  502.585552][T13644]                    x86_64_start_kernel+0x143/0x1c0
[  502.592209][T13644]                    common_startup_64+0x13e/0x147
[  502.598691][T13644]    INITIAL READ USE at:
[  502.603001][T13644]                         lock_acquire+0xf0/0x2e0
[  502.609401][T13644]                         _raw_read_lock+0x36/0x50
[  502.615887][T13644]                         __do_wait+0xde/0x740
[  502.622025][T13644]                         do_wait+0x1e7/0x540
[  502.628072][T13644]                         kernel_wait+0xd6/0x1c0
[  502.634383][T13644]                         call_usermodehelper_exec_work+0xbe/0x230
[  502.642255][T13644]                         process_scheduled_works+0xb6e/0x18c0
[  502.649784][T13644]                         worker_thread+0xa53/0xfc0
[  502.656358][T13644]                         kthread+0x388/0x470
[  502.662405][T13644]                         ret_from_fork+0x51e/0xb90
[  502.668975][T13644]                         ret_from_fork_asm+0x1a/0x30
[  502.675726][T13644]  }
[  502.678203][T13644]  ... key      at: [<ffffffff8e40c058>] tasklist_lock+0x18/0x40
[  502.685909][T13644]  ... acquired at:
[  502.689689][T13644]    _raw_read_lock+0x36/0x50
[  502.694348][T13644]    send_sigurg+0x12b/0x420
[  502.698921][T13644]    sk_send_sigurg+0x6c/0x2e0
[  502.703672][T13644]    queue_oob+0x42c/0x4f0
[  502.708075][T13644]    unix_stream_sendmsg+0xcb1/0xe80
[  502.713354][T13644]    ____sys_sendmsg+0x972/0x9f0
[  502.718296][T13644]    ___sys_sendmsg+0x2a5/0x360
[  502.723151][T13644]    __sys_sendmmsg+0x27c/0x4e0
[  502.728002][T13644]    __x64_sys_sendmmsg+0xa0/0xc0
[  502.733016][T13644]    do_syscall_64+0x14d/0xf80
[  502.737771][T13644]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.743822][T13644] 
[  502.746131][T13644] 
[  502.746131][T13644] stack backtrace:
[  502.752002][T13644] CPU: 1 UID: 0 PID: 13644 Comm: syz.0.2036 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  502.752025][T13644] Tainted: [L]=SOFTLOCKUP
[  502.752031][T13644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  502.752041][T13644] Call Trace:
[  502.752050][T13644]  <TASK>
[  502.752058][T13644]  dump_stack_lvl+0xe8/0x150
[  502.752080][T13644]  __lock_acquire+0x2a94/0x2cf0
[  502.752106][T13644]  lock_acquire+0xf0/0x2e0
[  502.752123][T13644]  ? send_sigurg+0x12b/0x420
[  502.752141][T13644]  _raw_read_lock+0x36/0x50
[  502.752157][T13644]  ? send_sigurg+0x12b/0x420
[  502.752171][T13644]  send_sigurg+0x12b/0x420
[  502.752187][T13644]  sk_send_sigurg+0x6c/0x2e0
[  502.752208][T13644]  queue_oob+0x42c/0x4f0
[  502.752231][T13644]  ? __pfx_queue_oob+0x10/0x10
[  502.752253][T13644]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  502.752272][T13644]  unix_stream_sendmsg+0xcb1/0xe80
[  502.752293][T13644]  ? sched_clock+0x3f/0x60
[  502.752314][T13644]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  502.752336][T13644]  ? aa_sock_msg_perm+0xda/0x1b0
[  502.752358][T13644]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  502.752375][T13644]  ____sys_sendmsg+0x972/0x9f0
[  502.752395][T13644]  ? __pfx_____sys_sendmsg+0x10/0x10
[  502.752414][T13644]  ? import_iovec+0x73/0xa0
[  502.752431][T13644]  ___sys_sendmsg+0x2a5/0x360
[  502.752450][T13644]  ? __pfx____sys_sendmsg+0x10/0x10
[  502.752468][T13644]  ? preempt_schedule_common+0x82/0xd0
[  502.752485][T13644]  ? preempt_schedule_thunk+0x16/0x30
[  502.752508][T13644]  ? __fget_files+0x2a/0x420
[  502.752536][T13644]  ? __fget_files+0x3a0/0x420
[  502.752560][T13644]  __sys_sendmmsg+0x27c/0x4e0
[  502.752578][T13644]  ? __pfx___sys_sendmmsg+0x10/0x10
[  502.752595][T13644]  ? do_futex+0x395/0x420
[  502.752615][T13644]  ? __pfx_do_fcntl+0x10/0x10
[  502.752634][T13644]  ? rcu_is_watching+0x15/0xb0
[  502.752656][T13644]  __x64_sys_sendmmsg+0xa0/0xc0
[  502.752674][T13644]  do_syscall_64+0x14d/0xf80
[  502.752691][T13644]  ? trace_irq_disable+0x3b/0x150
[  502.752704][T13644]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.752719][T13644]  ? clear_bhb_loop+0x40/0x90
[  502.752735][T13644]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.752750][T13644] RIP: 0033:0x7ff03dd9c799
[  502.752765][T13644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  502.752779][T13644] RSP: 002b:00007ff03ecb5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  502.752796][T13644] RAX: ffffffffffffffda RBX: 00007ff03e015fa0 RCX: 00007ff03dd9c799
[  502.752808][T13644] RDX: 0000000000000001 RSI: 0000200000006c40 RDI: 0000000000000008
[  502.752819][T13644] RBP: 00007ff03de32c99 R08: 0000000000000000 R09: 0000000000000000
[  502.752828][T13644] R10: 0000000000040015 R11: 0000000000000246 R12: 0000000000000000
[  502.752838][T13644] R13: 00007ff03e016038 R14: 00007ff03e015fa0 R15: 00007ff03e13fa48
[  502.752854][T13644]  </TASK>
[  503.043946][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  503.050229][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  503.060741][T10995] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  503.060827][T13649] loop2: detected capacity change from 0 to 7
[  503.131832][T10995] usb 4-1: device descriptor read/8, error -71
[  503.152279][T10993] usb 6-1: USB disconnect, device number 43
[  503.215723][T13649] Dev loop2: unable to read RDB block 7
[  503.221321][T13649]  loop2: unable to read partition table
[  503.230750][T13649] loop2: partition table beyond EOD, truncated
[  503.237389][T13649] loop_reread_partitions: partition scan of loop2 (�被x����� ) failed (rc=-5)