last executing test programs:

34m41.493805942s ago: executing program 4 (id=3110):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f0ffffff080012400000000011000300686173683a69702c6d61726b000000000500050002000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000440)={'sit0\x00', <r6=>r2, 0x1, 0x700, 0x3, 0x9, {{0xd, 0x4, 0x3, 0x7, 0x34, 0x65, 0x0, 0xa8, 0x3c, 0x0, @empty, @private=0xa010100, {[@rr={0x7, 0x1f, 0xbd, [@multicast1, @empty, @local, @remote, @multicast1, @broadcast, @rand_addr=0x64010102]}, @noop]}}}}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r4, &(0x7f0000000a00)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1d4, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4000000}, 0x805)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
read$FUSE(r7, &(0x7f0000002880)={0x2020}, 0x2020)
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6}, 0x10)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r8=>r1, {r3}}, './file0\x00'})
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x244, r9, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "d8957bb1765fe5caa138b6709e797ef14772ace203"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "25e0b0792792b4a5a7d6bd6be2cf9c3fd1c874fe18194d3a93"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x51, 0x3, "56b4f694ba44d37d42d22607074698d7a871c9a991ac0fb1aa2806527ed9ec4da1e4d40a55c4865990c1cd1c169691618481561e3cff98c692ea1aa7267bb93f93469ab2fe7a48b38dd5641873"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0x144, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00', 0x6}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x84, @private2, 0xfffffe00}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @local, 0x8}}}}]}]}, 0x244}}, 0x20000820)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', r2, 0x700, 0x20, 0xfffff0a1, 0x9e93, {{0x2d, 0x4, 0x3, 0x1, 0xb4, 0x68, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast1, {[@ssrr={0x89, 0x1b, 0x27, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010101, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xd8, 0x3, 0x7, [{@empty, 0x8001}]}, @timestamp={0x44, 0xc, 0x7c, 0x0, 0x2, [0x4, 0x66]}, @cipso={0x86, 0x36, 0x0, [{0x2, 0x6, "c5523d2d"}, {0x1, 0xd, "90ab6563d25d30a4bdd0de"}, {0x5, 0x3, "f2"}, {0x6, 0xb, "0ccc2ae3b48965cc57"}, {0x0, 0x2}, {0x1, 0xd, "3f58e7c27a984ce1962a6d"}]}, @generic={0x94, 0x7, "40b67c5a35"}, @rr={0x7, 0xf, 0x9e, [@broadcast, @dev={0xac, 0x14, 0x14, 0xa}, @private=0xa010101]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x5, [{@remote, 0x8000}]}, @noop, @rr={0x7, 0x13, 0x8c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@newtclass={0x34, 0x28, 0x300, 0x70bd26, 0x25dfdbf3, {0x0, 0x0, 0x0, r2, {0x10, 0x4}, {0x3}, {0x2, 0xa}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x2c048804)

34m41.283776101s ago: executing program 4 (id=3111):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000000000)={0xc, {"a2e3ad2109c752f91b5a470987f70e06d038e7ff7fc6e5539b3245078b089b3208336d060890e0878f0e1ac6e70a9b3368959b6c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b38070d095d0936cd3b78130daa61f8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6cb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r2=>0x0, 0x1})
r3 = syz_open_dev$dri(0x0, 0x3, 0x101000)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f0000000180)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(0xffffffffffffffff, 0xc02064cc, &(0x7f00000001c0)={0x0, r4, 0x1, 0x55})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02864c3, &(0x7f00000025c0)={&(0x7f0000002580)=[0x0, r4, 0x0, 0x0], 0xffffffffffffffff, 0x4})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r4, 0x0, r5, 0x0], 0x5})
keyctl$get_keyring_id(0x0, 0x0, 0x200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={<r7=>0xffffffffffffffff})
r8 = getpid()
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x0, 0xe3, 0x0, 0xe, 0x80, 0x7, 0x46, 0x8, 0x7, 0x6, 0xfb, 0x7, 0x5, 0xd}, 0xe)
sendmmsg$unix(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002801}}, {{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x8d, 0x0, 0x0, &(0x7f0000000680)=[@cred={{0x1c, 0x1, 0x2, {r8}}}, @rights={{0x14}}], 0x38, 0x200400c1}}], 0x2, 0x4000000)

34m41.251302s ago: executing program 4 (id=3113):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fgetxattr(r2, &(0x7f00000002c0)=@known='security.apparmor\x00', 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x1f, 0x1, 0x0, "6906001022366ccee4ba5686b4f801fef4372f2c74f6024305f11fd3454ad23d", 0x32314d48})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0xa, 0x4, "118816fc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000000301010200000000000000000000000a080003400000200008001a40ffffffff080008400000010021cd8b2d5f922e4938200109f33b4f81f90c4b260a5a214f3889e7e79c6a1968183c25ea"], 0x2c}}, 0x40000)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f})
r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)

34m37.474635157s ago: executing program 4 (id=3127):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f00000000c0)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x5c000003, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x4a, 0x0, &(0x7f0000000000))
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0x1)
r4 = socket$inet_sctp(0x2, 0xe61fd74e4f4480eb, 0x84)
sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4ce01ce2d633feb94e8f633dfcfbfcd3692a38962bfea69f73920f305713b4b2e729329d23b7883d5a48fa34382af2d866d926aac5a8ba85111a18e02d20204661b1d12e94940d4ebf8f6869d49a9abb4604419be3ae9df828d8ea041a82327b4b6a34bb4f5bd47ec434a89a22ab654267bc8a6c0bf0df041b314a115fb6b8707caaaeb2696bf5640ad30591bd7ebc9aebbd38784ced3a", 0x97}, {&(0x7f0000000340)="901be31f73aaab6151df81033818e360d21557c4d1603cd0ce957600000000e478c133012b08d4a8c88e92ad357e3f146edbcbe1c08d0000", 0x38}, {&(0x7f0000000440)="37345ef96234d9f6908eb6b95a401d32102167566dc907cf2ad76c9a2c3ec5f3381c64c7778b763ea988ee4c38196b80abcfbea5825d35cba1765651f580cb9525b3232601fa2597861841e2d3b02f99d42bf20d908b8999a890aebd55bbb8992adbd2e1bed8359910a46303ffe3d6f5e7584b10b87f0c5f104e5d30881e53f6363c27e437825c1e785fa138c7f411b9e58c9c07b4b9e3e34ebc04a2d037af906c49dbfbbd54d407fd9f8e077ec166f2162198a10934eef56631e7bd184b7eaa867267ad547c35670ab050f5bf2b43ac0b317c20528daa", 0xd7}, {&(0x7f0000000540)="0859e80fae209b676d9fe83d902fa94c0f368ab7fc21a7c93c7208ea8df369f3eadefa95606b8e4dd026cfd0f248ca9d98fa552b82c4bb059f117a49237b3656cf56ffcfab9c729101f253657004ce25c1970e12ec70493181ae5c964cabb83a8888e376461745be96a94c5ebe5f65c1fb614e30167e17a2821f9f7bb7298c60bf307e21a5ef96d98da45cfb7f45c95f6bbe99cb54750d1319caafde60f90862a940ab397a23d5033b2143b7385bef738c592c84f2bc216fd353e2dd22d0b18890f94b7ba7f8e3182abfbe3df63d2c48f03dccc30f166a93f3a0a477dae622167fab289e07c8a3e74f2d351783ad85ce9abc58b206c4afc8", 0xf8}], 0x4, &(0x7f00000006c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}], 0x18}, 0x40000a4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x8010, r1, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x5, 0x4})
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

34m36.383672034s ago: executing program 4 (id=3129):
socket$kcm(0x21, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r2, 0x8b1d, &(0x7f0000000040))
munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f)
getdents64(r5, &(0x7f0000000380)=""/4091, 0xff3a)
socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000002000010000000000fbdbdf2502000000000000000000409650872652000100"/45], 0x28}}, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

34m35.71433981s ago: executing program 4 (id=3132):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'team0\x00', {0x2}, 0x401})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r0, @ANYBLOB="010000000000000000010100000024000180060005004e230800070001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

34m34.964290508s ago: executing program 32 (id=3132):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0)
getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x0, 'team0\x00', {0x2}, 0x401})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r0, @ANYBLOB="010000000000000000010100000024000180060005004e230800070001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

8.447447677s ago: executing program 0 (id=11202):
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000001d80)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f910, 0x7fff, '\x00', @string=&(0x7f0000000080)=0x81}})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket(0x2, 0x80805, 0x0)
r5 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
r6 = socket$inet6(0xa, 0x3, 0x3c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00040708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x64000801}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0xfffffffffffffe90, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r6, &(0x7f00000000c0)=[{&(0x7f00000002c0)="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", 0x112}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet6(r8, &(0x7f0000002080)=[{{0x0, 0x35, &(0x7f0000001980)=[{&(0x7f0000000040)="233896", 0x3}, {&(0x7f0000000880)="f9b927b54fc855b654083672b78760f54c026857d3ef96da44092de9a3ea540e5c865ffa649c1ff1c83dedf345cf465749392bdb46ac12b645281ff5f3f315edc50c9c2055506381327cdeaaeef4a93cc175d66dc2886bdc0707635f631371caa39e210c8cc13f634ce91ca83a58d46ce0d990146b4e44b8ed86c729e8a7aa610b65c2a9f2fefa4059bbca05abdc94666cce0dbc1220decd150da075ea4502973361e6652524d7eff640d19965b2e02af8ce810ef142c1e65452fe82666e922f0f11362a76c752e45d6425947d656ab3cb56e381054d4856bdcfe37e", 0xdc}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000140)}, {&(0x7f00000001c0)="8945084d3b6c688dc24aa539aa5d", 0xe}], 0x5}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x5f, @local, 0x2}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="deb81e1814e6377b701aa6e3fa8a751e46d221db308ba0b44de519dcf783aefb072785ad0da33922451a1af9b5df6a2096875fe58d2af8f45294c1764be4112fd1d6cbe4c13a079d5142ac99106724dfbd85849a627ba26ed120b2430cfef3def8872e82b9ca563dadfc2182a782bf7c54be6553e7ab7e5e94cd308f8fdf2705702bdfb9050222aa70c4d108fc3c115594", 0x91}, {&(0x7f0000001ac0)="b5503b218304e53651c447abcae73e0a49f27e675b5d52e1f038958ada8f294e8a66f441bfeb4317ef8f0c6fd2506e724de592d2972c442fed198a9dc94e3f46bd3a761bac6d033821c826f8df780f013475fe198c62aa951e8b4ca49c151c36a858a23417a76562713e07e2f5d1f8210669fb2bcb77e577b6ea36a2e98e9641b9140ff83d025eda4606", 0x8a}, {&(0x7f0000000200)="97718ac1219f3240bfc198a30b775caa7fde41", 0x13}, {&(0x7f0000001b80)="c9377018922b13acf8838469fae251d9cb4f44068cd7f1e75d4a00a983d01dd2013e4879df41fc5a523f11b9a8bf61f200d5773bd6557e4baa5deffa49c031bcea0560b47f65d5f92c9da7c2213616e7feb374b4ca7370e9b7045d51ade441f952e6e168a2ac68f7e84e8a744c3c9ce99c406b2c55652d9929e33787e4379979", 0x80}, {&(0x7f0000001c00)="86dc9c6dad3cd33d63205f9b74dc56b73cad6af9d4d3233c113291031dab634d6ab905af6de45ebe90ba0d7d43cad729d42b637a369e6f1462f99698a17f051cf1fddc615dad05f97bd214add191a83d563f15e8e2efb216bdb9de7d043afe4e9b84dfb3644da72416576a2de2cdf798dca92482c2b07a9cdc7ad8fc8e07c0030a66d14e68b1cc37711de64295069c24a6faf00fdc2245c7262cfc2f5bff0713", 0xa0}, {&(0x7f0000001cc0)="5982c5166918bd6a0799431be42b746ab71ba02461ede9335f163fe6ef54325a047a52d1e39c07ecf953020520596a5fd0f68fb3fd8d504b2f0b399374ea00ae84a0bb8ecf4112e7ecde4b95927b7909d147b56ed225d7c8df0bbbbcf3ae3853590b91b112b941af8dd626c109232e5f5ce902fb38914bcbdef908a98646cb8d91fe44ff03f51635b4ad8e6f355567f5160401c9", 0x94}, {&(0x7f0000002180)="0a489ec7cfbd5f26f0ab250185ae1eaceb1500fddd57fde23671eb383c2f47063909ee917dec5546cf2257b54021880b9e70509b67437d899d6a512e9ce66bd492e0488e3a83dd73920448e8b411ae4350f9c6d1862a240932f1d54c1db34772c66e7cfde0c9e859fae83c83370da6f76dec7021685eff3ddc32d7d3e36297c6367a9b27eb51e0d417a36d25b2165964edb0a1d3e134661f5f1b861bf24f41e31c8c9bf2c29294f738e6a9f707eb1b869bb68ecb8e8627513ee8f57ee76889cebc4b8be93e39f3993d0c00f43572acc0f09d7bdd173517df9ea96f98d5366f4aa98f3373343d9ee67487072946", 0x45}, {&(0x7f0000001e00)="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", 0xfd}, {&(0x7f0000001f00)="380a4eafed2da17851d5ab20b70f263478a8eaeab78a8334a991561b365b6874894fcbf9ff42bc82c7471a20ea04429c001be7a5e7b1f8c7aa9a33597512716acc1e18a3906b0415feb447f76e2223e3f43d6e9dcb1411c4aa99da525a090e5946a7822e5d43cd0b9ee8735eae1917a3945a2d0e403b49f39ffd24026ee168951c745c", 0x83}], 0x9}}], 0x2, 0x4000000)

6.942183965s ago: executing program 0 (id=11206):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x3b, 0x0, 0x100000001}]})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x400, 0x3, 0x800}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345})
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r9=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000200)={0xc, r9}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000200)={0xc, r9})
syz_emit_ethernet(0xa6, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb000542e317bbfe697eb44cfdfb4a214a1d7f950cab84a84795988893e50a858dfd4554c023e6505f6ec40b52fb5b2dd86609f5edd85e6795f72df421620c9b2a92c17941fe7f55aa703523962b50afe9ea394dfd696ecf0593852b50ab8b1c58f72acbbea80524f9c1b99edf0ad6f47738ee3e1e76fbc66a3c4846d249cb78b2b9bb4c4bf69ed64002141299e3d5011f142ec23975d84cb68e11"], &(0x7f00000001c0)={0x0, 0x3, [0x997, 0xb9a, 0xf02, 0x4ac]})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r8, 0x3b70, &(0x7f00000000c0)={0x18})
openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
io_uring_enter(r5, 0x7277, 0x0, 0x0, 0x0, 0x0)

5.754316799s ago: executing program 1 (id=11210):
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xcc, 0x2c, 0xdf, 0x40, 0x763, 0x2030, 0x7979, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5f, 0x65, 0x60, 0x70, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0xa2, 0x7d, 0x9}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x3, 0x0, 0x0, 0xd4}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e21, 0x3, @empty, 0x2800}}, 0xf, 0x4, 0x20000, 0x2, 0xe, 0x0, 0x5}, 0x9c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xe4, @private0, 0x8}, 0x1c)

5.688108518s ago: executing program 0 (id=11211):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}}, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x18)

5.594816808s ago: executing program 0 (id=11212):
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x420080)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="c6", 0x1, 0x480c4, &(0x7f0000000000)={0xa, 0x4e23, 0x100, @loopback, 0xffffffff}, 0x1c)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200000010f3044d074000"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}})
r4 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000180), 0xfffffffffffffffe, 0x100)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000400007012bbd700000000000049800000400c2801c00018006000600843b00000800028004000680e0f749db65278c95357600f080a9eaa4953af83547df411c3f06e32e3b279581d89ebb6542197c9e4fd90aaeb9a11aeaadd894d0f17e922fa491990ef8df814b3d49e698684fe39574ff405cd1e518b46534d2e1749956db88444bccbb1391b9ed196a7fca8b6f2e21104bcd2c8c"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
listen(r0, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
accept4(r0, &(0x7f0000000280)=@xdp, &(0x7f00000001c0)=0x80, 0x80800)

5.539968074s ago: executing program 2 (id=11213):
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
close(0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff5, 0x6, 0x100, 0x2}}}}]}, 0x48}}, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x20000, {0x0, 0x0, 0x0, r7, {0x1, 0xfff2}, {}, {0x8, 0xf}}}, 0x24}}, 0x40004)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r9 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
close(r0)

5.374537904s ago: executing program 5 (id=11215):
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x2190008, 0x0, 0x7, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180))
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r2, @ANYBLOB=',group_id=', @ANYRESOCT=r2])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xe0000000, 0x564f143a, 0x85, 0x6, 0xf, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0xffffffffffffffff, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
ftruncate(r5, 0x6)
dup3(r3, r5, 0x6700000000000000)
close_range(r2, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, 0x0)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
r9 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r9}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xffffffff}}, 0xe8)

4.488876996s ago: executing program 3 (id=11216):
r0 = socket(0x1e, 0x1, 0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x400802, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x100, 0x600}, 0x90)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x1, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000002000000000000a0000000000000000000000080010000200"], 0x24}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r6 = eventfd(0x80000001)
readv(r6, 0x0, 0x0)
r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000)
r8 = socket$rds(0x15, 0x5, 0x0)
sendmsg$rds(r8, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4, 0x6071, 0x0, 0xe7}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2071, 0x0, 0xe7}}}}}}, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a)

3.915968785s ago: executing program 1 (id=11217):
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058", 0x1f}], 0x1)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4c21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x40000000, 0x0})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r1, 0x0}])

3.805902628s ago: executing program 2 (id=11218):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x10, 0x1, 0x401, 0x3, 0xb4, 0x7f, 0x9}, 0x9c)
pipe2$9p(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r5, 0x8)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
setsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x9, 0x8000}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xca, 0x2, 0x0, 0x0, 0x9}, {0x12, 0x2, 0x1, 0x401, 0x8001, 0x7f}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0)
splice(r2, 0x0, r0, 0x0, 0x20000000000002, 0x2)

3.508953122s ago: executing program 3 (id=11219):
io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe6c, 0x2, 0x1, 0x8000001})
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000000)={0x7fff, 0x40, 0x5, 0x4, 0x6, 0x5})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
r1 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'gre0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
socket(0x10, 0x3, 0x0)
close(r6)
r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r8 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2})
io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r8, 0x12, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r8, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0x7, &(0x7f0000000180)={0x1, 0x1, 0x8001, 0x1}, 0x10)
read$FUSE(r7, &(0x7f0000000880)={0x2020}, 0x2020)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x8, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0x5, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x7, 0x1, 0x407, 0x5, 0xfffffff7, 0x8, 0x4006, 0x6, 0x7, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x9, 0x4, 0xfffffffe, 0x5], [0x10000007, 0xf0000000, 0x8000012b, 0x8004, 0x5, 0x6, 0x129432e2, 0x1, 0xf9, 0xe, 0x10, 0x6c7, 0x9, 0xfffffffc, 0x80000003, 0x203, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xa1, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ff, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x401, 0x101, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfdffffff, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x250, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x404, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x5, 0x5, 0x8, 0x401, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xdfe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x6, 0x3f, 0x0, 0x7ff, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x7fffffff, 0x7, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x80007fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0xfffffff9, 0xc8, 0x9, 0xfffff000, 0x100007, 0x3, 0x7e, 0x100, 0x9602, 0x1ff, 0xaf, 0xfffffff9, 0x6, 0x226, 0x5, 0x7, 0x8, 0x30b1d693, 0xa21, 0x1000f40, 0x5, 0x1, 0x6c1b, 0xfffffffc, 0x4, 0xffef, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x40fff]}, 0x45c)
request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@\x01\x00\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)

2.855822685s ago: executing program 2 (id=11220):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0xb, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f00000000c0)={0x3, 'pim6reg0\x00', {0x6}, 0xb7})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r5 = socket(0x10, 0x80003, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x10001}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000000}, 0x4)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0)
r8 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r8, &(0x7f0000000000)={0x18, 0x0, {0x807, @empty, 'vlan1\x00'}}, 0x1e)
socket$kcm(0x2d, 0x2, 0x0)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x0)
sendmmsg(r8, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)}}], 0x1, 0x24048084)

2.818382224s ago: executing program 1 (id=11221):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000005640)=0x5, 0x4)

2.742654019s ago: executing program 2 (id=11222):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000040000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000004400050000000000"], 0xfc}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680))
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)

2.660082361s ago: executing program 1 (id=11223):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0xfffffff8}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x9, 0x3, 0xffffff2e}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r2, 0x1, 0xd8, 0x6, @multicast}, 0x14)

2.656760225s ago: executing program 5 (id=11224):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000002280)='./file0\x00', 0x21, &(0x7f00000022c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}, 0x1, 0x0, &(0x7f00000023c0)="e95b2b7687cbca157cf6e40808d6e55dca5afee046ae1d82a0b1cf06ee4a9d880f43cc4e886757218380af2a3addc13306b73838488ae90d2d5b8c6a5b7efea729760ade2e12ed821747c12374acebe3e7f5ca1dc3c9a6d53ae8c1a325059264e4922d12b38242cb7b28e4b571a0ca70538b712fbf4c7e7b6c2459de1381482f3801d8634ef226453a03612b8a6ecd0e2043a7a23fd57fa63a20bf09939386e6577eadc28d9bb5363257617bdfef1bfe0fb837772e7ca6071fc2b1beb6ab29bf261c1c1bde1850375511b5dda5679229574fa3a78bef34397789c5bf24e6b0cb48")
r3 = fspick(0xffffffffffffffff, &(0x7f00000085c0)='./file0\x00', 0x1)
r4 = syz_clone(0x11000, &(0x7f0000008600)="a341e6579c0e", 0x6, &(0x7f0000008640), 0x0, &(0x7f00000086c0)="c0100482ddf2fcadb6ba354d4ab55e14a9a5565cc9b33a85b7b06d025791a61a659d3531e35fa0b5b39c7e642974883c7860bf4a86b399ab5904001133b5f08a416567fee361defb87507c8b21a8e5e94829d11fb8e33e6f34f73585ebb8cfc278e95d80ec9944135351d223d06e2a74261f96f7414f3ae9207ef96eec23058316")
read$FUSE(0xffffffffffffffff, &(0x7f0000008780)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
lstat(&(0x7f000000a7c0)='./file0\x00', &(0x7f000000a800)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = accept4$packet(0xffffffffffffffff, &(0x7f000000a880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f000000a8c0)=0x14, 0x80800)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000011401"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80)
r9 = getpid()
newfstatat(0xffffffffffffff9c, &(0x7f000000a900)='./file0\x00', &(0x7f000000a940)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f000000a9c0)={0x9, 0x9, {<r11=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x8, 0x2})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f000000aa00)={{0x1, 0x1, 0x18, r1, {<r12=>0xffffffffffffffff, 0xee00}}, './file0\x00'})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000000aa40)={0x0, 0x0, <r13=>0x0}, &(0x7f000000aa80)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ac00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040080}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00), 0x0, 0x24000021}}, {{0x0, 0x0, &(0x7f0000005a00), 0x0, 0x0, 0x0, 0x20008011}}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007cc0)="fca1545736b27ec49c16cde0b79863df7658b77fe42e7575cc770efe97d6f70816dfdd536072e4ac18a316627d3bffcf87516c0b625797471bc53bed470d75c98b7074b5241db5ab", 0x48}, {&(0x7f0000007d40)="4b56ba9f2a6259561bffae1bcd4cb19a9a42efdf6911f239a6abbaca195dd5580d6b5f001ed73e2761f6c327c1d11610b32faf3537351867c152dd1905104eebfae44fee80ccb808675a646af47aaa3d54b1687435fbe63e14ed7e736c631de983751db2e457f1d5c0179bfb04d3fad31787fa83d1396496ec0c38affbeb55312aab173dc5b14e3c406a5d78042276b840a39d46b4c04c4e676c8a47ca73873937d217d9126151c5039ec973df86610db61096fd645a", 0xb6}, {&(0x7f0000007e40)="43588dce11ca3c8af78cf03bc9401ba2486b8a82c6bc3100ec133409708fdbe22966f0a9994eedf9eccb2b7a61fd3d5a24095f3cee9330c181c1d8938d7878e0c63ae24dd60c810a8262a0f0ca95ac1b511bb91f42dca8d3d2b4943a3b21b51ff009212098ec9f38dd", 0x69}], 0x3, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000007f00)="f2fad1b72525d8c01bb0c5d84d79aab32b2dfac4e843bbb074902f69de6c50c3ed5e5816a87dc05845cb671c279ef7044d3e2e1bc8af9f5a199c384c9bb9ccf14db54b3f5d680820d7485a1f47027fde64427f0651972e21099c23b1c7b6538f35de157c448b3e4b08eeb84820a576baa20eebfe4f", 0x75}, {&(0x7f0000007f80)="2b989f36b6041fa4ae68899e97969a42b449681d1bfd78997751e82491425e0d40ef732a6104f8e49cfa66ed8941", 0x2e}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000008000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008400)=[{&(0x7f0000008080)="8341b0d2bd92bbbe32f86539d67d4667cd3624b93c7b577e9dfbd7c075811b91180054d01e20504357892d742274099b9d4db852744be1b22c113329ccfece5c81937c98b7dcf3a95cace7800c6763808a3963bc0ebf0da56c334e8aa620398e71965f5ea1cdbd0f3ffe5bdad7ea8585dd1a6b913910f3b0eb6da0c157bda1c3d359c11daa148628330f9f79f1db60ae917cf4b21fcc5cf28c183e58", 0x9c}, {&(0x7f0000008140)="e61ca2d5552c19211bbd84af8953d0f5f3b28103d4f75c0e23e927052cd481c461e814828a74f7cd9f1aa882625cb61e911d14edaefe", 0x36}, {&(0x7f0000008180)="279462a71a4f3c599bd3f23eaf6acb6270e9be701e2d2dde70d1b70abd361457e22b8e8d4be7fd5f411c834337ab454db490591fa071", 0x36}, {&(0x7f00000081c0)="ca9423f732709eeb20481b3c5d97f46a4003cd0fe9a3e33cdfc8aa118c0d98a4d0bc8efe8c625a7fb83e877fea23bbec155332ee78f6cf81768483076e0b5ae941a516c79f6e1e69253dcf97a032e4ab2e50e00386657d186ae1036daed9d4ab762cf2a3a4c8b9c23f63eda52eec0c23bfb260dfc25bbff9fafaf1f4f810e494b56f6603417a066fee83d7f181ca4d33ee1de5ae3b8b4d0bc6df3879aebce65badd13f339869e5081cdcc532d0914e397de81ffb96541270285521f484201f7b854ccf252dc3beedcff4c1c0c5bf3f68666f0df50188079a691468f9b17d5e6338f6a40566be5b974fff3bb5a96b79e65f8aff2a62ad", 0xf6}, {&(0x7f00000082c0)="178cdc8f1d2d8adabcbafa3bcbeafc1c19f7b6360b117d3f32b13ff4aa09153d096dac7fbba53459b32e2f13e287803745b53452b6298e623f8b37cc27c27484c9eeb3c8522ddede86fbd972b9a6a23f083f413a677094c0bfeb7e94d693d7a5a1954e359c0aa521af6c721c87b94e368b3147c5370748ceea368e41f2800c368a45a0d13f1f36efbe81bd6055d857b1d7ee9a50a4f865a11cd3e68e7bdec27eae917c5db519d7d90f577320d1ebacac939c48b8ad17c0329756c411b2d477422cd0761d3e3110903b89e3ceef16301b3ddc4a2794c0986c61ac7db6aab8710c9c50b44cddfd9875c831ee8fe122eb0ffa", 0xf1}, {&(0x7f00000083c0)="989a00388e22bd27817bdf46d8520baa9d1efae933815c398697f5001deb0ea1f106410d6431b1c8dbe5927e7f76ae", 0x2f}], 0x6, &(0x7f000000aac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r7, r8, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x108, 0x8094}}], 0x7, 0x800)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'lo\x00', <r17=>0x0})
sendmsg$nl_route(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r18=>r0, {0x0, 0xffffffffffffffff}}, '\x00'})
r19 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TEAM_CMD_PORT_LIST_GET(r18, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2e8, r19, 0xa09, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r17}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x80, 0x2, 0xa}, {0x7, 0x6, 0x2, 0x2}, {0x0, 0x0, 0x20, 0x86}, {0x9, 0x4, 0x0, 0x6}, {0x40, 0x7, 0x4, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x68000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r17}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x20004010}, 0x20008050)
ioctl$sock_inet_SIOCSIFADDR(r14, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
r20 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="10010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r20, 0x0, 0x0)
syz_usb_control_io$hid(r20, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "050d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0)

2.39987636s ago: executing program 1 (id=11225):
r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$unlink(0x9, r0, 0xfffffffffffffffd)
prctl$PR_SCHED_CORE(0x41555856, 0xfffffffffffffffe, 0x0, 0x0, 0x0)
unshare(0x22020c80)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x17)
openat$dsp(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_SET_IRQCHIP(r3, 0xc208ae62, 0x0)
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
r4 = inotify_init()
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28811, r6, 0xf991d000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r7, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)
inotify_add_watch(r4, &(0x7f00000000c0)='.\x00', 0x5000009)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x1}], 0x1, 0x40800)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

1.901215265s ago: executing program 5 (id=11226):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0000000000000000ff0000000000000000d17d000000000000000000000000000000000000000000ffffffff0000000000000000000000000000001200000000000000000000000000080000000000000800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006e72300000000000000000000000000079616d3000000001000000000000b40079616d30000000000000000000000000766574b7708ad56f5f7465616d0000000180c2000000000000000000aaaaaaaaaa000000000000000000b0000000b0000000e0"]}, 0x174)
write$binfmt_script(r0, &(0x7f0000000000), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0xfffff9, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8)

1.839275028s ago: executing program 5 (id=11227):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x5000, 0x1000, &(0x7f0000feb000/0x1000)=nil})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000080)="260f1c710a9afdffb000666466f20f2ace3e6d3ef30f1b6c98263ef4b84f000f00d8360f356766c74424004fc200006766c74424020e0000006766c74424060000000066b8010000000f01d966b8001800000f23d80f01ca663500000050", 0x5e}], 0x1, 0x5e, 0x0, 0x0)

1.67582653s ago: executing program 2 (id=11228):
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
close(0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000027c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xfffffff5, 0x6, 0x100, 0x2}}}}]}, 0x48}}, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x28}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x20000, {0x0, 0x0, 0x0, r7, {0x1, 0xfff2}, {}, {0x8, 0xf}}}, 0x24}}, 0x40004)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r9 = accept4(r3, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0)
close(r0)

1.61318995s ago: executing program 3 (id=11229):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000640)=[{0x0, 0xff8d, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)

1.583255911s ago: executing program 0 (id=11230):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r1 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000140)={'full'}, 0xfffffdef)
setsockopt$sock_attach_bpf(r1, 0x1, 0x44, &(0x7f0000000340), 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x10)
sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_stall_count', 0x40000, 0x0)
pselect6(0x40, &(0x7f0000000a80)={0x5, 0x5, 0x0, 0x96, 0x6, 0xffffffff, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)={0xa, 0xa, 0x100000002dd6, 0x800, 0x1000000000f, 0x7fff, 0xfffffffffffff2e0, 0x5}, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004)

1.395976579s ago: executing program 3 (id=11231):
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f020004000000000000000058", 0x1f}], 0x1)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
io_setup(0x202, &(0x7f0000000200)=<r2=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4c21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x40000000, 0x0})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x8, 0x1, 0x0, r1, 0x0}])

1.323863081s ago: executing program 5 (id=11232):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x480d1}, 0x40800)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
socket(0x3, 0xf, 0x4)
socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={<r10=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'team0\x00', <r13=>0x0})
sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r13], 0x3c}}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x8, @rand_addr=0x64010100}}, 0xff, 0x3}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000840)={r10, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x96}, 0x9c)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x8000)

642.946235ms ago: executing program 0 (id=11233):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1f0)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000000)={0xd, 0x9}, 0x1)
r4 = socket$isdn(0x22, 0x2, 0x22)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001080)=""/216, 0xd8}], 0x1})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000500)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50)
syz_fuse_handle_req(r6, &(0x7f00000021c0)="388219d25a8985d3a909841c8e956469a15e906a4fad26298b696426a81fcf0d6134c5dfa3dac33b6ea4c5d859c2e1333584935ed9d80c184939089e0cb436417aef5dcfb0c878732c6827d278c2910d390115e202c3162f4711bda810555b179a84d7df9f870f6c7510312f0255ce1bef6e875780543aaaebfbdf8208ee5dfd0de60437108b819a35569013870ba0bd0700000000000000c69ac3d0f174042b37d31f7821f65636376ab7bac88a99fc39c60286cac8d3edb5ac4c768a68a43fc77a52adea3b7397aaa2433cad989958c9a6118c72006208f95199efe7d08508913b00711053120551466066aebc0f3f5c6fdb9693ae6c2dc5fa839b808b8789cb1f88514918a6aa1d1a76eb131ebf84a0edaa97fbbcff14101f79a159222f4b4f31942f18bd6f1d393d3e298803a8435d214fe2f7bb31e02e2a75370bffa78d6752c8a6221b50162f7ec7174c258e4b65bf2797b4f7b7fec7488a0675990a075f7ec74b93fd845a6a9e12b0baeda5c81ce23be3b4cc15b493d4b9ae40736c55fcb8266f33760fd09c80bee60e1d5269770dd67c34d6c7ee57d67558f6421b3002c66df981a3114be6e62d4ff999c7985aa767f0a073eb499257c7b1b977f18dfae99f3be0664bb0c0d96fe4f3b1df5d904744570d01b517cccdbf17dada77ad37099ff69c040c0826cb23a80391f341749f2c21c32b5977b796b6af2d7194f1af44f2e0a84bf102b28dff97fa723c6792e16807939429c921dcd26d375fe58c59bb76e3d5227a5c4e2331337c3592a7d84ac45b1bd268a9d66fc2fd03aa23a7bcd7ab711c4fca2958883260b5d5741b145717012d4aa15f2d49b54660a46ec7cd7f9181213acb61074c65189bda02ac65f0e916f9b9260fc4cfc4bad08afb07fde1c2dfbe7807835958ac127021a7a2da901700483f8e5809a51fcb9a455fcc58d4dd8745ad4af3567fa9ee1b8750543117a970bd98d2595da38f3ea455b1611d32870677b0e0605ac387ca068892e1fb81411f901a1137ab9f5b78d350aeec44957e54e28f9ceb6d5ce046237b979ce4f7e7211167a6d3a3e99b151c08bc2a1593174e18196290e16e517e3ac66dceb7b1cabca97c38a6aefe048aff9fb203e1e58e5343062cd36b65198005d0b8ae336a47e8e4372a73aee7131804013d24e3d9bcd5ae2dd7baf036d571ba12ea7f17976e3e20887d8f24db24b2eb3c5e3f3b9ca8611ad4f4be7aa435c9641f290fb478168d3e204edb8181eebe3acb2552ddfa1f01d368d6604c03f84cbe78ce58284dc3b99aef5936adce8fb81118af0ef5a236391b9856bed6d1bc6cf02990c48b7f6c917efdab113ce0851f87258fb0d3f8633c6d41f33cf76f54492c4a1dcd4459153cd28c6473351371c73d73dd8f9a22f175959febadb76a866a9625b926fa1a12b32ba97df3c2e3b5d6893fab9a6352f168c423b38db9d13895afe3a017d27c84b7c20363f4e8a81f0af52c5368b856ecab23f52cf87f1ee3f73bdefc424b253c9c55f91df8a02b7df35a7c7defb7d260e4edf040503ed18f16aaf742b2c30ffb7f0108a48f50a7e603e24e0399c309781689118b2f1c23721e2528a3f020a4a43cf5439d169b4c116c284aac82ca2a5cecafb97d9dffb2b56af3cd73fe9ca2553ad33c12add00f01fbf7e11f8b30d3bee0096418b1bfdf2f458d8534c3660da46483bcf884088c171d105ff05e441d018dcc495eb35ea1f921f98ad1f5a0bc0f5cf69450b70bbb2a24d427511baf0638d3b4da0fbdcbe126e2e9e415b81fb12239b424f8f553d73520aff5f212fad8a15760759dd4726bd2d05eda93ddb10cc2ae01977d1030480fddea6045be4a5983fb67a263bdb86f722592880e4feaf9767dc5352cd898da96b647eacb41d7c97a1e2bf1e48b548172a06ff21962e79ff3724b94c3e339dae7ac1e67225846da5e1399639885fea22620c9501dbb4b8ec62292c1b8392e20ad72bdd72c85d5aff8e7432117097bb4cc173de0f8dfed12134024d92c2c8512cbb96b31f156d759770467abf602e3a580bb0ee26137229e11df6986f33c8de3921b81ecc56f600f6fbe39787b72293d567c3d396ea4d65baa3fae1a25df344c5f33ec1fdcafefc0bee2c5cdf59dbb0408e99ca27f7a6872bfd2c20e11bd8c5b9a38fa98f30b5a56eb3dd10be3cfc60f43264a40ba7e91676920540b87d9b4f88b59f6ed8b66d5144930f0f4d3748084923b27082d8a175f955687cc1598d02937af997018a871db6e0c1db1e2e4431e452cdb0110c65bea7da6c8a9e4a66f0957fcdf1b8c7cb4d808b896ff217db472709690bf7ff4d4ca912017fd57812e1dac1c4d1db8d5113739e917bfba37581118e950ba1a77aa124b4de0611ab834f8a82794bbd0b0b14ef60031642a6bfe152975b1aee3b466d3d9780c0c3b47aacaa8630a117b25409bb49af1f4b6105f0002b84325dce613054b6402d68e16bf3baa7ec6e9bc39cf324759f92cb82492e9b653015f1d795145fa911ed77ac5acbcff00cbbc2db04d2753c937dac0d09dbba128dc2f5c5918febb6ffaca8feb5bdd2c54853b9efe9b93f5356ab3bfe67bad1985e4c7e32c23e47140c540acdf30aaa966627923dc904f334a309789e17af70c2094ae28375a9414233115a635bb783ff422cd130b9efd41dd1c667d571241dab5d773f83e897787094f130f51c6c34f5af6d67ec94e57c5f9c37aba10f0a0433fa55b6ca2ce88b5ff1f44985312efc85fd31cfbf2412431763ec5ed6f39a799171aad1db74fa5c04295f5476446e5c148ddd3062a8ec4e773dba59139e9d0eb72b327cdc6b306bd475ca92ee5310d72c0906faab2950cec8f8619e009cb8c52e75fbec8aa4ce2736b3326583d365da32284f2b5f5d3c849623d15da5e6b2d780de22cf3504e5f06bc502a174db330d72214849ebd6887bdf4e7763db928b159698ef4e0755946d3a3508f92f332dae105a4c177d3ece1c7360dbade67e339934509e2f38b4f5022f5584255163d152f07b987ba838e45d1e62f14e46c45fe9e8a34dc4ba572081e96e9a33f31509d9bd0a362dace52d3a877fd238890d658ff776224609529e4ad4dc5d9138b3a2750dcafbd04de7d3d94d2b00128db71571ca361e4e257dcbecafa1f236c5c7990a37933a62ad28f575d5641b672fbd6b67b52075cc8daf420e4fe703326c05795ec388f6bfcdefeedf0d50617e086f749f7c37aaae655c5e059cdf0a1d2140273b3e6a22f6f79f843e3a4d05e92565260d354d068a71cc9ac41556e795c84291490821f5e5134ec03faf8b1073b774eb6e81a48f16ab2c2b4ecc0ca758cfcf4d2301f524a2dafa7a1a0cccf08b325dde92ee365c23ac818e673e60d887f8a24e3395e02379341b2a21959d01812f2d2de3eed3616e1d38249b4ccb0bfff4049725324c5d3dae738673e8849a889badf69237f98878efdb3c3136db8a902b83a7fbf62f08501f1e55c2fdee54fbb8e824648e58bd8f45e729261c6e75637e454b14b3e7175ef81551e9ce6609d7b7e9e53467aec2ce5b34a1761ad6a510838bf2611722885251732ba1aa8782a4316619bd49194fc0ecb67b3ec0f199e6af276bfa9cae0769d2779f6579792dd100bbc9b8bcd94bfe7bf1fb985789917c2d83b14a8b028d79236e0b01f1cfa00b34554148643a9ec25053baa4b56a1dfec6c84c1767989f2a400beaf4373daaa7f578846ba90de1bf47a921a0dd4f22746ea82800bb2d51bb80d916148b1fbe8e7ebb69cf11c8bf588e2a0b95f6984e866c623a9015371d5d3495a3f3d9b42ee7828f1a3dce118a648342d0b0b8e17dc9cbc95c16fc7410f5a7ade7bf921279611e6f2cec5c945e4115142075287203b65f8a3b14d026c465b83a4447891dacbc37de3f23b801abd1a628973b5858a9fcfcb1c3923eaddc6fa3787f28f5ed0f2e1df91bf9d7396891b4efbe008e0818cb57d3eb178844e98db8b09fc859c11427adb4a92630aafc2ce7ae644f077bbfe3a899b6014be74be9277177d10c72f0b13998fb666af0cf0b28757c5ae8f5021c00adb414d16aea5cb23f22c7f526d8266e4b67b85f124704769e1187c3415acbf81cb3c2d5cc04d95edbd75bfdd32847e984a55d4dc1a7d3781bad2b6b62a576c10ff471e107add2a74e59ab11071bf5fb57c0cc34a45dc8796fe47000811cfea6cfb22c22e2b4656efd5ced8da97ca0179a6c3a4d58a7bd77260516107a9a72036c92c2dc800d825c3f45c6123a0332d37d7e29f84184e19decc59102950da0b0cef36160153f5a453c9c7fcfe2e145aae343fb9bb726bc3aefb9a604708d3ab1c5f51228ef8987a00ab2abfee2f3c1a38c48797035d43f74d1d6ac26df34926ce8d95d1d57f9e442398822b5014367dd8dde2db00ea5972dc8e782a7a193744d3bfa0298f353207e442716d26ba943821a6b0d2e112bd7033d7df3c99f0d875dca45f466567c198c16039b00f1125b77c1c560ac21ca70db4a642ed58f5f55db9acf206fcb3adb31731d9efb1b7dd9cc124858bc8fd9fe2651e31f152f05d2be376f3854d3de9dc464541bbdab3902773b3b5b2a14a20c0e80ae3a2ca02ddb584fab1767af0428969d4a9035cef9092d8d3bb48b8be88bac57d53c6e50b07fa51e0d9351159eb97741e09f55317c802fdb0cb172fa79b2ad25fd55613dbcad1f070a407facbcce6a229f4bc88de1ab99dea251a677209e9bc08fdb2e0299535beea1189044ab8c69c9196fb9d39b6c609c0c815ec929a01cd974d08b6f0e301991101ccb8c7e591f9cf1dd6fb6cfa17d6925d13bf18508103c44a52efb3701176d31e34207aed48792f5d7c4ddb6bb3bf6f0869f528363b7e0650b06b0e4caf53dc30157e80ae1e2432b60a1c64088eec7013a213ed65340adddf6940d277e87802729c3a6dc9c3d5919d835fd55642e15ffce4a9bd8553be5ec276d0867311f2b0e11173eedf0d7d5dcac0d44f8076ffd9ce8e90f828c4443c8b602db35ca19220f2cbc295e8fda0602e6437a46abc775da4237bede18196bb1e1106220235fd2072fa4375fd8bffa037afeddedc4477b315799176a23f47f48afc652fff5083c917ed1b4097cddd186921531357cd0da18996a152639692f5a2bf4c7745c3b640d7ca69e236edca95934c36ca4b9236d9cbbd3f248b948c942f65dfce17167628b4eb0c5893512c2d8439812bcea8d5fe6a229264723b66e4f2cb6f970139415440dde9946c5ad40032a1c5a18c248d35b73100d8f38aac9c5c302354a9db4e8d99a2d845f54a767c4a0623d40b998e28d454aff7defc9bb4cd3673374a33e641a6614c6b5546b3f70ed288f53def2e49baa32d1afb93b4c04a22b5c9ac3a23f1e0cb423eab40f51e2b3c170b501dc517abbac962784e1bd151815494d04e336ae2f16064ca27c7d776f8c5974a76e9b3d313446336e696e24202b2cb94603e2929906ad4000b13f0f7e7ecf6c2d7243e12d0aba4fb5d4a30de4e2c5a0ea8ade6d79bef8dead7b49ceaf6d7157a427382570771040c084c9feba727019c3b03dae0c5880b0a2dbd8150b743f987b5019b421c5d164150592ae0646217618c92e7876e6c4a2b0ecdfde08f04265e0bfa096a2d6f83953af12209e892a9a326368e0270f8e669ed5aca72579d1d6b806eaba059bb28c7f80fc1ce39b994e6816cac5df5cf9d40582bf9301b12deeb09a2eeab9c8a83a7d44d04a87ae0d4a590cb5f5e3824dc381fc56aca6787be5899aa3694f3b9a872b61dd5876c0f8ff3c81f38b4e52792254edfb954b157abd7b2ae2f4f8caee5b78886894e467e38a93c26cbc546022371b44360a317513341933a0db7ba88929844489e51259a489854f8160ad46594a19cbe799515f396168505520a5288d00f8093d3aef119d94a7863e67c9a7d6f900ba9834fd886044513ee1853713c2a4b5121487db6e7424a0b7f19895e5cf5e41e69c34b3378bae46e2e1c7d29c1cfe1bd0370bc2c0649ea144cd1d4d40fa57160cf856f3fb3dd3cd9ff014b4194837af58189305226b534e1a82297adb14e7af42693fa5065873cbb7fd7ceef5a41d8a63c1ec4a0b214182c5ee3cb9430f6dd7cd57fa56e1b6df932c683905f111867e5bc229bedbb3099a72644d96c38aef3e93268dcab401a2882f1f48c63dc068fc102adf0c8e8a1debdf454919cf7042c6b80955bd63cbc27d785e06ef360feb725748e8359e1fe6d64851ad9faf834d28e6273db6830eb655e6ca3d0d437dee2bd6d0ffbe9aac4e54af0e8436ab653f8d6580acb7388634f342b36fac1feb35526eeeb8602a31a65843c18a9bd463c365e42192f6aadaa1a6e4991e9340258532f4f4811788d8662925405b76db6aba7965aee669441818c5e96a3d945d81baebd00ba2d97414f1840b3dfc7d34d9fb13877d241744cad6a367dea3ff5c4f29fd41e06f85c67c614cfa307463b3a8550a5a31cadc8c7111f1236c9113b18c631cf9ede683818be932fc0c8f389457a05c1b02e7a380b27b10853c79d9495ffa702aa01a1953f269c952e4ee95b001c5ebbba33c902a7d3aa81ac9ff01b1f9ed97a6f280f3caae24cf236e41993cf991e7d8f3ff50a173997179a190d92a26beaef64eae0ebf824b485962089f8675c2cc176c2c052948176937a4074f2506edb7e60a65149ab319f76fff07cfde46f6799869202d735e5ae9f91f4d23150de807efd933ecab245fe128554664fc8a3f411a9e45e050ea40c68e45f57403dc62b3a6908df7f6d8cf9ef45133e56b5682757415093b49b86630758075103fe98f1d380f58829b796b9ea4f06499beaa81108976a3a70174c3542eb2130070b1c4354166049b412b2256be40a9d20e18a2600540e1e1c15549892310c09870dbf70874be181a0ed4009592bea754fe30ff3cd96a551071d7ce21c6cfd3e449dd8c39bd97ed47b16bf00096578342112fd1aaef915962aa9a3141276c7442aab367fdaa02b2db13bb1e1be5c7486464196541d584096200520a6a57a228466fef61e2f6f678ba9f3733f6ae80bdd6bf67dda5b13bb7c8d05d20825566ee3ddfb9c94dc270aebe3d5a24933ba6befcb65226de3f2d8fc6fb518a36bb655289d2daa616121a4ce08c9f4effc5127c90d93369d8345357c67e3bdc024263fd43d090b8f1643c75236ce000ba02001c5974035f733ecb05f35d3d205027b393b4bf33dd86050a9e2c8f779de8947a38ee7b2b2b39d427cf48a359f10bc0fbd50763c8f4727ba82a55f6c2e944b71f8e05626bef8e7598c55cd4e587686446adf394282e312d48e02b9ce324b8523b33978c9ed7e67b886479c8c36d136d276b34de843ccb98d624daee93cd3d5db695189a5b1f730091b6339d8ecb93485f9091b46e998ff1efad6d647a2b6d5f4647e84835cb1d863386a337c9ef4ec0ad827fd0acff7498422f8277052c53f0a7001b3771a19241b1d14021d6dbae44dc7fd92365012d1ced3c4f494699e398c404d8ffa5a6cd824e2f7638a4087693dc5191a7c6fb4fd29967e27988234c015a33db9ac71a416a8469f871b7da09c95f3331576c1b4f4c72b7b127ad2e48a57e28804efe74f8145aeaef16c03e2c3e99fe3ccaddded1da622fc62172e8f55d04e1305df63e789774d3640e6cf36ed53c2fcdeef189178dde1b60c640742c68d8d06cae2538b7b7d0ffe1905037537a754ba44950c4194c8013b5a4eb2a2b6406f9795d70e4321c7ab7e630381ce04e2e4f15e49153842118abb5179e246e41ffa49ed2b39b62ea47001f35229be23d332a81b5d47f88a5737b480f27ca75a653efa3afa257ef05e1b4da1cb84653b074e9aace9f6f4b94f48cf50b3fe2b1658d30e3f288b6d6a1164f3c9153b0f185c10a64c861889dc3faf8bebd6caab6f751a31109756cbc8b9a62384faa1a88b2ef8803855414dcc209329752a65b05a0784be9837e3a4a7cdc49b302a1e3e9be08080b6af5049702613b777e55b0033eab3ad76024a6132522289df20d753b595a48b1d116e792b51c9840541f16f56ef185a3c14e64b7e293c178ade690abeffc9d8f908bab3db2460d7f692e48dbdda353b6df648a98411bd8c70f95f6fb27390e6d3241f36fea36c0aea9198cd40fcc23b181d41fd91cf66570aaaf0688a4eff348b6f0e4c8bbda629cf269eafe2d60cab7108dbaeb0119ed441b7c4b379d0198be27dc6de0b53acca37dd9e5a40a558d8405de127fdd4b381a83d6d33b11061ef5428c08a8c64e73a3a6ccb11037cda942aa937f1ec14a9e2088acbb7b5489d173ce08ea04febb1cd93d7c0e1b3fb2facf8536e6568ea349647e2e449fe220516f5e94ab5727a91b92f9ac957cadb2e107b101c286e521d7742b86dc53df904cd29e6b7488ac8d149226254976858d25d388eb6842271f051a082e18d0549232dd0fdc8da13aaa44f925dc3f462a188cdc8e1573bf989d25243f975a7765cbe01e84ae4654fa60e20a39f89b53f008796c5360ca8ad4cd9adf0bac7862002f9a02a30aebadb738673bb12edb7f61755ca16defb8aca9bbcbf2fd39cd556369050407d4a7077b14cf922f3597af3e967ae63f1c1e8a6b6d10fcdb8aca23c2596b72155962438889005fb8a835153ac594f1a8edfef2ffc66db8d642beee43524f6f271a1c24824c92ad58531251df443d712615f7fff6a385298183cfce80296dc95ef4728b5b1b98549460efaa2d230453f8156b4c6d76e5bce6aa9e1b4da827a96949af8681edd094d0d63dc3b582a156480b1800130ec5543c40be0c561d90bb379db82a4b59b657b05333c958908bc65b3a26fa8d745d579b09b5fd5e2223e7c182bc7610d414a379ff9a8922909340433ac17b77130ed417bf23e4ae48ca4a834b038f977d0deefe1291e76395c35b4107b2de4178b1051251cacb6bff04fd2d092d6ae2a72b25213605ab08b71fe478927cf82353ebcf382630cee84d03bd38227bf8b12c1bca16686ec9ffe61aed4635328f39ee09aafebf30da052e0e4bf28da6badd62636022b130dc4f1e196ffce2051d3e7f80ae29a38abf6367f2555d93f6ad2ab346f3037737ca141dad639771645fd683361c2b67abf0b04c1846dff0ce319ae12a9c79a7bad5e8e6fac23ce85860d1201e69319c41924d87066f6f320006bb3fe802d04a5bedbf50dd15e22df446cd94be3486047315f9ba0fea5af6915ea399075704308653b03f29d4e99419a1a7f848302a46537a297f6331abc7c36df88bb535096135b971d41c4335eb8d2a9eac87061d16f2e6899662d327deb8fd788661d6d151a7e4d3f8cb8312a0b8b60807cb6abc7bad6b66e8d5a492cef77759055e15c7c37a20c751b9571e02ad40b65c0b17668eda7ef989f8bde821d2e9c7a119cac9ca3e925f51cf6c2bab2a406699555099e016944554222144a3e970220e01bfe3b152c955ee4e21716c1e521a4bb0228dcd9b0a237f8fc2ccf9b4ecd8d6e2eec4508cd6c6453db134def3be0808a9f0df28960e28385611ec490cdabd63cd76bc53fe10d67af82c755721f6ba406969969008dc072d1a3c0a64a95f5265e9529575bf1038fe0df1925bc40bd7d8831e891aab8f888d1906681a08fccac5bb4cb3c7e67ccdeff175b76d9bd7029f53e0ee15d8845504476940d05b87156cce1d5ed93671d5ee0ce0874f0606f7d09d15cf16d98a1cbb456a5704cffc0a3918ef543a6e9a67e965c4fbb8186991ac3ca2218244cdc44af93a08763e04cce549c5ab00146278a63c2c94859a91544efc6559061cf781ce86969f8b1f5b65389ab3b19c0cc41ddd39e614803b06599b8653ed64cf8e3605c69afc879ae03e6cc5f80f88fedae281d1adf53a9204c491204edb99d1106b68ccb21004d51c419842f3e1564b5a4e01e71a47135178d8d045b07c045cba01436cd0ce6a1ce9a480b1bd6eb48fe2888214ca31766f5c5144edf8bdf7edefe015cf95bc6834bb06aa157b76f9fbcbade1ceb547fa678ff33a24ed4cca831654c0b03bd1a52ceca4287171d524e37d42899a4c5c66da0586ffb7b4aead7cdf892ce24d66eaff3530dcca213f70cec1d24cd59bbdc12e3f6f4bd4d0a2b232fa5f9ce2c70aa529fc85d4d2183f4c20f154da58103cfeffd477901d188ea888aad45f778dc48969936ce7519d2e1f0e14b2fc8b02340af1f83119cb69ab38e5122223950d5045479cbfb0b989013e2b1b995d6c45656b8124e8fc54f7daf9409ff4ad5babdc9789e3d420cccb792bf06a75cbf2bcc8b45a394e62dce6ed5188495c0de5a86d00694fc70a41b1cede2e986a33c13a7bc88d9c79775dbb624b9d66c577466547183ca48a0279ccfc7bffe699d0f4f82bca906d0118865e8851b75f9914ae12a368c0e2881fbf8c1f4374c37fce575034bdac4a06e022e62b34874966952f0ffb6c9fc8138eff8e07ad630635772e84993af6d71dc3eb534bdb00475eeb433da5b6cdf9051a8898a8893ef0ea4102aa24968c2c8be9b5b02e07c075f59c3398e08876054135ad6be1c51a5e98e1400edcca8061640a0d20b3f7a92acff856d20703f70c2159f91f9419d34cfb87f890b578bed938ec52eb1b45fbef56828774cba3704e0a22b1fff7ff6bb94620c9f0317728ee32d09615d186138238fc529247e80fcf71e9269e72fa25962695e40a38a816c2eb5d5e3f169e5c54ae20cecdc206b8cc093f6f5d3461268ff8a7154bafe92cf145aa415556cd9c6b4f5693050d00d6e1f5441c67b4c3abf561803ef525f4e199b2cdd03b806c0d8606ecaf25ca51a750dab89d91aaab170fcb7b6f50766ab8f11cf177bd75e58d432c051cdafccde5fd81233f524d37a6ae391da09b381d46b1333a07d5632b9f83c1aa8cd44f417320550d5b9ae5118502ff8fe89fffba8e0cf4f8fa4c096ea4937b7b3ea6f9dc0fc13e2e2b4ca172c97b67a58404a335436658063a9bd1c71422e9ee5ef345df6534be0b0482273c4750b9ae92c463bb87e7de173b40a8709a4018bdbe9e799b0a95c5946dc424efaac67eb3fe869d49e040d94d42c1c7680c47c9bba3344f7034d68394e65f6d31b9e5b21a763429432b91b85e274a5675011b2d5442f1d329ccf1220275ba714738022742135bb9674a2544d23b09c93d1d07f35738abf59f44b894048faf09bf0467b9d8171afe57ee10c828640fed3801dc8711e0b678b30f42f396be642975cc2724110d48a59d3ae7160781b7a3f4973fc2d720440408ffced0e2b62728e7ef1f5228fab181fb9b7a1077e376df6c5aeba81e9fe3fc9f82919bf476f1e97c64da1aaa0fc7d1e0b31d8519717717a1ca1856bae339cb612e4880d0aed31500c80e63fc888389c20be12e73cb3299f7a23cfcfd47834ce9b0d92d7b732d15b2df232158cc9b690a0c7e9fd2c511bbce0a6aced586059a9446019ac26ce6eb9ab507dfb24c58acfe596dc2d67ff19569211078498f31e7998135b47a5e2f39b23e474bf74484690c080fc1b818474094d960fe89d45b43c926cc0e6b60bdf3fed333ade75161441c622005e243964d6603a29888a5e921a713e7403785a86103c7fa700", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0xfffffffffffffffd, {0xfffffffffffffffd, 0x200, 0x0, {0x6, 0x0, 0x0, 0x5, 0x0, 0x2000000006, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r8, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lstat(&(0x7f0000002b40)='./file0\x00', 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x1000000, &(0x7f0000000340)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f00000034c0)={0x0, 0x0, &(0x7f0000003480)={&(0x7f0000003100)={0x14, 0x38, 0x26c9dcd61490ef67, 0x70bd26, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x20010080}, 0x20009800)

441.493494ms ago: executing program 1 (id=11234):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f0000000ec0)={0x800102, 0xfffffffd, 0x22, 0x100, 0xa7, 0x5})
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x7)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0x10)
write(r0, &(0x7f00000000c0)="832a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x93a, 0x8003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x90, 0x1, [{{0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x2, 0x5, {0x9, 0x21, 0x3600, 0x3, 0x1, {0x22, 0x1a0}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x7, 0x40}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0xe, 0x81, 0x3, 0x40, 0x3}, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="73b36f63c91e8a3cd5391195e4f2d1289710cb73e165455fb7a36bcb2eb5cfb6e811f2f05d5c773194a245747fe6d588d5bf51a5a93ff79cb110ad6f9559f45edf6d43e29d48d407600d0ecefd4eb4615665cde3bb4ee503817fb244154f9c18143d2c1822e17d9df0b66f4b9a93f960e01aacf93ea3166fd9498eaceb7117e147fd8c"], 0x8, [{0xd, &(0x7f0000000100)=@string={0xd, 0x3, "fff84d89bdddd329667b4b"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc1a}}, {0xc, &(0x7f0000000180)=@string={0xc, 0x3, "a3519f73743c0e242639"}}, {0x5b, &(0x7f00000001c0)=@string={0x5b, 0x3, "4208d470e2b150774bbd95cbaacc645964f8fedf3ccb8a6125acc2f4ab8edda6d616a174bd607216353a13fca8c2a7af1cf76cb329c8dc48ea867ee67ecd7e30a423ffbe6750b834cec2df38fef25833c316268d5cd6e34cf6"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2801}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x101e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44d}}, {0x65, &(0x7f0000000340)=@string={0x65, 0x3, "bbf895c4be79f880cf4f312ae15cbbfdd941041facf62c6029d005e48f702cdadbdfc55d3bf7ff19b1cbd69c7e46fa2cda7254838c6de534e2d28f0bef7450e6c97f75cdcf58ce96c9ef9673ec786ce1f07355816c1de1f3e8134051931170c8f3fde1"}}]})

396.551502ms ago: executing program 3 (id=11235):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0xc881)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0x200000000c], 0x80a0000, 0x2010d3})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

223.125996ms ago: executing program 2 (id=11236):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', <r2=>0x0})
syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000002280)='./file0\x00', 0x21, &(0x7f00000022c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}}, 0x1, 0x0, &(0x7f00000023c0)="e95b2b7687cbca157cf6e40808d6e55dca5afee046ae1d82a0b1cf06ee4a9d880f43cc4e886757218380af2a3addc13306b73838488ae90d2d5b8c6a5b7efea729760ade2e12ed821747c12374acebe3e7f5ca1dc3c9a6d53ae8c1a325059264e4922d12b38242cb7b28e4b571a0ca70538b712fbf4c7e7b6c2459de1381482f3801d8634ef226453a03612b8a6ecd0e2043a7a23fd57fa63a20bf09939386e6577eadc28d9bb5363257617bdfef1bfe0fb837772e7ca6071fc2b1beb6ab29bf261c1c1bde1850375511b5dda5679229574fa3a78bef34397789c5bf24e6b0cb48")
r3 = fspick(0xffffffffffffffff, &(0x7f00000085c0)='./file0\x00', 0x1)
r4 = syz_clone(0x11000, &(0x7f0000008600)="a341e6579c0e", 0x6, &(0x7f0000008640), 0x0, &(0x7f00000086c0)="c0100482ddf2fcadb6ba354d4ab55e14a9a5565cc9b33a85b7b06d025791a61a659d3531e35fa0b5b39c7e642974883c7860bf4a86b399ab5904001133b5f08a416567fee361defb87507c8b21a8e5e94829d11fb8e33e6f34f73585ebb8cfc278e95d80ec9944135351d223d06e2a74261f96f7414f3ae9207ef96eec23058316")
read$FUSE(0xffffffffffffffff, &(0x7f0000008780)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
lstat(&(0x7f000000a7c0)='./file0\x00', &(0x7f000000a800)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
r7 = accept4$packet(0xffffffffffffffff, &(0x7f000000a880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f000000a8c0)=0x14, 0x80800)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r8, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000011401"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80)
r9 = getpid()
newfstatat(0xffffffffffffff9c, &(0x7f000000a900)='./file0\x00', &(0x7f000000a940)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f000000a9c0)={0x9, 0x9, {<r11=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x8, 0x2})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f000000aa00)={{0x1, 0x1, 0x18, r1, {<r12=>0xffffffffffffffff, 0xee00}}, './file0\x00'})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000000aa40)={0x0, 0x0, <r13=>0x0}, &(0x7f000000aa80)=0xc)
sendmmsg$unix(0xffffffffffffffff, &(0x7f000000ac00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040080}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003d00), 0x0, 0x24000021}}, {{0x0, 0x0, &(0x7f0000005a00), 0x0, 0x0, 0x0, 0x20008011}}, {{0x0, 0x0, &(0x7f0000007ec0)=[{&(0x7f0000007cc0)="fca1545736b27ec49c16cde0b79863df7658b77fe42e7575cc770efe97d6f70816dfdd536072e4ac18a316627d3bffcf87516c0b625797471bc53bed470d75c98b7074b5241db5ab", 0x48}, {&(0x7f0000007d40)="4b56ba9f2a6259561bffae1bcd4cb19a9a42efdf6911f239a6abbaca195dd5580d6b5f001ed73e2761f6c327c1d11610b32faf3537351867c152dd1905104eebfae44fee80ccb808675a646af47aaa3d54b1687435fbe63e14ed7e736c631de983751db2e457f1d5c0179bfb04d3fad31787fa83d1396496ec0c38affbeb55312aab173dc5b14e3c406a5d78042276b840a39d46b4c04c4e676c8a47ca73873937d217d9126151c5039ec973df86610db61096fd645a", 0xb6}, {&(0x7f0000007e40)="43588dce11ca3c8af78cf03bc9401ba2486b8a82c6bc3100ec133409708fdbe22966f0a9994eedf9eccb2b7a61fd3d5a24095f3cee9330c181c1d8938d7878e0c63ae24dd60c810a8262a0f0ca95ac1b511bb91f42dca8d3d2b4943a3b21b51ff009212098ec9f38dd", 0x69}], 0x3, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000007f00)="f2fad1b72525d8c01bb0c5d84d79aab32b2dfac4e843bbb074902f69de6c50c3ed5e5816a87dc05845cb671c279ef7044d3e2e1bc8af9f5a199c384c9bb9ccf14db54b3f5d680820d7485a1f47027fde64427f0651972e21099c23b1c7b6538f35de157c448b3e4b08eeb84820a576baa20eebfe4f", 0x75}, {&(0x7f0000007f80)="2b989f36b6041fa4ae68899e97969a42b449681d1bfd78997751e82491425e0d40ef732a6104f8e49cfa66ed8941", 0x2e}], 0x2, 0x0, 0x0, 0x80}}, {{&(0x7f0000008000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008400)=[{&(0x7f0000008080)="8341b0d2bd92bbbe32f86539d67d4667cd3624b93c7b577e9dfbd7c075811b91180054d01e20504357892d742274099b9d4db852744be1b22c113329ccfece5c81937c98b7dcf3a95cace7800c6763808a3963bc0ebf0da56c334e8aa620398e71965f5ea1cdbd0f3ffe5bdad7ea8585dd1a6b913910f3b0eb6da0c157bda1c3d359c11daa148628330f9f79f1db60ae917cf4b21fcc5cf28c183e58", 0x9c}, {&(0x7f0000008140)="e61ca2d5552c19211bbd84af8953d0f5f3b28103d4f75c0e23e927052cd481c461e814828a74f7cd9f1aa882625cb61e911d14edaefe", 0x36}, {&(0x7f0000008180)="279462a71a4f3c599bd3f23eaf6acb6270e9be701e2d2dde70d1b70abd361457e22b8e8d4be7fd5f411c834337ab454db490591fa071", 0x36}, {&(0x7f00000081c0)="ca9423f732709eeb20481b3c5d97f46a4003cd0fe9a3e33cdfc8aa118c0d98a4d0bc8efe8c625a7fb83e877fea23bbec155332ee78f6cf81768483076e0b5ae941a516c79f6e1e69253dcf97a032e4ab2e50e00386657d186ae1036daed9d4ab762cf2a3a4c8b9c23f63eda52eec0c23bfb260dfc25bbff9fafaf1f4f810e494b56f6603417a066fee83d7f181ca4d33ee1de5ae3b8b4d0bc6df3879aebce65badd13f339869e5081cdcc532d0914e397de81ffb96541270285521f484201f7b854ccf252dc3beedcff4c1c0c5bf3f68666f0df50188079a691468f9b17d5e6338f6a40566be5b974fff3bb5a96b79e65f8aff2a62ad", 0xf6}, {&(0x7f00000082c0)="178cdc8f1d2d8adabcbafa3bcbeafc1c19f7b6360b117d3f32b13ff4aa09153d096dac7fbba53459b32e2f13e287803745b53452b6298e623f8b37cc27c27484c9eeb3c8522ddede86fbd972b9a6a23f083f413a677094c0bfeb7e94d693d7a5a1954e359c0aa521af6c721c87b94e368b3147c5370748ceea368e41f2800c368a45a0d13f1f36efbe81bd6055d857b1d7ee9a50a4f865a11cd3e68e7bdec27eae917c5db519d7d90f577320d1ebacac939c48b8ad17c0329756c411b2d477422cd0761d3e3110903b89e3ceef16301b3ddc4a2794c0986c61ac7db6aab8710c9c50b44cddfd9875c831ee8fe122eb0ffa", 0xf1}, {&(0x7f00000083c0)="989a00388e22bd27817bdf46d8520baa9d1efae933815c398697f5001deb0ea1f106410d6431b1c8dbe5927e7f76ae", 0x2f}], 0x6, &(0x7f000000aac0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r3, r0, r0, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r7, r8, r1]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x108, 0x8094}}], 0x7, 0x800)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r14 = socket$inet_tcp(0x2, 0x1, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
r16 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'lo\x00', <r17=>0x0})
sendmsg$nl_route(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x20, 0x0, r17}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r18=>r0, {0x0, 0xffffffffffffffff}}, '\x00'})
r19 = syz_genetlink_get_family_id$team(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TEAM_CMD_PORT_LIST_GET(r18, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x2e8, r19, 0xa09, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r17}, {0xd8, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x80, 0x2, 0xa}, {0x7, 0x6, 0x2, 0x2}, {0x0, 0x0, 0x20, 0x86}, {0x9, 0x4, 0x0, 0x6}, {0x40, 0x7, 0x4, 0x7}]}}}]}}, {{0x8, 0x1, r2}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x68000}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r17}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r17}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r17}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x2e8}, 0x1, 0x0, 0x0, 0x20004010}, 0x20008050)
ioctl$sock_inet_SIOCSIFADDR(r14, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}})
r20 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="10010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r20, 0x0, 0x0)
syz_usb_control_io$hid(r20, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "050d00"}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_012={0x0, 0x1, 0x1}]}}, 0x0}, 0x0)

81.768991ms ago: executing program 5 (id=11237):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x42001, 0x0)
r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read(r4, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = dup(r5)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x4044814)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x2d4}}, 0x4048010)
r8 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
r9 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1358, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80}, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000200)=ANY=[], 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast1, 0x2}}}, 0x30)

0s ago: executing program 3 (id=11238):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x800)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8)
r1 = gettid()
r2 = getpid()
rt_tgsigqueueinfo(r2, r1, 0xd, &(0x7f0000000000)={0x26, 0x0, 0x4})
read$FUSE(r0, &(0x7f0000000700)={0x2020}, 0x2020)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
setresgid(0xffffffffffffffff, 0x0, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r5, 0x1, 0x20, 0x0, 0x0)
syz_clone3(&(0x7f0000000340)={0xc0301180, 0x0, 0x0, 0x0, {0x800049}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58)

kernel console output (not intermixed with test programs):

D 045e:07da] on usb-dummy_hcd.0-1/input0
[ 2997.047131][T30894] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 2997.057255][T30894] Bluetooth: hci0: Injecting HCI hardware error event
[ 2997.067282][T30894] Bluetooth: hci0: hardware error 0x00
[ 2997.551620][T14027] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2997.761766][T14030] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[ 2997.768293][T14030] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 2997.794884][T14030] vhci_hcd vhci_hcd.0: Device attached
[ 2997.807343][T14031] vhci_hcd: connection closed
[ 2997.807598][ T9530] vhci_hcd: stop threads
[ 2997.817354][ T9530] vhci_hcd: release socket
[ 2997.821814][ T9530] vhci_hcd: disconnect device
[ 2997.843352][T28912] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 2998.009542][T28912] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2998.020656][T28912] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2998.030576][T28912] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2998.039819][T28912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2998.052289][T14027] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 2998.065944][T28912] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 2998.284770][T13846] usb 2-1: USB disconnect, device number 112
[ 2998.453349][T28912] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 2998.594731][ T8593] usb 1-1: USB disconnect, device number 7
[ 2998.624783][T28912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2998.667278][T28912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2998.682472][T28912] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2998.699481][T28912] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2998.708915][T28912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2998.746178][T28912] usb 4-1: config 0 descriptor??
[ 2999.029695][T14054] input: syz1 as /devices/virtual/input/input360
[ 2999.123439][T30894] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 2999.188085][T28912] plantronics 0003:047F:FFFF.00D4: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 2999.453432][ T2283] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 2999.652463][ T2283] usb 3-1: Using ep0 maxpacket: 8
[ 2999.682280][ T2283] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[ 2999.703948][ T2283] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2999.743788][ T2283] usb 3-1: Product: syz
[ 2999.754722][ T2283] usb 3-1: Manufacturer: syz
[ 2999.769104][ T2283] usb 3-1: SerialNumber: syz
[ 2999.821613][ T2283] usb 3-1: config 0 descriptor??
[ 3000.064867][ T2283] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 3000.448480][ T2283] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 3000.500668][ T2283] usb 3-1: USB disconnect, device number 124
[ 3000.516246][    C1] plantronics 0003:047F:FFFF.00D4: usb_submit_urb(ctrl) failed: -1
[ 3000.917953][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10774'.
[ 3001.409802][T13846] usb 4-1: USB disconnect, device number 5
[ 3001.835331][T14095] fuse: Bad value for 'fd'
[ 3002.209336][T14092] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 3003.025807][T14113] FAULT_INJECTION: forcing a failure.
[ 3003.025807][T14113] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3003.039297][T14113] CPU: 1 UID: 0 PID: 14113 Comm: syz.3.10780 Not tainted syzkaller #0 PREEMPT(full) 
[ 3003.039321][T14113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3003.039331][T14113] Call Trace:
[ 3003.039339][T14113]  <TASK>
[ 3003.039347][T14113]  dump_stack_lvl+0x189/0x250
[ 3003.039372][T14113]  ? __pfx____ratelimit+0x10/0x10
[ 3003.039396][T14113]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3003.039417][T14113]  ? __pfx__printk+0x10/0x10
[ 3003.039436][T14113]  ? __might_fault+0xb0/0x130
[ 3003.039469][T14113]  should_fail_ex+0x414/0x560
[ 3003.039500][T14113]  _copy_from_user+0x2d/0xb0
[ 3003.039520][T14113]  ___sys_sendmsg+0x158/0x2a0
[ 3003.039541][T14113]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3003.039601][T14113]  ? __might_fault+0xb0/0x130
[ 3003.039628][T14113]  __sys_sendmmsg+0x227/0x430
[ 3003.039651][T14113]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 3003.039678][T14113]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3003.039718][T14113]  ? ksys_write+0x22a/0x250
[ 3003.039743][T14113]  ? __pfx_ksys_write+0x10/0x10
[ 3003.039771][T14113]  __x64_sys_sendmmsg+0xa0/0xc0
[ 3003.039792][T14113]  do_syscall_64+0xfa/0xfa0
[ 3003.039813][T14113]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3003.039835][T14113]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3003.039852][T14113]  ? clear_bhb_loop+0x60/0xb0
[ 3003.039872][T14113]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3003.039889][T14113] RIP: 0033:0x7f731658f6c9
[ 3003.039911][T14113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3003.039926][T14113] RSP: 002b:00007f73147f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 3003.039946][T14113] RAX: ffffffffffffffda RBX: 00007f73167e6090 RCX: 00007f731658f6c9
[ 3003.039959][T14113] RDX: 0000000000000299 RSI: 0000200000003dc0 RDI: 0000000000000008
[ 3003.039971][T14113] RBP: 00007f73147f6090 R08: 0000000000000000 R09: 0000000000000000
[ 3003.039982][T14113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 3003.039993][T14113] R13: 00007f73167e6128 R14: 00007f73167e6090 R15: 00007f731690fa28
[ 3003.040023][T14113]  </TASK>
[ 3003.409041][T14115] input: syz1 as /devices/virtual/input/input361
[ 3003.597866][T14120] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3004.226563][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3004.250504][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3004.373588][T13846] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 3004.533308][T13846] usb 4-1: Using ep0 maxpacket: 16
[ 3004.607831][T13846] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[ 3004.647867][T13846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3004.732527][T13846] usb 4-1: Product: syz
[ 3004.745035][T13846] usb 4-1: Manufacturer: syz
[ 3004.756160][T13846] usb 4-1: SerialNumber: syz
[ 3004.775228][T13846] usb 4-1: config 0 descriptor??
[ 3004.800762][T13846] visor 4-1:0.0: Sony Clie 3.5 converter detected
[ 3005.001872][T13846] usb 4-1: clie_3_5_startup: get config number bad return length: 0
[ 3005.136843][T13846] visor 4-1:0.0: probe with driver visor failed with error -5
[ 3005.816651][T28912] usb 4-1: USB disconnect, device number 6
[ 3006.455310][T14163] "syz.3.10795" (14163) uses obsolete ecb(arc4) skcipher
[ 3007.728059][T14158] netlink: 'syz.1.10793': attribute type 12 has an invalid length.
[ 3008.260450][T14191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10800'.
[ 3010.108172][T14217] FAULT_INJECTION: forcing a failure.
[ 3010.108172][T14217] name failslab, interval 1, probability 0, space 0, times 0
[ 3010.121603][T14217] CPU: 0 UID: 0 PID: 14217 Comm: syz.0.10805 Not tainted syzkaller #0 PREEMPT(full) 
[ 3010.121618][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3010.121625][T14217] Call Trace:
[ 3010.121630][T14217]  <TASK>
[ 3010.121635][T14217]  dump_stack_lvl+0x189/0x250
[ 3010.121653][T14217]  ? __pfx____ratelimit+0x10/0x10
[ 3010.121666][T14217]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3010.121679][T14217]  ? __pfx__printk+0x10/0x10
[ 3010.121692][T14217]  ? __pfx___might_resched+0x10/0x10
[ 3010.121702][T14217]  ? fs_reclaim_acquire+0x7d/0x100
[ 3010.121715][T14217]  should_fail_ex+0x414/0x560
[ 3010.121733][T14217]  should_failslab+0xa8/0x100
[ 3010.121744][T14217]  __kmalloc_noprof+0xcb/0x7f0
[ 3010.121757][T14217]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 3010.121774][T14217]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 3010.121790][T14217]  genl_family_rcv_msg_doit+0xb8/0x300
[ 3010.121806][T14217]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 3010.121822][T14217]  ? apparmor_capable+0x137/0x1b0
[ 3010.121835][T14217]  ? bpf_lsm_capable+0x9/0x20
[ 3010.121847][T14217]  ? security_capable+0x7e/0x2e0
[ 3010.121862][T14217]  genl_rcv_msg+0x60e/0x790
[ 3010.121878][T14217]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 3010.121888][T14217]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[ 3010.121908][T14217]  netlink_rcv_skb+0x208/0x470
[ 3010.121916][T14217]  ? __lock_acquire+0xab9/0xd20
[ 3010.121926][T14217]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 3010.121938][T14217]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 3010.121963][T14217]  ? down_read+0x1ad/0x2e0
[ 3010.121973][T14217]  genl_rcv+0x28/0x40
[ 3010.121984][T14217]  netlink_unicast+0x82f/0x9e0
[ 3010.122002][T14217]  ? __pfx_netlink_unicast+0x10/0x10
[ 3010.122041][T14217]  ? netlink_sendmsg+0x642/0xb30
[ 3010.122050][T14217]  ? skb_put+0x11b/0x210
[ 3010.122061][T14217]  netlink_sendmsg+0x805/0xb30
[ 3010.122076][T14217]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3010.122087][T14217]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 3010.122102][T14217]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 3010.122112][T14217]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3010.122122][T14217]  __sock_sendmsg+0x21c/0x270
[ 3010.122137][T14217]  ____sys_sendmsg+0x505/0x830
[ 3010.122151][T14217]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3010.122166][T14217]  ? import_iovec+0x74/0xa0
[ 3010.122180][T14217]  ___sys_sendmsg+0x21f/0x2a0
[ 3010.122192][T14217]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3010.122221][T14217]  ? __fget_files+0x2a/0x420
[ 3010.122230][T14217]  ? __fget_files+0x3a0/0x420
[ 3010.122245][T14217]  __x64_sys_sendmsg+0x19b/0x260
[ 3010.122259][T14217]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3010.122279][T14217]  ? __pfx_ksys_write+0x10/0x10
[ 3010.122294][T14217]  ? do_syscall_64+0xbe/0xfa0
[ 3010.122309][T14217]  do_syscall_64+0xfa/0xfa0
[ 3010.122321][T14217]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3010.122333][T14217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3010.122343][T14217]  ? clear_bhb_loop+0x60/0xb0
[ 3010.122355][T14217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3010.122364][T14217] RIP: 0033:0x7fd5d3b8f6c9
[ 3010.122374][T14217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3010.122383][T14217] RSP: 002b:00007fd5d4a3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3010.122395][T14217] RAX: ffffffffffffffda RBX: 00007fd5d3de5fa0 RCX: 00007fd5d3b8f6c9
[ 3010.122402][T14217] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003
[ 3010.122408][T14217] RBP: 00007fd5d4a3e090 R08: 0000000000000000 R09: 0000000000000000
[ 3010.122415][T14217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3010.122421][T14217] R13: 00007fd5d3de6038 R14: 00007fd5d3de5fa0 R15: 00007fd5d3f0fa28
[ 3010.122438][T14217]  </TASK>
[ 3011.353714][ T2277] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 3011.515699][ T2277] usb 1-1: Using ep0 maxpacket: 32
[ 3011.530636][ T2277] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[ 3011.541407][ T2277] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 3011.585216][ T2277] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 3011.613805][ T2277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 3011.633600][ T2277] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 3011.645302][ T2277] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 3011.659491][ T2277] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 3011.671425][ T2277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3011.690197][ T2277] usb 1-1: config 0 descriptor??
[ 3011.926313][ T2277] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 3012.054433][T13461] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 3012.213333][T13461] usb 2-1: Using ep0 maxpacket: 32
[ 3012.257083][T13461] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 3012.289903][T13461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3012.345546][T13461] usb 2-1: config 0 descriptor??
[ 3012.389034][T13461] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 3013.240049][T14260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3013.250715][T14260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3013.627982][   T30] kauditd_printk_skb: 24 callbacks suppressed
[ 3013.628008][   T30] audit: type=1326 audit(1762912554.606:4922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.745814][   T30] audit: type=1326 audit(1762912554.606:4923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.769203][   T30] audit: type=1326 audit(1762912554.666:4924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.793947][   T30] audit: type=1326 audit(1762912554.666:4925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.823871][   T30] audit: type=1326 audit(1762912554.666:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.853368][   T30] audit: type=1326 audit(1762912554.666:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.876823][   T30] audit: type=1326 audit(1762912554.666:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.902064][ T2271] usb 1-1: USB disconnect, device number 8
[ 3013.908361][   T30] audit: type=1326 audit(1762912554.666:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.942798][   T30] audit: type=1326 audit(1762912554.666:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.967175][   T30] audit: type=1326 audit(1762912554.666:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14253 comm="syz.3.10814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731658f6c9 code=0x7ffc0000
[ 3013.999225][ T2271] usblp0: removed
[ 3014.135029][T14245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3014.147205][T14245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3014.184750][T14272] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2498130656 (4996261312 ns) > initial count (4123536412 ns). Using initial count to start timer.
[ 3014.433565][T13461] gspca_sunplus: reg_w_riv err -110
[ 3014.438857][T13461] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[ 3014.447926][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10820'.
[ 3014.586804][ T2271] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 3014.845383][ T2271] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[ 3014.861017][ T2271] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 3014.887168][ T2271] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[ 3014.899385][ T2271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3014.926287][ T2271] usb 1-1: config 0 descriptor??
[ 3015.178229][ T2271] usbhid 1-1:0.0: can't add hid device: -71
[ 3015.188698][ T2271] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 3015.285430][ T2271] usb 1-1: USB disconnect, device number 9
[ 3015.318622][T13461] usb 2-1: USB disconnect, device number 113
[ 3015.380718][T14282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10821'.
[ 3015.395217][T14282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10821'.
[ 3015.845881][T14289] netlink: 1 bytes leftover after parsing attributes in process `syz.0.10823'.
[ 3015.857542][T14289] xt_policy: neither incoming nor outgoing policy selected
[ 3015.950860][T14289] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 3015.994892][T14288] fuse: Unknown parameter '0000000000000000000000000000000000000000'
[ 3016.724392][T14313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10828'.
[ 3017.894615][T14326] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10832'.
[ 3018.108450][T14330] netlink: 'syz.3.10834': attribute type 2 has an invalid length.
[ 3018.163670][T14330] syzkaller0: entered promiscuous mode
[ 3018.745526][T14333] input: syz1 as /devices/virtual/input/input365
[ 3018.818914][T14338] FAULT_INJECTION: forcing a failure.
[ 3018.818914][T14338] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3018.825486][T14333] fuse: Unknown parameter '0000000000000000000000000000000000000000'
[ 3018.839226][T14338] CPU: 1 UID: 0 PID: 14338 Comm: syz.2.10837 Not tainted syzkaller #0 PREEMPT(full) 
[ 3018.839252][T14338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3018.839263][T14338] Call Trace:
[ 3018.839270][T14338]  <TASK>
[ 3018.839279][T14338]  dump_stack_lvl+0x189/0x250
[ 3018.839313][T14338]  ? __pfx____ratelimit+0x10/0x10
[ 3018.839337][T14338]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3018.839357][T14338]  ? __pfx__printk+0x10/0x10
[ 3018.839375][T14338]  ? fs_reclaim_acquire+0x7d/0x100
[ 3018.839401][T14338]  should_fail_ex+0x414/0x560
[ 3018.839431][T14338]  prepare_alloc_pages+0x213/0x610
[ 3018.839456][T14338]  __alloc_frozen_pages_noprof+0x123/0x370
[ 3018.839479][T14338]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 3018.839504][T14338]  ? policy_nodemask+0x27c/0x720
[ 3018.839527][T14338]  alloc_pages_mpol+0x232/0x4a0
[ 3018.839549][T14338]  folio_alloc_mpol_noprof+0x39/0x70
[ 3018.839568][T14338]  shmem_alloc_and_add_folio+0x423/0xf40
[ 3018.839598][T14338]  ? filemap_get_entry+0xad/0x2f0
[ 3018.839613][T14338]  ? filemap_get_entry+0xad/0x2f0
[ 3018.839630][T14338]  ? filemap_get_entry+0x28f/0x2f0
[ 3018.839652][T14338]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 3018.839678][T14338]  ? shmem_allowable_huge_orders+0x1d7/0x4f0
[ 3018.839707][T14338]  shmem_get_folio_gfp+0x59d/0x1660
[ 3018.839748][T14338]  shmem_write_begin+0xf7/0x2b0
[ 3018.839777][T14338]  generic_perform_write+0x2c5/0x900
[ 3018.839809][T14338]  ? __pfx_generic_perform_write+0x10/0x10
[ 3018.839826][T14338]  ? down_write+0x162/0x1f0
[ 3018.839849][T14338]  ? file_update_time+0x2da/0x490
[ 3018.839874][T14338]  shmem_file_write_iter+0xf8/0x120
[ 3018.839894][T14338]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 3018.839920][T14338]  __kernel_write_iter+0x428/0x910
[ 3018.839944][T14338]  ? __pfx_shmem_file_write_iter+0x10/0x10
[ 3018.839968][T14338]  ? __pfx___kernel_write_iter+0x10/0x10
[ 3018.839988][T14338]  ? rcu_read_lock_any_held+0xb3/0x120
[ 3018.840016][T14338]  ? __asan_memset+0x22/0x50
[ 3018.840037][T14338]  ? iov_iter_kvec+0xb8/0x180
[ 3018.840060][T14338]  kernel_write+0x1ca/0x2e0
[ 3018.840089][T14338]  ? __pfx_kernel_write+0x10/0x10
[ 3018.840111][T14338]  ? shmem_get_inode+0xbc5/0xe90
[ 3018.840143][T14338]  ? __shmem_file_setup+0x2a6/0x300
[ 3018.840169][T14338]  big_key_preparse+0x39c/0x4d0
[ 3018.840193][T14338]  ? __pfx_big_key_preparse+0x10/0x10
[ 3018.840221][T14338]  __key_create_or_update+0x370/0xa30
[ 3018.840254][T14338]  ? __pfx___key_create_or_update+0x10/0x10
[ 3018.840283][T14338]  ? irqentry_exit+0x74/0x90
[ 3018.840323][T14338]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[ 3018.840354][T14338]  key_create_or_update+0x42/0x60
[ 3018.840381][T14338]  __se_sys_add_key+0x32e/0x410
[ 3018.840403][T14338]  ? __pfx___se_sys_add_key+0x10/0x10
[ 3018.840428][T14338]  ? do_syscall_64+0xbe/0xfa0
[ 3018.840449][T14338]  ? __x64_sys_add_key+0x20/0xc0
[ 3018.840468][T14338]  do_syscall_64+0xfa/0xfa0
[ 3018.840489][T14338]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3018.840510][T14338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3018.840528][T14338]  ? clear_bhb_loop+0x60/0xb0
[ 3018.840549][T14338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3018.840565][T14338] RIP: 0033:0x7fb26c18f6c9
[ 3018.840582][T14338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3018.840597][T14338] RSP: 002b:00007fb26cf9c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 3018.840616][T14338] RAX: ffffffffffffffda RBX: 00007fb26c3e5fa0 RCX: 00007fb26c18f6c9
[ 3018.840629][T14338] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: 0000200000000000
[ 3018.840641][T14338] RBP: 00007fb26cf9c090 R08: fffffffffffffffe R09: 0000000000000000
[ 3018.840653][T14338] R10: 000000000000fe3a R11: 0000000000000246 R12: 0000000000000002
[ 3018.840663][T14338] R13: 00007fb26c3e6038 R14: 00007fb26c3e5fa0 R15: 00007fb26c50fa28
[ 3018.840700][T14338]  </TASK>
[ 3020.410487][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 3020.416948][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 3021.095892][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10844'.
[ 3023.346171][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.346243][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.362574][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.362605][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.376200][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.376222][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.389538][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.389556][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.406107][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.406130][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.419393][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.419412][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.432653][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.432674][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.446291][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.446324][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.459606][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.459627][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.472812][T12621] Bluetooth: hci4: Unknown advertising packet type: 0x78
[ 3023.472831][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.486046][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.491977][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.498109][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.504148][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.510228][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.516217][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.522283][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.528357][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.534473][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.540441][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.546647][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.552619][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.558765][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.564848][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.570945][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.576992][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.583367][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.589327][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.595516][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.601503][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.607983][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.614015][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.620171][T12621] Bluetooth: hci4: Malformed LE Event: 0x0d
[ 3023.662868][T14390] fuse: Bad value for 'fd'
[ 3025.279189][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10856'.
[ 3025.325528][T14414] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3025.356546][T14412] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3026.199315][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10860'.
[ 3026.318209][T14425] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[ 3026.824268][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10861'.
[ 3029.481751][T14474] input: syz1 as /devices/virtual/input/input366
[ 3029.543611][ T2283] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 3029.697400][T14482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3029.732994][T14481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3029.746412][T14482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3029.766733][T14481] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3029.902777][T14484] netlink: 'syz.2.10870': attribute type 1 has an invalid length.
[ 3030.027691][T14484] 8021q: adding VLAN 0 to HW filter on device bond3
[ 3030.052520][T14486] bond3: (slave gretap1): making interface the new active one
[ 3030.076752][T14486] bond3: (slave gretap1): Enslaving as an active interface with an up link
[ 3030.143401][ T2283] usb 4-1: Using ep0 maxpacket: 32
[ 3030.416835][ T2283] usb 4-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config
[ 3030.490038][ T2283] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 3030.543586][ T2283] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 3030.552706][ T2283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3030.564926][ T2283] usb 4-1: Product: syz
[ 3030.569093][ T2283] usb 4-1: Manufacturer: syz
[ 3030.576151][ T2283] usb 4-1: SerialNumber: syz
[ 3030.583137][ T2283] usb 4-1: config 0 descriptor??
[ 3030.768020][T14495] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10874'.
[ 3030.822350][T14491] netlink: 'syz.2.10872': attribute type 10 has an invalid length.
[ 3030.872495][T14498] netlink: 'syz.2.10872': attribute type 10 has an invalid length.
[ 3030.883531][T14501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10876'.
[ 3030.894645][T14491] team0: Port device dummy0 added
[ 3030.906659][T14498] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 3030.946973][T14498] team0: Failed to send options change via netlink (err -105)
[ 3030.969534][T14498] team0: Failed to send port change of device dummy0 via netlink (err -105)
[ 3030.994602][T14498] team0: Port device dummy0 removed
[ 3031.029739][T14498] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 3031.159773][T14501] geneve2: entered promiscuous mode
[ 3031.166043][T14501] geneve2: entered allmulticast mode
[ 3031.233350][T13461] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 3031.415216][T14510] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10877'.
[ 3031.731736][T13461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3031.865173][T13461] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3031.933441][T13461] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 3031.959799][T13461] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3032.164142][T13461] usb 1-1: config 0 descriptor??
[ 3032.307205][ T2271] usb 4-1: USB disconnect, device number 7
[ 3032.596757][T13461] arvo 0003:1E7D:30D4.00D5: unbalanced collection at end of report description
[ 3032.614500][T13461] arvo 0003:1E7D:30D4.00D5: parse failed
[ 3032.627225][T13461] arvo 0003:1E7D:30D4.00D5: probe with driver arvo failed with error -22
[ 3032.801011][T13461] usb 1-1: USB disconnect, device number 10
[ 3033.315792][T14535] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 3033.574949][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10886'.
[ 3033.878420][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10888'.
[ 3033.891903][T14549] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3033.899530][T14549] bridge0: port 1(bridge_slave_0) entered disabled state
[ 3034.189865][T14550] netlink: 112 bytes leftover after parsing attributes in process `syz.0.10887'.
[ 3034.271989][T14554] usb usb8: usbfs: process 14554 (syz.2.10889) did not claim interface 0 before use
[ 3034.682676][ T2283] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 3034.703121][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[ 3034.843439][ T2283] usb 1-1: device descriptor read/64, error -32
[ 3035.083389][ T2283] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 3035.430923][T14565] tipc: Started in network mode
[ 3035.437314][T14565] tipc: Node identity e63dc6466d5f, cluster identity 4711
[ 3035.462336][T14565] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 3035.523506][ T2283] usb 1-1: device descriptor read/64, error -71
[ 3035.542813][T14566] syzkaller0: entered promiscuous mode
[ 3035.733481][T14566] syzkaller0: entered allmulticast mode
[ 3035.763807][ T2283] usb usb1-port1: attempt power cycle
[ 3036.333363][ T2283] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 3036.422606][T14565] tipc: Resetting bearer <eth:syzkaller0>
[ 3036.453344][ T6837] tipc: Node number set to 2338506310
[ 3036.520474][T14564] tipc: Resetting bearer <eth:syzkaller0>
[ 3036.680659][T14564] tipc: Disabling bearer <eth:syzkaller0>
[ 3037.286781][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10894'.
[ 3037.304735][ T2283] usb 1-1: device descriptor read/8, error -71
[ 3037.393307][T14580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3037.434188][T14580] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3038.004059][ T6837] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 3038.175424][ T6837] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3038.274724][ T6837] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3038.328859][ T2283] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 3038.377040][ T6837] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 3038.405301][ T2283] usb 1-1: device descriptor read/8, error -71
[ 3038.420625][ T6837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3038.444006][ T6837] usb 3-1: Product: syz
[ 3038.457328][ T6837] usb 3-1: Manufacturer: syz
[ 3038.469573][ T6837] usb 3-1: SerialNumber: syz
[ 3038.523694][ T2283] usb usb1-port1: unable to enumerate USB device
[ 3038.696810][ T6837] cdc_ncm 3-1:1.0: bind() failure
[ 3038.707032][ T6837] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 3038.756006][ T6837] cdc_ncm 3-1:1.1: bind() failure
[ 3038.775435][ T6837] usb 3-1: USB disconnect, device number 125
[ 3038.830949][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10905'.
[ 3038.991844][T14621] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3040.090688][T14643] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10915'.
[ 3040.233344][ T6837] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 3040.323918][T14649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3040.384194][ T6837] usb 3-1: Using ep0 maxpacket: 8
[ 3040.414398][T14649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3040.500252][ T6837] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 3040.510218][ T6837] usb 3-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[ 3040.522181][ T6837] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[ 3040.533426][ T6837] usb 3-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[ 3040.546270][ T6837] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 3040.557448][ T6837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3040.565715][ T6837] usb 3-1: Product: syz
[ 3040.571145][ T6837] usb 3-1: Manufacturer: syz
[ 3040.576285][ T6837] usb 3-1: SerialNumber: syz
[ 3040.586593][ T6837] hso 3-1:6.0: Can't find BULK OUT endpoint
[ 3040.867173][T13846] usb 3-1: USB disconnect, device number 126
[ 3040.913342][ T6837] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 3041.025837][T14653] 8021q: VLANs not supported on ip_vti0
[ 3041.065470][ T6837] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 3041.076387][ T6837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3041.088655][ T6837] usb 2-1: config 0 descriptor??
[ 3041.716135][T13846] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 3041.797768][T14661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3041.824502][T14661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3041.885457][T13846] usb 3-1: Using ep0 maxpacket: 32
[ 3041.900207][T13846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3041.911432][T13846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3041.921578][T13846] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 3041.930658][T13846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3041.946714][T13846] usb 3-1: config 0 descriptor??
[ 3041.961418][T13846] hub 3-1:0.0: USB hub found
[ 3042.091138][ T6837] pegasus 2-1:0.0: probe with driver pegasus failed with error -121
[ 3042.184696][T14656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3042.204418][T14656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3042.216803][T13846] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 3042.232254][T13846] usbhid 3-1:0.0: can't add hid device: -71
[ 3042.239231][T13846] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 3042.279189][T13846] usb 3-1: USB disconnect, device number 127
[ 3042.819008][T14683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10926'.
[ 3043.523367][T28912] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 3043.613395][T13461] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 3043.683323][T28912] usb 3-1: Using ep0 maxpacket: 16
[ 3043.714321][T28912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3043.806867][T28912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3043.842408][T13461] usb 4-1: config 0 has an invalid interface number: 47 but max is 0
[ 3043.853298][T28912] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3043.866530][T13461] usb 4-1: config 0 has no interface number 0
[ 3043.872734][T13461] usb 4-1: config 0 interface 47 altsetting 252 bulk endpoint 0xD has invalid maxpacket 8
[ 3043.883094][T28912] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 3043.892815][T13461] usb 4-1: config 0 interface 47 altsetting 252 bulk endpoint 0x1 has invalid maxpacket 8
[ 3043.903123][T28912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3043.924201][T13461] usb 4-1: config 0 interface 47 altsetting 252 endpoint 0x9 has invalid maxpacket 1024, setting to 64
[ 3043.936765][T13461] usb 4-1: config 0 interface 47 has no altsetting 0
[ 3043.945010][T28912] usb 3-1: config 0 descriptor??
[ 3043.960887][T28912] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input367
[ 3043.982528][T13461] usb 4-1: New USB device found, idVendor=7d15, idProduct=31b2, bcdDevice=57.4b
[ 3044.001071][T13461] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3044.019006][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 3044.032693][T13461] usb 4-1: config 0 descriptor??
[ 3044.083878][T14693] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 3044.131972][ T8593] usb 2-1: USB disconnect, device number 114
[ 3044.139693][T14693] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 3044.160492][T13461] usb-storage 4-1:0.47: USB Mass Storage device detected
[ 3044.172088][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 3044.375169][ T5183] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[ 3044.460912][T13461] usb 4-1: USB disconnect, device number 8
[ 3044.574362][T14706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10932'.
[ 3044.588418][T14706] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 3044.604230][T14706] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10932'.
[ 3044.615078][T14706] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 3044.926411][T14715] netdevsim netdevsim1: Direct firmware load for .
[ 3044.926411][T14715]  failed with error -2
[ 3044.939892][T14715] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[ 3044.939892][T14715] 
[ 3045.496912][T14721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10936'.
[ 3045.613933][T14723] geneve4: entered promiscuous mode
[ 3045.623861][T14723] geneve4: entered allmulticast mode
[ 3046.474286][T14736] Invalid logical block size (65473)
[ 3046.979705][T14739] fuse: Bad value for 'fd'
[ 3047.152597][T13461] usb 3-1: USB disconnect, device number 2
[ 3047.232816][T14746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3047.260746][T14746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3047.333476][ T2271] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 3047.455138][T14747] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 3047.528485][ T2271] usb 2-1: device descriptor read/64, error -71
[ 3047.943356][ T2271] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 3048.083815][T12621] Bluetooth: hci4: command 0x0405 tx timeout
[ 3048.090230][ T2271] usb 2-1: device descriptor read/64, error -71
[ 3048.203570][ T2271] usb usb2-port1: attempt power cycle
[ 3048.553736][ T2271] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 3048.614203][ T2271] usb 2-1: device descriptor read/8, error -71
[ 3049.004374][ T2271] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 3049.322649][ T2271] usb 2-1: device descriptor read/8, error -71
[ 3049.882572][ T2271] usb usb2-port1: unable to enumerate USB device
[ 3050.133846][T28912] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 3050.320408][T14785] FAULT_INJECTION: forcing a failure.
[ 3050.320408][T14785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3050.334823][T14785] CPU: 1 UID: 0 PID: 14785 Comm: syz.0.10951 Not tainted syzkaller #0 PREEMPT(full) 
[ 3050.334839][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3050.334846][T14785] Call Trace:
[ 3050.334851][T14785]  <TASK>
[ 3050.334856][T14785]  dump_stack_lvl+0x189/0x250
[ 3050.334875][T14785]  ? __pfx____ratelimit+0x10/0x10
[ 3050.334888][T14785]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3050.334900][T14785]  ? __pfx__printk+0x10/0x10
[ 3050.334910][T14785]  ? __might_fault+0xb0/0x130
[ 3050.334929][T14785]  should_fail_ex+0x414/0x560
[ 3050.334947][T14785]  _copy_from_user+0x2d/0xb0
[ 3050.334960][T14785]  __sys_sendto+0x25c/0x520
[ 3050.334972][T14785]  ? __pfx___sys_sendto+0x10/0x10
[ 3050.334979][T14785]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 3050.334999][T14785]  ? __fget_files+0x3a0/0x420
[ 3050.335014][T14785]  ? ksys_write+0x22a/0x250
[ 3050.335028][T14785]  ? __pfx_ksys_write+0x10/0x10
[ 3050.335043][T14785]  __x64_sys_sendto+0xde/0x100
[ 3050.335054][T14785]  do_syscall_64+0xfa/0xfa0
[ 3050.335067][T14785]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3050.335079][T14785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3050.335089][T14785]  ? clear_bhb_loop+0x60/0xb0
[ 3050.335101][T14785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3050.335110][T14785] RIP: 0033:0x7fd5d3b8f6c9
[ 3050.335120][T14785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3050.335129][T14785] RSP: 002b:00007fd5d4a3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 3050.335140][T14785] RAX: ffffffffffffffda RBX: 00007fd5d3de5fa0 RCX: 00007fd5d3b8f6c9
[ 3050.335148][T14785] RDX: 00000000000000a8 RSI: 0000200000000180 RDI: 0000000000000003
[ 3050.335155][T14785] RBP: 00007fd5d4a3e090 R08: 0000200000000140 R09: 0000000000000014
[ 3050.335161][T14785] R10: 0000000024000020 R11: 0000000000000246 R12: 0000000000000001
[ 3050.335167][T14785] R13: 00007fd5d3de6038 R14: 00007fd5d3de5fa0 R15: 00007fd5d3f0fa28
[ 3050.335183][T14785]  </TASK>
[ 3050.603672][T28912] usb 3-1: Using ep0 maxpacket: 32
[ 3050.635996][T14775] binder: 14772:14775 ioctl c0306201 200000000040 returned -14
[ 3051.271753][T13461] hid-generic 1000:0010:007F.00D6: item fetching failed at offset 0/2
[ 3051.317837][T13461] hid-generic 1000:0010:007F.00D6: probe with driver hid-generic failed with error -22
[ 3051.960872][T11537] tipc: Subscription rejected, illegal request
[ 3052.092913][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 3052.092935][   T30] audit: type=1326 audit(1762912593.066:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.204993][   T30] audit: type=1326 audit(1762912593.066:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.267444][   T30] audit: type=1326 audit(1762912593.076:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.325294][   T30] audit: type=1326 audit(1762912593.096:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.389974][   T30] audit: type=1326 audit(1762912593.106:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.432653][   T30] audit: type=1326 audit(1762912593.106:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.510133][   T30] audit: type=1326 audit(1762912593.106:4941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.581043][   T30] audit: type=1326 audit(1762912593.116:4942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.652112][   T30] audit: type=1326 audit(1762912593.126:4943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.741252][   T30] audit: type=1326 audit(1762912593.126:4944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14814 comm="syz.1.10960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f656578f6c9 code=0x7ffc0000
[ 3052.815887][T28912] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 3052.826934][T28912] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 3052.837345][T28912] usb 3-1: can't read configurations, error -71
[ 3053.167718][T14848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3053.185356][T14848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3053.227180][T14848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3053.247302][T14848] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3053.317226][T14850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3053.330591][T14850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3053.993758][T13461] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 3054.033423][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10975'.
[ 3054.163669][T13461] usb 4-1: Using ep0 maxpacket: 8
[ 3054.176320][T13461] usb 4-1: config index 0 descriptor too short (expected 29970, got 18)
[ 3054.191815][T13461] usb 4-1: config 0 has too many interfaces: 168, using maximum allowed: 32
[ 3054.201102][T13461] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 168
[ 3054.217819][T13461] usb 4-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[ 3054.227645][T13461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3054.236768][T14874] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10981'.
[ 3054.254219][T13461] usb 4-1: Product: syz
[ 3054.265137][T13461] usb 4-1: Manufacturer: syz
[ 3054.271781][T13461] usb 4-1: SerialNumber: syz
[ 3054.279620][T13461] usb 4-1: config 0 descriptor??
[ 3054.283329][T13846] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 3054.308794][T13461] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[ 3054.319760][T13461] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input368
[ 3054.465988][T13846] usb 3-1: Using ep0 maxpacket: 8
[ 3054.479242][T13846] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[ 3054.496146][T13846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3054.504568][T13846] usb 3-1: Product: syz
[ 3054.508903][T13846] usb 3-1: Manufacturer: syz
[ 3054.514099][T13846] usb 3-1: SerialNumber: syz
[ 3054.523879][T13846] usb 3-1: config 0 descriptor??
[ 3054.532825][T13846] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[ 3054.547105][T13846] usb 3-1: setting power ON
[ 3054.551957][T13846] dvb-usb: bulk message failed: -22 (2/0)
[ 3054.576333][T13846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3054.586411][T13846] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[ 3054.595024][T13846] usb 3-1: media controller created
[ 3054.621662][T13846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3054.652451][T13846] usb 3-1: selecting invalid altsetting 6
[ 3054.658471][T13846] usb 3-1: digital interface selection failed (-22)
[ 3054.665582][T13846] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[ 3054.679682][T13846] usb 3-1: setting power OFF
[ 3054.706914][T13846] dvb-usb: bulk message failed: -22 (2/0)
[ 3054.719091][T13846] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[ 3054.739099][T13846] (NULL device *): no alternate interface
[ 3054.815785][T13846] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[ 3054.836007][T13846] usb 3-1: USB disconnect, device number 5
[ 3055.012197][ T2271] usb 4-1: USB disconnect, device number 9
[ 3055.103355][T13461] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 3055.182267][T14894] input: syz1 as /devices/virtual/input/input369
[ 3055.243638][T13461] usb 1-1: device descriptor read/64, error -71
[ 3055.436966][T14904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10991'.
[ 3055.484173][T13461] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 3055.625752][T13461] usb 1-1: device descriptor read/64, error -71
[ 3055.683344][ T8593] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 3055.744227][T13461] usb usb1-port1: attempt power cycle
[ 3055.873436][T28912] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 3055.882426][ T8593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3055.893581][ T8593] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00
[ 3055.911143][ T8593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3055.932919][ T8593] usb 3-1: config 0 descriptor??
[ 3056.055902][T28912] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 3056.071589][T28912] usb 4-1: not running at top speed; connect to a high speed hub
[ 3056.089997][T28912] usb 4-1: config 3 has an invalid interface number: 98 but max is 0
[ 3056.106214][T28912] usb 4-1: config 3 has no interface number 0
[ 3056.123313][T28912] usb 4-1: config 3 interface 98 altsetting 10 endpoint 0x2 has an invalid bInterval 0, changing to 10
[ 3056.134534][T13461] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 3056.153478][T28912] usb 4-1: config 3 interface 98 altsetting 10 endpoint 0x2 has invalid wMaxPacketSize 0
[ 3056.164025][T13461] usb 1-1: device descriptor read/8, error -71
[ 3056.173343][T28912] usb 4-1: config 3 interface 98 has no altsetting 0
[ 3056.196146][T28912] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=b9.a8
[ 3056.232391][T28912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3056.240980][T28912] usb 4-1: Product: syz
[ 3056.249268][T28912] usb 4-1: Manufacturer: syz
[ 3056.255599][T28912] usb 4-1: SerialNumber: syz
[ 3056.289307][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10993'.
[ 3056.349695][T14910] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 3056.367538][ T8593] holtek 0003:1241:5015.00D7: unbalanced collection at end of report description
[ 3056.407223][T13461] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 3056.474119][T13461] usb 1-1: device descriptor read/8, error -71
[ 3056.490723][T28912] usb 4-1: USB disconnect, device number 10
[ 3056.498061][ T8593] holtek 0003:1241:5015.00D7: parse failed
[ 3056.512444][ T8593] holtek 0003:1241:5015.00D7: probe with driver holtek failed with error -22
[ 3056.561132][T14904] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10991'.
[ 3056.590341][ T8593] usb 3-1: USB disconnect, device number 6
[ 3056.614285][T13461] usb usb1-port1: unable to enumerate USB device
[ 3056.877891][T14919] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10996'.
[ 3057.195018][   T30] kauditd_printk_skb: 80 callbacks suppressed
[ 3057.195036][   T30] audit: type=1326 audit(1762912598.176:5025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.226299][   T30] audit: type=1326 audit(1762912598.176:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.251299][   T30] audit: type=1326 audit(1762912598.206:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.283829][T13846] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 3057.285196][T14924] input: syz1 as /devices/virtual/input/input370
[ 3057.320059][   T30] audit: type=1326 audit(1762912598.206:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.345096][   T30] audit: type=1326 audit(1762912598.206:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.370215][   T30] audit: type=1326 audit(1762912598.206:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.393063][   T30] audit: type=1326 audit(1762912598.206:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.416658][   T30] audit: type=1326 audit(1762912598.206:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.441882][   T30] audit: type=1326 audit(1762912598.206:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.469303][   T30] audit: type=1326 audit(1762912598.206:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14923 comm="syz.2.10998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb26c18f6c9 code=0x7ffc0000
[ 3057.527271][T13846] usb 4-1: config 0 has an invalid interface number: 217 but max is 0
[ 3057.568022][T13846] usb 4-1: config 0 has no interface number 0
[ 3057.594471][T13846] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[ 3057.612924][T13846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3057.632331][T13846] usb 4-1: Product: syz
[ 3057.640986][T13846] usb 4-1: Manufacturer: syz
[ 3057.645776][T13846] usb 4-1: SerialNumber: syz
[ 3057.653773][T13846] usb 4-1: config 0 descriptor??
[ 3057.671094][T13846] hub 4-1:0.217: bad descriptor, ignoring hub
[ 3057.684984][T13846] hub 4-1:0.217: probe with driver hub failed with error -5
[ 3057.867249][T13846] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[ 3057.910848][T13846] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 3057.939502][T13846] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[ 3057.948387][T13846] usb 4-1: media controller created
[ 3057.981651][T13846] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3058.027450][T13846] DVB: Unable to find symbol dib7000p_attach()
[ 3058.034068][T13846] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[ 3058.124148][T13846] rc_core: IR keymap rc-dib0700-rc5 not found
[ 3058.133866][T13846] Registered IR keymap rc-empty
[ 3058.139093][T13846] dvb-usb: could not initialize remote control.
[ 3058.146587][T13846] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[ 3058.167240][T13846] usb 4-1: USB disconnect, device number 11
[ 3058.283734][T13846] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[ 3058.893500][T12621] Bluetooth: hci1: command 0x041b tx timeout
[ 3058.931271][T14947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11004'.
[ 3059.388395][T14958] input: syz1 as /devices/virtual/input/input372
[ 3061.437297][T15000] vlan0: entered promiscuous mode
[ 3061.492699][T15000] bond0: entered promiscuous mode
[ 3061.514334][T15000] bond_slave_0: entered promiscuous mode
[ 3061.537039][T15000] bond_slave_1: entered promiscuous mode
[ 3061.932937][T15015] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11022'.
[ 3062.329133][T15010] netlink: 'syz.2.11021': attribute type 12 has an invalid length.
[ 3062.358847][T25869] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[ 3062.413105][T25869] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[ 3062.463386][T25869] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[ 3062.472388][T25869] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[ 3062.633350][ T8402] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[ 3062.679161][T15036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11026'.
[ 3062.917756][ T8402] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 3063.003333][ T8402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3063.011431][ T8402] usb 1-1: Product: syz
[ 3063.023469][ T8402] usb 1-1: Manufacturer: syz
[ 3063.030768][ T8402] usb 1-1: SerialNumber: syz
[ 3063.056117][ T8402] usb 1-1: config 0 descriptor??
[ 3063.403482][ T8402] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 3063.543538][ T8593] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 3063.703344][ T8593] usb 4-1: Using ep0 maxpacket: 32
[ 3063.822999][ T8593] usb 4-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[ 3063.857575][ T8593] usb 4-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d
[ 3063.884928][ T8593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3063.956252][ T8593] quatech2 4-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected
[ 3064.162420][ T8593] usb 4-1: qt2_attach - failed to power on unit: -71
[ 3064.171935][ T8593] quatech2 4-1:24.0: probe with driver quatech2 failed with error -71
[ 3064.211013][ T8593] usb 4-1: USB disconnect, device number 12
[ 3064.895441][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11032'.
[ 3065.026413][ T8402] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 3065.051735][ T8402] usb 1-1: USB disconnect, device number 19
[ 3066.253365][ T6837] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 3066.443481][ T6837] usb 1-1: Using ep0 maxpacket: 16
[ 3066.460257][ T6837] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 3066.527269][ T6837] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 3066.559839][ T6837] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 3066.571170][ T6837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3066.579812][ T6837] usb 1-1: Product: syz
[ 3066.584183][ T6837] usb 1-1: Manufacturer: syz
[ 3066.588851][ T6837] usb 1-1: SerialNumber: syz
[ 3066.599042][ T6837] usb 1-1: config 0 descriptor??
[ 3066.611285][ T6837] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 3066.625576][ T6837] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 3066.805535][T15104] vlan0: entered promiscuous mode
[ 3066.828219][T15104] bond0: entered promiscuous mode
[ 3066.841138][T15104] bond_slave_0: entered promiscuous mode
[ 3066.858079][T15104] bond_slave_1: entered promiscuous mode
[ 3066.972563][T15106] FAULT_INJECTION: forcing a failure.
[ 3066.972563][T15106] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3066.985962][T15106] CPU: 0 UID: 0 PID: 15106 Comm: syz.5.11047 Not tainted syzkaller #0 PREEMPT(full) 
[ 3066.985977][T15106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3066.985984][T15106] Call Trace:
[ 3066.985988][T15106]  <TASK>
[ 3066.985993][T15106]  dump_stack_lvl+0x189/0x250
[ 3066.986011][T15106]  ? __pfx____ratelimit+0x10/0x10
[ 3066.986025][T15106]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3066.986038][T15106]  ? __pfx__printk+0x10/0x10
[ 3066.986057][T15106]  should_fail_ex+0x414/0x560
[ 3066.986074][T15106]  _copy_to_user+0x31/0xb0
[ 3066.986087][T15106]  simple_read_from_buffer+0xe1/0x170
[ 3066.986104][T15106]  proc_fail_nth_read+0x1b3/0x220
[ 3066.986119][T15106]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3066.986132][T15106]  ? rw_verify_area+0x2a6/0x4d0
[ 3066.986145][T15106]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 3066.986157][T15106]  vfs_read+0x200/0xa30
[ 3066.986171][T15106]  ? poll_select_finish+0x264/0x5e0
[ 3066.986182][T15106]  ? __pfx_vfs_read+0x10/0x10
[ 3066.986196][T15106]  ? set_user_sigmask+0xc7/0x1b0
[ 3066.986208][T15106]  ? __pfx_set_user_sigmask+0x10/0x10
[ 3066.986219][T15106]  ? do_sys_openat2+0x154/0x1c0
[ 3066.986234][T15106]  ksys_read+0x145/0x250
[ 3066.986248][T15106]  ? __pfx_ksys_read+0x10/0x10
[ 3066.986262][T15106]  ? do_syscall_64+0xbe/0xfa0
[ 3066.986278][T15106]  do_syscall_64+0xfa/0xfa0
[ 3066.986289][T15106]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3066.986302][T15106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3066.986312][T15106]  ? clear_bhb_loop+0x60/0xb0
[ 3066.986323][T15106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3066.986333][T15106] RIP: 0033:0x7f016a98e0dc
[ 3066.986343][T15106] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 3066.986351][T15106] RSP: 002b:00007f016b787030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 3066.986363][T15106] RAX: ffffffffffffffda RBX: 00007f016abe5fa0 RCX: 00007f016a98e0dc
[ 3066.986371][T15106] RDX: 000000000000000f RSI: 00007f016b7870a0 RDI: 0000000000000004
[ 3066.986377][T15106] RBP: 00007f016b787090 R08: 0000000000000000 R09: 0000000000000000
[ 3066.986383][T15106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3066.986389][T15106] R13: 00007f016abe6038 R14: 00007f016abe5fa0 R15: 00007f016ad0fa28
[ 3066.986405][T15106]  </TASK>
[ 3067.003404][ T8593] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 3067.335005][ T6837] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 3067.355415][ T6837] em28xx 1-1:0.0: Config register raw data: 0x41
[ 3067.406845][T15110] kAFS: unable to lookup cell ''
[ 3067.464950][ T8593] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 3067.515154][ T8593] usb 2-1: config 0 has no interface number 0
[ 3067.531256][ T8593] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 3067.541031][ T8593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3067.554112][ T8593] usb 2-1: Product: syz
[ 3067.563124][ T8593] usb 2-1: Manufacturer: syz
[ 3067.567858][ T8593] usb 2-1: SerialNumber: syz
[ 3067.578635][ T8593] usb 2-1: config 0 descriptor??
[ 3067.589948][T15114] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11050'.
[ 3067.673808][T13461] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 3067.731747][T15090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11042'.
[ 3067.809986][ T8593] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[ 3067.826478][ T8593] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 3067.836808][T13461] usb 3-1: Using ep0 maxpacket: 16
[ 3067.846377][T13461] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3067.860119][T13461] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3067.870289][T13461] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[ 3067.879616][T14697] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 3067.888869][ T8593] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[ 3067.897961][T13461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3067.906434][ T8593] usb 2-1: media controller created
[ 3067.919638][T13461] usb 3-1: config 0 descriptor??
[ 3067.940523][ T8593] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 3068.012429][T15103] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*$rOcÚÉ”ÎÜr$åG—•µ�
[ 3068.046487][T14697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3068.062681][T14697] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3068.112281][T14697] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 3068.164812][T14697] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3068.279788][T14697] usb 4-1: config 0 descriptor??
[ 3068.346180][ T6837] usb 2-1: USB disconnect, device number 119
[ 3068.347749][    C1] raw-gadget.3 gadget.2: ignoring, device is not running
[ 3068.360186][    C1] raw-gadget.3 gadget.2: ignoring, device is not running
[ 3068.368607][T13461] usbhid 3-1:0.0: can't add hid device: -71
[ 3068.385547][T13461] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 3068.398727][T13461] usb 3-1: USB disconnect, device number 7
[ 3068.694897][T14697] arvo 0003:1E7D:30D4.00D8: unbalanced collection at end of report description
[ 3068.744130][T14697] arvo 0003:1E7D:30D4.00D8: parse failed
[ 3068.765322][T14697] arvo 0003:1E7D:30D4.00D8: probe with driver arvo failed with error -22
[ 3068.898693][ T6837] usb 4-1: USB disconnect, device number 13
[ 3069.008831][T15138] netlink: 172 bytes leftover after parsing attributes in process `syz.1.11057'.
[ 3069.836878][T15154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3069.878042][T15154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3071.239854][T15182] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11070'.
[ 3071.289069][T15182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3071.298307][T15182] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3071.680971][T15187] vcan0: tx drop: invalid sa for name 0x0000000000000002
[ 3072.234987][ T8593] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 3072.997956][T15210] sg_write: data in/out 987/14 bytes for SCSI command 0x0-- guessing data in;
[ 3072.997956][T15210]    program syz.0.11076 not setting count and/or reply_len properly
[ 3073.093387][ T8593] usb 4-1: Using ep0 maxpacket: 32
[ 3073.152515][ T8593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3073.181668][ T8593] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3073.232308][ T8593] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00
[ 3073.308777][ T8593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3073.416022][T15217] loop3: detected capacity change from 0 to 7
[ 3073.432792][T15217] Dev loop3: unable to read RDB block 7
[ 3073.445751][T15217]  loop3: unable to read partition table
[ 3073.458715][T15217] loop3: partition table beyond EOD, truncated
[ 3073.473341][T15217] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 3073.497950][ T8593] usb 4-1: config 0 descriptor??
[ 3074.162669][ T8593] glorious 0003:258A:0033.00D9: item fetching failed at offset 0/3
[ 3074.180709][T15234] Context (ID=0x0) not attached to queue pair (handle=0x4dd:0x0)
[ 3074.206478][ T8593] glorious 0003:258A:0033.00D9: probe with driver glorious failed with error -22
[ 3075.095857][T15254] FAULT_INJECTION: forcing a failure.
[ 3075.095857][T15254] name failslab, interval 1, probability 0, space 0, times 0
[ 3075.267893][T15252] netlink: 34 bytes leftover after parsing attributes in process `syz.1.11090'.
[ 3075.404445][T15254] CPU: 1 UID: 0 PID: 15254 Comm: syz.5.11092 Not tainted syzkaller #0 PREEMPT(full) 
[ 3075.404470][T15254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3075.404481][T15254] Call Trace:
[ 3075.404489][T15254]  <TASK>
[ 3075.404498][T15254]  dump_stack_lvl+0x189/0x250
[ 3075.404525][T15254]  ? __pfx____ratelimit+0x10/0x10
[ 3075.404549][T15254]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3075.404571][T15254]  ? __pfx__printk+0x10/0x10
[ 3075.404594][T15254]  ? __pfx___might_resched+0x10/0x10
[ 3075.404613][T15254]  ? fs_reclaim_acquire+0x7d/0x100
[ 3075.404634][T15254]  should_fail_ex+0x414/0x560
[ 3075.404664][T15254]  should_failslab+0xa8/0x100
[ 3075.404684][T15254]  kmem_cache_alloc_node_noprof+0x77/0x710
[ 3075.404707][T15254]  ? __alloc_skb+0x112/0x2d0
[ 3075.404723][T15254]  ? netlink_autobind+0xdb/0x300
[ 3075.404745][T15254]  __alloc_skb+0x112/0x2d0
[ 3075.404766][T15254]  netlink_sendmsg+0x5c6/0xb30
[ 3075.404791][T15254]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3075.404811][T15254]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 3075.404838][T15254]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 3075.404856][T15254]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 3075.404874][T15254]  __sock_sendmsg+0x21c/0x270
[ 3075.404900][T15254]  ____sys_sendmsg+0x505/0x830
[ 3075.404924][T15254]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 3075.404952][T15254]  ? import_iovec+0x74/0xa0
[ 3075.404977][T15254]  ___sys_sendmsg+0x21f/0x2a0
[ 3075.404998][T15254]  ? __pfx____sys_sendmsg+0x10/0x10
[ 3075.405055][T15254]  ? __fget_files+0x2a/0x420
[ 3075.405072][T15254]  ? __fget_files+0x3a0/0x420
[ 3075.405097][T15254]  __x64_sys_sendmsg+0x19b/0x260
[ 3075.405119][T15254]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 3075.405147][T15254]  ? __pfx_ksys_write+0x10/0x10
[ 3075.405174][T15254]  ? do_syscall_64+0xbe/0xfa0
[ 3075.405200][T15254]  do_syscall_64+0xfa/0xfa0
[ 3075.405222][T15254]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3075.405244][T15254]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3075.405262][T15254]  ? clear_bhb_loop+0x60/0xb0
[ 3075.405282][T15254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3075.405299][T15254] RIP: 0033:0x7f016a98f6c9
[ 3075.405315][T15254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 3075.405330][T15254] RSP: 002b:00007f016b787038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 3075.405349][T15254] RAX: ffffffffffffffda RBX: 00007f016abe5fa0 RCX: 00007f016a98f6c9
[ 3075.405362][T15254] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003
[ 3075.405375][T15254] RBP: 00007f016b787090 R08: 0000000000000000 R09: 0000000000000000
[ 3075.405386][T15254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 3075.405397][T15254] R13: 00007f016abe6038 R14: 00007f016abe5fa0 R15: 00007f016ad0fa28
[ 3075.405427][T15254]  </TASK>
[ 3075.813756][ T8402] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[ 3075.993730][ T8402] usb 2-1: Using ep0 maxpacket: 32
[ 3076.074428][ T8402] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config
[ 3076.139075][ T8402] usb 2-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=c1.1d
[ 3076.163473][ T8402] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3076.183751][ T8402] quatech2 2-1:24.0: Quatech 2nd gen USB to Serial Driver converter detected
[ 3076.230153][T14697] usb 4-1: USB disconnect, device number 14
[ 3076.395111][ T8402] usb 2-1: qt2_attach - failed to power on unit: -71
[ 3076.435131][ T8402] quatech2 2-1:24.0: probe with driver quatech2 failed with error -71
[ 3076.484610][ T8402] usb 2-1: USB disconnect, device number 120
[ 3076.741741][T15266] sg_write: data in/out 987/14 bytes for SCSI command 0x0-- guessing data in;
[ 3076.741741][T15266]    program syz.3.11094 not setting count and/or reply_len properly
[ 3077.041179][T15270] netlink: 136 bytes leftover after parsing attributes in process `syz.2.11096'.
[ 3077.644408][T14697] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 3077.814845][T15290] mac80211_hwsim hwsim73 syzkaller0: entered promiscuous mode
[ 3077.831170][T15290] mac80211_hwsim hwsim73 syzkaller0: entered allmulticast mode
[ 3077.956569][T14697] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 3077.967145][T14697] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 3078.170446][T14697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3078.232357][T14697] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 3078.308449][T14697] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 3078.470159][T15283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3078.483675][T15283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3078.826322][T15294] geneve4: entered promiscuous mode
[ 3078.867427][T15296] fuse: Bad value for 'user_id'
[ 3078.872466][T15296] fuse: Bad value for 'user_id'
[ 3078.964024][T15294] geneve4: entered allmulticast mode
[ 3079.287626][T15305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11105'.
[ 3079.747312][T15310] bond3: down delay (694) is not a multiple of miimon (15), value rounded to 690 ms
[ 3079.762228][T15310] bond3 (unregistering): Released all slaves
[ 3079.931154][T15316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3079.957830][T15316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3080.164785][T15319] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.11108'.
[ 3081.199910][T15325] netlink: 'syz.0.11110': attribute type 1 has an invalid length.
[ 3081.298740][T15328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3081.321098][T15328] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3081.590040][ T2271] usb 2-1: USB disconnect, device number 121
[ 3081.846198][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 3081.854403][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 3082.751542][T15349] sg_write: data in/out 987/14 bytes for SCSI command 0x0-- guessing data in;
[ 3082.751542][T15349]    program syz.2.11116 not setting count and/or reply_len properly
[ 3084.485371][T13461] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[ 3084.956169][T15368] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11122'.
[ 3085.623481][ T6837] usb 2-1: new low-speed USB device number 122 using dummy_hcd
[ 3085.798986][ T6837] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 3085.816787][ T6837] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 3085.842305][ T6837] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3085.869514][ T6837] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 3085.893560][ T6837] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 3085.918747][ T6837] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 3085.930926][ T6837] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 3085.954257][ T6837] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3086.021016][ T6837] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 3086.051508][ T6837] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 3086.092496][ T6837] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 3086.102462][ T6837] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[ 3086.148928][ T6837] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3086.193405][ T6837] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 3086.193512][T13461] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 3086.230551][ T6837] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[ 3086.266729][ T6837] usb 2-1: string descriptor 0 read error: -22
[ 3086.281315][ T6837] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 3086.312651][ T6837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3086.351752][ T6837] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 3086.394925][T13461] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 3086.541751][ T6837] usb 2-1: USB disconnect, device number 122
[ 3086.786651][T13461] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 3086.805434][T13461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 3086.852482][T13461] usb 4-1: Product: syz
[ 3086.863288][T13461] usb 4-1: Manufacturer: syz
[ 3086.923544][T13461] usb 4-1: SerialNumber: syz
[ 3087.432527][T15404] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11131'.
[ 3087.533848][T13461] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 3087.881981][   T30] kauditd_printk_skb: 148 callbacks suppressed
[ 3087.881998][   T30] audit: type=1326 audit(1762912628.856:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15408 comm="syz.5.11134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3087.886640][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11133'.
[ 3087.926537][   T30] audit: type=1326 audit(1762912628.856:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15408 comm="syz.5.11134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3087.951720][   T30] audit: type=1326 audit(1762912628.856:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15408 comm="syz.5.11134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3088.020724][   T30] audit: type=1326 audit(1762912628.856:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15408 comm="syz.5.11134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3088.079574][   T30] audit: type=1326 audit(1762912628.856:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15408 comm="syz.5.11134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3088.103726][   T30] audit: type=1326 audit(1762912628.906:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15408 comm="syz.5.11134" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3088.145270][T15414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3088.156012][T15414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3088.244028][T13461] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 3088.268968][   T30] audit: type=1326 audit(1762912629.246:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15413 comm="syz.0.11135" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd5d3b8f6c9 code=0x0
[ 3088.430060][T15410] team0: Port device team_slave_0 removed
[ 3088.447831][T13461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3088.493831][T13461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3088.511074][T13461] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3088.530289][T13461] usb 3-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[ 3088.542362][T13461] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3088.557573][T13461] usb 3-1: config 0 descriptor??
[ 3088.621770][T15426] usb usb8: usbfs: process 15426 (syz.1.11136) did not claim interface 0 before use
[ 3088.776061][T15407] tipc: Can't bind to reserved service type 1
[ 3089.407948][T13461] usb 3-1: USB disconnect, device number 8
[ 3089.495878][ T2271] usb 4-1: USB disconnect, device number 16
[ 3089.503841][ T2271] usblp0: removed
[ 3093.302198][T15496] QAT: failed to copy from user cfg_data.
[ 3094.133378][T13461] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 3094.166219][T12621] Bluetooth: hci1: command 0x041b tx timeout
[ 3094.285027][T13461] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3094.295515][T13461] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3
[ 3094.309072][T13461] usb 2-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[ 3094.319923][T13461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3094.334432][T13461] usb 2-1: config 0 descriptor??
[ 3095.218240][T15529] netlink: get zone limit has 4 unknown bytes
[ 3095.251162][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3095.313094][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3095.353846][T13461] Bluetooth: Can't get state to change to load configuration err
[ 3095.383367][ T8593] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 3097.253448][T13461] Bluetooth: Loading sysconfig file failed
[ 3097.299386][T13461] ath3k 2-1:0.0: probe with driver ath3k failed with error -16
[ 3097.378066][T13461] usb 2-1: USB disconnect, device number 123
[ 3097.468554][ T8593] usb 4-1: config index 0 descriptor too short (expected 1051, got 27)
[ 3097.486605][ T8593] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[ 3097.503585][ T8593] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 3097.512503][ T8593] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149
[ 3097.566942][ T8593] usb 4-1: config 0 interface 0 has no altsetting 0
[ 3097.591618][ T8593] usb 4-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3
[ 3097.623660][ T8593] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3097.642940][ T8593] usb 4-1: Product: syz
[ 3097.653005][ T8593] usb 4-1: Manufacturer: syz
[ 3097.669876][ T8593] usb 4-1: SerialNumber: syz
[ 3097.685602][ T8593] usb 4-1: config 0 descriptor??
[ 3097.700720][T15525] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 3097.941457][ T8593] keyspan 4-1:0.0: Keyspan 4 port adapter converter detected
[ 3097.955172][ T8593] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7
[ 3097.978388][ T8593] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81
[ 3097.993131][ T8593] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1
[ 3098.002606][ T8593] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0
[ 3098.017823][ T8593] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 82
[ 3098.026394][ T8593] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2
[ 3098.040355][ T8593] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1
[ 3098.050666][ T8593] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83
[ 3098.059359][ T8593] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3
[ 3098.069822][ T8593] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2
[ 3098.082714][ T8593] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 84
[ 3098.091032][ T8593] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4
[ 3098.116757][ T8593] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3
[ 3098.162961][ T8593] usb 4-1: USB disconnect, device number 17
[ 3098.186744][ T8593] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0
[ 3098.226533][ T8593] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1
[ 3098.254673][ T8593] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2
[ 3098.268347][T15544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3098.273184][ T8593] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3
[ 3098.289616][ T8593] keyspan 4-1:0.0: device disconnected
[ 3098.346238][T15544] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3098.533542][T15546] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11169'.
[ 3098.585553][T15547] loop2: detected capacity change from 0 to 7
[ 3098.594045][T15547] Dev loop2: unable to read RDB block 7
[ 3098.606700][T15547]  loop2: unable to read partition table
[ 3098.612551][T15547] loop2: partition table beyond EOD, truncated
[ 3098.626708][T15547] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 3098.659771][T15548] netlink: 72 bytes leftover after parsing attributes in process `syz.2.11170'.
[ 3098.685396][T15547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11170'.
[ 3098.853940][T15550] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[ 3098.860455][T15550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 3098.872100][T15550] vhci_hcd vhci_hcd.0: Device attached
[ 3099.103357][ T8593] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[ 3099.123781][T13461] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 3099.197086][T15564] "syz.1.11175" (15564) uses obsolete ecb(arc4) skcipher
[ 3099.294393][T13461] usb 4-1: Using ep0 maxpacket: 32
[ 3099.349461][T13461] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[ 3099.357937][T13461] usb 4-1: config 0 has no interface number 0
[ 3099.377371][T13461] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[ 3099.393499][T13461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3099.410393][T13461] usb 4-1: Product: syz
[ 3099.418071][T13461] usb 4-1: Manufacturer: syz
[ 3099.426954][T13461] usb 4-1: SerialNumber: syz
[ 3099.447378][T13461] usb 4-1: config 0 descriptor??
[ 3099.456850][T13461] hub 4-1:0.89: bad descriptor, ignoring hub
[ 3099.471695][T13461] hub 4-1:0.89: probe with driver hub failed with error -5
[ 3099.513445][ T2277] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[ 3099.522121][T13461] option 4-1:0.89: GSM modem (1-port) converter detected
[ 3099.611187][T13461] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0
[ 3099.666241][T15550] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 3099.690382][T13461] usb 4-1: USB disconnect, device number 18
[ 3099.693553][T15552] vhci_hcd: connection reset by peer
[ 3099.723608][T11537] vhci_hcd: stop threads
[ 3099.727976][T11537] vhci_hcd: release socket
[ 3099.739330][T11537] vhci_hcd: disconnect device
[ 3099.838275][T13461] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[ 3099.867312][ T2277] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3099.917861][T13461] option 4-1:0.89: device disconnected
[ 3099.943380][ T2277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 3099.984862][ T2277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 107, setting to 64
[ 3100.067973][ T2277] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[ 3100.077834][ T2277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3100.086216][ T2277] usb 2-1: Product: syz
[ 3100.090442][ T2277] usb 2-1: Manufacturer: syz
[ 3100.095148][ T2277] usb 2-1: SerialNumber: syz
[ 3100.101665][ T2277] usb 2-1: config 0 descriptor??
[ 3100.134907][T15567] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 3100.169910][ T2277] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input375
[ 3100.184208][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.192623][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.200016][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.207316][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.214702][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.222003][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.229359][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.236856][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.244209][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.251575][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.259044][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.266392][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.273715][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.281078][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.288454][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.295807][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.303179][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.310648][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.318077][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.326126][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.333468][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.340812][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.348139][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.355615][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.362920][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.370269][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.377620][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.385081][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.392410][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.399743][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.407307][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.414633][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.421983][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.429357][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.436689][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.444037][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.451377][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.458703][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.466061][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.473396][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.480728][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.488082][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.495517][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.502891][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.510340][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.517656][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.525003][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.532344][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.539704][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.547079][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.554446][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.561782][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.569251][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.576594][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.583392][ T6837] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 3100.583936][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.601391][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.608724][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.616052][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.623363][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.630704][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.638053][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.645392][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.652701][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.660100][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.667472][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.674846][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.682231][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.689624][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.696987][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.704348][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.711683][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.719023][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.726513][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.734985][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.742327][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.743378][ T6837] usb 4-1: Using ep0 maxpacket: 16
[ 3100.749694][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.763331][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.770693][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.778039][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.785423][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.791384][ T6837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 3100.792774][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.813339][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.820693][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.827930][ T6837] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 3100.828023][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.840040][ T6837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3100.844288][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.859430][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.866001][ T6837] usb 4-1: Product: syz
[ 3100.866739][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.878185][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.879623][ T6837] usb 4-1: Manufacturer: syz
[ 3100.885584][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.897388][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.898196][ T6837] usb 4-1: SerialNumber: syz
[ 3100.904734][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.916588][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.923870][ T6837] usb 4-1: config 0 descriptor??
[ 3100.923919][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.936147][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.943468][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.950795][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.958139][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.965466][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.969389][ T6837] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 3100.972802][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.989181][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3100.996615][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.000748][ T6837] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 3101.003942][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.020277][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.027633][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.035018][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.042372][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.049908][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.057243][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.064604][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.071944][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.079293][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.086621][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.093957][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.101301][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.108694][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.116045][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.123359][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.130699][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.138041][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.145392][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.152729][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.160065][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.167390][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.174728][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.182065][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.189418][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.196746][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.204068][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.211416][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.218740][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.226121][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.233446][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.240771][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.248183][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.255575][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.262902][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.270233][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.277561][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.284894][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.292214][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.299535][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.306873][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.314221][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.321560][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.328894][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.336218][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.343562][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.350892][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.358215][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.365848][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.373182][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.380512][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.387885][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.395214][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.402547][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.409884][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.417374][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.424736][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.432031][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.439369][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.446776][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.454085][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.461408][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.468796][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.476127][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.483448][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.490759][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.498083][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.505413][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.512729][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.520033][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.527361][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.534745][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.542060][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.549408][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.556775][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.564118][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.571439][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.578741][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.586073][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.593372][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.600667][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.612002][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.619477][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.626820][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.634124][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.641453][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.648907][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.656186][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.663479][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.670788][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.678170][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.679530][ T6837] em28xx 4-1:0.0: chip ID is em2874
[ 3101.685465][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.697822][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.705158][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.712489][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.719829][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.727166][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.734531][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.741856][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.749200][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.756651][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.764059][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.771875][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.779449][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.786841][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.794168][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.801509][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.809006][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.816356][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.823745][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.831158][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.838481][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.845850][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.853197][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.860539][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.867980][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.875599][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.882983][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.890834][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.898184][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.905503][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.912840][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.920218][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.927601][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.934923][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.942255][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.949559][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.956843][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.964316][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.971632][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.978994][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.986495][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3101.993835][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.001161][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.008505][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.015836][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.023136][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.030464][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.037882][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.045208][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.052504][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.059796][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.067132][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.074474][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.081784][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.089080][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.096369][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.103795][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.111114][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.118406][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.125804][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.133129][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.140424][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.147720][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.155020][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.162289][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.169609][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.176951][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.184480][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.191767][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.199060][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.206332][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.213773][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.221079][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.228400][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.235758][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.243047][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.250430][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.257754][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.265096][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.272391][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.279699][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.287045][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.294382][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.301688][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.309033][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.316344][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.325213][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.332679][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.340027][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.347312][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.354746][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.362152][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.369725][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.377046][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.384385][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.391728][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.399072][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.406797][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.414167][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.421510][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.428900][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.436413][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.443839][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.451189][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.458628][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.466030][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.473370][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.480705][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.488234][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.495632][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.502975][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.510295][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.517751][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.525135][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.532469][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.539806][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.547118][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.554435][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.561731][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.569023][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.576350][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.583716][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.591022][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.598470][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.605762][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.613034][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.620308][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.627577][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.634850][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.642120][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.652281][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.659569][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.666883][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.674183][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.681498][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.688931][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.696345][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.703684][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.710987][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.718312][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.725706][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.733016][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.740347][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.747685][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.755040][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.762353][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.769680][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.776981][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.784320][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.791744][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.799069][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.803476][ T5183] usb 2-1: control msg error: -71
[ 3102.806368][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.819654][    C1] usb 2-1: pegasus_irq - nonzero urb status received: -71
[ 3102.826878][    C1] usb 2-1: pegasus_irq - usb_submit_urb failed with result -1
[ 3102.876947][ T6837] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 3102.885338][ T6837] em28xx 4-1:0.0: board has no eeprom
[ 3103.080628][ T2277] usb 2-1: USB disconnect, device number 124
[ 3103.164260][ T6837] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 3103.187252][ T6837] em28xx 4-1:0.0: dvb set to bulk mode.
[ 3103.233366][ T2271] em28xx 4-1:0.0: Binding DVB extension
[ 3103.520094][ T2277] usb 4-1: USB disconnect, device number 19
[ 3103.540376][ T2277] em28xx 4-1:0.0: Disconnecting em28xx
[ 3103.615921][T15598] lo: entered allmulticast mode
[ 3103.640904][ T2271] em28xx 4-1:0.0: Registering input extension
[ 3103.774153][ T2271] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[ 3103.783539][ T2271] Registered IR keymap rc-empty
[ 3103.792940][ T2271] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 3103.805459][ T2271] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input376
[ 3103.828832][ T2271] em28xx 4-1:0.0: Input extension successfully initialized
[ 3103.837002][ T2277] em28xx 4-1:0.0: Closing input extension
[ 3103.851103][T15597] lo: left allmulticast mode
[ 3103.877612][ T2277] em28xx 4-1:0.0: Freeing device
[ 3103.894595][T15606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3103.906920][T15606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3104.183643][   T30] audit: type=1326 audit(1762912645.146:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.227206][   T30] audit: type=1326 audit(1762912645.146:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.250181][ T8593] vhci_hcd: vhci_device speed not set
[ 3104.279319][   T30] audit: type=1326 audit(1762912645.146:5192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.342160][   T30] audit: type=1326 audit(1762912645.146:5193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.365266][   T30] audit: type=1326 audit(1762912645.146:5194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.410307][   T30] audit: type=1326 audit(1762912645.146:5195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.457740][   T30] audit: type=1326 audit(1762912645.146:5196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.480671][   T30] audit: type=1326 audit(1762912645.146:5197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.483358][ T2271] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 3104.551927][   T30] audit: type=1326 audit(1762912645.146:5198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.677534][   T30] audit: type=1326 audit(1762912645.146:5199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15615 comm="syz.5.11188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016a98f6c9 code=0x7ffc0000
[ 3104.756455][ T2271] usb 2-1: Using ep0 maxpacket: 16
[ 3104.770408][ T2271] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3104.788576][ T2271] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 3104.810290][ T2271] usb 2-1: config 1 has no interface number 1
[ 3104.824029][ T2271] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[ 3104.845549][ T2271] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 3104.870080][ T2271] usb 2-1: config 1 interface 2 has no altsetting 0
[ 3104.889717][ T2271] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3104.920562][ T2271] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3104.942120][ T2271] usb 2-1: Product: syz
[ 3104.951771][ T2271] usb 2-1: Manufacturer: syz
[ 3104.964901][ T2271] usb 2-1: SerialNumber: syz
[ 3107.375432][ T2271] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 3107.400169][ T2271] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[ 3107.471516][ T2271] usb 2-1: selecting invalid altsetting 0
[ 3107.491346][ T2271] usb 2-1: selecting invalid altsetting 0
[ 3107.593664][ T2271] usb 2-1: USB disconnect, device number 125
[ 3107.720542][T15660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3107.779926][T15660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3107.861809][T15660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3107.907712][T15660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3108.794304][T15676] ipt_ECN: cannot use operation on non-tcp rule
[ 3110.173383][ T2277] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 3110.344145][ T2277] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3110.373535][ T2277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 3110.433386][ T2277] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 3110.451476][ T2277] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 3110.472217][ T2277] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 3110.487372][ T2277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3110.496396][T15691] fuse: Bad value for 'user_id'
[ 3110.502525][ T2277] usb 2-1: config 0 descriptor??
[ 3110.509581][T15691] fuse: Bad value for 'user_id'
[ 3110.958876][ T2277] plantronics 0003:047F:FFFF.00DA: unknown main item tag 0x2
[ 3111.008441][ T2277] plantronics 0003:047F:FFFF.00DA: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 3111.244902][T13846] usb 2-1: USB disconnect, device number 126
[ 3111.611077][T15710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3111.645278][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 3111.645293][   T30] audit: type=1326 audit(1762912652.626:5208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15712 comm="syz.3.11214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f731658f6c9 code=0x0
[ 3111.694156][T15710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3111.702104][T13846] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[ 3111.737852][T15710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11212'.
[ 3111.747173][T15710] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 3111.926461][T13846] usb 2-1: not running at top speed; connect to a high speed hub
[ 3111.950210][T13846] usb 2-1: config 95 has an invalid interface number: 1 but max is 0
[ 3111.960197][T13846] usb 2-1: config 95 has no interface number 0
[ 3112.010846][T13846] usb 2-1: config 95 interface 1 has no altsetting 0
[ 3112.034846][T13846] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79
[ 3112.056657][T13846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3112.094979][T13846] usb 2-1: Product: syz
[ 3112.102895][T13846] usb 2-1: Manufacturer: syz
[ 3112.161205][T13846] usb 2-1: SerialNumber: syz
[ 3112.518684][T13846] usb 2-1: USB disconnect, device number 127
[ 3113.335628][T15743] sch_tbf: burst 479 is lower than device lo mtu (65550) !
[ 3113.843428][T13461] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 3114.003388][T13461] usb 4-1: Using ep0 maxpacket: 32
[ 3114.011196][T13461] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[ 3114.022004][T13461] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 3114.040584][T13461] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 3114.052077][T13461] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 3114.068411][T13461] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[ 3114.077964][T13461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3114.098997][T13461] usb 4-1: Product: syz
[ 3114.104338][T13461] usb 4-1: Manufacturer: syz
[ 3114.109039][T13461] usb 4-1: SerialNumber: syz
[ 3114.158084][    C1] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71)
[ 3114.187274][T13461] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input378
[ 3114.373484][T13461] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[ 3114.389994][T13461]  (id 0x00)
[ 3114.511809][T15759] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11224'.
[ 3114.533471][T13461] rc_core: IR keymap rc-imon-pad not found
[ 3114.539819][T13461] Registered IR keymap rc-empty
[ 3114.546689][T13461] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[ 3114.555150][T15759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3114.570112][T13461] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 3114.574273][T15759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3114.614644][T13461] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0
[ 3114.627662][T13461] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input379
[ 3114.642416][T13461] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:20> initialized
[ 3114.838714][T15747] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 3114.884998][T13461] usb 4-1: USB disconnect, device number 20
[ 3115.969832][T15788] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 3116.001387][T15788] team0: Port device batadv2 added
[ 3116.991247][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11236'.
[ 3117.053855][   T31] INFO: task kworker/0:13:2282 blocked for more than 143 seconds.
[ 3117.061948][   T31]       Not tainted syzkaller #0
[ 3117.072057][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3117.089737][   T31] task:kworker/0:13    state:D stack:15400 pid:2282  tgid:2282  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 3117.119180][   T31] Workqueue: usb_hub_wq hub_event
[ 3117.125052][   T31] Call Trace:
[ 3117.131770][   T31]  <TASK>
[ 3117.144990][   T31]  __schedule+0x1798/0x4cc0
[ 3117.160801][   T31]  ? __pfx___schedule+0x10/0x10
[ 3117.165880][   T31]  ? schedule+0x91/0x360
[ 3117.170219][   T31]  schedule+0x165/0x360
[ 3117.175115][   T31]  schedule_timeout+0x9a/0x270
[ 3117.180010][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 3117.185617][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3117.191060][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3117.221358][   T31]  ? wait_for_completion+0x267/0x5d0
[ 3117.241140][   T31]  wait_for_completion+0x2bf/0x5d0
[ 3117.263367][ T2271] delete_channel: no stack
[ 3117.271375][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 3117.297278][   T31]  i2c_del_adapter+0x581/0x6e0
[ 3117.313132][   T31]  ? dvb_usb_adapter_exit+0xd7/0x240
[ 3117.333181][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[ 3117.344377][   T31]  ? dvb_usb_adapter_exit+0xd7/0x240
[ 3117.351891][   T31]  ? kfree+0x4d/0x6d0
[ 3117.356780][   T31]  dvb_usb_i2c_exit+0x64/0xb0
[ 3117.361532][   T31]  dvb_usb_device_exit+0x1be/0x350
[ 3117.366992][ T8593] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 3117.375644][   T31]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[ 3117.392906][   T31]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 3117.412629][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3117.419503][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 3117.425718][   T31]  cxusb_probe+0x603/0x700
[ 3117.430260][   T31]  ? __pfx_cxusb_probe+0x10/0x10
[ 3117.436473][   T31]  ? __pm_runtime_set_status+0x785/0xa50
[ 3117.442209][   T31]  usb_probe_interface+0x668/0xc30
[ 3117.449103][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[ 3117.455758][   T31]  really_probe+0x26d/0x9e0
[ 3117.460394][   T31]  __driver_probe_device+0x18c/0x2f0
[ 3117.466429][   T31]  driver_probe_device+0x4f/0x430
[ 3117.471786][   T31]  __device_attach_driver+0x2ce/0x530
[ 3117.477707][   T31]  bus_for_each_drv+0x251/0x2e0
[ 3117.482756][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 3117.490613][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 3117.496547][   T31]  __device_attach+0x2b8/0x400
[ 3117.501581][   T31]  ? __pfx___device_attach+0x10/0x10
[ 3117.508509][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 3117.514746][   T31]  bus_probe_device+0x185/0x260
[ 3117.519852][   T31]  device_add+0x7b6/0xb50
[ 3117.528405][   T31]  usb_set_configuration+0x1a87/0x20e0
[ 3117.536009][   T31]  usb_generic_driver_probe+0x8d/0x150
[ 3117.541883][   T31]  usb_probe_device+0x1c4/0x390
[ 3117.547385][ T8593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 3117.559452][ T8593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 3117.569893][ T8593] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 3117.579419][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[ 3117.585415][   T31]  really_probe+0x26d/0x9e0
[ 3117.590098][ T8593] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3117.600394][   T31]  __driver_probe_device+0x18c/0x2f0
[ 3117.607963][   T31]  driver_probe_device+0x4f/0x430
[ 3117.617407][   T31]  __device_attach_driver+0x2ce/0x530
[ 3117.624385][ T8593] usb 3-1: config 0 descriptor??
[ 3117.630353][   T31]  bus_for_each_drv+0x251/0x2e0
[ 3117.639564][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[ 3117.646174][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 3117.651987][   T31]  __device_attach+0x2b8/0x400
[ 3117.657497][   T31]  ? __pfx___device_attach+0x10/0x10
[ 3117.663086][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 3117.674525][   T31]  bus_probe_device+0x185/0x260
[ 3117.679555][   T31]  device_add+0x7b6/0xb50
[ 3117.689178][   T31]  usb_new_device+0xa39/0x16f0
[ 3117.695383][   T31]  ? __pfx_usb_new_device+0x10/0x10
[ 3117.700904][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3117.708504][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3117.714352][   T31]  hub_event+0x2958/0x4a20
[ 3117.719110][   T31]  ? __pfx_hub_event+0x10/0x10
[ 3117.725332][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 3117.731554][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3117.742265][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 3117.748824][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 3117.755149][   T31]  process_scheduled_works+0xae1/0x17b0
[ 3117.761061][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3117.768181][   T31]  worker_thread+0x8a0/0xda0
[ 3117.774845][   T31]  kthread+0x711/0x8a0
[ 3117.779268][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 3117.785227][   T31]  ? __pfx_kthread+0x10/0x10
[ 3117.789998][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3117.796045][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3117.801466][   T31]  ? __pfx_kthread+0x10/0x10
[ 3117.806846][   T31]  ret_from_fork+0x4bc/0x870
[ 3117.811756][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3117.818922][   T31]  ? __switch_to_asm+0x39/0x70
[ 3117.824218][   T31]  ? __switch_to_asm+0x33/0x70
[ 3117.829300][   T31]  ? __pfx_kthread+0x10/0x10
[ 3117.835591][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3117.841738][   T31]  </TASK>
[ 3117.847897][   T31] 
[ 3117.847897][   T31] Showing all locks held in the system:
[ 3117.873395][   T31] 1 lock held by khungtaskd/31:
[ 3117.913556][   T31]  #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 3117.925897][   T31] 2 locks held by getty/5585:
[ 3117.930601][   T31]  #0: ffff888033a0b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 3117.940822][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 3117.951385][   T31] 5 locks held by kworker/0:13/2282:
[ 3117.957058][   T31]  #0: ffff88801b2ddd48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 3117.968872][   T31]  #1: ffffc9000c9d7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 3117.982495][   T31]  #2: ffff88823be58198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 3117.994133][   T31]  #3: ffff888027070198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 3118.004034][   T31]  #4: ffff88806243c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400
[ 3118.015106][   T31] 1 lock held by syz-executor/8291:
[ 3118.020547][   T31]  #0: ffffffff8df43138 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[ 3118.037083][   T31] 4 locks held by udevd/8552:
[ 3118.045154][ T8593] arvo 0003:1E7D:30D4.00DB: unbalanced collection at end of report description
[ 3118.054801][ T8593] arvo 0003:1E7D:30D4.00DB: parse failed
[ 3118.060477][ T8593] arvo 0003:1E7D:30D4.00DB: probe with driver arvo failed with error -22
[ 3118.069454][   T31]  #0: ffff888075391c30 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20
[ 3118.081736][   T31]  #1: ffff888062c46888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420
[ 3118.096707][   T31]  #2: ffff88803fd31968 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[ 3118.107775][   T31]  #3: ffff888027070198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[ 3118.120793][   T31] 1 lock held by syz.5.11237/15803:
[ 3118.126930][   T31]  #0: ffffffff8df43000 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[ 3118.137444][   T31] 4 locks held by syz.5.11237/15808:
[ 3118.142959][   T31] 
[ 3118.146219][   T31] =============================================
[ 3118.146219][   T31] 
[ 3118.155266][   T31] NMI backtrace for cpu 1
[ 3118.155282][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 3118.155299][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3118.155309][   T31] Call Trace:
[ 3118.155316][   T31]  <TASK>
[ 3118.155324][   T31]  dump_stack_lvl+0x189/0x250
[ 3118.155352][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3118.155383][   T31]  ? __pfx__printk+0x10/0x10
[ 3118.155412][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 3118.155435][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 3118.155456][   T31]  ? __pfx__printk+0x10/0x10
[ 3118.155477][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3118.155504][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 3118.155525][   T31]  watchdog+0xf60/0xfa0
[ 3118.155548][   T31]  ? watchdog+0x1e2/0xfa0
[ 3118.155570][   T31]  kthread+0x711/0x8a0
[ 3118.155593][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3118.155610][   T31]  ? __pfx_kthread+0x10/0x10
[ 3118.155632][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3118.155654][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3118.155674][   T31]  ? __pfx_kthread+0x10/0x10
[ 3118.155697][   T31]  ret_from_fork+0x4bc/0x870
[ 3118.155717][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3118.155740][   T31]  ? __switch_to_asm+0x39/0x70
[ 3118.155754][   T31]  ? __switch_to_asm+0x33/0x70
[ 3118.155766][   T31]  ? __pfx_kthread+0x10/0x10
[ 3118.155789][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3118.155819][   T31]  </TASK>
[ 3118.155827][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 3118.302221][    C0] NMI backtrace for cpu 0
[ 3118.302248][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[ 3118.302265][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3118.302275][    C0] Workqueue: events_unbound toggle_allocation_gate
[ 3118.302296][    C0] RIP: 0010:__schedule+0x1118/0x4cc0
[ 3118.302316][    C0] Code: 8b bc 24 a0 00 00 00 e8 46 7d de f6 48 8b 54 24 08 48 8b b2 98 05 00 00 48 89 df e8 42 20 2e f6 48 8b 44 24 58 42 80 3c 20 00 <48> 8b 9c 24 a0 00 00 00 74 08 48 89 df e8 16 7d de f6 41 bc e0 09
[ 3118.302328][    C0] RSP: 0018:ffffc900001174a0 EFLAGS: 00000046
[ 3118.302340][    C0] RAX: 1ffff11005b8c843 RBX: ffff888030512040 RCX: ffff88801c6cdac0
[ 3118.302351][    C0] RDX: 0000000040000000 RSI: 0000000000000002 RDI: 0000000000000000
[ 3118.302361][    C0] RBP: ffffc900001176b0 R08: ffff88805bad33b3 R09: 1ffff1100b75a676
[ 3118.302372][    C0] R10: dffffc0000000000 R11: ffffed100b75a677 R12: dffffc0000000000
[ 3118.302383][    C0] R13: 1ffff1101710756e R14: ffff88801c6ce060 R15: 1ffff110038d9c0c
[ 3118.302394][    C0] FS:  0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000
[ 3118.302406][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3118.302417][    C0] CR2: 00002000003a2030 CR3: 00000000678e4000 CR4: 00000000003526f0
[ 3118.302430][    C0] Call Trace:
[ 3118.302436][    C0]  <TASK>
[ 3118.302446][    C0]  ? switch_mm_irqs_off+0x5c2/0x7b0
[ 3118.302475][    C0]  ? __pfx___schedule+0x10/0x10
[ 3118.302493][    C0]  ? smp_call_function_many_cond+0xd4b/0x12d0
[ 3118.302512][    C0]  ? smp_call_function_many_cond+0xd33/0x12d0
[ 3118.302532][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 3118.302550][    C0]  ? preempt_schedule+0xae/0xc0
[ 3118.302567][    C0]  preempt_schedule_common+0x83/0xd0
[ 3118.302585][    C0]  ? __pfx_do_sync_core+0x10/0x10
[ 3118.302602][    C0]  preempt_schedule+0xae/0xc0
[ 3118.302619][    C0]  ? __pfx_preempt_schedule+0x10/0x10
[ 3118.302635][    C0]  ? perf_event_text_poke+0x13d/0x190
[ 3118.302655][    C0]  ? __kvmalloc_node_noprof+0x170/0x910
[ 3118.302674][    C0]  ? __pfx_perf_event_text_poke+0x10/0x10
[ 3118.302699][    C0]  preempt_schedule_thunk+0x16/0x30
[ 3118.302716][    C0]  ? on_each_cpu_cond_mask+0x75/0x80
[ 3118.302734][    C0]  on_each_cpu_cond_mask+0x7a/0x80
[ 3118.302752][    C0]  smp_text_poke_batch_finish+0xb44/0x1130
[ 3118.302774][    C0]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[ 3118.302795][    C0]  ? arch_jump_label_transform_queue+0x97/0x110
[ 3118.302819][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[ 3118.302839][    C0]  static_key_disable_cpuslocked+0xc5/0x1b0
[ 3118.302860][    C0]  static_key_disable+0x1a/0x20
[ 3118.302877][    C0]  toggle_allocation_gate+0x1a1/0x240
[ 3118.302892][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[ 3118.302905][    C0]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 3118.302928][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 3118.302943][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 3118.302959][    C0]  process_scheduled_works+0xae1/0x17b0
[ 3118.302986][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3118.303008][    C0]  worker_thread+0x8a0/0xda0
[ 3118.303035][    C0]  kthread+0x711/0x8a0
[ 3118.303054][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 3118.303069][    C0]  ? __pfx_kthread+0x10/0x10
[ 3118.303087][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3118.303104][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3118.303122][    C0]  ? __pfx_kthread+0x10/0x10
[ 3118.303139][    C0]  ret_from_fork+0x4bc/0x870
[ 3118.303155][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 3118.303173][    C0]  ? __switch_to_asm+0x39/0x70
[ 3118.303186][    C0]  ? __switch_to_asm+0x33/0x70
[ 3118.303197][    C0]  ? __pfx_kthread+0x10/0x10
[ 3118.303215][    C0]  ret_from_fork_asm+0x1a/0x30
[ 3118.303238][    C0]  </TASK>
[ 3118.672670][ T8593] usb 3-1: USB disconnect, device number 9
[ 3122.194622][ T5198] udevd[5198]: worker [8552] /devices/platform/dummy_hcd.5/usb6/6-1 is taking a long time