last executing test programs:

21m52.258829836s ago: executing program 32 (id=14):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0)
ioctl$TCSBRKP(r2, 0x5425, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)

21m43.288816335s ago: executing program 33 (id=24):
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
fanotify_init(0x200, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './control\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f00000000c0), 0x253, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
rmdir(0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0)
listen(r2, 0xd3)
r3 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r3)
sendmsg$TIPC_NL_NET_SET(r3, 0x0, 0x4008014)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a3"], 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')

21m34.292794338s ago: executing program 34 (id=35):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000002c0)=0x1)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x1, 0xec, 0x9, 0xb3}, 0x6)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4008800)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2})
ioctl$TIOCGPGRP(r2, 0x5437, 0x0)

20m50.984504942s ago: executing program 35 (id=67):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x8000)
r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r3 = socket$inet6(0xa, 0x80003, 0xff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x70bd29, 0x80, {0x2, 0x18, 0x10, 0x0, 0x0, 0x0, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
prctl$PR_SCHED_CORE(0x26, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x840000000002, 0x3, 0xff)
getgroups(0x0, 0x0)
syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000006c40)={&(0x7f0000000300)={0x50, 0x0, 0xe5e2, {0x7, 0x2b, 0x0, 0x40401164, 0x8, 0xff, 0x0, 0x3, 0x0, 0x0, 0x1, 0xfffffffe}}, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x6, {0xfffffffffffffff2}}, &(0x7f0000000200)={0x18, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x7}}, &(0x7f0000000680)={0x12, 0x0, 0x6, {'&\x00'}}, &(0x7f00000006c0)={0x20, 0x0, 0x5432, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000069c0)={0xa0, 0x0, 0x7ff, {{0x5, 0x2, 0x0, 0x3, 0x0, 0x8, {0x4, 0x4, 0x5, 0xb5, 0x2, 0x9, 0xb7f, 0x1, 0x4d1, 0x6000, 0x63, 0x0, 0x0, 0xd2, 0xe}}, {0x0, 0x18}}}, &(0x7f0000006a80)={0x20, 0x0, 0x0, {0x1000, 0x0, 0x10001, 0xc84}}, &(0x7f0000006b00)={0x130, 0xfffffffffffffff5, 0xf, {0x3, 0x9d, 0x0, '\x00', {0x2, 0xb, 0x6, 0x7, 0x0, 0x0, 0x6000, '\x00', 0x6, 0x9, 0x2, 0x100, {0x2, 0x1e24}, {0x9, 0xfff}, {0x8, 0x40}, {0x5, 0xcadd}, 0x4, 0x800, 0xffff, 0x1}}}})
ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000000))
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f00000003c0))
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0)

20m35.417932808s ago: executing program 36 (id=76):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f00000000c0)=0x32)
ioctl$CEC_S_MODE(r1, 0x40046109, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x44}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffe, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bind$isdn(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0)
ioctl$TCSBRKP(r3, 0x5425, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TCSETSW2(r4, 0x5408, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800})
ioctl$TIOCGPGRP(r4, 0x5437, 0x0)

20m29.615643374s ago: executing program 37 (id=38):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000000c0)=0x3)
getgroups(0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)=<r2=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c81, 0x0)
unshare(0x2a020400)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc811}, 0x40000)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x310)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e22, 0x0, @empty}}}, 0x108)
read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x2020)
close(r3)
fsopen(&(0x7f00000000c0)='hfs\x00', 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
membarrier(0x10, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2}, 0x20008010)

20m8.073062679s ago: executing program 38 (id=91):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040800)
r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x500000000, 0x40000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0)
mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
shmdt(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}]}, 0x10)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x88}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
poll(0x0, 0x0, 0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bond0\x00'})

18m41.117982678s ago: executing program 39 (id=136):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
recvfrom(0xffffffffffffffff, &(0x7f0000000580)=""/150, 0x96, 0x12143, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @empty}, 0x2, 0x2, 0x1, 0x3}}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&\x00'], 0x2c}}, 0x800)
recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000480), 0xba, 0x280802)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$qrtrtun(r2, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='lp\x00', 0x3)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendmmsg$inet(r3, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)="86f02c2b1fd65cc55f6cd20ca40e9f671d415246f7ac04b7b9612df49608cc4758bebf84b3b875f4e3469dafb8456ca0855c46b29e1bad9a6227cb162e7ab938871e5a6cd782a5a27f03eaf5803928a18d", 0x51}], 0x1}}], 0x1, 0x20040010)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
sendto$inet(r3, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

18m32.385783125s ago: executing program 40 (id=83):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0000, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

18m20.305723617s ago: executing program 41 (id=152):
r0 = socket(0x15, 0x5, 0x5)
bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r6 = socket$key(0xf, 0x3, 0x2)
r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xbe)
sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x10}}, 0x0)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000000c0))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0xfffffff8, 0x0, 0xfffbfffd, 0x3, 0x4f, "0c41920887e8d2b791f19dd026d76d7fcb366b", 0x4, 0x200})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00')

17m25.550335225s ago: executing program 42 (id=144):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000340)=[0x0])
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x15)
getsockopt$inet6_int(r1, 0x29, 0x19, 0x0, &(0x7f0000000080))
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000006c0)=@v3={0x3000000, [{0x3, 0x2}, {0x9, 0x56}]}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20)

17m16.269728156s ago: executing program 43 (id=199):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
socket$packet(0x11, 0x3, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x800)
r5 = syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(0x0, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000430001"], 0x24}}, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000038000187000700"/20], 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x4000000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd0203030009000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="456688afd2a3e5bc2bc4d71b92572c67726f75705f69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r9, &(0x7f0000006380)={0x2020}, 0x2020)

16m14.85308632s ago: executing program 44 (id=270):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r4 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12)

15m46.716385511s ago: executing program 45 (id=343):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x3, 0x822b01)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

14m48.277719012s ago: executing program 46 (id=457):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
socket(0x2d, 0x2, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r2, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@newqdisc={0x18c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x1, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x10000}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8, 0x4, 0x2, 0x1, 0x7}}]}}}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x7, 0x8, 0xe, 0x1, 0x8000, 0x0, 0x2}}, {0x8, 0x2, [0x71d7, 0x6]}}, {{0x1c, 0x1, {0x7, 0x9, 0x38, 0x7, 0x5d7163f3dc93e8b2, 0x2, 0x7f, 0x7}}, {0x12, 0x2, [0x6, 0x7, 0x76a7, 0x400, 0x7, 0x1, 0x217d]}}, {{0x1c, 0x1, {0x0, 0x30, 0x8, 0x1, 0x0, 0xf, 0x5, 0x3}}, {0xa, 0x2, [0x6, 0x10, 0x2]}}, {{0x1c, 0x1, {0x7, 0x9, 0x14a, 0x5c41, 0x1, 0x6, 0x4, 0x3}}, {0xa, 0x2, [0x3, 0x9, 0x0]}}, {{0x1c, 0x1, {0x3, 0x3, 0x7554, 0x8, 0x0, 0xfffffffc, 0x4, 0x3}}, {0xa, 0x2, [0x1, 0x5, 0x0]}}, {{0x1c, 0x1, {0x9, 0x5, 0x400, 0x80000000, 0x1, 0xff, 0x5, 0x1}}, {0x6, 0x2, [0x7]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}]}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10)
bind$netlink(r4, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r4, &(0x7f00000000c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r4, &(0x7f0000000140)=@unspec, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
write(r4, &(0x7f0000000000)='\"', 0xfdef)

13m38.749193562s ago: executing program 5 (id=646):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000200)=0x4)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[], 0xa)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000001c0)={@any, 0xfffffffe})
r7 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7}, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc)
r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$update(0x2, r8, 0x0, 0x0)
r9 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r9, 0x82000000)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x0, 0x0, 0x0})

13m23.004080962s ago: executing program 47 (id=646):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000200)=0x4)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x40010)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[], 0xa)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={0x0, 0x1})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000001c0)={@any, 0xfffffffe})
r7 = add_key$user(0x0, &(0x7f00000005c0), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7}, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0xfffffffffffffffc)
r8 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$update(0x2, r8, 0x0, 0x0)
r9 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r9, 0x82000000)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x0, 0x0, 0x0})

13m12.208179824s ago: executing program 48 (id=666):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2, 0x7}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3)
ioctl$TIOCGPTPEER(r4, 0x932, 0x7)

12m59.039459819s ago: executing program 49 (id=686):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4000007ff, 0x2)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010102, 0x17, 0x13, 'dh\x00', 0x0, 0x3, 0x10000054}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r4)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005000c0001000000080007000100000008000600000100000800050002000000080013007cc4000008000d000400000005000b000400000008000e0081000000080006"], 0x74}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)
msgctl$IPC_INFO(0x0, 0x3, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r6 = dup(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x5c, 0x3, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000001000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x2c})
unshare(0x22020600)
flock(0xffffffffffffffff, 0x8)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x40800)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48})
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4})
ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000000))

10m40.259636031s ago: executing program 50 (id=965):
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xfea8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, &(0x7f0000000040))
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240), 0x2, 0x4}}, 0x20)
close(0xffffffffffffffff)
openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup\x00', 0x123042, 0x58)
openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f0000000100)=0x3, 0xffffffffffffffb0)
read$FUSE(r2, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x2400c890)
syz_usb_connect(0x0, 0x34, 0x0, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80cb59acbc0413a1f8480f0000005e2900421803001825e60a001402000002800000121f", 0x2e}], 0x1}, 0x0)

9m53.702362567s ago: executing program 4 (id=1084):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)

9m51.809879707s ago: executing program 4 (id=1085):
r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/36, 0x24}], 0x1, 0x4, 0x2)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae4000000060a0b0400000000000000000200fffeb80004802800018007000100637400001c000280080001400000000a080002400000000905000300000000008c0001800c000100636f756e746572007c0002800c00014000000000000000020c00024000000000000000090c000140fffffffffffffbff0c00024000000000000000010c00024000000000000006920c00014000000000000000020c00024000000000000000010c00024000000000000000070c00014000000000000088770c00024000000000000000060900010073797a30000000000900020073797a32"], 0x10c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
ptrace(0x10, r5)
syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r8, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0)
kcmp$KCMP_EPOLL_TFD(r5, r2, 0x7, r4, &(0x7f0000000000)={r1, r6, 0x8})

9m49.532684549s ago: executing program 4 (id=1091):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400", 0x6}], 0x1)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="2e00000010008188e6b62aa7165768af3a5e5d6e480000005e140602000000000e000a0014000000028000001294", 0x2e}], 0x1}, 0x0)

9m47.89300135s ago: executing program 4 (id=1096):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

9m46.685562834s ago: executing program 4 (id=1099):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42})

9m42.305147496s ago: executing program 4 (id=1113):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}}, 0x20}}, 0x20000844)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40000c0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}}, 0x4004084)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r4)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x28}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

9m28.216164565s ago: executing program 51 (id=1106):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r5, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000040)=0x10000)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)
ioprio_get$pid(0x2, r2)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140400001000040000000000000000000000000a20000000000a050000000000000000004c000000090a01040000000000000000070000070000000000000031000000000900010073797a30f8ffffff070005400000001c08000a4000000000080003400000004008000f4000000002480000000c0a01030000000000000000070000070900020073797a31000000000900010073797a30000000001ce6e56dbf219e6bcd000340000000020c67e0a9b1d877886cb94b31616761a62164e8016888091f788b00"/214], 0xdc}, 0x1, 0x0, 0x0, 0x4044880}, 0x0)

9m26.966729391s ago: executing program 52 (id=1113):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x137b, 0xc001}}, 0x20}}, 0x20000844)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffc}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, 0x0, 0x40000c0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f00000021c0)={0x14, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}}, 0x4004084)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
process_mrelease(0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0)
close(r4)
r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000238bd7000f8dbdf2502000d00000000000000000008003f00ffff"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x41)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x28}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)

8m46.582052207s ago: executing program 7 (id=1209):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
shutdown(r0, 0x1)

8m45.777425546s ago: executing program 7 (id=1211):
syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b0001fffa"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x4480)

8m43.727176713s ago: executing program 7 (id=1215):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r3)

8m40.84377795s ago: executing program 5 (id=1132):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
open(&(0x7f0000000280)='./file0\x00', 0x60842, 0x45)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
open(&(0x7f0000000300)='./file0\x00', 0x1e5442, 0x182)

8m39.734772892s ago: executing program 5 (id=1221):
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
listen(0xffffffffffffffff, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r6, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)

8m37.883440207s ago: executing program 5 (id=1226):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, 0x0, &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)

8m37.524442633s ago: executing program 2 (id=1228):
syz_usb_connect(0x0, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b0001fffa10170904510302ffffff010905"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x4480)

8m36.153124799s ago: executing program 5 (id=1230):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20080, 0x0)
shutdown(r0, 0x1)

8m35.392587611s ago: executing program 6 (id=1231):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
open(&(0x7f0000000280)='./file0\x00', 0x60842, 0x45)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
open(&(0x7f0000000300)='./file0\x00', 0x1e5442, 0x182)

8m35.388840905s ago: executing program 5 (id=1232):
socket$xdp(0x2c, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x40}}, 0x20004000)
syz_open_dev$radio(0x0, 0x2, 0x2)
syz_emit_ethernet(0x2a, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x20385655, 0x32525942, 0xc, [{0x0, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {}, {}, {0xfffffffc}, {0x200}], 0x3, 0xfc, 0x0, 0x0, 0x5}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x4, 0x2}, 0x0, [0x3, 0x3, 0x3ff, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0xffffffff, 0x6c7d, 0xcfa, 0x4, 0x0, 0x0, 0x3, 0x2, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfffffffe, 0x5, 0xe, 0x0, 0x0, 0x0, 0x4, 0x7, 0x1, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x6, 0x3, 0x0, 0x8003, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0xa0000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0xef7, 0x0, 0x10800000, 0x3, 0xfffffffb, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x4, 0xffffffff], [0xffffffff, 0x7f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfff, 0x1ffffffe, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0x8], [0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x802, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x10000, 0x0, 0x0, 0x6507, 0x0, 0x0, 0x0, 0x8000001, 0x3, 0x0, 0xa, 0x0, 0x100000]}, 0x45c)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0xf8, 0x12, 0x200, 0x70bd2c, 0x25dfdbff, {0x22, 0x4, 0x3, 0x80, {0x4e24, 0x4e22, [0x8, 0xc5, 0x8, 0xa], [0x4, 0x6a5, 0x6, 0x7], 0x0, [0xffff, 0xe]}, 0x7e, 0x584}, [@INET_DIAG_REQ_BYTECODE={0xac, 0x1, "528a0873d791ef3050e46561283128c35db3872b4a4fad33bbea4b80d79cabdfd89f0c30e4f9850b377482ca777155141d433362a74733db85159bda56508d8d4cf3211baf46761f95eb698d3d8ea07b156e16b8aae73c24838a18c5ecfeb7334620e3396ad5e51e14e715d2ff8c307cb9bee02d2d54eba8a88239686a01f06fefeebd311912f65ea98bca9c52cf119704d16fbe271a062a9bba04b8ab1beb6e2fb6d1eecbde218c"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000021}, 0x40408c0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

8m34.462679356s ago: executing program 2 (id=1234):
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xbfffffb3}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, 0x5c}}, 0x0)
close(r3)

8m34.413503159s ago: executing program 6 (id=1235):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='cgroup\x00')
syz_fuse_handle_req(r0, &(0x7f0000000800)="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", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
close_range(r2, r2, 0x2)
fsetxattr$security_ima(r2, 0x0, 0x0, 0x0, 0x3)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x40a700, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
accept4(r4, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

8m33.564329106s ago: executing program 2 (id=1236):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, 0x0, 0x0)
listen(r0, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

8m32.932311644s ago: executing program 2 (id=1238):
syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0xbbc, 0x2, 0x1003, 0xea}, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16b, @time={0x6fd, 0x7}, 0x0, {0x0, 0xff}, 0x0, 0x0, 0x2})

8m32.093767669s ago: executing program 6 (id=1239):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

8m31.940754422s ago: executing program 2 (id=1240):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r2, 0x0, 0x0)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd)
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00')
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180))
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)

8m30.729750283s ago: executing program 6 (id=1242):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0)

8m30.033726841s ago: executing program 2 (id=1243):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x3, 0x822b01)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

8m29.092998677s ago: executing program 7 (id=1245):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
open(&(0x7f0000000280)='./file0\x00', 0x60842, 0x45)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
open(&(0x7f0000000300)='./file0\x00', 0x1e5442, 0x182)

8m27.206669335s ago: executing program 7 (id=1246):
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'})
syz_open_dev$usbmon(&(0x7f0000001980), 0x1, 0x10280)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x40000007, @loopback={0x700}}, @ib={0x1b, 0x0, 0x0, {"7d0300"}, 0x0, 0x0, 0x2}}}, 0x118)
write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xbfffffb3}, @CTA_NAT_DST={0xc, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}, 0x5c}}, 0x0)
close(r3)

8m26.785669452s ago: executing program 6 (id=1248):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4)
listen(r0, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, 0x0, 0x0)

8m25.916162467s ago: executing program 6 (id=1249):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_persistent(0x16, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
listen(0xffffffffffffffff, 0x0)
unshare(0x28040680)
r3 = timerfd_create(0x0, 0x0)
timerfd_gettime(r3, &(0x7f0000000000))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x274, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x244, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff000000, 0x0, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x1d0, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x16c0}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x252}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xab}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x16}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8047}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x6}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="00000004c486fc025c6302b80000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)

8m25.650895548s ago: executing program 7 (id=1251):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
io_uring_setup(0x6da9, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x300})
openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r3 = memfd_create(0x0, 0xb)
ftruncate(r3, 0xffff)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000200)={0x2, @vbi={0x5, 0xffff, 0x9, 0x20323159, [0xc7, 0x2], [0x5, 0x66], 0x1}})

8m19.124433092s ago: executing program 53 (id=1232):
socket$xdp(0x2c, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x40}}, 0x20004000)
syz_open_dev$radio(0x0, 0x2, 0x2)
syz_emit_ethernet(0x2a, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x400000, 0x5, 0x20385655, 0x32525942, 0xc, [{0x0, 0xfffffffe}, {}, {0x2, 0x8}, {0x1, 0xfffffffc}, {}, {}, {0xfffffffc}, {0x200}], 0x3, 0xfc, 0x0, 0x0, 0x5}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x4, 0x2}, 0x0, [0x3, 0x3, 0x3ff, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0xffffffff, 0x6c7d, 0xcfa, 0x4, 0x0, 0x0, 0x3, 0x2, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfffffffe, 0x5, 0xe, 0x0, 0x0, 0x0, 0x4, 0x7, 0x1, 0x0, 0xfff, 0x0, 0x2, 0x0, 0x6, 0x3, 0x0, 0x8003, 0x4000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x6d, 0xffffffff, 0x8000edc0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0xa0000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x2000079, 0x0, 0x0, 0x0, 0x10000, 0x40000, 0x8, 0xc0000000, 0xef7, 0x0, 0x10800000, 0x3, 0xfffffffb, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x4, 0xffffffff], [0xffffffff, 0x7f, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, 0x3, 0xfff, 0x1ffffffe, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4000, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x0, 0xfffffffc, 0x44, 0x4000400, 0x0, 0x0, 0x8], [0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x802, 0x100000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000c, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x10000, 0x0, 0x0, 0x6507, 0x0, 0x0, 0x0, 0x8000001, 0x3, 0x0, 0xa, 0x0, 0x100000]}, 0x45c)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0xf8, 0x12, 0x200, 0x70bd2c, 0x25dfdbff, {0x22, 0x4, 0x3, 0x80, {0x4e24, 0x4e22, [0x8, 0xc5, 0x8, 0xa], [0x4, 0x6a5, 0x6, 0x7], 0x0, [0xffff, 0xe]}, 0x7e, 0x584}, [@INET_DIAG_REQ_BYTECODE={0xac, 0x1, "528a0873d791ef3050e46561283128c35db3872b4a4fad33bbea4b80d79cabdfd89f0c30e4f9850b377482ca777155141d433362a74733db85159bda56508d8d4cf3211baf46761f95eb698d3d8ea07b156e16b8aae73c24838a18c5ecfeb7334620e3396ad5e51e14e715d2ff8c307cb9bee02d2d54eba8a88239686a01f06fefeebd311912f65ea98bca9c52cf119704d16fbe271a062a9bba04b8ab1beb6e2fb6d1eecbde218c"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000021}, 0x40408c0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0xa04c, 0x35e8b531, 0x1, 0x8, 0x13, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"})

8m14.709782424s ago: executing program 54 (id=1243):
socket$inet6_udp(0xa, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x3, 0x822b01)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48850)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)

8m9.61348962s ago: executing program 55 (id=1251):
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$pptp(0x18, 0x1, 0x2)
connect$pptp(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
io_uring_setup(0x6da9, &(0x7f0000000bc0)={0x0, 0x0, 0x12, 0x0, 0x300})
openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2)
r3 = memfd_create(0x0, 0xb)
ftruncate(r3, 0xffff)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000200)={0x2, @vbi={0x5, 0xffff, 0x9, 0x20323159, [0xc7, 0x2], [0x5, 0x66], 0x1}})

8m8.982924456s ago: executing program 56 (id=1249):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_persistent(0x16, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000)
listen(0xffffffffffffffff, 0x0)
unshare(0x28040680)
r3 = timerfd_create(0x0, 0x0)
timerfd_gettime(r3, &(0x7f0000000000))
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0]})
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newtfilter={0x274, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x244, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @empty}, @TCA_FLOWER_KEY_IPV6_DST_MASK={0x14, 0x11, [0xff000000, 0x0, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x6}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @private1}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x1d0, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x14, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x16c0}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xfffffff8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x252}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x3c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xab}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x3b}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x24, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x16}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x800}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8047}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x3c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x44, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x6}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000600000008000000ad00000000000000", @ANYRES32, @ANYBLOB="00000004c486fc025c6302b80000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50)

20.117230413s ago: executing program 0 (id=2255):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, 0x0, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10)
close(r2)

12.813507362s ago: executing program 1 (id=2272):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)

11.981940002s ago: executing program 1 (id=2276):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x44, r0, 0x1, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x25, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x400}}, @addba_req={0x3, 0x0, {0x7f, {0x0, 0x0, 0x7, 0x340}, 0x6, {0x0, 0x10}}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0)

10.927720402s ago: executing program 1 (id=2278):
rt_sigpending(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x10000)
write$binfmt_elf32(r2, 0x0, 0x4cd)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1)
write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)

9.263867885s ago: executing program 9 (id=2281):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044820, 0x0)

6.951811495s ago: executing program 3 (id=2284):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
open(&(0x7f0000000280)='./file0\x00', 0x60842, 0x45)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = open(&(0x7f0000000300)='./file0\x00', 0x1e5442, 0x182)
write$bt_hci(r3, &(0x7f00000001c0)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0x600)

6.833522899s ago: executing program 1 (id=2285):
r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})

6.701924201s ago: executing program 0 (id=2286):
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)

6.481134358s ago: executing program 9 (id=2287):
r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x2c6f, 0x6, 0x8, 0x4, 0x1, 0x6], [0x10000007, 0x10002, 0x12b, 0x8000, 0x0, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xd2, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0xfffffc00, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff805, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1fd, 0xfff, 0xfff]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x918)
write$char_usb(r0, &(0x7f00000000c0)="3dde214cd9e17bf81cf98af4f5a0bba0", 0x10)

6.409736687s ago: executing program 3 (id=2288):
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
readv(r1, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1)
r2 = dup2(r1, r0)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)

6.357093247s ago: executing program 8 (id=2289):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f4305", 0x12}], 0x1)

6.229952224s ago: executing program 1 (id=2290):
syz_open_procfs(0x0, &(0x7f0000000140)='net/snmp\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7})

6.00919327s ago: executing program 0 (id=2291):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x1df)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

5.83537522s ago: executing program 9 (id=2292):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_io_uring_setup(0x491, &(0x7f0000000400)={0x0, 0xe407, 0x0, 0x3, 0x288}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382)
r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x2)
pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a", @ANYRESDEC=r5], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r6, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x11, 0x1, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e17bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978072a8b070006584a128d7469166ffbffffff19e7df4af14e1df82d", [0x1, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x5452, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})

5.449011888s ago: executing program 8 (id=2293):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xd, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3)

5.087799065s ago: executing program 0 (id=2294):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000800)={0x0, 0xd, 0x1, "9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x3)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
read$hiddev(r1, &(0x7f0000000080)=""/43, 0x2b)

4.890302846s ago: executing program 3 (id=2295):
rt_sigpending(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x10000)
write$binfmt_elf32(r2, 0x0, 0x4cd)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1)
write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)

4.792293238s ago: executing program 1 (id=2296):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x48, 0x0, 0x8)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x6, @local, 0x3ff}, 0x1c)
ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10)
syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0)

4.269176788s ago: executing program 9 (id=2297):
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80015b1b, &(0x7f0000000040))

2.733951171s ago: executing program 8 (id=2298):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000000)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
open(&(0x7f0000000280)='./file0\x00', 0x60842, 0x45)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
r3 = open(&(0x7f0000000300)='./file0\x00', 0x1e5442, 0x182)
write$bt_hci(r3, &(0x7f00000001c0)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0x600)

2.399108594s ago: executing program 3 (id=2299):
creat(&(0x7f0000000140)='./file0\x00', 0x71)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x110022, 0x0)

1.864380207s ago: executing program 8 (id=2300):
r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7})

1.48854003s ago: executing program 3 (id=2301):
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)

1.325178647s ago: executing program 0 (id=2302):
r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x0, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x2c6f, 0x6, 0x8, 0x4, 0x1, 0x6], [0x10000007, 0x10002, 0x12b, 0x8000, 0x0, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x3, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x7, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xd2, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x8, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x85, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0xfffffc00, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x6, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x101, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0xd36b, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x1, 0x1, 0xfffff805, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x1005, 0xb1c, 0x1, 0x1fd, 0xfff, 0xfff]}, 0x45c)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x918)
write$char_usb(r0, &(0x7f00000000c0)="3dde214cd9e17bf81cf98af4f5a0bba0c7569cccd455b301", 0x18)

1.256013923s ago: executing program 9 (id=2303):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x40000099, 0x0, 0xffffffffffff8b14}]})

1.108886169s ago: executing program 8 (id=2304):
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189)
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
set_mempolicy(0x8006, 0x0, 0x5)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

845.26559ms ago: executing program 3 (id=2305):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x4, 0x4, &(0x7f0000000040)={0x1c, "2f5aa708658854e6cd8ab7c9d8af328bd1d85242ddeec4ec4a45c09e8c486c0d4f"}})

478.942853ms ago: executing program 0 (id=2306):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0)

219.578737ms ago: executing program 9 (id=2307):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_io_uring_setup(0x491, &(0x7f0000000400)={0x0, 0xe407, 0x0, 0x3, 0x288}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382)
r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5', 0x2)
pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a", @ANYRESDEC=r5], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
ioctl$LOOP_CHANGE_FD(r6, 0x4c00, r7)
sendfile(r6, r6, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x11, 0x1, "28f5c9ea1f1ae4be4111ab18d2da69bde58cd7af40fd150b70aac11c2e17bd5bba7663c435aff94793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d541", "07a9310978072a8b070006584a128d7469166ffbffffff19e7df4af14e1df82d", [0x1, 0x7]})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x5452, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}})

0s ago: executing program 8 (id=2308):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x2000000)

kernel console output (not intermixed with test programs):

-1: new high-speed USB device number 26 using dummy_hcd
[ 1217.480994][ T9347] usb 1-1: f81604_read: reg: 105 failed: -ETIMEDOUT
[ 1217.488678][ T9347] f81604 1-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT
[ 1217.502085][ T9347] f81604 1-1:0.0: probe with driver f81604 failed with error -110
[ 1217.994459][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1218.001210][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1218.303695][    C0] hrtimer: interrupt took 314419 ns
[ 1218.347312][ T9347] usb 1-1: USB disconnect, device number 11
[ 1219.715334][ T9347] usb 9-1: new high-speed USB device number 25 using dummy_hcd
[ 1219.944058][ T9347] usb 9-1: Using ep0 maxpacket: 16
[ 1219.994389][ T9347] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1220.109870][ T9347] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1220.119496][ T9347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1220.127920][ T9347] usb 9-1: Product: syz
[ 1220.132289][ T9347] usb 9-1: Manufacturer: syz
[ 1220.137256][ T9347] usb 9-1: SerialNumber: syz
[ 1220.164035][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1485'.
[ 1220.318584][ T9347] usb 9-1: config 0 descriptor??
[ 1220.776990][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1486'.
[ 1221.253215][T11886] usb 9-1: USB disconnect, device number 25
[ 1222.766518][T13253] tipc: Started in network mode
[ 1222.771593][T13253] tipc: Node identity 4af3ea96fdf3, cluster identity 4711
[ 1222.773962][T11886] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1222.780089][T13253] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1222.919842][T13254] syzkaller0: entered promiscuous mode
[ 1222.930148][T13254] syzkaller0: entered allmulticast mode
[ 1223.135085][T13253] tipc: Resetting bearer <eth:syzkaller0>
[ 1223.202448][T11886] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1223.212153][T11886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.221017][T11886] usb 1-1: Product: syz
[ 1223.225875][T11886] usb 1-1: Manufacturer: syz
[ 1223.230700][T11886] usb 1-1: SerialNumber: syz
[ 1223.241217][T13251] tipc: Resetting bearer <eth:syzkaller0>
[ 1223.306665][T13251] tipc: Disabling bearer <eth:syzkaller0>
[ 1223.558658][T11886] usb 1-1: config 0 descriptor??
[ 1225.647089][T11886] usb 1-1: f81604_read: reg: 105 failed: -ETIMEDOUT
[ 1225.654351][T11886] f81604 1-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT
[ 1225.662333][T11886] f81604 1-1:0.0: probe with driver f81604 failed with error -110
[ 1225.930771][T11886] usb 1-1: USB disconnect, device number 12
[ 1226.372883][T13286] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1502'.
[ 1229.481380][T11886] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1229.789336][T11886] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[ 1229.799583][T11886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1229.808142][T11886] usb 2-1: Product: syz
[ 1229.812522][T11886] usb 2-1: Manufacturer: syz
[ 1229.817575][T11886] usb 2-1: SerialNumber: syz
[ 1229.997081][T11886] usb 2-1: config 0 descriptor??
[ 1230.205175][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'.
[ 1230.214840][T13335] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1230.439152][T13335] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1232.134554][T11886] usb 2-1: f81604_read: reg: 105 failed: -ETIMEDOUT
[ 1232.144283][T11886] f81604 2-1:0.0: Setting termination of CH#0 failed: -ETIMEDOUT
[ 1232.152279][T11886] f81604 2-1:0.0: probe with driver f81604 failed with error -110
[ 1232.796553][ T9347] usb 2-1: USB disconnect, device number 30
[ 1233.305476][T13376] fuse: Bad value for 'fd'
[ 1235.358105][T13401] netlink: 'syz.1.1536': attribute type 1 has an invalid length.
[ 1235.691650][T13410] bond1: entered promiscuous mode
[ 1235.697444][T13410] bond1: entered allmulticast mode
[ 1235.704941][T13410] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1235.735404][T13412] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1534'.
[ 1235.866567][T13401] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1235.878171][T13401] bond2: entered promiscuous mode
[ 1235.884157][T13401] bond2: entered allmulticast mode
[ 1235.891520][T13401] bond1: (slave bond2): Enslaving as a backup interface with a down link
[ 1239.300400][T13455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1239.337709][T13456] syzkaller0: entered promiscuous mode
[ 1239.343916][T13456] syzkaller0: entered allmulticast mode
[ 1239.481482][T13455] tipc: Resetting bearer <eth:syzkaller0>
[ 1239.588781][T13454] tipc: Resetting bearer <eth:syzkaller0>
[ 1239.685441][T13454] tipc: Disabling bearer <eth:syzkaller0>
[ 1240.975894][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1552'.
[ 1241.605928][T13467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'.
[ 1241.975186][T11886] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1242.234680][T11886] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1242.246278][T11886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1242.257729][T11886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1242.267924][T11886] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1242.326581][T13490] fuse: Bad value for 'fd'
[ 1242.544500][T11886] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1242.554694][T11886] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1242.563108][T11886] usb 10-1: Manufacturer: syz
[ 1242.606963][T11886] usb 10-1: config 0 descriptor??
[ 1243.053964][T11886] appleir 0003:05AC:8243.000B: unknown main item tag 0x0
[ 1243.164339][T11886] appleir 0003:05AC:8243.000B: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0
[ 1243.416073][T11886] usb 10-1: USB disconnect, device number 16
[ 1244.291159][T13503] fido_id[13503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1245.331852][T13521] tipc: Started in network mode
[ 1245.338481][T13521] tipc: Node identity 4ebaac98fd36, cluster identity 4711
[ 1245.346812][T13521] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1245.515047][T13521] syzkaller0: entered promiscuous mode
[ 1245.520967][T13521] syzkaller0: entered allmulticast mode
[ 1245.753028][T13521] tipc: Resetting bearer <eth:syzkaller0>
[ 1245.868207][T13520] tipc: Resetting bearer <eth:syzkaller0>
[ 1245.942129][T13520] tipc: Disabling bearer <eth:syzkaller0>
[ 1247.077177][T13542] fuse: Bad value for 'fd'
[ 1247.578458][T13534] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1566'.
[ 1248.497213][T13555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1567'.
[ 1252.504359][T11886] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1252.655948][T13598] fuse: Unknown parameter '0x0000000000000004'
[ 1252.737313][T11886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1252.786417][T11886] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1252.796503][T11886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1252.805058][T11886] usb 10-1: Product: syz
[ 1252.809500][T11886] usb 10-1: Manufacturer: syz
[ 1252.814513][T11886] usb 10-1: SerialNumber: syz
[ 1252.931277][T11886] usb 10-1: config 0 descriptor??
[ 1253.477563][T11886] usb 10-1: USB disconnect, device number 17
[ 1254.244471][T13504] udevd[13504]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1254.524145][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1583'.
[ 1254.918778][T13624] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1586'.
[ 1256.194324][ T9347] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1256.427478][ T9347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1256.438994][ T9347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1256.449212][ T9347] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1256.462850][ T9347] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1256.472305][ T9347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1256.635834][ T9347] usb 1-1: config 0 descriptor??
[ 1257.307514][ T9347] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd
[ 1257.625168][ T9347] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1257.685871][ T9353] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1257.759681][ T9347] usb 1-1: USB disconnect, device number 13
[ 1257.866996][T13652] fuse: Unknown parameter '0x0000000000000004'
[ 1257.919728][ T9353] usb 2-1: config 0 has no interfaces?
[ 1258.027511][ T9353] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1258.036953][ T9353] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.045809][ T9353] usb 2-1: Product: syz
[ 1258.053385][ T9353] usb 2-1: Manufacturer: syz
[ 1258.059543][ T9353] usb 2-1: SerialNumber: syz
[ 1258.198749][ T9353] usb 2-1: config 0 descriptor??
[ 1258.613160][T13641] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1258.716007][T13654] fido_id[13654]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1258.837691][T11886] usb 2-1: USB disconnect, device number 31
[ 1259.141621][T13665] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1597'.
[ 1259.233969][ T9353] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1259.426855][ T9353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1259.511725][ T9353] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1259.521492][ T9353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1259.529912][ T9353] usb 1-1: Product: syz
[ 1259.534353][ T9353] usb 1-1: Manufacturer: syz
[ 1259.539232][ T9353] usb 1-1: SerialNumber: syz
[ 1259.616720][ T9353] usb 1-1: config 0 descriptor??
[ 1260.169735][ T9353] usb 1-1: USB disconnect, device number 14
[ 1260.515897][T13678] syzkaller0: entered promiscuous mode
[ 1260.524535][T13678] syzkaller0: entered allmulticast mode
[ 1261.099503][T12866] udevd[12866]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1261.513106][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1600'.
[ 1262.927290][T13702] tipc: Enabling of bearer <eth:syzkaller> rejected, failed to enable media
[ 1263.025113][T13703] syzkaller0: entered promiscuous mode
[ 1263.030947][T13703] syzkaller0: entered allmulticast mode
[ 1263.685083][T13708] netlink: 'syz.8.1606': attribute type 27 has an invalid length.
[ 1264.014672][ T5874] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1264.254195][ T5874] usb 9-1: Using ep0 maxpacket: 16
[ 1264.316354][ T5874] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1264.324970][ T5874] usb 9-1: config 0 has no interface number 0
[ 1264.420392][ T5874] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1264.429911][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.438293][ T5874] usb 9-1: Product: syz
[ 1264.442602][ T5874] usb 9-1: Manufacturer: syz
[ 1264.447487][ T5874] usb 9-1: SerialNumber: syz
[ 1264.636783][ T5874] usb 9-1: config 0 descriptor??
[ 1264.745450][ T5874] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1265.264346][ T5874] gspca_spca1528: reg_w err -110
[ 1265.310704][ T5874] spca1528 9-1:0.1: probe with driver spca1528 failed with error -110
[ 1266.474485][ T5874] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1266.753887][ T5874] usb 2-1: config 0 has no interfaces?
[ 1266.808009][ T5874] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1266.817437][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.826008][ T5874] usb 2-1: Product: syz
[ 1266.830367][ T5874] usb 2-1: Manufacturer: syz
[ 1266.835380][ T5874] usb 2-1: SerialNumber: syz
[ 1266.980496][T11886] usb 9-1: USB disconnect, device number 26
[ 1267.097456][ T5874] usb 2-1: config 0 descriptor??
[ 1267.677932][T11886] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1267.916806][T11886] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1268.033990][T11886] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1268.043380][T11886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1268.051996][T11886] usb 9-1: Product: syz
[ 1268.057077][T11886] usb 9-1: Manufacturer: syz
[ 1268.061788][T11886] usb 9-1: SerialNumber: syz
[ 1268.281861][T11886] usb 9-1: config 0 descriptor??
[ 1268.636639][ T9344] usb 2-1: USB disconnect, device number 32
[ 1268.822175][T11886] usb 9-1: USB disconnect, device number 27
[ 1269.104128][T12111] udevd[12111]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1270.355510][T13750] syzkaller0: entered promiscuous mode
[ 1270.361226][T13750] syzkaller0: entered allmulticast mode
[ 1273.210887][T13775] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1621'.
[ 1273.790661][T13781] netlink: 'syz.9.1622': attribute type 27 has an invalid length.
[ 1274.118666][T13781] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1274.128539][T13781] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1274.492169][T13781] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1274.603807][ T5874] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1274.844954][ T5874] usb 10-1: Using ep0 maxpacket: 16
[ 1274.924335][T13781] geneve1: left promiscuous mode
[ 1274.929528][T13781] geneve1: left allmulticast mode
[ 1275.001317][ T5874] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[ 1275.009878][ T5874] usb 10-1: config 0 has no interface number 0
[ 1275.179076][ T5874] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1275.189243][ T5874] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1275.197881][ T5874] usb 10-1: Product: syz
[ 1275.202248][ T5874] usb 10-1: Manufacturer: syz
[ 1275.207157][ T5874] usb 10-1: SerialNumber: syz
[ 1275.458560][ T5874] usb 10-1: config 0 descriptor??
[ 1275.644855][ T5874] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1275.781401][ T1118] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1275.851483][ T1118] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1275.903047][ T1118] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1276.020439][ T1118] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1276.166325][ T5874] gspca_spca1528: reg_w err -110
[ 1276.211247][ T5874] spca1528 10-1:0.1: probe with driver spca1528 failed with error -110
[ 1277.182828][ T5874] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[ 1277.293273][T13803] syzkaller0: entered promiscuous mode
[ 1277.304774][T13803] syzkaller0: entered allmulticast mode
[ 1277.381516][ T9344] usb 10-1: USB disconnect, device number 18
[ 1277.418421][ T5874] usb 9-1: config 0 has no interfaces?
[ 1277.467576][ T5874] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1277.477305][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.486770][ T5874] usb 9-1: Product: syz
[ 1277.491079][ T5874] usb 9-1: Manufacturer: syz
[ 1277.495924][ T5874] usb 9-1: SerialNumber: syz
[ 1277.728224][ T5874] usb 9-1: config 0 descriptor??
[ 1279.060379][ T5874] usb 9-1: USB disconnect, device number 28
[ 1279.416531][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1279.423178][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1279.914549][ T9344] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[ 1280.175002][ T9344] usb 10-1: Using ep0 maxpacket: 32
[ 1280.190934][ T9344] usb 10-1: config 0 has an invalid interface number: 146 but max is 0
[ 1280.199681][ T9344] usb 10-1: config 0 has no interface number 0
[ 1280.206292][ T9344] usb 10-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1280.217691][ T9344] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1280.229685][ T9344] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1280.241330][ T9344] usb 10-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1280.251925][ T9344] usb 10-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1280.263969][ T9344] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1280.277971][ T9344] usb 10-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1280.289616][ T9344] usb 10-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[ 1280.301436][ T9344] usb 10-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1280.312125][ T9344] usb 10-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1280.524298][ T9344] usb 10-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1280.534534][ T9344] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1280.543030][ T9344] usb 10-1: Product: syz
[ 1280.547790][ T9344] usb 10-1: Manufacturer: syz
[ 1280.552694][ T9344] usb 10-1: SerialNumber: syz
[ 1280.677046][ T9344] usb 10-1: config 0 descriptor??
[ 1280.690160][T13819] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1280.701744][T13819] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1280.817699][ T9344] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1280.827883][ T9344] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1281.061483][ T9344] scsi host1: microtekX6
[ 1282.785217][ T9344] usb 10-1: USB disconnect, device number 19
[ 1283.496916][T13853] netlink: 'syz.8.1639': attribute type 27 has an invalid length.
[ 1283.780375][ T5874] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 1284.034803][ T5874] usb 9-1: Using ep0 maxpacket: 16
[ 1284.074969][ T5874] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1284.083191][ T5874] usb 9-1: config 0 has no interface number 0
[ 1284.197159][ T5874] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1284.206586][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.214983][ T5874] usb 9-1: Product: syz
[ 1284.219277][ T5874] usb 9-1: Manufacturer: syz
[ 1284.224147][ T5874] usb 9-1: SerialNumber: syz
[ 1284.268602][T13858] syzkaller0: entered promiscuous mode
[ 1284.275102][T13858] syzkaller0: entered allmulticast mode
[ 1284.313719][ T5874] usb 9-1: config 0 descriptor??
[ 1284.368189][ T5874] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1284.775209][T11886] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[ 1284.886155][ T5874] gspca_spca1528: reg_w err -110
[ 1284.932166][ T5874] spca1528 9-1:0.1: probe with driver spca1528 failed with error -110
[ 1285.052761][T11886] usb 10-1: config 0 has no interfaces?
[ 1285.083195][T11886] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1285.092802][T11886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.101326][T11886] usb 10-1: Product: syz
[ 1285.105918][T11886] usb 10-1: Manufacturer: syz
[ 1285.110728][T11886] usb 10-1: SerialNumber: syz
[ 1285.215371][T11886] usb 10-1: config 0 descriptor??
[ 1285.794800][T11886] usb 10-1: USB disconnect, device number 20
[ 1286.626568][T11886] usb 9-1: USB disconnect, device number 29
[ 1287.079000][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'.
[ 1287.104987][ T5874] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1287.450325][ T5874] usb 2-1: Using ep0 maxpacket: 8
[ 1287.548482][ T5874] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[ 1287.557467][ T5874] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1287.567762][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1287.577976][ T5874] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1287.588514][ T5874] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1287.602145][ T5874] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1287.611629][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.169966][ T5874] usb 2-1: GET_CAPABILITIES returned 2f
[ 1288.176744][ T5874] usbtmc 2-1:16.0: can't read capabilities
[ 1288.446925][ T5874] usb 2-1: USB disconnect, device number 33
[ 1288.832266][T13882] delete_channel: no stack
[ 1289.718166][T13912] syzkaller0: entered promiscuous mode
[ 1289.724270][T13912] syzkaller0: entered allmulticast mode
[ 1289.848046][ T9344] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 1290.117459][ T9344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1290.171127][ T9344] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1290.180922][ T9344] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1290.189350][ T9344] usb 9-1: Product: syz
[ 1290.193792][ T9344] usb 9-1: Manufacturer: syz
[ 1290.198532][ T9344] usb 9-1: SerialNumber: syz
[ 1290.287479][ T9344] usb 9-1: config 0 descriptor??
[ 1290.739494][ T9344] usb 9-1: USB disconnect, device number 30
[ 1291.107967][T12866] udevd[12866]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1291.668806][T13935] netlink: 'syz.1.1658': attribute type 27 has an invalid length.
[ 1291.905577][T13935] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1291.915781][T13935] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1292.227491][T13935] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1292.304487][T13935] veth0_virt_wifi: left promiscuous mode
[ 1292.310367][T13935] veth0_virt_wifi: left allmulticast mode
[ 1292.357740][ T9344] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1292.583760][ T9344] usb 2-1: Using ep0 maxpacket: 16
[ 1292.651593][ T9344] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1292.662468][ T9344] usb 2-1: config 0 has no interface number 0
[ 1292.796336][ T9344] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1292.806412][ T9344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1292.814875][ T9344] usb 2-1: Product: syz
[ 1292.819241][ T9344] usb 2-1: Manufacturer: syz
[ 1292.824212][ T9344] usb 2-1: SerialNumber: syz
[ 1292.969810][ T9344] usb 2-1: config 0 descriptor??
[ 1293.032174][ T9344] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1293.399144][T13935] bond1: left promiscuous mode
[ 1293.404389][T13935] bond2: left promiscuous mode
[ 1293.410169][T13935] bond1: left allmulticast mode
[ 1293.417392][T13935] bond2: left allmulticast mode
[ 1293.466717][ T4141] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1293.573365][ T4141] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1293.573812][ T9344] gspca_spca1528: reg_w err -110
[ 1293.582781][ T4141] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1293.692640][ T9344] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[ 1294.576816][ T9344] usb 9-1: new high-speed USB device number 31 using dummy_hcd
[ 1294.720143][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1661'.
[ 1294.820380][ T9344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1294.939910][ T9344] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1294.949869][ T9344] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1294.958716][ T9344] usb 9-1: Product: syz
[ 1294.963001][ T9344] usb 9-1: Manufacturer: syz
[ 1294.968236][ T9344] usb 9-1: SerialNumber: syz
[ 1295.087467][ T9344] usb 9-1: config 0 descriptor??
[ 1295.124813][ T5874] usb 2-1: USB disconnect, device number 34
[ 1295.801137][ T5874] usb 9-1: USB disconnect, device number 31
[ 1296.048943][T12111] udevd[12111]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1296.258225][T13964] syzkaller0: entered promiscuous mode
[ 1296.264093][T13964] syzkaller0: entered allmulticast mode
[ 1297.834842][ T5874] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1298.033874][ T5874] usb 4-1: Using ep0 maxpacket: 8
[ 1298.060641][ T5874] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1298.072414][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1298.083404][ T5874] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1298.100426][ T5874] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1298.114650][ T5874] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1298.124232][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1298.631332][ T5874] usb 4-1: GET_CAPABILITIES returned 70
[ 1298.637552][ T5874] usbtmc 4-1:16.0: can't read capabilities
[ 1298.810439][ T5874] usb 4-1: USB disconnect, device number 27
[ 1300.148894][T14001] netlink: 'syz.3.1675': attribute type 27 has an invalid length.
[ 1300.260110][T10877] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1300.326299][T10877] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1300.416555][T10877] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1300.463943][T10877] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[ 1300.484230][ T9353] usb 10-1: new high-speed USB device number 21 using dummy_hcd
[ 1300.605149][ T5874] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 1300.709402][ T9353] usb 10-1: Using ep0 maxpacket: 16
[ 1300.845922][ T5874] usb 4-1: Using ep0 maxpacket: 16
[ 1300.890090][ T5874] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1300.898667][ T5874] usb 4-1: config 0 has no interface number 0
[ 1301.110032][ T5874] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1301.119741][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.128212][ T5874] usb 4-1: Product: syz
[ 1301.134752][ T5874] usb 4-1: Manufacturer: syz
[ 1301.141606][ T5874] usb 4-1: SerialNumber: syz
[ 1301.505871][ T5874] usb 4-1: config 0 descriptor??
[ 1301.552669][ T5874] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1301.584276][T14011] syzkaller0: entered promiscuous mode
[ 1301.590037][T14011] syzkaller0: entered allmulticast mode
[ 1302.106906][ T5874] gspca_spca1528: reg_w err -110
[ 1302.139673][ T5874] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[ 1303.595696][ T5874] usb 4-1: USB disconnect, device number 28
[ 1304.799011][ T9344] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[ 1304.964510][ T9344] usb 9-1: Using ep0 maxpacket: 8
[ 1305.039863][ T9344] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1305.053050][ T9344] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1305.064158][ T9344] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1305.074913][ T9344] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1305.088479][ T9344] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1305.098093][ T9344] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1305.821831][ T9353] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1305.842578][ T9344] usb 9-1: GET_CAPABILITIES returned 2f
[ 1305.848975][ T9344] usbtmc 9-1:16.0: can't read capabilities
[ 1305.909915][ T9353] usb 10-1: unable to read config index 0 descriptor/start: -32
[ 1305.920471][ T9353] usb 10-1: chopping to 0 config(s)
[ 1305.926009][ T9353] usb 10-1: can't read configurations, error -32
[ 1306.031394][ T9344] usb 9-1: USB disconnect, device number 32
[ 1306.146328][ T9353] usb 10-1: new high-speed USB device number 22 using dummy_hcd
[ 1306.355307][ T9353] usb 10-1: device descriptor read/64, error -32
[ 1306.495051][ T9353] usb usb10-port1: attempt power cycle
[ 1306.914757][ T9353] usb 10-1: new high-speed USB device number 23 using dummy_hcd
[ 1306.974997][ T9353] usb 10-1: device descriptor read/8, error -32
[ 1307.264324][ T9353] usb 10-1: new high-speed USB device number 24 using dummy_hcd
[ 1307.363612][ T9353] usb 10-1: device descriptor read/8, error -32
[ 1307.374186][T14061] syzkaller0: entered promiscuous mode
[ 1307.379811][T14061] syzkaller0: entered allmulticast mode
[ 1307.424264][T14066] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1693'.
[ 1307.524645][ T9353] usb usb10-port1: unable to enumerate USB device
[ 1313.068410][ T5874] usb 10-1: new high-speed USB device number 25 using dummy_hcd
[ 1313.285996][ T5874] usb 10-1: Using ep0 maxpacket: 8
[ 1313.340847][ T5874] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1313.352581][ T5874] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1313.362998][ T5874] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1313.373543][ T5874] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1313.387458][ T5874] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1313.397700][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1313.414001][T11886] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1313.576085][T11886] usb 2-1: device descriptor read/64, error -71
[ 1313.776645][ T5874] usb 10-1: GET_CAPABILITIES returned 2f
[ 1313.782772][ T5874] usbtmc 10-1:16.0: can't read capabilities
[ 1313.813947][T11886] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1313.984916][T14119] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1705'.
[ 1314.014691][T11886] usb 2-1: device descriptor read/64, error -71
[ 1314.030673][ T9353] usb 10-1: USB disconnect, device number 25
[ 1314.144088][T11886] usb usb2-port1: attempt power cycle
[ 1314.544088][T11886] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1314.624300][T11886] usb 2-1: device descriptor read/8, error -71
[ 1314.884300][T11886] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1314.897687][T14125] syzkaller0: entered promiscuous mode
[ 1314.903374][T14125] syzkaller0: entered allmulticast mode
[ 1314.956101][T11886] usb 2-1: device descriptor read/8, error -71
[ 1315.121227][T11886] usb usb2-port1: unable to enumerate USB device
[ 1318.824992][T14158] fuse: Bad value for 'fd'
[ 1319.323203][T14160] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1715'.
[ 1319.332716][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1715'.
[ 1319.835112][T14171] syzkaller0: entered promiscuous mode
[ 1319.840930][T14171] syzkaller0: entered allmulticast mode
[ 1320.155312][ T9347] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 1320.334582][ T9347] usb 4-1: Using ep0 maxpacket: 8
[ 1320.368224][ T9347] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1320.379963][ T9347] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1320.390654][ T9347] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1320.400975][ T9347] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1320.416068][ T9347] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1320.426172][ T9347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1320.702599][T14163] delete_channel: no stack
[ 1320.864793][ T9347] usb 4-1: GET_CAPABILITIES returned 2f
[ 1320.870800][ T9347] usbtmc 4-1:16.0: can't read capabilities
[ 1321.057292][ T9344] usb 4-1: USB disconnect, device number 29
[ 1321.294024][ T9347] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1321.488493][ T9347] usb 2-1: device descriptor read/64, error -71
[ 1321.784018][ T9347] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1322.015446][ T9347] usb 2-1: device descriptor read/64, error -71
[ 1322.130645][ T9347] usb usb2-port1: attempt power cycle
[ 1322.564481][ T9347] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1322.617591][ T9347] usb 2-1: device descriptor read/8, error -71
[ 1322.636101][T14191] netlink: 'syz.8.1721': attribute type 27 has an invalid length.
[ 1322.874957][ T9347] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1322.936802][ T9347] usb 2-1: device descriptor read/8, error -71
[ 1322.975348][ T9344] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[ 1323.074054][ T9347] usb usb2-port1: unable to enumerate USB device
[ 1323.184762][ T9344] usb 9-1: Using ep0 maxpacket: 16
[ 1323.235926][ T9344] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1323.244315][ T9344] usb 9-1: config 0 has no interface number 0
[ 1323.296535][ T9344] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1323.305972][ T9344] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1323.314522][ T9344] usb 9-1: Product: syz
[ 1323.318899][ T9344] usb 9-1: Manufacturer: syz
[ 1323.324286][ T9344] usb 9-1: SerialNumber: syz
[ 1323.409555][ T9344] usb 9-1: config 0 descriptor??
[ 1323.466692][ T9344] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1323.996757][ T9344] gspca_spca1528: reg_w err -110
[ 1324.027532][ T9344] spca1528 9-1:0.1: probe with driver spca1528 failed with error -110
[ 1326.484143][ T9344] usb 9-1: USB disconnect, device number 33
[ 1327.233946][ T9344] usb 9-1: new high-speed USB device number 34 using dummy_hcd
[ 1327.464016][ T9344] usb 9-1: Using ep0 maxpacket: 32
[ 1327.566097][ T9344] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1327.575684][ T9344] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.686760][ T9344] usb 9-1: config 0 descriptor??
[ 1327.929509][ T9344] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1327.969093][ T9344] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1328.046828][ T9344] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1328.054650][ T9344] usb 9-1: media controller created
[ 1328.082098][T14218] fuse: Bad value for 'fd'
[ 1328.221081][ T9344] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1328.664763][ T9344] az6027: usb out operation failed. (-71)
[ 1328.724439][ T9344] az6027: usb out operation failed. (-71)
[ 1328.730496][ T9344] stb0899_attach: Driver disabled by Kconfig
[ 1328.736864][ T9344] az6027: no front-end attached
[ 1328.736864][ T9344] 
[ 1328.874042][ T9344] az6027: usb out operation failed. (-71)
[ 1328.880001][ T9344] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1328.891450][ T9344] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input25
[ 1329.065894][ T9344] dvb-usb: schedule remote query interval to 400 msecs.
[ 1329.073073][ T9344] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1329.251294][ T9344] usb 9-1: USB disconnect, device number 34
[ 1329.296858][T14225] syzkaller0: entered promiscuous mode
[ 1329.302572][T14225] syzkaller0: entered allmulticast mode
[ 1329.904043][ T9344] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1330.793930][ T5874] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[ 1330.959593][ T5874] usb 9-1: device descriptor read/64, error -71
[ 1331.215276][ T5874] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[ 1331.383998][ T5874] usb 9-1: device descriptor read/64, error -71
[ 1331.517121][ T5874] usb usb9-port1: attempt power cycle
[ 1331.556365][T14245] syzkaller1: entered promiscuous mode
[ 1331.562174][T14245] syzkaller1: entered allmulticast mode
[ 1331.954659][ T5874] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[ 1332.052508][ T5874] usb 9-1: device descriptor read/8, error -71
[ 1332.320907][ T5874] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[ 1332.395731][ T5874] usb 9-1: device descriptor read/8, error -71
[ 1332.539148][ T5874] usb usb9-port1: unable to enumerate USB device
[ 1332.615938][T14257] fuse: Bad value for 'fd'
[ 1333.504240][T14259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'.
[ 1333.514452][ T9344] usb 10-1: new high-speed USB device number 26 using dummy_hcd
[ 1333.715057][ T9344] usb 10-1: Using ep0 maxpacket: 32
[ 1333.798733][ T9344] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1333.809451][ T9344] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1333.881753][ T9344] usb 10-1: config 0 descriptor??
[ 1334.175210][ T9344] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1334.208086][ T9344] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1334.229365][T14275] syzkaller0: entered promiscuous mode
[ 1334.235316][T14275] syzkaller0: entered allmulticast mode
[ 1334.275673][ T9344] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1334.283289][ T9344] usb 10-1: media controller created
[ 1334.369334][ T9344] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1334.879625][ T9344] az6027: usb out operation failed. (-71)
[ 1334.964803][ T9344] az6027: usb out operation failed. (-71)
[ 1334.970812][ T9344] stb0899_attach: Driver disabled by Kconfig
[ 1334.977130][ T9344] az6027: no front-end attached
[ 1334.977130][ T9344] 
[ 1335.044097][ T9344] az6027: usb out operation failed. (-71)
[ 1335.050291][ T9344] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1335.063068][ T9344] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input26
[ 1335.255132][ T9344] dvb-usb: schedule remote query interval to 400 msecs.
[ 1335.265532][ T9344] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1335.403163][ T9344] usb 10-1: USB disconnect, device number 26
[ 1336.111777][ T9344] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1336.143752][ T9347] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[ 1336.368912][ T9347] usb 9-1: Using ep0 maxpacket: 8
[ 1336.397111][ T9347] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1336.407760][ T9347] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1336.418195][ T9347] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1336.429271][ T9347] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1336.442877][ T9347] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1336.452246][ T9347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.765009][ T9347] usb 9-1: GET_CAPABILITIES returned 2f
[ 1336.771173][ T9347] usbtmc 9-1:16.0: can't read capabilities
[ 1336.956437][T14306] netlink: 'syz.9.1753': attribute type 1 has an invalid length.
[ 1337.205544][T11886] usb 9-1: USB disconnect, device number 39
[ 1338.039727][T14315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1755'.
[ 1338.244110][ T9347] usb 10-1: new high-speed USB device number 27 using dummy_hcd
[ 1338.434671][ T9347] usb 10-1: device descriptor read/64, error -71
[ 1338.682920][ T9347] usb 10-1: new high-speed USB device number 28 using dummy_hcd
[ 1338.873977][ T9347] usb 10-1: device descriptor read/64, error -71
[ 1339.011789][ T9347] usb usb10-port1: attempt power cycle
[ 1339.060326][T14327] syzkaller0: entered promiscuous mode
[ 1339.066226][T14327] syzkaller0: entered allmulticast mode
[ 1339.393902][ T9347] usb 10-1: new high-speed USB device number 29 using dummy_hcd
[ 1339.474350][ T9347] usb 10-1: device descriptor read/8, error -71
[ 1339.744399][ T9347] usb 10-1: new high-speed USB device number 30 using dummy_hcd
[ 1339.852101][ T9347] usb 10-1: device descriptor read/8, error -71
[ 1339.978002][ T9347] usb usb10-port1: unable to enumerate USB device
[ 1340.861204][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1340.868098][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1340.893320][T14348] loop6: detected capacity change from 0 to 7
[ 1340.901073][T14349] netlink: 'syz.3.1766': attribute type 1 has an invalid length.
[ 1340.931821][T14348] Dev loop6: unable to read RDB block 7
[ 1340.938471][T14348]  loop6: unable to read partition table
[ 1340.984868][T14348] loop6: partition table beyond EOD, truncated
[ 1340.992803][T14348] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1342.115522][T14358] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1769'.
[ 1342.758942][T14367] syzkaller0: entered promiscuous mode
[ 1342.765086][T14367] syzkaller0: entered allmulticast mode
[ 1343.328186][ T5874] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1343.584792][ T5874] usb 2-1: device descriptor read/64, error -71
[ 1343.874169][ T5874] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1343.896923][T14384] loop6: detected capacity change from 0 to 7
[ 1343.924536][T14384] Dev loop6: unable to read RDB block 7
[ 1343.930554][T14384]  loop6: unable to read partition table
[ 1343.970864][T14384] loop6: partition table beyond EOD, truncated
[ 1343.977690][T14384] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1344.103986][ T5874] usb 2-1: device descriptor read/64, error -71
[ 1344.219303][ T5874] usb usb2-port1: attempt power cycle
[ 1344.634715][ T5874] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1344.717538][ T5874] usb 2-1: device descriptor read/8, error -71
[ 1344.803846][ T9344] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[ 1344.971634][ T5874] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1345.025124][ T9344] usb 9-1: device descriptor read/64, error -71
[ 1345.052260][ T5874] usb 2-1: device descriptor read/8, error -71
[ 1345.166189][ T5874] usb usb2-port1: unable to enumerate USB device
[ 1345.193769][ T9347] usb 10-1: new high-speed USB device number 31 using dummy_hcd
[ 1345.285321][ T9344] usb 9-1: new high-speed USB device number 41 using dummy_hcd
[ 1345.409775][ T9347] usb 10-1: config 0 has no interfaces?
[ 1345.443889][ T9344] usb 9-1: device descriptor read/64, error -71
[ 1345.452980][ T9347] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1345.462555][ T9347] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1345.471492][ T9347] usb 10-1: Product: syz
[ 1345.476277][ T9347] usb 10-1: Manufacturer: syz
[ 1345.481165][ T9347] usb 10-1: SerialNumber: syz
[ 1345.499566][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1783'.
[ 1345.552641][ T9347] usb 10-1: config 0 descriptor??
[ 1345.561441][ T9344] usb usb9-port1: attempt power cycle
[ 1345.932159][ T5874] usb 10-1: USB disconnect, device number 31
[ 1345.947171][ T9344] usb 9-1: new high-speed USB device number 42 using dummy_hcd
[ 1346.013964][ T9344] usb 9-1: device descriptor read/8, error -71
[ 1346.285655][ T9344] usb 9-1: new high-speed USB device number 43 using dummy_hcd
[ 1346.336311][ T9344] usb 9-1: device descriptor read/8, error -71
[ 1346.445469][ T9344] usb usb9-port1: unable to enumerate USB device
[ 1348.216597][T14439] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1794'.
[ 1348.873238][T14451] loop8: detected capacity change from 0 to 16384
[ 1348.913801][ T9344] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1349.064251][ T9344] usb 4-1: device descriptor read/64, error -71
[ 1349.344193][ T9344] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1349.606398][ T9344] usb 4-1: device descriptor read/64, error -71
[ 1349.638869][T14451] loop8: detected capacity change from 16384 to 16383
[ 1349.725308][ T9344] usb usb4-port1: attempt power cycle
[ 1350.114155][ T9344] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1350.224818][ T9344] usb 4-1: device descriptor read/8, error -71
[ 1350.321147][T14467] syzkaller0: entered promiscuous mode
[ 1350.329630][T14467] syzkaller0: entered allmulticast mode
[ 1350.484144][T11886] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1350.521034][ T9344] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1350.615118][ T9344] usb 4-1: device descriptor read/8, error -71
[ 1350.691955][T11886] usb 2-1: device descriptor read/64, error -71
[ 1350.761461][ T9344] usb usb4-port1: unable to enumerate USB device
[ 1350.963721][T11886] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1351.154327][T11886] usb 2-1: device descriptor read/64, error -71
[ 1351.286937][T11886] usb usb2-port1: attempt power cycle
[ 1351.474044][T14481] netlink: 'syz.0.1807': attribute type 1 has an invalid length.
[ 1351.703148][T11886] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1351.792444][T11886] usb 2-1: device descriptor read/8, error -71
[ 1352.097022][T11886] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1352.155768][T11886] usb 2-1: device descriptor read/8, error -71
[ 1352.190008][T14496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1810'.
[ 1352.287493][T11886] usb usb2-port1: unable to enumerate USB device
[ 1353.255287][T11886] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1353.435012][T11886] usb 4-1: Using ep0 maxpacket: 8
[ 1353.503611][T11886] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1353.515537][T11886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1353.526076][T11886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1353.536551][T11886] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1353.550005][T11886] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1353.559502][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1353.952594][T11886] usb 4-1: GET_CAPABILITIES returned f8
[ 1353.958654][T11886] usbtmc 4-1:16.0: can't read capabilities
[ 1354.167459][T11886] usb 4-1: USB disconnect, device number 34
[ 1355.194423][   T30] audit: type=1800 audit(1756256154.987:36): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1820" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1355.455063][T14530] netlink: 'syz.3.1821': attribute type 1 has an invalid length.
[ 1356.034914][T14537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1823'.
[ 1356.554076][T11886] usb 9-1: new high-speed USB device number 44 using dummy_hcd
[ 1356.767052][T11886] usb 9-1: config 0 has no interfaces?
[ 1356.826910][T11886] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1356.837040][T11886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1356.845781][T11886] usb 9-1: Product: syz
[ 1356.850191][T11886] usb 9-1: Manufacturer: syz
[ 1356.855266][T11886] usb 9-1: SerialNumber: syz
[ 1356.964044][ T9344] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1357.003321][T11886] usb 9-1: config 0 descriptor??
[ 1357.229592][ T9344] usb 4-1: config 0 has no interfaces?
[ 1357.289033][ T9344] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1357.298691][ T9344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1357.307139][ T9344] usb 4-1: Product: syz
[ 1357.311501][ T9344] usb 4-1: Manufacturer: syz
[ 1357.316460][ T9344] usb 4-1: SerialNumber: syz
[ 1357.515013][ T9344] usb 4-1: config 0 descriptor??
[ 1357.825894][ T9353] usb 4-1: USB disconnect, device number 35
[ 1359.523912][T14561] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1359.632475][T14561] tipc: Resetting bearer <eth:syzkaller0>
[ 1359.769010][T14560] tipc: Disabling bearer <eth:syzkaller0>
[ 1359.835837][ T9353] usb 9-1: USB disconnect, device number 44
[ 1360.367971][T11886] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1360.624277][T11886] usb 4-1: Using ep0 maxpacket: 8
[ 1360.626328][T14568] loop6: detected capacity change from 0 to 7
[ 1360.686139][T11886] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1360.697812][T11886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1360.708294][T11886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1360.721427][T11886] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1360.734843][T11886] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1360.744213][T11886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.775326][T14568] Dev loop6: unable to read RDB block 7
[ 1360.781245][T14568]  loop6: unable to read partition table
[ 1360.834570][T14568] loop6: partition table beyond EOD, truncated
[ 1360.841081][T14568] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1361.304083][T11886] usb 4-1: GET_CAPABILITIES returned 0
[ 1361.310012][T11886] usbtmc 4-1:16.0: can't read capabilities
[ 1361.534231][ T9347] usb 4-1: USB disconnect, device number 36
[ 1362.985432][T14586] netlink: 'syz.3.1836': attribute type 1 has an invalid length.
[ 1363.472808][T14590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1837'.
[ 1364.533669][ T9347] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1364.672108][T14603] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1364.758649][ T9347] usb 2-1: config 0 has no interfaces?
[ 1364.836139][ T9347] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1364.845782][ T9347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1364.856069][ T9347] usb 2-1: Product: syz
[ 1364.860556][ T9347] usb 2-1: Manufacturer: syz
[ 1364.865778][ T9347] usb 2-1: SerialNumber: syz
[ 1364.884725][T14603] tipc: Resetting bearer <eth:syzkaller0>
[ 1364.964677][T14605] loop6: detected capacity change from 0 to 7
[ 1364.982587][T14602] tipc: Disabling bearer <eth:syzkaller0>
[ 1365.005746][ T9347] usb 2-1: config 0 descriptor??
[ 1365.043360][T14605] Dev loop6: unable to read RDB block 7
[ 1365.049616][T14605]  loop6: unable to read partition table
[ 1365.247200][T14605] loop6: partition table beyond EOD, truncated
[ 1365.254099][T14605] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1366.624089][T11886] usb 2-1: USB disconnect, device number 51
[ 1367.518195][T14618] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1846'.
[ 1368.775547][T14633] netlink: 'syz.3.1849': attribute type 1 has an invalid length.
[ 1369.692373][T14641] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1852'.
[ 1370.327255][T14648] tipc: Started in network mode
[ 1370.332641][T14648] tipc: Node identity f261da2a6e22, cluster identity 4711
[ 1370.340863][T14648] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1370.458261][T14652] syzkaller0: entered promiscuous mode
[ 1370.464193][T14652] syzkaller0: entered allmulticast mode
[ 1370.725410][T14647] tipc: Resetting bearer <eth:syzkaller0>
[ 1370.847309][T14647] tipc: Disabling bearer <eth:syzkaller0>
[ 1371.154627][T11886] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1371.413968][T11886] usb 2-1: config 0 has no interfaces?
[ 1371.468413][T11886] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1371.477955][T11886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.486536][T11886] usb 2-1: Product: syz
[ 1371.490901][T11886] usb 2-1: Manufacturer: syz
[ 1371.495896][T11886] usb 2-1: SerialNumber: syz
[ 1371.683128][T11886] usb 2-1: config 0 descriptor??
[ 1372.154834][T11886] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 1372.389307][T11886] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1372.401186][T11886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1372.412646][T11886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1372.422670][T11886] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1372.436083][T11886] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1372.445385][T11886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1372.715931][T11886] usb 1-1: config 0 descriptor??
[ 1373.327302][ T9347] usb 2-1: USB disconnect, device number 52
[ 1373.328650][T11886] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1373.666621][T14681] netlink: 'syz.8.1863': attribute type 1 has an invalid length.
[ 1374.626860][T11886] usb 9-1: new high-speed USB device number 45 using dummy_hcd
[ 1374.773107][T14696] fuse: Bad value for 'fd'
[ 1374.825213][T11886] usb 9-1: Using ep0 maxpacket: 16
[ 1374.864913][T14698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1866'.
[ 1374.910426][T11886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1374.987939][T11886] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1374.998044][T11886] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1375.006568][T11886] usb 9-1: Product: syz
[ 1375.010943][T11886] usb 9-1: Manufacturer: syz
[ 1375.015911][T11886] usb 9-1: SerialNumber: syz
[ 1375.111149][T11886] usb 9-1: config 0 descriptor??
[ 1375.231879][ T9347] usb 1-1: USB disconnect, device number 15
[ 1375.516855][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1865'.
[ 1375.866435][T14709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1375.966521][T14709] syzkaller0: entered promiscuous mode
[ 1375.972275][T14709] syzkaller0: entered allmulticast mode
[ 1376.132080][T14708] tipc: Resetting bearer <eth:syzkaller0>
[ 1376.212257][T14708] tipc: Disabling bearer <eth:syzkaller0>
[ 1376.281919][T14717] fuse: Bad value for 'fd'
[ 1376.479343][T11886] usb 9-1: USB disconnect, device number 45
[ 1377.260706][T14728] fuse: Bad value for 'fd'
[ 1377.833922][T11886] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1377.954014][T14736] fuse: Bad value for 'fd'
[ 1378.060531][T11886] usb 4-1: config 0 has no interfaces?
[ 1378.141998][T14741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1881'.
[ 1378.147178][T11886] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1378.160855][T11886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1378.170528][T11886] usb 4-1: Product: syz
[ 1378.175998][T11886] usb 4-1: Manufacturer: syz
[ 1378.180782][T11886] usb 4-1: SerialNumber: syz
[ 1378.304024][T11886] usb 4-1: config 0 descriptor??
[ 1378.873850][ T9347] usb 4-1: USB disconnect, device number 37
[ 1378.951805][T14751] fuse: Bad value for 'fd'
[ 1379.034950][T14750] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1380.027084][T11886] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[ 1380.055342][T14768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1380.086226][T14771] syzkaller0: entered promiscuous mode
[ 1380.091959][T14771] syzkaller0: entered allmulticast mode
[ 1380.115988][T14772] fuse: Bad value for 'fd'
[ 1380.198451][T14758] tipc: Resetting bearer <eth:syzkaller0>
[ 1380.224933][T11886] usb 10-1: Using ep0 maxpacket: 16
[ 1380.260230][T11886] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1380.267090][T14758] tipc: Disabling bearer <eth:syzkaller0>
[ 1380.353215][T11886] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1380.363245][T11886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.372814][T11886] usb 10-1: Product: syz
[ 1380.377464][T11886] usb 10-1: Manufacturer: syz
[ 1380.382405][T11886] usb 10-1: SerialNumber: syz
[ 1380.550906][T11886] usb 10-1: config 0 descriptor??
[ 1380.933194][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1889'.
[ 1381.172177][T14783] fuse: Bad value for 'fd'
[ 1381.555614][T14793] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1895'.
[ 1381.879449][ T9347] usb 10-1: USB disconnect, device number 32
[ 1382.122016][T14798] fuse: Bad value for 'fd'
[ 1382.987738][T14810] fuse: Bad value for 'fd'
[ 1383.245735][T14815] tipc: Started in network mode
[ 1383.250940][T14815] tipc: Node identity 32d360a8d312, cluster identity 4711
[ 1383.260153][T14815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1383.293817][T11886] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1383.430252][T14813] syzkaller0: entered promiscuous mode
[ 1383.436135][T14813] syzkaller0: entered allmulticast mode
[ 1383.506457][T11886] usb 2-1: config 0 has no interfaces?
[ 1383.608898][T14813] tipc: Resetting bearer <eth:syzkaller0>
[ 1383.644523][T11886] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1383.654105][T11886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1383.662331][T11886] usb 2-1: Product: syz
[ 1383.667266][T11886] usb 2-1: Manufacturer: syz
[ 1383.672078][T11886] usb 2-1: SerialNumber: syz
[ 1383.691183][T14809] tipc: Resetting bearer <eth:syzkaller0>
[ 1383.769537][T14809] tipc: Disabling bearer <eth:syzkaller0>
[ 1383.782919][T11886] usb 2-1: config 0 descriptor??
[ 1385.052383][T11886] usb 2-1: USB disconnect, device number 53
[ 1386.376308][T14845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1910'.
[ 1387.505977][T11886] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 1387.724694][T11886] usb 1-1: Using ep0 maxpacket: 16
[ 1387.786098][T11886] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1387.858406][T11886] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1387.868365][T11886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1387.876851][T11886] usb 1-1: Product: syz
[ 1387.881149][T11886] usb 1-1: Manufacturer: syz
[ 1387.886045][T11886] usb 1-1: SerialNumber: syz
[ 1387.911305][T14864] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1387.950919][T14864] syzkaller0: entered promiscuous mode
[ 1387.956935][T14864] syzkaller0: entered allmulticast mode
[ 1387.995003][T11886] usb 1-1: config 0 descriptor??
[ 1388.161585][T14864] tipc: Resetting bearer <eth:syzkaller0>
[ 1388.257716][T14862] tipc: Resetting bearer <eth:syzkaller0>
[ 1388.280243][T14856] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1914'.
[ 1388.306034][T14862] tipc: Disabling bearer <eth:syzkaller0>
[ 1388.875341][T11886] usb 1-1: USB disconnect, device number 16
[ 1390.115528][ T9347] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1390.425675][ T9347] usb 2-1: config 0 has no interfaces?
[ 1390.506948][ T9347] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1390.516566][ T9347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1390.525011][ T9347] usb 2-1: Product: syz
[ 1390.529366][ T9347] usb 2-1: Manufacturer: syz
[ 1390.534344][ T9347] usb 2-1: SerialNumber: syz
[ 1390.626776][ T9347] usb 2-1: config 0 descriptor??
[ 1390.973803][ T9347] usb 9-1: new high-speed USB device number 46 using dummy_hcd
[ 1391.201660][ T9347] usb 9-1: Using ep0 maxpacket: 16
[ 1391.317596][ T9347] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1391.369205][ T9347] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1391.379911][ T9347] usb 9-1: can't read configurations, error -71
[ 1391.977077][ T9353] usb 2-1: USB disconnect, device number 54
[ 1393.259448][T14914] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1393.418564][T14914] tipc: Resetting bearer <eth:syzkaller0>
[ 1393.538408][T14913] tipc: Disabling bearer <eth:syzkaller0>
[ 1395.030003][T14941] fuse: Bad value for 'fd'
[ 1397.244191][T11886] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1397.586579][T11886] usb 4-1: config 0 has no interfaces?
[ 1397.685465][T11886] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1397.695208][T11886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1397.704108][T11886] usb 4-1: Product: syz
[ 1397.708478][T11886] usb 4-1: Manufacturer: syz
[ 1397.713295][T11886] usb 4-1: SerialNumber: syz
[ 1397.850937][T11886] usb 4-1: config 0 descriptor??
[ 1397.899207][T14974] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1397.978581][T14975] syzkaller0: entered promiscuous mode
[ 1397.984806][T14975] syzkaller0: entered allmulticast mode
[ 1398.108411][T14974] tipc: Resetting bearer <eth:syzkaller0>
[ 1398.294158][T14973] tipc: Resetting bearer <eth:syzkaller0>
[ 1398.410856][T14973] tipc: Disabling bearer <eth:syzkaller0>
[ 1399.002746][T11886] usb 4-1: USB disconnect, device number 38
[ 1401.404344][T15012] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1402.310858][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1402.319617][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1402.546538][T15026] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1402.593755][T15026] syzkaller0: entered promiscuous mode
[ 1402.599474][T15026] syzkaller0: entered allmulticast mode
[ 1402.714136][ T9347] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 1402.783939][T15026] tipc: Resetting bearer <eth:syzkaller0>
[ 1402.879010][T15022] tipc: Resetting bearer <eth:syzkaller0>
[ 1402.923946][ T9347] usb 1-1: device descriptor read/64, error -71
[ 1402.959452][T15022] tipc: Disabling bearer <eth:syzkaller0>
[ 1403.224797][ T9347] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 1403.487782][ T9347] usb 1-1: device descriptor read/64, error -71
[ 1403.615266][ T9347] usb usb1-port1: attempt power cycle
[ 1404.034052][ T9347] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1404.158825][ T9347] usb 1-1: device descriptor read/8, error -71
[ 1404.472486][ T9347] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1404.528633][ T9347] usb 1-1: device descriptor read/8, error -71
[ 1404.579731][ T9353] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[ 1404.662366][ T9347] usb usb1-port1: unable to enumerate USB device
[ 1404.771149][ T9353] usb 10-1: config 0 has no interfaces?
[ 1404.789796][ T9353] usb 10-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1404.799424][ T9353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1404.808007][ T9353] usb 10-1: Product: syz
[ 1404.812559][ T9353] usb 10-1: Manufacturer: syz
[ 1404.817665][ T9353] usb 10-1: SerialNumber: syz
[ 1404.851309][T15046] netlink: 'syz.8.1964': attribute type 1 has an invalid length.
[ 1404.937862][ T9353] usb 10-1: config 0 descriptor??
[ 1406.125615][T15061] syzkaller1: entered promiscuous mode
[ 1406.131357][T15061] syzkaller1: entered allmulticast mode
[ 1406.379663][ T9364] usb 10-1: USB disconnect, device number 33
[ 1407.976424][T15086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1408.028334][T15087] syzkaller0: entered promiscuous mode
[ 1408.034613][T15087] syzkaller0: entered allmulticast mode
[ 1408.140811][T15086] tipc: Resetting bearer <eth:syzkaller0>
[ 1408.151780][T15084] tipc: Resetting bearer <eth:syzkaller0>
[ 1408.209160][T15084] tipc: Disabling bearer <eth:syzkaller0>
[ 1409.344888][T15104] netlink: 'syz.8.1977': attribute type 1 has an invalid length.
[ 1410.969414][T15117] syzkaller1: entered promiscuous mode
[ 1410.975385][T15117] syzkaller1: entered allmulticast mode
[ 1413.206888][T15138] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1413.275916][T15138] syzkaller0: entered promiscuous mode
[ 1413.281636][T15138] syzkaller0: entered allmulticast mode
[ 1413.405109][T15144] tipc: Resetting bearer <eth:syzkaller0>
[ 1413.486714][T15137] tipc: Resetting bearer <eth:syzkaller0>
[ 1413.508472][T15137] tipc: Disabling bearer <eth:syzkaller0>
[ 1414.255781][T15153] netlink: 'syz.9.1990': attribute type 1 has an invalid length.
[ 1415.031315][T15165] syzkaller1: entered promiscuous mode
[ 1415.037658][T15165] syzkaller1: entered allmulticast mode
[ 1415.422131][T15173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1993'.
[ 1416.160875][T15177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1996'.
[ 1417.406952][T15193] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1417.482879][T15193] syzkaller0: entered promiscuous mode
[ 1417.491463][T15193] syzkaller0: entered allmulticast mode
[ 1417.514590][ T9364] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1417.711052][T15193] tipc: Resetting bearer <eth:syzkaller0>
[ 1417.807632][ T9364] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1417.818106][ T9364] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1417.834329][T15190] tipc: Resetting bearer <eth:syzkaller0>
[ 1417.905497][T15190] tipc: Disabling bearer <eth:syzkaller0>
[ 1417.936798][ T9364] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1417.946916][ T9364] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1417.955626][ T9364] usb 4-1: Manufacturer: syz
[ 1418.056031][ T9364] usb 4-1: config 0 descriptor??
[ 1418.884791][T15202] netlink: 'syz.8.2004': attribute type 1 has an invalid length.
[ 1419.411618][T15210] syzkaller1: entered promiscuous mode
[ 1419.417643][T15210] syzkaller1: entered allmulticast mode
[ 1420.141626][T15215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2008'.
[ 1420.639153][ T9364] usb 4-1: USB disconnect, device number 39
[ 1421.308461][ T9353] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 1421.561194][ T9353] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1421.574763][ T9353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1421.587831][ T9353] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1421.598719][ T9353] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1421.842233][ T9353] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1421.851719][ T9353] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1421.860250][ T9353] usb 1-1: Manufacturer: syz
[ 1421.968831][ T9353] usb 1-1: config 0 descriptor??
[ 1422.225564][T15242] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1422.367467][T15244] syzkaller0: entered promiscuous mode
[ 1422.373185][T15244] syzkaller0: entered allmulticast mode
[ 1422.514945][ T9353] appleir 0003:05AC:8243.000E: unknown main item tag 0x0
[ 1422.573306][ T9353] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1422.600415][T15238] tipc: Resetting bearer <eth:syzkaller0>
[ 1422.674122][T15236] tipc: Resetting bearer <eth:syzkaller0>
[ 1422.719152][T15236] tipc: Disabling bearer <eth:syzkaller0>
[ 1423.154919][T15252] netlink: 'syz.3.2017': attribute type 1 has an invalid length.
[ 1423.190171][T15240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2016'.
[ 1424.519546][T15269] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2021'.
[ 1424.638655][ T9344] usb 1-1: USB disconnect, device number 21
[ 1425.594017][ T9344] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1425.834787][ T9344] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1425.845762][ T9344] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1425.973961][ T9344] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1425.985073][ T9344] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1425.994519][ T9344] usb 1-1: Manufacturer: syz
[ 1426.153635][ T9344] usb 1-1: config 0 descriptor??
[ 1426.764631][T15287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2028'.
[ 1427.184621][T15294] netlink: 'syz.9.2030': attribute type 1 has an invalid length.
[ 1427.551794][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2029'.
[ 1428.232102][T15310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2034'.
[ 1428.693952][ T9344] usb 1-1: USB disconnect, device number 22
[ 1429.430377][T15334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2042'.
[ 1430.016682][T15342] netlink: 'syz.0.2043': attribute type 1 has an invalid length.
[ 1430.503761][ T9364] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1430.780537][ T9364] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1430.793019][ T9364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1430.804513][ T9364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1430.814815][ T9364] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1430.815244][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2047'.
[ 1430.828182][ T9364] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1430.846524][ T9364] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1431.220596][T11886] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1431.241935][ T9364] usb 2-1: config 0 descriptor??
[ 1431.429074][T11886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1431.440203][T11886] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1431.452260][T11886] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[ 1431.647594][T11886] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1431.657693][T11886] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1431.666394][T11886] usb 4-1: Manufacturer: syz
[ 1431.771969][ T9364] usbhid 2-1:0.0: can't add hid device: -71
[ 1431.784087][ T9364] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1431.857085][T11886] usb 4-1: config 0 descriptor??
[ 1431.915253][ T9364] usb 2-1: USB disconnect, device number 55
[ 1431.969522][T11886] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 1434.126898][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'.
[ 1434.484942][ T9344] usb 4-1: USB disconnect, device number 40
[ 1435.061861][T15401] netlink: 'syz.8.2059': attribute type 1 has an invalid length.
[ 1436.452891][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2061'.
[ 1437.088098][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'.
[ 1437.656051][ T9364] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1437.806073][T15436] fuse: Bad value for 'group_id'
[ 1437.811180][T15436] fuse: Bad value for 'group_id'
[ 1437.874141][ T9364] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1437.885274][ T9364] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1437.896488][ T9364] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[ 1438.121513][ T9364] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1438.132191][ T9364] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1438.140841][ T9364] usb 1-1: Manufacturer: syz
[ 1438.323148][ T9364] usb 1-1: config 0 descriptor??
[ 1438.386671][ T9364] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1438.804815][T15450] netlink: 'syz.1.2072': attribute type 1 has an invalid length.
[ 1440.933087][T15483] fuse: Bad value for 'group_id'
[ 1440.938848][T15483] fuse: Bad value for 'group_id'
[ 1441.052569][ T9364] usb 1-1: USB disconnect, device number 23
[ 1441.449564][T15482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'.
[ 1441.466565][T15487] 9pnet_fd: Insufficient options for proto=fd
[ 1441.835512][T15491] fuse: Bad value for 'group_id'
[ 1441.840803][T15491] fuse: Bad value for 'group_id'
[ 1443.539571][T15506] bond5 (unregistering): Released all slaves
[ 1443.806645][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2086'.
[ 1445.396803][T15528] fuse: Bad value for 'group_id'
[ 1445.402020][T15528] fuse: Bad value for 'group_id'
[ 1445.437131][ T9344] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1445.707229][ T9344] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1445.717672][ T9344] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1445.729094][ T9344] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[ 1445.874748][ T9344] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1445.884623][ T9344] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1445.893008][ T9344] usb 1-1: Manufacturer: syz
[ 1446.021774][ T9344] usb 1-1: config 0 descriptor??
[ 1446.122935][ T9344] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1446.284225][T15537] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1446.422543][T15542] fuse: Bad value for 'group_id'
[ 1446.428112][T15542] fuse: Bad value for 'group_id'
[ 1446.748183][T15532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2093'.
[ 1447.393884][ T9364] tipc: Node number set to 3787546792
[ 1448.381340][ T9344] usb 1-1: USB disconnect, device number 24
[ 1449.096491][T15566] bond4 (unregistering): Released all slaves
[ 1450.267634][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2101'.
[ 1452.164041][ T9364] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1452.664008][ T9364] usb 1-1: config 0 has no interfaces?
[ 1452.695222][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2106'.
[ 1452.754360][ T9364] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1452.763987][ T9364] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.772214][ T9364] usb 1-1: Product: syz
[ 1452.776934][ T9364] usb 1-1: Manufacturer: syz
[ 1452.781741][ T9364] usb 1-1: SerialNumber: syz
[ 1453.026951][ T9364] usb 1-1: config 0 descriptor??
[ 1453.123868][T11886] usb 9-1: new high-speed USB device number 48 using dummy_hcd
[ 1453.384120][T11886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1453.394895][T11886] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1453.406154][T11886] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[ 1453.687122][T11886] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1453.696640][T11886] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1453.705608][T11886] usb 9-1: Manufacturer: syz
[ 1453.773047][T11886] usb 9-1: config 0 descriptor??
[ 1453.863282][T11886] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1456.304393][ T9344] usb 9-1: USB disconnect, device number 48
[ 1456.958978][T15625] bond7 (unregistering): Released all slaves
[ 1458.634339][ T9347] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1458.984781][ T9347] usb 4-1: config 0 has no interfaces?
[ 1459.254022][ T9347] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1459.264652][ T9347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1459.272883][ T9347] usb 4-1: Product: syz
[ 1459.278261][ T9347] usb 4-1: Manufacturer: syz
[ 1459.282972][ T9347] usb 4-1: SerialNumber: syz
[ 1459.309885][ T9347] usb 4-1: config 0 descriptor??
[ 1459.853229][T15651] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2117'.
[ 1462.464418][ T9347] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1462.769886][ T9347] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1462.780543][ T9347] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1462.791722][ T9347] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[ 1462.984033][ T9347] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1462.993610][ T9347] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1463.001889][ T9347] usb 2-1: Manufacturer: syz
[ 1463.163055][ T9347] usb 2-1: config 0 descriptor??
[ 1463.311256][ T9347] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1463.665362][T15678] bond7 (unregistering): Released all slaves
[ 1463.782097][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1463.788900][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1464.441136][T11886] usb 1-1: USB disconnect, device number 25
[ 1466.332970][ T9347] usb 2-1: USB disconnect, device number 56
[ 1467.964557][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'.
[ 1472.208228][ T9347] usb 4-1: USB disconnect, device number 41
[ 1473.125188][T15739] bond4 (unregistering): Released all slaves
[ 1473.769692][T15743] batadv_slave_0: entered promiscuous mode
[ 1473.775967][T15743] batadv_slave_0: entered allmulticast mode
[ 1474.283894][T11886] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1474.555989][T11886] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1474.566502][T11886] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1474.577617][T11886] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[ 1474.765743][T11886] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1474.775706][T11886] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1474.784139][T11886] usb 2-1: Manufacturer: syz
[ 1474.966922][T11886] usb 2-1: config 0 descriptor??
[ 1475.023812][T11886] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1477.070007][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2141'.
[ 1477.655242][T11886] usb 2-1: USB disconnect, device number 57
[ 1479.997444][T11886] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1480.205127][T11886] usb 4-1: Using ep0 maxpacket: 8
[ 1480.249898][T11886] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1480.319254][T11886] usb 4-1: config 4 has an invalid interface number: 30 but max is 0
[ 1480.328271][T11886] usb 4-1: config 4 has no interface number 0
[ 1480.337181][T11886] usb 4-1: config 4 interface 30 has no altsetting 0
[ 1480.441173][T11886] usb 4-1: string descriptor 0 read error: -22
[ 1480.448374][T11886] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88
[ 1480.457898][T11886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1480.613779][T11886] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state.
[ 1480.621099][T11886] dw2102: su3000_power_ctrl: 1, initialized 0
[ 1480.627585][T11886] dvb-usb: bulk message failed: -22 (2/0)
[ 1480.780509][T11886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1480.877307][T15793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1480.887093][T15793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1480.944729][T15793] dvb-usb: bulk message failed: -22 (4/0)
[ 1480.950841][T15793] dw2102: i2c transfer failed.
[ 1480.976604][T11886] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2))
[ 1480.985188][T11886] usb 4-1: media controller created
[ 1480.990600][T11886] dvb-usb: bulk message failed: -22 (6/0)
[ 1480.996977][T11886] dw2102: i2c transfer failed.
[ 1481.001900][T11886] dvb-usb: bulk message failed: -22 (6/0)
[ 1481.008001][T11886] dw2102: i2c transfer failed.
[ 1481.012950][T11886] dvb-usb: bulk message failed: -22 (6/0)
[ 1481.019795][T11886] dw2102: i2c transfer failed.
[ 1481.024914][T11886] dvb-usb: bulk message failed: -22 (6/0)
[ 1481.030835][T11886] dw2102: i2c transfer failed.
[ 1481.035935][T11886] dvb-usb: bulk message failed: -22 (6/0)
[ 1481.041853][T11886] dw2102: i2c transfer failed.
[ 1481.047173][T11886] dvb-usb: bulk message failed: -22 (6/0)
[ 1481.053100][T11886] dw2102: i2c transfer failed.
[ 1481.058183][T11886] dvb-usb: MAC address: 02:02:02:02:02:02
[ 1481.463263][T11886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1481.874107][T11886] dvb-usb: bulk message failed: -22 (3/0)
[ 1481.880010][T11886] dw2102: command 0x0e transfer failed.
[ 1481.886440][T11886] dvb-usb: bulk message failed: -22 (3/0)
[ 1481.892370][T11886] dw2102: command 0x0e transfer failed.
[ 1482.208852][T11886] dvb-usb: bulk message failed: -22 (3/0)
[ 1482.216484][T11886] dw2102: command 0x0e transfer failed.
[ 1482.222205][T11886] dvb-usb: bulk message failed: -22 (3/0)
[ 1482.228361][T11886] dw2102: command 0x0e transfer failed.
[ 1482.234225][T11886] dvb-usb: bulk message failed: -22 (1/0)
[ 1482.240126][T11886] dw2102: command 0x51 transfer failed.
[ 1482.246020][T11886] dvb-usb: bulk message failed: -22 (5/0)
[ 1482.251918][T11886] dw2102: i2c probe for address 0x68 failed.
[ 1482.258155][T11886] dvb-usb: bulk message failed: -22 (5/0)
[ 1482.264125][T11886] dw2102: i2c probe for address 0x69 failed.
[ 1482.270207][T11886] dvb-usb: bulk message failed: -22 (5/0)
[ 1482.278283][T11886] dw2102: i2c probe for address 0x6a failed.
[ 1482.284625][T11886] dw2102: probing for demodulator failed. Is the external power switched on?
[ 1482.293756][T11886] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)'
[ 1482.773902][ T9347] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1483.050520][ T9347] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1483.062794][ T9347] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[ 1483.203173][T15822] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2155'.
[ 1483.216827][ T9347] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1483.227442][ T9347] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1483.236370][ T9347] usb 1-1: Manufacturer: syz
[ 1483.332880][ T9347] usb 1-1: config 0 descriptor??
[ 1483.384091][T11886] rc_core: IR keymap rc-tt-1500 not found
[ 1483.390167][T11886] Registered IR keymap rc-empty
[ 1483.398694][T11886] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0
[ 1483.400574][ T9347] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1483.411959][T11886] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input28
[ 1483.687159][T11886] dvb-usb: schedule remote query interval to 250 msecs.
[ 1483.695867][T11886] dw2102: su3000_power_ctrl: 0, initialized 1
[ 1483.702118][T11886] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected.
[ 1483.918977][T11886] usb 4-1: USB disconnect, device number 42
[ 1484.661952][T11886] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected.
[ 1485.923783][T11886] usb 1-1: USB disconnect, device number 26
[ 1486.165281][ T9347] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1486.535712][ T9347] usb 4-1: Using ep0 maxpacket: 32
[ 1486.571087][ T9347] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1486.580840][ T9347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1486.709151][ T9347] usb 4-1: config 0 descriptor??
[ 1487.502880][ T9347] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1487.534972][ T9347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1487.608108][ T9347] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1487.615781][ T9347] usb 4-1: media controller created
[ 1487.704349][ T9347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1488.344586][ T9347] az6027: usb out operation failed. (-71)
[ 1488.367035][ T9347] az6027: usb out operation failed. (-71)
[ 1488.374668][ T9347] stb0899_attach: Driver disabled by Kconfig
[ 1488.380849][ T9347] az6027: no front-end attached
[ 1488.380849][ T9347] 
[ 1488.414663][ T9347] az6027: usb out operation failed. (-71)
[ 1488.420704][ T9347] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1488.431393][ T9347] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29
[ 1488.491508][ T9347] dvb-usb: schedule remote query interval to 400 msecs.
[ 1488.501081][ T9347] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1488.523856][T11886] usb 10-1: new high-speed USB device number 34 using dummy_hcd
[ 1488.656758][ T9347] usb 4-1: USB disconnect, device number 43
[ 1488.834852][T11886] usb 10-1: Using ep0 maxpacket: 32
[ 1488.927325][T11886] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 140, changing to 11
[ 1488.944851][T11886] usb 10-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1488.961210][T11886] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1488.970307][T11886] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[ 1488.984442][T11886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1489.225018][T11886] usb 10-1: config 0 descriptor??
[ 1489.497245][ T9347] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1489.880133][T11886] corsair 0003:1B1C:1B09.000F: hidraw0: USB HID v0.02 Device [HID 1b1c:1b09] on usb-dummy_hcd.9-1/input0
[ 1489.976940][ T9353] usb 10-1: USB disconnect, device number 34
[ 1490.764752][T11886] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1490.768462][T15876] fido_id[15876]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 1491.003830][T11886] usb 4-1: Using ep0 maxpacket: 8
[ 1491.035439][T11886] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1491.044993][T11886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1491.053220][T11886] usb 4-1: Product: syz
[ 1491.058124][T11886] usb 4-1: Manufacturer: syz
[ 1491.063005][T11886] usb 4-1: SerialNumber: syz
[ 1491.216819][T11886] usb 4-1: config 0 descriptor??
[ 1491.507442][T11886] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1491.655034][ T9353] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1491.869004][ T9353] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1491.881129][ T9353] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[ 1492.008452][ T9353] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1492.018756][ T9353] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1492.027272][ T9353] usb 1-1: Manufacturer: syz
[ 1492.165192][ T9353] usb 1-1: config 0 descriptor??
[ 1492.225510][ T9353] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[ 1492.497209][T15900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1492.571553][T15901] syzkaller0: entered promiscuous mode
[ 1492.579652][T15901] syzkaller0: entered allmulticast mode
[ 1492.712232][T15899] tipc: Resetting bearer <eth:syzkaller0>
[ 1492.856973][T15898] tipc: Resetting bearer <eth:syzkaller0>
[ 1492.904632][T15898] tipc: Disabling bearer <eth:syzkaller0>
[ 1493.108247][T11886] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1493.151573][T11886] usb 4-1: USB disconnect, device number 44
[ 1493.764132][ T9353] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1493.973979][ T9353] usb 2-1: Using ep0 maxpacket: 32
[ 1494.023857][ T9353] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1494.033218][ T9353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.094774][ T9353] usb 2-1: config 0 descriptor??
[ 1494.391880][ T9353] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1494.449016][ T9353] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1494.495119][ T9353] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1494.502557][ T9353] usb 2-1: media controller created
[ 1494.625201][ T9353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1494.770777][T11886] usb 1-1: USB disconnect, device number 27
[ 1494.838787][T15922] fuse: Unknown parameter 'grou00000000000000000000'
[ 1495.106965][ T9353] az6027: usb out operation failed. (-71)
[ 1495.114894][ T9353] az6027: usb out operation failed. (-71)
[ 1495.120893][ T9353] stb0899_attach: Driver disabled by Kconfig
[ 1495.127424][ T9353] az6027: no front-end attached
[ 1495.127424][ T9353] 
[ 1495.247644][ T9353] az6027: usb out operation failed. (-71)
[ 1495.253886][ T9353] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1495.265688][ T9353] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input30
[ 1495.407289][ T9353] dvb-usb: schedule remote query interval to 400 msecs.
[ 1495.417200][ T9353] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1495.517045][ T9353] usb 2-1: USB disconnect, device number 58
[ 1496.396814][ T9353] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1497.765522][T15953] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1498.255397][T11886] usb 10-1: new high-speed USB device number 35 using dummy_hcd
[ 1498.579618][T11886] usb 10-1: Using ep0 maxpacket: 8
[ 1498.645170][T11886] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1498.653861][T11886] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1498.664207][T11886] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1498.674580][T11886] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1498.685924][T11886] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1498.700037][T11886] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1498.710231][T11886] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1499.114119][ T9353] usb 9-1: new high-speed USB device number 49 using dummy_hcd
[ 1499.389813][ T9353] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1499.401101][ T9353] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[ 1499.602522][T11886] usb 10-1: usb_control_msg returned -32
[ 1499.610451][T11886] usbtmc 10-1:16.0: can't read capabilities
[ 1499.616109][ T9353] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1499.625925][ T9353] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1499.634404][ T9353] usb 9-1: Manufacturer: syz
[ 1499.780860][ T9353] usb 9-1: config 0 descriptor??
[ 1499.881579][ T9353] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1500.152712][T15969] usbtmc 10-1:16.0: stb usb_control_msg returned -32
[ 1501.157887][T15974] fuse: Unknown parameter 'grou00000000000000000000'
[ 1502.173909][ T9347] usb 9-1: USB disconnect, device number 49
[ 1502.214357][ T9353] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1502.477357][ T9353] usb 2-1: Using ep0 maxpacket: 32
[ 1502.526345][ T9353] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1502.536369][ T9353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1502.718861][ T9353] usb 2-1: config 0 descriptor??
[ 1503.064124][ T9353] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1503.098165][ T9353] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1503.206835][ T9353] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1503.217738][ T9353] usb 2-1: media controller created
[ 1503.421421][ T9353] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1503.766316][ T9353] az6027: usb out operation failed. (-71)
[ 1503.883881][ T9353] az6027: usb out operation failed. (-71)
[ 1503.889829][ T9353] stb0899_attach: Driver disabled by Kconfig
[ 1503.896160][ T9353] az6027: no front-end attached
[ 1503.896160][ T9353] 
[ 1504.010480][ T9353] az6027: usb out operation failed. (-71)
[ 1504.019130][ T9353] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1504.029838][ T9353] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31
[ 1504.236584][ T9353] dvb-usb: schedule remote query interval to 400 msecs.
[ 1504.243871][ T9353] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1504.415149][ T9353] usb 2-1: USB disconnect, device number 59
[ 1505.372241][ T9353] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1508.085221][T16013] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1508.273915][T11886] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1508.540288][T11886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1508.551282][T11886] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1508.630733][T11886] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1508.640298][T11886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.648622][T11886] usb 1-1: Product: syz
[ 1508.652911][T11886] usb 1-1: Manufacturer: syz
[ 1508.657809][T11886] usb 1-1: SerialNumber: syz
[ 1509.063181][T16011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1509.073810][T16011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1509.250771][T11886] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[ 1509.372509][T11886] usb 1-1: USB disconnect, device number 28
[ 1509.686725][T16023] fuse: Unknown parameter 'grou00000000000000000000'
[ 1509.864652][T11886] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1510.034084][ T5874] usb 10-1: USB disconnect, device number 35
[ 1510.092472][T11886] usb 1-1: Using ep0 maxpacket: 8
[ 1510.114197][ T9364] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1510.159756][T11886] usb 1-1: config index 0 descriptor too short (expected 301, got 72)
[ 1510.168735][T11886] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1510.179483][T11886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1510.193535][T11886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1510.205940][T11886] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1510.216617][T11886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1510.227987][T11886] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1510.238272][T11886] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1510.247704][T11886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1510.487530][ T9364] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1510.499692][ T9364] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1510.510867][ T9364] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1510.641971][ T9364] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1510.651830][T16031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1510.651910][ T9364] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1510.667884][ T9364] usb 2-1: Manufacturer: syz
[ 1510.715235][T16032] syzkaller0: entered promiscuous mode
[ 1510.721043][T16032] syzkaller0: entered allmulticast mode
[ 1510.765828][ T9364] usb 2-1: config 0 descriptor??
[ 1510.829279][T11886] usb 1-1: usb_control_msg returned -71
[ 1510.835551][T11886] usbtmc 1-1:16.0: can't read capabilities
[ 1510.841793][T11886] usbtmc 1-1:16.0: Failed to submit iin_urb
[ 1510.850020][T11886] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -90
[ 1510.892351][ T9364] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1510.914842][T11886] usb 1-1: USB disconnect, device number 29
[ 1510.958380][T16028] tipc: Resetting bearer <eth:syzkaller0>
[ 1511.017162][T16028] tipc: Disabling bearer <eth:syzkaller0>
[ 1513.112187][T16055] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2211'.
[ 1513.212211][ T9353] usb 2-1: USB disconnect, device number 60
[ 1513.765285][T16060] syzkaller1: entered promiscuous mode
[ 1513.770959][T16060] syzkaller1: entered allmulticast mode
[ 1514.171770][T16064] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1515.497153][ T9353] usb 10-1: new high-speed USB device number 36 using dummy_hcd
[ 1515.511687][T16074] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1515.734330][ T9353] usb 10-1: Using ep0 maxpacket: 16
[ 1515.768796][ T9353] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1515.779444][ T9353] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1515.792528][ T9353] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1515.803501][ T9353] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1515.814031][ T9353] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1516.055713][ T9353] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1516.065319][ T9353] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1516.073885][ T9353] usb 10-1: Manufacturer: syz
[ 1516.176636][ T9353] usb 10-1: config 0 descriptor??
[ 1517.036735][ T9353] rc_core: IR keymap rc-hauppauge not found
[ 1517.042926][ T9353] Registered IR keymap rc-empty
[ 1517.048779][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.095897][T16086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1517.186630][T16086] syzkaller0: entered promiscuous mode
[ 1517.192421][T16086] syzkaller0: entered allmulticast mode
[ 1517.273274][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.310463][T16086] tipc: Resetting bearer <eth:syzkaller0>
[ 1517.357205][T16085] tipc: Resetting bearer <eth:syzkaller0>
[ 1517.375849][ T9353] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 1517.390418][ T9353] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input32
[ 1517.447736][T16085] tipc: Disabling bearer <eth:syzkaller0>
[ 1517.575507][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.686627][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.719103][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.780680][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.806695][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.852577][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.904043][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.941371][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1517.974617][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1518.031953][ T9347] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1518.045697][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1518.083902][ T9353] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1518.138160][ T9353] mceusb 10-1:0.0: Registered  with mce emulator interface version 1
[ 1518.149226][ T9353] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1518.215731][ T9353] usb 10-1: USB disconnect, device number 36
[ 1518.299342][ T9347] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1518.309952][ T9347] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1518.412057][ T9347] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1518.421644][ T9347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.430071][ T9347] usb 2-1: Product: syz
[ 1518.434435][ T9347] usb 2-1: Manufacturer: syz
[ 1518.439186][ T9347] usb 2-1: SerialNumber: syz
[ 1518.922425][T16092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1518.932867][T16092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1519.112291][ T9347] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 1519.265133][ T9347] usb 2-1: USB disconnect, device number 61
[ 1519.984395][ T9347] usb 9-1: new high-speed USB device number 50 using dummy_hcd
[ 1520.309098][ T9347] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1520.320107][ T9347] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1520.333542][ T9347] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1520.342768][ T9347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1520.516522][ T9347] usb 9-1: config 0 descriptor??
[ 1520.522907][ T9353] usb 10-1: new high-speed USB device number 37 using dummy_hcd
[ 1520.552180][ T9347] usbhid 9-1:0.0: couldn't find an input interrupt endpoint
[ 1520.734260][ T9353] usb 10-1: Using ep0 maxpacket: 8
[ 1520.809608][ T9353] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1520.819039][ T9353] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1520.827592][ T9353] usb 10-1: Product: syz
[ 1520.831977][ T9353] usb 10-1: Manufacturer: syz
[ 1520.836957][ T9353] usb 10-1: SerialNumber: syz
[ 1520.965403][ T9353] usb 10-1: config 0 descriptor??
[ 1521.323803][ T9353] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1522.767604][ T9353] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1522.802094][ T9353] usb 10-1: USB disconnect, device number 37
[ 1523.465461][ T9364] usb 9-1: USB disconnect, device number 50
[ 1523.978040][T16131] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1524.877127][T16141] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1524.979978][T16145] syzkaller0: entered promiscuous mode
[ 1524.988459][T16145] syzkaller0: entered allmulticast mode
[ 1525.111331][T16141] tipc: Resetting bearer <eth:syzkaller0>
[ 1525.243081][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[ 1525.249710][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[ 1525.275682][T11886] usb 10-1: new high-speed USB device number 38 using dummy_hcd
[ 1525.288478][T16140] tipc: Resetting bearer <eth:syzkaller0>
[ 1525.357264][T16140] tipc: Disabling bearer <eth:syzkaller0>
[ 1525.503655][T11886] usb 10-1: Using ep0 maxpacket: 16
[ 1525.534698][T11886] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1525.545488][T11886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1525.558004][T11886] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1525.568018][T11886] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1525.578095][T11886] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1525.747903][T11886] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1525.757680][T11886] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1525.767032][T11886] usb 10-1: Manufacturer: syz
[ 1525.877096][T11886] usb 10-1: config 0 descriptor??
[ 1526.714191][T11886] rc_core: IR keymap rc-hauppauge not found
[ 1526.720304][T11886] Registered IR keymap rc-empty
[ 1526.726347][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1526.743919][ T9353] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1526.810509][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1526.886820][T11886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[ 1526.903520][T11886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input33
[ 1526.988224][ T9353] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1526.998742][ T9353] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1527.087752][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.128606][ T9353] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1527.138528][ T9353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.146856][ T9353] usb 1-1: Product: syz
[ 1527.151206][ T9353] usb 1-1: Manufacturer: syz
[ 1527.157240][ T9353] usb 1-1: SerialNumber: syz
[ 1527.171448][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.254638][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.325644][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.374024][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.435493][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.509092][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.572022][T16157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1527.576190][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.583883][T16157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1527.663887][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.748078][T11886] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[ 1527.812642][T11886] mceusb 10-1:0.0: Registered  with mce emulator interface version 1
[ 1527.821913][T11886] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1528.044674][T11886] usb 10-1: USB disconnect, device number 38
[ 1528.204059][ T9353] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[ 1528.354633][ T9353] usb 1-1: USB disconnect, device number 30
[ 1528.548584][ T9347] usb 9-1: new high-speed USB device number 51 using dummy_hcd
[ 1528.735348][ T9347] usb 9-1: device descriptor read/64, error -71
[ 1528.993942][ T9347] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[ 1529.235447][ T9347] usb 9-1: device descriptor read/64, error -71
[ 1529.348811][ T9347] usb usb9-port1: attempt power cycle
[ 1529.548495][ T9353] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1529.734329][ T9347] usb 9-1: new high-speed USB device number 53 using dummy_hcd
[ 1529.774417][ T9353] usb 1-1: Using ep0 maxpacket: 8
[ 1529.794334][ T9347] usb 9-1: device descriptor read/8, error -71
[ 1529.865446][ T9353] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1529.875186][ T9353] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.883959][ T9353] usb 1-1: Product: syz
[ 1529.888357][ T9353] usb 1-1: Manufacturer: syz
[ 1529.893173][ T9353] usb 1-1: SerialNumber: syz
[ 1530.054586][ T9347] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1530.075474][ T9353] usb 1-1: config 0 descriptor??
[ 1530.137825][ T9347] usb 9-1: device descriptor read/8, error -71
[ 1530.255718][ T9347] usb usb9-port1: unable to enumerate USB device
[ 1530.352297][ T9353] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1531.349418][T16180] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1531.878060][ T9353] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1531.935326][ T9353] usb 1-1: USB disconnect, device number 31
[ 1533.304013][T16185] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[ 1533.351812][T16191] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1533.395517][T16191] syzkaller0: entered promiscuous mode
[ 1533.401588][T16191] syzkaller0: entered allmulticast mode
[ 1533.490054][T16185] usb 1-1: Using ep0 maxpacket: 16
[ 1533.528058][T16185] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1533.538315][T16185] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00
[ 1533.548043][T16185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1533.560402][T16191] tipc: Resetting bearer <eth:syzkaller0>
[ 1533.695537][T16190] tipc: Resetting bearer <eth:syzkaller0>
[ 1533.746380][T16185] usb 1-1: config 0 descriptor??
[ 1533.833074][T16190] tipc: Disabling bearer <eth:syzkaller0>
[ 1534.306739][T16185] hid (null): report_id 0 is invalid
[ 1534.375213][T16185] kye 0003:0458:5019.0010: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 1534.488504][T16185] kye 0003:0458:5019.0010: report_id 0 is invalid
[ 1534.495406][T16185] kye 0003:0458:5019.0010: item 0 0 1 8 parsing failed
[ 1534.607095][T16185] kye 0003:0458:5019.0010: parse failed
[ 1534.613163][T16185] kye 0003:0458:5019.0010: probe with driver kye failed with error -22
[ 1534.674371][T16185] usb 1-1: USB disconnect, device number 32
[ 1535.027243][ T9344] usb 9-1: new high-speed USB device number 55 using dummy_hcd
[ 1535.273756][ T9344] usb 9-1: Using ep0 maxpacket: 16
[ 1535.349818][ T9344] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1535.360779][ T9344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1535.372108][ T9344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1535.382091][ T9344] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1535.392073][ T9344] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1535.634034][ T9344] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1535.644030][ T9344] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1535.652361][ T9344] usb 9-1: Manufacturer: syz
[ 1535.815045][ T9344] usb 9-1: config 0 descriptor??
[ 1535.983878][T11886] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[ 1536.237523][T11886] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[ 1536.246410][T11886] usb 1-1: config 0 has no interface number 0
[ 1536.342761][T11886] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1536.352567][T11886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1536.361989][T11886] usb 1-1: Product: syz
[ 1536.366554][T11886] usb 1-1: Manufacturer: syz
[ 1536.373910][T11886] usb 1-1: SerialNumber: syz
[ 1536.815784][T11886] usb 1-1: config 0 descriptor??
[ 1536.893685][ T9344] rc_core: IR keymap rc-hauppauge not found
[ 1536.900035][ T9344] Registered IR keymap rc-empty
[ 1536.905687][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1536.944542][T16208] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1537.083869][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1537.156474][ T9344] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[ 1537.172022][ T9344] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input34
[ 1537.196619][T16208] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1537.208360][T16208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1537.219638][T16208] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1537.229864][T16208] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1537.306966][T11886] usb 1-1: Firmware: major: 0, minor: 11, hardware type: UNKNOWN (170)
[ 1537.480399][T16208] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1537.485442][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1537.490162][T16208] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1537.505997][T16208] usb 2-1: Manufacturer: syz
[ 1537.564358][T11886] usb 1-1: failed to fetch extended address, random address set
[ 1537.572593][T11886] usb 1-1: atusb_probe: initialization failed, error = -524
[ 1537.581422][T11886] atusb 1-1:0.128: probe with driver atusb failed with error -524
[ 1537.608199][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1537.637258][T16208] usb 2-1: config 0 descriptor??
[ 1537.755620][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1537.758300][T11886] usb 1-1: USB disconnect, device number 33
[ 1537.782221][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1537.844908][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1537.962097][T16224] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1537.981115][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1538.054577][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1538.122156][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1538.184027][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1538.224002][T16208] usbhid 2-1:0.0: can't add hid device: -71
[ 1538.230340][ T9344] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[ 1538.230673][T16208] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1538.308391][ T9344] mceusb 9-1:0.0: Registered  with mce emulator interface version 1
[ 1538.319663][ T9344] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1538.417955][T16208] usb 2-1: USB disconnect, device number 62
[ 1538.495278][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2253'.
[ 1538.537710][ T9344] usb 9-1: USB disconnect, device number 55
[ 1538.847133][T16229] bond5 (unregistering): Released all slaves
[ 1539.072983][T16233] fuse: Bad value for 'fd'
[ 1542.151387][T16264] loop8: detected capacity change from 0 to 16384
[ 1542.623641][T15642] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1542.922730][T15642] usb 4-1: device descriptor read/64, error -71
[ 1543.144393][T16266] loop8: detected capacity change from 16384 to 16383
[ 1543.203732][T15642] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1543.423773][T15642] usb 4-1: device descriptor read/64, error -71
[ 1543.554649][T15642] usb usb4-port1: attempt power cycle
[ 1543.863842][ T9344] usb 10-1: new high-speed USB device number 39 using dummy_hcd
[ 1543.974026][T15642] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1544.056448][T15642] usb 4-1: device descriptor read/8, error -71
[ 1544.113974][ T9344] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1544.125571][ T9344] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1544.136974][ T9344] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1544.147218][ T9344] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1544.319806][ T9344] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1544.329342][ T9344] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1544.337956][ T9344] usb 10-1: Manufacturer: syz
[ 1544.344482][T15642] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1544.353105][ T9352] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1544.397966][T15642] usb 4-1: device descriptor read/8, error -71
[ 1544.472474][ T9344] usb 10-1: config 0 descriptor??
[ 1544.524795][T15642] usb usb4-port1: unable to enumerate USB device
[ 1544.555358][ T9352] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1544.567675][ T9352] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1544.577787][ T9352] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1544.587205][ T9352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1544.750956][ T9352] usb 2-1: config 0 descriptor??
[ 1544.975012][ T9344] usbhid 10-1:0.0: can't add hid device: -71
[ 1544.982441][ T9344] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1545.070185][ T9352] usb 2-1: string descriptor 0 read error: -71
[ 1545.096340][ T9352] usb 2-1: USB disconnect, device number 63
[ 1545.117302][ T9344] usb 10-1: USB disconnect, device number 39
[ 1547.947155][T16314] loop8: detected capacity change from 0 to 16384
[ 1548.226434][T16315] loop8: detected capacity change from 16384 to 16383
[ 1548.777563][T16323] loop6: detected capacity change from 0 to 7
[ 1548.840838][ T9344] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1548.881619][T16323] Dev loop6: unable to read RDB block 7
[ 1548.888890][T16323]  loop6: unable to read partition table
[ 1548.984760][T16323] loop6: partition table beyond EOD, truncated
[ 1548.991416][T16323] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1549.129256][ T9344] usb 4-1: device descriptor read/64, error -71
[ 1549.384838][ T9344] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1549.534216][ T9344] usb 4-1: device descriptor read/64, error -71
[ 1549.654487][ T9344] usb usb4-port1: attempt power cycle
[ 1550.094974][ T9344] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1550.150271][ T9344] usb 4-1: device descriptor read/8, error -71
[ 1550.209714][ T9352] usb 10-1: new high-speed USB device number 40 using dummy_hcd
[ 1550.295278][T15642] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[ 1550.434119][ T9344] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1550.451824][ T9352] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1550.463139][ T9352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1550.474685][ T9352] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1550.484737][ T9352] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1550.536085][ T9344] usb 4-1: device descriptor read/8, error -71
[ 1550.565962][T15642] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.576611][T15642] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1550.586078][T15642] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1550.595586][T15642] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1550.652352][ T9344] usb usb4-port1: unable to enumerate USB device
[ 1550.669569][ T9352] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1550.679251][ T9352] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1550.688993][ T9352] usb 10-1: Manufacturer: syz
[ 1550.716785][T15642] usb 9-1: config 0 descriptor??
[ 1550.780065][ T9352] usb 10-1: config 0 descriptor??
[ 1551.038845][T15642] usb 9-1: string descriptor 0 read error: -71
[ 1551.117299][T15642] usb 9-1: USB disconnect, device number 56
[ 1551.278674][ T9352] usbhid 10-1:0.0: can't add hid device: -71
[ 1551.285658][ T9352] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1551.415157][ T9352] usb 10-1: USB disconnect, device number 40
[ 1553.140923][T16362] loop6: detected capacity change from 0 to 7
[ 1553.190044][T16362] Dev loop6: unable to read RDB block 7
[ 1553.196495][T16362]  loop6: unable to read partition table
[ 1553.235048][T16362] loop6: partition table beyond EOD, truncated
[ 1553.241685][T16362] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1553.536728][T16364] loop8: detected capacity change from 0 to 16384
[ 1553.944825][T16367] loop8: detected capacity change from 16384 to 16383
[ 1554.025300][T11886] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[ 1554.263854][T11886] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1554.274679][T11886] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1554.284253][T11886] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1554.293738][T11886] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1554.320067][T15642] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1554.459349][T11886] usb 9-1: config 0 descriptor??
[ 1554.532275][T15642] usb 1-1: device descriptor read/64, error -71
[ 1554.829942][T15642] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1555.058410][T11886] usb 9-1: string descriptor 0 read error: -71
[ 1555.071914][T11886] usb 9-1: USB disconnect, device number 57
[ 1555.076262][T15642] usb 1-1: device descriptor read/64, error -71
[ 1555.231925][T15642] usb usb1-port1: attempt power cycle
[ 1555.383880][T16208] usb 10-1: new high-speed USB device number 41 using dummy_hcd
[ 1555.633985][T15642] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1555.684054][T16208] usb 10-1: Using ep0 maxpacket: 8
[ 1555.699204][T15642] usb 1-1: device descriptor read/8, error -71
[ 1555.727277][T16208] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1555.739240][T16208] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1555.749819][T16208] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1555.760234][T16208] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1555.774359][T16208] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1555.783786][T16208] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1555.975512][T15642] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1556.067808][T15642] usb 1-1: device descriptor read/8, error -71
[ 1556.210134][T15642] usb usb1-port1: unable to enumerate USB device
[ 1556.450531][T16208] usb 10-1: usb_control_msg returned -71
[ 1556.458706][T16208] usbtmc 10-1:16.0: can't read capabilities
[ 1556.585575][T16208] usb 10-1: USB disconnect, device number 41
[ 1556.843016][T16394] fuse: Bad value for 'fd'
[ 1558.125018][T16410] loop6: detected capacity change from 0 to 7
[ 1558.204371][T16410] Dev loop6: unable to read RDB block 7
[ 1558.210393][T16410]  loop6: unable to read partition table
[ 1558.302511][T16410] loop6: partition table beyond EOD, truncated
[ 1558.309539][T16410] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1558.536523][T15642] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1558.802968][T15642] usb 4-1: Using ep0 maxpacket: 32
[ 1558.969941][T15642] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1558.979440][T15642] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1559.005085][T16414] bond4: entered promiscuous mode
[ 1559.010600][T16414] bond4: entered allmulticast mode
[ 1559.017353][T16414] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1559.134076][T15642] usb 4-1: config 0 descriptor??
[ 1559.155245][T16418] loop8: detected capacity change from 0 to 16384
[ 1559.376232][T16414] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1559.388778][T16414] bond5: entered promiscuous mode
[ 1559.393977][T15642] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1559.401807][T16414] bond5: entered allmulticast mode
[ 1559.410511][T16414] bond4: (slave bond5): Enslaving as an active interface with an up link
[ 1559.424652][T16208] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[ 1559.426259][T15642] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1559.464247][T15642] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1559.471663][T15642] usb 4-1: media controller created
[ 1559.627723][T15642] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1559.643764][T16412] =====================================================
[ 1559.651286][T16412] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120
[ 1559.658927][T16412]  _copy_to_user+0xcc/0x120
[ 1559.663744][T16412]  i2cdev_ioctl_smbus+0x586/0x660
[ 1559.669124][T16412]  compat_i2cdev_ioctl+0x48f/0xb40
[ 1559.674632][T16412]  __ia32_compat_sys_ioctl+0x7f6/0x1270
[ 1559.680411][T16412]  ia32_sys_call+0x2d5f/0x4310
[ 1559.685456][T16412]  __do_fast_syscall_32+0xb0/0x150
[ 1559.690916][T16412]  do_fast_syscall_32+0x38/0x80
[ 1559.696228][T16412]  do_SYSENTER_32+0x1f/0x30
[ 1559.700967][T16412]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1559.708135][T16412] 
[ 1559.710562][T16412] Uninit was stored to memory at:
[ 1559.716062][T16412]  __i2c_smbus_xfer+0x254d/0x2f60
[ 1559.722752][T16412]  i2c_smbus_xfer+0x31d/0x4d0
[ 1559.728354][T16412]  i2cdev_ioctl_smbus+0x4a1/0x660
[ 1559.733747][T16412]  compat_i2cdev_ioctl+0x48f/0xb40
[ 1559.738997][T16412]  __ia32_compat_sys_ioctl+0x7f6/0x1270
[ 1559.744952][T16412]  ia32_sys_call+0x2d5f/0x4310
[ 1559.749895][T16412]  __do_fast_syscall_32+0xb0/0x150
[ 1559.755332][T16412]  do_fast_syscall_32+0x38/0x80
[ 1559.760341][T16412]  do_SYSENTER_32+0x1f/0x30
[ 1559.765077][T16412]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1559.771569][T16412] 
[ 1559.774067][T16412] Local variable msgbuf1.i created at:
[ 1559.779588][T16412]  __i2c_smbus_xfer+0x86a/0x2f60
[ 1559.784813][T16412]  i2c_smbus_xfer+0x31d/0x4d0
[ 1559.789708][T16412] 
[ 1559.792081][T16412] Bytes 0-1 of 2 are uninitialized
[ 1559.798237][T16412] Memory access of size 2 starts at ffff888068257c86
[ 1559.805147][T16412] Data copied to user address 0000000080000040
[ 1559.811428][T16412] 
[ 1559.814035][T16412] CPU: 1 UID: 0 PID: 16412 Comm: syz.3.2305 Not tainted syzkaller #0 PREEMPT(none) 
[ 1559.826132][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1559.837204][T16412] =====================================================
[ 1559.844537][T16412] Disabling lock debugging due to kernel taint
[ 1559.850848][T16412] Kernel panic - not syncing: kmsan.panic set ...
[ 1559.857455][T16412] CPU: 1 UID: 0 PID: 16412 Comm: syz.3.2305 Tainted: G    B               syzkaller #0 PREEMPT(none) 
[ 1559.868641][T16412] Tainted: [B]=BAD_PAGE
[ 1559.872932][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1559.883241][T16412] Call Trace:
[ 1559.886647][T16412]  <TASK>
[ 1559.889696][T16412]  __dump_stack+0x26/0x30
[ 1559.894248][T16412]  dump_stack_lvl+0x53/0x270
[ 1559.903523][T16412]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1559.909587][T16412]  dump_stack+0x1e/0x25
[ 1559.913963][T16412]  vpanic+0x361/0xc50
[ 1559.918179][T16412]  panic+0x15d/0x160
[ 1559.922341][T16412]  kmsan_report+0x31c/0x320
[ 1559.927063][T16412]  ? kmsan_internal_check_memory+0x1e1/0x230
[ 1559.933231][T16412]  ? kmsan_copy_to_user+0xf1/0x190
[ 1559.938540][T16412]  ? _copy_to_user+0xcc/0x120
[ 1559.943413][T16412]  ? i2cdev_ioctl_smbus+0x586/0x660
[ 1559.948837][T16412]  ? compat_i2cdev_ioctl+0x48f/0xb40
[ 1559.954369][T16412]  ? __ia32_compat_sys_ioctl+0x7f6/0x1270
[ 1559.960314][T16412]  ? ia32_sys_call+0x2d5f/0x4310
[ 1559.965436][T16412]  ? __do_fast_syscall_32+0xb0/0x150
[ 1559.971058][T16412]  ? do_fast_syscall_32+0x38/0x80
[ 1559.976337][T16412]  ? do_SYSENTER_32+0x1f/0x30
[ 1559.981261][T16412]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1559.988010][T16412]  ? __pfx_az6027_i2c_xfer+0x10/0x10
[ 1559.993658][T16412]  ? __i2c_transfer+0x11cd/0x3110
[ 1559.998902][T16412]  ? kmsan_get_metadata+0xfb/0x160
[ 1560.004230][T16412]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[ 1560.010766][T16412]  ? kmsan_get_metadata+0xfb/0x160
[ 1560.016183][T16412]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1560.022221][T16412]  ? __i2c_smbus_xfer+0x1e93/0x2f60
[ 1560.027744][T16412]  ? kmsan_get_metadata+0xfb/0x160
[ 1560.033071][T16412]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[ 1560.039127][T16412]  kmsan_internal_check_memory+0x1e1/0x230
[ 1560.045162][T16412]  kmsan_copy_to_user+0xf1/0x190
[ 1560.050330][T16412]  _copy_to_user+0xcc/0x120
[ 1560.055019][T16412]  i2cdev_ioctl_smbus+0x586/0x660
[ 1560.060287][T16412]  compat_i2cdev_ioctl+0x48f/0xb40
[ 1560.065643][T16412]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[ 1560.071501][T16412]  __ia32_compat_sys_ioctl+0x7f6/0x1270
[ 1560.077270][T16412]  ? kmsan_get_metadata+0xfb/0x160
[ 1560.082623][T16412]  ? kmsan_get_metadata+0xfb/0x160
[ 1560.087947][T16412]  ia32_sys_call+0x2d5f/0x4310
[ 1560.092896][T16412]  __do_fast_syscall_32+0xb0/0x150
[ 1560.098252][T16412]  do_fast_syscall_32+0x38/0x80
[ 1560.103328][T16412]  do_SYSENTER_32+0x1f/0x30
[ 1560.108044][T16412]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1560.114593][T16412] RIP: 0023:0xf708e539
[ 1560.118793][T16412] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1560.138583][T16412] RSP: 002b:00000000f547e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1560.147226][T16412] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720
[ 1560.155359][T16412] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 1560.163662][T16412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1560.171799][T16412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1560.179913][T16412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1560.188154][T16412]  </TASK>
[ 1560.191624][T16412] Kernel Offset: disabled
[ 1560.196031][T16412] Rebooting in 86400 seconds..