last executing test programs:

5m33.716793715s ago: executing program 0 (id=240):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x38}}, 0x48c0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fcntl$getown(r2, 0x9)
r4 = fanotify_init(0x40, 0x400)
writev(r4, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x8}, {0x0}], 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r5 = gettid()
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000100001042bbd7000000700000000ffff", @ANYRES32=0x0, @ANYBLOB="00000300000000001800128009000100766c616e00000000080002800400038014000300766c616e3000"/52], 0x4c}}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x6}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28)
recvmmsg(r7, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020000010031000000000900010073797a300000000008000540000000063c0000001e0a05010000000000000000070000000900020073797a3100000000090001007379"], 0xc0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

5m31.479918463s ago: executing program 0 (id=249):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c1200003f000701feffffff00000000017c0000040042800c00018006000600800a0000451202803f12148004", @ANYRES8=r1, @ANYRES8=r1], 0x126c}, 0x1, 0x0, 0x0, 0x4048051}, 0x40480c0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
pipe2(&(0x7f0000000000), 0x800)
mq_unlink(&(0x7f0000000100)='/!-.^\x00')
bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000180)=@base={0x5, 0x80, 0x1a00, 0xf7, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1003, 0x1}, 0x50)

5m30.726305974s ago: executing program 0 (id=251):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000066000/0x3000)=nil, &(0x7f0000560000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000057f000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) (async)
r1 = syz_open_dev$usbfs(&(0x7f00000003c0), 0x16b5, 0x41)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x6, 0xffff, 0x0, 0x0, 0x6, 0x0}) (async)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) (async)
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='&'], 0x26)
r5 = socket(0x2, 0x3, 0xff)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10) (async)
r6 = syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x1, 0x7, 0x30, 0x3, 0x6, r6}) (async)
r7 = syz_usbip_server_init(0x3) (async)
r8 = geteuid()
write$FUSE_CREATE_OPEN(r7, &(0x7f0000003680)={0xa0, 0xfffffffffffffff5, 0x0, {{0x6, 0x0, 0xf36f, 0xffffffffffff4f14, 0x5, 0x3, {0x2, 0x5, 0x100000000, 0x14, 0x1, 0x5a1, 0x7, 0x2, 0xc, 0x8000, 0x7, r8, 0x0, 0xbf0, 0x3}}}}, 0xa3) (async)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000000000cTTF000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r9, @ANYRESDEC=0x0]) (async)
sendmmsg$unix(r5, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000008c0)="166da1949ba0ee9ee511f385427169498f9565a1c4099287", 0x18}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x18, 0x1, 0x2, {r6, r8}}}], 0x18}}], 0x2, 0x0) (async)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x1000004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRES16=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES32=r9], 0x0, 0x0, 0x0) (async)
splice(r2, 0x0, r4, 0x0, 0x26, 0x0) (async)
r10 = socket(0x2, 0x80805, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r11 = socket$inet6_sctp(0xa, 0x4, 0x84)
setsockopt(r11, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) (async)
ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000380)) (async)
connect$unix(r10, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaae19d74de7dc186dd6004000000380600fe8000000000000000000000000000bbfe8000000000000000000000000000aafffc4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e00021ff907800061d12fb6ba0cd8f4e22c7624e2ada29619d1813123fb3be65a54fd336b0e78572bf7b439c"], 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x8000, 0x1, 0xffbffff7, 0x20000001, {{0x7, 0x4, 0x2, 0x1, 0x1c, 0x64, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010101, @broadcast, {[@rr={0x7, 0x7, 0x7c, [@multicast1]}, @end]}}}}}) (async)
socket(0x1000000000000010, 0x80802, 0x0)

5m29.741886372s ago: executing program 0 (id=253):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r1], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x149f01, 0x0)
open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010003b15", @ANYBLOB="0000000000b401002400128009000100626f6e640000000014000280050011790000000005000d"], 0x44}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x0, 0x0, 0x0, r6}, &(0x7f0000000180), &(0x7f00000001c0))
getsockname$unix(r6, &(0x7f0000000500), &(0x7f00000001c0)=0x6e)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x10001, 0x0, 0x5000, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0xffff, 0xefffffffffffffff, 0xfffffffffffffffd, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

5m28.249422943s ago: executing program 0 (id=260):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(0x0, r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r2=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000030000000100000008000100", @ANYRES32=r2, @ANYBLOB], 0x68}}, 0x80c4)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x1d, 0x2c, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xff}}, @exit, @ldst={0x2, 0x2, 0x6, 0x1, 0x0, 0x2, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000640)='syzkaller\x00', 0x1, 0x4e, &(0x7f0000000680)=""/78, 0x41000, 0x60, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xb, 0x200, 0x40}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)=[{0x1, 0x4}, {0x2, 0x5, 0x1, 0x7}, {0x2, 0x4, 0x7}, {0x3, 0x3, 0xa}], 0x10, 0x1}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001004a0000000000ee71ac13de"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r4, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000800)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0x17, &(0x7f0000000180)=0x701b, 0x4)
socket$netlink(0x10, 0x3, 0x0)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r8, 0x0, 0xd0, &(0x7f0000000000), 0x4)
r9 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x3, 0x0, 0x8}, &(0x7f00000001c0)=0x14)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66)
syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c6004000010902120001000000000904"], 0x0)

5m27.091287932s ago: executing program 0 (id=261):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES16=r6, @ANYRES32=r0, @ANYRESHEX=r5, @ANYRESHEX=r3, @ANYBLOB="0536458ee3a2c2821a861b4aa44492325f1a0223defdc4ca67653cfdea2a69e44a03c80abcdc698a81d11b1f22cfcec3664928410f0852e712b2b7691e00"/73, @ANYRES8=r6, @ANYRESDEC=r5, @ANYRES8=r6], &(0x7f0000000000)='GPL\x00'}, 0x94)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d12, &(0x7f00000000c0))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010029bd7000fddbdf250b0000000c0005800800"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00)
setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4)
sendto$inet(r7, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r7, &(0x7f000000e280), 0x58a, 0x42, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

5m26.513486282s ago: executing program 32 (id=261):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x4, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYRES16=r6, @ANYRES32=r0, @ANYRESHEX=r5, @ANYRESHEX=r3, @ANYBLOB="0536458ee3a2c2821a861b4aa44492325f1a0223defdc4ca67653cfdea2a69e44a03c80abcdc698a81d11b1f22cfcec3664928410f0852e712b2b7691e00"/73, @ANYRES8=r6, @ANYRESDEC=r5, @ANYRES8=r6], &(0x7f0000000000)='GPL\x00'}, 0x94)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d12, &(0x7f00000000c0))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="010029bd7000fddbdf250b0000000c0005800800"], 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00)
setsockopt$inet_int(r7, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4)
sendto$inet(r7, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
recvmmsg(r7, &(0x7f000000e280), 0x58a, 0x42, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

42.670416595s ago: executing program 3 (id=1503):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

42.587304831s ago: executing program 3 (id=1504):
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32=r2, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)

42.317275852s ago: executing program 3 (id=1510):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x4, 0x4, 0x39c, 0xffffffff, 0x134, 0x0, 0x134, 0xfeffffff, 0xffffffff, 0x2d4, 0x2d4, 0x2d4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x134, 0x40000, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff, 0x0, 0xff000000, 0xffffff00], 0x4e22, 0x73, 0x1, 0x4e24, 0x1, 0x1}}, @common=@eui64={{0x24}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@mcast2, @remote, [0xff, 0x0, 0xff000000, 0xff], [0xff, 0xffffffff, 0xffffff00, 0xff000000], 'nicvf0\x00', 'wlan0\x00', {}, {}, 0x29, 0x2, 0x0, 0x4}, 0x0, 0xa4, 0xd8}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x6, 0x5}, {0x0, 0x3, 0x1}, {0x1, 0x5, 0x2}, 0x5}}}, {{@ipv6={@private1, @empty, [0xffffffff, 0xffff00, 0xffffff00, 0xf3e81681cabd7fb5], [0x0, 0xffffffff, 0xff, 0xffffffff], 'syzkaller0\x00', 'virt_wifi0\x00', {}, {0xff}, 0x1, 0x8, 0x1, 0x20}, 0x0, 0xa4, 0xc8}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f8)

41.92125365s ago: executing program 3 (id=1513):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) (async)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r4, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) (async)
unshare(0x20400) (async)
dup3(r1, r2, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x110, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x11}}, {0x8, 0x2, @remote}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xffff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6b2}]}]}, 0x110}}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="2014060000494307361fe7bc00230eff564d3c"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000880)={0x20, 0x14, 0x4, "15de62ec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

40.298753012s ago: executing program 3 (id=1521):
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x2c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4}]}]}, 0x2c}}, 0x0)

39.888466785s ago: executing program 3 (id=1525):
unshare(0x2c060000)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="cd04ef304efcc55e530945dd85e15ad73505e86a0d5da65c40e146c73a556185950477efc2e4190c7637ec50e445770fc9eda7383d2c60dbcedda7342bc9c2ee404a1b1e6ecaa238c31df272506c2b25362c0deebf8eeda614f9767f6babe6ac8fb6d34a0e0e547f687f36ec2465a720260a1e43578035651fcaea2cccbd76891f3eecaa60864bad7f8bb83544ddf78cc3dd86e3f04efb529d75db23a0f3172389b0518241991b4a0c6d36f30607de4ca0605faf596369f7f0db5704dde6102bb3bfb8f2f97c01f4ab21c1d97902458214418fbde8d90290fd"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x6)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000001980)=[{{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000140)="6e59020634031c54fff56f8703d54499b24770a82052c335163a1c82c90704da108eabd4e96531556fc8028136e2073ec687d110338649", 0x37}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000780)="fc80b87e42520b84670b2c17ee36cb8778ff95898fd16dd5378e78f0422869470246730f21dae2655e461e85034585ad168a307eaa0fb71ddeb84c7a0a360292a5508c4019c014eb6dbed9c5f6d2cde8f104b03068fae29e56ad12a645bb2f6abde650ef5f37a432bf338b509a1706b1ca19619ccd047cb79f9689033c5abca04ffda5455d7932cd1996283c22ab3331142d2f3c08a5add26c5907987ef6", 0x9e}, {&(0x7f0000004080)="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", 0x100d}], 0x5, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES32=r1], 0x58, 0x800}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x1, 0x0)
r5 = syz_io_uring_setup(0x4d66, &(0x7f0000000380)={0x0, 0x99d4, 0x8, 0x2, 0x209}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
openat$nullb(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2})
io_uring_enter(r5, 0x3518, 0x974b, 0x20, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004"], 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffd64, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="883800003f000781feffffff0200000002"], 0x3888}, 0x1, 0x0, 0x0, 0x4841}, 0x20004040)
socket$nl_netfilter(0x10, 0x3, 0xc)

24.822257644s ago: executing program 33 (id=1525):
unshare(0x2c060000)
unshare(0x22020600)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYBLOB="cd04ef304efcc55e530945dd85e15ad73505e86a0d5da65c40e146c73a556185950477efc2e4190c7637ec50e445770fc9eda7383d2c60dbcedda7342bc9c2ee404a1b1e6ecaa238c31df272506c2b25362c0deebf8eeda614f9767f6babe6ac8fb6d34a0e0e547f687f36ec2465a720260a1e43578035651fcaea2cccbd76891f3eecaa60864bad7f8bb83544ddf78cc3dd86e3f04efb529d75db23a0f3172389b0518241991b4a0c6d36f30607de4ca0605faf596369f7f0db5704dde6102bb3bfb8f2f97c01f4ab21c1d97902458214418fbde8d90290fd"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0)
sendfile(r4, r4, 0x0, 0x6)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000001980)=[{{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000980)="f292ee249ec8d72e0434168eb812cf617c7ce75bcc6adabe374ceda2ec42e22461c681dc60f5db874a79b667a0bdb242c7e9b98d2bdaa4c05828614c06c7620c0f4b0031a9fcf74c3bd8752104836c99cc0eaffd65187955909db29374a1f78fbed3f17689b5f58238234561aa3ce268c70dd61199bf2e572a415e90456d00ecac2adf62f96b504f0aaaf1780803af960af28313fa1777094f60f8e69ddd89fa11f3ba8e8cbccf554795d05afa19b7705b93cecce8658aa1c98d806434726dcc0ce2e94140a3875b445d11a00c1beb73db58d1b83d369e97d4a4d433f85543b1ef6232b46f22a0326bef098a096a68b865c671b00501bd8ad4469bfd9b3f2e636fecec158b0ea6a0aa86a5301570e9821b6025fbc3dddc8aa58aa99a15effb473d7856f8d5abdcbef974ae4ad2941124181447dc1d5d0a71554144fae536dc63f2592541d2b8a3ee04796f4851abd6079c0afa1941592f960268c553a49dd68a9f6f716777d8eb84b937e1413af0ecdfaef1f095083fef5a6fcef925e146cdb0441b02fff228b69981dee5173e956683b51568ffc8b4ec958fc08bbd83b711710b61b1fd08eb22785c8f5bf6082893bb6adb51d65917fccb48afab73642f7c312e575bfb76c89123d22f92e7a85d4b07c947e721f58d48eb231297b3919b9e79587384efd8d381ca7f70ef4219dd16c12201dc25d89ed51aa4d2c9ff1f588f07ffc98b1cc3e90e89bc205ea8b9bf93485a4ae9333ddd107f6632ad1a9e695e9b02563ef88e51b3f85af0061213619623b4bdc330e38cecc620d88ea5a13861858f7b0e10d32e85c76ad7ba7e633c4fbe360700231e618cbd8026183e53e4edc8998b2e99e1188833ca18f77d6673ff520686ca3ed2519623d1a6dace831d154ea630ce518be3c73ad3263699e39489949afea92eda96e90fc2e32bebdfa1a175cfb64712fbc000286e05e29041ef50de7fba5e17158240b2160e22cf9800b8518f5c52db8b4f9935ee8e1056b04697433f0569f5baa41fbc6431c0d755a84af732a9a9e08d46dd5395158a9fb64031a96cdb877e0750dcd02a78568c1fa3d828b4dd9069e2a7f41caf742dc319d6c8ea9bce9674824d8bd7173d84931a268ca02a448b2ad6c43854dc77d3b93589dd39f3d30e7c2f2ce9879c2e24ff6757128685e771325384bf58b52963980f0af1c64c002c141191b95a0e06d455bd92a0bfab221c8b32c502364325572eaf3d660929bf87f276bea32ebe73b30c6c62bb3cca5d7ea0eaae1090987ff1ad6394422d63ed0debae95551d7b17211bd0bff77beebf407be67e84ed88312c7c97b5a93e80cacf896b2b5702903359862d177aef4df122d6ef0007faeaf74f5dc085df67427ff25a1a7ba90904e7b3f29d7df6dc5e42055b1d713ea19b4a48ff6dbb2c000d9ba8729579db6d1421d30e57c8b23d0a1ed9906a29c8395f866f5eb5b25e430406b3ea81df733ccc5be891f29507f742f6ca0c3d13705e07aa252cf0662e56e7126681b81faf5c66742b6454d40335ac77c2e74fb0f669f88b713edc7e183587620d4ad1289f632b7e2982f19e12f18fd81deffe1f1b767a6cae8d1551dafb0a95555a6842446869f040f5970dd8685f67b8154329b7fd1fc486c76e038570fa8e8e622cd6743169272493e5c41ad2a972fee01a345dbff436958458207e2e83eee35fdc723b0514a16f7f60857e43caaf63b1a2f45e221b88b1bffa2c6981761730f4278624d8a1c4c6d37ad6d3869711d07d3de2b57c303a819686261291da0770dff106800085c63628a00f31fcb655ada43395a24a73f6b114fea7a632f76935ee12abdbde488256075f6d04ed9f56e13f391b1462cbddb298d78ad847fdabeb85b15dd0d58fc7827bd53b5d60ff91f2f3c795724572f114e2a5867d6f1134f6c9372c8120e14f1891e1b5a7cd1217cceff1c5454ed758424258b989adbf254d9f3d89f732b3ffffc9b4a1f1053f95bf2c1ea19721e03daa757e7446cc3c6de3e8422cb1532c44c4ee1e81890b576bc1e1e6ec2f2a5accbf349dd68b67d2d6860f71d38f6bc5c98b5317f8df2a50a0791524dea87f2a6bcf1ebdc78ea70251a1d97045231c95cf951e21b56934dff5b71aa33816bc5792712967bd043674a5fc7f1392ff3194525651567ea200501a83565e76f40932b142cddd494db2c686de19cf8a98327ecc7ddf2b7896f3241a4024ef19a5c5d698df168d3ed4476d91b0fcbbe22518497fcf4f15ce663789020609f6effe6b1fd7c6ef36013b6bfba703876da303866645ff6baa57c3888deac460f30065e0a750aecd4440f8abd3c6024dcf640212aac0e935d760b1cca38a318ab3ade7ffddd82cf02fe3f7d817a617774ccefefd950ba1fe4981aaf344fe5433993896aadf9e82a16d37b6106d64b5920a854f5aa9844fb0d3afc71a3fefc5852f8c490ad87457a1a4f1f3e9bfa6fae158684712706a61672c9530ed0ebb67e503274342e11c960321a72663c26d57e4f117697fe37c2557ee828faea8728516b47051f4672ad7ae71d4ac25ee337960c8997c08aba231a3525c8c18612937800d2eacb3bb2f8c770c95f90d0a540e68aa13f1468a9d6b59ed60c56c583e0fedde705f5553cb165676285f403ff9e2f81077f08332550067fe68fdf1c0a94c361d0fed767d185afd12508abbf2c3d8d70bcfdead63fd580d3b482e9701b4063b68e3c7cdef5c58c1bfb0a7ae778f0fe2e7838277c75f53012b8d44f76a0a9adf0dbf1370eeaaed4785c7f1bb283ac88c601a5977f9f82f64561404c9283a54a75750d427b2ebc6a86a5d5d87408d8f030e27bffd09d73d0c4396f7337f7fd31983ef89274f1ae0dfdc72626c5bf2a4a912b47b7087a60ab584aab27ecf834e3ed02142c44ca2b0c32e79e961842f81f7ea43dc17bef37deea751fffdc567489d3f7119a6747bc1ee6be0038f6a0202a8c6304a4283504dad2d75cad902c26fb2a0c1cf49d9fcc6d316f297391154bd227fdea2f4a8a91d6cd41928af5bc34f406f048023347523deb04c1ac3789fc21bc1b5426b43faf78576a944aed532e7c7f1b194b5454214e54c108f9b29b2b0c11e8dfc104dbfac6e8f25e830b17e9905d2e6efa24f8e4e8a0267f8409e6d92078210467ab6ee15989f48507fa5ec9bbc8cc5fb00c8a8c673a54ebfd78f2b87230c5a627fe89c219e081b290111721742b0f6269cd635c86def3a6f0eda97f61fe781ec1f32f1192a618666a66bb0263de2a85f5b0e0a4777ed3bbb20e3851658c3207beb489b538373f69429514ab4b184334db48b159422e09b3bbea3c049a00686838911d5e2ed839cce124bd1e806cf09732c5e1a546f5553d98c4659a660c90a40b2c6fe54b555a5a03fab976a7293d1d30a1e7f588f41803e17e3d52317daeb0d2cc56518753a3d647becb020d0496d69fd9acf72031b70b64f02e49b92dae3f71f52b19c0146117ce7da389f8f317ee350dc63152396ef66282a9477a97dc36a21f84ff54df30059b9e9eaa4b0177087c39210eb28e8290443427ec4a78b6b735efd20b502bbd3e6c18c9566f007d32852dc405de04fb0caa1902055ffc6336dedfb2a36f4fa3331d919747604defbf2dbc920389ff253428ee1343c86573b2058543d6e9e8cf204e45a372c6da998482ed70e44bde0d07ed4b6e14dc3d84431578bc922d7b8d7cfba3e77d9cd9090aed2a4f2b5bf60e6092905ef7bfbba4b79fad269d0d81908d2a910959877820cce8d5576c2822f3f07256f2d8f54b56fe991fd9b6d00e0407e047e2c736388f39281a7865484563dcdce7eef58e60094b0ed4ee87d9f79e549b91171963b53aa2cd01c1984b3f4dd4a8e3c985b1f6dd4728bfafad0ea3cbf9fc1eb79d4e6adfee69f961b2da6990ec3d158ab0665655adbcabe8a9662d22dd7da752a45b5582020b9a0110602124b6f0f743d56857e03e4751188afed0637e17c1f292627e5b5d6bd7b4ab5395bf374d046ac7cf9152475a8cadfb8d7e842d2e77b7cf0c84c533ce8011ab013ed4bca940fe25b39c70b1730caf8ad4cd90ad19047cd23feb9fee0088c5337111227e6a9523497c14f7cafe1c4bd1c1746c68c74da2b2c5da41aa688041ae1bd14d529b52e26ee5c98fdf71628a8fa3579c368597023de1388032374a792be4d9c1cff22c5c8cc79ea0c7da4578a74d820244f18a067f528f074c10f07a257d2f353728f13b8d26046945cf2cf70cfda59941df625a70aeff140de900b5289116b7bd682970f91afd2bb2aab05af9167e3fe8ab081787b50d3cf587699308eb1d2897cd9bf11bc2099503f736a3c134c138f32494814cc88046153c1d827ac46dc6c5f0b1097d3a3ea4fd7ce0c7198a839b4ac5dbbeb5c93699ce808b9b608a101ec85156540247b33c0b13909b61d6ce7d30d562a76d2620cef5df47128d9fcfda4ab61b19cccea3227ecdc32c34731454400ff1dc83975bc41587901fc5c0f6a88556da916b18499c472fac573b86db018b983ec5b9497f4e12ccf256c65db05f7981f3abde6b658ba5baf3ec96976246bd73d999e955c0998df21960c49d4be294e54081c62b0736a6f9478d77b71dac5fc8224ab2f556c1421b16991f3fe1960ba8c23b4fcbf5edad2db2c78536a52e98055ae0a7219a2643cd1325933e7a4b0cc089fd95e7ce484bca65f16cf07971b428d4b554c10cac5215b8defef072a5e1d6fe1a4333a5d76ed4dbba911e8057c2e4a85e57e80a1d1ee6dea391731b7fd860408c151c1ed4467a6924f18daced8c6fb3fabf57d9b5479524b10b82fb756e3819381fc5066f1656f7d2015df34de20cb8bd7c4b2a008e46827e7fda325b91547ab9ac14e9a32ea2258bad444513d70d1ea99dffed7d5ac74157687a6b97aadc96647945ca20c11f7c7d2b93fe5d687dfed5ebca0b539c2e70375da7c9e0b1429723060e5d9b97aa3dfb3238f9b4a9e2880357a06ca19f274af59958f47037a2aa91207c853642a4a5a64c66cc282ba2ab001c885c3824f796eebc5ef86520b451e7b835d251f08935ba631540bf4c96d7095014ef1a693c349b7e9c35a09ab55451eb692a427b8f1cb5dc9489c47544216eb93257b3b07f8a044ba7c64dcfec55a1694503ccb7cf31c7ba1fa3041ae077d8411259146bb00d62000ea634ab2850cfccb8ecedbc8e48e5f5cccbeeaa02c95600900b2bab23e972967f24c93ea31625e7baf0177d7f1d9bf903758d116d032082d2bea823ba3d8605bd631d752d5110f1513be890fb52a32e36e79c6d1d73f38a9a14c00018320a1ceb7e39038397bba49eec7a216f5ab4aa720c19e0b32f2aca61c2632337ba03bc28d18f0b8473e32b913cb3d14b8e768c746a8008766863eaafca97f334fb7c03fcb645ba1f5e796b8203f1e318e42d861ea5a5e90a4e4b4d88df604419fa0a57aef7e5a49d189d34575b8603a0c9bc528c488568ccf00757323a7c6d92283be5be2a956d378f612abf2004d173471f3af0d65e431adcfcd2f36b5789dae4d506346abfc494ee1db00f6a94eec1a17a6289705a5d8fedb590c9554f03656d37e67872adb5982d0c99b6776a0076de7a8126d6e7bde6f16e0df1d80f0e5c12af0f14734ded61f9284ca1b6f5129cef2f03b2aaef8d39281078cb06738db5bc6e3619ac55d4865583b890f93b1707ea435810296045bc3103f6ce9f6ac0a3ddda8eeccd9d6e5b7ccb4fa404f11548c35758014cb88c2a3e11e3091e977b1292f6e0e80c055c9eeae1b9b4c09bb77fb2270ff25a2ec3a8e", 0x1000}, {&(0x7f0000000140)="6e59020634031c54fff56f8703d54499b24770a82052c335163a1c82c90704da108eabd4e96531556fc8028136e2073ec687d110338649", 0x37}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000000780)="fc80b87e42520b84670b2c17ee36cb8778ff95898fd16dd5378e78f0422869470246730f21dae2655e461e85034585ad168a307eaa0fb71ddeb84c7a0a360292a5508c4019c014eb6dbed9c5f6d2cde8f104b03068fae29e56ad12a645bb2f6abde650ef5f37a432bf338b509a1706b1ca19619ccd047cb79f9689033c5abca04ffda5455d7932cd1996283c22ab3331142d2f3c08a5add26c5907987ef6", 0x9e}, {&(0x7f0000004080)="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", 0x100d}], 0x5, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="180000000100000001000000", @ANYRES32=r1, @ANYRESHEX=r1, @ANYRES32=r1], 0x58, 0x800}}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x5, 0x0, 0x1, 0x0)
r5 = syz_io_uring_setup(0x4d66, &(0x7f0000000380)={0x0, 0x99d4, 0x8, 0x2, 0x209}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000300)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$can_raw(0x1d, 0x3, 0x1)
openat$nullb(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2})
io_uring_enter(r5, 0x3518, 0x974b, 0x20, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
socket$key(0xf, 0x3, 0x2)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004"], 0x50)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[], 0x2c}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffd64, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="883800003f000781feffffff0200000002"], 0x3888}, 0x1, 0x0, 0x0, 0x4841}, 0x20004040)
socket$nl_netfilter(0x10, 0x3, 0xc)

8.251771798s ago: executing program 1 (id=1623):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0xfffe, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a)
close(r1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48)
r3 = dup3(r2, r0, 0x80000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0xeb21132d, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})

8.018083417s ago: executing program 1 (id=1625):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0xa, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000140)={0x0, 0x34324142, 0x2, @discrete={0x1, 0x401}})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfffffed4, 0x1}}, 0x20)
r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r4, 0x80079a0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x50, r4, 0x6cf26000)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
lseek(r4, 0x0, 0x4)
ftruncate(r0, 0xfffffd83)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0xba}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x90)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f00000003c0)={r5, 0x1, r4, 0x4, 0x80000})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d000000000001090224000100"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
r8 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880)
ioctl$HIDIOCGPHYS(r8, 0x80404812, &(0x7f0000000080))
chdir(&(0x7f0000000480)='./cgroup\x00')

6.13611383s ago: executing program 2 (id=1633):
r0 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
waitid(0x0, r0, 0x0, 0x3, 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x2, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x66, 0x2, 0x0, 0x0, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x10, 0x10, 0x7}}}}}]}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]})

4.845428597s ago: executing program 6 (id=1638):
r0 = openat$cgroup_root(0xffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
r2 = getpgrp(0xffffffffffffffff)
write$P9_RGETLOCK(r1, &(0x7f0000000080)={0x30, 0x37, 0x2, {0x2, 0x2, 0x8, r2, 0x12, './cgroup.net/syz0\x00'}}, 0x30)
r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x3, 0x20040)
ioctl$I2C_TIMEOUT(r3, 0x702, 0x6)
munlockall()
munlockall()
r4 = socket(0x11, 0x1, 0x6)
sendmsg$kcm(r4, &(0x7f0000000400)={&(0x7f0000000100)=@qipcrtr={0x2a, 0xe3a33f3571c6a661, 0x3fff}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="79bee1b025a95b79ceaf250650417880742c7c05cd73f76cd3c60e08c50e62593cf2fb5c6fc50cd0b13c2e458c032c8a8e28c1cbc560fbd2", 0x38}, {&(0x7f00000001c0)="d7a0d8bdcfeaec55f70d030f7cb74f0bdf914d8e304d8b952814e5a37668f3c9404ed36ffa79367b0976c9a0a13333a9841786b1e207cd17a8e48827fd4680b9ba068a25e73be185d061eacffaddff5fda619ff2e5a5425a06edd6d45dc8669387163b421e6ac80aa81386517cc3f7a3dca14cf38cf8", 0x76}, {&(0x7f0000000240)="422bad8615c318af114ac43780591596fc8ea4f0829d0dca18a69227e1f6711bda707074a5ce13a559646b266b23c1ec7bb42b298abf79018eb1350f1e0f72aa9b8f2c4eb2375ec3b4cecdad9681bbedbd48", 0x52}, {&(0x7f00000002c0)="7bc7dae3871640cea1c0fb8bbab48854e36e08d0a4ad2557a043fd57cd6e2eae70d780f3545f7d58e000126b5f74eae0d40c8982f4f114", 0x37}, {&(0x7f0000000300)="c3fcdb072b85762d286fe115d0fea3e87ab8ff12bb102711f7f0ff0c6f4483282b7e561565a7da72dbd0ef9110cffa80f216a03f1aee1310778b24791673e015aa02831cd0d12df2a425f20726a045e2dc0968ddba0cbf2fa171d3d5e5691bc2eebd7270a12fbcbf51322503918893d178d75d44bb335be4edaad97c2ebd3dedfbdbd95efd621f31966ac0c1479670cdd3", 0x91}], 0x5}, 0x40c00c7)
munlockall()
recvmsg$can_raw(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/156, 0x9c}, {&(0x7f0000000500)=""/31, 0x1f}], 0x2, &(0x7f0000000580)=""/62, 0x3e}, 0x40010021)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000680)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r5, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x200, 0x35}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x2, {0x7, 0x6, 0x7, 0x7}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
getsockopt$inet_mptcp_buf(r4, 0x11c, 0x1, &(0x7f0000000780)=""/132, &(0x7f0000000840)=0x84)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x1ff)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000880)={0xfffffffb, 0x4, 0x6, 0x100, 0xfffffffe})
write$binfmt_script(0xffffffffffffffff, &(0x7f00000008c0)={'#! ', './file0', [{0x20, '-]'}, {0x20, '\x00'}, {0x20, 'wlan1\x00'}], 0xa, "23590fb7afa54eaf16a25415f6259ba5f83b92518ed90872f523042413e935ec5aefbe795cbc95821f45ae27fba45227b232cb38512e012159d15b17d4a53be025728c5ddd6fe1e1cfe9304fdbdfc8d89ccdc3d93eff06e68ed721dfbee0c30ea4715a0337d58c49afa1ae03dec2502d0d51c663a7dc916cccabeed0f8a9b51229da"}, 0x99)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x63, &(0x7f0000000980)={'ah\x00'}, &(0x7f00000009c0)=0x1e)
ioctl$sock_ifreq(r4, 0x894a, &(0x7f0000000a40)={'bond0\x00', @ifru_settings={0x6, 0x39, @fr_pvc_info=&(0x7f0000000a00)={0x0, 'nr0\x00'}}})
r7 = signalfd4(r1, &(0x7f0000000a80)={[0x2f2b4bd2, 0x8737]}, 0x8, 0x80800)
ioctl$KVM_GET_NR_MMU_PAGES(r7, 0xae45, 0x10000)
syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r7)
clock_gettime(0x0, &(0x7f0000000b40)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000b00)=[{r7, 0x1000}, {r0, 0x1003}, {r4, 0x60c5}], 0x3, &(0x7f0000000b80)={r8, r9+10000000}, &(0x7f0000000bc0), 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000c00), 0x240, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000c40), &(0x7f0000000c80)=0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000cc0)={0x0, @in6={{0xa, 0x4e21, 0xfffffffb, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}}, 0x0, 0xcb1, 0x101, 0x6, 0x1, 0xbb, 0x5}, 0x9c)

4.412933401s ago: executing program 2 (id=1640):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000013906c08e90f01db9be9010203010902120001000000000904"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
pread64(r0, 0x0, 0x0, 0x11a9)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3dac09fff8f900", "acba84f0a6731f234db1cc7d3f382ad796f8fdffff2ea99509873931d2873103", "0000259b"}, 0x38)

4.194426143s ago: executing program 1 (id=1644):
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0xe4ffffff, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7ffffffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x28})

3.95543714s ago: executing program 4 (id=1647):
mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x3)
ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ftruncate(r1, 0x1)
fanotify_init(0x10, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=<r4=>0x0)
remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0xf, 0x10000)
sched_setattr(r4, &(0x7f0000000040)={0x38, 0x3, 0x60, 0x6, 0x0, 0x6, 0x1, 0x100, 0xfa11, 0x3}, 0x0)

3.843687236s ago: executing program 4 (id=1648):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x44080) (fail_nth: 5)

3.820939571s ago: executing program 6 (id=1650):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x7, 0x10, 0x0, 0x0, 0xb47, 0x9, 0x8, 0xffffeff9, 0x3}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r2 = socket(0x8000000010, 0x2, 0x0)
write(r2, &(0x7f0000000280)="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", 0x13f)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000400)={0x2, 0x4e20, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
syz_emit_ethernet(0x27b, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x20010, r3, 0x3c9be000)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='sessionid\x00')
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6})
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c)
socket$packet(0x11, 0x2, 0x300)

3.656672405s ago: executing program 4 (id=1651):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a6", 0x1}], 0x1) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) (async)
getsockopt$inet_mreqn(r0, 0x11, 0x65, 0x0, &(0x7f0000000d00))
r2 = add_key$user(&(0x7f0000000380), &(0x7f0000000940), &(0x7f0000000700)='\x00', 0x1, 0xfffffffffffffffe) (async)
r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (async)
r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000a80)='>', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r3, r4}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRES8=r4], 0x0) (async)
r6 = open(&(0x7f0000002180)='.\x00', 0x101000, 0x8a) (async, rerun: 64)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) (async, rerun: 64)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000de633e20720c130019440102030109021b0001000010000904950001c97bd800090502"], 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xe5, 0x87, 0x6e, 0x40, 0x2040, 0x1605, 0xa94, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x58, 0x83, 0xb2, 0x0, [], [{{0x9, 0x5, 0x85, 0x1}}, {{0x9, 0x5, 0x7}}]}}]}}]}}, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000000c0)={0x6, 0xc35}) (async)
r10 = dup(r9)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000098000040"]) (async)
fcntl$notify(r6, 0x402, 0xe51c4606df1d50c7)
fcntl$getownex(r6, 0x10, &(0x7f0000000040))
sendfile(r6, 0xffffffffffffffff, &(0x7f0000000080)=0x800, 0x40) (async)
syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) (async)
eventfd(0x3) (async)
r11 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r11, 0x114, 0x5, 0x0, 0x52) (async)
syz_usb_control_io$uac1(r5, 0x0, 0x0)

3.084126719s ago: executing program 4 (id=1652):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e23, 0x93, @dev={0xfe, 0x80, '\x00', 0x2a}, 0xe}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000040)="f3", 0x1}], 0x1}, 0x20000000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x82, 0x0, &(0x7f00000001c0)=0x5d)

2.646015476s ago: executing program 2 (id=1654):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x7c}, 0x1, 0x0, 0x0, 0x88bffd7102520d33}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000002007b0140000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.26588979s ago: executing program 1 (id=1655):
gettid()
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000680)='/sys/power/disk', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x25}]}]}, 0x38}}, 0x4000)
io_setup(0x20, &(0x7f0000001140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="fc", 0x7, 0x6000000}])
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"])
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0}, 0x8040)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r4, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4)
pipe2(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$tun(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="0000fbfb0180f7ff030004003139f8425ce6b98d2c3fbed0efb78492855688e8ad0fba45d53e0d0ce91f5e4eb2d9404149b5b794b8bbe492fe71b8341e0e22b18b84605a90d99198b873d3313ba3089480f1e434ea83f12821a07cce68a2fc41a8abd9dea36048ca27b2888850ea9a0f000000fa6f65d77c8d5bd35157b3de48dd5a3b7854a3d81c288473a147b38593c0a32c9bc244eb7351560e511b9be07494dd80111fe54af2e8811c1a77f1720a4c60243e494b3443ba75d14e9a6a66be8a1d2054cd99bbcbc6c1cb19f5d94d01000000000000009500475a1697a3a699aa6a8d6ec74b532e16ffb6e443b9ef88b19fcdf1d43355"], 0xf7)
capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x7})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)
mkdir(0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = syz_open_dev$media(&(0x7f0000000000), 0x8, 0x8000)
r8 = getpgrp(0xffffffffffffffff)
fcntl$setownex(r7, 0xf, &(0x7f00000000c0)={0x0, r8})
fcntl$getownex(r7, 0x10, &(0x7f0000000c80))
io_setup(0x20, &(0x7f0000001140)=<r9=>0x0)
io_submit(r9, 0x5, &(0x7f0000000640)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x4, r1, &(0x7f0000000100), 0x0, 0x8, 0x0, 0x1, r5}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, &(0x7f0000000180)="3c05ca926d11", 0x6, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000440)="0f655b29fae43cd3d3766fbbd3e203d6196545afd784140a911c5b18b2b1a3aff804063313b8d7af032135f632f2a75cc64719fe8a47524e11814c1092931cfb5abd95d24c63e47ecbd3891b", 0x4c, 0x3, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x6, r4, &(0x7f0000002080)="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", 0x1000, 0x7ff, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x3ff, 0xffffffffffffffff, &(0x7f00000006c0)="4c84b9ccc567a9fce189b69451693a2fa60ed4995b44a95727d56079f0445515f8fdc271e1dd1b736ad18f79ea124d9f2acb6e8a21927785d5a89eb0374ee61c0ac7950fb5d39c41a319013dee755258a843c33311178c97db3c339d71b068c04612049ccd8c62114616562e8619c0e36a8b802b090ab63ed8d1af71eb594f54087e8194d4ea0b939281bc92cc5fb6cfe912f50bff256b204da26685463062d4698349be55d1e9fdbba5be81440f081a4b2a7f1175cda5e6d3238594b93ae42861337922e7fe6799539d1bf1088d641cd9ce994e19de78d96003c7", 0xdb, 0x401, 0x0, 0x2}])

2.25729098s ago: executing program 5 (id=1656):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0) (async)
socket(0x10, 0x803, 0x0) (async, rerun: 64)
write(0xffffffffffffffff, &(0x7f00000006c0)="d54faafa886e17901fda293068d9731a46b16d2649dc64d049397433f3315f691ce92d4a89139f6667d1858601e7152964f454ae387c22dfecf21e6ce12531cbff5f18907471971264f704e47d6d0d00000084ff8a8c388309f20100f02751174eabd09b5a4da368c58a299c6bfa8696407caa70368514aff39f89ed9c33f5d1ff617810c4db6d85b073cff3729f306ce00c9c74c183196990a03883cd274b64db6542c45c1a36d41ef3b0c5233a9d640c302178e909ea80ece8bd293e4550e44a483c7de76e4f062a17753645720ab11cb26000395fb14c89e11bc6a5f012a881cae1a96b9f0fe21c69d9c43107f77ca531cb33fc5bbb4ccf8690e3e0dd2d9f3fc55c5ec821cb846b28095ac6d3d93205e57f9c5491d7792f8f1a69abd5e1c7b1b75d164dc61044a13152449f2c3ce40a40ca4f619f661e8bdf010a560393cfad2bbd883f3224a52bb63d7f3812f347025665921c92b54548901b1623fd5ea22b1550d62390948c45619a76acd5c1da8603c4353c317c4ee257e85f32e48ae6c2cdfb403fe1b66e1a78e96958a65a50391923cf8feb754ae0d0869246eb8002199d56347aadd66c00cdd00830629e67987aa8930c201acdafd204e5", 0x1bc) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x240408c0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x20, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r4, 0xc10c5541, &(0x7f0000000340)) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, 0x0) (async)
syz_open_procfs(0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1fda000000000000000000000010000000050000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32)
r5 = socket(0xa, 0x3, 0x2) (rerun: 32)
setsockopt$inet_int(r5, 0x0, 0x13, 0x0, 0x0) (async, rerun: 32)
getsockopt$inet_opts(r0, 0x0, 0x2, 0x0, &(0x7f0000000240)) (async, rerun: 32)
mmap(&(0x7f00005ea000/0x3000)=nil, 0x3000, 0x2000003, 0x1010, r2, 0xffefb000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000c00000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x84}, 'port0\x00', 0x3cd, 0x21e2f, 0x7f, 0x1681bcd7, 0x0, 0x0, 0x400, 0x0, 0x6})
r6 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\r\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f00000004c0)=',\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x05\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0xfeffffff00000000)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500", @ANYRES32=r8], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async)
semget$private(0x0, 0x6, 0x3b1)

2.212792243s ago: executing program 2 (id=1657):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0000000c040400000a000100aaaaaaaaaafb00000800040080000000"], 0x5c}}, 0x0)
r5 = openat$pfkey(0xffffff9c, &(0x7f0000000240), 0x20000, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000280)={r5})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFCONF(r6, 0x8940, &(0x7f0000000000)=@buf={0x1, &(0x7f0000000080)="ce"})

2.163857817s ago: executing program 6 (id=1658):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x8, 0x6, 0x4, 0x1, 0x1, {}, {0x2, 0xa, 0xda, 0x0, 0x4e, 0x7, "22167254"}, 0xeb7, 0x2, {0x0}, 0x5})
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x8)
r2 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x8040, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000080))
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000280)={{r1}, "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"})

2.006672997s ago: executing program 5 (id=1659):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8031}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000003c0)=0x1, 0x4)
r3 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r4, &(0x7f00000001c0)='\\', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000380)='mountinfo\x00')
kcmp$KCMP_EPOLL_TFD(r3, r3, 0x7, r0, &(0x7f0000000140)={r5, r1, 0x3})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x488, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x9, 0x8, 0x0, {0x9, 0x2, 0x2, 0x7, 0x8000, 0x2}, {0x8, 0x2, 0x7, 0xf0, 0x1}, 0x0, 0x3, 0xfffffff9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x8, 0x3, 0x9, 0x4, 0x4, 0x4, 0x2, 0x0, 0x7, 0x16a, 0x6, 0x4, 0x5, 0x7fffffff, 0x6, 0x7b1, 0xb5, 0x3, 0x5, 0x0, 0x1, 0x7, 0x3, 0xe, 0xfff, 0x19, 0x3, 0xf8a3, 0xff, 0x3, 0x8, 0x2c1, 0x8, 0x6, 0xb, 0x639, 0x7, 0x3ff, 0x200, 0x8, 0xe, 0x3, 0xd65, 0x4, 0x2c, 0xb, 0xc10, 0xfb, 0x2, 0xc, 0xff, 0xffff, 0x4, 0x7ff, 0x3, 0x1, 0x8, 0x2, 0xc, 0x3ff, 0xfff, 0xef, 0x662, 0xfff, 0x0, 0x8, 0x1, 0x7ff, 0x77, 0xd0dd, 0x1, 0x10, 0x3, 0x7, 0x2, 0x5, 0x80000000, 0x0, 0xfffffffb, 0x80000000, 0x57d, 0x5, 0x8, 0x1, 0x8, 0x4, 0x6, 0x1, 0x6, 0x3, 0x0, 0xae, 0x7, 0x8001, 0xe, 0xfffffffe, 0x7, 0x3, 0x8, 0x1, 0x8, 0x7fffffff, 0x6, 0x10001, 0x3, 0x10000, 0x0, 0x8, 0x846, 0x1ff, 0x9, 0x3ff, 0xfffffffa, 0x5, 0x400, 0xaa9, 0x81, 0x8001, 0x3, 0x2c18, 0x8, 0x9, 0x9, 0x0, 0x600, 0x4, 0x80000001, 0x800, 0x7, 0x7, 0x2, 0x32, 0x6, 0x7, 0x2, 0x7, 0x8, 0x4, 0x2, 0x40000000, 0x7f, 0x7, 0x4, 0x7, 0x2, 0x5, 0x5d41, 0x1, 0x2a940, 0x0, 0xb, 0x7, 0x200, 0x10001, 0x9, 0x401, 0x6, 0x1, 0x3, 0x8, 0xc, 0x8, 0x9, 0x0, 0x9, 0x4, 0xc, 0x800, 0xfff, 0x8, 0x32e, 0x5, 0x5, 0x2, 0x40, 0x52, 0xfff, 0x6, 0x2, 0x0, 0x7, 0x9, 0x2, 0x1, 0x9, 0x0, 0x80000001, 0x8, 0x0, 0x1, 0x9, 0x1, 0x1576, 0x8001, 0x7, 0x5, 0x1, 0xcdd6, 0x0, 0x74, 0x8000, 0x80000001, 0x6, 0x5b, 0x7, 0x5, 0xccb9, 0x9b, 0xffff8bf5, 0x7, 0x0, 0x8001, 0x9, 0x5, 0x0, 0x4, 0x8, 0x29, 0x665, 0x8, 0x9, 0x7, 0x6, 0x5c, 0x80, 0xffffffff, 0x4, 0xa000, 0x3, 0x7e8, 0x86f070e5, 0x401, 0x6, 0x4, 0x10, 0x2, 0x3, 0x6, 0x5, 0x5, 0x5, 0x1000, 0xd0, 0x5, 0x10, 0x1e70, 0x4, 0xdbc, 0x1, 0x80000000, 0x8000, 0xff, 0x4, 0xcca, 0x827]}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x488}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x800)

1.830053742s ago: executing program 6 (id=1660):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xea33, 0x9, 0x379ee6, 0x0, 0x9, 0x7, 0x89, 0x3, 0x6, 0x7ffffffe, 0x3, 0x800, 0x9, 0x2, 0x8001, 0xffffffffffffffff, 0x800a00, 0x2, 0xc, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x9})

1.827079806s ago: executing program 4 (id=1661):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
nanosleep(&(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x2, r0, 0x0)
r3 = openat$vhost_vsock(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x2})

1.736969888s ago: executing program 4 (id=1662):
r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000001340)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0x5, 0xffffffff, 0xef, 0x3, 0xffffffff, 0x6, 0x9, 0x7, 0x8, 0x3, 0x1, 0x80000001, 0x95e, 0x7, 0x8, 0x5, 0xa, 0x9, 0x4, 0x8, 0xffffffff, 0x8, 0x401, 0x400, 0x9, 0x0, 0x100, 0x8, 0x1dd7, 0xff, 0xfffffff9, 0xc8, 0x92, 0x0, 0x3, 0x8bf, 0x6a, 0xd, 0xffffffff, 0x7, 0x401, 0x7, 0x3, 0x3, 0x0, 0xfe2, 0x1, 0xff, 0x0, 0x4, 0xbd19, 0x1000, 0x8001, 0x3c4, 0x101, 0x6, 0x9, 0xff, 0x5, 0x8, 0x5, 0x645a, 0x9, 0x0, 0x3, 0xfffffff8, 0xff, 0x2, 0x100, 0x4, 0x9, 0x6, 0x9, 0x8, 0x23, 0x9, 0x1, 0x4, 0x1000, 0x4, 0xaf4, 0x0, 0xffffffff, 0x80, 0xff, 0x1, 0x730, 0x8, 0x8, 0x6, 0xffffffff, 0x3, 0x117, 0x9, 0xffff00b0, 0x2, 0x4, 0x401, 0x4, 0x5, 0x1, 0x4, 0x0, 0x80000000, 0x7d9c, 0x10001, 0x1, 0x8, 0x7, 0xb2, 0x101, 0x5, 0x6, 0x8, 0x1000, 0xb10, 0x4, 0x3, 0x1, 0xc553, 0x5, 0x9, 0xba6, 0xfffffff8, 0x80000000, 0x4, 0x100]}})
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f00000003c0)={0x20, 0xf, 0xf8, "11cd5594cd75e6f0959eb0c386338b850ce8e383160f51b0ac25ac14a1beaf7009fe9819c2d1a6fa841e0177263fb03ea0c24df978ae3964761b0c0e571c5c19147c20dfd02f674fe6018657f8a5faf915d55773515b02f2480652cf7c995942c4f7fe287ddc6515f12c7e0d03bcf851a0272c99dd98daba06dd1a39b2bc0dd3fd88e64b056a8176ed4c052caac81b0413f4562e387d47e863f4c588b782b607139fc28b1393f2c03151e66fd71bc711e5fc2a5b25086f0000ce24c048379bc4b594762345997c77049878a2ad677a7177784f10a2e7601701106d3ad676bd24df89dc5105fe4daa0e0c22ebda092a4e3b8c82d97b4db664"}, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0xd2}, &(0x7f0000000240), &(0x7f0000000340)={0x40, 0x5, 0x6, "5533ff562869"}})
ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

1.563767082s ago: executing program 2 (id=1663):
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb)
unshare(0x2e000600)
bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x15)
openat$ppp(0xffffff9c, &(0x7f0000000000), 0x10000, 0x0)
getpeername$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000000100)=0x1c)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket(0x2, 0x3, 0xff)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000001080))
mount_setattr(r1, &(0x7f0000001040)='./file0\x00', 0x8900, &(0x7f00000010c0)={0x100000, 0x0, 0x80000, {r5}}, 0x20)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0xfff3, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r6, 0x47ba, 0x3e82, 0x60, 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.501019456s ago: executing program 6 (id=1664):
r0 = socket$netlink(0x10, 0x3, 0x12)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, 0x0, 0x0)
listen(r3, 0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
timer_create(0x3, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r4 = syz_io_uring_setup(0x5ce, &(0x7f0000000240)={0x0, 0x6734, 0x80, 0x40000, 0x34f}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r4, 0x57de, 0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x2)
socket$unix(0x1, 0x2, 0x0)
r10 = openat$sndseq(0xffffff9c, &(0x7f0000000340), 0x100)
write$sndseq(r10, &(0x7f0000000480)=[{0xd, 0x0, 0x3, 0x5, @time={0x31e, 0x14a}, {0x1, 0x8}, {0x8, 0x40}, @control={0x6, 0x3, 0xdf}}, {0x0, 0xff, 0x5, 0x5, @tick=0xc3, {0x2d, 0x5e}, {0x7, 0x2}, @quote={{0xc, 0x6}, 0xbd, &(0x7f0000000440)={0x6, 0xc, 0xff, 0x2, @time={0x200, 0x2}, {0x9, 0x12}, {0xc, 0xfc}, @addr={0x1, 0x6}}}}, {0xd, 0x68, 0x8, 0x40, @tick=0x9, {0x0, 0x44}, {0x7, 0x6}, @queue={0x81, {0x4}}}, {0x9, 0x4, 0x4, 0x8, @tick=0x3, {0x9, 0x9d}, {0xb, 0x3}, @time=@time={0x6, 0x2}}, {0x6, 0x9, 0x80, 0x1, @time={0x80000000, 0x6}, {0x1}, {0xea, 0x7c}, @result={0x7ef, 0xab0}}, {0x6, 0x1, 0xf9, 0x2, @tick=0x40000008, {0x7a, 0x2}, {0x3, 0xe}, @note={0x1, 0x6, 0x5, 0xfd, 0xa000000}}, {0x9, 0x3, 0xf2, 0x0, @time={0x200, 0x5}, {0x2, 0x7f}, {0x4, 0x1}, @queue={0x4, {0x7, 0x2}}}, {0x5, 0x2, 0x9, 0x0, @tick=0xf722189c, {0x5, 0x8}, {0x4, 0xb}, @addr={0x5, 0x80}}, {0x3, 0x3, 0x8a, 0xf8, @time={0x1, 0x2000}, {0x1, 0x4}, {0x9, 0x1}, @note={0x5, 0x2, 0x7, 0x7, 0x3}}], 0xfc)
creat(&(0x7f0000000580)='./file0\x00', 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r10)
getsockname$packet(r9, &(0x7f0000000680)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f0000000240)={0x819, {{0x2, 0x4e20, @loopback}}}, 0x84)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r11, @ANYBLOB="01000000010000001c00"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4004855)

1.179252078s ago: executing program 6 (id=1665):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x18c6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="42a00200239c040008001b00000000001c0016801800018014000b8028e3fdff"], 0x44}, 0x1, 0x0, 0x0, 0x2004c001}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x18, &(0x7f0000000580)={0x0, 0xd, 0x4, {0x4, 0x8, "34d0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.011784844s ago: executing program 5 (id=1666):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$kcm(0xa, 0x1, 0x106)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(0x0, r2)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write$vhost_msg_v2(r1, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x1e000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x134, 0x11, 0x148, 0x134, 0x0, 0x1c4, 0x2a8, 0x2a8, 0x1c4, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0xff000000, 'wg1\x00', 'dvmrp0\x00', {0x99380e6a96eb266d}, {0xff}, 0x67, 0x3}, 0x0, 0xd4, 0x134, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x6ffc6103242fd92e, 0xff000000, 0x0, 0xffffff00], 0x5, 0x2, {0x2}}}, @common=@ttl={{0x24}, {0x1, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x2, 0x4, 0x2, 0x3, 0x2], 0x1, 0x4}, {0xfffd, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x0, 0xffffffff, 'gre0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x2b4)
setrlimit(0x8, 0x0)

849.365545ms ago: executing program 5 (id=1667):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}}, 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x39}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

754.495721ms ago: executing program 5 (id=1668):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast, {[@generic={0x88, 0x2}]}}, @timestamp_reply={0x11}}}}}, 0x0)
r0 = io_uring_setup(0x2aa4, &(0x7f0000000000)={0x0, 0x62d0, 0x80, 0x1, 0x5d})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000100)=""/41, &(0x7f0000000180)=0x29)
openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/vmstat\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e21, @rand_addr=0x401}})
syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="c812f3977666", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000004000/0x1000)=nil, 0x1000, 0xd, 0x10010, r0, 0x10000000)
syz_extract_tcp_res(&(0x7f0000000080), 0x10, 0x5)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000640), 0x41, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0)
writev(r2, &(0x7f0000005500)=[{&(0x7f0000003440)="0600000000000000839dda8b05257a6d6136e19271de93a120d8af19df66cf6039f1f64c7b9f823dfcd870324392314a3c965f000b25fd7da27c50794c07ca8a4809c5b5ba2f2b5c2a399a164cbe8323c843c21f05bef0f6daffa4bac0373c194da474fa0b72473e", 0x68}], 0x1)

637.300757ms ago: executing program 5 (id=1669):
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x9, <r0=>0x0}, 0x8)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYBLOB, @ANYRES64=0x0], 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), 0x4)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
read$FUSE(r2, &(0x7f0000002c80)={0x2020}, 0xfffffdb2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x68000080)
fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
read$watch_queue(r6, &(0x7f00000001c0)=""/178, 0xb2)
set_mempolicy(0x1, &(0x7f0000000000)=0x1, 0x4)
ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000380)={'\x00', 0xfffd, 0x1, 0x3, 0x0, 0x0, 0x6000, 0xf000, '\x00', 0x382})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0)
io_setup(0x8, &(0x7f0000000080)=<r9=>0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback=r7, r3, 0x10, 0x10, 0xffffffffffffffff, @void, @value=r2}, 0x20)
io_submit(r9, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f0000000140)='-3', 0x2}])
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000300)={r6, 0x4, 0x2, r3})
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c)
r11 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x32c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1a, 0x10, 0x9, 0x1, 0x0, 0x2215, 0x7}}, {0x12, 0x2, [0x1, 0x5, 0x7f, 0xfefa, 0x0, 0x2000, 0x101]}}, {{0x1c, 0x1, {0x32, 0x0, 0x10, 0x80000001, 0x2, 0x6, 0x10, 0xa}}, {0x18, 0x2, [0x1000, 0x7ff, 0xf, 0x5, 0x1000, 0x1, 0x3, 0x8, 0x9, 0x7]}}, {{0x1c, 0x1, {0x8, 0x2, 0xedf, 0x3, 0x2, 0x8, 0x5}}, {0x4}}, {{0x1c, 0x1, {0x6f, 0x71, 0x7, 0x400, 0x1, 0x9, 0x7ff}}, {0x4}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0xb7}}, @TCA_STAB={0x158, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x5, 0x9, 0xfb, 0x2, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0xffff]}}, {{0x1c, 0x1, {0x4e, 0x6, 0x4, 0x0, 0x1, 0x5, 0x5, 0x9}}, {0x16, 0x2, [0x6, 0x8, 0xff6b, 0x0, 0x8, 0x9, 0xe, 0x0, 0x2]}}, {{0x1c, 0x1, {0x8e, 0x0, 0x1, 0x265ee6b2, 0x0, 0x9, 0xb, 0x4}}, {0xc, 0x2, [0x139, 0x9, 0x774, 0x88c7]}}, {{0x1c, 0x1, {0x4, 0xf5, 0x7, 0xe8f, 0x1, 0x8809, 0x1, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0xb1, 0x2, 0xc, 0x1, 0x1, 0x81, 0x2, 0x9}}, {0x16, 0x2, [0x2, 0x8, 0x7, 0x6, 0x1, 0x200, 0x80, 0xfffd, 0x5]}}, {{0x1c, 0x1, {0x5, 0x9, 0x5, 0x4, 0x2, 0x3ffc, 0x4, 0x5}}, {0xe, 0x2, [0x77, 0x2, 0x2ea, 0x10, 0xc]}}, {{0x1c, 0x1, {0x0, 0xc0, 0x0, 0x3, 0x1, 0x401, 0x5, 0x5}}, {0xe, 0x2, [0x3, 0x6, 0x4, 0xc, 0xffff]}}, {{0x1c, 0x1, {0x9c, 0xf0, 0x7, 0x5, 0x0, 0x8, 0x4, 0x2}}, {0x8, 0x2, [0x9, 0x7]}}]}, @TCA_STAB={0xe8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xd8, 0x9, 0x8, 0x0, 0x2, 0x200, 0x7}}, {0x12, 0x2, [0x800, 0x9, 0xfff7, 0xfff, 0x35, 0x1000, 0x3]}}, {{0x1c, 0x1, {0x75, 0x3, 0x7f, 0x5, 0x0, 0x5, 0x1ff, 0x9}}, {0x16, 0x2, [0x1, 0xe, 0x8001, 0x10, 0x0, 0x6, 0x5, 0xf, 0x4]}}, {{0x1c, 0x1, {0xff, 0xf9, 0x3, 0x6, 0x1, 0x7, 0x8, 0x9}}, {0x16, 0x2, [0x0, 0x4, 0x8, 0x400, 0x81, 0x80, 0x9, 0x7, 0x6]}}, {{0x1c, 0x1, {0x8, 0x69, 0x400, 0x3, 0x2, 0x2, 0x1, 0x2}}, {0x8, 0x2, [0x8, 0x9d4]}}, {{0x1c, 0x1, {0xe, 0x2, 0x0, 0x9, 0x0, 0x80, 0x7, 0x3}}, {0xa, 0x2, [0x6, 0x7, 0x16b]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2f}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8f3}]}, 0x32c}}, 0x0)

548.465649ms ago: executing program 2 (id=1670):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x100000000001, 0x0)
r2 = openat$null(0xffffff9c, &(0x7f0000000000), 0x40600, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000040), 0xfffffffa, 0x40)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0502103, &(0x7f0000000180)={0x0, 0xfff, 0x100fe})
r5 = openat$vnet(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000100)=[r2, r3, r4, r5]}, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3f, 0x107, 0x70bd2c, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008884}, 0x0)

249.940131ms ago: executing program 1 (id=1671):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="580000000206050000000000000000000000000105000100070000000900020073797a30000000000c0007800800134000f6ffff0400050002000000050004000000000011000300686173683a69702c6d61721c00000000"], 0x58}}, 0x4004010) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYBLOB="6afe103552317f140cbbc3e0f047c6a20cea6ec5114e626a6681ad7843b3ad8be6608c8103d35508439b3371811f388e4889687e8d213ac1ebb04425b69e1fd496e165a3758de9433cace4014463f5d57cb9a2aa96f851740d7f061694526fa56c04baeb5de0c7e6bb4783031095042afa9eea5b2247e6007bbd53da7293d3396321d096f5264317992f3b7279ec091854d1273e78e896359968ef", @ANYBLOB="715a0300671a01002c00078009000100626f6e64000000001c00028008001c0011bcd9a84d5ac71eeefc659a1801000005000100741983092c07fe017d1028352c82d4ffbf3e8552448f9f7dd23c4d17dc1849777a2a5bfdfea3c385785a2ec35b75656d0eea32ad6784c5610dccfb8d08127b4758830bbbdea8cf67cd97b8fd199ff72320123736d8b65885180c9c4e9e25bc39786bbc48ed34e7bf863e044dec59e9d36c5e41b33fc1f86ceeff90f6a69c95177ef7de3807ad921323386c0bf6a7963c7d945088"], 0x4c}, 0x1, 0x0, 0x0, 0x20048451}, 0x20008040) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) (async)
listen(0xffffffffffffffff, 0x802)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000040)='}', 0x1, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000340)={0x8, 0x0, r4, 0xe0e0e0e0}) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
mknod$loop(0x0, 0x2, 0x0)
r6 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x0)
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r7, 0x402, 0x8000001f)
r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r8, 0x402, 0x8000003d) (async)
r9 = open(&(0x7f0000000280)='.\x00', 0x40000, 0x106)
fcntl$notify(r9, 0x402, 0x36)
close(r8) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e40)=@newtaction={0x18, 0x1e, 0x400, 0xfd, 0x25dfd9fb, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e, 0x0, 0x1}, 0x0)
socket$inet(0xa, 0x801, 0x84) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6, 0x7f, 0xe4, 0x10}]}) (async)
mount_setattr(0xffffffffffffffff, 0x0, 0x10800, 0x0, 0x0) (async)
sendmmsg$inet_sctp(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)=@in={0x2, 0x4e20, @local}, 0x10, &(0x7f0000003580)=[{&(0x7f0000000440)="95", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYRESHEX=r5], 0x38, 0x4040800}, {&(0x7f0000000200)=@in6={0xa, 0x4e24, 0x10000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3a}}, 0xfffff800}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="0200000000000000", 0x8}], 0x1, 0x0, 0x0, 0x4000c80}], 0x2, 0x4000)

0s ago: executing program 1 (id=1672):
r0 = openat$null(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) (async)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a00, 0x0, 0x0}], 0x2}) (async)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) (async)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0185649, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0x1, 0x6, 0x0, 'queue0\x00', 0x2})

kernel console output (not intermixed with test programs):

error -71
[  397.514994][ T5927] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  397.610612][ T5916] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  397.637199][T10676] FAULT_INJECTION: forcing a failure.
[  397.637199][T10676] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  397.650975][T10676] CPU: 0 UID: 0 PID: 10676 Comm: syz.3.1326 Not tainted syzkaller #0 PREEMPT(full) 
[  397.650999][T10676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  397.651010][T10676] Call Trace:
[  397.651017][T10676]  <TASK>
[  397.651025][T10676]  dump_stack_lvl+0x189/0x250
[  397.651050][T10676]  ? __pfx____ratelimit+0x10/0x10
[  397.651077][T10676]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.651095][T10676]  ? __pfx__printk+0x10/0x10
[  397.651112][T10676]  ? __might_fault+0xb0/0x130
[  397.651141][T10676]  should_fail_ex+0x414/0x560
[  397.651171][T10676]  _copy_from_iter+0x1de/0x1790
[  397.651198][T10676]  ? rcu_is_watching+0x15/0xb0
[  397.651225][T10676]  ? kmalloc_reserve+0xbd/0x290
[  397.651249][T10676]  ? __pfx__copy_from_iter+0x10/0x10
[  397.651271][T10676]  ? __build_skb_around+0x262/0x3f0
[  397.651297][T10676]  ? netlink_sendmsg+0x642/0xb30
[  397.651319][T10676]  ? skb_put+0x11b/0x210
[  397.651346][T10676]  netlink_sendmsg+0x6b2/0xb30
[  397.651378][T10676]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.651404][T10676]  ? __import_iovec+0x5d4/0x7f0
[  397.651429][T10676]  ? aa_sock_msg_perm+0xf1/0x1d0
[  397.651451][T10676]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  397.651472][T10676]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.651496][T10676]  __sock_sendmsg+0x21c/0x270
[  397.651520][T10676]  ____sys_sendmsg+0x505/0x830
[  397.651551][T10676]  ? __pfx_____sys_sendmsg+0x10/0x10
[  397.651592][T10676]  ___sys_sendmsg+0x21f/0x2a0
[  397.651611][T10676]  ? __pfx____sys_sendmsg+0x10/0x10
[  397.651670][T10676]  ? __fget_files+0x2a/0x420
[  397.651690][T10676]  ? __fget_files+0x3a0/0x420
[  397.651721][T10676]  __sys_sendmsg+0x164/0x220
[  397.651747][T10676]  ? __pfx___sys_sendmsg+0x10/0x10
[  397.651781][T10676]  ? __pfx_ksys_write+0x10/0x10
[  397.651803][T10676]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  397.651823][T10676]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.651844][T10676]  __do_fast_syscall_32+0xb6/0x2b0
[  397.651864][T10676]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.651884][T10676]  do_fast_syscall_32+0x34/0x80
[  397.651902][T10676]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  397.651922][T10676] RIP: 0023:0xf7f51539
[  397.651938][T10676] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  397.651952][T10676] RSP: 002b:00000000f544655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  397.651972][T10676] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  397.651984][T10676] RDX: 0000000000044080 RSI: 0000000000000000 RDI: 0000000000000000
[  397.651994][T10676] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  397.652005][T10676] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  397.652015][T10676] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  397.652043][T10676]  </TASK>
[  397.662733][ T5916] usb 6-1: device descriptor read/8, error -71
[  398.111282][ T5916] usb usb6-port1: unable to enumerate USB device
[  398.225676][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.234730][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.244755][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.253913][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.264946][T10661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.274356][T10661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.288471][T10661] dummy0: entered promiscuous mode
[  398.296048][T10661] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  398.311602][T10661] debugfs: 'hsr1' already exists in 'hsr'
[  398.320078][T10661] Cannot create hsr debugfs directory
[  398.326272][T10661] hsr1: Slave A (dummy0) is not up; please bring it up to get a fully working HSR network
[  398.337804][T10661] hsr1: Slave B (netdevsim0) is not up; please bring it up to get a fully working HSR network
[  398.455107][T10661] hsr1: entered allmulticast mode
[  398.471007][T10661] dummy0: entered allmulticast mode
[  398.533912][T10661] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  398.553115][ T5902] usb 3-1: USB disconnect, device number 45
[  398.823240][T10693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1330'.
[  398.870587][ T5931] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  398.932276][T10695] netlink: 'syz.5.1331': attribute type 6 has an invalid length.
[  399.020638][ T5931] usb 5-1: Using ep0 maxpacket: 8
[  399.030056][ T5931] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  399.039888][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.048408][ T5931] usb 5-1: Product: syz
[  399.053330][ T5931] usb 5-1: Manufacturer: syz
[  399.057949][ T5931] usb 5-1: SerialNumber: syz
[  399.066410][ T5931] usb 5-1: config 0 descriptor??
[  399.076697][ T5931] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  399.085929][ T5931] dvb-usb: bulk message failed: -22 (2/0)
[  399.103293][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  399.125948][ T5931] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  399.138833][ T5931] usb 5-1: media controller created
[  399.164193][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  399.276066][T10688] dvb-usb: bulk message failed: -22 (4/0)
[  399.282246][T10688] cxusb: i2c read failed
[  399.289086][ T5931] cxusb: set interface failed
[  399.304946][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  399.320897][ T5920] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  399.353674][ T5931] DVB: Unable to find symbol mt352_attach()
[  399.359612][ T5931] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  399.421523][ T5931] rc_core: IR keymap rc-dvico-portable not found
[  399.428023][ T5931] Registered IR keymap rc-empty
[  399.436421][ T5931] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  399.449558][ T5931] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input31
[  399.462560][ T5931] dvb-usb: schedule remote query interval to 100 msecs.
[  399.469860][ T5931] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  399.483821][ T5931] usb 5-1: USB disconnect, device number 48
[  399.502979][ T5920] usb 6-1: config 0 has an invalid interface number: 223 but max is 2
[  399.522634][ T5920] usb 6-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  399.545552][ T5920] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3
[  399.555784][ T5920] usb 6-1: config 0 has no interface number 0
[  399.562547][ T5920] usb 6-1: config 0 interface 223 altsetting 5 has 8 endpoint descriptors, different from the interface descriptor's value: 0
[  399.570849][ T5892] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  399.576439][ T5920] usb 6-1: config 0 interface 223 has no altsetting 0
[  399.585753][ T5931] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  399.600880][ T5920] usb 6-1: New USB device found, idVendor=1a72, idProduct=1016, bcdDevice=81.d1
[  399.600905][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.624163][ T5920] usb 6-1: rejected 1 configuration due to insufficient available bus power
[  399.652271][ T5920] usb 6-1: no configuration chosen from 1 choice
[  399.729757][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  399.739627][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  399.774013][ T5892] usb 3-1: not running at top speed; connect to a high speed hub
[  399.783573][ T5892] usb 3-1: config 1 interface 0 has no altsetting 0
[  399.792549][ T5892] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40
[  399.803125][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.812200][ T5892] usb 3-1: Product: syz
[  399.816394][ T5892] usb 3-1: Manufacturer: syz
[  399.821808][ T5892] usb 3-1: SerialNumber: syz
[  399.963084][ T5920] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  400.042810][T10702] loop8: detected capacity change from 0 to 16384
[  400.244033][T10718] loop8: detected capacity change from 16384 to 0
[  400.244203][    C0] blk_print_req_error: 31 callbacks suppressed
[  400.244237][    C0] I/O error, dev loop8, sector 56 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  400.266386][    C0] I/O error, dev loop8, sector 5248 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2
[  400.288193][ T5892] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input32
[  400.311159][ T5187] bcm5974 3-1:1.0: could not read from device
[  400.346199][ T5187] bcm5974 3-1:1.0: could not read from device
[  400.363016][ T5892] usb 3-1: USB disconnect, device number 46
[  401.122705][ T5920] usb 4-1: device descriptor read/64, error -71
[  401.395280][ T5920] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  401.617552][ T5920] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  401.627082][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.635421][ T5920] usb 4-1: Product: syz
[  401.767258][ T5920] usb 4-1: Manufacturer: syz
[  401.771946][ T5920] usb 4-1: SerialNumber: syz
[  402.023961][ T5920] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  402.070719][ T5920] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  402.081973][ T5920] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  402.120705][ T5902] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  402.156135][ T5920] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  402.174991][ T5892] usb 6-1: USB disconnect, device number 45
[  402.188738][ T5920] usb 4-1: USB disconnect, device number 57
[  402.291675][ T5902] usb 5-1: Using ep0 maxpacket: 8
[  402.301882][ T5902] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  402.313658][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.397609][ T5902] usb 5-1: Product: syz
[  402.404611][ T5902] usb 5-1: Manufacturer: syz
[  402.409218][ T5902] usb 5-1: SerialNumber: syz
[  402.458030][ T5902] usb 5-1: config 0 descriptor??
[  402.468866][ T5902] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  402.480809][ T5902] dvb-usb: bulk message failed: -22 (2/0)
[  402.493845][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  402.507180][ T5902] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  402.532546][ T5902] usb 5-1: media controller created
[  402.609424][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  402.674607][T10755] dvb-usb: bulk message failed: -22 (4/0)
[  402.693130][T10755] cxusb: i2c read failed
[  402.754857][T10761] __nla_validate_parse: 2 callbacks suppressed
[  402.754870][T10761] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1350'.
[  402.771490][T10761] netlink: 'syz.1.1350': attribute type 32 has an invalid length.
[  402.782433][T10761] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  402.789147][ T5902] cxusb: set interface failed
[  402.817069][ T5902] dvb-usb: bulk message failed: -22 (1/0)
[  402.959159][ T5902] DVB: Unable to find symbol mt352_attach()
[  402.973117][ T5902] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  403.062721][ T5902] rc_core: IR keymap rc-dvico-portable not found
[  403.114658][ T5902] Registered IR keymap rc-empty
[  403.138926][ T5902] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  403.176141][ T5902] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input33
[  403.233413][ T5902] dvb-usb: schedule remote query interval to 100 msecs.
[  403.287443][ T5902] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  403.326097][ T5902] usb 5-1: USB disconnect, device number 49
[  403.444050][ T5902] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  403.545211][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1356'.
[  403.595571][T10781] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  403.625265][T10784] netlink: 'syz.4.1356': attribute type 5 has an invalid length.
[  403.666130][T10782] vxlan0: entered promiscuous mode
[  403.737126][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  403.757895][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  403.767880][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  403.778775][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  403.920419][T10798] netlink: 'syz.1.1362': attribute type 11 has an invalid length.
[  403.928525][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'.
[  404.037987][T10800] FAULT_INJECTION: forcing a failure.
[  404.037987][T10800] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  404.109198][T10800] CPU: 1 UID: 0 PID: 10800 Comm: syz.3.1363 Not tainted syzkaller #0 PREEMPT(full) 
[  404.109224][T10800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  404.109235][T10800] Call Trace:
[  404.109243][T10800]  <TASK>
[  404.109251][T10800]  dump_stack_lvl+0x189/0x250
[  404.109277][T10800]  ? __pfx____ratelimit+0x10/0x10
[  404.109303][T10800]  ? __pfx_dump_stack_lvl+0x10/0x10
[  404.109321][T10800]  ? __pfx__printk+0x10/0x10
[  404.109340][T10800]  ? __might_fault+0xb0/0x130
[  404.109369][T10800]  should_fail_ex+0x414/0x560
[  404.109400][T10800]  _copy_from_user+0x2d/0xb0
[  404.109427][T10800]  copy_uabi_to_xstate+0x469/0x970
[  404.109455][T10800]  ? __pfx_copy_uabi_to_xstate+0x10/0x10
[  404.109474][T10800]  ? __local_bh_enable_ip+0x12d/0x1c0
[  404.109502][T10800]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  404.109527][T10800]  ? x86_task_fpu+0x4c/0x90
[  404.109545][T10800]  fpu__restore_sig+0xf75/0x1100
[  404.109565][T10800]  ? fpu__restore_sig+0xa42/0x1100
[  404.109590][T10800]  ? __pfx_fpu__restore_sig+0x10/0x10
[  404.109635][T10800]  ia32_restore_sigcontext+0x449/0x5b0
[  404.109663][T10800]  ? __pfx_ia32_restore_sigcontext+0x10/0x10
[  404.109687][T10800]  ? _raw_spin_lock_irq+0xae/0xf0
[  404.109711][T10800]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  404.109744][T10800]  ? _raw_spin_unlock_irq+0x23/0x50
[  404.109769][T10800]  ? lockdep_hardirqs_on+0x9c/0x150
[  404.109796][T10800]  __ia32_compat_sys_rt_sigreturn+0x1a9/0x260
[  404.109823][T10800]  ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10
[  404.109849][T10800]  ? do_int80_emulation+0xec/0x390
[  404.109868][T10800]  ? asm_int80_emulation+0x1a/0x20
[  404.109886][T10800]  do_int80_emulation+0x126/0x390
[  404.109904][T10800]  ? clear_bhb_loop+0x60/0xb0
[  404.109919][T10800]  ? clear_bhb_loop+0x60/0xb0
[  404.109940][T10800]  asm_int80_emulation+0x1a/0x20
[  404.109957][T10800] RIP: 0023:0xf7f51537
[  404.109972][T10800] Code: 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 <cd> 80 5d 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  404.109987][T10800] RSP: 002b:00000000f544655c EFLAGS: 00000206
[  404.110002][T10800] RAX: 0000000000000139 RBX: 0000000000000003 RCX: 0000000000000000
[  404.110013][T10800] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000039000
[  404.110024][T10800] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  404.110033][T10800] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  404.110043][T10800] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  404.110070][T10800]  </TASK>
[  404.357953][    C1] vkms_vblank_simulate: vblank timer overrun
[  404.364015][    C1] hrtimer: interrupt took 253930498 ns
[  404.464036][    C1] vkms_vblank_simulate: vblank timer overrun
[  405.091793][T10819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1368'.
[  405.264528][T10825] openvswitch: netlink: Message has 2851 unknown bytes.
[  405.296389][T10825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.313136][T10827] netlink: 'syz.1.1372': attribute type 9 has an invalid length.
[  405.320740][ T5902] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  405.480634][ T5902] usb 6-1: Using ep0 maxpacket: 8
[  405.493984][ T5902] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  405.507163][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  405.522172][ T5902] usb 6-1: Product: syz
[  405.527129][ T5902] usb 6-1: Manufacturer: syz
[  405.533063][ T5902] usb 6-1: SerialNumber: syz
[  405.541383][ T5902] usb 6-1: config 0 descriptor??
[  405.556198][ T5902] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  405.580943][ T5902] dvb-usb: bulk message failed: -22 (2/0)
[  405.595113][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  405.602696][T10835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1375'.
[  405.618334][T10835] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1375'.
[  405.621340][ T5902] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  405.628786][T10835] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1375'.
[  405.649577][T10836] bond2: (slave bond_slave_1): Device is not our slave
[  405.656871][ T5902] usb 6-1: media controller created
[  405.657321][T10832] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  405.671682][T10836] bond2: option active_slave: invalid value (bond_slave_1)
[  405.681260][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  405.693520][T10836] bond2 (unregistering): Released all slaves
[  405.755990][T10817] dvb-usb: bulk message failed: -22 (4/0)
[  405.763114][T10817] cxusb: i2c read failed
[  405.769005][ T5902] cxusb: set interface failed
[  405.791897][ T5902] dvb-usb: bulk message failed: -22 (1/0)
[  405.883401][ T5902] DVB: Unable to find symbol mt352_attach()
[  405.889335][ T5902] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  405.953396][T10851] fuse: Unknown parameter 'user_i00000000000000000000'
[  406.030289][ T5902] rc_core: IR keymap rc-dvico-portable not found
[  406.044488][ T5902] Registered IR keymap rc-empty
[  406.072545][ T5902] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  406.106933][ T5902] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input34
[  406.151344][ T5902] dvb-usb: schedule remote query interval to 100 msecs.
[  406.168751][ T5902] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  406.191045][   T30] kauditd_printk_skb: 3 callbacks suppressed
[  406.191064][   T30] audit: type=1326 audit(1760421477.252:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0
[  406.228198][ T5902] usb 6-1: USB disconnect, device number 46
[  406.288102][   T30] audit: type=1326 audit(1760421477.352:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  406.352379][   T30] audit: type=1326 audit(1760421477.352:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  406.376642][T10860] fuse: Bad value for 'fd'
[  406.423487][   T30] audit: type=1326 audit(1760421477.382:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf709d539 code=0x7ffc0000
[  406.448899][T10851] fuse: Bad value for 'user_id'
[  406.500562][T10851] fuse: Bad value for 'user_id'
[  406.512537][   T30] audit: type=1326 audit(1760421477.382:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  406.566551][   T30] audit: type=1326 audit(1760421477.382:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  406.640963][ T5902] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  406.669733][   T30] audit: type=1326 audit(1760421477.382:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d539 code=0x7ffc0000
[  406.671962][T10869] netlink: 'syz.5.1382': attribute type 11 has an invalid length.
[  406.692876][   T30] audit: type=1326 audit(1760421477.382:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  406.724309][   T30] audit: type=1326 audit(1760421477.382:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  406.764815][   T30] audit: type=1326 audit(1760421477.382:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10856 comm="syz.2.1380" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709d539 code=0x7ffc0000
[  406.843515][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1382'.
[  407.048446][    C1] vkms_vblank_simulate: vblank timer overrun
[  407.662278][T10879] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  408.743367][T10894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  408.752302][T10894] syzkaller0: entered promiscuous mode
[  408.757850][T10894] syzkaller0: entered allmulticast mode
[  408.768470][T10894] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  408.799183][T10894] tipc: Resetting bearer <eth:syzkaller0>
[  408.847524][ T5916] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  408.864715][T10893] tipc: Resetting bearer <eth:syzkaller0>
[  408.897491][T10893] tipc: Disabling bearer <eth:syzkaller0>
[  408.933054][T10896] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  408.940276][ T5927] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  409.000170][ T5916] usb 2-1: Using ep0 maxpacket: 8
[  409.008262][ T5916] usb 2-1: too many configurations: 12, using maximum allowed: 8
[  409.045418][ T5916] usb 2-1: unable to read config index 0 descriptor/start: -61
[  409.060945][ T5916] usb 2-1: can't read configurations, error -61
[  409.112348][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  409.124812][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  409.150877][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  409.174014][ T5927] usb 5-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00
[  409.184855][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  409.196662][ T5927] usb 5-1: config 0 descriptor??
[  409.210281][ T5916] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  409.380219][ T5916] usb 2-1: Using ep0 maxpacket: 8
[  409.386241][ T5916] usb 2-1: too many configurations: 12, using maximum allowed: 8
[  409.386302][T10911] : (slave vxlan0): Enslaving as an active interface with an up link
[  409.402557][ T5916] usb 2-1: unable to read config index 0 descriptor/start: -61
[  409.412716][ T3565] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  409.431043][ T3565] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  409.439914][ T5916] usb 2-1: can't read configurations, error -61
[  409.450945][ T5916] usb usb2-port1: attempt power cycle
[  409.460574][ T3565] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  409.489754][ T3565] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  409.498692][  T983] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  409.632864][ T5927] hid-generic 0003:045E:008E.000C: item fetching failed at offset 5/7
[  409.650974][ T5927] hid-generic 0003:045E:008E.000C: probe with driver hid-generic failed with error -22
[  409.660795][  T983] usb 3-1: Using ep0 maxpacket: 32
[  409.672597][  T983] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  409.700411][  T983] usb 3-1: config 0 has no interface number 0
[  409.715796][  T983] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  409.740277][  T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.750198][  T983] usb 3-1: Product: syz
[  409.754383][  T983] usb 3-1: Manufacturer: syz
[  409.769190][  T983] usb 3-1: SerialNumber: syz
[  409.786194][  T983] usb 3-1: config 0 descriptor??
[  409.795398][  T983] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  409.810162][  T983] usb 3-1: selecting invalid altsetting 1
[  409.816022][  T983] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  409.829707][  T983] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  409.841322][ T5916] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  409.862308][  T983] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  409.882335][ T5927] usb 5-1: USB disconnect, device number 50
[  409.895693][ T5916] usb 2-1: Using ep0 maxpacket: 8
[  409.910923][  T983] usb 3-1: media controller created
[  409.917064][ T5916] usb 2-1: too many configurations: 12, using maximum allowed: 8
[  409.938342][ T5916] usb 2-1: unable to read config index 0 descriptor/start: -61
[  409.957793][ T5916] usb 2-1: can't read configurations, error -61
[  409.972652][  T983] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  410.012315][  T983] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  410.019870][  T983] zl10353_read_register: readreg error (reg=127, ret==-32)
[  410.093468][ T5916] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  410.131938][ T5916] usb 2-1: Using ep0 maxpacket: 8
[  410.138024][ T5916] usb 2-1: too many configurations: 12, using maximum allowed: 8
[  410.151098][ T5916] usb 2-1: unable to read config index 0 descriptor/start: -61
[  410.163261][ T5916] usb 2-1: can't read configurations, error -61
[  410.181841][ T5916] usb usb2-port1: unable to enumerate USB device
[  410.484617][ T5902] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  410.535799][T10927] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1398'.
[  410.682696][ T5902] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  410.697488][ T5902] usb 4-1: New USB device found, idVendor=129b, idProduct=160c, bcdDevice=5b.d8
[  410.720628][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  410.740897][ T5902] usb 4-1: Product: syz
[  410.755318][ T5902] usb 4-1: Manufacturer: syz
[  410.769028][ T5902] usb 4-1: SerialNumber: syz
[  411.514782][T10932] netlink: 'syz.1.1401': attribute type 11 has an invalid length.
[  411.523293][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1401'.
[  411.724205][T10937] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  411.872325][   T30] kauditd_printk_skb: 52 callbacks suppressed
[  411.872343][   T30] audit: type=1326 audit(1760421482.922:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  411.907001][   T30] audit: type=1326 audit(1760421482.922:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  411.960767][   T30] audit: type=1326 audit(1760421482.922:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000
[  412.126594][T10942] pim6reg: entered allmulticast mode
[  412.171677][   T30] audit: type=1326 audit(1760421482.922:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  412.200650][   T30] audit: type=1326 audit(1760421482.922:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  412.327639][   T30] audit: type=1326 audit(1760421482.932:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf707d539 code=0x7ffc0000
[  412.398437][  T983] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  412.402231][   T30] audit: type=1326 audit(1760421482.932:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  412.429184][   T30] audit: type=1326 audit(1760421482.932:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf707d539 code=0x7ffc0000
[  412.534747][   T30] audit: type=1326 audit(1760421482.932:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[  412.562822][T10947] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1405'.
[  412.899077][  T983] usb 3-1: USB disconnect, device number 47
[  412.925573][   T30] audit: type=1326 audit(1760421482.932:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10939 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf707d539 code=0x7ffc0000
[  413.239182][ T5902] usb 4-1: Could not find all expected endpoints
[  413.265157][ T5902] usb 4-1: USB disconnect, device number 58
[  413.334316][T10952] pim6reg9: entered allmulticast mode
[  413.344073][T10952] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[10952]
[  413.390581][ T5931] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  413.553825][  T983] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  413.570618][ T5931] usb 2-1: Using ep0 maxpacket: 8
[  413.628079][ T5931] usb 2-1: config 162 has an invalid interface number: 142 but max is 1
[  413.637123][ T5931] usb 2-1: config 162 has an invalid interface number: 112 but max is 1
[  413.654083][ T5931] usb 2-1: config 162 has no interface number 0
[  413.661236][ T5931] usb 2-1: config 162 has no interface number 1
[  413.667540][ T5931] usb 2-1: config 162 interface 142 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  413.683082][ T5931] usb 2-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  413.707313][ T5931] usb 2-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  413.734442][ T5931] usb 2-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  413.752826][  T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  413.760698][ T5931] usb 2-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  413.782175][ T5931] usb 2-1: config 162 interface 142 has no altsetting 0
[  413.792690][  T983] usb 3-1: config 0 has no interfaces?
[  413.801635][ T5931] usb 2-1: config 162 interface 112 has no altsetting 0
[  413.816096][ T5931] usb 2-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08
[  413.818507][  T983] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  413.826038][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.855253][  T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.873504][ T5931] usb 2-1: Product: syz
[  413.883340][ T5931] usb 2-1: Manufacturer: syz
[  413.896250][ T5931] usb 2-1: SerialNumber: syz
[  413.898466][  T983] usb 3-1: config 0 descriptor??
[  414.365299][ T5931] pl2303 2-1:162.142: required endpoints missing
[  414.410058][ T5931] pl2303 2-1:162.112: required interrupt-in endpoint missing
[  414.469713][ T5931] usb 2-1: USB disconnect, device number 55
[  414.789597][T10988] vlan0: left promiscuous mode
[  414.796515][T10988] bond0: left promiscuous mode
[  414.807731][T10988] vlan0: left allmulticast mode
[  414.814139][T10988] bond0: left allmulticast mode
[  414.850661][T10988] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1415'.
[  415.231912][T10994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1416'.
[  415.880662][ T5931] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  416.284711][ T5931] usb 2-1: Using ep0 maxpacket: 8
[  416.431157][ T5927] usb 3-1: USB disconnect, device number 48
[  416.432321][ T5931] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  416.516955][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.533253][ T5931] usb 2-1: Product: syz
[  416.539275][ T5931] usb 2-1: Manufacturer: syz
[  416.564381][ T5931] usb 2-1: SerialNumber: syz
[  416.575058][ T5931] usb 2-1: config 0 descriptor??
[  416.608153][ T5931] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  416.626330][ T5931] dvb-usb: bulk message failed: -22 (2/0)
[  416.626695][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1422'.
[  416.648746][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  416.663745][ T5931] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  416.672802][ T5931] usb 2-1: media controller created
[  416.702814][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  416.905139][T10998] dvb-usb: bulk message failed: -22 (4/0)
[  416.913962][T10998] cxusb: i2c read failed
[  416.927566][ T5931] cxusb: set interface failed
[  416.965699][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  416.986081][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1423'.
[  417.026088][T11015] bridge_slave_1: left allmulticast mode
[  417.046777][T11015] bridge_slave_1: left promiscuous mode
[  417.053586][T11015] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.065139][T11015] bridge_slave_0: left allmulticast mode
[  417.084713][T11015] bridge_slave_0: left promiscuous mode
[  417.092302][T11023] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1424'.
[  417.131465][T11015] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.297442][ T5931] DVB: Unable to find symbol mt352_attach()
[  417.316385][ T5931] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  417.336275][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'.
[  417.347687][T11024] netlink: 86 bytes leftover after parsing attributes in process `syz.4.1424'.
[  417.608505][T11028] delete_channel: no stack
[  418.194564][ T5931] rc_core: IR keymap rc-dvico-portable not found
[  418.210622][ T5931] Registered IR keymap rc-empty
[  418.441443][ T5931] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  418.581989][ T5931] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input35
[  418.714091][ T5931] dvb-usb: schedule remote query interval to 100 msecs.
[  418.838661][ T5931] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  418.908966][ T5931] usb 2-1: USB disconnect, device number 56
[  419.041969][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'.
[  419.084465][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'.
[  419.120903][ T5931] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  419.149431][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'.
[  419.198760][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1428'.
[  419.517041][ T5931] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  419.737051][ T5931] usb 2-1: Using ep0 maxpacket: 16
[  419.767466][ T5931] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  419.778437][ T5931] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.876012][ T5931] usb 2-1: config 0 has no interface number 0
[  419.918986][T11065] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1430'.
[  420.213423][T11064] bond2: (slave bridge0): Releasing backup interface
[  420.220637][T11064] bridge0 (unregistering): left promiscuous mode
[  420.231737][ T5931] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  420.280549][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  420.288773][ T5931] usb 2-1: Product: syz
[  420.295713][ T5931] usb 2-1: Manufacturer: syz
[  420.303388][ T5931] usb 2-1: SerialNumber: syz
[  420.361758][ T5931] usb 2-1: config 0 descriptor??
[  420.791711][ T5931] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3)
[  420.799272][ T5931] uvcvideo 2-1:0.105: No valid video chain found.
[  421.014015][T11039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.023089][T11039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.074365][ T5916] usb 2-1: USB disconnect, device number 57
[  421.285955][T11074] program syz.5.1436 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  421.299615][T11074] netlink: 'syz.5.1436': attribute type 5 has an invalid length.
[  421.845765][T11092] Cannot find del_set index 3 as target
[  422.415495][T11104] syzkaller0: entered promiscuous mode
[  422.421666][T11104] syzkaller0: entered allmulticast mode
[  423.201985][ T5931] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  423.420745][ T5931] usb 2-1: Using ep0 maxpacket: 8
[  423.427640][ T5931] usb 2-1: unable to get BOS descriptor or descriptor too short
[  423.506909][ T5931] usb 2-1: config 4 interface 0 has no altsetting 0
[  423.576603][T11143] __nla_validate_parse: 2 callbacks suppressed
[  423.576620][T11143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1448'.
[  423.692132][ T5931] usb 2-1: string descriptor 0 read error: -22
[  423.709105][ T5931] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  423.775931][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.021306][ T5931] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  424.092871][ T5931] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  424.181455][ T5931] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  424.223566][ T5931] usb 2-1: media controller created
[  424.229844][T11115] usb 2-1: dvb_usb_au6610: wlen=0, aborting
[  424.355522][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  424.792642][ T5892] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  424.962036][ T5892] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  424.993748][ T5892] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  425.034229][ T5892] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.040698][T11151] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  425.074692][ T5892] usb 6-1: config 0 descriptor??
[  425.087941][ T5892] pwc: Askey VC010 type 2 USB webcam detected.
[  425.382657][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'.
[  425.445280][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'.
[  425.456579][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'.
[  425.495953][ T5892] pwc: recv_control_msg error -32 req 02 val 2b00
[  425.544443][ T5931] zl10353_read_register: readreg error (reg=127, ret==0)
[  425.558181][ T5892] pwc: recv_control_msg error -32 req 02 val 2700
[  425.568014][ T5892] pwc: recv_control_msg error -32 req 02 val 2c00
[  425.577567][ T5892] pwc: recv_control_msg error -32 req 04 val 1000
[  425.591256][ T5892] pwc: recv_control_msg error -32 req 04 val 1300
[  425.602366][ T5892] pwc: recv_control_msg error -32 req 04 val 1400
[  425.615168][ T5892] pwc: recv_control_msg error -32 req 02 val 2000
[  425.627066][ T5892] pwc: recv_control_msg error -32 req 02 val 2100
[  425.649880][ T5892] pwc: recv_control_msg error -32 req 04 val 1500
[  425.669485][ T5892] pwc: recv_control_msg error -32 req 02 val 2500
[  425.677861][ T5892] pwc: recv_control_msg error -32 req 02 val 2400
[  425.700553][ T5927] usb 5-1: new full-speed USB device number 51 using dummy_hcd
[  425.727545][T11165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'.
[  425.865619][T11165] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  425.872189][T11165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  425.907634][T11165] vhci_hcd vhci_hcd.0: Device attached
[  426.099965][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short
[  426.108001][T11146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  426.119462][ T5927] usb 5-1: not running at top speed; connect to a high speed hub
[  426.153279][ T5927] usb 5-1: config 5 has an invalid interface number: 246 but max is 0
[  426.162281][ T5927] usb 5-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  426.174305][T11146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.189698][ T5927] usb 5-1: config 5 has no interface number 0
[  426.196337][ T5927] usb 5-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  426.208352][ T5927] usb 5-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  426.222097][ T5916] usb 37-1: new high-speed USB device number 3 using vhci_hcd
[  426.232508][ T5927] usb 5-1: config 5 interface 246 has no altsetting 0
[  426.290719][ T5927] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  426.293243][ T5931] usb 2-1: USB disconnect, device number 58
[  426.307070][ T5892] pwc: recv_control_msg error -71 req 02 val 2900
[  426.314671][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.322715][ T5892] pwc: recv_control_msg error -71 req 02 val 2800
[  426.329447][ T5927] usb 5-1: Product: syz
[  426.339163][ T5927] usb 5-1: Manufacturer: syz
[  426.348437][ T5927] usb 5-1: SerialNumber: syz
[  426.602528][T11166] vhci_hcd: connection reset by peer
[  426.610040][   T36] vhci_hcd: stop threads
[  426.614576][   T36] vhci_hcd: release socket
[  426.619799][   T36] vhci_hcd: disconnect device
[  426.661392][ T5892] pwc: recv_control_msg error -71 req 04 val 1100
[  426.671954][ T5892] pwc: recv_control_msg error -71 req 04 val 1200
[  426.721875][ T5892] pwc: Registered as video103.
[  426.751235][ T5892] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36
[  426.794563][ T5892] usb 6-1: USB disconnect, device number 47
[  427.237446][  T983] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  427.373373][ T5927] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  427.376630][   T36] usb 5-1: Failed to submit usb control message: -71
[  427.401380][   T36] usb 5-1: unable to send the bmi data to the device: -71
[  427.408550][   T36] usb 5-1: unable to get target info from device
[  427.418711][   T36] usb 5-1: could not get target info (-71)
[  427.425156][   T36] usb 5-1: could not probe fw (-71)
[  427.440860][  T983] usb 2-1: Using ep0 maxpacket: 16
[  427.447868][  T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  427.569707][  T983] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  427.593015][ T5927] usb 5-1: USB disconnect, device number 51
[  427.601502][  T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.622153][  T983] usb 2-1: Product: syz
[  427.626400][  T983] usb 2-1: Manufacturer: syz
[  427.670318][  T983] usb 2-1: SerialNumber: syz
[  427.710997][  T983] usb 2-1: config 0 descriptor??
[  427.743812][  T983] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  427.761129][  T983] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  427.854487][T11191] bond1: entered promiscuous mode
[  428.335654][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  428.349087][T11209] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1467'.
[  428.378295][  T983] em28xx 2-1:0.0: chip ID is em2765
[  428.386318][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  428.570328][ T5920] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  428.730620][ T5920] usb 6-1: Using ep0 maxpacket: 32
[  428.738709][ T5920] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17390, setting to 1024
[  428.750707][ T5920] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  428.761114][ T5920] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  428.774291][ T5920] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  428.783602][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.792009][ T5920] usb 6-1: Product: 䴭뺀裙Ⴗ逇િ庄畎뾨�㎻䮋�䌵艷瓲稟앶ଞ鎩詚꟭ᩭ章䴡Ⱨ虜鷔�ឞ蚹猗鎩陽얓맟夆㕾伓ﷰ�陋㈳୷蒛�孨裙ଛɸ丣즄媠㬴놆╨ᶮ�겿绰飻훋�渞煗�ᚣ�ꬪ�蔔�唵춣ᄹ⣽筞耸ຟ�隈췀꛸鱕짠ήỰᳺ�凅팣踛䴎�耙⎈㙻ෙ賮졲�펶쟾ꬿ�﫼륉踖㧲�ｶ臓�骚
[  428.828742][ T5920] usb 6-1: Manufacturer: ԙႹ턮畴鄯퉆
[  428.835537][ T5920] usb 6-1: SerialNumber: 젖�茋ࡽ㦹�鲳烫痩煾徤燿뇗쫪溱묅陀฻哩ꤰ컂䚟ꑵᘋ㞕��Έ槻��ʶ㫕훺ꑘ掃娺䴃넓澱�
[  429.002048][  T983] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  429.022386][  T983] em28xx 2-1:0.0: board has no eeprom
[  429.110517][  T983] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  429.120258][T11209] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  429.127374][T11209] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  429.133643][  T983] em28xx 2-1:0.0: dvb set to bulk mode.
[  429.142465][ T5927] em28xx 2-1:0.0: Binding DVB extension
[  429.164440][  T983] usb 2-1: USB disconnect, device number 59
[  429.193310][  T983] em28xx 2-1:0.0: Disconnecting em28xx
[  429.199804][T11209] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  429.245195][T11209] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  429.249750][ T5927] em28xx 2-1:0.0: Registering input extension
[  429.264575][  T983] em28xx 2-1:0.0: Closing input extension
[  429.275353][T11209] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  429.288118][  T983] em28xx 2-1:0.0: Freeing device
[  429.299814][T11209] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  429.346743][T11209] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  429.362406][T11209] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  429.373879][T11209] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  429.384210][T11209] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  429.496844][T11218] Invalid logical block size (3328)
[  429.640983][ T5892] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  429.812371][ T5892] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  429.873427][ T5931] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  429.900320][T11226] netlink: 'syz.1.1473': attribute type 21 has an invalid length.
[  429.908388][T11226] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1473'.
[  429.919542][T11226] netlink: 'syz.1.1473': attribute type 21 has an invalid length.
[  429.927818][T11226] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1473'.
[  429.969710][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  430.029122][ T5892] usb 4-1: config 0 descriptor??
[  430.122157][ T5931] usb 5-1: config 0 has an invalid interface number: 144 but max is 0
[  430.136248][ T5931] usb 5-1: config 0 has no interface number 0
[  430.144708][ T5931] usb 5-1: config 0 interface 144 has no altsetting 0
[  430.155671][ T5931] usb 5-1: New USB device found, idVendor=04d8, idProduct=f58b, bcdDevice=fa.a9
[  430.166099][ T5931] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.175331][ T5931] usb 5-1: Product: syz
[  430.198252][ T5931] usb 5-1: Manufacturer: syz
[  430.204407][ T5931] usb 5-1: SerialNumber: syz
[  430.218366][ T5931] usb 5-1: config 0 descriptor??
[  430.447538][ T5931] ir_toy 5-1:0.144: required endpoints not found
[  430.490593][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  430.504278][ T5931] usb 5-1: USB disconnect, device number 52
[  430.504431][T11236] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1477'.
[  430.668278][T11212] input: syz1 as /devices/virtual/input/input38
[  430.920817][ T5892] ath6kl: Failed to read usb control message: -71
[  430.937184][ T5892] ath6kl: Unable to read the bmi data from the device: -71
[  430.956117][ T5892] ath6kl: unable to read target info byte count: -71
[  430.965015][ T5892] ath6kl: Failed to init ath6kl core: -71
[  430.981228][ T5892] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  431.026812][ T5892] usb 4-1: USB disconnect, device number 59
[  431.124957][T11243] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  431.211014][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  431.290983][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  431.300834][ T5931] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  431.370369][ T5916] vhci_hcd: vhci_device speed not set
[  431.376029][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  431.450651][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  431.468751][ T5931] usb 3-1: Using ep0 maxpacket: 8
[  431.504154][ T5931] usb 3-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9
[  431.521067][ T5920] cdc_ncm 6-1:1.0: bind() failure
[  431.533476][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.543604][ T5920] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  431.553745][ T5920] cdc_ncm 6-1:1.1: bind() failure
[  431.573384][ T5920] usb 6-1: USB disconnect, device number 48
[  431.603728][ T5931] usb 3-1: config 0 descriptor??
[  431.665021][ T5931] usblcd 3-1:0.0: USBLCD model not supported.
[  431.910751][ T5892] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  431.920822][  T983] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  431.984888][T11269] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1486'.
[  432.040733][ T5892] usb 4-1: device descriptor read/64, error -71
[  432.048716][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  432.057968][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  432.120909][  T983] usb 2-1: Using ep0 maxpacket: 16
[  432.132593][  T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  432.152728][  T983] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  432.162617][  T983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  432.173929][  T983] usb 2-1: Product: syz
[  432.180443][  T983] usb 2-1: Manufacturer: syz
[  432.185393][  T983] usb 2-1: SerialNumber: syz
[  432.202079][  T983] usb 2-1: config 0 descriptor??
[  432.218391][  T983] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  432.228106][  T983] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  432.300782][ T5892] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  432.440840][ T5892] usb 4-1: device descriptor read/64, error -71
[  432.551239][ T5892] usb usb4-port1: attempt power cycle
[  432.570729][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  432.832994][  T983] em28xx 2-1:0.0: chip ID is em2765
[  432.921499][ T5892] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  432.950930][ T5892] usb 4-1: device descriptor read/8, error -71
[  433.190850][ T5892] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  433.222113][ T5892] usb 4-1: device descriptor read/8, error -71
[  433.290739][   T52] Bluetooth: hci2: command 0x0406 tx timeout
[  433.340468][ T5892] usb usb4-port1: unable to enumerate USB device
[  433.379264][   T52] Bluetooth: hci3: command 0x0406 tx timeout
[  433.443424][  T983] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  433.459168][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  433.466224][  T983] em28xx 2-1:0.0: board has no eeprom
[  433.530505][   T52] Bluetooth: hci1: command 0x0406 tx timeout
[  433.536651][  T983] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  433.546769][  T983] em28xx 2-1:0.0: dvb set to bulk mode.
[  433.552600][ T5920] em28xx 2-1:0.0: Binding DVB extension
[  433.571873][  T983] usb 2-1: USB disconnect, device number 60
[  433.587468][  T983] em28xx 2-1:0.0: Disconnecting em28xx
[  433.631501][ T5920] em28xx 2-1:0.0: Registering input extension
[  433.637916][  T983] em28xx 2-1:0.0: Closing input extension
[  433.653779][  T983] em28xx 2-1:0.0: Freeing device
[  434.093546][  T983] usb 3-1: USB disconnect, device number 49
[  434.443737][T11299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1493'.
[  434.642639][T11303] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1494'.
[  434.762407][T11302] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1494'.
[  434.821830][T11306] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1495'.
[  434.864119][T11305] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1495'.
[  435.283955][T11323] netlink: 'syz.2.1501': attribute type 4 has an invalid length.
[  435.448438][T11329] netlink: 'syz.3.1504': attribute type 11 has an invalid length.
[  435.470673][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'.
[  435.698007][T11344] --map-set only usable from mangle table
[  435.989857][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1511'.
[  436.101256][T11357] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1512'.
[  436.238169][T11363] loop5: detected capacity change from 0 to 7
[  436.254955][ T5839] Dev loop5: unable to read RDB block 7
[  436.262037][ T5839]  loop5: unable to read partition table
[  436.268038][ T5839] loop5: partition table beyond EOD, truncated
[  436.279518][T11363] Dev loop5: unable to read RDB block 7
[  436.285708][T11363]  loop5: unable to read partition table
[  436.293184][T11363] loop5: partition table beyond EOD, truncated
[  436.299684][T11363] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  436.341372][ T5202] Dev loop5: unable to read RDB block 7
[  436.347368][ T5202]  loop5: unable to read partition table
[  436.354071][ T5931] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  436.364777][ T5202] loop5: partition table beyond EOD, truncated
[  436.430384][ T5920] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  436.510679][ T5931] usb 4-1: Using ep0 maxpacket: 16
[  436.518816][ T5931] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  436.531995][ T5931] usb 4-1: config 1 has no interface number 0
[  436.548747][ T5931] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  436.568138][ T5931] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  436.585851][ T5931] usb 4-1: config 1 interface 105 has no altsetting 0
[  436.611926][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  436.624016][ T5931] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  436.640719][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.662987][ T5931] usb 4-1: Product: syz
[  436.670719][ T5931] usb 4-1: Manufacturer: syz
[  436.681358][ T5931] usb 4-1: SerialNumber: syz
[  436.694382][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  436.715565][T11359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  436.724745][T11359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  436.763649][ T5920] usb 6-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[  436.780234][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.813548][ T5920] usb 6-1: Product: syz
[  436.834177][ T5920] usb 6-1: Manufacturer: syz
[  436.838819][ T5920] usb 6-1: SerialNumber: syz
[  437.002134][ T5920] usb 6-1: config 0 descriptor??
[  437.167002][ T5920] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  437.212475][T11361] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  437.223588][T11378] program syz.5.1514 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  437.287087][T11379] program syz.5.1514 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  437.298821][ T5931] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71
[  437.308015][ T5920] usb 6-1: Detected SIO
[  437.321601][ T5931] usb 4-1: USB disconnect, device number 64
[  437.340921][ T5920] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4
[  437.400781][ T5920] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 7
[  437.449735][ T5920] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  437.515805][ T5920] usb 6-1: USB disconnect, device number 49
[  437.652495][T11389] FAULT_INJECTION: forcing a failure.
[  437.652495][T11389] name failslab, interval 1, probability 0, space 0, times 0
[  437.681486][ T5920] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  437.714115][T11389] CPU: 1 UID: 0 PID: 11389 Comm: syz.2.1523 Not tainted syzkaller #0 PREEMPT(full) 
[  437.714140][T11389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  437.714152][T11389] Call Trace:
[  437.714160][T11389]  <TASK>
[  437.714169][T11389]  dump_stack_lvl+0x189/0x250
[  437.714195][T11389]  ? __pfx____ratelimit+0x10/0x10
[  437.714218][T11389]  ? __pfx_dump_stack_lvl+0x10/0x10
[  437.714236][T11389]  ? __pfx__printk+0x10/0x10
[  437.714258][T11389]  ? __pfx___might_resched+0x10/0x10
[  437.714279][T11389]  ? fs_reclaim_acquire+0x7d/0x100
[  437.714305][T11389]  should_fail_ex+0x414/0x560
[  437.714334][T11389]  should_failslab+0xa8/0x100
[  437.714357][T11389]  kmem_cache_alloc_node_noprof+0x77/0x710
[  437.714375][T11389]  ? __alloc_skb+0x112/0x2d0
[  437.714403][T11389]  __alloc_skb+0x112/0x2d0
[  437.714429][T11389]  netlink_dump+0x1b7/0xe90
[  437.714463][T11389]  ? __pfx_netlink_dump+0x10/0x10
[  437.714497][T11389]  ? netlink_recvmsg+0x5b2/0xa30
[  437.714517][T11389]  ? kmem_cache_free+0x19b/0x690
[  437.714540][T11389]  netlink_recvmsg+0x676/0xa30
[  437.714572][T11389]  ? __pfx_netlink_recvmsg+0x10/0x10
[  437.714604][T11389]  ? __pfx_netlink_recvmsg+0x10/0x10
[  437.714628][T11389]  sock_recvmsg_nosec+0x186/0x1c0
[  437.714654][T11389]  ____sys_recvmsg+0x3aa/0x460
[  437.714681][T11389]  ? __pfx_____sys_recvmsg+0x10/0x10
[  437.714696][T11389]  ? get_compat_msghdr+0x37e/0x4a0
[  437.714732][T11389]  ? ___sys_recvmsg+0x1c4/0x510
[  437.714749][T11389]  ? kfree+0x4d/0x6d0
[  437.714772][T11389]  ___sys_recvmsg+0x1b5/0x510
[  437.714794][T11389]  ? __pfx____sys_recvmsg+0x10/0x10
[  437.714834][T11389]  ? __fget_files+0x3a0/0x420
[  437.714867][T11389]  do_recvmmsg+0x36a/0x770
[  437.714894][T11389]  ? __pfx_do_recvmmsg+0x10/0x10
[  437.714911][T11389]  ? ksys_write+0x1cb/0x250
[  437.714949][T11389]  ? __fget_files+0x3a0/0x420
[  437.714974][T11389]  __sys_recvmmsg+0x19d/0x280
[  437.714996][T11389]  ? __pfx___sys_recvmmsg+0x10/0x10
[  437.715014][T11389]  ? __pfx_ksys_write+0x10/0x10
[  437.715048][T11389]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  437.715082][T11389]  __do_fast_syscall_32+0xb6/0x2b0
[  437.715104][T11389]  ? lockdep_hardirqs_on+0x9c/0x150
[  437.715126][T11389]  do_fast_syscall_32+0x34/0x80
[  437.715145][T11389]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  437.715167][T11389] RIP: 0023:0xf709d539
[  437.715183][T11389] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  437.715200][T11389] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  437.715218][T11389] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005a00
[  437.715232][T11389] RDX: 0000000000000007 RSI: 0000000000002000 RDI: 0000000000000000
[  437.715243][T11389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  437.715254][T11389] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  437.715266][T11389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  437.715292][T11389]  </TASK>
[  437.716107][ T5920] ftdi_sio 6-1:0.0: device disconnected
[  438.160555][T11398] netlink: 14448 bytes leftover after parsing attributes in process `syz.3.1525'.
[  438.825575][T11404] netlink: 'syz.2.1527': attribute type 11 has an invalid length.
[  438.842772][T11404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1527'.
[  439.516587][T11408] binder: 11407:11408 ioctl 50009417 80000c80 returned -22
[  439.562745][T11408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1528'.
[  439.920896][T11412] fuse: Bad value for 'source'
[  440.093454][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  440.100710][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  440.178346][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  440.178364][   T30] audit: type=1326 audit(1760421511.242:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11413 comm="syz.2.1531" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0
[  440.571584][ T5920] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  440.894970][ T5920] usb 3-1: config 0 has no interfaces?
[  440.958988][ T5920] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  440.983776][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.120771][ T5920] usb 3-1: Product: syz
[  441.125139][ T5920] usb 3-1: Manufacturer: syz
[  441.129755][ T5920] usb 3-1: SerialNumber: syz
[  441.137616][ T5920] usb 3-1: config 0 descriptor??
[  441.440317][   T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  441.465377][   T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  441.530990][   T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  441.560796][   T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.271523][ T5920] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  442.594538][ T5920] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  442.615462][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  442.634304][ T5920] usb 5-1: Product: syz
[  442.644389][ T5920] usb 5-1: Manufacturer: syz
[  442.656976][ T5920] usb 5-1: SerialNumber: syz
[  442.679652][ T5920] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  442.703037][  T983] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  442.966438][ T5931] usb 5-1: USB disconnect, device number 53
[  443.058061][ T5916] usb 3-1: USB disconnect, device number 50
[  443.290534][ T5892] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  443.510727][ T5892] usb 2-1: Using ep0 maxpacket: 16
[  443.531226][ T5892] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  443.573464][ T5892] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  443.642350][ T5892] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  443.666655][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  443.711866][ T5892] usb 2-1: Product: syz
[  443.719705][ T5892] usb 2-1: Manufacturer: syz
[  443.729764][ T5892] usb 2-1: SerialNumber: syz
[  443.781499][  T983] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  443.788987][  T983] ath9k_htc: Failed to initialize the device
[  443.809163][ T5931] usb 5-1: ath9k_htc: USB layer deinitialized
[  443.996054][ T5892] usb 2-1: 0:2 : does not exist
[  444.024871][ T5892] usb 2-1: USB disconnect, device number 61
[  444.074737][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  444.642720][T11466] tipc: Failed to clone mcast rcv buffer
[  444.674455][T11465] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  445.122044][T11478] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1551'.
[  445.244735][T11480] binder: BINDER_SET_CONTEXT_MGR already set
[  445.252133][T11480] binder: 11479:11480 ioctl 4018620d 80004a80 returned -16
[  445.819848][T11490] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  446.535328][   T30] audit: type=1326 audit(1760421517.592:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  446.736626][   T30] audit: type=1326 audit(1760421517.672:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  447.168077][   T30] audit: type=1326 audit(1760421517.682:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf709d539 code=0x7ffc0000
[  447.191270][   T30] audit: type=1326 audit(1760421517.682:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  447.245313][   T30] audit: type=1326 audit(1760421517.682:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  447.278012][   T30] audit: type=1326 audit(1760421517.692:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000
[  447.301082][   T30] audit: type=1326 audit(1760421517.692:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  447.352685][   T30] audit: type=1326 audit(1760421517.692:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  447.552889][   T30] audit: type=1326 audit(1760421517.692:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf709d539 code=0x7ffc0000
[  447.611804][   T30] audit: type=1326 audit(1760421517.692:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11495 comm="syz.2.1556" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[  449.129104][T11516] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  449.230589][ T5892] usb 6-1: new low-speed USB device number 50 using dummy_hcd
[  449.372936][ T5892] usb 6-1: device descriptor read/64, error -71
[  449.380586][T11518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1561'.
[  449.610835][ T5892] usb 6-1: new low-speed USB device number 51 using dummy_hcd
[  449.683032][T11527] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1562'.
[  449.760773][ T5892] usb 6-1: device descriptor read/64, error -71
[  449.893709][ T5892] usb usb6-port1: attempt power cycle
[  449.970268][  T983] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  450.126270][  T983] usb 5-1: Using ep0 maxpacket: 16
[  450.134587][  T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  450.154776][  T983] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  450.164943][  T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.176703][  T983] usb 5-1: Product: syz
[  450.183080][  T983] usb 5-1: Manufacturer: syz
[  450.187958][  T983] usb 5-1: SerialNumber: syz
[  450.196885][  T983] usb 5-1: config 0 descriptor??
[  450.207701][  T983] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  450.217710][  T983] em28xx 5-1:0.0: DVB interface 0 found: bulk
[  450.281113][ T5892] usb 6-1: new low-speed USB device number 52 using dummy_hcd
[  450.321630][ T5892] usb 6-1: device descriptor read/8, error -71
[  450.438856][T11532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1566'.
[  450.615021][ T5892] usb 6-1: new low-speed USB device number 53 using dummy_hcd
[  450.693461][ T5892] usb 6-1: device descriptor read/8, error -71
[  450.809089][ T5892] usb usb6-port1: unable to enumerate USB device
[  450.816797][  T983] em28xx 5-1:0.0: chip ID is em2765
[  450.878542][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1568'.
[  450.933192][ T5920] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  451.110742][ T5920] usb 3-1: Using ep0 maxpacket: 8
[  451.120871][ T5920] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  451.132876][ T5920] usb 3-1: config 0 has no interface number 0
[  451.139070][ T5920] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  451.171169][T11538] netlink: 14300 bytes leftover after parsing attributes in process `syz.1.1569'.
[  451.183010][ T5920] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  451.206305][T11538] openvswitch: netlink: ufid size 132 bytes exceeds the range (1, 16)
[  451.221756][T11538] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  451.222955][ T5920] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  451.242339][ T5920] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  451.257958][ T8494] bridge_slave_1: left allmulticast mode
[  451.258522][ T5920] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  451.274279][ T8494] bridge_slave_1: left promiscuous mode
[  451.292694][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.317002][ T8494] bridge_slave_0: left allmulticast mode
[  451.320167][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.323407][ T8494] bridge_slave_0: left promiscuous mode
[  451.344164][ T5920] usb 3-1: config 0 descriptor??
[  451.351826][ T8494] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.380821][ T5920] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  451.425062][  T983] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  451.425096][  T983] em28xx 5-1:0.0: board has no eeprom
[  451.635090][T11529] FAULT_INJECTION: forcing a failure.
[  451.635090][T11529] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  451.648862][T11529] CPU: 0 UID: 0 PID: 11529 Comm: syz.4.1565 Not tainted syzkaller #0 PREEMPT(full) 
[  451.648888][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  451.648899][T11529] Call Trace:
[  451.648907][T11529]  <TASK>
[  451.648916][T11529]  dump_stack_lvl+0x189/0x250
[  451.648942][T11529]  ? __pfx____ratelimit+0x10/0x10
[  451.648969][T11529]  ? __pfx_dump_stack_lvl+0x10/0x10
[  451.648989][T11529]  ? __pfx__printk+0x10/0x10
[  451.649008][T11529]  ? __might_fault+0xb0/0x130
[  451.649037][T11529]  should_fail_ex+0x414/0x560
[  451.649069][T11529]  _copy_from_user+0x2d/0xb0
[  451.649093][T11529]  compat_i2cdev_ioctl+0x38b/0x5c0
[  451.649122][T11529]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[  451.649147][T11529]  ? __fget_files+0x3a0/0x420
[  451.649168][T11529]  ? __fget_files+0x2a/0x420
[  451.649192][T11529]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  451.649220][T11529]  __ia32_compat_sys_ioctl+0x543/0x840
[  451.649242][T11529]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  451.649261][T11529]  ? __fget_files+0x3a0/0x420
[  451.649288][T11529]  ? fput+0xa0/0xd0
[  451.649312][T11529]  ? ksys_write+0x22a/0x250
[  451.649334][T11529]  ? __pfx_ksys_write+0x10/0x10
[  451.649356][T11529]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  451.649377][T11529]  ? lockdep_hardirqs_on+0x9c/0x150
[  451.649398][T11529]  __do_fast_syscall_32+0xb6/0x2b0
[  451.649418][T11529]  ? lockdep_hardirqs_on+0x9c/0x150
[  451.649441][T11529]  do_fast_syscall_32+0x34/0x80
[  451.649460][T11529]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  451.649481][T11529] RIP: 0023:0xf707d539
[  451.649498][T11529] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  451.649514][T11529] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  451.649534][T11529] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707
[  451.649554][T11529] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  451.649565][T11529] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  451.649576][T11529] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  451.649588][T11529] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  451.649616][T11529]  </TASK>
[  451.872937][    C0] vkms_vblank_simulate: vblank timer overrun
[  452.010024][  T983] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  452.202490][  T983] em28xx 5-1:0.0: dvb set to bulk mode.
[  452.233222][ T5920] em28xx 5-1:0.0: Binding DVB extension
[  452.239719][T11546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.265059][T11546] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.273350][  T983] usb 5-1: USB disconnect, device number 54
[  452.333008][  T983] em28xx 5-1:0.0: Disconnecting em28xx
[  452.429385][T11534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.498981][T11534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.587575][ T5920] em28xx 5-1:0.0: Registering input extension
[  452.640177][  T983] em28xx 5-1:0.0: Closing input extension
[  452.725896][ T5892] usb 3-1: USB disconnect, device number 51
[  452.733741][  T983] em28xx 5-1:0.0: Freeing device
[  452.757479][ T5892] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  453.018730][ T8494] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  453.046646][ T8494] bridge1 (unregistering): left promiscuous mode
[  453.244551][T11559] netlink: 'syz.1.1575': attribute type 10 has an invalid length.
[  453.728395][T11567] random: crng reseeded on system resumption
[  453.882347][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  453.903225][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  453.912504][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  453.931516][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  453.932083][ T8494] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  453.948647][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  454.025917][ T8494] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  454.046373][ T8494] bond0 (unregistering): Released all slaves
[  454.888917][ T8494] bond1 (unregistering): Released all slaves
[  454.970637][T11559] team0: Port device dummy0 added
[  455.185556][   T30] kauditd_printk_skb: 71 callbacks suppressed
[  455.185575][   T30] audit: type=1326 audit(1760421526.252:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  455.234350][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1581'.
[  455.257325][   T30] audit: type=1326 audit(1760421526.302:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  455.302339][   T30] audit: type=1326 audit(1760421526.302:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  455.324518][    C0] vkms_vblank_simulate: vblank timer overrun
[  455.343928][ T8494] tipc: Disabling bearer <udp:syz2>
[  455.349355][ T8494] tipc: Disabling bearer <ib:wg1>
[  455.427909][   T30] audit: type=1326 audit(1760421526.302:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  455.474041][   T30] audit: type=1326 audit(1760421526.302:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  455.498853][   T30] audit: type=1326 audit(1760421526.302:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  455.521717][   T30] audit: type=1326 audit(1760421526.302:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  455.544304][    C0] vkms_vblank_simulate: vblank timer overrun
[  455.558866][   T30] audit: type=1326 audit(1760421526.302:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  455.598592][   T30] audit: type=1326 audit(1760421526.302:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11581 comm="syz.5.1581" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f11539 code=0x7ffc0000
[  455.627394][ T8494] tipc: Left network mode
[  455.712480][T11596] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  455.769747][T11595] FAULT_INJECTION: forcing a failure.
[  455.769747][T11595] name failslab, interval 1, probability 0, space 0, times 0
[  455.827454][T11595] CPU: 1 UID: 0 PID: 11595 Comm: syz.2.1584 Not tainted syzkaller #0 PREEMPT(full) 
[  455.827481][T11595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  455.827493][T11595] Call Trace:
[  455.827501][T11595]  <TASK>
[  455.827511][T11595]  dump_stack_lvl+0x189/0x250
[  455.827538][T11595]  ? __pfx____ratelimit+0x10/0x10
[  455.827565][T11595]  ? __pfx_dump_stack_lvl+0x10/0x10
[  455.827584][T11595]  ? __pfx__printk+0x10/0x10
[  455.827609][T11595]  ? __pfx___might_resched+0x10/0x10
[  455.827633][T11595]  ? fs_reclaim_acquire+0x7d/0x100
[  455.827659][T11595]  should_fail_ex+0x414/0x560
[  455.827691][T11595]  should_failslab+0xa8/0x100
[  455.827716][T11595]  __kmalloc_node_noprof+0xd2/0x800
[  455.827735][T11595]  ? btrfs_read_locked_inode+0x12ad/0x14b0
[  455.827759][T11595]  ? qdisc_alloc+0x97/0xaa0
[  455.827789][T11595]  qdisc_alloc+0x97/0xaa0
[  455.827822][T11595]  qdisc_create_dflt+0x8e/0x4e0
[  455.827850][T11595]  dev_activate+0x378/0x1150
[  455.827887][T11595]  __dev_open+0x69c/0x880
[  455.827916][T11595]  ? __pfx___dev_open+0x10/0x10
[  455.827948][T11595]  __dev_change_flags+0x1ea/0x6d0
[  455.827973][T11595]  ? __mutex_lock+0x5bb/0x1350
[  455.827995][T11595]  ? __pfx___dev_change_flags+0x10/0x10
[  455.828019][T11595]  ? full_name_hash+0xb0/0xe0
[  455.828050][T11595]  netif_change_flags+0x88/0x1a0
[  455.828079][T11595]  dev_change_flags+0x130/0x260
[  455.828108][T11595]  dev_ioctl+0x7b4/0x1150
[  455.828135][T11595]  sock_do_ioctl+0x22c/0x300
[  455.828159][T11595]  ? __pfx_sock_do_ioctl+0x10/0x10
[  455.828191][T11595]  ? unix_ioctl+0x1f8/0x6f0
[  455.828207][T11595]  ? unix_compat_ioctl+0x15/0x30
[  455.828235][T11595]  compat_sock_ioctl+0xb8d/0xc80
[  455.828262][T11595]  ? __pfx_compat_sock_ioctl+0x10/0x10
[  455.828287][T11595]  ? __fget_files+0x3a0/0x420
[  455.828309][T11595]  ? __fget_files+0x2a/0x420
[  455.828334][T11595]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  455.828363][T11595]  __ia32_compat_sys_ioctl+0x543/0x840
[  455.828398][T11595]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  455.828417][T11595]  ? __fget_files+0x3a0/0x420
[  455.828444][T11595]  ? fput+0xa0/0xd0
[  455.828468][T11595]  ? ksys_write+0x22a/0x250
[  455.828494][T11595]  ? exc_page_fault+0x82/0x100
[  455.828513][T11595]  ? __pfx_ksys_write+0x10/0x10
[  455.828546][T11595]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  455.828567][T11595]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.828590][T11595]  __do_fast_syscall_32+0xb6/0x2b0
[  455.828616][T11595]  ? lockdep_hardirqs_on+0x9c/0x150
[  455.828645][T11595]  do_fast_syscall_32+0x34/0x80
[  455.828677][T11595]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  455.828699][T11595] RIP: 0023:0xf709d539
[  455.828716][T11595] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  455.828731][T11595] RSP: 002b:00000000f544b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  455.828751][T11595] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000008914
[  455.828764][T11595] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000
[  455.828777][T11595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  455.828788][T11595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  455.828799][T11595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  455.828827][T11595]  </TASK>
[  456.187022][T11595] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  456.195379][T11595] pim6reg1: entered promiscuous mode
[  456.200813][T11595] pim6reg1: entered allmulticast mode
[  456.209356][ T5837] Bluetooth: hci5: command tx timeout
[  457.031068][ T5892] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  457.207049][ T5892] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  457.230831][ T5892] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  457.251064][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  457.270830][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  457.309782][T11612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  457.381796][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  457.591226][ T5892] usb 5-1: USB disconnect, device number 55
[  457.749600][T11640] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  457.874758][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  458.262891][ T5837] Bluetooth: hci5: command tx timeout
[  458.272780][T11573] chnl_net:caif_netlink_parms(): no params data found
[  458.471936][ T8494] hsr_slave_0: left promiscuous mode
[  458.478573][ T8494] hsr_slave_1: left promiscuous mode
[  458.509194][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_0
[  458.542526][ T8494] batman_adv: batadv0: Removing interface: batadv_slave_1
[  458.561502][ T8494] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  458.571163][ T8494] batman_adv: batadv0: Removing interface: virt_wifi0
[  459.642133][ T8494] team0 (unregistering): Port device team_slave_1 removed
[  459.705363][ T8494] team0 (unregistering): Port device team_slave_0 removed
[  460.023023][ T8494] team0 (unregistering): Port device dummy0 removed
[  460.330516][ T5837] Bluetooth: hci5: command tx timeout
[  460.353480][T11649] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  460.359638][T11649] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  460.424731][T11649] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  460.441350][T11649] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  460.477745][T11649] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  460.487576][T11649] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  460.537614][T11649] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  460.763979][T11397] : (slave syz_tun): Releasing backup interface
[  460.785552][T11573] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.798119][T11573] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.806495][T11573] bridge_slave_0: entered allmulticast mode
[  460.837394][T11573] bridge_slave_0: entered promiscuous mode
[  460.857754][T11699] FAULT_INJECTION: forcing a failure.
[  460.857754][T11699] name failslab, interval 1, probability 0, space 0, times 0
[  460.900286][T11699] CPU: 1 UID: 0 PID: 11699 Comm: syz.2.1600 Not tainted syzkaller #0 PREEMPT(full) 
[  460.900315][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  460.900327][T11699] Call Trace:
[  460.900336][T11699]  <TASK>
[  460.900345][T11699]  dump_stack_lvl+0x189/0x250
[  460.900371][T11699]  ? __pfx____ratelimit+0x10/0x10
[  460.900399][T11699]  ? __pfx_dump_stack_lvl+0x10/0x10
[  460.900419][T11699]  ? __pfx__printk+0x10/0x10
[  460.900444][T11699]  ? __pfx___might_resched+0x10/0x10
[  460.900474][T11699]  should_fail_ex+0x414/0x560
[  460.900507][T11699]  should_failslab+0xa8/0x100
[  460.900533][T11699]  kmem_cache_alloc_lru_noprof+0x79/0x6d0
[  460.900554][T11699]  ? __d_alloc+0x36/0x7a0
[  460.900584][T11699]  __d_alloc+0x36/0x7a0
[  460.900613][T11699]  d_alloc_parallel+0xe5/0x15e0
[  460.900638][T11699]  ? __lock_acquire+0xab9/0xd20
[  460.900667][T11699]  ? __lock_acquire+0xab9/0xd20
[  460.900693][T11699]  ? __pfx_d_alloc_parallel+0x10/0x10
[  460.900733][T11699]  ? __raw_spin_lock_init+0x45/0x100
[  460.900755][T11699]  ? __init_waitqueue_head+0xa9/0x150
[  460.900780][T11699]  __lookup_slow+0x116/0x3d0
[  460.900810][T11699]  ? __pfx___lookup_slow+0x10/0x10
[  460.900845][T11699]  ? d_lookup+0x8a/0xa0
[  460.900871][T11699]  ? lookup_noperm+0x112/0x220
[  460.900900][T11699]  simple_start_creating+0xfd/0x1e0
[  460.900924][T11699]  ? __pfx_simple_start_creating+0x10/0x10
[  460.900960][T11699]  debugfs_start_creating+0x10f/0x180
[  460.900982][T11699]  __debugfs_create_file+0x79/0x4f0
[  460.901009][T11699]  debugfs_create_file_full+0x3f/0x60
[  460.901032][T11699]  ref_tracker_dir_debugfs+0x14e/0x270
[  460.901052][T11699]  ? __pfx_ref_tracker_dir_debugfs+0x10/0x10
[  460.901097][T11699]  ? trace_kmalloc+0x1f/0xd0
[  460.901114][T11699]  ? __kvmalloc_node_noprof+0x5ed/0x910
[  460.901138][T11699]  ? __raw_spin_lock_init+0x45/0x100
[  460.901159][T11699]  alloc_netdev_mqs+0x272/0x11b0
[  460.901178][T11699]  ? __pfx_bond_setup+0x10/0x10
[  460.901204][T11699]  rtnl_create_link+0x31f/0xd10
[  460.901232][T11699]  rtnl_newlink_create+0x25c/0xb00
[  460.901264][T11699]  ? __mutex_lock+0x5bb/0x1350
[  460.901290][T11699]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  460.901323][T11699]  ? __pfx___mutex_lock+0x10/0x10
[  460.901353][T11699]  ? ns_capable+0x8a/0xf0
[  460.901382][T11699]  rtnl_newlink+0x16e4/0x1c80
[  460.901423][T11699]  ? __pfx_rtnl_newlink+0x10/0x10
[  460.901455][T11699]  ? __lock_acquire+0xab9/0xd20
[  460.901489][T11699]  ? __lock_acquire+0xab9/0xd20
[  460.901524][T11699]  ? __lock_acquire+0xab9/0xd20
[  460.901567][T11699]  ? is_bpf_text_address+0x26/0x2b0
[  460.901598][T11699]  ? is_bpf_text_address+0x292/0x2b0
[  460.901622][T11699]  ? is_bpf_text_address+0x26/0x2b0
[  460.901655][T11699]  ? __lock_acquire+0xab9/0xd20
[  460.901721][T11699]  ? __pfx_rtnl_newlink+0x10/0x10
[  460.901744][T11699]  rtnetlink_rcv_msg+0x7cf/0xb70
[  460.901767][T11699]  ? __lock_acquire+0xab9/0xd20
[  460.901792][T11699]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  460.901816][T11699]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  460.901858][T11699]  netlink_rcv_skb+0x208/0x470
[  460.901882][T11699]  ? __lock_acquire+0xab9/0xd20
[  460.901905][T11699]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  460.901931][T11699]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  460.901967][T11699]  ? netlink_deliver_tap+0x2e/0x1b0
[  460.902001][T11699]  netlink_unicast+0x82f/0x9e0
[  460.902033][T11699]  ? __pfx_netlink_unicast+0x10/0x10
[  460.902058][T11699]  ? netlink_sendmsg+0x642/0xb30
[  460.902081][T11699]  ? skb_put+0x11b/0x210
[  460.902110][T11699]  netlink_sendmsg+0x805/0xb30
[  460.902146][T11699]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.902174][T11699]  ? __import_iovec+0x5d4/0x7f0
[  460.902195][T11699]  ? aa_sock_msg_perm+0xf1/0x1d0
[  460.902217][T11699]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  460.902241][T11699]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.902265][T11699]  __sock_sendmsg+0x21c/0x270
[  460.902289][T11699]  ____sys_sendmsg+0x505/0x830
[  460.902318][T11699]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.902361][T11699]  ___sys_sendmsg+0x21f/0x2a0
[  460.902383][T11699]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.902448][T11699]  ? __fget_files+0x2a/0x420
[  460.902469][T11699]  ? __fget_files+0x3a0/0x420
[  460.902502][T11699]  __sys_sendmsg+0x164/0x220
[  460.902549][T11699]  ? __pfx___sys_sendmsg+0x10/0x10
[  460.902586][T11699]  ? __pfx_ksys_write+0x10/0x10
[  460.902610][T11699]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  460.902632][T11699]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.902654][T11699]  __do_fast_syscall_32+0xb6/0x2b0
[  460.902675][T11699]  ? lockdep_hardirqs_on+0x9c/0x150
[  460.902697][T11699]  do_fast_syscall_32+0x34/0x80
[  460.902722][T11699]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  460.902746][T11699] RIP: 0023:0xf709d539
[  460.902764][T11699] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  460.902780][T11699] RSP: 002b:00000000f548d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  460.902800][T11699] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240
[  460.902814][T11699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  460.902825][T11699] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  460.902836][T11699] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  460.902847][T11699] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  460.902878][T11699]  </TASK>
[  461.472466][T11699] bond3: Unable to set peer notification delay as MII monitoring is disabled
[  461.544773][T11699] bond3 (unregistering): Released all slaves
[  462.000889][T11573] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.008343][T11573] bridge0: port 2(bridge_slave_1) entered disabled state
[  462.084300][T11573] bridge_slave_1: entered allmulticast mode
[  462.111383][T11573] bridge_slave_1: entered promiscuous mode
[  462.133458][ T8494] IPVS: stop unused estimator thread 0...
[  462.301115][ T1675] usb 6-1: new low-speed USB device number 54 using dummy_hcd
[  462.302997][T11573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  462.333439][T11573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  462.418036][ T5837] Bluetooth: hci3: command 0x0406 tx timeout
[  462.424734][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  462.510733][ T1675] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  462.552433][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  462.558561][   T52] Bluetooth: hci5: command 0x0c1a tx timeout
[  462.565066][   T52] Bluetooth: hci4: command 0x0406 tx timeout
[  462.573096][ T1675] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  462.645112][ T1675] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  462.665335][ T1675] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  462.687972][ T1675] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  462.719641][ T1675] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  462.749975][ T1675] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  463.405313][ T1675] usb 6-1: config 168 interface 0 has no altsetting 0
[  463.433021][ T1675] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  463.449314][ T1675] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  463.495125][T11573] team0: Port device team_slave_0 added
[  463.538403][ T1675] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  463.653734][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  463.664833][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  463.675756][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  463.685574][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  463.810676][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  463.877018][ T1675] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  463.976633][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  463.985015][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  463.993204][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  464.001080][ T1675] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  464.013262][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  464.022584][T11733] netlink: 'syz.1.1604': attribute type 3 has an invalid length.
[  464.031547][ T1675] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  464.046106][ T1675] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  464.061917][ T1675] usb 6-1: config 168 interface 0 has no altsetting 0
[  464.063755][T11573] team0: Port device team_slave_1 added
[  464.076158][ T1675] usb 6-1: config 168 descriptor has 1 excess byte, ignoring
[  464.087671][ T1675] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  464.112483][ T1675] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  464.134578][ T1675] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  464.147827][ T1675] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  464.175363][ T5931] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  464.204634][ T1675] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  464.234030][T11573] batman_adv: batadv0: Adding interface: batadv_slave_0
[  464.250833][ T1675] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  464.252735][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.297816][ T1675] usb 6-1: config 168 interface 0 has no altsetting 0
[  464.327124][T11573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  464.334511][ T1675] usb 6-1: string descriptor 0 read error: -22
[  464.340489][T11573] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.345621][ T1675] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  464.354251][T11573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.371363][ T5931] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  464.416323][ T1675] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.434250][ T5931] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  464.448458][T11573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.458392][ T5931] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  464.479966][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  464.492455][ T1675] adutux 6-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  464.503660][ T5931] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  464.558426][ T5931] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  464.574896][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  464.584420][ T5931] usb 3-1: Product: syz
[  464.604492][ T5931] usb 3-1: Manufacturer: syz
[  464.633325][ T5931] cdc_wdm 3-1:1.0: skipping garbage
[  464.644052][ T5931] cdc_wdm 3-1:1.0: skipping garbage
[  464.650868][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout
[  464.657370][T11573] hsr_slave_0: entered promiscuous mode
[  464.666160][T11573] hsr_slave_1: entered promiscuous mode
[  464.673471][T11573] debugfs: 'hsr0' already exists in 'hsr'
[  464.681368][T11573] Cannot create hsr debugfs directory
[  464.746132][ T5931] cdc_wdm 3-1:1.0: cdc-wdm1: USB WDM device
[  464.761369][ T5931] cdc_wdm 3-1:1.0: Unknown control protocol
[  464.795067][T11714] fuse: Unknown parameter 'user_id00000000000000000000'
[  465.005438][T11738] kvm: pic: non byte read
[  465.018705][T11738] kvm: pic: non byte read
[  465.039669][T11738] kvm: pic: single mode not supported
[  465.039691][T11738] kvm: pic: level sensitive irq not supported
[  465.049191][T11764] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  465.069969][T11738] kvm: pic: non byte read
[  465.471990][T11775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1611'.
[  465.567519][T11573] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  465.624038][T11573] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  465.724537][T11573] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  465.785914][T11573] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  465.809145][ T5931] usb 3-1: USB disconnect, device number 52
[  465.847008][ T5920] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  466.049245][ T5931] usb 6-1: USB disconnect, device number 54
[  466.070482][ T5920] usb 5-1: Using ep0 maxpacket: 8
[  466.078171][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  466.160947][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  466.213724][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  466.270254][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  466.293236][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  466.322000][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  466.336571][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.360697][ T5892] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  466.531014][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  466.538613][ T5892] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  466.547854][ T5892] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  466.566707][ T5920] usb 5-1: usb_control_msg returned -32
[  466.577176][ T5920] usbtmc 5-1:16.0: can't read capabilities
[  466.614401][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  466.731023][ T5841] Bluetooth: hci5: command 0x0c1a tx timeout
[  466.757557][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  466.797542][T11573] 8021q: adding VLAN 0 to HW filter on device bond0
[  466.831795][T11573] 8021q: adding VLAN 0 to HW filter on device team0
[  466.888666][T11573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  466.912056][T11573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  466.965573][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state
[  466.972920][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state
[  466.995668][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  467.016137][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  467.026218][ T3466] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.036958][ T3466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.059170][ T5892] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  467.078101][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.112618][ T5892] usb 3-1: config 0 descriptor??
[  467.155052][T11573] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.251562][  T983] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  467.299998][T11573] veth0_vlan: entered promiscuous mode
[  467.338685][T11573] veth1_vlan: entered promiscuous mode
[  467.377915][ T5892] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  467.393717][T11573] veth0_macvtap: entered promiscuous mode
[  467.409758][T11573] veth1_macvtap: entered promiscuous mode
[  467.418059][T11798] usbtmc 5-1:16.0: usb_control_msg returned -32
[  467.428397][  T983] usb 6-1: device descriptor read/64, error -71
[  467.429930][ T5892] usb 3-1: USB disconnect, device number 53
[  467.493509][ T5892] usblp1: removed
[  467.501829][T11573] batman_adv: batadv0: Interface activated: batadv_slave_0
[  467.538723][T11573] batman_adv: batadv0: Interface activated: batadv_slave_1
[  467.659185][ T8495] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  467.684465][ T8495] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  467.694125][  T983] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  467.709118][ T8495] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  467.757570][ T8495] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  467.815245][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.830348][  T983] usb 6-1: device descriptor read/64, error -71
[  467.837804][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.874733][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  467.884798][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  467.940724][ T5892] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  467.940866][  T983] usb usb6-port1: attempt power cycle
[  468.100642][ T5892] usb 3-1: Using ep0 maxpacket: 32
[  468.108539][ T5892] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  468.118379][ T5892] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  468.128516][ T5892] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  468.138678][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  468.150786][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  468.162430][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  468.191281][ T5892] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  468.201008][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.216848][ T5892] usb 3-1: config 0 descriptor??
[  468.310406][  T983] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  468.334481][  T983] usb 6-1: device descriptor read/8, error -71
[  468.428564][ T5892] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 54 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  468.556084][ T5892] usb 3-1: USB disconnect, device number 54
[  468.580531][  T983] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  468.593860][ T5892] usblp1: removed
[  468.660994][  T983] usb 6-1: device descriptor read/8, error -71
[  468.782396][ T5916] usb 5-1: USB disconnect, device number 56
[  468.793411][  T983] usb usb6-port1: unable to enumerate USB device
[  468.868029][T11818] validate_nla: 43 callbacks suppressed
[  468.868050][T11818] netlink: 'syz.4.1618': attribute type 3 has an invalid length.
[  468.982184][T11823] kvm: requested 5866 ns i8254 timer period limited to 200000 ns
[  469.010678][ T5892] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  469.160366][ T5892] usb 3-1: Using ep0 maxpacket: 8
[  469.170509][ T5892] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  469.179860][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.188210][ T1675] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  469.196184][ T5892] usb 3-1: Product: syz
[  469.200887][ T5892] usb 3-1: Manufacturer: syz
[  469.205577][ T5892] usb 3-1: SerialNumber: syz
[  469.216561][ T5892] usb 3-1: config 0 descriptor??
[  469.224986][ T5892] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  469.234262][ T5892] dvb-usb: bulk message failed: -22 (2/0)
[  469.242860][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  469.252928][ T5892] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  469.262634][ T5892] usb 3-1: media controller created
[  469.281798][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  469.340878][ T5902] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  469.362331][ T1675] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  469.374238][ T1675] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  469.384438][ T1675] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.395228][ T1675] usb 7-1: config 0 descriptor??
[  469.401693][T11820] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  469.427586][T11813] dvb-usb: bulk message failed: -22 (4/0)
[  469.434186][T11813] cxusb: i2c read failed
[  469.440855][ T5892] cxusb: set interface failed
[  469.447122][ T5892] dvb-usb: bulk message failed: -22 (1/0)
[  469.484515][ T5892] DVB: Unable to find symbol mt352_attach()
[  469.491569][ T5892] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  469.502770][ T5902] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  469.513689][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  469.525576][ T5902] usb 5-1: config 0 descriptor??
[  469.590895][ T5892] rc_core: IR keymap rc-dvico-portable not found
[  469.597559][ T5892] Registered IR keymap rc-empty
[  469.606982][ T5892] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  469.622787][ T1675] ath6kl: Failed to submit usb control message: -71
[  469.636121][ T5892] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input43
[  469.648287][ T1675] ath6kl: unable to send the bmi data to the device: -71
[  469.656762][ T1675] ath6kl: Unable to send get target info: -71
[  469.666550][ T5892] dvb-usb: schedule remote query interval to 100 msecs.
[  469.677000][ T5892] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  469.688379][ T1675] ath6kl: Failed to init ath6kl core: -71
[  469.699438][ T1675] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71
[  469.734195][ T5892] usb 3-1: USB disconnect, device number 55
[  469.752882][ T1675] usb 7-1: USB disconnect, device number 2
[  469.782927][T11836] binder: 11835:11836 ioctl c0306201 80000040 returned -14
[  469.807192][T11838] binder: 11835:11838 unknown command 0
[  469.822942][T11838] binder: 11835:11838 ioctl c0306201 80000640 returned -22
[  469.896082][ T5892] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  469.968952][T11840] input: syz0 as /devices/virtual/input/input44
[  469.977944][T11840] input: failed to attach handler leds to device input44, error: -6
[  470.150677][T11846] dlm: no locking on control device
[  470.187208][T11827] input: syz1 as /devices/virtual/input/input45
[  470.314511][ T5902] ath6kl: Failed to read usb control message: -71
[  470.322345][ T5902] ath6kl: Unable to read the bmi data from the device: -71
[  470.343371][ T5902] ath6kl: unable to read target info byte count: -71
[  470.488859][ T5902] ath6kl: Failed to init ath6kl core: -71
[  470.494818][ T5892] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  470.514801][ T5902] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  470.566655][ T5902] usb 5-1: USB disconnect, device number 57
[  470.678523][T11858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'.
[  470.693979][ T5920] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  470.710681][ T5892] usb 2-1: Using ep0 maxpacket: 32
[  470.718571][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  470.729697][ T5892] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  470.757462][ T5892] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  470.768746][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.785874][ T5892] usb 2-1: config 0 descriptor??
[  470.860291][ T5920] usb 6-1: Using ep0 maxpacket: 8
[  470.918150][ T5920] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[  470.953208][ T5920] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  470.976914][ T5920] usb 6-1: config 135 has no interface number 0
[  471.006112][ T5920] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  471.113666][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1630'.
[  471.132723][ T5920] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  471.150147][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  471.188761][ T5920] usb 6-1: Product: syz
[  471.199308][ T5920] usb 6-1: Manufacturer: syz
[  471.212495][ T5920] usb 6-1: SerialNumber: syz
[  471.267758][ T5920] uvcvideo 6-1:135.230: Found Unit with invalid ID 0
[  471.300833][ T5920] uvcvideo 6-1:135.230: Found UVC 0.00 device syz (18ec:3288)
[  471.349856][ T5920] uvcvideo 6-1:135.230: No valid video chain found.
[  471.854332][T11874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.036570][T11874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.064874][T11876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1634'.
[  472.066703][T11874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.161197][T11874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.335624][T11874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.371267][T11874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.480712][ T5902] usb 3-1: new low-speed USB device number 56 using dummy_hcd
[  472.646830][ T5902] usb 3-1: config 1 interface 0 altsetting 102 endpoint 0x1 is Bulk; changing to Interrupt
[  472.660799][ T5902] usb 3-1: config 1 interface 0 altsetting 102 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  472.676332][ T5902] usb 3-1: config 1 interface 0 has no altsetting 0
[  472.706969][ T5902] usb 3-1: string descriptor 0 read error: -22
[  472.714226][ T5902] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  472.724485][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.765945][T11877] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[  472.980482][ T5902] usb 3-1: USB disconnect, device number 56
[  473.437852][ T5892] usb 6-1: USB disconnect, device number 59
[  473.665733][ T5892] usb 2-1: USB disconnect, device number 62
[  473.850811][ T5931] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  474.009343][T11914] openvswitch: netlink: IPv6 tunnel dst address is zero
[  474.017208][ T5931] usb 3-1: Using ep0 maxpacket: 8
[  474.032655][ T5931] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b
[  474.053743][ T5931] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  474.070664][ T5931] usb 3-1: Product: syz
[  474.076465][ T5931] usb 3-1: Manufacturer: syz
[  474.081925][ T5931] usb 3-1: SerialNumber: syz
[  474.089498][ T5931] usb 3-1: config 0 descriptor??
[  474.141093][ T5931] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state.
[  474.142642][T11918] FAULT_INJECTION: forcing a failure.
[  474.142642][T11918] name failslab, interval 1, probability 0, space 0, times 0
[  474.173387][ T5931] dvb-usb: bulk message failed: -22 (2/0)
[  474.180982][T11918] CPU: 1 UID: 0 PID: 11918 Comm: syz.4.1648 Not tainted syzkaller #0 PREEMPT(full) 
[  474.181004][T11918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  474.181016][T11918] Call Trace:
[  474.181023][T11918]  <TASK>
[  474.181032][T11918]  dump_stack_lvl+0x189/0x250
[  474.181057][T11918]  ? __pfx____ratelimit+0x10/0x10
[  474.181081][T11918]  ? __pfx_dump_stack_lvl+0x10/0x10
[  474.181100][T11918]  ? __pfx__printk+0x10/0x10
[  474.181124][T11918]  ? __pfx___might_resched+0x10/0x10
[  474.181144][T11918]  ? fs_reclaim_acquire+0x7d/0x100
[  474.181169][T11918]  should_fail_ex+0x414/0x560
[  474.181198][T11918]  should_failslab+0xa8/0x100
[  474.181221][T11918]  __kmalloc_node_noprof+0xd2/0x800
[  474.181238][T11918]  ? qdisc_alloc+0x97/0xaa0
[  474.181267][T11918]  qdisc_alloc+0x97/0xaa0
[  474.181296][T11918]  qdisc_create+0x12c/0xea0
[  474.181340][T11918]  ? qdisc_lookup+0x36d/0x6d0
[  474.181360][T11918]  tc_modify_qdisc+0x1538/0x20e0
[  474.181397][T11918]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  474.181447][T11918]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  474.181466][T11918]  rtnetlink_rcv_msg+0x77c/0xb70
[  474.181498][T11918]  ? __lock_acquire+0xab9/0xd20
[  474.181523][T11918]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  474.181544][T11918]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  474.181579][T11918]  netlink_rcv_skb+0x208/0x470
[  474.181601][T11918]  ? __lock_acquire+0xab9/0xd20
[  474.181623][T11918]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  474.181648][T11918]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  474.181682][T11918]  ? netlink_deliver_tap+0x2e/0x1b0
[  474.181714][T11918]  netlink_unicast+0x82f/0x9e0
[  474.181745][T11918]  ? __pfx_netlink_unicast+0x10/0x10
[  474.181769][T11918]  ? netlink_sendmsg+0x642/0xb30
[  474.181790][T11918]  ? skb_put+0x11b/0x210
[  474.181818][T11918]  netlink_sendmsg+0x805/0xb30
[  474.181850][T11918]  ? __pfx_netlink_sendmsg+0x10/0x10
[  474.181877][T11918]  ? __import_iovec+0x5d4/0x7f0
[  474.181897][T11918]  ? aa_sock_msg_perm+0xf1/0x1d0
[  474.181919][T11918]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  474.181942][T11918]  ? __pfx_netlink_sendmsg+0x10/0x10
[  474.181967][T11918]  __sock_sendmsg+0x21c/0x270
[  474.181992][T11918]  ____sys_sendmsg+0x505/0x830
[  474.182028][T11918]  ? __pfx_____sys_sendmsg+0x10/0x10
[  474.182070][T11918]  ___sys_sendmsg+0x21f/0x2a0
[  474.182090][T11918]  ? __pfx____sys_sendmsg+0x10/0x10
[  474.182151][T11918]  ? __fget_files+0x2a/0x420
[  474.182172][T11918]  ? __fget_files+0x3a0/0x420
[  474.182203][T11918]  __sys_sendmsg+0x164/0x220
[  474.182231][T11918]  ? __pfx___sys_sendmsg+0x10/0x10
[  474.182265][T11918]  ? __pfx_ksys_write+0x10/0x10
[  474.182288][T11918]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  474.182309][T11918]  ? lockdep_hardirqs_on+0x9c/0x150
[  474.182328][T11918]  __do_fast_syscall_32+0xb6/0x2b0
[  474.182348][T11918]  ? lockdep_hardirqs_on+0x9c/0x150
[  474.182367][T11918]  do_fast_syscall_32+0x34/0x80
[  474.182385][T11918]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  474.182406][T11918] RIP: 0023:0xf707d539
[  474.182422][T11918] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  474.182435][T11918] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  474.182455][T11918] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  474.182468][T11918] RDX: 0000000000044080 RSI: 0000000000000000 RDI: 0000000000000000
[  474.182487][T11918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  474.182499][T11918] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  474.182510][T11918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  474.182539][T11918]  </TASK>
[  474.193704][ T5931] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  474.287289][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1649'.
[  474.292973][ T5931] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201))
[  474.332102][T11925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.344639][T11900] dvb-usb: bulk message failed: -22 (4/0)
[  474.368832][T11925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.383873][T11900] cxusb: i2c read failed
[  474.433699][T11925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.442019][ T5931] usb 3-1: media controller created
[  474.471527][T11925] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.497531][ T5931] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  474.516743][    C1] vkms_vblank_simulate: vblank timer overrun
[  474.545380][T11929] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1649'.
[  474.676457][ T5920] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  474.682091][T11933] netlink: 'syz.6.1650': attribute type 12 has an invalid length.
[  475.182845][ T5931] cxusb: set interface failed
[  475.187908][ T5931] dvb-usb: bulk message failed: -22 (1/0)
[  475.338725][ T5931] DVB: Unable to find symbol mt352_attach()
[  475.345059][ T5931] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)'
[  475.459019][ T5931] rc_core: IR keymap rc-dvico-portable not found
[  475.648978][ T5931] Registered IR keymap rc-empty
[  475.669450][ T5931] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  475.714756][ T5931] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input46
[  475.763593][ T5931] dvb-usb: schedule remote query interval to 100 msecs.
[  475.798211][ T5931] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected.
[  475.857890][ T5931] usb 3-1: USB disconnect, device number 57
[  475.904042][ T5892] dvb-usb: bulk message failed: -22 (1/0)
[  476.020190][ T5916] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  476.088221][   T30] audit: type=1326 audit(1760421547.152:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11958 comm="syz.5.1659" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f11539 code=0x0
[  476.123852][ T5931] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected.
[  476.200879][ T5916] usb 2-1: Using ep0 maxpacket: 32
[  476.212522][ T5916] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  476.240197][ T5916] usb 2-1: config 0 has no interface number 0
[  476.261297][ T5916] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  476.276938][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.285247][ T5916] usb 2-1: Product: syz
[  476.289512][ T5916] usb 2-1: Manufacturer: syz
[  476.311627][ T5916] usb 2-1: SerialNumber: syz
[  476.329109][ T5916] usb 2-1: config 0 descriptor??
[  476.337270][ T5916] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  476.429282][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'.
[  476.438470][T11969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1663'.
[  476.491813][ T5902] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  476.555658][ T5916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  476.593738][ T5916] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  476.652771][ T5902] usb 5-1: Using ep0 maxpacket: 16
[  476.667796][ T5902] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  476.735199][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.769541][ T5902] usb 5-1: Product: syz
[  476.783727][ T5902] usb 5-1: Manufacturer: syz
[  476.794238][ T5902] usb 5-1: SerialNumber: syz
[  476.811747][ T5902] usb 5-1: config 0 descriptor??
[  476.977837][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  476.991537][ T5920] usb 2-1: USB disconnect, device number 63
[  477.013919][ T5920] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  477.037272][ T5920] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  477.053958][ T5920] quatech2 2-1:0.51: device disconnected
[  477.090427][ T5916] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  477.133648][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1667'.
[  477.252380][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  477.262300][ T5902] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  477.275438][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  477.301792][ T5916] usb 7-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00
[  477.312734][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  477.318963][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.352240][ T5902] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  477.372908][ T5902] usb 5-1: media controller created
[  477.402269][ T5916] usb 7-1: config 0 descriptor??
[  477.416745][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  477.493083][ T5902] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  477.510722][ T5902] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  477.559205][   T30] audit: type=1326 audit(1760421548.622:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11987 comm="syz.2.1670" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x0
[  477.682108][T11993] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  477.814301][T11999] netlink: 'syz.1.1671': attribute type 5 has an invalid length.
[  477.849914][T11976] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  477.914808][ T5916] asus 0003:0B05:18C6.000D: hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.6-1/input0
[  477.955542][ T5916] asus 0003:0B05:18C6.000D: Asus input not registered
[  477.984826][T12005] ------------[ cut here ]------------
[  477.990682][T12005] usb 5-1: BOGUS control dir, pipe 80003b80 doesn't match bRequestType c0
[  478.004084][ T5916] asus 0003:0B05:18C6.000D: probe with driver asus failed with error -12
[  478.013461][T12005] WARNING: CPU: 1 PID: 12005 at drivers/usb/core/urb.c:414 usb_submit_urb+0x114d/0x18b0
[  478.023720][T12005] Modules linked in:
[  478.028354][T12005] CPU: 1 UID: 0 PID: 12005 Comm: syz.1.1672 Not tainted syzkaller #0 PREEMPT(full) 
[  478.037809][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  478.048132][T12005] RIP: 0010:usb_submit_urb+0x114d/0x18b0
[  478.054122][T12005] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80
[  478.073928][T12005] RSP: 0018:ffffc9000c6e7640 EFLAGS: 00010246
[  478.080643][T12005] RAX: 9faa04faea092a00 RBX: ffff888032c15000 RCX: ffff888024309e40
[  478.089367][T12005] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  478.098377][T12005] RBP: 1ffff1100405f730 R08: ffff8880b8724293 R09: 1ffff110170e4852
[  478.106598][T12005] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffff88806455f100
[  478.115097][T12005] R13: ffff8880202fb980 R14: 0000000080003b80 R15: ffff8880290f25c0
[  478.123955][T12005] FS:  0000000000000000(0000) GS:ffff888125e0c000(0063) knlGS:00000000f5436b40
[  478.133147][T12005] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  478.139939][T12005] CR2: 0000000000000000 CR3: 0000000028b62000 CR4: 00000000003526f0
[  478.148334][T12005] Call Trace:
[  478.151782][T12005]  <TASK>
[  478.154754][T12005]  usb_start_wait_urb+0x114/0x4c0
[  478.159904][T12005]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  478.165569][T12005]  usb_control_msg+0x232/0x3e0
[  478.171638][T12005]  dtv5100_i2c_msg+0x250/0x330
[  478.176448][T12005]  dtv5100_i2c_xfer+0x1a4/0x3c0
[  478.181361][T12005]  __i2c_transfer+0x874/0x2170
[  478.186158][T12005]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.192060][T12005]  ? __pfx___i2c_transfer+0x10/0x10
[  478.197789][T12005]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  478.203552][T12005]  ? i2c_transfer+0x120/0x3a0
[  478.208257][T12005]  i2c_transfer+0x25b/0x3a0
[  478.212964][T12005]  ? __pfx_i2c_transfer+0x10/0x10
[  478.218019][T12005]  ? _copy_from_user+0x94/0xb0
[  478.222971][T12005]  i2cdev_ioctl_rdwr+0x460/0x740
[  478.228037][T12005]  compat_i2cdev_ioctl+0x5a8/0x5c0
[  478.233692][T12005]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[  478.239365][T12005]  ? __fget_files+0x3a0/0x420
[  478.244125][T12005]  ? __fget_files+0x2a/0x420
[  478.248800][T12005]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  478.254639][T12005]  __ia32_compat_sys_ioctl+0x543/0x840
[  478.260467][T12005]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  478.266493][T12005]  ? __se_sys_futex_time32+0x360/0x3e0
[  478.272054][T12005]  ? __pfx_do_sys_openat2+0x10/0x10
[  478.277289][T12005]  ? rcu_is_watching+0x15/0xb0
[  478.282181][T12005]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  478.289516][T12005]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.295728][T12005]  __do_fast_syscall_32+0xb6/0x2b0
[  478.300926][T12005]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.306264][T12005]  do_fast_syscall_32+0x34/0x80
[  478.311223][T12005]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  478.317751][T12005] RIP: 0023:0xf7f43539
[  478.322134][T12005] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  478.342096][T12005] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  478.350825][T12005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707
[  478.358923][T12005] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000
[  478.366983][T12005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  478.375070][T12005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  478.383536][T12005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  478.392437][T12005]  </TASK>
[  478.396066][T12005] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  478.403376][T12005] CPU: 1 UID: 0 PID: 12005 Comm: syz.1.1672 Not tainted syzkaller #0 PREEMPT(full) 
[  478.412836][T12005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  478.422893][T12005] Call Trace:
[  478.426182][T12005]  <TASK>
[  478.429134][T12005]  dump_stack_lvl+0x99/0x250
[  478.433721][T12005]  ? __asan_memcpy+0x40/0x70
[  478.438309][T12005]  ? __pfx_dump_stack_lvl+0x10/0x10
[  478.443497][T12005]  ? __pfx__printk+0x10/0x10
[  478.448176][T12005]  vpanic+0x237/0x6d0
[  478.452155][T12005]  ? __pfx_vpanic+0x10/0x10
[  478.456674][T12005]  panic+0xb9/0xc0
[  478.460573][T12005]  ? __pfx_panic+0x10/0x10
[  478.465011][T12005]  __warn+0x31b/0x4b0
[  478.468986][T12005]  ? usb_submit_urb+0x114d/0x18b0
[  478.474008][T12005]  ? usb_submit_urb+0x114d/0x18b0
[  478.479027][T12005]  report_bug+0x2be/0x4f0
[  478.483437][T12005]  ? usb_submit_urb+0x114d/0x18b0
[  478.488455][T12005]  ? usb_submit_urb+0x114d/0x18b0
[  478.493648][T12005]  ? usb_submit_urb+0x114f/0x18b0
[  478.498674][T12005]  handle_bug+0x84/0x160
[  478.502912][T12005]  exc_invalid_op+0x1a/0x50
[  478.507406][T12005]  asm_exc_invalid_op+0x1a/0x20
[  478.512245][T12005] RIP: 0010:usb_submit_urb+0x114d/0x18b0
[  478.517886][T12005] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 00 76 12 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 74 43 89 fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80
[  478.537491][T12005] RSP: 0018:ffffc9000c6e7640 EFLAGS: 00010246
[  478.543562][T12005] RAX: 9faa04faea092a00 RBX: ffff888032c15000 RCX: ffff888024309e40
[  478.551530][T12005] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002
[  478.559492][T12005] RBP: 1ffff1100405f730 R08: ffff8880b8724293 R09: 1ffff110170e4852
[  478.567715][T12005] R10: dffffc0000000000 R11: ffffed10170e4853 R12: ffff88806455f100
[  478.575711][T12005] R13: ffff8880202fb980 R14: 0000000080003b80 R15: ffff8880290f25c0
[  478.583721][T12005]  usb_start_wait_urb+0x114/0x4c0
[  478.588761][T12005]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  478.594323][T12005]  usb_control_msg+0x232/0x3e0
[  478.599273][T12005]  dtv5100_i2c_msg+0x250/0x330
[  478.604125][T12005]  dtv5100_i2c_xfer+0x1a4/0x3c0
[  478.609003][T12005]  __i2c_transfer+0x874/0x2170
[  478.613862][T12005]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.619074][T12005]  ? __pfx___i2c_transfer+0x10/0x10
[  478.624285][T12005]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  478.629657][T12005]  ? i2c_transfer+0x120/0x3a0
[  478.634348][T12005]  i2c_transfer+0x25b/0x3a0
[  478.638871][T12005]  ? __pfx_i2c_transfer+0x10/0x10
[  478.644167][T12005]  ? _copy_from_user+0x94/0xb0
[  478.648931][T12005]  i2cdev_ioctl_rdwr+0x460/0x740
[  478.653963][T12005]  compat_i2cdev_ioctl+0x5a8/0x5c0
[  478.659081][T12005]  ? __pfx_compat_i2cdev_ioctl+0x10/0x10
[  478.664833][T12005]  ? __fget_files+0x3a0/0x420
[  478.669518][T12005]  ? __fget_files+0x2a/0x420
[  478.674109][T12005]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  478.679759][T12005]  __ia32_compat_sys_ioctl+0x543/0x840
[  478.685212][T12005]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  478.691189][T12005]  ? __se_sys_futex_time32+0x360/0x3e0
[  478.696647][T12005]  ? __pfx_do_sys_openat2+0x10/0x10
[  478.701861][T12005]  ? rcu_is_watching+0x15/0xb0
[  478.706709][T12005]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  478.713378][T12005]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.718585][T12005]  __do_fast_syscall_32+0xb6/0x2b0
[  478.723808][T12005]  ? lockdep_hardirqs_on+0x9c/0x150
[  478.729118][T12005]  do_fast_syscall_32+0x34/0x80
[  478.734101][T12005]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  478.740533][T12005] RIP: 0023:0xf7f43539
[  478.744727][T12005] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  478.764872][T12005] RSP: 002b:00000000f543655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  478.773380][T12005] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707
[  478.781348][T12005] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000
[  478.789310][T12005] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  478.797277][T12005] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  478.805244][T12005] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  478.813324][T12005]  </TASK>
[  478.816597][T12005] Kernel Offset: disabled
[  478.820921][T12005] Rebooting in 86400 seconds..