last executing test programs:

7m42.786719611s ago: executing program 2 (id=1178):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x7f, &(0x7f0000000080)=""/127})
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$l2tp6(0xa, 0x2, 0x73)
r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000140))
sendmsg$nl_xfrm(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20010000100021040000000000000000fe880000000000000000000000000001e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x120}}, 0x0)
r4 = msgget$private(0x0, 0x31)
msgsnd(r4, &(0x7f00000035c0)=ANY=[@ANYBLOB="03"], 0x1b, 0x5f005e4c1fdd0237)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, 0x0, 0x0)
listen(r5, 0x7f)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00'})
sendmsg$nl_route_sched(r6, 0x0, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

7m41.895225117s ago: executing program 2 (id=1183):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x84, @private1={0xfc, 0x1, '\x00', 0xfe}}], 0x1c)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000140))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x2000000)
write$tun(r2, &(0x7f0000000240)={@val={0x0, 0xa00}, @void, @ipv6=@udp={0x9, 0x6, "685191", 0x174, 0x11, 0x0, @empty, @mcast2, {[@srh={0x2f, 0x4, 0x4, 0x2, 0x81, 0x38, 0x362, [@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}]}, @fragment={0x3b, 0x0, 0xca, 0x0, 0x0, 0x17, 0x64}, @fragment={0x89, 0x0, 0xc8, 0x0, 0x0, 0x5, 0x65}, @dstopts={0x11, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0x849e}, @pad1, @ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x40, {0x0, 0xe, 0x9, 0x7f, [0x200, 0x40, 0xed, 0x1b130d8a, 0xfffffffffffffffd, 0x8, 0x401]}}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0x3, [0x10, 0x1fc00000000000, 0x4, 0x9, 0x5, 0xea1]}}, @pad1, @jumbo]}, @dstopts={0x5e, 0x1, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x4}]}, @srh={0x73, 0x4, 0x4, 0x2, 0x8, 0x40, 0x7fff, [@ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @dstopts={0x9e}], {0x4e21, 0x4e24, 0x54, 0x0, @gue={{0x2, 0x1, 0x3, 0x9, 0x0, @val=0x80}, "1cc433b4835c87170a70112deb78afb6f15d55de57f2642c531ad4ce9e1e0eb8f18d5933bcde3f351d1d34988a6d07ce4cf692853aa709de0242f9c390eb0530df938c6b"}}}}}, 0x1a0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000004400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c000280080001400000001d080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x38, r6, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x51}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x20040880)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)={0x40, r6, 0x908, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x38}}}}, [@NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8b0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x303}, "80d35d4fdaa16d5a", "e01e6f87aa8c0c2293f51ea20cfd67fb1f5834c9a53c74b21269135e44cff9c1", "62b63c7f", "3fce49e132b106b3"}, 0x38)

7m39.668460127s ago: executing program 2 (id=1187):
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10)
sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0)

7m38.328678462s ago: executing program 2 (id=1189):
syz_emit_ethernet(0x62, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="a538ae464632", @void, {@llc={0x4, {@llc={0xe, 0x0, "8e", "adeac37205c99d2dcc62c0553fd19ad02d6af0322018d9c9af24ab04815cc941c1b4f265411a99bd842b863d73d528ecaf03deee57c4f37d2fa0ab02b717173807c53dbdec6970bf81f2474fff1d5b9a3b"}}}}}, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_open_dev$MSR(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x34, 0x107, 0xfffffffc, 0x0, {0x3, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x4000)

7m37.317837158s ago: executing program 2 (id=1193):
r0 = socket$netlink(0x10, 0x3, 0x2)
mkdir(&(0x7f0000000180)='./file0\x00', 0x120)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0bfce37a00000000fcfffeffffd3000408b9", @ANYRES32=0x0], 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x100000000, 0x90000)
ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000140)=[0x7, 0x4])
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r1, {0x1}}, './file1\x00'})
ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000340))
r4 = syz_create_resource$binfmt(&(0x7f0000000280)='./file2\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x41, 0x1ff)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0})
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x3aa0}, 0x1, 0x0, 0x0, 0x40}, 0x24004015)
r8 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
read$FUSE(r8, &(0x7f0000000580)={0x2020}, 0x2020)
readv(r7, &(0x7f0000004040)=[{&(0x7f0000002a00)=""/4096, 0x1000}], 0x1)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x6c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x4, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x9}, @TCA_FLOWER_KEY_TCP_DST={0x6}, @TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0)
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r9)
ptrace$getregset(0x4204, r9, 0x204, &(0x7f0000000040)={&(0x7f0000000080)=""/28, 0x8})
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0)
socket$unix(0x1, 0x5, 0x0)

7m37.13086816s ago: executing program 2 (id=1195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000b80)={r1, 0xfffffffffffffffe, 0x0, [0x5, 0x1, 0x1, 0xb, 0x22], [0x5, 0x2, 0x15, 0xf12e, 0x7, 0x6, 0x1f5, 0x10000, 0x80000000, 0xffffffffffffffff, 0x5, 0xffffffffffff7fff, 0x32ec8ceb, 0x1, 0x1, 0x9, 0x9, 0xf, 0xa89, 0x4, 0x1ff, 0x2, 0x4, 0xfffffffffffffffc, 0x2, 0x5, 0x3ff, 0x9f81, 0x10000, 0x9, 0xe, 0x4, 0x1, 0x100, 0x2, 0x9, 0x4, 0x2, 0x10, 0x5, 0x2, 0x9, 0x7, 0x6, 0x6a4b, 0x9, 0x6, 0xffffffff80000001, 0x8000000000000000, 0x7379, 0x7, 0x2, 0x7, 0xbd1, 0x2, 0x8, 0x3, 0x100000001, 0x0, 0xaa, 0x5, 0x1, 0x3, 0x9a2, 0xffffffff, 0x7fff, 0x0, 0xee74, 0xef, 0x494fc642, 0x5, 0x200, 0x98, 0x7, 0x3, 0x7fffffffffffffff, 0x66672c56, 0x3, 0x4e, 0x10001, 0x4, 0x9, 0xffffffffffffff95, 0x5, 0x10000, 0x8000000000000001, 0xffffffff00000000, 0x7, 0x1fffe0, 0x6, 0xca, 0x4, 0x8, 0x6, 0x80000001, 0x0, 0x7, 0x3, 0x77a, 0x7a, 0x710, 0x7fffffff, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xfff, 0x8, 0x4, 0x7fffffffffffffff, 0x2, 0x5, 0x6, 0x4, 0x1, 0x2, 0x9, 0x0, 0x189d, 0x2]})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000740)=0x80) (async)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000740)=0x80)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x1e57, 0x1, 0xffff7000, 0xa, 0x2, "e9d30d0d00", 0x963, 0x209})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xa)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff008b1477060000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) (async)
splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) (async)
ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r6, r4, 0xb, 0x20}, 0x20)
write$P9_RLERRORu(r5, &(0x7f0000000340)=ANY=[], 0xe) (async)
write$P9_RLERRORu(r5, &(0x7f0000000340)=ANY=[], 0xe)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x80032, 0xffffffffffffffff, 0x301ef000) (async)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x80032, 0xffffffffffffffff, 0x301ef000)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) (async)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09049e"], 0x0)
syz_usb_control_io$printer(r8, 0x0, 0x0) (async)
syz_usb_control_io$printer(r8, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000080), 0x0)
recvmmsg(r9, &(0x7f0000005c80), 0x0, 0x10122, 0x0)

7m21.969199049s ago: executing program 32 (id=1195):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @usage, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000b80)={r1, 0xfffffffffffffffe, 0x0, [0x5, 0x1, 0x1, 0xb, 0x22], [0x5, 0x2, 0x15, 0xf12e, 0x7, 0x6, 0x1f5, 0x10000, 0x80000000, 0xffffffffffffffff, 0x5, 0xffffffffffff7fff, 0x32ec8ceb, 0x1, 0x1, 0x9, 0x9, 0xf, 0xa89, 0x4, 0x1ff, 0x2, 0x4, 0xfffffffffffffffc, 0x2, 0x5, 0x3ff, 0x9f81, 0x10000, 0x9, 0xe, 0x4, 0x1, 0x100, 0x2, 0x9, 0x4, 0x2, 0x10, 0x5, 0x2, 0x9, 0x7, 0x6, 0x6a4b, 0x9, 0x6, 0xffffffff80000001, 0x8000000000000000, 0x7379, 0x7, 0x2, 0x7, 0xbd1, 0x2, 0x8, 0x3, 0x100000001, 0x0, 0xaa, 0x5, 0x1, 0x3, 0x9a2, 0xffffffff, 0x7fff, 0x0, 0xee74, 0xef, 0x494fc642, 0x5, 0x200, 0x98, 0x7, 0x3, 0x7fffffffffffffff, 0x66672c56, 0x3, 0x4e, 0x10001, 0x4, 0x9, 0xffffffffffffff95, 0x5, 0x10000, 0x8000000000000001, 0xffffffff00000000, 0x7, 0x1fffe0, 0x6, 0xca, 0x4, 0x8, 0x6, 0x80000001, 0x0, 0x7, 0x3, 0x77a, 0x7a, 0x710, 0x7fffffff, 0x6, 0x6, 0x4, 0x7, 0x7fffffff, 0xfff, 0x8, 0x4, 0x7fffffffffffffff, 0x2, 0x5, 0x6, 0x4, 0x1, 0x2, 0x9, 0x0, 0x189d, 0x2]})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000740)=0x80) (async)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000740)=0x80)
ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000080)={0x1e57, 0x1, 0xffff7000, 0xa, 0x2, "e9d30d0d00", 0x963, 0x209})
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xa)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000ffffffff008b1477060000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
pipe(&(0x7f0000000080)) (async)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6])
splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) (async)
splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) (async)
ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r6, r4, 0xb, 0x20}, 0x20)
write$P9_RLERRORu(r5, &(0x7f0000000340)=ANY=[], 0xe) (async)
write$P9_RLERRORu(r5, &(0x7f0000000340)=ANY=[], 0xe)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x80032, 0xffffffffffffffff, 0x301ef000) (async)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x80032, 0xffffffffffffffff, 0x301ef000)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) (async)
msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f09049e"], 0x0)
syz_usb_control_io$printer(r8, 0x0, 0x0) (async)
syz_usb_control_io$printer(r8, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket(0x10, 0x3, 0x0) (async)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000080), 0x0)
recvmmsg(r9, &(0x7f0000005c80), 0x0, 0x10122, 0x0)

2m33.888432468s ago: executing program 0 (id=1941):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9ad1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xc3}, 0x8)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x1)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x8, 0x2, 0x0, 0x0, "cf7175876853d309"}, 0x10}, 0x1, 0x0, 0x0, 0x20008814}, 0x4805)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x401, 0x4, 0x0, 0x0, 0x2}}, 0x50)

2m33.619849996s ago: executing program 0 (id=1943):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x18}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff000}, 0x50)

2m32.839327456s ago: executing program 0 (id=1947):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a05000000000000000000070000000900010073797a300000000080000000090a01040000000000000100070000000900010073797a3000000000440011800a0001006d61746368000000340002801c0003004ec849704f7ab6ee5bcc8b71ed5070ce80036c5d5625c47a0a00010071756f74610000000800024000000000080005400000000208000a4000000001090002"], 0xc8}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x60a03)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="415b7ac700000000", 0x8)
r3 = accept(r2, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
close(r4)
socket$l2tp6(0xa, 0x2, 0x73)
write(0xffffffffffffffff, &(0x7f00000003c0)="372c8b1f1b281b04ddcf0cd5b147fb2d159582fac96124e85c6e42b67e93f52eaeb64061f73cf726651219895e8585177efa608955823f621a291e7dfddf77439ef392b9d80c914b5e6723a95863cb743ee6590245e47bb9d3eb34663afe3c00e8d35ccaacf7d1a53a018290d1336802f336c8ddd34a9e7e4013d47055c5cc5af7d8a57a93763e9c8caad8eae592cdb493e44669666dc3fc60eeb65fca4aa1aea0593d76241b0d907902c6ff56d1ddc3b51637a2952dbed6", 0xb8)
syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r4)
sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0)
recvmsg(r3, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2, 0x0, 0xf4}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
r5 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000100)={0x15})

2m32.646819478s ago: executing program 0 (id=1951):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x8200, 0x0)
mq_open(&(0x7f0000000180)='.\\\x00', 0x2, 0x40, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000004000000040000002200000000000000", @ANYRES32, @ANYBLOB="00000078c01dc500000000000026aa0162130549265a1eef5d412b00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f00000001c0), &(0x7f00000004c0)=@udp}, 0x20)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = epoll_create(0x4)
epoll_wait(r5, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0x9)
fsopen(0x0, 0x1)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r6, &(0x7f00000007c0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_ATTR(r6, &(0x7f0000000100)={0x78, 0x0, r7, {0x2000000007, 0x0, 0x0, {0x10000, 0xffffffffffffffff, 0x58, 0xbbf7, 0x400, 0x3, 0x2, 0x0, 0x8000, 0xa000, 0x9fffffff, r8, r9, 0x0, 0x200, 0x1000000}}}, 0x78)
r10 = getpgrp(r0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x0, 0x0, r8, 0x0, 0x20, 0x8}, 0x0, 0x0, 0x8, 0x8, 0x3ff, 0x8, 0x7a, 0xe99, 0x6, 0x2, r0, r10})

2m31.583519446s ago: executing program 0 (id=1953):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9ad1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
mkdirat(0xffffffffffffff9c, 0x0, 0x1c1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c)
sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xc3}, 0x8)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300), &(0x7f0000000340), 0x2, 0x1)
sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x8, 0x2, 0x0, 0x0, "cf7175876853d309"}, 0x10}, 0x1, 0x0, 0x0, 0x20008814}, 0x4805)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x401, 0x4, 0x0, 0x0, 0x2}}, 0x50)

2m31.333659499s ago: executing program 0 (id=1955):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x40804)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sync()
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = fsopen(&(0x7f0000000000)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fstat(0xffffffffffffffff, &(0x7f00000003c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f00000000c0)=0x800)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x94, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffec3, 0xb, 0xf8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c890}, 0x20004080)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0)

2m16.16388025s ago: executing program 33 (id=1955):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x40804)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000))
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sync()
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x73, 0x2, 0x2, 0x4002804c4, 0x9, 0x8000000000000000, 0xc595, 0x0, 0x4, 0xefffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2002d3})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = fsopen(&(0x7f0000000000)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
fsmount(r7, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fstat(0xffffffffffffffff, &(0x7f00000003c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f00000000c0)=0x800)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x94, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffec3, 0xb, 0xf8}, {0x6, 0x11, 0x7fff}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffd}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c890}, 0x20004080)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0)

1m46.398884949s ago: executing program 1 (id=2208):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1m43.568585501s ago: executing program 1 (id=2221):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x800000}, [@jmp={0x5, 0x0, 0xb, 0x2, 0x5, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params]}, 0x28}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000740)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x7fffffffffffffff, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="03000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50)
sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={0x34, r0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8040042)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4000}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x3c}}, 0x8000)
bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082)
r5 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2})
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1m42.730171182s ago: executing program 1 (id=2225):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x13, 0x8041)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406000005240000000d2402", @ANYRES16], 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"})
ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x1, 0x1}]})
r2 = socket$can_raw(0x1d, 0x3, 0x1)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xd, 0xf0, 0x3, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x5, 0x17}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x200, 0x4, 0x3, 0x9, 0xff, 0x6}, 0x5, &(0x7f0000000580)={0x5, 0xf, 0x5}, 0x5, [{0x2f, &(0x7f00000005c0)=@string={0x2f, 0x3, "db5448d918d827fed7f183c5212a4df4b8882c28bd701cc6bd65a2aaed03b93c51673d297cdb78fcfce73e58ff"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x2409}}, {0xa, &(0x7f0000000680)=@string={0xa, 0x3, "439f80f19e55a4f9"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x403}}]})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500006400000069105c0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8dd"], 0x0, 0x5}, 0x94)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r3, 0xffffffff, 0x1, &(0x7f0000000340)="d30baf5baebf7cca67eabe9c2977c5e29535269033a7948dc2f4a27c1364eeb73aa235a8e97a4a84ba8be8ae779995526e92c3093f77613e9e8795cb0480408492186fc49c45075e110d4569ed1a9880998a062719b9b1ff3097384d5e80d296ef", 0x61)
bind$can_raw(r3, &(0x7f0000000000), 0x10)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
syz_open_procfs(r4, &(0x7f0000000300)='net/ip6_tables_targets\x00')
r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14, 0x80000)
dup3(r5, r3, 0x80000)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r6, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
bind$can_raw(r6, &(0x7f00000001c0), 0x10)
dup3(r2, r3, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r7, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, 0x0}, 0x300060c1)
r8 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r8, &(0x7f0000000280)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
recvmmsg(r6, &(0x7f0000000300), 0x0, 0x20, &(0x7f00000004c0)={0x77359400})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r9, @ANYRESDEC=r2, @ANYRES32=r10, @ANYBLOB="08000500060000000a00e80008021100000000000a00e800ffffffffffff00002c00178004000600040001000507000000000000000005004ffd0200040004000400020004000200040004000a00e80008021100000100001c00e7"], 0xc4}, 0x1, 0x0, 0x0, 0x8800}, 0x4000808)

1m40.813950785s ago: executing program 1 (id=2231):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103000000090585"], 0x0)

1m39.361938018s ago: executing program 1 (id=2239):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)

1m38.022247521s ago: executing program 1 (id=2252):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1)

1m22.643112346s ago: executing program 34 (id=2252):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}], 0x1)

8.111771965s ago: executing program 3 (id=2700):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0x6, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x0)
close(r2)
write(r0, 0x0, 0x0)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_pktinfo(r2, 0x29, 0x8, 0x0, &(0x7f0000000140))

7.616103343s ago: executing program 3 (id=2702):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)

7.536906771s ago: executing program 3 (id=2703):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000180)={0x40, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000940)=ANY=[], 0x0, 0x0})

5.149148175s ago: executing program 7 (id=2708):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000240)=[@wr_crn={0x46, 0x20, {0x8}}, @code={0xa, 0x60, {"b805000000b9e8d100000f01c1f045802bbdc4417f5edd66b8dc008ed8660f104c878766460f38802cf26764440f01df266743250000008066baf80cb8289d308fef66bafc0cb81c350000ef660f08"}}], 0x80})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5.147739176s ago: executing program 4 (id=2709):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0)

4.98499877s ago: executing program 4 (id=2710):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40880)

4.875285033s ago: executing program 4 (id=2711):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_procfs(0x0, &(0x7f0000019200)='net/route\x00')
pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r2=>0x0})
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregset(0x4205, r3, 0x204, &(0x7f00000000c0)={0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d4"])
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

4.512078714s ago: executing program 3 (id=2712):
syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4890}, 0x40)
r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(&(0x7f0000002300), 0x0, 0x0, 0x0, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000))
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r3 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x6221, 0x1, &(0x7f0000000180)="c2"}], 0x1})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.34456601s ago: executing program 7 (id=2713):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)

4.292233748s ago: executing program 5 (id=2714):
r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000300)="358e", 0x2)

4.243761045s ago: executing program 7 (id=2715):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x54d083, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(0xffffffffffffffff, r2, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0xa00, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x6, 0x30000, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x4000000e42, 0x9, 0xffffffffffffffff, 0x5, 0x10000, 0x3, 0x4002004c2, 0x100000007ff, 0xd559, 0x0, 0x10000000000400, 0x8, 0x7, 0x0, 0x8, 0x8b], 0x58000, 0x240046})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0d00000005800000040000000700000000000000", @ANYRES32=r0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000092badd86c3e8d1a1bc60e9b501038c75a774baeb5cad1f7ec819ab5744b0b1b2fb0246f48b294bfb55e1cf823895f12615701a6f549ebb20931479d042d2c6c8641ec8fdedde08cf09d071be2f3570eadd37e02b49733a3a262f8002a8fa958327729c78c4b56ac959d27cf67dcf6543c3b0a41c43fbb6bd11e2790f142859c26da4f6f0469d798c6a583a3d695b5690fc882f3b7242402c0ae2adb441ef5c1e2c3f7339c0586bc17db5e4c"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffff, r9}, 0x38)

3.251825692s ago: executing program 4 (id=2717):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"})
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.238476474s ago: executing program 7 (id=2718):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890)

3.097506779s ago: executing program 7 (id=2720):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0)

2.964625757s ago: executing program 7 (id=2722):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d1180094ba000000000109022400010000000009040000010300000009210000000122050009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0xa, "e30a1c40"}]}}, 0x0}, 0x0)

2.427254392s ago: executing program 4 (id=2727):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc534, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
pipe(&(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0)
tee(r1, r5, 0xf3a, 0x4)
write$binfmt_elf64(r3, &(0x7f0000001080)=ANY=[], 0x18c6)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000080)={0x0, 0x2f, 0x3b, {0x3b, 0x1, "f70ba3810b0000000000000000cb4fdca0560fb30d54f365c5b1d43ee44fbf6fc93f0808251f0ba29e4f6b42645b6356c1d03e4919bab76b07"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$uac1(r6, 0x0, 0x0)

2.357934965s ago: executing program 5 (id=2728):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000002940)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d80)={0x2c, &(0x7f0000000b80)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0})

2.115594044s ago: executing program 6 (id=2729):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x401)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000100)={0x53, 0xffffffffffffffff, 0x6, 0xfd, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000640)="3ffe7be3907c", 0x0, 0xfffffffb, 0x5dbcc8c695e4f439, 0xffffffff, 0x0})
r1 = gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x82802, 0x1ec541d9ca5bf0af)
write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'rlimit'}]}, 0x8)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000300), 0x10240, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000340)={0x2, 0x4, 0x7, 0x40, r1})
syz_open_dev$video4linux(&(0x7f0000000280), 0x5, 0x40000)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x800)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x200, 0xd8, 0x0, 0x148, 0xd8, 0x148, 0x168, 0x240, 0x240, 0x168, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @broadcast, 0x0, 0xff, 'bridge_slave_0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x29, 0x2, 0x10}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1a, 0x8, 0x1, 0x8001, 'syz1\x00', 'syz0\x00', {0x5}}}}, {{@ip={@private=0xa010102, @private=0xa010101, 0xffffff00, 0x0, 'veth1_to_hsr\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x40, 0x1, 0x11}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260)

1.911748994s ago: executing program 6 (id=2730):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x10, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x9e9, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf47, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.739777383s ago: executing program 5 (id=2731):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, 0x0], 0x2})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, 0x0)

1.715752524s ago: executing program 5 (id=2732):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000084)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000047, 0x0)

1.655824128s ago: executing program 6 (id=2733):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x80}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000890)

1.64927817s ago: executing program 5 (id=2734):
syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb02200002020509050412"], 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x400, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x3}, {0x5, 0xb}, {0x6, 0xfff4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20000091)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x71}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

1.559516796s ago: executing program 6 (id=2735):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$dvb_dvr(&(0x7f0000000340), 0x0, 0x20000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.487842592s ago: executing program 6 (id=2736):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220)

1.429780944s ago: executing program 6 (id=2737):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
io_uring_setup(0x2435, &(0x7f0000000040)={0x0, 0x7a23, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0}, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
socket(0x80000000000000a, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480))
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
epoll_create1(0x80000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2)
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2(&(0x7f0000000000), 0x80000)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
keyctl$setperm(0x5, 0x0, 0x120202)

596.857461ms ago: executing program 3 (id=2738):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000, 0xfffffffffffffffc}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d4, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432", 0x30}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0)

499.65703ms ago: executing program 3 (id=2739):
r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000200)={0x40, 0x30, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0})

368.919181ms ago: executing program 4 (id=2740):
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
close(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000)

0s ago: executing program 5 (id=2741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x1, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

kernel console output (not intermixed with test programs):

7
[  941.811400][ T5826] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  941.962499][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  941.974450][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  941.985745][ T5826] usb 4-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[  941.995166][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.006937][ T5826] usb 4-1: config 0 descriptor??
[  942.131024][ T5812] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  942.161126][ T9990] usb 6-1: new low-speed USB device number 38 using dummy_hcd
[  942.303027][ T5812] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  942.314266][ T9990] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  942.314704][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.322379][ T9990] usb 6-1: config 0 has no interface number 0
[  942.322436][ T9990] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  942.355331][ T5812] usb 7-1: config 0 descriptor??
[  942.366739][ T9990] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  942.375549][ T5812] gspca_main: cpia1-2.14.0 probing 0813:0001
[  942.383870][ T9990] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  942.393184][ T9990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  942.413167][ T9990] usb 6-1: config 0 descriptor??
[  942.420176][T14723] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[  942.435797][ T5826] usbhid 4-1:0.0: can't add hid device: -71
[  942.445787][ T5826] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  942.460504][ T9990] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  942.477188][ T5826] usb 4-1: USB disconnect, device number 93
[  942.684202][ T5826] usb 6-1: USB disconnect, device number 38
[  943.058745][ T5812] gspca_cpia1: usb_control_msg 01, error -71
[  943.065841][ T5812] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  943.077678][ T5812] usb 7-1: USB disconnect, device number 12
[  943.242659][ T5826] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  943.412684][ T5826] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  943.431172][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.469909][ T5826] usb 4-1: config 0 descriptor??
[  943.487302][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2275'.
[  943.496924][ T5826] gspca_main: cpia1-2.14.0 probing 0813:0001
[  943.943543][ T9124] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  944.135915][ T9124] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  944.182558][ T9124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.207788][ T9124] usb 6-1: Product: syz
[  944.218594][ T9124] usb 6-1: Manufacturer: syz
[  944.225671][ T9124] usb 6-1: SerialNumber: syz
[  944.598661][ T5826] gspca_cpia1: usb_control_msg 03, error -71
[  944.617238][ T5826] gspca_cpia1: usb_control_msg 01, error -71
[  944.630883][ T5826] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  944.646484][ T5826] usb 4-1: USB disconnect, device number 94
[  944.652621][T14768] kernel read not supported for file /file0 (pid: 14768 comm: syz.4.2288)
[  944.662444][   T30] audit: type=1800 audit(1780818960.516:984): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2288" name="file0" dev="mqueue" ino=49177 res=0 errno=0
[  944.840944][ T9990] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  944.956155][T14780] fuse: Bad value for 'fd'
[  944.994271][ T9990] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  945.010933][ T9990] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  945.018965][ T9990] usb 7-1: Product: syz
[  945.023825][ T9990] usb 7-1: Manufacturer: syz
[  945.028460][ T9990] usb 7-1: SerialNumber: syz
[  945.037895][T14782] IPv6: Can't replace route, no match found
[  945.378094][T14790] mac80211_hwsim hwsim12 syzkaller0: entered promiscuous mode
[  945.434496][T14790] mac80211_hwsim hwsim12 syzkaller0: entered allmulticast mode
[  945.469590][ T9990] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  945.499142][ T9990] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  946.218737][T14806] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined
[  946.428681][ T9124] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  946.445658][ T9124] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  946.469709][ T9124] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  946.483000][ T9124] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  946.493715][ T9124] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  946.506381][ T9124] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  946.521273][ T5738] usb 4-1: new full-speed USB device number 95 using dummy_hcd
[  946.527122][ T9124] usb 6-1: USB disconnect, device number 39
[  946.672401][ T5738] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  946.680710][ T5738] usb 4-1: config 5 has no interface number 0
[  946.687025][ T5738] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  946.698880][ T5738] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  946.708993][ T5738] usb 4-1: config 5 interface 123 has no altsetting 0
[  946.717687][ T5738] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  946.726880][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  946.734934][ T5738] usb 4-1: Product: syz
[  946.739095][ T5738] usb 4-1: Manufacturer: syz
[  946.743889][ T5738] usb 4-1: SerialNumber: syz
[  946.749483][ T9990] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  946.850997][ T9124] usb 6-1: new full-speed USB device number 40 using dummy_hcd
[  946.967983][T14810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.976936][T14810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  946.986782][T14810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.998093][T14810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  947.009687][T14810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  947.015123][ T9124] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  947.018893][T14810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  947.028629][ T9124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.046440][ T9124] usb 6-1: Product: syz
[  947.050659][ T9124] usb 6-1: Manufacturer: syz
[  947.055564][ T9124] usb 6-1: SerialNumber: syz
[  947.068301][ T9124] usb 6-1: config 0 descriptor??
[  947.250405][T14810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2304'.
[  947.293557][ T9124] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  947.572981][ T5738] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  947.589099][ T5738] usb 4-1: USB disconnect, device number 95
[  947.783121][ T9990] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -EPROTO
[  947.797927][ T9990] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  947.810095][ T9990] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  947.820166][ T9990] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  947.830661][ T9990] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[  947.846053][ T9990] usb 7-1: USB disconnect, device number 13
[  948.471008][ T5826] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  948.724178][ T9124] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  948.859974][ T9124] usb 6-1: USB disconnect, device number 40
[  949.027262][ T5826] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  949.087252][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  949.125498][T14837] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2313'.
[  949.158654][ T5826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  949.193601][ T5826] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  949.210938][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  949.223946][ T5826] usb 4-1: Product: syz
[  949.228595][ T5826] usb 4-1: Manufacturer: syz
[  949.262250][ T5826] usb 4-1: SerialNumber: syz
[  949.300178][ T5826] usb 4-1: config 0 descriptor??
[  949.360757][T14818] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  949.645789][T14818] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  949.670922][ T5812] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  949.850912][ T5812] usb 7-1: Using ep0 maxpacket: 16
[  949.875879][ T5812] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  949.891021][ T9990] usb 6-1: new full-speed USB device number 41 using dummy_hcd
[  949.920743][ T5812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  949.954071][T14856] fuse: fd is not a fuse device
[  949.996029][ T5812] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  950.071987][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  950.080097][ T5812] usb 7-1: Product: syz
[  950.088631][ T5812] usb 7-1: Manufacturer: syz
[  950.093546][ T5812] usb 7-1: SerialNumber: syz
[  950.094130][ T9990] usb 6-1: config index 0 descriptor too short (expected 28277, got 36)
[  950.100685][ T5812] usb 7-1: config 0 descriptor??
[  950.132176][ T9990] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  950.155884][ T5812] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  950.160153][ T9990] usb 6-1: config 0 has no interfaces?
[  950.173092][ T9990] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  950.186128][ T9990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  950.199287][ T9990] usb 6-1: config 0 descriptor??
[  950.243754][ T5812] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  950.711285][T14871] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2324'.
[  950.724199][ T5812] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  950.737470][ T5812] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  951.019080][T14889] IPv6: Can't replace route, no match found
[  951.358440][ T5812] em28xx 7-1:0.0: Unknown AC97 audio processor detected!
[  951.365962][ T5812] em28xx 7-1:0.0: couldn't setup AC97 register 2
[  951.373604][ T5812] em28xx 7-1:0.0: couldn't setup AC97 register 4
[  951.380313][ T5812] em28xx 7-1:0.0: couldn't setup AC97 register 6
[  951.387295][ T5812] em28xx 7-1:0.0: couldn't setup AC97 register 54
[  951.394103][ T5812] em28xx 7-1:0.0: couldn't setup AC97 register 56
[  951.404400][ T5812] usb 7-1: USB disconnect, device number 14
[  951.665170][   T24] usb 4-1: USB disconnect, device number 96
[  951.849533][T14901] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2335'.
[  952.351046][ T9990] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  952.374630][   T30] audit: type=1400 audit(1780818968.236:985): avc:  denied  { watch } for  pid=14920 comm="syz.4.2343" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  952.513451][ T9990] usb 7-1: Using ep0 maxpacket: 8
[  952.519859][ T9990] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  952.531136][ T9990] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  952.550789][ T5738] usb 6-1: USB disconnect, device number 41
[  952.556826][ T9990] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  952.576621][ T9990] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  952.591159][ T9990] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  952.605464][ T9990] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  952.615342][ T9990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  952.648939][T14927] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2346'.
[  952.832689][ T9990] usb 7-1: usb_control_msg returned -32
[  952.838403][ T9990] usbtmc 7-1:16.0: can't read capabilities
[  952.955831][T14931] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  952.965173][T14931] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  953.071466][   T30] audit: type=1400 audit(1780818968.936:986): avc:  denied  { ioctl } for  pid=14936 comm="syz.4.2351" path="socket:[49656]" dev="sockfs" ino=49656 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  953.080952][ T5738] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  953.272327][ T5738] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  953.282656][ T5738] usb 6-1: config 0 interface 0 has no altsetting 0
[  953.291273][ T5738] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  953.300438][ T5738] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.308906][ T5738] usb 6-1: Product: syz
[  953.313206][ T5738] usb 6-1: Manufacturer: syz
[  953.317819][ T5738] usb 6-1: SerialNumber: syz
[  953.325361][ T5738] usb 6-1: config 0 descriptor??
[  953.334150][ T5738] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  953.342455][ T9990] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  953.352231][ T5738] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  953.362672][ T5738] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  953.371706][ T5738] usb 6-1: media controller created
[  953.383914][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  953.418890][ T5738] DVB: Unable to find symbol tda10046_attach()
[  953.425125][ T5738] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  953.433789][ T5738] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  953.524349][ T9990] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  953.534527][ T9990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.546359][ T9990] usb 4-1: Product: syz
[  953.550557][ T9990] usb 4-1: Manufacturer: syz
[  953.555253][ T9990] usb 4-1: SerialNumber: syz
[  953.562135][ T9990] usb 4-1: config 0 descriptor??
[  953.568572][ T9990] hub 4-1:0.0: bad descriptor, ignoring hub
[  953.574817][ T9990] hub 4-1:0.0: probe with driver hub failed with error -5
[  953.583174][ T9990] f81232 4-1:0.0: f81534a converter detected
[  953.738052][ T5738] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  953.754663][ T5738] usb 6-1: USB disconnect, device number 42
[  953.778377][T14935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  953.794668][T14935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  953.815606][ T9990] usb 4-1: f81534a converter now attached to ttyUSB0
[  954.373472][T14950] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2357'.
[  954.726051][ T9990] usb 4-1: USB disconnect, device number 97
[  954.785304][ T9990] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  954.837811][ T9990] f81232 4-1:0.0: device disconnected
[  954.949109][ T4933] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  954.962044][ T4933] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  954.971164][ T4933] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  954.979975][ T4933] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  954.994936][ T4933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  955.110291][T11381] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  955.118439][T11381] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  955.129179][T11381] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  955.142963][ T5738] usb 7-1: USB disconnect, device number 15
[  955.153531][T11381] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  955.161403][T11381] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  955.199323][T14981] fuse: fd is not a fuse device
[  955.431151][ T9990] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  955.483350][   T30] audit: type=1400 audit(1780818971.346:987): avc:  denied  { read } for  pid=14991 comm="syz.6.2371" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  955.548839][T14992] batman_adv: batadv0: Adding interface: vxlan0
[  955.555630][T14992] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  955.603977][T14992] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active
[  955.650637][ T9990] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  955.676012][ T9990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  955.708270][ T9990] usb 4-1: Product: syz
[  955.722361][ T9990] usb 4-1: Manufacturer: syz
[  955.733280][ T9990] usb 4-1: SerialNumber: syz
[  955.758237][ T9990] usb 4-1: config 0 descriptor??
[  956.088341][T14969] lo speed is unknown, defaulting to 1000
[  956.099964][T15021] program syz.3.2365 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  956.122190][   T30] audit: type=1400 audit(1780818971.986:988): avc:  denied  { setattr } for  pid=14978 comm="syz.3.2365" name="ns" dev="proc" ino=48787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  956.151644][ T9990] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22
[  956.205435][ T9990] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  956.221143][ T5826] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  956.260177][ T9990] usb 4-1: USB disconnect, device number 98
[  956.382444][ T5826] usb 6-1: Using ep0 maxpacket: 8
[  956.402230][ T5826] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  956.421333][ T5826] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  956.438910][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  956.453817][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  956.464117][ T5826] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  956.477527][ T5826] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  956.486833][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  956.578724][T14969] lo speed is unknown, defaulting to 1000
[  956.593572][T14969] lo speed is unknown, defaulting to 1000
[  956.634019][   T30] audit: type=1400 audit(1780818972.496:989): avc:  denied  { watch watch_reads } for  pid=15031 comm="syz.6.2384" path="pipe:[42737]" dev="pipefs" ino=42737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  956.702638][ T5826] usb 6-1: usb_control_msg returned -32
[  956.716361][ T5826] usbtmc 6-1:16.0: can't read capabilities
[  957.223137][T11381] Bluetooth: hci7: command tx timeout
[  957.334570][T14969] bridge0: port 1(bridge_slave_0) entered blocking state
[  957.342254][T14969] bridge0: port 1(bridge_slave_0) entered disabled state
[  957.349649][T14969] bridge_slave_0: entered allmulticast mode
[  957.357397][T14969] bridge_slave_0: entered promiscuous mode
[  957.366225][T14969] bridge0: port 2(bridge_slave_1) entered blocking state
[  957.373618][T14969] bridge0: port 2(bridge_slave_1) entered disabled state
[  957.381338][T14969] bridge_slave_1: entered allmulticast mode
[  957.389255][T14969] bridge_slave_1: entered promiscuous mode
[  957.423158][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  957.438655][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  957.478869][T14969] team0: Port device team_slave_0 added
[  957.487700][T14969] team0: Port device team_slave_1 added
[  957.519296][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0
[  957.526420][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  957.574152][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  957.608748][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1
[  957.626260][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  957.723776][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  957.746980][T15070] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  957.845614][T14969] hsr_slave_0: entered promiscuous mode
[  957.854033][T14969] hsr_slave_1: entered promiscuous mode
[  957.863869][T14969] debugfs: 'hsr0' already exists in 'hsr'
[  957.869994][T14969] Cannot create hsr debugfs directory
[  958.211074][ T9990] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  958.269846][T14969] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  958.279549][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  958.287531][T14969] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  958.299754][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  958.308964][T14969] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  958.319576][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  958.328799][T14969] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  958.341814][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  958.389115][ T9990] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  958.427968][ T9990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.451024][ T9990] usb 4-1: Product: syz
[  958.460151][ T9990] usb 4-1: Manufacturer: syz
[  958.470248][ T9990] usb 4-1: SerialNumber: syz
[  958.487989][ T9990] usb 4-1: config 0 descriptor??
[  958.505697][ T9990] hub 4-1:0.0: bad descriptor, ignoring hub
[  958.520419][ T9990] hub 4-1:0.0: probe with driver hub failed with error -5
[  958.534746][ T9990] f81232 4-1:0.0: f81534a converter detected
[  958.571053][T14969] 8021q: adding VLAN 0 to HW filter on device bond0
[  958.603812][T14969] 8021q: adding VLAN 0 to HW filter on device team0
[  958.615545][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  958.622813][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  958.653474][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state
[  958.660656][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state
[  958.707398][T15079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  958.716669][T15079] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  958.737097][ T9990] usb 4-1: f81534a converter now attached to ttyUSB0
[  959.034614][ T5826] usb 6-1: USB disconnect, device number 43
[  959.301158][T11381] Bluetooth: hci7: command tx timeout
[  959.531768][ T5826] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[  959.623419][ T9990] usb 4-1: USB disconnect, device number 99
[  959.654945][ T9990] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  959.687471][ T9990] f81232 4-1:0.0: device disconnected
[  959.708280][T15120] kernel read not supported for file /file0 (pid: 15120 comm: syz.6.2413)
[  959.744681][   T30] audit: type=1800 audit(1780818975.606:990): pid=15120 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.2413" name="file0" dev="mqueue" ino=50270 res=0 errno=0
[  959.796525][ T5826] usb 6-1: unable to get BOS descriptor or descriptor too short
[  959.815366][ T5826] usb 6-1: no configurations
[  959.820721][ T5826] usb 6-1: can't read configurations, error -22
[  959.933220][T14969] 8021q: adding VLAN 0 to HW filter on device batadv0
[  960.071287][ T9124] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  960.243750][ T9124] usb 4-1: Using ep0 maxpacket: 16
[  960.268514][ T9124] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  960.291480][ T9124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  960.309349][ T9124] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  960.319987][ T9124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.325055][T14969] veth0_vlan: entered promiscuous mode
[  960.328733][ T9124] usb 4-1: Product: syz
[  960.328755][ T9124] usb 4-1: Manufacturer: syz
[  960.328770][ T9124] usb 4-1: SerialNumber: syz
[  960.344742][ T9124] usb 4-1: config 0 descriptor??
[  960.358664][ T9124] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  960.402420][ T9124] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  960.408541][T14969] veth1_vlan: entered promiscuous mode
[  960.477090][T14969] veth0_macvtap: entered promiscuous mode
[  960.488354][T14969] veth1_macvtap: entered promiscuous mode
[  960.507548][T14969] batman_adv: batadv0: Interface activated: batadv_slave_0
[  960.523401][T14969] batman_adv: batadv0: Interface activated: batadv_slave_1
[  960.537510][   T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  960.547006][   T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  960.558608][   T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  960.569732][   T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  960.778118][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.813285][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  960.880972][ T5826] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  960.915402][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  960.924260][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  960.963543][ T9124] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  960.981961][ T9124] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  961.051651][ T5826] usb 6-1: Using ep0 maxpacket: 8
[  961.078205][ T5826] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  961.107985][ T5826] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  961.134661][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  961.146235][ T5826] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  961.156404][ T5826] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  961.169581][ T5826] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  961.189469][ T5826] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  961.381337][T11381] Bluetooth: hci7: command tx timeout
[  961.426807][ T5826] usb 6-1: usb_control_msg returned -32
[  961.433114][ T5826] usbtmc 6-1:16.0: can't read capabilities
[  961.607875][ T9124] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  961.620706][ T9124] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  961.634127][ T9124] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  961.640865][ T9124] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  961.647461][ T9124] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  961.654312][ T9124] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  961.667718][ T9124] usb 4-1: USB disconnect, device number 100
[  961.864412][   T24] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  962.012669][   T24] usb 7-1: device descriptor read/64, error -71
[  962.262204][   T24] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  962.375610][ T4933] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  962.392062][ T4933] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  962.402767][ T4933] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  962.411559][ T4933] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  962.419504][T15183] xt_hashlimit: size too large, truncated to 1048576
[  962.427057][   T24] usb 7-1: device descriptor read/64, error -71
[  962.433675][ T4933] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  962.552261][   T24] usb usb7-port1: attempt power cycle
[  962.921637][   T24] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  962.990059][   T24] usb 7-1: device descriptor read/8, error -71
[  962.998019][ T5618] syz_tun (unregistering): left allmulticast mode
[  963.200168][T10922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.241362][   T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  963.281832][   T24] usb 7-1: device descriptor read/8, error -71
[  963.297557][T15185] lo speed is unknown, defaulting to 1000
[  963.366275][T10922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.398475][   T24] usb usb7-port1: unable to enumerate USB device
[  963.429386][   T24] usb 6-1: USB disconnect, device number 45
[  963.461040][T11381] Bluetooth: hci7: command tx timeout
[  963.467113][   T30] audit: type=1400 audit(1780818979.316:991): avc:  denied  { append } for  pid=15211 comm="syz.7.2444" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  963.619062][T10922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.776442][T10922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.800949][ T5746] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  963.812273][T15185] lo speed is unknown, defaulting to 1000
[  963.820319][T15185] lo speed is unknown, defaulting to 1000
[  963.852069][T15219] loop3: detected capacity change from 0 to 7
[  963.860668][T15219] Dev loop3: unable to read RDB block 7
[  963.867617][T15219]  loop3: AHDI p1 p2
[  963.872491][T15219] loop3: partition table partially beyond EOD, truncated
[  963.887214][T15219] loop3: p1 start 1702000233 is beyond EOD, truncated
[  963.989412][ T5746] usb 8-1: config 0 has an invalid interface number: 101 but max is 0
[  964.040108][ T5746] usb 8-1: config 0 has no interface number 0
[  964.091723][ T5746] usb 8-1: config 0 interface 101 has no altsetting 0
[  964.143927][ T5746] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  964.173885][ T5746] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.183312][ T5746] usb 8-1: Product: syz
[  964.187513][ T5746] usb 8-1: Manufacturer: syz
[  964.193209][ T5746] usb 8-1: SerialNumber: syz
[  964.223074][ T5746] usb 8-1: config 0 descriptor??
[  964.311169][ T9124] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  964.333277][T10922] bond0: left allmulticast mode
[  964.345220][T10922] bond0: left promiscuous mode
[  964.353287][T10922] bridge0: port 3(bond0) entered disabled state
[  964.385842][T10922] bridge_slave_1: left promiscuous mode
[  964.415546][T10922] bridge0: port 2(bridge_slave_1) entered disabled state
[  964.454077][T10922] bridge_slave_0: left allmulticast mode
[  964.464498][T10922] bridge_slave_0: left promiscuous mode
[  964.467727][ T9124] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  964.481785][T10922] bridge0: port 1(bridge_slave_0) entered disabled state
[  964.490304][ T5746] usb 8-1: USB disconnect, device number 2
[  964.492415][ T9124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  964.507335][T11381] Bluetooth: hci8: command tx timeout
[  964.521241][ T9124] usb 4-1: Product: syz
[  964.525528][ T9124] usb 4-1: Manufacturer: syz
[  964.538687][ T9124] usb 4-1: SerialNumber: syz
[  964.557340][ T9124] usb 4-1: config 0 descriptor??
[  964.608973][ T9124] hub 4-1:0.0: bad descriptor, ignoring hub
[  964.627596][ T9124] hub 4-1:0.0: probe with driver hub failed with error -5
[  964.637951][ T9124] f81232 4-1:0.0: f81534a converter detected
[  964.790772][T15222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  964.925905][T15222] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  964.983678][ T9124] usb 4-1: f81534a converter now attached to ttyUSB0
[  965.340705][T15256] binder: 15252:15256 ioctl c0145608 200000000140 returned -22
[  965.361694][   T30] audit: type=1400 audit(1780818981.216:992): avc:  denied  { write } for  pid=15232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  965.446895][   T30] audit: type=1400 audit(1780818981.306:993): avc:  denied  { write } for  pid=15261 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  965.512167][T10922] bond0 (unregistering): Released all slaves
[  965.530936][ T9124] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  965.548517][ T5278] 8021q: adding VLAN 0 to HW filter on device eth1
[  965.681833][ T9124] usb 7-1: Using ep0 maxpacket: 8
[  965.688745][T10922] tipc: Disabling bearer <udp:syz0>
[  965.690356][ T9124] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  965.710545][T10922] tipc: Disabling bearer <eth:team0>
[  965.724602][ T9124] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  965.755189][ T9124] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  965.762116][T10922] tipc: Left network mode
[  965.792289][ T9124] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  965.805127][ T9124] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  965.835407][ T9124] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  965.861498][ T9124] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  965.863385][   T24] usb 4-1: USB disconnect, device number 101
[  965.975030][   T24] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  966.003657][   T24] f81232 4-1:0.0: device disconnected
[  966.075970][T15185] bridge0: port 1(bridge_slave_0) entered blocking state
[  966.092450][ T9124] usb 7-1: usb_control_msg returned -32
[  966.108677][ T9124] usbtmc 7-1:16.0: can't read capabilities
[  966.124897][T15185] bridge0: port 1(bridge_slave_0) entered disabled state
[  966.152787][T15185] bridge_slave_0: entered allmulticast mode
[  966.167291][ T9124] usb 7-1: USB disconnect, device number 20
[  966.181290][ T5746] usb 6-1: new full-speed USB device number 46 using dummy_hcd
[  966.204703][T15185] bridge_slave_0: entered promiscuous mode
[  966.241975][   T30] audit: type=1400 audit(1780818982.096:994): avc:  denied  { write } for  pid=15266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  966.327546][T15185] bridge0: port 2(bridge_slave_1) entered blocking state
[  966.348099][ T5746] usb 6-1: config 5 has an invalid interface number: 123 but max is 0
[  966.348441][T15185] bridge0: port 2(bridge_slave_1) entered disabled state
[  966.360535][ T5746] usb 6-1: config 5 has no interface number 0
[  966.369665][ T5746] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  966.377834][T15185] bridge_slave_1: entered allmulticast mode
[  966.381592][   T30] audit: type=1400 audit(1780818982.226:995): avc:  denied  { write } for  pid=15286 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  966.399083][T15185] bridge_slave_1: entered promiscuous mode
[  966.409349][   T24] usb 4-1: new high-speed USB device number 102 using dummy_hcd
[  966.409522][ T5746] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  966.409551][ T5746] usb 6-1: config 5 interface 123 has no altsetting 0
[  966.412083][ T5746] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  966.449401][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.457798][T13498] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  966.458987][ T5746] usb 6-1: Product: syz
[  966.473921][ T5746] usb 6-1: Manufacturer: syz
[  966.478647][ T5746] usb 6-1: SerialNumber: syz
[  966.536379][ T5278] 8021q: adding VLAN 0 to HW filter on device eth2
[  966.550901][   T24] usb 4-1: Using ep0 maxpacket: 16
[  966.558129][   T24] usb 4-1: config 3 has an invalid interface number: 68 but max is 0
[  966.559841][T15185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  966.573245][   T24] usb 4-1: config 3 has no interface number 0
[  966.581336][T11381] Bluetooth: hci8: command tx timeout
[  966.582598][   T24] usb 4-1: config 3 interface 68 altsetting 188 endpoint 0x1 has invalid wMaxPacketSize 0
[  966.582627][   T24] usb 4-1: config 3 interface 68 has no altsetting 0
[  966.584999][   T24] usb 4-1: New USB device found, idVendor=2001, idProduct=3a04, bcdDevice= f.ab
[  966.601891][T15185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  966.608040][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  966.619726][T13498] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  966.629652][   T24] usb 4-1: Product: syz
[  966.633528][T13498] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  966.645502][   T24] usb 4-1: Manufacturer: syz
[  966.660757][   T24] usb 4-1: SerialNumber: syz
[  966.662731][T13498] usb 8-1: config 0 descriptor??
[  966.676442][T13498] gspca_main: cpia1-2.14.0 probing 0813:0001
[  966.729226][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.759541][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.777785][T15185] team0: Port device team_slave_0 added
[  966.784066][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.791191][T15185] team0: Port device team_slave_1 added
[  966.802412][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.864342][T15276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  966.875805][T15185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  966.883103][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  966.885401][T15276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  966.943624][T15185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  966.975256][   T24] usb 4-1: Could not find all expected endpoints
[  967.004288][T15293] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20000
[  967.036228][   T24] usb 4-1: USB disconnect, device number 102
[  967.062752][T15185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  967.094913][T15185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  967.138516][T15185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  967.306577][T13498] gspca_cpia1: usb_control_msg 01, error -71
[  967.321000][T13498] cpia1 8-1:0.0: only firmware version 1 is supported (got: 0)
[  967.366703][T13498] usb 8-1: USB disconnect, device number 3
[  967.490315][T15297] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2460'.
[  967.511284][   T30] audit: type=1400 audit(1780818983.366:996): avc:  denied  { write } for  pid=15289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  967.562911][ T5746] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device.
[  967.580655][T10922] hsr_slave_0: left promiscuous mode
[  967.612046][ T5746] usb 6-1: USB disconnect, device number 46
[  967.612487][T10922] hsr_slave_1: left promiscuous mode
[  967.647319][T10922] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  967.657411][T10922] batman_adv: batadv0: Removing interface: batadv_slave_0
[  967.666577][T10922] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  967.679805][T10922] batman_adv: batadv0: Removing interface: batadv_slave_1
[  967.726111][   T30] audit: type=1400 audit(1780818983.586:997): avc:  denied  { write } for  pid=15312 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  967.911061][ T5738] usb 4-1: new high-speed USB device number 103 using dummy_hcd
[  968.012539][T10922] veth1_to_batadv (unregistering): left allmulticast mode
[  968.052468][ T5738] usb 4-1: device descriptor read/64, error -71
[  968.079341][T10922] team0 (unregistering): Port device team_slave_1 removed
[  968.197899][T10922] team0 (unregistering): Port device team_slave_0 removed
[  968.303173][ T5738] usb 4-1: new high-speed USB device number 104 using dummy_hcd
[  968.367501][ T5827] smc: removing ib device s
z1
[  968.455218][ T5827] smbdirect: ib_dev[s
z1] removed
[  968.461075][ T5738] usb 4-1: device descriptor read/64, error -71
[  968.563314][ T5278] 8021q: adding VLAN 0 to HW filter on device eth3
[  968.623554][ T5738] usb usb4-port1: attempt power cycle
[  968.662269][T11381] Bluetooth: hci8: command tx timeout
[  968.710958][ T5818] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  968.913166][ T5818] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  968.926530][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.935813][ T5818] usb 6-1: Product: syz
[  968.940122][ T5818] usb 6-1: Manufacturer: syz
[  968.964995][ T5818] usb 6-1: SerialNumber: syz
[  968.975000][ T5818] usb 6-1: config 0 descriptor??
[  969.001543][ T5738] usb 4-1: new high-speed USB device number 105 using dummy_hcd
[  969.048699][ T5738] usb 4-1: device descriptor read/8, error -71
[  969.067978][ T5818] hub 6-1:0.0: bad descriptor, ignoring hub
[  969.075384][ T5818] hub 6-1:0.0: probe with driver hub failed with error -5
[  969.084419][ T5818] f81232 6-1:0.0: f81534a converter detected
[  969.327149][T15326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.331038][ T5738] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  969.357007][T15326] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  969.370748][ T5818] usb 6-1: f81534a converter now attached to ttyUSB0
[  969.418736][ T5738] usb 4-1: device descriptor read/8, error -71
[  969.541893][ T5738] usb usb4-port1: unable to enumerate USB device
[  970.281151][   T24] usb 6-1: USB disconnect, device number 47
[  970.347059][   T24] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  970.362635][   T24] f81232 6-1:0.0: device disconnected
[  970.743459][T11381] Bluetooth: hci8: command tx timeout
[  970.780156][T15336] hub 8-0:1.0: USB hub found
[  970.797795][T15336] hub 8-0:1.0: 1 port detected
[  971.652936][ T5818] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[  971.781014][ T5826] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  971.822830][ T5818] usb 8-1: config 5 has an invalid interface number: 123 but max is 0
[  971.831302][ T5818] usb 8-1: config 5 has no interface number 0
[  971.837465][ T5818] usb 8-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  971.872005][ T5818] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  971.904080][ T5818] usb 8-1: config 5 interface 123 has no altsetting 0
[  971.932284][ T5818] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  972.052892][ T5818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.069285][ T5818] usb 8-1: Product: syz
[  972.075377][ T5826] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84
[  972.115562][ T5818] usb 8-1: Manufacturer: syz
[  972.133813][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024
[  972.150903][ T5818] usb 8-1: SerialNumber: syz
[  972.176527][ T5826] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  972.459242][T15348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.474398][T15348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.484506][T15348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.495325][ T5826] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  972.506462][T15348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.517079][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  972.528140][T15348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  972.536685][ T5826] usb 4-1: Product: syz
[  972.542625][T15348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  972.550373][ T5826] usb 4-1: Manufacturer: syz
[  972.556505][ T5826] usb 4-1: SerialNumber: syz
[  972.573272][ T5826] usb 4-1: config 0 descriptor??
[  972.663409][T15350] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  973.196702][   T30] audit: type=1400 audit(1780818989.036:998): avc:  denied  { recv } for  pid=0 comm="swapper/0" saddr=10.128.0.169 src=49988 daddr=10.128.1.149 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1
[  974.256331][T15185] hsr_slave_0: entered promiscuous mode
[  974.263477][T15185] hsr_slave_1: entered promiscuous mode
[  974.269682][T15185] debugfs: 'hsr0' already exists in 'hsr'
[  974.299200][T15185] Cannot create hsr debugfs directory
[  974.678571][ T5818] ni6501 8-1:5.123: driver 'ni6501' failed to auto-configure device.
[  974.687121][ T5826] usb 4-1: USB disconnect, device number 107
[  974.774957][ T5818] usb 8-1: USB disconnect, device number 4
[  974.817521][T10922] IPVS: stop unused estimator thread 0...
[  975.120938][ T9124] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  975.204375][T15375] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2482'.
[  975.218909][T15373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  975.271991][ T9124] usb 7-1: device descriptor read/64, error -71
[  975.430677][   T30] audit: type=1400 audit(1780818991.286:999): avc:  denied  { write } for  pid=15356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  975.472822][T15384] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2485'.
[  975.560881][ T9124] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  975.575338][   T30] audit: type=1400 audit(1780818991.436:1000): avc:  denied  { write } for  pid=15386 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  975.710429][ T9124] usb 7-1: device descriptor read/64, error -71
[  975.821233][ T9124] usb usb7-port1: attempt power cycle
[  975.890980][ T5818] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  976.051211][T15408] binder_alloc: 15407: binder_alloc_buf, no vma
[  976.072957][   T30] audit: type=1400 audit(1780818991.926:1001): avc:  denied  { write } for  pid=15394 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  976.116149][ T5818] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[  976.126332][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.136693][ T5818] usb 4-1: Product: syz
[  976.141179][ T5818] usb 4-1: Manufacturer: syz
[  976.145808][ T5818] usb 4-1: SerialNumber: syz
[  976.153328][ T5818] usb 4-1: config 0 descriptor??
[  976.160896][ T9124] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  976.169056][ T5818] hub 4-1:0.0: bad descriptor, ignoring hub
[  976.177497][ T5818] hub 4-1:0.0: probe with driver hub failed with error -5
[  976.191954][ T5818] f81232 4-1:0.0: f81534a converter detected
[  976.212839][ T9124] usb 7-1: device descriptor read/8, error -71
[  976.221981][ T5746] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[  976.345735][   T30] audit: type=1400 audit(1780818992.206:1002): avc:  denied  { write } for  pid=15413 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  976.371110][ T5746] usb 6-1: device descriptor read/64, error -71
[  976.395849][ T5818] usb 4-1: f81534a converter now attached to ttyUSB0
[  976.461250][ T9124] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  976.486873][T15417] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2493'.
[  976.497194][T15185] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  976.501729][ T9124] usb 7-1: device descriptor read/8, error -71
[  976.533229][T15185] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  976.563592][T15185] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  976.586870][T15185] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  976.610054][T15185] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  976.616959][ T5746] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[  976.631454][ T9124] usb usb7-port1: unable to enumerate USB device
[  976.638660][T15185] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  976.655756][T15185] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  976.667511][T15185] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  976.755257][T15185] 8021q: adding VLAN 0 to HW filter on device bond0
[  976.780949][ T5746] usb 6-1: device descriptor read/64, error -71
[  976.789247][T15185] 8021q: adding VLAN 0 to HW filter on device team0
[  976.805936][ T7591] bridge0: port 1(bridge_slave_0) entered blocking state
[  976.813100][ T7591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  976.857901][ T7591] bridge0: port 2(bridge_slave_1) entered blocking state
[  976.865058][ T7591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  976.901550][ T5746] usb usb6-port1: attempt power cycle
[  977.018769][   T30] audit: type=1400 audit(1780818992.876:1003): avc:  denied  { write } for  pid=15418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  977.048728][   T30] audit: type=1400 audit(1780818992.906:1004): avc:  denied  { mounton } for  pid=15435 comm="syz.7.2495" path="/23/file0" dev="tmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  977.218064][   T30] audit: type=1400 audit(1780818993.076:1005): avc:  denied  { write } for  pid=15446 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  977.245139][T15448] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.2496'.
[  977.259140][ T5818] usb 4-1: USB disconnect, device number 108
[  977.261894][ T5746] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[  977.284547][ T5818] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  977.299833][T15448] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2496'.
[  977.313055][ T5746] usb 6-1: device descriptor read/8, error -71
[  977.324055][ T5818] f81232 4-1:0.0: device disconnected
[  977.402699][T15452] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2497'.
[  977.571110][ T5746] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[  977.604556][ T5746] usb 6-1: device descriptor read/8, error -71
[  977.721297][ T5746] usb usb6-port1: unable to enumerate USB device
[  977.753476][T15448] QAT: Stopping all acceleration devices.
[  977.789881][T15185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  977.978605][T15476] batman_adv: batadv0: Adding interface: vxlan0
[  977.997756][T15476] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  978.064026][T15476] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active
[  978.074527][   T30] audit: type=1400 audit(1780818993.936:1006): avc:  denied  { write } for  pid=15454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  978.300722][   T30] audit: type=1400 audit(1780818994.156:1007): avc:  denied  { write } for  pid=15486 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  978.490913][ T5738] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  978.595795][T15492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2501'.
[  978.642618][ T5738] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  978.665806][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  978.711901][ T5738] usb 7-1: config 0 descriptor??
[  978.732802][ T5738] gspca_main: cpia1-2.14.0 probing 0813:0001
[  978.774848][T15185] veth0_vlan: entered promiscuous mode
[  978.848903][T15185] veth1_vlan: entered promiscuous mode
[  978.979866][T15185] veth0_macvtap: entered promiscuous mode
[  979.030691][T15185] veth1_macvtap: entered promiscuous mode
[  979.154009][ T5738] gspca_cpia1: usb_control_msg 03, error -71
[  979.158238][T15185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  979.210088][ T5738] gspca_cpia1: usb_control_msg 01, error -71
[  979.228296][ T5738] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  979.271576][T15185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  979.271991][ T5738] usb 7-1: USB disconnect, device number 25
[  979.346255][   T30] audit: type=1400 audit(1780818995.206:1008): avc:  denied  { write } for  pid=15501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  979.419935][ T5772] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  979.449932][ T5772] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  979.486223][ T5772] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  979.517349][ T5772] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  979.663656][   T30] audit: type=1400 audit(1780818995.506:1009): avc:  denied  { write } for  pid=15516 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  979.913411][ T5772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  979.956413][ T5772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  980.064779][T15522] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2507'.
[  980.107355][ T5772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  980.162705][ T5772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  980.468591][T15537] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2510'.
[  980.647197][T15539] QAT: Stopping all acceleration devices.
[  980.701240][   T30] audit: type=1400 audit(1780818996.556:1010): avc:  denied  { write } for  pid=15521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  981.013355][   T30] audit: type=1400 audit(1780818996.866:1011): avc:  denied  { write } for  pid=15554 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  981.371604][ T5818] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[  981.380732][T15575] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2519'.
[  981.564345][ T5818] usb 6-1: unable to get BOS descriptor or descriptor too short
[  981.586225][ T5818] usb 6-1: not running at top speed; connect to a high speed hub
[  981.616062][ T5818] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[  981.642863][ T5818] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[  981.667881][ T5818] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  981.702576][ T5818] usb 6-1: config 14 has no interface number 0
[  981.722574][ T5818] usb 6-1: config 14 has no interface number 1
[  981.739078][ T5818] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  981.800872][ T5818] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  981.822192][ T5818] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  981.856041][ T5818] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[  981.880983][ T5818] usb 6-1: config 14 interface 57 has no altsetting 0
[  981.896927][ T5818] usb 6-1: config 14 interface 228 has no altsetting 0
[  981.909392][ T5818] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  981.925842][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.946021][ T5818] usb 6-1: Product: syz
[  981.955660][ T5818] usb 6-1: Manufacturer: syz
[  981.965779][ T5818] usb 6-1: SerialNumber: syz
[  982.032036][   T30] audit: type=1400 audit(1780818997.896:1012): avc:  denied  { write } for  pid=15565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  982.081359][ T9990] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  982.174653][   T30] audit: type=1400 audit(1780818998.036:1013): avc:  denied  { write } for  pid=15589 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  982.252713][ T9990] usb 7-1: Using ep0 maxpacket: 32
[  982.314971][ T9990] usb 7-1: no configurations
[  982.319805][ T9990] usb 7-1: can't read configurations, error -22
[  982.451820][ T9990] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  982.463953][ T5818] legousbtower 6-1:14.57: interrupt endpoints not found
[  982.614980][ T9990] usb 7-1: Using ep0 maxpacket: 32
[  982.634165][ T9990] usb 7-1: no configurations
[  982.649054][ T9990] usb 7-1: can't read configurations, error -22
[  982.676705][ T9990] usb usb7-port1: attempt power cycle
[  982.716501][T15594] "syz.3.2523" (15594) uses obsolete ecb(arc4) skcipher
[  982.881759][ T5818] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[  982.914229][ T5818] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  982.929054][T15610] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  982.977646][   T30] audit: type=1400 audit(1780818998.836:1014): avc:  denied  { write } for  pid=15593 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  982.981903][T15610] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  983.065448][ T9990] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  983.103453][ T9990] usb 7-1: Using ep0 maxpacket: 32
[  983.114689][ T9990] usb 7-1: no configurations
[  983.131540][ T9990] usb 7-1: can't read configurations, error -22
[  983.280965][ T9990] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  983.324719][ T9990] usb 7-1: Using ep0 maxpacket: 32
[  983.343943][ T9990] usb 7-1: no configurations
[  983.354607][   T30] audit: type=1400 audit(1780818999.216:1015): avc:  denied  { write } for  pid=15616 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  983.383166][ T9990] usb 7-1: can't read configurations, error -22
[  983.394373][ T9990] usb usb7-port1: unable to enumerate USB device
[  984.194237][T15561] usb 6-1: LEGO USB Tower reset control request failed
[  984.266335][ T5738] usb 6-1: USB disconnect, device number 52
[  984.319960][ T5738] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected
[  984.412614][T15634] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2532'.
[  984.513079][ T5746] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  984.728487][ T5746] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  984.739500][ T5746] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  984.752046][ T5746] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  984.781336][ T5746] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  984.790440][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  984.838390][ T5746] usb 8-1: config 0 descriptor??
[  985.177105][T15643] QAT: Stopping all acceleration devices.
[  985.296583][ T5746] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0
[  985.902887][ T5812] usb 8-1: USB disconnect, device number 5
[  987.577309][T15592] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  987.962964][   T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  988.106672][   T30] audit: type=1400 audit(1780819003.966:1016): avc:  denied  { write } for  pid=15662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  988.130907][ T5812] usb 4-1: new full-speed USB device number 109 using dummy_hcd
[  988.154690][   T24] usb 7-1: config 0 has an invalid interface number: 2 but max is 0
[  988.162941][   T24] usb 7-1: config 0 has no interface number 0
[  988.169392][   T24] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  988.183888][   T24] usb 7-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  988.194611][   T24] usb 7-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[  988.203941][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.218981][   T24] usb 7-1: config 0 descriptor??
[  988.282613][ T5812] usb 4-1: device descriptor read/64, error -71
[  988.293633][   T30] audit: type=1400 audit(1780819004.156:1017): avc:  denied  { write } for  pid=15690 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  988.315904][ T5746] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  988.470908][ T5746] usb 6-1: Using ep0 maxpacket: 32
[  988.477101][ T5746] usb 6-1: no configurations
[  988.482191][ T9990] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  988.492399][ T5746] usb 6-1: can't read configurations, error -22
[  988.541210][ T5812] usb 4-1: new full-speed USB device number 110 using dummy_hcd
[  988.579293][   T30] audit: type=1400 audit(1780819004.436:1018): avc:  denied  { write } for  pid=15693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  988.621053][ T5746] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  988.641194][ T9990] usb 5-1: Using ep0 maxpacket: 16
[  988.654674][ T9990] usb 5-1: unable to get BOS descriptor or descriptor too short
[  988.664810][   T24] asus 0003:0B05:17E0.0030: unknown main item tag 0x0
[  988.681033][ T5812] usb 4-1: device descriptor read/64, error -71
[  988.681284][   T24] asus 0003:0B05:17E0.0030: unknown main item tag 0x0
[  988.697320][   T30] audit: type=1400 audit(1780819004.556:1019): avc:  denied  { write } for  pid=15704 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  988.704096][   T24] asus 0003:0B05:17E0.0030: unknown main item tag 0x0
[  988.726750][ T9990] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  988.740581][   T24] asus 0003:0B05:17E0.0030: unknown main item tag 0x0
[  988.747907][ T9990] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  988.759092][   T24] asus 0003:0B05:17E0.0030: unknown main item tag 0x0
[  988.766012][ T9990] usb 5-1: config 1 interface 1 has no altsetting 0
[  988.772703][   T24] asus 0003:0B05:17E0.0030: unknown main item tag 0x0
[  988.779622][   T24] asus 0003:0B05:17E0.0030: unknown main item tag 0x0
[  988.788476][ T9990] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  988.799684][ T9990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  988.801350][ T5812] usb usb4-port1: attempt power cycle
[  988.808203][   T24] asus 0003:0B05:17E0.0030: hidraw0: USB HID v0.00 Device [HID 0b05:17e0] on usb-dummy_hcd.6-1/input2
[  988.824857][ T5746] usb 6-1: Using ep0 maxpacket: 32
[  988.840884][ T9990] usb 5-1: Product: syz
[  988.845521][ T5746] usb 6-1: no configurations
[  988.851491][ T5746] usb 6-1: can't read configurations, error -22
[  988.857776][ T9990] usb 5-1: Manufacturer: syz
[  988.872263][   T24] usb 7-1: USB disconnect, device number 30
[  988.879425][ T9990] usb 5-1: SerialNumber: syz
[  988.884473][ T5746] usb usb6-port1: attempt power cycle
[  988.986116][T15709] fido_id[15709]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  989.104952][ T9990] usb 5-1: Audio class v2/v3 interfaces need an interface association
[  989.113697][ T9990] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  989.146561][   T30] audit: type=1400 audit(1780819005.006:1020): avc:  denied  { write } for  pid=15706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  989.170653][ T5812] usb 4-1: new full-speed USB device number 111 using dummy_hcd
[  989.202807][ T5812] usb 4-1: device descriptor read/8, error -71
[  989.229481][   T30] audit: type=1400 audit(1780819005.086:1021): avc:  denied  { write } for  pid=15718 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  989.235154][ T5746] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  989.291622][ T5746] usb 6-1: Using ep0 maxpacket: 32
[  989.298072][ T5746] usb 6-1: no configurations
[  989.302947][ T5746] usb 6-1: can't read configurations, error -22
[  989.443979][ T5746] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  989.461513][ T5812] usb 4-1: new full-speed USB device number 112 using dummy_hcd
[  989.471582][ T5746] usb 6-1: Using ep0 maxpacket: 32
[  989.485652][ T5746] usb 6-1: no configurations
[  989.500680][ T5746] usb 6-1: can't read configurations, error -22
[  989.512761][ T5812] usb 4-1: device descriptor read/8, error -71
[  989.521069][ T5746] usb usb6-port1: unable to enumerate USB device
[  989.607587][ T9990] usb 5-1: USB disconnect, device number 65
[  989.633260][   T30] audit: type=1400 audit(1780819005.496:1022): avc:  denied  { write } for  pid=15720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  989.669191][ T5812] usb usb4-port1: unable to enumerate USB device
[  989.716250][ T5941] udevd[5941]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  989.803983][   T30] audit: type=1400 audit(1780819005.666:1023): avc:  denied  { write } for  pid=15735 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  990.024876][   T30] audit: type=1400 audit(1780819005.886:1024): avc:  denied  { write } for  pid=15739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  990.048121][   T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd
[  990.130765][   T30] audit: type=1400 audit(1780819005.986:1025): avc:  denied  { write } for  pid=15750 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  990.166716][T15752] kernel read not supported for file /file0 (pid: 15752 comm: syz.4.2549)
[  990.179221][   T30] audit: type=1800 audit(1780819006.036:1026): pid=15752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2549" name="file0" dev="mqueue" ino=54190 res=0 errno=0
[  990.213623][   T24] usb 7-1: config 0 has an invalid interface number: 50 but max is 0
[  990.228142][   T24] usb 7-1: config 0 has no interface number 0
[  990.242618][   T24] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  990.269201][   T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  990.293174][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  990.305880][   T24] usb 7-1: Product: syz
[  990.307960][T15755] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2550'.
[  990.310082][   T24] usb 7-1: Manufacturer: syz
[  990.325407][   T24] usb 7-1: SerialNumber: syz
[  990.337220][   T24] usb 7-1: config 0 descriptor??
[  990.372440][   T24] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0
[  990.489432][T15761] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2553'.
[  990.664157][T15761] QAT: Stopping all acceleration devices.
[  990.701356][ T9124] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  990.863788][ T9124] usb 8-1: unable to get BOS descriptor or descriptor too short
[  990.875166][ T9124] usb 8-1: not running at top speed; connect to a high speed hub
[  990.912929][ T9124] usb 8-1: config 14 has an invalid interface number: 57 but max is 1
[  990.939681][ T9124] usb 8-1: config 14 has an invalid interface number: 228 but max is 1
[  990.971530][ T9124] usb 8-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[  990.988856][ T9124] usb 8-1: config 14 has no interface number 0
[  990.996845][ T9124] usb 8-1: config 14 has no interface number 1
[  991.003759][ T9124] usb 8-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  991.016296][ T9124] usb 8-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  991.028630][ T9124] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  991.040359][ T9124] usb 8-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[  991.068202][ T9124] usb 8-1: config 14 interface 57 has no altsetting 0
[  991.075217][ T9124] usb 8-1: config 14 interface 228 has no altsetting 0
[  991.085454][T15768] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  991.112272][ T9124] usb 8-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  991.121926][T15768] kvm: pic: non byte read
[  991.126483][ T9124] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.135907][T15768] kvm: pic: level sensitive irq not supported
[  991.136306][T15768] kvm: pic: non byte read
[  991.147390][ T9124] usb 8-1: Product: syz
[  991.152413][ T9124] usb 8-1: Manufacturer: syz
[  991.165090][T15768] kvm: pic: level sensitive irq not supported
[  991.165241][T15768] kvm: pic: non byte read
[  991.181038][ T9124] usb 8-1: SerialNumber: syz
[  991.194025][T15768] kvm: pic: level sensitive irq not supported
[  991.194089][T15768] kvm: pic: non byte read
[  991.458922][T15781] kernel read not supported for file /file0 (pid: 15781 comm: syz.3.2560)
[  991.486527][   T30] audit: type=1800 audit(1780819007.346:1027): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2560" name="file0" dev="mqueue" ino=53170 res=0 errno=0
[  991.491033][ T9990] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[  991.632655][ T9124] legousbtower 8-1:14.57: interrupt endpoints not found
[  991.715040][ T9990] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  991.724565][ T9990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.733609][ T9990] usb 6-1: Product: syz
[  991.738043][ T9990] usb 6-1: Manufacturer: syz
[  991.743260][ T9990] usb 6-1: SerialNumber: syz
[  991.753013][ T9990] usb 6-1: config 0 descriptor??
[  991.974681][ T9990] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  992.033031][ T9124] legousbtower 8-1:14.228: get version request failed: -121
[  992.041040][ T9124] legousbtower 8-1:14.228: probe with driver legousbtower failed with error -121
[  992.146641][T15788] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2563'.
[  992.283542][T15790] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2564'.
[  992.471841][T15790] QAT: Stopping all acceleration devices.
[  992.663469][    C1] usb 7-1: yurex_control_callback - control failed: -2
[  992.686365][ T9124] usb 8-1: USB disconnect, device number 6
[  992.686548][ T5746] usb 7-1: USB disconnect, device number 31
[  992.730614][ T5746] yurex 7-1:0.50: USB YUREX #0 now disconnected
[  992.749930][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  992.756423][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  993.100900][   T29] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  993.254076][   T29] usb 5-1: Using ep0 maxpacket: 32
[  993.272047][   T29] usb 5-1: no configurations
[  993.280339][T15815] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  993.285967][   T29] usb 5-1: can't read configurations, error -22
[  993.335504][T15815] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  993.375704][T15817] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2574'.
[  993.431870][   T29] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  993.590912][   T29] usb 5-1: Using ep0 maxpacket: 32
[  993.602560][   T29] usb 5-1: no configurations
[  993.607732][   T29] usb 5-1: can't read configurations, error -22
[  993.619735][ T9990] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  993.632437][   T29] usb usb5-port1: attempt power cycle
[  993.645692][ T9990] usb 6-1: USB disconnect, device number 57
[  993.783217][ T5738] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  993.791100][ T5746] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  993.955500][ T5738] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  993.968914][ T5738] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  993.978420][ T5738] usb 4-1: Product: syz
[  993.983579][   T29] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  993.991956][ T5746] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  994.001278][ T5738] usb 4-1: SerialNumber: syz
[  994.016130][ T5746] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  994.025946][ T5738] usb 4-1: config 0 descriptor??
[  994.034319][   T29] usb 5-1: Using ep0 maxpacket: 32
[  994.041939][ T5746] usb 8-1: Product: syz
[  994.048721][   T29] usb 5-1: no configurations
[  994.053855][   T29] usb 5-1: can't read configurations, error -22
[  994.060192][ T5746] usb 8-1: Manufacturer: syz
[  994.072102][ T5746] usb 8-1: SerialNumber: syz
[  994.210983][   T29] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  994.252574][   T29] usb 5-1: Using ep0 maxpacket: 32
[  994.267797][ T5738] hso 4-1:0.0: Failed to find BULK eps
[  994.277411][   T29] usb 5-1: no configurations
[  994.292719][   T29] usb 5-1: can't read configurations, error -22
[  994.317073][   T29] usb usb5-port1: unable to enumerate USB device
[  994.429870][T15850] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2589'.
[  994.501548][ T5746] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  994.514695][ T5746] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  994.530780][   T29] usb 4-1: USB disconnect, device number 113
[  994.942659][T15857] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  995.061601][ T5738] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  995.229845][ T5738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  995.254852][ T5738] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  995.273821][ T5738] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  995.287310][ T5738] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  995.296639][ T5738] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.314474][ T5738] usb 6-1: config 0 descriptor??
[  995.520924][ T5812] usb 7-1: new full-speed USB device number 32 using dummy_hcd
[  995.559146][ T5746] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE
[  995.571412][ T5746] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  995.581768][ T5746] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  995.592284][ T5746] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -32
[  995.684717][ T5812] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  995.693983][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.702490][ T5812] usb 7-1: Product: syz
[  995.706710][ T5812] usb 7-1: Manufacturer: syz
[  995.711349][ T5812] usb 7-1: SerialNumber: syz
[  995.719239][ T5812] usb 7-1: config 0 descriptor??
[  995.737620][ T5738] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0
[  995.745543][ T5738] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0
[  995.754365][ T5738] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0
[  995.762382][ T5738] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0
[  995.769797][ T5738] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0
[  995.778166][ T5738] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0
[  995.786008][ T5738] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0
[  995.794334][ T5738] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0
[  995.802679][ T5738] plantronics 0003:047F:FFFF.0031: unknown main item tag 0x0
[  995.818629][ T5738] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  995.938875][ T5812] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  996.004063][ T5738] usb 6-1: USB disconnect, device number 58
[  996.632956][ T9124] usb 8-1: USB disconnect, device number 7
[  996.914292][ T5818] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  997.113698][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  997.135659][ T5818] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  997.147863][ T5818] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  997.162077][ T5818] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  997.177368][ T5818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.216093][ T5818] usb 6-1: config 0 descriptor??
[  997.399193][T15869] netlink: 'syz.6.2597': attribute type 3 has an invalid length.
[  997.408501][T15869] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2597'.
[  997.630261][ T5812] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  997.661425][ T5812] usb 7-1: USB disconnect, device number 32
[  997.671655][ T5818] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  999.948840][ T5812] usb 6-1: reset high-speed USB device number 59 using dummy_hcd
[ 1000.182335][ T5812] usb 6-1: device firmware changed
[ 1000.238831][   T29] usb 6-1: USB disconnect, device number 59
[ 1000.430343][   T29] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1000.594977][   T29] usb 6-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 1000.604221][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1000.612452][   T29] usb 6-1: Product: syz
[ 1000.616707][   T29] usb 6-1: Manufacturer: syz
[ 1000.631650][   T29] usb 6-1: SerialNumber: syz
[ 1000.650759][   T29] usb 6-1: config 0 descriptor??
[ 1001.009948][T15919] program syz.5.2608 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1001.038618][T15911] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1001.048996][T15909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2607'.
[ 1001.430918][ T5812] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 1001.501016][ T9990] usb 4-1: new full-speed USB device number 114 using dummy_hcd
[ 1001.530899][ T5746] usb 7-1: new full-speed USB device number 33 using dummy_hcd
[ 1001.590902][ T5812] usb 5-1: Using ep0 maxpacket: 32
[ 1001.606364][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1001.622213][ T5812] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1001.637098][ T5812] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1001.647814][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.658475][ T5812] usb 5-1: Product: syz
[ 1001.663499][ T9990] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1001.665144][ T5812] usb 5-1: Manufacturer: syz
[ 1001.677409][ T5812] usb 5-1: SerialNumber: syz
[ 1001.683727][ T5746] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1001.685324][ T5812] usb 5-1: config 0 descriptor??
[ 1001.693306][ T9990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1001.727757][ T5746] usb 7-1: not running at top speed; connect to a high speed hub
[ 1001.743481][ T9990] usb 4-1: config 0 has no interfaces?
[ 1001.761498][ T9990] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1001.769887][T15936] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2615'.
[ 1001.770696][ T5746] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[ 1001.791220][ T9990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.800323][ T5746] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[ 1001.809796][ T9990] usb 4-1: config 0 descriptor??
[ 1001.814992][ T5746] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[ 1001.831494][ T5746] usb 7-1: config 14 has no interface number 0
[ 1001.839238][ T5746] usb 7-1: config 14 has no interface number 1
[ 1001.845677][ T5746] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1001.874416][ T5746] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1001.888256][ T5746] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1001.899637][ T5746] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[ 1001.916268][ T5746] usb 7-1: config 14 interface 57 has no altsetting 0
[ 1001.923256][ T5746] usb 7-1: config 14 interface 228 has no altsetting 0
[ 1001.932094][ T5746] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1001.944652][ T5746] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.952767][ T5746] usb 7-1: Product: syz
[ 1001.956955][ T5746] usb 7-1: Manufacturer: syz
[ 1001.961638][ T5746] usb 7-1: SerialNumber: syz
[ 1002.110893][ T5812] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[ 1002.261683][ T5812] usb 8-1: Using ep0 maxpacket: 32
[ 1002.268551][ T5812] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1002.278941][ T5812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1002.289268][ T5812] usb 8-1: config 0 descriptor??
[ 1002.384456][ T5746] legousbtower 7-1:14.57: interrupt endpoints not found
[ 1002.507353][ T5812] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1002.517442][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1002.529689][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1002.537062][ T5812] usb 8-1: media controller created
[ 1002.554358][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1002.571605][   T29] cx82310_eth 6-1:0.0: probe with driver cx82310_eth failed with error -22
[ 1002.591198][   T29] cxacru 6-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1002.605747][ T5746] legousbtower 7-1:14.228: get version request failed: -71
[ 1002.615546][   T29] usb 6-1: USB disconnect, device number 60
[ 1002.622497][ T5746] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71
[ 1002.650086][ T5746] usb 7-1: USB disconnect, device number 33
[ 1003.120896][   T29] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1003.195164][T15945] syzkaller0: entered promiscuous mode
[ 1003.200688][T15945] syzkaller0: entered allmulticast mode
[ 1003.340856][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1003.351887][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1003.361747][   T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1003.375058][   T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1003.384231][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1003.398139][   T29] usb 6-1: config 0 descriptor??
[ 1003.559084][ T5812] stb0899_attach: Driver disabled by Kconfig
[ 1003.565415][ T5812] az6027: no front-end attached
[ 1003.565415][ T5812] 
[ 1003.590473][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1003.599619][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input43
[ 1003.649655][ T5812] dvb-usb: schedule remote query interval to 400 msecs.
[ 1003.659279][ T5812] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1003.875878][ T5746] usb 8-1: USB disconnect, device number 8
[ 1003.940760][   T29] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1004.082850][   T29] usb 6-1: USB disconnect, device number 61
[ 1004.234658][ T5812] usb 5-1: USB disconnect, device number 70
[ 1004.269305][ T5745] usb 4-1: USB disconnect, device number 114
[ 1004.310649][ T5746] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1005.518175][T15989] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2626'.
[ 1005.840935][ T5794] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1005.995202][ T5794] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 1006.004542][ T5794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1006.013802][ T5794] usb 4-1: Product: syz
[ 1006.018034][ T5794] usb 4-1: Manufacturer: syz
[ 1006.024180][ T5794] usb 4-1: SerialNumber: syz
[ 1006.031756][ T5794] usb 4-1: config 0 descriptor??
[ 1006.346062][T15992] program syz.3.2627 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1006.446004][ T5794] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22
[ 1006.460571][ T5794] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1006.486537][ T5794] usb 4-1: USB disconnect, device number 115
[ 1008.268759][T15983] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1008.611018][ T5812] usb 7-1: new full-speed USB device number 34 using dummy_hcd
[ 1008.742100][ T5745] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1008.820115][ T5812] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1008.830237][ T5812] usb 7-1: not running at top speed; connect to a high speed hub
[ 1008.841682][ T5794] usb 6-1: new full-speed USB device number 62 using dummy_hcd
[ 1008.869259][ T5812] usb 7-1: config 14 has an invalid interface number: 57 but max is 1
[ 1008.877564][ T5812] usb 7-1: config 14 has an invalid interface number: 228 but max is 1
[ 1008.886220][ T5812] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[ 1008.906220][ T5812] usb 7-1: config 14 has no interface number 0
[ 1008.912508][ T5812] usb 7-1: config 14 has no interface number 1
[ 1008.918742][ T5812] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1008.931116][ T5745] usb 8-1: Using ep0 maxpacket: 32
[ 1008.955848][ T5812] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1008.970033][ T5812] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1008.971717][ T5745] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1008.981874][ T5812] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[ 1008.991743][   T29] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1009.004577][ T5812] usb 7-1: config 14 interface 57 has no altsetting 0
[ 1009.027767][ T5745] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1009.038266][ T5794] usb 6-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1009.049357][ T5794] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1009.057080][ T5745] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1009.069092][ T5745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.092310][ T5745] usb 8-1: Product: syz
[ 1009.096537][ T5745] usb 8-1: Manufacturer: syz
[ 1009.097119][ T5794] usb 6-1: config 0 has no interfaces?
[ 1009.107011][ T5794] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1009.116465][ T5812] usb 7-1: config 14 interface 228 has no altsetting 0
[ 1009.118874][ T5745] usb 8-1: SerialNumber: syz
[ 1009.124555][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.156432][ T5794] usb 6-1: config 0 descriptor??
[ 1009.158046][ T5745] usb 8-1: config 0 descriptor??
[ 1009.169815][ T5812] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1009.185341][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.196429][ T5812] usb 7-1: Product: syz
[ 1009.200648][ T5812] usb 7-1: Manufacturer: syz
[ 1009.213884][ T5812] usb 7-1: SerialNumber: syz
[ 1009.214202][   T29] usb 4-1: Using ep0 maxpacket: 16
[ 1009.237153][   T29] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1009.263134][   T29] usb 4-1: config 3 has an invalid interface number: 74 but max is 0
[ 1009.271448][   T29] usb 4-1: config 3 has no interface number 0
[ 1009.278157][   T29] usb 4-1: config 3 interface 74 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64
[ 1009.289619][   T29] usb 4-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xC3, changing to 0x83
[ 1009.318781][   T29] usb 4-1: config 3 interface 74 altsetting 1 has a duplicate endpoint with address 0x5, skipping
[ 1009.329617][   T29] usb 4-1: config 3 interface 74 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8
[ 1009.339530][   T29] usb 4-1: config 3 interface 74 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1009.367014][   T29] usb 4-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0xB1, changing to 0x81
[ 1009.408904][   T29] usb 4-1: config 3 interface 74 altsetting 1 endpoint 0x81 has invalid maxpacket 9507, setting to 1024
[ 1009.424220][   T29] usb 4-1: config 3 interface 74 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024
[ 1009.451461][   T29] usb 4-1: config 3 interface 74 altsetting 1 has an endpoint descriptor with address 0x49, changing to 0x9
[ 1009.464038][   T29] usb 4-1: config 3 interface 74 altsetting 1 endpoint 0x9 has invalid maxpacket 17751, setting to 1024
[ 1009.492225][   T29] usb 4-1: config 3 interface 74 altsetting 1 bulk endpoint 0x9 has invalid maxpacket 1024
[ 1009.525807][   T29] usb 4-1: config 3 interface 74 altsetting 1 has 9 endpoint descriptors, different from the interface descriptor's value: 7
[ 1009.565422][   T29] usb 4-1: config 3 interface 74 has no altsetting 0
[ 1009.624270][   T29] usb 4-1: New USB device found, idVendor=045e, idProduct=0468, bcdDevice=b2.9c
[ 1009.633484][   T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1009.658920][   T29] usb 4-1: Product: syz
[ 1009.663263][   T29] usb 4-1: Manufacturer: syz
[ 1009.667899][   T29] usb 4-1: SerialNumber: syz
[ 1009.670087][ T5812] legousbtower 7-1:14.57: interrupt endpoints not found
[ 1009.698053][T16009] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 1009.709752][T16009] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 1009.718256][T16009] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22
[ 1009.942207][ T5812] legousbtower 7-1:14.228: get version request failed: -71
[ 1009.950509][ T5812] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71
[ 1009.954299][   T29] ipaq 4-1:3.74: PocketPC PDA converter detected
[ 1009.974011][ T5812] usb 7-1: USB disconnect, device number 34
[ 1009.984966][   T29] usb 4-1: active config #3 != 1 ??
[ 1010.026989][   T29] usb 4-1: USB disconnect, device number 116
[ 1010.880911][ T5812] usb 7-1: new low-speed USB device number 35 using dummy_hcd
[ 1011.053182][ T5812] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1011.079115][ T5812] usb 7-1: config 0 has no interface number 0
[ 1011.085389][ T5812] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1011.096499][ T5812] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1011.124631][ T5812] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1011.134010][ T5812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1011.174245][ T5812] usb 7-1: config 0 descriptor??
[ 1011.179915][T16019] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1011.223607][ T5812] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1011.482200][ T5812] usb 8-1: USB disconnect, device number 9
[ 1011.482200][    C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1
[ 1011.485962][ T5745] usb 7-1: USB disconnect, device number 35
[ 1011.580344][ T5818] usb 6-1: USB disconnect, device number 62
[ 1011.867331][   T30] audit: type=1400 audit(1780819027.726:1028): avc:  denied  { setopt } for  pid=16026 comm="syz.7.2641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1012.681171][ T5812] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[ 1012.844983][ T5812] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1012.854528][ T5812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.862893][ T5812] usb 7-1: Product: syz
[ 1012.867178][ T5812] usb 7-1: Manufacturer: syz
[ 1012.871910][ T5812] usb 7-1: SerialNumber: syz
[ 1013.312030][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1013.340289][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1013.820993][ T5794] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1013.987282][ T5794] usb 4-1: Using ep0 maxpacket: 32
[ 1013.998355][ T5794] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1014.010213][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.069325][ T5794] usb 4-1: config 0 descriptor??
[ 1014.282375][ T5794] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1014.321616][ T5794] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1014.337894][ T5794] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1014.347312][ T5794] usb 4-1: media controller created
[ 1014.362735][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1014.490932][ T5745] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1014.635088][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1014.647586][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[ 1014.660950][ T5746] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[ 1014.670349][ T5745] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1014.680698][ T5745] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1014.689183][ T5745] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[ 1014.698913][ T5745] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1014.706966][ T5745] usb 5-1: Product: syz
[ 1014.711271][ T5745] usb 5-1: Manufacturer: syz
[ 1014.715873][ T5745] usb 5-1: SerialNumber: syz
[ 1014.722881][ T5745] usb 5-1: config 0 descriptor??
[ 1014.731209][ T5745] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[ 1014.742560][ T5745] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1014.753402][ T5745] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[ 1014.762203][ T5745] usb 5-1: media controller created
[ 1014.776713][ T5745] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1014.823416][ T5745] DVB: Unable to find symbol tda10046_attach()
[ 1014.829960][ T5745] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[ 1014.838697][ T5745] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[ 1014.848316][ T5746] usb 8-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1014.856762][ T5746] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1014.870052][ T5746] usb 8-1: config 0 has no interfaces?
[ 1014.875799][ T5746] usb 8-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1014.885261][ T5746] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1014.897028][ T5746] usb 8-1: config 0 descriptor??
[ 1015.101530][ T5794] az6027: usb out operation failed. (-71)
[ 1015.115699][ T5794] stb0899_attach: Driver disabled by Kconfig
[ 1015.124404][ T5794] az6027: no front-end attached
[ 1015.124404][ T5794] 
[ 1015.132982][ T5794] az6027: usb out operation failed. (-71)
[ 1015.138785][ T5794] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1015.150628][ T5794] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input44
[ 1015.180674][ T5745] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[ 1015.220765][ T5794] dvb-usb: schedule remote query interval to 400 msecs.
[ 1015.222157][ T5745] usb 5-1: USB disconnect, device number 71
[ 1015.235348][T16074] binder: BINDER_SET_CONTEXT_MGR already set
[ 1015.248021][T16074] binder: 16073:16074 ioctl 4018620d 2000000002c0 returned -16
[ 1015.268173][ T5794] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1015.288663][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO
[ 1015.320374][ T5794] usb 4-1: USB disconnect, device number 117
[ 1015.333676][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1015.347364][ T5812] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1015.372857][ T5812] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71
[ 1015.384467][ T5794] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1015.397952][ T5812] usb 7-1: USB disconnect, device number 36
[ 1015.940964][ T5745] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1016.117941][ T5745] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[ 1016.127136][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.135247][ T5745] usb 4-1: Product: syz
[ 1016.139498][ T5745] usb 4-1: Manufacturer: syz
[ 1016.144229][ T5745] usb 4-1: SerialNumber: syz
[ 1016.150684][ T5745] usb 4-1: config 0 descriptor??
[ 1016.428798][T16090] program syz.3.2654 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1016.445251][ T5745] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22
[ 1016.490505][ T5745] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[ 1016.520852][ T5745] usb 4-1: USB disconnect, device number 118
[ 1017.369208][ T5794] usb 8-1: USB disconnect, device number 10
[ 1017.474030][T16101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1017.980336][ T5812] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1018.131256][ T5812] usb 4-1: Using ep0 maxpacket: 32
[ 1018.138569][ T5812] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1018.169653][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1018.210131][ T5812] usb 4-1: config 0 descriptor??
[ 1018.435015][ T5812] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1018.484105][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1018.497203][ T5812] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1018.525156][ T5812] usb 4-1: media controller created
[ 1018.546826][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1018.671898][ T5818] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1018.842841][ T5818] usb 5-1: Using ep0 maxpacket: 32
[ 1018.852075][ T5818] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1018.889881][ T5818] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1018.899520][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1018.907932][ T5818] usb 5-1: Product: syz
[ 1018.930724][ T5818] usb 5-1: Manufacturer: syz
[ 1018.936887][ T5818] usb 5-1: SerialNumber: syz
[ 1018.958753][ T5818] usb 5-1: config 0 descriptor??
[ 1019.201879][T16116] binder: 16115:16116 ioctl c0306201 200000000180 returned -14
[ 1019.319760][ T5812] az6027: usb out operation failed. (-71)
[ 1019.327208][ T5812] stb0899_attach: Driver disabled by Kconfig
[ 1019.336241][ T5812] az6027: no front-end attached
[ 1019.336241][ T5812] 
[ 1019.344461][ T5812] az6027: usb out operation failed. (-71)
[ 1019.350251][ T5812] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1019.376697][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45
[ 1019.436197][ T5812] dvb-usb: schedule remote query interval to 400 msecs.
[ 1019.443269][ T5812] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1019.454734][ T5812] usb 4-1: USB disconnect, device number 119
[ 1019.558319][ T5812] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1021.203502][ T5812] usb 4-1: new full-speed USB device number 120 using dummy_hcd
[ 1021.426081][ T5812] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1021.435113][ T5812] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1021.457473][ T5812] usb 4-1: config 0 has no interfaces?
[ 1021.467939][ T5794] usb 5-1: USB disconnect, device number 72
[ 1021.494132][ T5812] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1021.527424][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1021.558395][ T5812] usb 4-1: config 0 descriptor??
[ 1022.468956][ T5745] usb 4-1: USB disconnect, device number 120
[ 1023.463175][ T5746] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1023.627366][ T5746] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1023.638073][ T5746] usb 6-1: config 0 has no interfaces?
[ 1023.643700][ T5746] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1023.653756][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.664670][ T5746] usb 6-1: config 0 descriptor??
[ 1023.780956][ T5745] usb 8-1: new full-speed USB device number 11 using dummy_hcd
[ 1023.882299][   T30] audit: type=1400 audit(1780819039.746:1029): avc:  denied  { ioctl } for  pid=16138 comm="syz.5.2677" path="/dev/usbmon0" dev="devtmpfs" ino=717 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1023.921478][ T5812] usb 6-1: USB disconnect, device number 63
[ 1023.933485][ T5745] usb 8-1: config 5 has an invalid interface number: 123 but max is 0
[ 1023.953840][ T5745] usb 8-1: config 5 has no interface number 0
[ 1023.975965][ T5745] usb 8-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[ 1023.991861][ T5746] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[ 1024.009967][ T5745] usb 8-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1024.031540][ T5745] usb 8-1: config 5 interface 123 has no altsetting 0
[ 1024.045750][ T5745] usb 8-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[ 1024.065178][ T5745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1024.080848][ T5745] usb 8-1: Product: syz
[ 1024.092596][ T5745] usb 8-1: Manufacturer: syz
[ 1024.112071][ T5745] usb 8-1: SerialNumber: syz
[ 1024.171007][ T5746] usb 4-1: Using ep0 maxpacket: 16
[ 1024.185596][ T5746] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[ 1024.197684][ T5746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1024.227296][ T5746] usb 4-1: config 0 has no interface number 0
[ 1024.246315][ T5746] usb 4-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[ 1024.273307][ T5746] usb 4-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1024.286945][ T5746] usb 4-1: config 0 interface 41 has no altsetting 0
[ 1024.298125][ T5746] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1024.319797][T16159] netlink: 'syz.6.2685': attribute type 13 has an invalid length.
[ 1024.331938][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1024.349621][T16159] netlink: 'syz.6.2685': attribute type 5 has an invalid length.
[ 1024.357733][ T5746] usb 4-1: Product: syz
[ 1024.362194][ T5746] usb 4-1: Manufacturer: syz
[ 1024.362213][T16151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.366842][ T5746] usb 4-1: SerialNumber: syz
[ 1024.392759][ T5746] usb 4-1: config 0 descriptor??
[ 1024.393980][T16151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.404597][ T5746] sr9700 4-1:0.41: probe with driver sr9700 failed with error -22
[ 1024.429589][T16151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.458184][T16151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.489161][T16151] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2682'.
[ 1024.645964][T16157] netlink: 'syz.3.2684': attribute type 3 has an invalid length.
[ 1024.669426][T16157] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2684'.
[ 1024.714122][ T5745] ni6501 8-1:5.123: driver 'ni6501' failed to auto-configure device.
[ 1024.775969][ T5745] usb 8-1: USB disconnect, device number 11
[ 1024.962693][ T5794] usb 5-1: new full-speed USB device number 73 using dummy_hcd
[ 1025.122386][ T5794] usb 5-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1025.140273][ T5794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1025.166227][ T5812] usb 4-1: USB disconnect, device number 121
[ 1025.177119][ T5794] usb 5-1: config 0 has no interfaces?
[ 1025.192384][ T5794] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1025.212799][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1025.238760][ T5794] usb 5-1: config 0 descriptor??
[ 1025.310400][T16172] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2689'.
[ 1025.377133][T16176] fuse: Bad value for 'fd'
[ 1025.753997][ T5812] usb 6-1: new full-speed USB device number 64 using dummy_hcd
[ 1025.963729][ T5812] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1025.980895][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.991409][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'.
[ 1026.031168][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2693'.
[ 1026.040167][ T5812] usb 6-1: Product: syz
[ 1026.044699][ T5812] usb 6-1: Manufacturer: syz
[ 1026.053712][ T5812] usb 6-1: SerialNumber: syz
[ 1026.109278][ T5812] usb 6-1: config 0 descriptor??
[ 1026.333945][   T29] usb 5-1: USB disconnect, device number 73
[ 1026.364595][ T5812] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1028.091071][T16180] netlink: 'syz.5.2692': attribute type 3 has an invalid length.
[ 1028.117242][T16180] netlink: 164 bytes leftover after parsing attributes in process `syz.5.2692'.
[ 1028.136921][ T5812] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1028.173019][T16207] loop7: detected capacity change from 0 to 7
[ 1028.173236][ T5812] usb 6-1: USB disconnect, device number 64
[ 1028.290945][T16207] Dev loop7: unable to read RDB block 7
[ 1028.301872][T16207]  loop7: unable to read partition table
[ 1028.331129][T16207] loop7: partition table beyond EOD, truncated
[ 1028.339401][T16207] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[ 1028.602769][ T4983] Dev loop7: unable to read RDB block 7
[ 1028.608847][ T4983]  loop7: unable to read partition table
[ 1028.614965][ T4983] loop7: partition table beyond EOD, truncated
[ 1029.093632][ T5812] usb 6-1: new full-speed USB device number 65 using dummy_hcd
[ 1029.298471][T16218] fuse: Bad value for 'fd'
[ 1029.304996][ T5812] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1029.320923][ T5812] usb 6-1: not running at top speed; connect to a high speed hub
[ 1029.368523][ T5812] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[ 1029.396202][ T5812] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[ 1029.406884][ T5812] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[ 1029.418777][ T5812] usb 6-1: config 14 has no interface number 0
[ 1029.441414][ T5812] usb 6-1: config 14 has no interface number 1
[ 1029.464741][ T5812] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1029.476093][ T5812] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1029.504632][ T5812] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1029.516734][ T5812] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[ 1029.528288][ T5812] usb 6-1: config 14 interface 57 has no altsetting 0
[ 1029.553173][ T5812] usb 6-1: config 14 interface 228 has no altsetting 0
[ 1029.626951][ T5812] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1029.631314][ T5745] usb 4-1: new full-speed USB device number 122 using dummy_hcd
[ 1029.636270][ T5812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.652190][ T5812] usb 6-1: Product: syz
[ 1029.672046][ T5812] usb 6-1: Manufacturer: syz
[ 1029.676703][ T5812] usb 6-1: SerialNumber: syz
[ 1029.844581][ T5745] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1029.854073][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1029.863002][ T5745] usb 4-1: Product: syz
[ 1029.867564][ T5745] usb 4-1: Manufacturer: syz
[ 1029.872306][ T5745] usb 4-1: SerialNumber: syz
[ 1029.880212][ T5745] usb 4-1: config 0 descriptor??
[ 1030.104861][ T5745] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1030.177915][ T5812] legousbtower 6-1:14.57: interrupt endpoints not found
[ 1030.429874][ T5812] legousbtower 6-1:14.228: get version request failed: -71
[ 1030.438355][ T5812] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71
[ 1030.469908][ T5812] usb 6-1: USB disconnect, device number 65
[ 1031.290020][ T5794] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1031.483669][ T5794] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1031.493976][ T5794] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1031.502494][ T5794] usb 6-1: Product: syz
[ 1031.520868][ T5794] usb 6-1: SerialNumber: syz
[ 1031.536697][ T5794] usb 6-1: config 0 descriptor??
[ 1031.765015][ T5794] hso 6-1:0.0: Failed to find BULK eps
[ 1031.802671][ T5745] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1031.842687][ T5745] usb 4-1: USB disconnect, device number 122
[ 1032.003859][ T5794] usb 6-1: USB disconnect, device number 66
[ 1032.031110][ T5818] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[ 1032.222998][ T5818] usb 7-1: config index 0 descriptor too short (expected 28277, got 36)
[ 1032.240839][ T5818] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1032.261091][ T5818] usb 7-1: config 0 has no interfaces?
[ 1032.271296][ T5818] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[ 1032.290868][ T5818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.311850][ T5818] usb 7-1: config 0 descriptor??
[ 1032.425292][ T5745] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1032.557052][T16245] fuse: Bad value for 'fd'
[ 1032.581324][ T5745] usb 5-1: Using ep0 maxpacket: 8
[ 1032.589942][ T5745] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1032.614579][ T5745] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1032.638826][ T5745] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 8224, setting to 1024
[ 1032.643013][ T5818] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1032.680149][ T5745] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1032.696747][ T5745] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1032.710095][ T5745] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1032.719487][ T5745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1032.840897][ T5818] usb 4-1: Using ep0 maxpacket: 16
[ 1032.848556][ T5818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1032.854229][   T29] usb 7-1: USB disconnect, device number 37
[ 1032.865520][ T5818] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1032.880727][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1032.893652][ T5818] usb 4-1: Product: syz
[ 1032.898115][ T5818] usb 4-1: Manufacturer: syz
[ 1032.904327][ T5818] usb 4-1: SerialNumber: syz
[ 1032.911398][ T5818] usb 4-1: config 0 descriptor??
[ 1032.919530][ T5818] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1032.929233][ T5818] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1032.930911][ T9990] usb 6-1: new full-speed USB device number 67 using dummy_hcd
[ 1032.948412][T16240] loop2: detected capacity change from 0 to 7
[ 1032.963608][T16240] Dev loop2: unable to read RDB block 7
[ 1032.969361][T16240]  loop2: unable to read partition table
[ 1032.976507][T16240] loop2: partition table beyond EOD, truncated
[ 1032.990876][T16240] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1033.017189][ T5745] usb 5-1: usb_control_msg returned -71
[ 1033.028664][ T5745] usbtmc 5-1:16.0: can't read capabilities
[ 1033.056653][ T5745] usb 5-1: USB disconnect, device number 74
[ 1033.103369][ T9990] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1033.112451][ T9990] usb 6-1: not running at top speed; connect to a high speed hub
[ 1033.122908][ T9990] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[ 1033.137125][ T9990] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[ 1033.145770][ T9990] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config
[ 1033.156191][ T9990] usb 6-1: config 14 has no interface number 0
[ 1033.162403][ T9990] usb 6-1: config 14 has no interface number 1
[ 1033.168720][ T9990] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1033.180551][ T9990] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1033.192604][ T9990] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1033.203958][ T9990] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64
[ 1033.215383][ T9990] usb 6-1: config 14 interface 57 has no altsetting 0
[ 1033.223344][ T9990] usb 6-1: config 14 interface 228 has no altsetting 0
[ 1033.232485][ T9990] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1033.241675][ T9990] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1033.249684][ T9990] usb 6-1: Product: syz
[ 1033.254576][ T9990] usb 6-1: Manufacturer: syz
[ 1033.259209][ T9990] usb 6-1: SerialNumber: syz
[ 1033.526328][ T5818] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1033.686355][ T9990] legousbtower 6-1:14.57: interrupt endpoints not found
[ 1033.714165][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2718'.
[ 1033.738911][T16259] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1958477870 (3916955740 ns) > initial count (2199611658 ns). Using initial count to start timer.
[ 1033.890547][ T9990] legousbtower 6-1:14.228: get version request failed: -71
[ 1033.920085][ T9990] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71
[ 1033.961875][ T9990] usb 6-1: USB disconnect, device number 67
[ 1033.977006][ T5818] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1034.005694][ T5818] em28xx 4-1:0.0: board has no eeprom
[ 1034.173279][T16276] fuse: Invalid rootmode
[ 1034.211220][ T5794] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1034.360973][ T5818] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1034.369020][ T5818] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1034.375514][ T9124] em28xx 4-1:0.0: Binding DVB extension
[ 1034.385600][ T5794] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1034.407578][ T5794] usb 8-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.ba
[ 1034.418822][ T5794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.487120][ T5794] usb 8-1: config 0 descriptor??
[ 1034.524757][ T5794] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1034.730942][   T29] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1034.846994][T16285] xt_CT: No such helper "syz1"
[ 1034.901626][   T29] usb 5-1: Using ep0 maxpacket: 8
[ 1034.909309][   T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1034.920938][   T29] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1034.946580][   T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[ 1034.966462][   T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.986145][   T29] usb 5-1: config 0 descriptor??
[ 1035.279404][T16299] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2733'.
[ 1035.416086][T16303] fuse: Invalid rootmode
[ 1035.491656][ T5794] usb 6-1: new full-speed USB device number 68 using dummy_hcd
[ 1035.521727][   T29] logitech-djreceiver 0003:046D:C534.0034: unknown main item tag 0x0
[ 1035.530661][   T29] logitech-djreceiver 0003:046D:C534.0034: unknown main item tag 0x0
[ 1035.539222][   T29] logitech-djreceiver 0003:046D:C534.0034: unknown main item tag 0x0
[ 1035.548139][   T29] logitech-djreceiver 0003:046D:C534.0034: unknown main item tag 0x0
[ 1035.569566][   T29] logitech-djreceiver 0003:046D:C534.0034: unknown main item tag 0x0
[ 1035.586584][   T29] logitech-djreceiver 0003:046D:C534.0034: unknown main item tag 0x0
[ 1035.601612][   T29] logitech-djreceiver 0003:046D:C534.0034: unknown main item tag 0x0
[ 1035.610980][   T29] logitech-djreceiver 0003:046D:C534.0034: unknown main item tag 0x0
[ 1035.645898][T16243] em28xx 4-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[ 1035.647230][   T29] logitech-djreceiver 0003:046D:C534.0034: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.4-1/input0
[ 1035.693262][ T5794] usb 6-1: config 5 has an invalid interface number: 123 but max is 0
[ 1035.722135][ T5794] usb 6-1: config 5 has no interface number 0
[ 1035.724710][T16281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1035.762659][ T5794] usb 6-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[ 1035.778786][ T5818] usb 4-1: USB disconnect, device number 123
[ 1035.801399][ T5818] em28xx 4-1:0.0: Disconnecting em28xx
[ 1035.808951][T16281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1035.810164][ T5794] usb 6-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[ 1035.857295][ T5794] usb 6-1: config 5 interface 123 has no altsetting 0
[ 1035.885558][ T5794] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[ 1035.919634][ T5794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.934524][ T9124] em28xx 4-1:0.0: Registering input extension
[ 1035.942485][ T5794] usb 6-1: Product: syz
[ 1035.944691][   T29] usb 5-1: USB disconnect, device number 75
[ 1035.946676][ T5794] usb 6-1: Manufacturer: syz
[ 1035.959881][ T5818] em28xx 4-1:0.0: Closing input extension
[ 1035.972100][ T5794] usb 6-1: SerialNumber: syz
[ 1035.989249][T16311] fido_id[16311]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[ 1036.078009][ T5818] em28xx 4-1:0.0: Freeing device
[ 1036.226818][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2734'.
[ 1036.389888][ T5794] ni6501 6-1:5.123: driver 'ni6501' failed to auto-configure device.
[ 1036.407221][ T5794] usb 6-1: USB disconnect, device number 68
[ 1036.760875][ T9124] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[ 1036.901224][   T31] INFO: task syz.0.1955:13759 blocked for more than 143 seconds.
[ 1036.909592][   T31]       Tainted: G             L      syzkaller #0
[ 1036.917057][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1036.917939][ T9124] usb 5-1: Using ep0 maxpacket: 32
[ 1036.933196][   T31] task:syz.0.1955      state:D stack:27736 pid:13759 tgid:13756 ppid:5624   task_flags:0x400040 flags:0x00080002
[ 1036.955693][ T9124] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1036.965178][   T31] Call Trace:
[ 1036.973007][   T31]  <TASK>
[ 1036.979343][   T31]  __schedule+0x1295/0x67a0
[ 1036.982862][ T9124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1036.998245][   T31]  ? __pfx___schedule+0x10/0x10
[ 1037.007878][   T31]  ? find_held_lock+0x2b/0x80
[ 1037.011309][T13498] usb 8-1: USB disconnect, device number 12
[ 1037.015474][   T31]  ? schedule+0x2bf/0x390
[ 1037.023243][   T31]  schedule+0xdd/0x390
[ 1037.039303][ T9124] usb 5-1: config 0 descriptor??
[ 1037.040707][   T31]  super_lock+0x283/0x3f0
[ 1037.054224][   T31]  ? __pfx_super_lock+0x10/0x10
[ 1037.059650][   T31]  ? __pfx_var_wake_function+0x10/0x10
[ 1037.069951][   T31]  ? __iterate_supers+0x1b6/0x330
[ 1037.080459][   T31]  __iterate_supers+0x1e0/0x330
[ 1037.081452][ T9124] as10x_usb: device has been detected
[ 1037.092907][   T31]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[ 1037.104447][   T31]  ksys_sync+0x87/0xf0
[ 1037.108694][   T31]  ? __pfx_ksys_sync+0x10/0x10
[ 1037.119851][ T9124] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1037.120898][   T31]  ? kcov_ioctl+0x16a/0x720
[ 1037.132151][   T31]  ? rcu_is_watching+0x12/0xc0
[ 1037.137028][   T31]  ? do_syscall_64+0x90/0x870
[ 1037.148076][   T31]  __do_sys_sync+0xe/0x20
[ 1037.157092][   T31]  do_syscall_64+0x115/0x870
[ 1037.162006][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1037.166842][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1037.173213][   T31] RIP: 0033:0x7f945dd9ce59
[ 1037.180328][   T31] RSP: 002b:00007f945ec95028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[ 1037.189305][   T31] RAX: ffffffffffffffda RBX: 00007f945e016090 RCX: 00007f945dd9ce59
[ 1037.198105][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1037.198525][ T9124] usb 5-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)...
[ 1037.206577][   T31] RBP: 00007f945e016090 R08: 0000000000000000 R09: 0000000000000000
[ 1037.223198][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1037.231533][   T31] R13: 00007f945e016128 R14: 00007f945e016090 R15: 00007ffeac0342d8
[ 1037.239693][   T31]  </TASK>
[ 1037.242900][   T31] 
[ 1037.242900][   T31] Showing all locks held in the system:
[ 1037.251098][   T31] 1 lock held by khungtaskd/31:
[ 1037.256101][   T31]  #0: ffffffff8e7e5560 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184
[ 1037.275132][   T31] 3 locks held by kworker/u8:4/57:
[ 1037.282125][   T31]  #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1037.293763][ T9124] as10x_usb: error during firmware upload part1
[ 1037.302356][   T31]  #1: ffffc900015e7d08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1037.302711][ T9124] Registered device nBox DVB-T Dongle
[ 1037.313360][   T31]  #2: ffffffff90603ce0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0
[ 1037.328824][   T31] 1 lock held by udevd/4983:
[ 1037.337473][   T31] 2 locks held by getty/5376:
[ 1037.338208][ T9124] usb 5-1: USB disconnect, device number 76
[ 1037.342401][   T31]  #0: ffff88803836f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80
[ 1037.358311][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0
[ 1037.368748][   T31] 6 locks held by kworker/0:0/9124:
[ 1037.376173][   T31]  #0: ffff8880222ad940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980
[ 1037.415780][   T31]  #1: ffffc90004157d08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980
[ 1037.433728][   T31]  #2: ffff88802ae831d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bd/0x4af0
[ 1037.434255][ T9124] Unregistered device nBox DVB-T Dongle
[ 1037.442909][   T31]  #3: ffff88807a1721d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0x10a/0x9a0
[ 1037.458362][   T31]  #4: ffff88804add61a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620
[ 1037.471093][   T31]  #5: ffffffff90ba3ce0 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xba8/0x18b0
[ 1037.471774][ T9124] as10x_usb: device has been disconnected
[ 1037.484227][   T31] 1 lock held by syz.2.1195/10719:
[ 1037.492663][   T31]  #0: ffff8880346120d8 (&type->s_umount_key#87/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20
[ 1037.504464][   T31] 2 locks held by syz.1.2252/14682:
[ 1037.511080][   T31]  #0: ffff8880369e0ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[ 1037.522358][   T31]  #1: ffff888033d84410 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340
[ 1037.534166][   T31] 2 locks held by syz.5.2741/16319:
[ 1037.540113][   T31]  #0: ffffffff90603ce0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220
[ 1037.549706][   T31]  #1: ffffffff8e7f10a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0
[ 1037.560156][   T31] 
[ 1037.563339][   T31] =============================================
[ 1037.563339][   T31] 
[ 1037.590079][   T31] NMI backtrace for cpu 1
[ 1037.590108][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1037.590127][   T31] Tainted: [L]=SOFTLOCKUP
[ 1037.590131][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1037.590138][   T31] Call Trace:
[ 1037.590143][   T31]  <TASK>
[ 1037.590148][   T31]  dump_stack_lvl+0x100/0x190
[ 1037.590167][   T31]  nmi_cpu_backtrace.cold+0x12d/0x151
[ 1037.590182][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1037.590197][   T31]  nmi_trigger_cpumask_backtrace+0x1d7/0x230
[ 1037.590219][   T31]  sys_info+0x141/0x190
[ 1037.590235][   T31]  watchdog+0xcb1/0x1030
[ 1037.590252][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1037.590267][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1037.590281][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1037.590302][   T31]  ? kthread+0x13a/0x450
[ 1037.590314][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1037.590326][   T31]  kthread+0x370/0x450
[ 1037.590339][   T31]  ? __pfx_kthread+0x10/0x10
[ 1037.590353][   T31]  ret_from_fork+0x72b/0xd50
[ 1037.590368][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1037.590383][   T31]  ? __switch_to+0x800/0x1100
[ 1037.590401][   T31]  ? __pfx_kthread+0x10/0x10
[ 1037.590415][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1037.590438][   T31]  </TASK>
[ 1037.590449][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1037.722683][    C0] NMI backtrace for cpu 0
[ 1037.722702][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1037.722729][    C0] Tainted: [L]=SOFTLOCKUP
[ 1037.722736][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1037.722748][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1037.722780][    C0] Code: a6 92 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 02 22 00 fb f4 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90
[ 1037.722799][    C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246
[ 1037.722815][    C0] RAX: 00000000030371cf RBX: ffffffff8e4955c0 RCX: ffffffff8b899225
[ 1037.722828][    C0] RDX: 0000000000000000 RSI: ffffffff8df0fbdb RDI: ffffffff8c1c4680
[ 1037.722841][    C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5
[ 1037.722854][    C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000
[ 1037.722866][    C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d71950
[ 1037.722879][    C0] FS:  0000000000000000(0000) GS:ffff888124387000(0000) knlGS:0000000000000000
[ 1037.722897][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1037.722910][    C0] CR2: 00007fab14c0d91c CR3: 000000007dae9000 CR4: 00000000003526f0
[ 1037.722922][    C0] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404
[ 1037.722934][    C0] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1037.722947][    C0] Call Trace:
[ 1037.722954][    C0]  <TASK>
[ 1037.722961][    C0]  default_idle+0x9/0x10
[ 1037.722988][    C0]  default_idle_call+0x6c/0xb0
[ 1037.723016][    C0]  do_idle+0x464/0x590
[ 1037.723047][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1037.723079][    C0]  cpu_startup_entry+0x4f/0x60
[ 1037.723110][    C0]  rest_init+0x251/0x260
[ 1037.723126][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[ 1037.723148][    C0]  start_kernel+0x484/0x490
[ 1037.723180][    C0]  x86_64_start_reservations+0x24/0x30
[ 1037.723200][    C0]  x86_64_start_kernel+0x12b/0x130
[ 1037.723219][    C0]  common_startup_64+0x13e/0x148
[ 1037.723253][    C0]  </TASK>
[ 1037.931569][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1037.938480][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1037.949144][   T31] Tainted: [L]=SOFTLOCKUP
[ 1037.953465][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1037.963524][   T31] Call Trace:
[ 1037.966820][   T31]  <TASK>
[ 1037.969739][   T31]  dump_stack_lvl+0x100/0x190
[ 1037.974413][   T31]  vpanic+0x552/0x970
[ 1037.978392][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1037.982893][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1037.989064][   T31]  ? nmi_trigger_cpumask_backtrace+0x182/0x230
[ 1037.995226][   T31]  panic+0xd1/0xe0
[ 1037.998942][   T31]  ? __pfx_panic+0x10/0x10
[ 1038.003352][   T31]  ? nmi_trigger_cpumask_backtrace+0x1b5/0x230
[ 1038.009523][   T31]  ? nmi_trigger_cpumask_backtrace+0x1f6/0x230
[ 1038.015712][   T31]  ? nmi_trigger_cpumask_backtrace+0x200/0x230
[ 1038.021975][   T31]  ? watchdog.cold+0x1ec/0x234
[ 1038.026734][   T31]  ? watchdog+0xcc1/0x1030
[ 1038.031143][   T31]  watchdog.cold+0x1fd/0x234
[ 1038.035729][   T31]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 1038.041527][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1038.046196][   T31]  ? __kthread_parkme+0x18c/0x230
[ 1038.051225][   T31]  ? kthread+0x13a/0x450
[ 1038.055495][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1038.060161][   T31]  kthread+0x370/0x450
[ 1038.064221][   T31]  ? __pfx_kthread+0x10/0x10
[ 1038.068804][   T31]  ret_from_fork+0x72b/0xd50
[ 1038.073392][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1038.078510][   T31]  ? __switch_to+0x800/0x1100
[ 1038.083183][   T31]  ? __pfx_kthread+0x10/0x10
[ 1038.087766][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1038.092539][   T31]  </TASK>
[ 1038.095781][   T31] Kernel Offset: disabled
[ 1038.100083][   T31] Rebooting in 86400 seconds..