last executing test programs:

1m56.157264271s ago: executing program 2 (id=1372):
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x1c9800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xe, 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r8 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f0000002400)=ANY=[], 0x3d})
r9 = syz_kvm_add_vcpu$x86(r0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000088000000000000001000000000000000420000c744240233d8cecbc7442406000000000f011c24660f3881", @ANYRES8=r8], 0xa0})
ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000000280)={{0x1, 0x0, 0xffffffffffffff36, {0xdddd1000, 0x5000}}, "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", "9986796767d9fd0fda908f894acb12cdce55740ac5c480c3a3291bc10f5ae80fc048fd49821940b8aab380c250e8b64e7629e1ea8236830b784a414ae62716bb5b957d61e75a09f18fad215aec29525458397e4c494bc6a2340c615f0e8c6dfd57d0bdb781f3062f58ddc25ca307e4a9816ee98a7ff97669e571bb3d047a785f93b2aec21f2173bf7eb483327c51f9a4f1ee34d8c5c2bb59d4df7aa879bcb8f6c9f1cd59b6dd2b68a8dc427421a5312819800d471e8b2fd4eac6885cb5fec1504e1d5914850712a421e8c8b6573ef49802f6e0939cc69b8e512762759c8463c49bf0eede745a1c0a083c8901b41c0668f343247f2ffc215eb8b693f3f66619c23a7c6a2d8fcc09cb8f22e9a82c74b149374a4717ab6d1f5d2f03611e9dc5a2fa14e5ff5ebc62d433a8487c71be97deecc9abbec781147f0aef4a01e9a1776a0feb903a9a99b483858a1db2925a6e3319260302c77ac47e0f5645a22ae58ee9a30e5fb287d6dd37a2dc4b6ef5135dc116156028c050720216ba767992608333a67537ad40421161524ac1e1fecadf09a1e487a447554a4a630e597637f196bb0578efdefcd7c81531dc4829e936e775be839e847744ff3c2958455094497703e57d749156f7b2f5489a9a50c5a46febf1dc3e4de3fbc941e225d7086b87180dc37a8a131bc024481d9953731165f48e9c64f014b6c803bfbf694a585f627ae76106c73b6a4b75b0e69521d4a6afba4c7124dfa3bd7703209b183b5226da8f2d28a9bd698c56f27a65c4e99f17dfdab71f1eceaeee7dfc3cce8eb3e4da0f0ba0067382b76d81256332942332bcdb2549f73bae3cbde7afda7f55de4c66a5c735cca09f6a69a078d358a0e6cfecf5f75bb8f98269784b57a0dacbf70c7e50fb6d825e12aaaada902badc93a39c97b17d2aad056223076c61dda9c8b0bc725e19b643662e98ba15f3cd9112fb3626143eb133ff63b28479e6a493e3da73775a4e5cd8e4056056b4b2e95071ba1f39b2e20845366ff10506e1cdab955d7553f1ccf7fa48b016d056f88c096a80a84bc80bcfeb2ae63d9de7b7d1dfc13fbedcd1dea588e314acb93f36b689cacbe7a0493a200e2140f5af57a4a9aac1d7e8aa4700a9b8e7df328c48aa74283e1f2aa65cf282f1e8a510652f181cb8d275e3b9c439f520f0cad22499907450b18b599f61573934a9702e669a2841ce927162823f5e78474a5dccc89f17b69a13f8678db56116d16e7b615d6c0d5035c01046db298f1709df8e026db208a49234869cb152fe8372d1dd92cbe5a9a1af7ca24da40e627bd3a0bf1bce4fa4ca7f84f1d653659fbc1673929644f206f921fb45998f14be6f973f17d12057f404794ac33bb9537bbfa2db701a6786d61e80c80ae0277cfd596bc00a64122b2c0679c9b53a23448bdb30748d256b74fd397190de0fb1b788635ed90ab3ba1f3ad5a6626fd32d443dc6ef612a98fcad01dc4adec4008f107781f75736a060debc3e435fce322fa9062e7d9dc61eff2066ccd198c4c79c27293a3ba32a5112a9b0e1a1f0038c4302ae0034324c275250958708f63771713dd77795a85024d5c1988193dbecdc5e270660c63186354d0aa8c94a5f4656008087eba2a80740c0751269aecfb19e44769b7103f4ce75e2217ef19fd082279d6b5365bb9e48a5a52228d2e3d2a8700008add626c77c8d86cbe79a18544b5c22d6c259b61d2a2cadc23790f78eea04f904d03e07bdc69c969a65a0c3fa12b84b603b9190dd861db36a31a2a23454a291a497aa5eddf301d08408c5cf2a7637983d0adf416f0d374b6f329e4c6cc70423e068bc52c29b9f3d90c3ceb980e5e72d6ba116bae4c1814daf96525df4edfdc36128ccb867484bb742ac67d390d51223ec9100672da49675e7bc60376231009fa7f7045521d0c848da8b90b2e1aed06e21b836e358def56699171f51c4edd7cabb5de5a8d69e0f8c8a6b43537bc487236ed0bf58a574028de77ec1075989eca2f30379c457c86c6fe881db3c14b37b528e6bbc71dec6e31f82a5dfa31b2a1198e494880f3bbcbf3fdd63e76555453abf5e80f5108484352c9e7281be00cbc90193ed93c8318e8798bb226d5117d5b53e882bda1d85c0245eaf3f07e54a86d40b39f3ae637e6042036d0be12f547208b104107b4b0de9b141755e785ab100d99d27e92152d40542395258648982065618d2500ffb7aa3bbe721a54d198cbc9f3aa92b43f22aff291823be272a68d5157ab0ba948cc2cb6a66d359162188db0866bfb7d174f453101b63112df10561f2b8181b45ed6fd59ae773a021f312b4cc24abe897981de1dba2687551ee15d56cf8423d553cdf870eee38c8aea321ade420398d4e4d1ec47332e4b45059cc212613dc3d4f1cfeb8eb0620da33cb4fa1067e008e9ffebe062943a519aec5da9cab4f606c3a306f609270d85ef7c34231a361b5bf4736a6b9c14fc567bcd10466cc59897f904bcf724efcab14d13d02a61a3bc9f92fdedbfba255cd90ced87762143f6e9fbf3cbc1415742c3fefc3d7d472016eea3732c79b607d391f66dc961d33a06f81af3e8cf0a31470e35ff37396ff5af91057bdb2173a565cd269373c34f80f663abc217848b28359d6605b7f0b76ba125b19627fd4abee6fa91840a7b06345619f0930723bae7f5e016d9ac81995d320d47e1888ff033bab4269a2e8f9e237c5b2a37c59af2f7b48bac346dc1398de210ef5bc852b3e518a909c4f7843d1d0b139f47be1b53a6aff54ebb29adcc0ce1ae08260fdb6f1b591c18d256a201f28263771e8ddb36cc25ab46b63b3b26756ad560510ce6eed1cec2bb27387d95502327507fcaab937b8be866f165af119cf6cf333e8043be2378e8650f5f08e089897867b0e95cf0b24fb9d33ea0288fb08d3f69efaf96b53e2d813a545091283c082540abbc70cb80eefbadd77986f1ec79e0349e0bd04896e36de3467c938c57776c33ddd8de665e99554b7a3be004031f314ae2a91ca4c2f8f3b05c4dd77cc8aca8da6174c2116213ce7f3d941715d9b3e82f1dd35b464f0d7b28aff912e22783320cfe8bc44d634d0e86be66f78348b6319b4ce7b82b743396fd52c2be18e5998b58bb887ef8211aaa0c2251a80aa919882aee8cf01c0ad7c2d55f1249d84d8e960cde236989e6565b3b4afda3644cb10bddf9fdaa965c537bc92714920baa9940292e497dd4d25e59aced4117bf98e9f80b226b12dec2c6d1ee03b477114e5fcac102290ff321301c24190a6f6fc192737752904cf02b03eaa631e86add86b751e26fe5b9bec2c41dfe6f776bc74498fd98aa175884c7d66ac9be1ee54b8a8372e4f19530c013483181b471dd3649f70a69209d9204c337a543d2f15d24faec1b2515a4ea73e786f7efedd994f892b6501c07da2bc9e5f30a3b499f68521cd2cddc17ecde8d8d5d437a60e9680891b988aee820ff69b23073a2f981b6777aac61f3b2d073e060119a9cb5437a29b90b4b2280b8d33ddf1bac2e169d58dc61c3091b311146d711eaee9b81e0aba60a5bd577956d149c449a7cf669da9cc7e1a8dc43a293efa14ae800af36e84d1feeba889bf180fd62ed7b671da4727f35cbac893fca3ebfb88eb7148c18b08084f2fc67f0d1de982a4d3d49ee7bbb0b62f2240992042ec71816d649a1e16c0ee0485c18a2ef56d48b8c847f4437ec0dbceb6be97c6355aad410b03d5b2f6d2f82415ab7b16534545339fbad40e0bd5267bfc15eba537c8e44547d0ae4e3fb800db23a560ad4ac5929a168c04b407e02d100b7f6fcd877a6acb8e1a1e2b5cf9054ccfc066be7e7357471fb418af6f376c080feec6686c7865d02087beeddda86b997abf6449ccf7535d954c1f6e98cbf42d662e6ac9742ca3551ae9beac32db3328f4af227ee8d5896e58d139d9494c3d3293d68d40259bb77e953203b5c615ee47d1243282b5abe64d5e1e65272f50132b97912442470791e7c9787896f4c7c284f53d677ccba5ac990508c749f6188ce13880946143a677f81a87994ec1f205814fe02028faec4236c91a071b57378b879888546eb6c2ba6e9e6316d854eaba6a5e4770ce875336c9ae19e400fa77f7ee20b1bbada742875845520c74a502d13f93338b14ba06db9483e233bcd4ed807c5031cc5f08e6b1ceebe672fc3ab464769fd4fa01331fc6d8322aa5f019a1b1bd83ee1f80117a749bca27df6fbd42abfb78b680c0418cc4a94a84b4edf3bff81a6b2d00ce987425dbbd043afcf7d8451f8267fed87c30cb0295ceae4892b80cf045c260913cc1be6f428077486fd9c548cb2eb50f501c26ea75df51abd13d8d990df05f6f99e3b1f766f7d9b96ec1ebb3e049b93fdf7ad593a29c59d27c828deeb596f088913926cb37eeb0e544b089329e9ff9eb328d6ab19fe9fe36e88e70101f041a4967f500f0c6c41d65a02936673012477c7e9ce18225003d5df048476522f24414aa72dc223af6eb6f0902b717a49fcec98739f75b3ce449b8356b31f3803c53ddf12b9839092e005a8dc2e2163dda50c1bc419f8a16e029e1bd06731b2537ab2f5be050c1dc07edacd301d5d7590f0462c566be0456ae35eb34d3bea801645bb89935d20c79f8d2e496049b2bbfcbda5b943b0e4c57c1c842ed24f8509ef2257652d6fc491ca3e9fb41a7f4ccb0bc80ef049418ce235b2fe67fdbe1d53781871187b5ec576234cd2f443cc70848724a2c56fd4147338656628552ff41d24b132d5c82cfe08d51388cbdbfab729de805e96e1a977f9c71b80a2171e32d192bd02f76fa0c0ff3a39fb44cd6d651444196cff54e325f0f3bfb3cb5b354de0864648e741074bb0aada73215c2dd3ca29a6f0fba470bd12b0230d18795e3ffa8390102600f3201d2c6230bba3afc71d3a0554eba4362515300395782195a7a9e9249178466a02ded2db88edc7770d162a5f6227292aa0eebc018e814caeff69904bcbbb54ccf03665312daee061341db9c7915cf64da55feadb5a7d21680eb5d7c1ad33245f9ea22cabdf307419b883588f3689629bf2e73c293f3acf35588bac03ca269892fe2e5f2caed291bc76a8bb851d8ae4c6f26dc1712c0ef4c4722255940d2908cc90e5b7e735e4ada7271b9c1239f5e278555af2b99cb44caaff1450e7942ab1c89ea0003ba27e3f6caae4bce3b203badd471ef454f60e1da6fe44193b130b3b7459956d8e569fea1674517b19433f949b41747648013b493b192d393130048d11243bfebe7758200d8828fa214439fdac0c1fbd0fd1b8a2a5b0b75fdf9bd43cb3429256075d980c8708a9ce60eb7b465f8d53e2a8bb8d713ec93c3a6ba90a55eb4e4f5c72f11eacbd2949657de43f5bca7fbe7a01b48461009937e3f6a7a3157add383fef8336ab43cceb5be4dd714d1c010ca5cbc7b097a6cc0bfd0b85f48e6fb8b36516f670572dabe87cf330219279d76811bddffc0d7c3d8cee770eb0e7058d92faf0ba8c57a67f6fdffb4d51daec920c023b16073333b0173df4776665a7092099916db73499760bdd5ed8dd6c3daad452fea39f3c5cbf22fd2efb2e627f536b6ac7493adb8d2b8569bc0082df50e792fad4b7accfdf349803aeef0b6c92a31687ff14dc360164f7ad97c712ae050aec577f618e7652de1ae5fc19b3d9bdab4758b8549e2607b9f5d0ccdff0b762a4355209d3b9ce59678ef016482d82920f372d55c918bb4508f2e32a674e7a12feff736a8a6a7cebb8add976a4e4327ce8ac20aabc5834281ed43d37e14cda3a8f0d3bd568a5cb53ecb510ed5c24"})
ioctl$KVM_RUN(r9, 0xae80, 0x0)

1m52.550522133s ago: executing program 2 (id=1382):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r5, 0x402, 0x8)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000040)={<r7=>0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000})
close_range(r7, 0xffffffffffffffff, 0x0)

1m51.060688933s ago: executing program 2 (id=1388):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)={{0x12, 0x1, 0x0, 0xe2, 0x79, 0x3b, 0x10, 0x5d1, 0x2001, 0x900, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x4d, 0x2f, 0x9c}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="40090600f971934a27097158"], 0x0, 0x0, &(0x7f0000000280)={0x20, 0x81, 0x3, "2b0c92"}, &(0x7f00000002c0)={0x20, 0x82, 0x1, "a2"}, &(0x7f0000000080)=ANY=[@ANYBLOB="208302000000ed53997e6500c6b9e82d581bb403c717401cd1436952ee6db951a812b1fb0563eeca7e3e8a5c2a01dd"], &(0x7f0000000340)={0x20, 0x84, 0x4, "1a24cefa"}, &(0x7f0000000380)={0x20, 0x85, 0x3, "1fb9e1"}})
timer_create(0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup2(r2, r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
prctl$PR_GET_FPEXC(0x45, 0x0)
r6 = socket$inet(0x2, 0x2, 0x1)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10)
sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4000, @broadcast}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0)
ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80086303, &(0x7f0000000000))
lseek(0xffffffffffffffff, 0x0, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50)

1m46.562534538s ago: executing program 2 (id=1402):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$inet(0xa, 0x801, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000003c0)={0x1, @pix_mp={0x8e0, 0xffff8000, 0x3136564e, 0x6, 0x3, [{0x2, 0x6}, {0xc00}, {0x3, 0x5de3}, {0x14, 0x5}, {0x9, 0x40000697}, {0x7, 0x3}, {0x81, 0x5}, {0x1fe, 0x17}], 0x7b, 0x2, 0x8, 0x2, 0x4}})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008)
close_range(r1, 0xffffffffffffffff, 0xb00)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f0000000240)={0x50, r6, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x40)

1m45.230966466s ago: executing program 2 (id=1406):
ioprio_set$uid(0x3, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x75f, 0xa382)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = io_uring_setup(0xdac, &(0x7f0000000180))
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74)
sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)

1m44.480742447s ago: executing program 2 (id=1410):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async, rerun: 64)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async, rerun: 64)
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32=<r7=>r1, @ANYBLOB, @ANYRESDEC, @ANYBLOB=':max']) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000\x0040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r7, @ANYRES32=r8, @ANYRES8=r6], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvfrom$inet(r3, 0x0, 0x0, 0x10000, &(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xfffffffffffffffd, 0x0, 0xd, 0x5, 0x401, 0x4, 0x7, 0xfffffffffffffffc, 0x6, 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffff492, 0x0, 0x0, 0xc, 0x3, 0x100000004}) (async, rerun: 32)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x44d9c2, 0x0) (rerun: 32)

1m43.981597622s ago: executing program 32 (id=1410):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000001c0), 0x0, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x26}, 0x1c) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async, rerun: 64)
writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) (async, rerun: 64)
ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32=<r7=>r1, @ANYBLOB, @ANYRESDEC, @ANYBLOB=':max']) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000\x0040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r7, @ANYRES32=r8, @ANYRES8=r6], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvfrom$inet(r3, 0x0, 0x0, 0x10000, &(0x7f00000004c0)={0x2, 0x4e24, @broadcast}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0xfffffffffffffffd, 0x0, 0xd, 0x5, 0x401, 0x4, 0x7, 0xfffffffffffffffc, 0x6, 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffff492, 0x0, 0x0, 0xc, 0x3, 0x100000004}) (async, rerun: 32)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x44d9c2, 0x0) (rerun: 32)

18.952729478s ago: executing program 3 (id=1670):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x2100, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

17.29736189s ago: executing program 3 (id=1677):
unshare(0x20000400)
r0 = socket$l2tp(0x2, 0x2, 0x73)
socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
fsopen(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f046bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x2}}, 0x14}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000080)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r5)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring={'key_or_keyring:', r6})
connect$inet(r0, 0x0, 0x0)

15.889538599s ago: executing program 3 (id=1680):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={<r3=>0x0})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f000000a800), 0x400, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f000000b2c0)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f000000b340)={&(0x7f000000b300)=[r3, r3, r3, 0x0, r3, r3, r3, r6, r3, r3], 0xa})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001940))
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
syz_genetlink_get_family_id$tipc(&(0x7f000000b380), r9)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

14.165683405s ago: executing program 4 (id=1687):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_open_dev$sndctrl(0x0, 0x402, 0x101300)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, 0x0)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
r5 = request_key(0x0, &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)='[\\%\x00', 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000500)={0x0, 0x0, r5}, &(0x7f0000000540)=""/92, 0x5c, 0x0)
r6 = socket(0x23, 0x5, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000))
sendmsg$nl_generic(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x8000080)
socket$nl_generic(0x10, 0x3, 0x10)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000000)={0x0, 0xd1, 0x3c}, &(0x7f0000000200)={'enc=', 'oaep', ' hash=', {'sha224-ssse3\x00'}}, &(0x7f0000000380)="e75591c4770e1f1e49e9135124b6742fae550f3b99a4ad790e8692f89e17258e41a5bc32d0ca84896f71ff3719c1c95bc2f85c4fdf72a77ae0bad0c937c6afb5f366fcab8839451681426d7cf5e492ecbfbb1ba775dfe00744d095fa632fca8d8320ef25653c90bab76c5c96ed18e98f02fd1ddf4a2eca842db365bd93fb1840fd3ac8cf8e7a034f7e4d9790d39ee3489a6b20b930e19a92f1bb578e3469910f141b294d625e99f4db68eec5b5a9e6fa5b5a98dc0f2a3c1d72f99de2f01a6153ebd5f9b7165fb07e5121782d95784d83f8", &(0x7f0000000080)=""/60)

13.772812509s ago: executing program 0 (id=1688):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
setrlimit(0x7, &(0x7f0000000000))
landlock_create_ruleset(&(0x7f0000000400)={0x100}, 0x10, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003500), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000003a00)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
chdir(&(0x7f0000000340)='./file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="c811b17500000000"], 0x8)
lseek(r5, 0x3, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000380)=""/177, 0xb1, 0x0, &(0x7f0000000140)=""/121, 0x79}}, 0x10)
getdents(r5, 0x0, 0x58)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)

13.218667797s ago: executing program 3 (id=1689):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000180))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x8, r4)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
openat(r5, 0x0, 0x10b840, 0x1b4)
r6 = syz_pidfd_open(r4, 0x0)
process_mrelease(r6, 0x700000000000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)

13.081812222s ago: executing program 4 (id=1691):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18)
setfsgid(0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000045c0)={'tunl0\x00', &(0x7f0000004580)=@ethtool_link_settings={0x26, 0x1, 0x1, 0x7f, 0x81, 0x8, 0x0, 0xf, 0xb, 0xe1, [0x674, 0x5, 0x2, 0x2, 0x7fffffff, 0x7, 0x80, 0x3]}})

11.817496975s ago: executing program 0 (id=1692):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = socket$inet6(0xa, 0x80002, 0x88)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000200)=0x1e)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
pwritev2(r4, 0x0, 0x0, 0x5412, 0x7, 0x58)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="7e879feb010018000000", @ANYRES16=r2, @ANYRESHEX=r4, @ANYRES64=r1], 0x0, 0x2d, 0x0, 0x1, 0x8}, 0x28)
close(r0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="890fff00120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)

11.724852665s ago: executing program 3 (id=1694):
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x14}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r3 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0)
vmsplice(r4, &(0x7f0000000040)=[{0x0}], 0x1, 0x2)
keyctl$setperm(0x5, r3, 0x8)

11.724196448s ago: executing program 4 (id=1695):
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/4813], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0xfc4acafd929320dc, 0x10, 0x0, 0xffffffffffffff83}, 0x48)

11.473495433s ago: executing program 4 (id=1696):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = syz_clone3(&(0x7f00000004c0)={0x30012100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x3}, 0x58)
prlimit64(r1, 0xe, &(0x7f0000000140)={0xb, 0x200080087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES32=r1], 0x48)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), 0xffffffffffffffff)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB="f37b5700fc095e3d34ee78a487520551590dedcec993d14ef7d78858996093321e45c6c0", @ANYRES16=r4, @ANYRES16, @ANYRES16], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x260181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1)
open_by_handle_at(r6, 0x0, 0x60380)
r7 = semget$private(0x0, 0xfffffd, 0x0)
close(0xffffffffffffffff)
semop(r7, &(0x7f00000002c0)=[{0x3, 0x4, 0x1000}], 0x1)
semctl$IPC_RMID(r7, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000240)={@private2, @rand_addr, 0x14}})

10.210749034s ago: executing program 0 (id=1698):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xf, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0xb2, @time={0x65757100, 0x1000000}})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x20008000)
ioctl$F2FS_IOC_SET_PIN_FILE(r7, 0x4004f50d, &(0x7f0000000000)=0x1)

10.176595234s ago: executing program 4 (id=1699):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={<r3=>0x0})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f000000a800), 0x400, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f000000b2c0)={<r6=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r5, 0xc01064c5, &(0x7f000000b340)={&(0x7f000000b300)=[r3, r3, r3, 0x0, r3, r3, r3, r6, r3, r3], 0xa})
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001940))
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
syz_genetlink_get_family_id$tipc(&(0x7f000000b380), r9)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

9.206884174s ago: executing program 1 (id=1701):
openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x20642, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x7}, 0x18)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
listen(0xffffffffffffffff, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x8)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x10000000}, &(0x7f0000000340), &(0x7f0000000280))
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r0, r2, 0x0, 0x1, &(0x7f0000000300)='\x00'}, 0x30)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000500)={'syz1\x00', {0x7, 0x1, 0x4, 0x15}, 0x31, [0x0, 0x1, 0x7, 0x2, 0x9, 0x5, 0x0, 0x858, 0x5, 0x9, 0x8, 0xc8c, 0x4, 0x9, 0x3, 0x5, 0x4, 0x3b8, 0xfffffff8, 0x7, 0x8000, 0x82, 0x10001, 0x1, 0xe, 0x8, 0x8, 0x1, 0x0, 0x4b0e880e, 0x80000000, 0xb, 0xbd92, 0x81, 0x7, 0x2, 0xb, 0x3e18b6be, 0x2, 0x7, 0x5b98, 0x1ff, 0x4, 0x6, 0x1, 0x5, 0x7ff, 0xffffff01, 0x8001, 0x8000, 0x6, 0xf8000000, 0x653, 0x729e4a8b, 0x1, 0x8, 0xffffffff, 0x6, 0x8, 0x3, 0xfffffffe, 0xffff43d0, 0x5, 0x400], [0x4, 0x4, 0x70, 0x3, 0xffffffff, 0x6, 0x1, 0x5, 0x454, 0x80, 0x1, 0x6, 0x10000, 0x7, 0x9, 0x9, 0xffffff7f, 0x9, 0x6, 0x3, 0x1, 0x8, 0x42, 0x80000001, 0x1ff, 0x411, 0x201, 0x3, 0x9, 0x8001, 0x8, 0x100, 0x3, 0x3099, 0x374, 0x0, 0x60, 0x7ff, 0x3, 0x8, 0x9, 0xfa, 0x5, 0xce81, 0xd, 0x3af036a7, 0x1, 0x0, 0x7f, 0x10, 0x4f3b7fa9, 0x6, 0x4a8, 0x6, 0x0, 0x0, 0xeb, 0x0, 0x9, 0x7fff, 0xf, 0x1001, 0x401, 0x1], [0x81, 0x6, 0xd, 0x9, 0x1, 0x9, 0xfffff23f, 0x2, 0x401, 0x8, 0x2, 0xa9, 0x622, 0xb, 0x8, 0x3ff, 0xfffffffa, 0x7, 0x8, 0xffff8000, 0x200, 0x1, 0x0, 0x4, 0x3, 0x200, 0x1a40, 0xac22, 0x952, 0xe, 0xffffffff, 0x9, 0x4, 0x81, 0x6, 0xff, 0x4, 0x3, 0x3, 0x6, 0x5, 0x5b04a85a, 0x1, 0x5, 0x9, 0xfffffff7, 0x6, 0x1, 0xfffffffb, 0xffff, 0x8, 0x2, 0x2, 0x800, 0x0, 0x8, 0x3, 0x80000001, 0x7, 0xfffff939, 0x2, 0x2, 0xb3, 0x9], [0x1, 0x2, 0x7ffb, 0x3f1, 0x7, 0x8ba8, 0x40, 0x0, 0xfffffffd, 0xf4, 0x4, 0xdee, 0x5, 0x8000001, 0x1c, 0xa9bf, 0xffff8000, 0x0, 0x8, 0x40, 0xe, 0xfffffffd, 0x10000008, 0x3290, 0x5, 0x1, 0x0, 0x6, 0x7, 0x2, 0x4, 0x7, 0x4, 0x4dc, 0x2, 0xfffffff8, 0x200, 0x72, 0x4, 0xfffffffc, 0x3, 0xb, 0x37f, 0x4, 0x5, 0x2, 0x20, 0xfa91, 0x7, 0x401, 0x5, 0x81, 0x20000000, 0x603, 0x0, 0x2, 0x2, 0xd, 0xa, 0x7, 0x5, 0x627b6092, 0x6, 0x6]}, 0x45c)
io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)

9.07786138s ago: executing program 5 (id=1702):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001200000", 0x24)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd2d, 0x0, {0x36}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x2}, 0x1c)
listen(r2, 0x9)
syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff10f5", 0x14, 0x6, 0xff, @local, @mcast2, {[], {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800)
write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0xfffd, 0x80}, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x1], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x9, 0x4, 0x31, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x8, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xa1f], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000000, 0x0, 0x0, 0x0, 0x4a9c, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x2ec2, 0x0, 0x0, 0x3]}, 0x45c)
ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x1000000000008)

8.196986354s ago: executing program 0 (id=1703):
socket$inet_smc(0x2b, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x476c80, 0x0)
setxattr$system_posix_acl(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0)
prlimit64(0x0, 0xf, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'macvlan0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x1, 0x5, 0x1c4b8fec, 0x8, 0x10000, 0xa, 0x7ff, 0x1000207f, 0x3}})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x62, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc)
r4 = syz_open_dev$vim2m(0x0, 0x1, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x1000000000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10000, 0x12)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000380)=0xff, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0)
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)

7.985666234s ago: executing program 1 (id=1704):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000180))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x8, r4)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
openat(r5, 0x0, 0x10b840, 0x1b4)
r6 = syz_pidfd_open(r4, 0x0)
process_mrelease(r6, 0x700000000000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)

7.933257778s ago: executing program 5 (id=1705):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)='4', 0x1}], 0x1, &(0x7f0000000ec0)=ANY=[], 0x68}}], 0x2, 0xc048801)

7.097964525s ago: executing program 1 (id=1706):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10)
ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000))

7.045521188s ago: executing program 5 (id=1707):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = socket(0x23, 0x80805, 0x0)
connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty, 0x80, 0x3}, 0x20)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r0, 0x0, 0x0)
fchdir(r2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x4, 0x0, 0x0, 0x7ffc1ffb}]})
r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ppoll(&(0x7f0000000000)=[{r5, 0xd52e7b1acd5c3ded}], 0x1, &(0x7f0000001200)={0x0, 0x989680}, 0x0, 0x0)
r6 = timerfd_create(0x7, 0x0)
timerfd_gettime(r6, &(0x7f0000000000))
bind$bt_l2cap(r4, 0x0, 0x0)
connect$bt_l2cap(r4, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x0, 0x0, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/tty/ldiscs\x00', 0x0, 0x0)
read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020)

6.920590147s ago: executing program 1 (id=1708):
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x3, 0x4, {<r0=>0x0}, {0xffffffffffffffff}, 0x2, 0x9})
sched_setscheduler(r0, 0x0, &(0x7f0000000180)=0x9)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'nicvf0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r3, @ANYBLOB="20000800000000001c0012800b00010300616373656300000c00028005000f"], 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

5.12170067s ago: executing program 5 (id=1709):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000)
ioctl$SG_IO(r0, 0x2285, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/asound/timers\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000180)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2024)
r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002200), 0xa00, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c)
r9 = socket$igmp6(0xa, 0x3, 0x2)
write$FUSE_LK(r2, &(0x7f0000002240)={0x28, 0x0, r3, {{0x6, 0x7fffffffffffffff, 0x2, r6}}}, 0x28)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r11, &(0x7f0000004480)=[{{&(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002300)="7b0690c5e643b21433afdb217f", 0xd}, {&(0x7f0000002340)="0295c92280a90c76d05b9dc31db7b432ecf3d612cb32381c19f6ba807dd9b0f771c5f90d0bab9c55d33fd37320f8122cbb8a271728d06823556c36b5f23839ec1d2fa7fb5626cfae98747ad7b9a6979869507e11f98eb5603f01b4c12b43bfebe6ae71cc838ed46a022c1d0a3e18bc69eba58831863e64efd24d828ebde63add55655b09de6b8d55dc5cecd2e1a7fca9e66b9f11d5667dd5fb99b061b3b56e0cfab96a2f94c8fefb7227fcba2de00b3e59800a3a4b", 0xb5}, {&(0x7f0000002400)="cb92753654f184a3b70e8efba116ba326d660cb85849c08cbb0fc6fb5d3975861a732d7fdf18e6f4d10134590a6454dad07b7658e38f28b650e2ef3cba98d7618a52e9b090766ebac5f4a1c5272a196e36e9a0cdfd5efffda4081297e27d6d1f6452446fc89c54c7bba5e730cbcae137e763854f076e9d1d986762c60fa4cbabe7ec6b24646862f52be9edd8f8a739af1269f64ab5ed0870df850b3a146196830be3815d3447e7096628990ddba37d1196cf7c2b3c42ebd5278412dd48ed38b56183b7ad259e3f90fee8fd46bccb", 0xce}, {&(0x7f0000002500)="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", 0xfa}], 0x4, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @rights={{0x2c, 0x1, 0x1, [r0, r9, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r9, 0xffffffffffffffff, r7]}}, @cred={{0x1c, 0x1, 0x2, {r10, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r10, r4, r5}}}, @rights={{0x2c, 0x1, 0x1, [r8, r1, r0, r9, r11, r11, 0xffffffffffffffff]}}], 0xe0, 0x24000000}}, {{&(0x7f0000002800)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002d40)=[{&(0x7f0000002880)="017bc80be80595b76180bf764d53a68ceb835bf7", 0x14}, {&(0x7f00000028c0)="e7c186c7c5b357f497b3ecdc", 0xc}, {&(0x7f0000002900)="50d78959bf5867f57702531061df7988e02d7929c155bee4da5a6911a34eaa8f828097091b46a0a77e8d2ca0cd2bfcca15cec14b7d6ab1123437b2faffd90a2e147afcd0b492157defbf426d0ebd38561bb74129e0e5d7f3527553db281cd4f63ec7cb4c985dfd52d41d6a8ca6ae4b7153309fcef43857446620bd7ed9", 0x7d}, {&(0x7f0000002980)="f61644c88d025db5fc021212b601404002a69f40da9d40234980b1070a6205f5fc85548bb56cf18f8cfaa6c3053ae6f093aafd0f4d349cc453a1f5ff3b529fc6a7a435183c9fc58a4421ca2a8daf453cf0d752f73c278cd0f3a5297efed78364c1d7dcb8dddf6f2708f49e55969514ac4c33522b1cca46c321550f295fb0a9420b01e61b4f0cf556bc139d7de0f6df6bb2646093564bc74c13dbdec4465e6700b305f99b91808d32868917d2f711730a099c96b6621b1d2cea9a737d4b262c64c41cabb544fd2fcfe4efc6a47edeba6467e2c3999a17f37cd786bd7866e48ef53827d9af87fe8e86e360a568c5f047e8", 0xf0}, {&(0x7f0000002a80)="a14588db50a3e72814ef584d840c2b8c45db31eca329ddad5d371e4695f00129c8f906aca2fad8dfae35047d042b4708a3316aa05386c346e4f30dbc4413224d3d5fb98e062c085d51c4172490cb69ce5eed0d3a94b7069c39158d389d834e9cf7d9828867bb4cf5293ff438b5a8c3c8a018cd2e8edfc34169740f77c56fd37308c16aef5d34be4ebeb7cb4fae343d010eaf14a9d6a6e0d873949d34702b333729569217693711a9add0f06b7bcd6080b46190a97e68ab1d47c807da2e00", 0xbe}, {&(0x7f0000002b40)="5055c586478805dfdddf1609c16b1c552cb06ec4b8d51ecf75f5f5394b86a2727af755246697dba2ed755b0a3bf13c82f2010c6a7e2a961e57df6c6f22b1509a0445e269e14d7149b66f7fca687bbddae8e62f5addd088f540eb226352cd7709", 0x60}, {&(0x7f0000002bc0)="20dadcd8ac36414c5a10edd1dd5b0e839b613d45ed6c6d5b99bc6c70e889095ef2c8d99e6e01c804fb0bde6ee59a5c0c6323979403000f8877c06a38c2964452a0b57485", 0x44}, {&(0x7f0000002c40)="7e2eb4c81729fa37378569ce5eab2b80353b5b4804a23d58f0780f90cb4ccc7904744ac45f2874b2fa7c58da8154f89ebce359314d4f434cd9fd779bdf14c53464dc14604b74c91c1d5c8a013b375d162d5c532057bcdcee609d2491291b1f4c6c9c05dc7ed740bf7dcd7ae5de9c74f28c633d1396391f73749019c8fe7d7f1e37003a32a1f27f704e11370415bb99cde10e6f9c8592cdb94d20465defdd7dbfdf20741b4de21b927869f3f81f685a2a798966fe321ff6051219f5514ed31c6d50e77ffe83bb07df5c2810a181568bf0a6b43cd4876bf44e", 0xd8}], 0x8, &(0x7f0000002dc0)=[@rights={{0x20, 0x1, 0x1, [r2, r12, r12, r2]}}, @cred={{0x1c, 0x1, 0x2, {r6, r4, r5}}}, @rights={{0x20, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x2280e346254135f8}}, {{&(0x7f0000002e40)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000004280)=[{&(0x7f0000002ec0)="f65184d8a87f2b7b2c95cbd61f1bc06f8a0a7c3f6066fb9e2b9711dc7078e53f42301db18c", 0x25}, {&(0x7f0000002f00)="67c4a0c0a03e22464ec9491a70f23b931bb48f6233725bf88496d98522e1b1e5ac0449af6eef50e7237738b6cb63a4b7e558eee0e56e7c9d38e118c0f1f9d7fd4871343bf483545fcf65c9cbee1420c3c812a69c6d2271feb35d04c3c0eb436fcce7fbe1a57856796d01b80985b93c0d8b3e6985451130203ec982708fc4b7f8d3df1318646da3689a9dd18a80d342ec6f7eb1e663", 0x95}, {&(0x7f0000002fc0)="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", 0x1000}, {&(0x7f0000003fc0)="a0db781c98caf5050eb02fc2cb5b89e02474eab58de90fb15c2902c84f269c6965a7e9b2a9fa0b072678d3f578af25be9039e75088373dfa6c2cc4fa3de98f2679f7ccc243b3c4b0423b12795c781d26171752e5", 0x54}, {&(0x7f0000004040)}, {&(0x7f0000004140)="045eb414aa2b1b84321feeb7ec99039ba60cf09bf01c1172b06d48fd3def7de6504c848baab00e4a0a4b8b8e5841c42932ed3b35726330dcf8589c955b86518bb0945c9dd0aa05f5e325b02a44bed574010b807f36915f5bd179b7836d2cc341be3430959d512b578fc4dc987a5e0e4a9cd6891bb3de0fe692bc21dede53bb716b0697b51e77b76521c5d5130f215e5172d7fc4e252f2699fdef1a32deb00327907ac1208741eb7b3c4eee4cd73a393ac50dbfb66be5db75706d5c6e25b359c8877e0ec55f3931f7a9cf4fe38a8e22c48ec09ca23e99eba581741620681273153a5bbddcee5c3566545b493a33", 0xed}, {&(0x7f0000004240)="17efea1c2fce38ea8c4f3f4658ab9fbaea027ae5abf5d2d6025d87e1e30d3eb3737db7c3a00f429f982fced9cd9f9ff056c0845adddd071d8f91a5", 0x3b}], 0x7, 0x0, 0x0, 0x24000080}}, {{&(0x7f0000004300)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004440)=[{&(0x7f0000004380)="eaff4d408d54829e5eabacedf5153c465079a5", 0x13}, {&(0x7f00000043c0)}], 0x2, 0x0, 0x0, 0x20000800}}], 0x4, 0x0)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020004000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r13}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r14 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x1000)
setsockopt$sock_int(r14, 0x1, 0xb, &(0x7f0000000040)=0x2, 0x4)

4.965598608s ago: executing program 1 (id=1710):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={<r1=>0x0})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f000000a800), 0x400, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f000000b2c0)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r3, 0xc01064c5, &(0x7f000000b340)={&(0x7f000000b300)=[r1, r1, r1, 0x0, r1, r1, r1, r4, r1, r1], 0xa})
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001940))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30)
ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0)
ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
syz_genetlink_get_family_id$tipc(&(0x7f000000b380), r7)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0)
ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

2.461773788s ago: executing program 5 (id=1711):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x20000000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
epoll_create(0x281)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000004c0))
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, r4)
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000002a00)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x7f, 0xfffffffe}}, 0x120)
writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000500)="dfa1434f7c88d9058558875d3c5b2d8bfcb162669be95907caaefae569dbdfd596ee5166c13ffbf8cf6ed8fdc62bdadeb4a4c7a4178136107341cdb989e91c482deee66260b9b301880c08445aeb9c3c5c1d0f60b8df6ccba1780293af8f34f15c56d1610f28aebbba8c57a5eca437309fce6ed67366d3edaaf4a62ec44ec8feb49df5c73f25a55b01c41665757a33fe732cabcff1319d6d3b92403898a277d1677670c01bc8f9fe1bae44c57caba0eb495cc2b96957f1a4335d212d30cfdf342c7fbd8355dc15b29207790bb82af66f05e4a72570c9891567ca6ea26ba6dd98ff880f6e1cd9d7", 0xe7}, {&(0x7f0000000680)="1fef362428895a754caecb8211ca3a50eb6d41bb1ed7a8424c07c3677c76f553d01ea40dc315d955801597c80de9d3f722e32bccc636548d68fc13cd44be7a5ee8f2a4a4ba76999b3d1ec899a148ee0edcc8162d395583af5500d2c3fb7cc7e6306122b94419597a6689d058b51a874ccf9d1cd99a2c64911761e181c32aadc9a8116382ded27778aa0d3339101feef0daf309bb284918e98e163360e3dc9bb48f7b6356e69dae0549c7505cf5b4b6654255ce0ab5ca95adb2f883217e9e007354aef098c66bb15bd235777887a29570c875026716686a700e", 0xd9}, {&(0x7f0000000780)="5510e0cfd9f4177a2a4ac222f9a7fc721e6d66b49238273a03c25dd9b3343f2909f3bc2b8e4058067ef8fe2f481121fe418be6c46cb48a192c6b51f5540c8935c6175a2faaaf1a401d1363ceae43dfa28a7ee4e59be78bb06ddc441abdfb28e71a93bfcfe0356034f8a8484f5dca9a83d42d42871b28acaa7d2f7f8ead18631b0016005d26dd72ba0c73a023ba9dcae211a95e3b720faa0bf8496497dec7f7b24b3b898dd9a8af12ed425874c1c8de6b4d2e31df8dc6ed", 0xb7}], 0x3)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140))

1.844798631s ago: executing program 3 (id=1712):
openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
r5 = accept4(r4, 0x0, 0x0, 0x0)
sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x500, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)

1.801591288s ago: executing program 0 (id=1713):
r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain)
keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])

1.11139343s ago: executing program 5 (id=1714):
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000814}, 0x20018001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r1, 0x0, 0x118)
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000001180)=""/4084, 0xff4}], 0x1, 0x304, 0x21000008)
ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000))
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

739.915327ms ago: executing program 0 (id=1715):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x1, 0x7, 0x6, 0x8, 0x5, 0x6, 0xfff, 0x6, 0x4, 0xe, 0x401, 0x8, 0x3a8, 0x8, 0x6bc9c6e3, 0x6, 0x2, 0xe396, 0x6, 0x2, 0x8, 0x3, 0x0, 0x80, 0x4, 0x90, 0x8, 0x1, 0x7, 0x8, 0x9]})
r2 = eventfd(0x1)
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x7, r0, &(0x7f0000000180)="b140f051f9a67dd24a23c04aa1b3615bd779fe1bcec49748f6a885fdd6fbba80f37f3b439767df382c358510e95d08714aeaeb008864c57c77b195552117bd18bd357a46f6030c88acc0361a7d7ff6680d83fa43effcda451d79d40725f31caaeaed6190ece01d3ce04d9f7e5a48a3b76c18c9d0ab2f4847c288bc0addeae50ab680659dbc02e27dd584d1d4d3fb2b25f883c4be34b5546085112833f0021e1cb1f808a29a25f2f7953a26ebd554cf8194700d1f04b5754337abea3b1aec6315adf8a72dbd5e95538633b3", 0xcb, 0x6, 0x0, 0x0, r2}])
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)})
ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_tcp(0x2, 0x1, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x4, @mcast2, 0x14}}}, 0x30)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)

380.111215ms ago: executing program 4 (id=1716):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'pcl812\x00', [0x2f00, 0x20, 0xd09a, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x9, 0x3, 0x4, 0x5, 0x70f]})

0s ago: executing program 1 (id=1717):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25GETINFOOLD(r1, 0x89e3, &(0x7f0000000180))
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x8, r4)
r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
openat(r5, 0x0, 0x10b840, 0x1b4)
r6 = syz_pidfd_open(r4, 0x0)
process_mrelease(r6, 0x700000000000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)

kernel console output (not intermixed with test programs):

.430533][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[  208.585744][ T7148] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  209.231714][ T7158] xfrm0: entered allmulticast mode
[  210.947640][ T7185] fuse: Unknown parameter '0x0000000000000005'
[  212.217089][ T7194] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  212.228561][ T7194] overlayfs: missing 'lowerdir'
[  215.105988][ T5898] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  215.166543][ T7237] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  216.179367][ T5898] usb 1-1: config index 0 descriptor too short (expected 64706, got 72)
[  216.190478][ T5898] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  216.200182][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.208525][ T5898] usb 1-1: Product: syz
[  216.212723][ T5898] usb 1-1: Manufacturer: syz
[  216.217787][ T5898] usb 1-1: SerialNumber: syz
[  216.326493][ T5898] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  216.392418][  T981] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  217.576628][  T981] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  217.636048][  T981] ath9k_htc: Failed to initialize the device
[  217.730250][  T981] usb 1-1: ath9k_htc: USB layer deinitialized
[  217.816594][    T9] usb 1-1: USB disconnect, device number 9
[  219.295374][ T5956] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  219.495755][ T5956] usb 2-1: device descriptor read/64, error -71
[  220.025389][ T5956] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  221.275322][ T5956] usb 2-1: device descriptor read/64, error -71
[  221.405861][ T5956] usb usb2-port1: attempt power cycle
[  225.049413][ T7332] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[  232.438646][   T30] audit: type=1326 audit(1751803370.405:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000
[  232.628350][ T7416] QAT: failed to copy from user cfg_data.
[  233.189362][   T30] audit: type=1326 audit(1751803370.405:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000
[  233.210682][    C1] vkms_vblank_simulate: vblank timer overrun
[  233.262763][ T7423] Bluetooth: MGMT ver 1.23
[  233.312187][   T30] audit: type=1326 audit(1751803370.415:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000
[  233.425681][   T30] audit: type=1326 audit(1751803370.415:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000
[  233.447020][    C1] vkms_vblank_simulate: vblank timer overrun
[  233.504904][   T30] audit: type=1326 audit(1751803370.415:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000
[  233.545010][   T30] audit: type=1326 audit(1751803370.415:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000
[  233.654475][   T30] audit: type=1326 audit(1751803370.415:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000
[  233.736594][   T30] audit: type=1326 audit(1751803370.415:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a0ad8d290 code=0x7ffc0000
[  233.909150][   T30] audit: type=1326 audit(1751803370.455:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000
[  233.930513][    C1] vkms_vblank_simulate: vblank timer overrun
[  234.604484][   T30] audit: type=1326 audit(1751803370.455:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7410 comm="syz.1.433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a0ad8e929 code=0x7ffc0000
[  236.202657][ T7451] netlink: 'syz.2.444': attribute type 9 has an invalid length.
[  236.211317][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.444'.
[  237.338215][ T7462] binder: BINDER_SET_CONTEXT_MGR already set
[  237.368809][ T7462] binder: 7459:7462 ioctl 4018620d 200000000040 returned -16
[  237.833336][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.0.451'.
[  237.865055][ T7469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'.
[  239.586604][ T7492] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  244.509120][ T7563] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  249.053428][ T7630] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.496'.
[  249.063972][ T7630] netlink: zone id is out of range
[  249.069824][ T7630] netlink: get zone limit has 8 unknown bytes
[  249.981223][ T7643] netlink: 'syz.3.501': attribute type 9 has an invalid length.
[  249.989182][ T7643] netlink: 20 bytes leftover after parsing attributes in process `syz.3.501'.
[  252.404116][ T7670] Illegal XDP return value 790286952 on prog  (id 110) dev N/A, expect packet loss!
[  252.717466][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.743353][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.756231][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.764555][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.773606][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.782283][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.792671][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.810467][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.838876][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.850739][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.861294][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.873466][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.884187][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.970349][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  252.984148][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.002652][ T7684] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  253.033816][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.093938][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.131058][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.161187][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.198273][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.214773][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.239369][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.260813][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.272350][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.287395][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.314449][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.326927][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.335466][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.356102][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.369337][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.399689][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.421109][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  253.433679][ T7693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.518'.
[  253.455569][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.469980][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.478783][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.487512][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.529741][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.537834][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.547745][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.565104][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.574551][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.597243][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.618300][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.631057][   T43] hid-generic 0000:007F:FFFFFFFE.0001: unknown main item tag 0x0
[  253.655031][   T43] hid-generic 0000:007F:FFFFFFFE.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  253.875860][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  253.954379][ T7699] fido_id[7699]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  254.068852][    T9] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x7 has invalid maxpacket 1032, setting to 1024
[  254.085512][    T9] usb 5-1: config 16 interface 0 altsetting 75 endpoint 0x6 has invalid wMaxPacketSize 0
[  254.098451][    T9] usb 5-1: config 16 interface 0 has no altsetting 0
[  254.111566][    T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a
[  254.141625][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.163117][ T7696] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  254.641464][ T7695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.717134][ T7695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.779186][    T9] usb 5-1: string descriptor 0 read error: -71
[  254.830734][    T9] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  254.929316][    T9] imon 5-1:16.0: unable to initialize intf0, err -19
[  254.985514][    T9] imon:imon_probe: failed to initialize context!
[  255.020490][    T9] imon 5-1:16.0: unable to register, err -19
[  255.143712][    T9] usb 5-1: USB disconnect, device number 6
[  255.491236][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  257.196606][ T7727] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  259.052206][ T7741] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  264.582711][ T7783] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  271.152730][ T7841] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.562'.
[  271.162156][ T7841] netlink: zone id is out of range
[  271.167539][ T7841] netlink: get zone limit has 8 unknown bytes
[  274.721909][ T7864] lo speed is unknown, defaulting to 1000
[  274.753008][ T7864] lo speed is unknown, defaulting to 1000
[  274.782476][ T7864] lo speed is unknown, defaulting to 1000
[  275.341801][ T7864] infiniband syz2: set active
[  275.346668][ T7864] infiniband syz2: added lo
[  275.353958][ T7864] syz2: rxe_create_cq: returned err = -12
[  275.359931][ T7864] infiniband syz2: Couldn't create ib_mad CQ
[  275.366100][ T7864] infiniband syz2: Couldn't open port 1
[  275.378494][   T24] lo speed is unknown, defaulting to 1000
[  275.423469][ T7864] RDS/IB: syz2: added
[  275.427878][ T7864] smc: adding ib device syz2 with port count 1
[  275.434147][ T7864] smc:    ib device syz2 port 1 has pnetid SYZ2 (user defined)
[  275.444226][ T7864] lo speed is unknown, defaulting to 1000
[  275.582287][ T7864] lo speed is unknown, defaulting to 1000
[  275.718668][ T7864] lo speed is unknown, defaulting to 1000
[  275.852984][ T7864] lo speed is unknown, defaulting to 1000
[  275.986243][ T7864] lo speed is unknown, defaulting to 1000
[  276.192735][   T24] lo speed is unknown, defaulting to 1000
[  277.571096][ T7884] binder: 7878:7884 ioctl c0306201 200000000640 returned -22
[  281.730623][ T7926] binder: 7916:7926 ioctl c0306201 200000000640 returned -22
[  283.558554][ T7944] netlink: 'syz.2.592': attribute type 27 has an invalid length.
[  283.573528][ T7944] netlink: 52 bytes leftover after parsing attributes in process `syz.2.592'.
[  287.800508][ T7984] binder: 7974:7984 ioctl c0306201 200000000640 returned -22
[  293.534122][ T5840] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  293.695870][ T5840] usb 4-1: Using ep0 maxpacket: 32
[  293.727088][ T5840] usb 4-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0
[  293.753826][ T5840] usb 4-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  293.792674][ T5840] usb 4-1: config 0 interface 0 has no altsetting 0
[  293.810839][ T5840] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  293.840748][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.871829][ T5840] usb 4-1: config 0 descriptor??
[  294.173648][ T8033] binder: 8029:8033 ioctl c0306201 200000000640 returned -22
[  294.746152][ T5840] usbhid 4-1:0.0: can't add hid device: -71
[  294.764624][ T5840] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  294.790066][ T5840] usb 4-1: USB disconnect, device number 5
[  298.645231][   T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  299.233617][   T10] usb 3-1: Using ep0 maxpacket: 32
[  299.241324][   T10] usb 3-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0
[  299.254864][   T10] usb 3-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  299.269846][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  299.304746][   T10] usb 3-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  299.717941][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.789773][   T10] usb 3-1: config 0 descriptor??
[  300.056946][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  300.345975][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  300.399661][   T10] usb 3-1: USB disconnect, device number 3
[  300.901242][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  300.946517][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.122352][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.365405][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.384372][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.413298][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.434161][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.451613][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.517095][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.542505][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.564998][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.582936][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.719975][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.727974][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.735965][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.745663][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.753567][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.762598][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.770819][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.778822][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.819113][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.883654][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.899195][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  302.915212][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.048888][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.068167][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.081971][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.108380][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.169571][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.218922][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.237588][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.271954][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.302452][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.332841][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.396514][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.490399][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.592652][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.696772][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.817760][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  303.951345][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  304.100128][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  304.121502][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  304.153991][   T10] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0
[  304.245593][   T10] hid-generic 0000:007F:FFFFFFFE.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  304.440970][ T8124] fido_id[8124]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  305.408474][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  305.420657][   T24] IPVS: starting estimator thread 0...
[  305.876384][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  305.892312][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  305.965825][ T8138] IPVS: using max 44 ests per chain, 105600 per kthread
[  305.976922][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  305.985262][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  305.995237][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.063712][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.126491][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.185330][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.202875][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.235291][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.295381][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.305047][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.337529][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.442863][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.553222][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.592667][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  306.769324][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  307.410507][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  307.555947][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  307.563725][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  307.641268][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  307.758641][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  307.987096][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  307.994885][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.003117][ T8160] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.651'.
[  308.012429][ T8160] netlink: zone id is out of range
[  308.017578][ T8160] netlink: get zone limit has 8 unknown bytes
[  308.137596][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.169041][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.197887][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.223552][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.252239][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.278132][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.308363][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.318642][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.326993][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.335471][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.343635][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.352025][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.360230][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.368740][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.377471][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.385644][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.396582][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.405289][  T981] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0
[  308.461742][  T981] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  308.875824][ T8166] fido_id[8166]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  310.064816][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.110085][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.132980][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.141903][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.151696][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.219093][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.253644][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.275476][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.315445][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.344163][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.368824][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.389510][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.407637][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.425303][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.445235][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.463677][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.494008][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.509269][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.530562][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.558626][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.579353][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.599834][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.615396][   T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  310.633158][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.657193][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.675280][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.703467][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.733790][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.777266][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.785616][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.793397][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.801771][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.810114][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.819415][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.836886][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  310.849960][   T24] usb 3-1: config 0 has no interface number 0
[  310.856672][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  310.866027][   T24] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  311.027485][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  311.095889][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.132259][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  311.293057][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  311.318782][   T24] usb 3-1: config 0 descriptor??
[  311.345724][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  311.368351][   T24] usb 3-1: selecting invalid altsetting 1
[  311.374842][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  311.384488][   T24] dvb_ttusb_budget: ttusb_init_controller: error
[  311.498478][   T24] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  311.508708][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  311.519304][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  311.541789][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  311.556488][  T981] hid-generic 0000:007F:FFFFFFFE.0004: unknown main item tag 0x0
[  311.671012][  T981] hid-generic 0000:007F:FFFFFFFE.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  312.579476][ T8192] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  312.590993][ T8209] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  313.369465][   T24] DVB: Unable to find symbol cx22700_attach()
[  313.711625][ T8212] fido_id[8212]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  313.796701][   T24] DVB: Unable to find symbol tda10046_attach()
[  313.813816][   T24] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  314.933407][   T24] usb 3-1: USB disconnect, device number 4
[  315.408800][ T8232] netlink: 79 bytes leftover after parsing attributes in process `syz.0.672'.
[  315.434546][ T8232] netlink: 79 bytes leftover after parsing attributes in process `syz.0.672'.
[  316.930770][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  316.965256][ T1210] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  317.135700][ T1210] usb 3-1: Using ep0 maxpacket: 8
[  317.144821][ T1210] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  317.158425][ T1210] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.174634][ T1210] pvrusb2: Hardware description: Terratec Grabster AV400
[  317.184978][ T1210] pvrusb2: **********
[  317.191900][ T1210] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  317.208982][ T1210] pvrusb2: Important functionality might not be entirely working.
[  317.233011][ T1210] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  317.244733][ T1210] pvrusb2: **********
[  317.764482][ T2343] pvrusb2: Invalid write control endpoint
[  317.799994][ T8262] netlink: 'syz.3.680': attribute type 39 has an invalid length.
[  317.969570][ T5898] usb 3-1: USB disconnect, device number 5
[  318.046572][ T2343] pvrusb2: Invalid write control endpoint
[  318.052345][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  318.124736][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  318.140150][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  318.215914][ T2343] pvrusb2: Device being rendered inoperable
[  318.318731][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  318.350444][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  318.519569][ T2343] pvrusb2: Attached sub-driver cx25840
[  318.526427][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  318.584255][ T8270] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.682'.
[  318.593622][ T8270] netlink: zone id is out of range
[  318.598959][ T8270] netlink: get zone limit has 8 unknown bytes
[  318.737422][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  319.553580][ T8279] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  319.943064][ T8291] netlink: 52 bytes leftover after parsing attributes in process `syz.2.688'.
[  320.861911][ T8304] rdma_rxe: rxe_newlink: failed to add lo
[  321.607653][ T8314] netlink: 48 bytes leftover after parsing attributes in process `syz.1.695'.
[  321.825331][ T5898] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  321.995489][ T5898] usb 1-1: Using ep0 maxpacket: 8
[  322.018829][ T5898] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  322.033741][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.074728][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400
[  322.082005][ T5898] pvrusb2: **********
[  322.093095][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  322.103802][ T5898] pvrusb2: Important functionality might not be entirely working.
[  322.121806][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  322.133596][ T5898] pvrusb2: **********
[  322.339422][ T8326] netlink: 'syz.1.699': attribute type 9 has an invalid length.
[  322.347233][ T8326] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'.
[  322.355329][ T2343] pvrusb2: Invalid write control endpoint
[  322.726657][ T5898] usb 1-1: USB disconnect, device number 10
[  322.918081][ T2343] pvrusb2: Invalid write control endpoint
[  322.923994][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  322.954934][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  322.989803][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  323.021161][ T2343] pvrusb2: Device being rendered inoperable
[  323.051574][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  323.069698][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  323.078952][ T2343] pvrusb2: Attached sub-driver cx25840
[  323.084815][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  323.096899][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  323.112492][ T8337] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  323.205418][ T5840] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  323.915081][ T5840] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  323.935622][ T5840] usb 2-1: config 0 has no interface number 0
[  323.941830][ T5840] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  323.954761][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.037265][ T5840] usb 2-1: config 0 descriptor??
[  324.079208][ T5840] usb 2-1: selecting invalid altsetting 1
[  324.088669][ T5840] dvb_ttusb_budget: ttusb_init_controller: error
[  324.096333][ T5840] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  324.468591][ T8361] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  324.477658][ T8362] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  326.999107][ T5840] DVB: Unable to find symbol cx22700_attach()
[  327.514615][ T8375] syz2: rxe_newlink: already configured on lo
[  328.313594][ T8376] netlink: 'syz.4.712': attribute type 9 has an invalid length.
[  328.321538][ T8376] netlink: 20 bytes leftover after parsing attributes in process `syz.4.712'.
[  328.347788][ T5840] DVB: Unable to find symbol tda10046_attach()
[  328.605240][ T5840] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  329.561855][ T5840] usb 2-1: USB disconnect, device number 8
[  330.619144][ T5840] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  331.355277][ T5840] usb 2-1: Using ep0 maxpacket: 8
[  331.370649][ T5840] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  331.396416][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.447629][ T5840] pvrusb2: Hardware description: Terratec Grabster AV400
[  331.454703][ T5840] pvrusb2: **********
[  331.480556][ T5840] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  331.509316][ T5840] pvrusb2: Important functionality might not be entirely working.
[  331.562821][ T5840] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  331.763654][ T5840] pvrusb2: **********
[  331.794459][ T2343] pvrusb2: Invalid write control endpoint
[  332.255941][ T5898] usb 2-1: USB disconnect, device number 9
[  332.368601][ T8422] rdma_rxe: rxe_newlink: failed to add lo
[  332.753683][ T2343] pvrusb2: Invalid write control endpoint
[  332.777358][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  332.795178][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  332.802754][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  332.858758][ T2343] pvrusb2: Device being rendered inoperable
[  332.912763][ T8423] netlink: 44 bytes leftover after parsing attributes in process `syz.0.724'.
[  332.947761][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  333.003686][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  333.021604][ T2343] pvrusb2: Attached sub-driver cx25840
[  333.056353][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  333.074944][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  333.106926][ T8428] netlink: 'syz.4.725': attribute type 39 has an invalid length.
[  334.804713][ T8439] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.729'.
[  334.815026][ T8439] netlink: zone id is out of range
[  334.820782][ T8439] netlink: get zone limit has 8 unknown bytes
[  335.046335][ T8446] netlink: 'syz.0.728': attribute type 9 has an invalid length.
[  335.054973][ T8446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.728'.
[  336.875591][ T5840] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  337.319357][ T8467] netlink: 'syz.2.737': attribute type 39 has an invalid length.
[  337.492376][ T5840] usb 1-1: Using ep0 maxpacket: 8
[  337.504983][ T5840] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  337.522955][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.599284][ T5840] pvrusb2: Hardware description: Terratec Grabster AV400
[  337.624500][ T5840] pvrusb2: **********
[  337.634411][ T5840] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  337.855342][ T5840] pvrusb2: Important functionality might not be entirely working.
[  337.873653][ T5840] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  337.927616][ T5840] pvrusb2: **********
[  337.976941][ T2343] pvrusb2: Invalid write control endpoint
[  338.162444][   T43] usb 1-1: USB disconnect, device number 11
[  338.906980][ T2343] pvrusb2: Invalid write control endpoint
[  338.912756][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  338.996065][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  339.003652][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  339.097417][ T2343] pvrusb2: Device being rendered inoperable
[  339.136792][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  339.143920][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  339.214605][ T2343] pvrusb2: Attached sub-driver cx25840
[  339.224295][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  339.244869][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  340.178796][ T8498] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  341.143749][ T8520] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  341.226420][  T981] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  341.365328][  T981] usb 5-1: device descriptor read/64, error -71
[  341.615247][  T981] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  341.776105][  T981] usb 5-1: device descriptor read/64, error -71
[  341.900387][  T981] usb usb5-port1: attempt power cycle
[  342.364796][  T981] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  342.765860][  T981] usb 5-1: device descriptor read/8, error -71
[  343.025606][  T981] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  343.046035][  T981] usb 5-1: device descriptor read/8, error -71
[  343.155477][  T981] usb usb5-port1: unable to enumerate USB device
[  343.289128][ T8543] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  343.508470][ T8552] fuse: Bad value for 'group_id'
[  343.516116][ T8552] fuse: Bad value for 'group_id'
[  344.174020][ T8560] netlink: 48 bytes leftover after parsing attributes in process `syz.4.767'.
[  345.049578][ T8569] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  346.015487][ T8584] ubi: mtd0 is already attached to ubi31
[  347.214439][    T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  347.304522][ T5840] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  347.465505][ T5840] usb 5-1: device descriptor read/64, error -71
[  347.498025][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  347.508430][    T9] usb 2-1: config 0 has no interface number 0
[  347.514558][    T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  347.625794][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.675615][    T9] usb 2-1: config 0 descriptor??
[  347.705325][ T5840] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  347.736802][    T9] usb 2-1: selecting invalid altsetting 1
[  347.742701][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  347.821457][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  347.885916][ T5840] usb 5-1: device descriptor read/64, error -71
[  347.984008][    T9] DVB: Unable to find symbol cx22700_attach()
[  348.065481][ T5840] usb usb5-port1: attempt power cycle
[  348.234985][    T9] DVB: Unable to find symbol tda10046_attach()
[  348.241287][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  348.261605][ T8615] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  348.264344][ T8617] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  348.420468][    T9] usb 2-1: USB disconnect, device number 10
[  348.428083][ T5840] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  348.460947][ T5840] usb 5-1: device descriptor read/8, error -71
[  349.357991][ T5840] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  349.413018][ T5840] usb 5-1: device descriptor read/8, error -71
[  349.545562][ T5840] usb usb5-port1: unable to enumerate USB device
[  350.051439][ T8634] fuse: Bad value for 'group_id'
[  350.082092][ T8634] fuse: Bad value for 'group_id'
[  350.428434][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  350.428451][   T30] audit: type=1326 audit(1751803488.405:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8638 comm="syz.4.791" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81c758e929 code=0x0
[  352.956373][ T8671] netlink: 'syz.0.799': attribute type 27 has an invalid length.
[  361.466776][   T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  361.507787][ T8769] netlink: 'syz.1.831': attribute type 39 has an invalid length.
[  361.658255][   T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  361.674880][   T10] usb 5-1: config 0 has no interface number 0
[  361.682034][   T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  361.692536][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.712719][   T10] usb 5-1: config 0 descriptor??
[  361.723011][   T10] usb 5-1: selecting invalid altsetting 1
[  361.729153][   T10] dvb_ttusb_budget: ttusb_init_controller: error
[  361.749351][   T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  363.134131][   T10] DVB: Unable to find symbol cx22700_attach()
[  364.884772][ T8795] netlink: 44 bytes leftover after parsing attributes in process `syz.2.835'.
[  364.905224][   T10] DVB: Unable to find symbol tda10046_attach()
[  364.911392][   T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  365.285334][  T981] usb 5-1: USB disconnect, device number 15
[  368.572007][ T8846] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  368.646131][ T8850] netlink: 44 bytes leftover after parsing attributes in process `syz.2.849'.
[  368.741338][  T981] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  368.991474][  T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  369.000544][  T981] usb 4-1: config 0 has no interface number 0
[  369.011818][  T981] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  369.028672][  T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  369.163643][  T981] usb 4-1: config 0 descriptor??
[  369.260964][  T981] usb 4-1: selecting invalid altsetting 1
[  369.286576][  T981] dvb_ttusb_budget: ttusb_init_controller: error
[  369.309692][  T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  371.155664][  T981] DVB: Unable to find symbol cx22700_attach()
[  371.554448][  T981] DVB: Unable to find symbol tda10046_attach()
[  371.587437][  T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  372.066485][ T8878] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  372.786232][   T24] usb 4-1: USB disconnect, device number 6
[  372.902191][ T8885] binder: BINDER_SET_CONTEXT_MGR already set
[  372.913000][ T8885] binder: 8884:8885 ioctl 4018620d 200000000040 returned -16
[  373.293372][ T8894] netlink: 'syz.1.859': attribute type 9 has an invalid length.
[  373.301276][ T8894] netlink: 20 bytes leftover after parsing attributes in process `syz.1.859'.
[  373.817251][ T8903] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  375.086481][ T8917] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  375.120168][ T8917] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  376.304434][ T8933] ubi: mtd0 is already attached to ubi31
[  376.845287][ T8944] netlink: 'syz.4.874': attribute type 9 has an invalid length.
[  376.853139][ T8944] netlink: 20 bytes leftover after parsing attributes in process `syz.4.874'.
[  377.413293][ T8949] fuse: Bad value for 'fd'
[  377.564432][ T8951] netlink: 'syz.0.876': attribute type 27 has an invalid length.
[  377.583185][ T8953] netlink: 'syz.4.877': attribute type 4 has an invalid length.
[  377.655970][ T8955] netlink: 52 bytes leftover after parsing attributes in process `syz.0.876'.
[  378.167323][ T8966] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  378.369065][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.699494][ T8970] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  380.268038][ T8989] netlink: 'syz.0.887': attribute type 9 has an invalid length.
[  380.280323][ T8989] netlink: 20 bytes leftover after parsing attributes in process `syz.0.887'.
[  381.796933][ T9003] netlink: 'syz.2.892': attribute type 27 has an invalid length.
[  381.806499][ T9003] netlink: 52 bytes leftover after parsing attributes in process `syz.2.892'.
[  383.264146][ T9015] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  385.115834][ T9035] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  385.220747][ T9043] netlink: 'syz.3.904': attribute type 39 has an invalid length.
[  385.636751][   T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  385.785150][ T5840] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  386.888413][   T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  386.905380][   T10] usb 1-1: config 0 has no interface number 0
[  386.921321][   T10] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  386.985567][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.065996][ T5840] usb 3-1: Using ep0 maxpacket: 32
[  387.096963][   T10] usb 1-1: config 0 descriptor??
[  387.205426][ T5840] usb 3-1: no configurations
[  387.315394][   T10] usb 1-1: selecting invalid altsetting 1
[  387.347825][ T5840] usb 3-1: can't read configurations, error -22
[  387.409008][   T10] dvb_ttusb_budget: ttusb_init_controller: error
[  387.426317][   T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  387.545684][ T5840] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  387.626944][ T9062] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  387.634310][ T9063] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  387.745419][ T5840] usb 3-1: Using ep0 maxpacket: 32
[  387.793608][ T5840] usb 3-1: no configurations
[  387.819777][ T5840] usb 3-1: can't read configurations, error -22
[  387.864954][ T5840] usb usb3-port1: attempt power cycle
[  387.880942][   T10] DVB: Unable to find symbol cx22700_attach()
[  388.020065][   T10] DVB: Unable to find symbol tda10046_attach()
[  388.028525][   T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  388.215604][ T5840] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  388.246779][ T5840] usb 3-1: Using ep0 maxpacket: 32
[  388.253851][ T5840] usb 3-1: no configurations
[  388.270686][ T5840] usb 3-1: can't read configurations, error -22
[  388.523530][ T5840] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  388.884101][ T5840] usb 3-1: device descriptor read/8, error -71
[  388.997143][   T10] usb 1-1: USB disconnect, device number 12
[  389.028034][ T5840] usb usb3-port1: unable to enumerate USB device
[  389.375214][ T5840] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  389.845353][ T5840] usb 3-1: Using ep0 maxpacket: 8
[  390.019613][ T5840] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  390.047587][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.490675][ T5840] pvrusb2: Hardware description: Terratec Grabster AV400
[  390.633622][ T5840] pvrusb2: **********
[  390.763156][ T9086] netlink: 'syz.1.918': attribute type 9 has an invalid length.
[  390.771102][ T9086] netlink: 20 bytes leftover after parsing attributes in process `syz.1.918'.
[  390.801866][ T5840] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  391.057759][ T5840] pvrusb2: Important functionality might not be entirely working.
[  391.082646][ T5840] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  391.144640][ T5840] pvrusb2: **********
[  391.174055][ T2343] pvrusb2: Invalid write control endpoint
[  391.264775][ T9093] pvrusb2: Invalid write control endpoint
[  391.529475][ T5840] usb 3-1: USB disconnect, device number 10
[  392.248817][ T2343] pvrusb2: Invalid write control endpoint
[  392.265444][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  392.281953][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  392.517587][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  392.540082][ T2343] pvrusb2: Device being rendered inoperable
[  392.684740][ T9102] binder: 9094:9102 ioctl c0306201 200000000640 returned -22
[  392.914103][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  392.921309][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  392.935020][ T2343] pvrusb2: Attached sub-driver cx25840
[  392.943882][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  393.085182][   T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  393.094918][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  393.276552][   T43] usb 2-1: Using ep0 maxpacket: 32
[  393.468371][   T43] usb 2-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.522886][  T981] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  393.564119][   T43] usb 2-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  393.747634][   T43] usb 2-1: config 0 interface 0 has no altsetting 0
[  393.764361][   T43] usb 2-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  393.788470][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.818058][   T43] usb 2-1: config 0 descriptor??
[  393.887303][  T981] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  393.911192][  T981] usb 5-1: config 0 has no interface number 0
[  393.948775][  T981] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  393.985273][  T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.058369][  T981] usb 5-1: config 0 descriptor??
[  394.068258][   T43] usbhid 2-1:0.0: can't add hid device: -71
[  394.077573][  T981] usb 5-1: selecting invalid altsetting 1
[  394.083448][  T981] dvb_ttusb_budget: ttusb_init_controller: error
[  394.095503][   T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  394.112971][ T9120] netlink: 44 bytes leftover after parsing attributes in process `syz.0.928'.
[  394.129673][  T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  394.144176][   T43] usb 2-1: USB disconnect, device number 11
[  394.303901][  T981] DVB: Unable to find symbol cx22700_attach()
[  394.535897][ T9128] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  394.543203][ T9126] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  396.053665][ T9133] syz2: rxe_newlink: already configured on lo
[  396.641250][ T9136] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.931'.
[  396.694647][ T9136] netlink: zone id is out of range
[  396.704484][ T9136] netlink: get zone limit has 8 unknown bytes
[  396.896250][ T9142] netlink: 'syz.1.933': attribute type 9 has an invalid length.
[  396.904070][ T9142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.933'.
[  397.269835][  T981] DVB: Unable to find symbol tda10046_attach()
[  397.328724][  T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  397.539862][  T981] usb 5-1: USB disconnect, device number 16
[  398.917072][ T9160] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  399.525458][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  399.685399][    T9] usb 2-1: Using ep0 maxpacket: 8
[  399.703172][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  399.819624][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.846708][    T9] pvrusb2: Hardware description: Terratec Grabster AV400
[  399.864739][    T9] pvrusb2: **********
[  399.869572][    T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  399.880016][    T9] pvrusb2: Important functionality might not be entirely working.
[  399.888007][    T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  400.495366][    T9] pvrusb2: **********
[  400.619881][ T2343] pvrusb2: Invalid write control endpoint
[  400.804430][ T9157] pvrusb2: Invalid write control endpoint
[  400.828779][    T9] usb 2-1: USB disconnect, device number 12
[  400.895162][ T9182] syz2: rxe_newlink: already configured on lo
[  401.529694][ T2343] pvrusb2: Invalid write control endpoint
[  401.570512][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  401.612835][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  401.661416][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  401.688600][ T2343] pvrusb2: Device being rendered inoperable
[  401.711298][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  401.719015][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  401.730569][ T2343] pvrusb2: Attached sub-driver cx25840
[  401.736534][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  401.747094][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  405.448418][ T9216] fuse: Bad value for 'fd'
[  407.136195][ T9213] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  407.175267][ T9213] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  409.108424][ T9254] fuse: Bad value for 'fd'
[  409.252568][ T9252] netlink: 'syz.3.968': attribute type 39 has an invalid length.
[  409.581382][ T9260] rdma_rxe: rxe_newlink: failed to add lo
[  412.693102][ T9286] fuse: Bad value for 'fd'
[  412.765808][ T9288] fuse: Unknown parameter 'grou00000000000000000000'
[  413.905196][ T9278] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  413.927480][ T9301] rdma_rxe: rxe_newlink: failed to add lo
[  413.938423][ T9278] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  418.002534][ T9326] fuse: Bad value for 'fd'
[  425.834515][ T9387] fuse: Bad value for 'fd'
[  428.025162][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  428.225136][    T9] usb 4-1: Using ep0 maxpacket: 32
[  428.990139][    T9] usb 4-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.015320][    T9] usb 4-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  429.029724][ T9408] netlink: 'syz.0.1016': attribute type 39 has an invalid length.
[  429.045102][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  429.051758][    T9] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  429.085234][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.148618][    T9] usb 4-1: config 0 descriptor??
[  429.197064][    T9] usb 4-1: can't set config #0, error -71
[  429.373454][    T9] usb 4-1: USB disconnect, device number 7
[  430.619258][ T5898] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  430.835362][ T5898] usb 2-1: Using ep0 maxpacket: 32
[  430.910262][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  430.952741][ T5898] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  431.011460][ T5898] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  431.053908][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.324512][ T9433] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  431.337367][ T5898] usb 2-1: config 0 descriptor??
[  431.941403][    T9] usb 2-1: USB disconnect, device number 13
[  433.605378][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  433.855273][   T10] usb 4-1: Using ep0 maxpacket: 32
[  433.922462][   T10] usb 4-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0
[  434.083080][   T10] usb 4-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  434.192347][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  434.201114][   T10] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  434.215540][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.234408][   T10] usb 4-1: config 0 descriptor??
[  434.614238][   T10] usbhid 4-1:0.0: can't add hid device: -71
[  434.677407][   T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  434.915691][   T10] usb 4-1: USB disconnect, device number 8
[  437.393681][ T9477] qrtr: Invalid version 0
[  437.459174][ T9475] fuse: Bad value for 'fd'
[  438.615200][   T10] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  439.157789][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  439.175292][   T10] usb 4-1: config 0 has no interface number 0
[  439.184281][   T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  439.224349][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.384162][   T10] usb 4-1: config 0 descriptor??
[  439.393268][   T10] usb 4-1: selecting invalid altsetting 1
[  439.400956][   T10] dvb_ttusb_budget: ttusb_init_controller: error
[  439.421366][   T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  439.721630][ T9516] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  439.728949][ T9518] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  439.808481][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  441.622944][   T10] DVB: Unable to find symbol cx22700_attach()
[  441.777975][ T5898] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  441.856045][   T10] DVB: Unable to find symbol tda10046_attach()
[  441.874575][   T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  441.920836][   T10] usb 4-1: USB disconnect, device number 9
[  441.936710][ T5898] usb 5-1: Using ep0 maxpacket: 32
[  441.943523][ T5898] usb 5-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0
[  441.953671][ T5898] usb 5-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  442.000457][ T5898] usb 5-1: config 0 interface 0 has no altsetting 0
[  442.034932][ T5898] usb 5-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  442.050037][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.135874][ T5898] usb 5-1: config 0 descriptor??
[  442.268998][ T9529] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  442.524800][ T5898] usbhid 5-1:0.0: can't add hid device: -71
[  442.797542][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  443.235596][ T9532] /dev/nullb0: Can't open blockdev
[  443.256070][ T5898] usb 5-1: USB disconnect, device number 17
[  443.459256][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  443.470063][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  443.522382][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  443.548064][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  443.576997][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  443.758799][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  444.388602][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  444.511384][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  444.740098][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  444.757490][ T9544] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1049'.
[  444.791285][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  444.858778][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  444.889299][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.095140][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.121971][ T9555] autofs: Bad value for 'fd'
[  445.123263][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.334500][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.343236][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.353657][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.361498][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.403928][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.550515][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.935125][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.945204][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.959938][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  445.980466][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.034946][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.045199][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.054812][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.087852][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.105180][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.169395][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.704813][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.712695][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.722970][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.732532][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.740363][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.756936][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  446.893887][ T9569] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  447.088836][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  447.285233][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  447.345606][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  447.353609][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  447.423443][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  447.441753][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  447.453321][   T10] hid-generic 0000:007F:FFFFFFFE.0005: unknown main item tag 0x0
[  447.609888][   T10] hid-generic 0000:007F:FFFFFFFE.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  447.951945][ T9580] binder: 9572:9580 ioctl c0306201 200000000640 returned -22
[  448.967068][ T9586] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  449.049311][ T9581] fido_id[9581]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  449.135872][ T9588] /dev/nullb0: Can't open blockdev
[  454.417112][ T9632] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  455.206364][ T9639] binder: 9633:9639 ioctl c0306201 200000000640 returned -22
[  457.702201][ T9658] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  457.898116][ T9661] /dev/nullb0: Can't open blockdev
[  460.523313][ T9681] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1087'.
[  460.533174][ T9681] netlink: zone id is out of range
[  460.538696][ T9681] netlink: get zone limit has 8 unknown bytes
[  466.785828][  T981] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  466.940946][ T9733] fuse: Bad value for 'fd'
[  467.029055][  T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  467.058868][  T981] usb 4-1: config 0 has no interface number 0
[  467.149923][  T981] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  468.125489][  T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  468.161324][ T9735] fuse: Invalid rootmode
[  468.707158][  T981] usb 4-1: config 0 descriptor??
[  468.775809][  T981] usb 4-1: selecting invalid altsetting 1
[  468.781791][  T981] dvb_ttusb_budget: ttusb_init_controller: error
[  468.819865][ T9738] trusted_key: encrypted_key: master key parameter 'trusteyz' is invalid
[  468.856013][  T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  469.661653][ T9744] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  469.670162][ T9745] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  471.836737][  T981] DVB: Unable to find symbol cx22700_attach()
[  473.475661][  T981] DVB: Unable to find symbol tda10046_attach()
[  473.523690][  T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  473.538754][ T9770] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  473.621287][  T981] usb 4-1: USB disconnect, device number 10
[  479.767051][ T9804] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1121'.
[  480.165400][   T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  480.387555][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  480.405386][   T10] usb 3-1: config 0 has no interface number 0
[  480.415985][   T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  480.426527][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  480.456483][   T10] usb 3-1: config 0 descriptor??
[  480.476576][   T10] usb 3-1: selecting invalid altsetting 1
[  480.498757][   T10] dvb_ttusb_budget: ttusb_init_controller: error
[  480.506798][   T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  481.001222][ T9812] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  481.008832][ T9813] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  484.407680][   T10] DVB: Unable to find symbol cx22700_attach()
[  484.633451][   T10] DVB: Unable to find symbol tda10046_attach()
[  484.685603][   T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  484.730991][   T10] usb 3-1: USB disconnect, device number 11
[  485.203387][ T9825] netlink: 'syz.2.1126': attribute type 9 has an invalid length.
[  485.211469][ T9825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1126'.
[  487.965381][   T10] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  488.160236][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  488.194670][   T10] usb 4-1: config 0 has no interface number 0
[  488.248018][   T10] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  488.283246][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  488.320108][   T10] usb 4-1: config 0 descriptor??
[  488.348547][   T10] usb 4-1: selecting invalid altsetting 1
[  488.400548][   T10] dvb_ttusb_budget: ttusb_init_controller: error
[  488.435088][   T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  491.571119][   T10] DVB: Unable to find symbol cx22700_attach()
[  491.721393][   T10] DVB: Unable to find symbol tda10046_attach()
[  491.731956][   T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  491.774983][   T10] usb 4-1: USB disconnect, device number 11
[  493.461894][ T9866] netlink: 'syz.0.1138': attribute type 4 has an invalid length.
[  499.532224][ T9906] netlink: 'syz.1.1148': attribute type 27 has an invalid length.
[  499.558393][ T9906] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1148'.
[  499.637518][ T9908] netlink: 'syz.4.1149': attribute type 39 has an invalid length.
[  501.249526][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.713936][ T9926] netlink: 'syz.2.1153': attribute type 4 has an invalid length.
[  502.125627][ T5898] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  502.422361][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  502.433212][ T5898] usb 2-1: config 0 has no interface number 0
[  502.441305][ T5898] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  502.451588][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.479626][ T5898] usb 2-1: config 0 descriptor??
[  502.500731][ T5898] usb 2-1: selecting invalid altsetting 1
[  502.512435][ T5898] dvb_ttusb_budget: ttusb_init_controller: error
[  502.533019][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  502.798711][ T9947] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  506.022612][ T5898] DVB: Unable to find symbol cx22700_attach()
[  506.299117][ T5898] DVB: Unable to find symbol tda10046_attach()
[  506.335212][  T981] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  506.477731][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  507.261680][ T5898] usb 2-1: USB disconnect, device number 14
[  507.287451][  T981] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  507.525530][  T981] usb 1-1: config 0 has no interface number 0
[  508.455253][  T981] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  508.464389][  T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.537568][  T981] usb 1-1: config 0 descriptor??
[  508.566828][  T981] usb 1-1: selecting invalid altsetting 1
[  508.572805][  T981] dvb_ttusb_budget: ttusb_init_controller: error
[  508.640288][  T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  508.760192][ T9972] netlink: 'syz.4.1167': attribute type 4 has an invalid length.
[  508.860651][ T9973] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  510.800601][  T981] DVB: Unable to find symbol cx22700_attach()
[  510.950044][  T981] DVB: Unable to find symbol tda10046_attach()
[  510.974540][  T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  511.042294][  T981] usb 1-1: USB disconnect, device number 13
[  513.321010][ T9994] rdma_rxe: rxe_newlink: failed to add lo
[  515.971771][T10015] fuse: Unknown parameter 'user_i00000000000000000000'
[  517.122185][T10028] rdma_rxe: rxe_newlink: failed to add lo
[  518.403766][T10026] netlink: 'syz.0.1184': attribute type 27 has an invalid length.
[  518.445493][T10026] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1184'.
[  521.022795][T10055] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  523.615054][  T981] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  523.817296][  T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  523.827760][  T981] usb 4-1: config 0 has no interface number 0
[  523.839454][  T981] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  523.890802][  T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  523.955577][  T981] usb 4-1: config 0 descriptor??
[  524.004172][  T981] usb 4-1: selecting invalid altsetting 1
[  524.026816][  T981] dvb_ttusb_budget: ttusb_init_controller: error
[  524.033689][  T981] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  526.097096][  T981] DVB: Unable to find symbol cx22700_attach()
[  526.353122][  T981] DVB: Unable to find symbol tda10046_attach()
[  526.360895][  T981] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  526.391084][  T981] usb 4-1: USB disconnect, device number 12
[  528.418250][T10092] netlink: 'syz.2.1202': attribute type 27 has an invalid length.
[  528.505278][T10096] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1202'.
[  529.063420][T10105] netlink: 'syz.3.1205': attribute type 39 has an invalid length.
[  529.656224][T10109] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  530.231574][T10116] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  530.445117][    T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  530.599346][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  530.618560][    T9] usb 2-1: config 0 has no interface number 0
[  530.628587][    T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  530.639823][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.654052][    T9] usb 2-1: config 0 descriptor??
[  530.680512][    T9] usb 2-1: selecting invalid altsetting 1
[  530.701888][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  530.710737][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  530.803573][    T9] DVB: Unable to find symbol cx22700_attach()
[  530.854546][    T9] DVB: Unable to find symbol tda10046_attach()
[  530.863143][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  532.708995][    T9] usb 2-1: USB disconnect, device number 15
[  533.718578][T10135] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1215'.
[  533.728333][T10135] netlink: zone id is out of range
[  533.733697][T10135] netlink: get zone limit has 8 unknown bytes
[  535.442200][T10145] fuse: Bad value for 'fd'
[  538.405063][    T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  539.334832][    T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  539.360791][    T9] usb 5-1: config 0 has no interface number 0
[  539.376728][    T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  539.389932][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.556685][    T9] usb 5-1: config 0 descriptor??
[  540.241141][    T9] usb 5-1: selecting invalid altsetting 1
[  540.253881][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  540.262214][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  540.400961][T10179] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  541.927236][T10183] fuse: Bad value for 'fd'
[  542.472812][    T9] DVB: Unable to find symbol cx22700_attach()
[  546.121068][    T9] DVB: Unable to find symbol tda10046_attach()
[  546.128478][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  546.185374][    T9] usb 5-1: USB disconnect, device number 18
[  546.420819][T10209] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  546.787684][T10213] fuse: Bad value for 'fd'
[  547.670939][T10219] netlink: 'syz.2.1240': attribute type 27 has an invalid length.
[  547.753554][T10223] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  548.035817][T10225] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1240'.
[  548.148134][T10226] netlink: 'syz.1.1243': attribute type 4 has an invalid length.
[  548.845039][    T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  549.278856][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  549.354246][    T9] usb 3-1: config 0 has no interface number 0
[  549.413026][    T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  549.503964][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.677672][    T9] usb 3-1: config 0 descriptor??
[  549.734710][    T9] usb 3-1: selecting invalid altsetting 1
[  549.774409][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  549.811419][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  550.978278][T10252] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  552.575029][    T9] DVB: Unable to find symbol cx22700_attach()
[  552.669917][T10258] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  552.696767][    T9] DVB: Unable to find symbol tda10046_attach()
[  552.703249][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  553.198251][    T9] usb 3-1: USB disconnect, device number 12
[  554.151751][T10276] fuse: Bad value for 'fd'
[  554.459394][T10278] netlink: 'syz.0.1255': attribute type 4 has an invalid length.
[  554.511844][T10281] 9pnet_fd: Insufficient options for proto=fd
[  554.545626][T10282] 9pnet_fd: Insufficient options for proto=fd
[  557.035056][    T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  557.247545][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  557.258383][    T9] usb 4-1: config 0 has no interface number 0
[  557.264666][    T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  557.278663][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  557.406213][    T9] usb 4-1: config 0 descriptor??
[  557.427826][    T9] usb 4-1: selecting invalid altsetting 1
[  557.441322][    T9] dvb_ttusb_budget: ttusb_init_controller: error
[  557.450267][    T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  557.715778][    T9] DVB: Unable to find symbol cx22700_attach()
[  557.904819][    T9] DVB: Unable to find symbol tda10046_attach()
[  557.992592][    T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  558.027964][    T9] usb 4-1: USB disconnect, device number 13
[  560.484404][T10352] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1277'.
[  560.494531][T10352] netlink: zone id is out of range
[  560.501410][T10352] netlink: get zone limit has 8 unknown bytes
[  562.005281][   T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  562.366717][   T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  562.374768][   T10] usb 3-1: config 0 has no interface number 0
[  562.432845][   T10] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  562.440415][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'.
[  562.460907][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1285'.
[  562.477076][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.507224][   T10] usb 3-1: config 0 descriptor??
[  562.745595][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  562.911184][   T10] usb 3-1: selecting invalid altsetting 1
[  562.936507][   T10] dvb_ttusb_budget: ttusb_init_controller: error
[  562.943395][   T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  563.095820][   T10] DVB: Unable to find symbol cx22700_attach()
[  563.289881][   T10] DVB: Unable to find symbol tda10046_attach()
[  563.310035][   T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  563.343399][   T10] usb 3-1: USB disconnect, device number 13
[  565.324857][T10403] fuse: Bad value for 'fd'
[  570.049703][T10436] netlink: 'syz.2.1299': attribute type 4 has an invalid length.
[  570.425350][ T5898] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  571.220335][ T5898] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  571.250166][ T5898] usb 2-1: config 0 has no interface number 0
[  571.281565][ T5898] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  571.321181][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.375766][ T5898] usb 2-1: config 0 descriptor??
[  571.386254][ T5898] usb 2-1: selecting invalid altsetting 1
[  571.399493][ T5898] dvb_ttusb_budget: ttusb_init_controller: error
[  571.997634][ T5898] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  572.154570][ T5898] DVB: Unable to find symbol cx22700_attach()
[  572.265452][ T5898] DVB: Unable to find symbol tda10046_attach()
[  572.273582][ T5898] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  572.306704][ T5898] usb 2-1: USB disconnect, device number 16
[  572.429637][T10465] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  572.485037][  T981] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  572.645017][   T43] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  572.664160][  T981] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  572.683982][  T981] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  572.715054][  T981] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  572.817263][  T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.847204][   T43] usb 5-1: config 0 has no interfaces?
[  572.866375][   T43] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  572.932273][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.165610][   T43] usb 5-1: config 0 descriptor??
[  573.202121][  T981] usb 4-1: usb_control_msg returned -32
[  573.286134][  T981] usbtmc 4-1:16.0: can't read capabilities
[  573.455221][T10472] input: syz0 as /devices/virtual/input/input9
[  573.671262][T10475] syz.3.1307 uses obsolete (PF_INET,SOCK_PACKET)
[  574.228086][  T981] usb 4-1: USB disconnect, device number 14
[  574.988000][T10490] netlink: 'syz.3.1315': attribute type 27 has an invalid length.
[  574.996579][T10490] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1315'.
[  575.198265][   T10] usb 5-1: USB disconnect, device number 19
[  575.283458][T10497] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1318'.
[  575.318924][T10500] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  578.105087][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  578.308171][   T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  578.332673][   T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  578.395885][   T10] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  578.429269][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.472357][   T10] usb 3-1: Product: syz
[  578.498477][   T10] usb 3-1: Manufacturer: syz
[  578.503106][   T10] usb 3-1: SerialNumber: syz
[  579.493393][   T10] usb 3-1: 0:2 : does not exist
[  579.578217][   T10] usb 3-1: USB disconnect, device number 14
[  579.750709][T10542] netlink: 'syz.2.1328': attribute type 27 has an invalid length.
[  579.777743][T10542] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1328'.
[  580.331379][T10548] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1330'.
[  580.578570][  T981] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  580.747749][  T981] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf
[  580.769747][  T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  580.802549][  T981] ums-cypress 3-1:1.0: USB Mass Storage device detected
[  582.532501][T10575] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  582.540810][  T981] usb 3-1: USB disconnect, device number 15
[  584.668358][T10600] netlink: 'syz.2.1342': attribute type 27 has an invalid length.
[  584.688370][T10600] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1342'.
[  586.209466][T10616] netlink: 'syz.4.1346': attribute type 9 has an invalid length.
[  586.217446][T10616] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1346'.
[  588.611145][T10642] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  589.410193][   T10] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  589.795188][T10648] fuse: Bad value for 'fd'
[  589.813332][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'.
[  589.886211][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  589.909128][T10654] bridge1: port 1(veth5) entered blocking state
[  589.918627][T10654] bridge1: port 1(veth5) entered disabled state
[  589.941098][T10654] veth5: entered allmulticast mode
[  589.962181][T10654] veth5: entered promiscuous mode
[  590.075256][    T9] usb 4-1: Using ep0 maxpacket: 8
[  590.120456][    T9] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  590.144993][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  590.171765][    T9] usb 4-1: Product: syz
[  590.186309][    T9] usb 4-1: Manufacturer: syz
[  590.196155][    T9] usb 4-1: SerialNumber: syz
[  590.208621][    T9] usb 4-1: config 0 descriptor??
[  590.781549][    T9] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  590.989362][    T9] gspca_sunplus: reg_w_riv err -71
[  590.994756][    T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  591.046352][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[  591.636749][    T9] usb 4-1: USB disconnect, device number 15
[  591.644379][   T10] usb 2-1: can't read configurations, error -71
[  591.844302][T10668] ntfs3: Unknown parameter 'barrier'
[  592.013072][T10673] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  592.946848][T10680] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  594.489534][   T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  594.852274][   T43] usb 2-1: config 0 has no interfaces?
[  596.361623][   T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  596.379629][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.515894][   T43] usb 2-1: Product: syz
[  596.523994][   T43] usb 2-1: Manufacturer: syz
[  596.538793][   T43] usb 2-1: SerialNumber: syz
[  596.555621][   T43] usb 2-1: config 0 descriptor??
[  597.315644][   T43] usb 2-1: can't set config #0, error -71
[  597.344792][   T43] usb 2-1: USB disconnect, device number 19
[  599.638212][T10756] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1383'.
[  599.648550][T10756] netlink: zone id is out of range
[  599.654086][T10756] netlink: get zone limit has 8 unknown bytes
[  600.342938][T10760] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  600.515088][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  600.905132][   T10] usb 3-1: Using ep0 maxpacket: 16
[  600.929892][   T10] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  600.975139][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.983611][   T10] usb 3-1: Product: syz
[  600.988298][   T10] usb 3-1: Manufacturer: syz
[  600.992921][   T10] usb 3-1: SerialNumber: syz
[  601.072022][   T10] usb 3-1: config 0 descriptor??
[  601.087979][   T10] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  601.100812][   T10] usb 3-1: Detected FT232H
[  601.291970][   T10] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  601.382382][T10779] rdma_rxe: rxe_newlink: failed to add lo
[  601.595725][   T10] ftdi_sio 3-1:0.0: GPIO initialisation failed: -5
[  601.606370][   T10] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  603.579021][T10791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1394'.
[  603.609306][T10798] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1396'.
[  603.948637][   T43] usb 3-1: USB disconnect, device number 16
[  603.961369][   T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  603.971716][   T43] ftdi_sio 3-1:0.0: device disconnected
[  604.129947][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1400'.
[  604.669939][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1402'.
[  604.745064][   T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  605.634165][   T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  605.646061][T10826] rdma_rxe: rxe_newlink: failed to add lo
[  605.657612][   T10] usb 5-1: can't read configurations, error -22
[  605.935787][   T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  605.974973][T10832] bridge0: port 2(bridge_slave_1) entered disabled state
[  605.982518][T10832] bridge0: port 1(bridge_slave_0) entered disabled state
[  606.108996][   T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  606.153948][T10832] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  606.169522][T10832] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  606.225037][   T10] usb 5-1: can't read configurations, error -22
[  606.231763][   T10] usb usb5-port1: attempt power cycle
[  606.255944][T10832] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.267278][T10832] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.282175][T10832] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.291256][T10832] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  606.417901][T10839] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1409'.
[  606.509169][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.609328][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.675029][   T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  606.727931][   T10] usb 5-1: config index 0 descriptor too short (expected 9, got 0)
[  606.754976][   T10] usb 5-1: can't read configurations, error -22
[  606.783775][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  606.941943][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'.
[  606.984423][   T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  607.181668][T10860] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  607.193822][T10860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  607.211937][T10860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  607.219810][   T10] usb 5-1: device not accepting address 23, error -71
[  607.228160][T10860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  607.236127][   T10] usb usb5-port1: unable to enumerate USB device
[  607.335684][T10860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  607.449123][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.830878][T10858] lo speed is unknown, defaulting to 1000
[  608.578243][   T13] bridge_slave_1: left allmulticast mode
[  608.688568][   T13] bridge_slave_1: left promiscuous mode
[  608.711393][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.968622][   T13] bridge_slave_0: left allmulticast mode
[  608.974397][   T13] bridge_slave_0: left promiscuous mode
[  609.013341][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.019433][T10885] loop6: detected capacity change from 0 to 2560
[  609.042207][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.074804][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.096178][   T13] veth5: left allmulticast mode
[  609.105630][   T13] veth5: left promiscuous mode
[  609.115846][   T13] bridge1: port 1(veth5) entered disabled state
[  609.126241][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.227372][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.242852][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.369179][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.395547][T10895] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  609.403654][T10895] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  609.426141][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.439949][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.485064][T10860] Bluetooth: hci1: command tx timeout
[  609.548050][T10885] ldm_validate_partition_table(): Disk read failed.
[  609.585096][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.638935][T10885] Buffer I/O error on dev loop6, logical block 0, async page read
[  609.696866][T10885] Dev loop6: unable to read RDB block 0
[  609.747858][T10885]  loop6: unable to read partition table
[  609.780855][T10885] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  609.931822][T10903] rdma_rxe: rxe_newlink: failed to add lo
[  610.489004][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  610.502498][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  610.516648][   T13] bond0 (unregistering): Released all slaves
[  611.575917][T10860] Bluetooth: hci1: command tx timeout
[  611.690785][T10923] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  613.645284][T10860] Bluetooth: hci1: command tx timeout
[  613.875271][ T5840] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  615.201441][T10858] chnl_net:caif_netlink_parms(): no params data found
[  615.585281][ T5840] usb 2-1: Using ep0 maxpacket: 32
[  615.614598][ T5840] usb 2-1: config 0 has an invalid interface number: 96 but max is 0
[  615.646275][ T5840] usb 2-1: config 0 has no interface number 0
[  615.652417][ T5840] usb 2-1: config 0 interface 96 has no altsetting 0
[  615.697719][ T5840] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44
[  615.725094][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.725158][T10860] Bluetooth: hci1: command tx timeout
[  615.749422][ T5840] usb 2-1: Product: syz
[  615.760011][ T5840] usb 2-1: Manufacturer: syz
[  615.764623][ T5840] usb 2-1: SerialNumber: syz
[  615.788350][ T5840] usb 2-1: config 0 descriptor??
[  615.993826][ T5840] legousbtower 2-1:0.96: interrupt endpoints not found
[  616.773415][ T5840] usb 2-1: USB disconnect, device number 20
[  616.980633][T10858] bridge0: port 1(bridge_slave_0) entered blocking state
[  616.999470][T10858] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.028860][T10858] bridge_slave_0: entered allmulticast mode
[  617.061726][T10858] bridge_slave_0: entered promiscuous mode
[  617.095898][T10976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1439'.
[  617.130981][T10858] bridge0: port 2(bridge_slave_1) entered blocking state
[  617.148635][T10858] bridge0: port 2(bridge_slave_1) entered disabled state
[  617.164033][T10858] bridge_slave_1: entered allmulticast mode
[  617.206907][T10858] bridge_slave_1: entered promiscuous mode
[  617.337213][T10858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  617.381633][   T13] hsr_slave_0: left promiscuous mode
[  617.400694][   T13] hsr_slave_1: left promiscuous mode
[  617.425777][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  617.455065][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  617.494065][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  617.524664][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  617.600957][   T13] veth1_macvtap: left promiscuous mode
[  617.614302][   T13] veth0_macvtap: left promiscuous mode
[  617.627465][   T13] veth1_vlan: left promiscuous mode
[  617.641761][   T13] veth0_vlan: left promiscuous mode
[  617.895868][  T981] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  618.156749][  T981] usb 5-1: Using ep0 maxpacket: 32
[  618.374067][  T981] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  618.410346][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.420052][  T981] usb 5-1: Product: syz
[  618.424244][  T981] usb 5-1: Manufacturer: syz
[  618.429328][  T981] usb 5-1: SerialNumber: syz
[  618.526153][  T981] usb 5-1: config 0 descriptor??
[  618.591185][  T981] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  619.252034][T10991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.295148][T10991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.327765][   T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  619.495065][   T43] usb 2-1: Using ep0 maxpacket: 16
[  619.502116][   T43] usb 2-1: config 0 has no interfaces?
[  619.525219][   T43] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  619.544831][   T43] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  619.565072][   T43] usb 2-1: Manufacturer: syz
[  619.582919][   T43] usb 2-1: config 0 descriptor??
[  619.757452][  T981] gspca_topro: reg_r err -71
[  619.762145][  T981] gspca_topro: Sensor soi763a
[  619.793482][  T981] usb 5-1: USB disconnect, device number 24
[  619.838187][   T43] usb 2-1: USB disconnect, device number 21
[  620.065737][   T13] team0 (unregistering): Port device team_slave_1 removed
[  620.124017][   T13] team0 (unregistering): Port device team_slave_0 removed
[  620.392798][T11021] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  621.823242][T11025] comedi comedi1: mpc624: I/O port conflict (0xffffffffffffffff,16)
[  622.450994][T10858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  622.727588][T10858] team0: Port device team_slave_0 added
[  622.770634][T10858] team0: Port device team_slave_1 added
[  622.839914][T11054] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  623.134774][ T5840] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  623.148347][T10858] batman_adv: batadv0: Adding interface: batadv_slave_0
[  623.185212][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.211202][    C0] vkms_vblank_simulate: vblank timer overrun
[  623.435117][T10858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  623.495888][ T5840] usb 5-1: Using ep0 maxpacket: 16
[  623.506434][ T5840] usb 5-1: config 0 interface 0 has no altsetting 0
[  623.513204][ T5840] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  623.540600][T10858] batman_adv: batadv0: Adding interface: batadv_slave_1
[  623.554981][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.563460][T10858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  623.606505][ T5840] usb 5-1: config 0 descriptor??
[  623.765006][T10858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  623.831960][T11071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.846120][T11071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.869739][ T5840] hid (null): invalid report_size 27418
[  623.880046][ T5840] hid (null): report_id 17018 is invalid
[  623.905786][ T5840] hid (null): unknown global tag 0x82
[  623.925184][ T5840] hid (null): report_id 48117 is invalid
[  623.935595][T10858] hsr_slave_0: entered promiscuous mode
[  623.942805][T10858] hsr_slave_1: entered promiscuous mode
[  623.969198][T10858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  623.992430][ T5840] usb 5-1: USB disconnect, device number 25
[  624.003439][T10858] Cannot create hsr debugfs directory
[  624.129357][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  624.840648][T11099] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1468'.
[  624.850679][T11099] netlink: zone id is out of range
[  624.856157][T11099] netlink: get zone limit has 8 unknown bytes
[  625.583838][T11105] netlink: 'syz.4.1470': attribute type 15 has an invalid length.
[  625.612018][T11105] netlink: 723 bytes leftover after parsing attributes in process `syz.4.1470'.
[  625.648546][T10858] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  625.705026][T10858] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  625.768491][T10858] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  625.828912][T10858] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  626.138112][T10858] 8021q: adding VLAN 0 to HW filter on device bond0
[  626.207023][T10858] 8021q: adding VLAN 0 to HW filter on device team0
[  626.239521][ T6764] bridge0: port 1(bridge_slave_0) entered blocking state
[  626.246717][ T6764] bridge0: port 1(bridge_slave_0) entered forwarding state
[  626.279805][T11125] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  626.330475][ T6073] bridge0: port 2(bridge_slave_1) entered blocking state
[  626.337665][ T6073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  628.584628][T10858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  628.720704][T11173] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1480'.
[  628.742278][T11177] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1481'.
[  629.364659][T10858] veth0_vlan: entered promiscuous mode
[  629.387130][T11199] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.1486'.
[  629.412073][T10858] veth1_vlan: entered promiscuous mode
[  630.033490][   T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  630.284449][T10858] veth0_macvtap: entered promiscuous mode
[  630.315534][   T43] usb 1-1: Using ep0 maxpacket: 32
[  630.338859][T10858] veth1_macvtap: entered promiscuous mode
[  630.357012][   T43] usb 1-1: config 0 has an invalid interface number: 63 but max is 0
[  630.372364][   T43] usb 1-1: config 0 has no interface number 0
[  630.415661][   T43] usb 1-1: config 0 interface 63 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  630.453717][   T43] usb 1-1: config 0 interface 63 has no altsetting 0
[  630.469716][T10858] batman_adv: batadv0: Interface activated: batadv_slave_0
[  630.489581][   T43] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0023, bcdDevice=40.69
[  630.505562][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  630.531445][   T43] usb 1-1: Product: syz
[  630.540532][   T43] usb 1-1: Manufacturer: syz
[  630.547330][   T43] usb 1-1: SerialNumber: syz
[  630.596666][   T43] usb 1-1: config 0 descriptor??
[  630.649133][   T43] kvaser_usb 1-1:0.63: error -ENODEV: Cannot get usb endpoint(s)
[  630.667932][T10858] batman_adv: batadv0: Interface activated: batadv_slave_1
[  630.734432][T10858] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  630.755938][T10858] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  630.764784][T10858] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  630.785213][T10858] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.835052][T11196] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1483'.
[  630.926153][T11196] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  631.013827][ T6764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.070770][ T6764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.260276][  T201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.291554][  T201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.464355][T11230] netlink: 'syz.4.1490': attribute type 1 has an invalid length.
[  631.505788][T11230] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1490'.
[  631.632700][T11230] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  631.929537][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  631.976980][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.028093][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.064980][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.089541][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.124240][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.172608][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.174394][   T43] usb 1-1: USB disconnect, device number 14
[  632.231097][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.280544][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.323306][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.377660][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.431334][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.465442][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.557690][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.613020][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.645395][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.673550][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.693831][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.722833][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.741149][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.769014][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  632.809800][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.452878][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.465029][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.477159][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.801541][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.809642][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.818582][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.826647][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.836403][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.844275][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.855052][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.862817][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.880864][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.894983][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.975657][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.983440][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  633.999406][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  634.007741][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  634.021000][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  634.029456][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  634.054813][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  634.103213][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: unknown main item tag 0x0
[  634.571940][ T5840] hid-generic 0000:007F:FFFFFFFE.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  635.238077][T11282] fido_id[11282]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  635.735270][   T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  636.177000][T11295] netlink: 5120 bytes leftover after parsing attributes in process `syz.0.1504'.
[  636.186440][   T43] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  636.230606][   T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  636.277848][   T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  636.310569][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.344842][   T43] usb 4-1: Product: syz
[  636.366541][   T43] usb 4-1: Manufacturer: syz
[  636.389690][   T43] usb 4-1: SerialNumber: syz
[  636.665195][T11302] random: crng reseeded on system resumption
[  636.950353][T11305] fuse: Unknown parameter '000000000000000000000xffffffffffffffff'
[  638.634412][   T43] usb 4-1: 0:2 : does not exist
[  638.766706][T11320] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  639.954125][   T43] usb 4-1: USB disconnect, device number 16
[  641.467833][T11343] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  642.627608][T11344] relay: one or more items not logged [item size (56) > sub-buffer size (10)]
[  642.955083][T11357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1518'.
[  644.021088][T11369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  644.085003][   T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  644.268278][   T43] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  644.285057][T11375] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  644.483601][   T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  644.495325][   T43] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  644.504466][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.512728][   T43] usb 6-1: Product: syz
[  644.517050][   T43] usb 6-1: Manufacturer: syz
[  644.522047][   T43] usb 6-1: SerialNumber: syz
[  645.580755][T11396] netlink: 'syz.1.1527': attribute type 27 has an invalid length.
[  645.612606][T11396] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1527'.
[  645.775053][T11391] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  645.856967][T11391] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  645.969699][T11403] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1528'.
[  646.470988][   T43] usb 6-1: 0:2 : does not exist
[  646.509188][   T43] usb 6-1: USB disconnect, device number 2
[  646.619206][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  649.495281][T11433] rdma_rxe: rxe_newlink: failed to add lo
[  650.067873][T11455] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1540'.
[  650.077585][T11455] netlink: zone id is out of range
[  650.082930][T11455] netlink: get zone limit has 8 unknown bytes
[  650.716734][   T43] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  650.853084][T11460] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  650.907058][   T43] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  650.931127][   T43] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  650.955397][   T43] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  650.974757][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.983225][   T43] usb 4-1: Product: syz
[  650.993471][   T43] usb 4-1: Manufacturer: syz
[  651.029402][   T43] usb 4-1: SerialNumber: syz
[  651.839896][T11480] netlink: 'syz.0.1543': attribute type 1 has an invalid length.
[  651.960282][   T43] usb 4-1: 0:2 : does not exist
[  652.457530][T11487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1545'.
[  652.465070][   T43] usb 4-1: USB disconnect, device number 17
[  652.495076][T11487] netlink: 'syz.1.1545': attribute type 7 has an invalid length.
[  652.515848][T11487] netlink: 'syz.1.1545': attribute type 8 has an invalid length.
[  652.533780][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  652.583111][T11487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1545'.
[  654.102650][T11518] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1551'.
[  654.112401][T11518] netlink: zone id is out of range
[  654.117941][T11518] netlink: get zone limit has 8 unknown bytes
[  654.774524][T11526] rdma_rxe: rxe_newlink: failed to add lo
[  655.408190][T11535] netlink: 'syz.4.1557': attribute type 9 has an invalid length.
[  655.416025][T11535] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1557'.
[  656.291504][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1561'.
[  656.314117][T11549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1561'.
[  657.377990][T11590] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1567'.
[  657.388013][T11590] netlink: zone id is out of range
[  657.393318][T11590] netlink: get zone limit has 8 unknown bytes
[  658.125357][T11593] netlink: 'syz.3.1570': attribute type 9 has an invalid length.
[  658.133120][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1570'.
[  660.989856][T11626] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  661.333901][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1580'.
[  661.433849][T11637] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  661.446157][T11637] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  662.483188][T11637] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  662.578876][T11637] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  662.747427][T11637] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  662.778984][T11637] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  663.045756][T11637] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  663.211377][T11637] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  663.340457][T11667] overlayfs: failed to resolve './file1': -2
[  663.432031][T11669] overlayfs: missing 'lowerdir'
[  663.495717][T11671] Invalid logical block size (51711)
[  664.396658][  T981] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  664.425489][T11686] netlink: 788 bytes leftover after parsing attributes in process `syz.1.1590'.
[  664.472751][T11688] fuse: Unknown parameter '0x0000000000000004'
[  664.579799][  T981] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  664.617592][  T981] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  664.661633][  T981] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  664.704170][  T981] usb 4-1: config 220 has no interface number 2
[  664.726504][  T981] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  664.726732][  T981] usb 4-1: config 220 interface 0 has no altsetting 0
[  664.726847][  T981] usb 4-1: config 220 interface 76 has no altsetting 0
[  664.726955][  T981] usb 4-1: config 220 interface 1 has no altsetting 0
[  664.755035][  T981] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  665.037461][  T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  665.064961][  T981] usb 4-1: Product: syz
[  665.069387][  T981] usb 4-1: Manufacturer: syz
[  665.074093][  T981] usb 4-1: SerialNumber: syz
[  666.660911][T11715] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  667.530892][  T981] usb 4-1: selecting invalid altsetting 0
[  667.568525][  T981] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  667.595201][  T981] usb 4-1: No valid video chain found.
[  667.664234][  T981] usb 4-1: selecting invalid altsetting 0
[  667.691961][  T981] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  667.861766][  T981] usb 4-1: USB disconnect, device number 18
[  668.711532][T11743] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  669.377429][T11744] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  669.385647][T11744] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  669.553868][T11748] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  669.775057][ T1210] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  669.980222][ T1210] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  670.003007][ T1210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  670.616901][ T1210] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  670.634033][ T1210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.642462][ T1210] usb 1-1: Product: syz
[  670.646963][ T1210] usb 1-1: Manufacturer: syz
[  670.651641][ T1210] usb 1-1: SerialNumber: syz
[  671.572878][T11772] sctp: failed to load transform for md5: -2
[  672.529585][T11788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1612'.
[  672.597555][T11789] program syz.4.1611 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  672.699353][ T1210] usb 1-1: 0:2 : does not exist
[  673.262043][T11798] Invalid logical block size (248)
[  673.350561][ T1210] usb 1-1: USB disconnect, device number 15
[  673.482459][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  673.854984][   T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  673.876316][T11814] bpq0: left promiscuous mode
[  674.847306][T11818] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  674.854290][   T43] usb 6-1: Using ep0 maxpacket: 8
[  674.870426][   T43] usb 6-1: config 162 has an invalid interface number: 251 but max is 1
[  674.913700][   T43] usb 6-1: config 162 has an invalid interface number: 209 but max is 1
[  674.936083][   T43] usb 6-1: config 162 has no interface number 0
[  674.963512][   T43] usb 6-1: config 162 has no interface number 1
[  674.977798][   T43] usb 6-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  675.001665][   T43] usb 6-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  675.016344][   T43] usb 6-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  675.029478][   T43] usb 6-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  675.041444][   T43] usb 6-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  675.052669][   T43] usb 6-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  675.070361][   T43] usb 6-1: config 162 interface 251 has no altsetting 0
[  675.093433][   T43] usb 6-1: config 162 interface 209 has no altsetting 0
[  675.123898][   T43] usb 6-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88
[  675.134917][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  675.142955][   T43] usb 6-1: Product: syz
[  675.169451][   T43] usb 6-1: Manufacturer: syz
[  675.174077][   T43] usb 6-1: SerialNumber: syz
[  675.199595][ T5840] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  675.365026][ T5840] usb 2-1: Using ep0 maxpacket: 32
[  675.385237][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  675.389923][T11837] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  675.413157][   T43] io_edgeport 6-1:162.251: required endpoints missing
[  675.421708][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  675.452098][ T5840] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  675.472961][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.473467][T11839] kvm: Disabled LAPIC found during irq injection
[  675.629321][   T43] io_edgeport 6-1:162.209: Edgeport 2 port adapter converter detected
[  675.769396][ T5840] usb 2-1: config 0 descriptor??
[  676.040725][   T43] usb 6-1:   detected
[  676.054495][   T43] usb 6-1: error in getting manufacturer descriptor: -71
[  676.072367][   T43] usb 6-1: error in getting boot descriptor: -71
[  676.082401][   T43] usb 6-1: Device Reported 0 serial ports vs. core thinking we have 2 ports, email greg@kroah.com this information.
[  676.121348][   T43] usb 6-1: Direct firmware load for edgeport/down.fw failed with error -2
[  676.131874][   T43] usb 6-1: Falling back to sysfs fallback for: edgeport/down.fw
[  676.271427][ T5840] kone 0003:1E7D:2CED.0008: bogus close delimiter
[  676.282937][ T5840] kone 0003:1E7D:2CED.0008: item 0 0 2 10 parsing failed
[  676.291943][ T5840] kone 0003:1E7D:2CED.0008: parse failed
[  676.297867][ T5840] kone 0003:1E7D:2CED.0008: probe with driver kone failed with error -22
[  677.081745][T11860] netlink: 'syz.4.1628': attribute type 12 has an invalid length.
[  677.090230][T11860] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1628'.
[  677.145003][T11862] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1628'.
[  679.902855][  T981] usb 2-1: USB disconnect, device number 22
[  681.063797][T11900] netlink: 134820 bytes leftover after parsing attributes in process `syz.1.1634'.
[  681.214019][T11902] loop8: detected capacity change from 0 to 16384
[  682.578843][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1641'.
[  683.323112][T11939] lo speed is unknown, defaulting to 1000
[  685.332075][T11972] fuse: Unknown parameter '0x0000000000000004'
[  685.578134][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  686.978287][T11996] program syz.4.1658 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  688.149064][T12016] 9pnet_fd: Insufficient options for proto=fd
[  689.165260][T12029] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  693.330248][T12061] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  694.429825][T12077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1676'.
[  694.677172][T12077] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  696.123333][T12096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'.
[  696.393942][T12108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1686'.
[  697.230666][ T5898] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  697.452669][ T5898] usb 2-1: Using ep0 maxpacket: 32
[  697.485578][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  697.509907][ T5898] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  697.708878][ T5898] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  698.651811][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  698.800810][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.814942][ T5898] usb 2-1: Product: syz
[  698.819228][ T5898] usb 2-1: Manufacturer: syz
[  698.823848][ T5898] usb 2-1: SerialNumber: syz
[  698.922613][T12142] nfs: Unknown parameter '€'
[  699.013511][T12142] fuse: Bad value for 'group_id'
[  699.045047][T12142] fuse: Bad value for 'group_id'
[  700.345055][ T5898] usb 2-1: USB disconnect, device number 23
[  700.490256][ T6045] udevd[6045]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  701.190529][T12163] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1698'.
[  702.323133][T12188] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1702'.
[  702.332888][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1702'.
[  702.388875][T12188] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1702'.
[  702.455360][T12188] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1702'.
[  705.461576][T12190] mmap: syz.0.1703 (12190): VmData 25972736 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  710.815606][T12251] ------------[ cut here ]------------
[  710.821118][T12251] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10
[  710.865003][T12251] shift exponent 32 is too large for 32-bit type 'int'
[  710.871930][T12251] CPU: 0 UID: 0 PID: 12251 Comm: syz.4.1716 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  710.871957][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  710.871976][T12251] Call Trace:
[  710.871988][T12251]  <TASK>
[  710.871996][T12251]  dump_stack_lvl+0x189/0x250
[  710.872036][T12251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  710.872059][T12251]  ? __pfx__printk+0x10/0x10
[  710.872096][T12251]  ubsan_epilogue+0xa/0x40
[  710.872122][T12251]  __ubsan_handle_shift_out_of_bounds+0x386/0x410
[  710.872165][T12251]  pcl812_attach+0x1b9e/0x2300
[  710.872204][T12251]  comedi_device_attach+0x51d/0x670
[  710.872232][T12251]  comedi_unlocked_ioctl+0x686/0xf40
[  710.872261][T12251]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  710.872296][T12251]  ? __pfx_smack_log+0x10/0x10
[  710.872315][T12251]  ? smk_access+0x14c/0x4e0
[  710.872338][T12251]  ? smk_tskacc+0x2fc/0x370
[  710.872361][T12251]  ? smack_file_ioctl+0x24a/0x340
[  710.872385][T12251]  ? __pfx_smack_file_ioctl+0x10/0x10
[  710.872420][T12251]  ? __fget_files+0x2a/0x420
[  710.872435][T12251]  ? __fget_files+0x3a0/0x420
[  710.872449][T12251]  ? __fget_files+0x2a/0x420
[  710.872467][T12251]  ? bpf_lsm_file_ioctl+0x9/0x20
[  710.872483][T12251]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  710.872504][T12251]  __se_sys_ioctl+0xf9/0x170
[  710.872527][T12251]  do_syscall_64+0xfa/0x3b0
[  710.872542][T12251]  ? lockdep_hardirqs_on+0x9c/0x150
[  710.872565][T12251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.872580][T12251]  ? clear_bhb_loop+0x60/0xb0
[  710.872598][T12251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  710.872613][T12251] RIP: 0033:0x7f81c758e929
[  710.872632][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  710.872645][T12251] RSP: 002b:00007f81c8351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  710.872665][T12251] RAX: ffffffffffffffda RBX: 00007f81c77b5fa0 RCX: 00007f81c758e929
[  710.872677][T12251] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  710.872687][T12251] RBP: 00007f81c7610b39 R08: 0000000000000000 R09: 0000000000000000
[  710.872697][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  710.872706][T12251] R13: 0000000000000000 R14: 00007f81c77b5fa0 R15: 00007fffeeb84b58
[  710.872729][T12251]  </TASK>
[  710.872739][T12251] ---[ end trace ]---
[  711.153525][T12251] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  711.160805][T12251] CPU: 1 UID: 0 PID: 12251 Comm: syz.4.1716 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  711.172890][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  711.182960][T12251] Call Trace:
[  711.186254][T12251]  <TASK>
[  711.189201][T12251]  dump_stack_lvl+0x99/0x250
[  711.193818][T12251]  ? __asan_memcpy+0x40/0x70
[  711.198450][T12251]  ? __pfx_dump_stack_lvl+0x10/0x10
[  711.203668][T12251]  ? __pfx__printk+0x10/0x10
[  711.208295][T12251]  panic+0x2db/0x790
[  711.212215][T12251]  ? __pfx_panic+0x10/0x10
[  711.216643][T12251]  ? _printk+0xcf/0x120
[  711.220825][T12251]  ? __pfx__printk+0x10/0x10
[  711.225440][T12251]  check_panic_on_warn+0x89/0xb0
[  711.230395][T12251]  __ubsan_handle_shift_out_of_bounds+0x386/0x410
[  711.236848][T12251]  pcl812_attach+0x1b9e/0x2300
[  711.241649][T12251]  comedi_device_attach+0x51d/0x670
[  711.246865][T12251]  comedi_unlocked_ioctl+0x686/0xf40
[  711.252183][T12251]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  711.258022][T12251]  ? __pfx_smack_log+0x10/0x10
[  711.262794][T12251]  ? smk_access+0x14c/0x4e0
[  711.267314][T12251]  ? smk_tskacc+0x2fc/0x370
[  711.271838][T12251]  ? smack_file_ioctl+0x24a/0x340
[  711.276882][T12251]  ? __pfx_smack_file_ioctl+0x10/0x10
[  711.282286][T12251]  ? __fget_files+0x2a/0x420
[  711.286910][T12251]  ? __fget_files+0x3a0/0x420
[  711.291597][T12251]  ? __fget_files+0x2a/0x420
[  711.296206][T12251]  ? bpf_lsm_file_ioctl+0x9/0x20
[  711.301160][T12251]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  711.306989][T12251]  __se_sys_ioctl+0xf9/0x170
[  711.311624][T12251]  do_syscall_64+0xfa/0x3b0
[  711.316141][T12251]  ? lockdep_hardirqs_on+0x9c/0x150
[  711.321366][T12251]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.327464][T12251]  ? clear_bhb_loop+0x60/0xb0
[  711.332361][T12251]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  711.338269][T12251] RIP: 0033:0x7f81c758e929
[  711.342695][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  711.362313][T12251] RSP: 002b:00007f81c8351038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  711.370736][T12251] RAX: ffffffffffffffda RBX: 00007f81c77b5fa0 RCX: 00007f81c758e929
[  711.378712][T12251] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 0000000000000003
[  711.386695][T12251] RBP: 00007f81c7610b39 R08: 0000000000000000 R09: 0000000000000000
[  711.394681][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  711.402657][T12251] R13: 0000000000000000 R14: 00007f81c77b5fa0 R15: 00007fffeeb84b58
[  711.410651][T12251]  </TASK>
[  711.414077][T12251] Kernel Offset: disabled
[  711.418456][T12251] Rebooting in 86400 seconds..