last executing test programs:

9m48.769056148s ago: executing program 1 (id=477):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c)
r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)

9m44.984972526s ago: executing program 1 (id=488):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a40)}, {&(0x7f0000000880)="2562c5e99b9f6b5b44a9134b31756fba3253e5c295e19e3eef3f95b43a5a85c30cdecee06a0c88cf592081cdc5d091a4b2142a75c7ee25", 0x37}, {&(0x7f0000000300)="184866553f80fc7b57782f2a8fb43ba5767eb6455df5bff20e77", 0x1a}, {&(0x7f0000002e40)="134f04935c0bb6b3125fcaea34f29fe91f659871d6776b328f1dd8990a4745c426517669e1725e1eb7979a854a0200a00301244e48a6a3fc3c5edba971ab9fef9d7c4dde9f70d12be5df6f8c4690a4da77e5b463eecfac7b36237819a736fed32c729874a1ca658e08b16b4f87992d0f9dbe8314bd52cb2bf820223bfb825cd274330f7a8255b7471aceb6f5a169de47924477374ed3d246000000996caf14fb691ff1910195cdac47c59ce81e88f648a8e1218614d45bfa10178f8824a4d45d8b18fe02d6a2facb8293112e280fc259b91553fee0d697ac508bdf95e9c54d5f5a5ff2014b1e5c266c7fe88ffce2553dba9f6439b935b6ddf833824e722397f34b39be2fd6c618cf62f1a973e1a515f6", 0x110}, {0x0}], 0x5, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x51}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

9m44.52966126s ago: executing program 1 (id=489):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x801, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0xd9, 0xfff, 0x4b, 0x8006}, 'syz0\x00', 0x11})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000980), 0xfdef)
splice(r2, 0x0, r6, 0x0, 0x80, 0x4)
timer_settime(0x0, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7)
read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r8, 0xffffffffffffffff, 0x100000000000000)

9m43.8359216s ago: executing program 1 (id=491):
open(0x0, 0x2a4c0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket(0x1000000010, 0x80002, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000007c0)={"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"})
r7 = accept4(r6, 0x0, 0x0, 0x800)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0xb, 0x0, 0x0)

9m39.806128424s ago: executing program 1 (id=498):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400)
fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)

9m39.753765371s ago: executing program 0 (id=499):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000003840)=[{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a40)="41aa28582b394161813fb891a55632fe35000acc7905af0e2c99673411fbdd7b7e5cfc50be4165263aeb91bb3cbb9a06b1c9c8b9bf72d99be61e9fcf00c557612eff61f6c11e1abd", 0x48}, {&(0x7f0000000880)="2562c5e99b9f6b5b44a9134b31756fba3253e5c295e19e3eef3f95b43a5a85c30cdecee06a0c88cf592081cdc5d091a4b2142a75c7ee25", 0x37}, {&(0x7f0000000300)="184866553f80fc7b57782f2a8fb43ba5767eb6455df5bff20e77", 0x1a}, {&(0x7f0000002e40)="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", 0x110}, {0x0}], 0x5, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x51}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

9m39.499662779s ago: executing program 0 (id=501):
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x4, 0x60000000, 0x3})
r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xefa8, 0x10000, 0x7ffe, 0xc0024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
eventfd2(0xff, 0x80001)
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)

9m38.379707251s ago: executing program 1 (id=503):
syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000340)={0x1, 0x2, 0xa7})
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

9m37.658517601s ago: executing program 0 (id=504):
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$video4linux(0x0, 0x3, 0x3cf281)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r3)
getpid()
syz_80211_join_ibss(&(0x7f0000000200)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000380)=0xfffff272, 0x4)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)
sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)

9m34.013578211s ago: executing program 0 (id=507):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10)
syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x32, 0xaa, 0x34, 0x10, 0xc45, 0x612a, 0x299c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x60, 0x6, [{{0x9, 0x4, 0x9f, 0x9, 0x0, 0x94, 0xd6, 0x5, 0xc}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x2d, &(0x7f0000000380)={0x5, 0xf, 0x2d, 0x2, [@generic={0x14, 0x10, 0x4, "4ca99e82558a5b0ed33e0e156372d4bc49"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "03512f19a6f80795d537e63d340ad641"}]}})
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40000010)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0)

9m31.658607929s ago: executing program 0 (id=513):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400)
fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)

9m30.369490603s ago: executing program 0 (id=516):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001})
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)

9m25.016698173s ago: executing program 2 (id=524):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(r1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
close(r1)

9m24.754293355s ago: executing program 2 (id=525):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
close(r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}})
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201)
io_setup(0x9, &(0x7f00000000c0)=<r6=>0x0)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x20001, 0x2e)
io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x2000000, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000100)='9', 0x20000101}])
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000280)=<r8=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
fanotify_init(0x4, 0x1000)
ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000002c0)=@overlay={0x6, 0x1, 0x4, 0x10000, 0x6365, {}, {0x3, 0x1, 0xc, 0x2, 0x4, 0x4, "34b0d1e6"}, 0x7, 0x3, {}, 0x4, 0x0, r7})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1}, 0x0, 0x1, {0x0}})
openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0)

9m22.823303039s ago: executing program 32 (id=503):
syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
fcntl$lock(r3, 0x26, &(0x7f0000000340)={0x1, 0x2, 0xa7})
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20018041}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})

9m21.076153837s ago: executing program 2 (id=533):
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x6}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r4 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1})
sendmsg(r2, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}, @in6={0xa, 0x4e20, 0x0, @empty, 0xfff}, @in={0x2, 0x4e23, @rand_addr=0x64010102}], 0x3c)
r6 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040)={'#! ', './control/file0'}, 0x13)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0xc, 0x3, 0x8, "c12400"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000})
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1)

9m18.088511032s ago: executing program 2 (id=536):
r0 = socket$kcm(0x29, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00')
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f", 0x70}, {&(0x7f0000000440)="d3370d4bf5328db259678875a2d50c3b36adcfd58684580d5095c7454f60c432944f43cb9051e9a9a8259d7e4dfec86f6e0116097221541af670a3d62bf0ed206c8b75ed1eeb0b5dad4cae312fb40d2755e2ecf92f5cdee5785e4ae7fc3264d70b2d1c7bef9044b6ed4dce53adbaeb7778fc95aee91141f2188a2502880e4c67be52dbf0ef3bba4f98a6fa1ed2f6ee2ebacfc49ef6414e8abbbe12713de9850d800f140c903c1f63eac4365a56147501d8e9d56f77263d43a3ac5defd91e7b865ff0cd46bf8dff9c5ed31a03682576836b1a6ae95c69039f7857830154be52eea8898bf8f04c3661a01dc61d", 0xec}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x40000000)
preadv(r6, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/100, 0x64}], 0x1, 0x38, 0x3)
r9 = add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000001931bc64c7590d370066570e47602030405060708090a0b0c0d0e0f101dfcff29"], 0x48, 0xffffffffffffffff)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000540)=@in6={0xa, 0x0, 0x0, @initdev}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000680)=""/236, 0xec}, {&(0x7f0000000780)=""/105, 0x69}, {&(0x7f0000000800)=""/202, 0xca}], 0x3, &(0x7f0000000900)=""/52, 0x34}, 0x40010140)
keyctl$set_timeout(0xf, r9, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)

9m16.966448937s ago: executing program 4 (id=537):
open(0x0, 0x2a4c0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket(0x1000000010, 0x80002, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000040)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000007c0)={"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"})
r7 = accept4(r6, 0x0, 0x0, 0x800)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1})
io_uring_enter(r3, 0x627, 0x4c1, 0xb, 0x0, 0x0)

9m15.165952979s ago: executing program 33 (id=516):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r2, 0x40045731, &(0x7f0000000340)=0x800)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001})
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)

9m14.10336123s ago: executing program 2 (id=540):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400)
fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)

9m14.000721136s ago: executing program 4 (id=541):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc8902, 0x0)
socket(0x1a, 0x80805, 0x1fe)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xc}, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x55, 0x8, 0x7, 0x8000003}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5})
fanotify_init(0xa00, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x59)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000277000/0x800000)=nil, 0x800000, 0x1000006, 0x11012, r2, 0x0)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0})
socket(0x14, 0x80000, 0x9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x430, 0xffffffff, 0xffffffff, 0x430, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x3f}, [0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE0={0x24}}, {{@uncond, 0x0, 0x1dc, 0x200, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x2, 0x5], 0xfffffff1, 0x1, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @loopback}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2d}, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x31}, @private0, @private0, @local], 0x9}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xd0}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24, '\x00', 0x7}}}}, 0x3ec)
socket$rxrpc(0x21, 0x2, 0xa)

9m12.828523491s ago: executing program 2 (id=542):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010301010009210101000122050009058103"], 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x200, 0x1d2)
open_by_handle_at(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="10"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2", 0xa2}], 0x1}, 0x20010000)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi5\x00', 0xc00000, 0x0)
ioctl$COMEDI_RANGEINFO(r7, 0x80106408, &(0x7f0000000480)={0x4, &(0x7f0000000440)=[{}]})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f0000000180)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24)
sendmmsg(r8, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x5, @remote, 0x7}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="ab", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x2}], 0x10}}], 0x2, 0x448d4)

9m10.959485327s ago: executing program 4 (id=547):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
socket$inet6(0xa, 0x80003, 0xff)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x8000, 0xfffffffffffff000})
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64=r1], 0x90}}, 0x0)

9m6.947290187s ago: executing program 4 (id=549):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x4)

9m5.592682834s ago: executing program 4 (id=550):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400)
fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)

9m4.469671186s ago: executing program 4 (id=551):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x109800, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xffffffffffffff38}, 0x1, 0x0, 0x0, 0x40}, 0x26000051)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='unlock io'], 0xe)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r3, r3, 0x0, 0x4800000009)

9m1.535377627s ago: executing program 3 (id=553):
syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000002480))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000db1000/0x1000)=nil, &(0x7f0000631000/0x2000)=nil, 0x1000})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0)
ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xffffffff, 0xb, 0x7, 0x8, 0x5, "e7732e9431a9e74e0fe4f9ca3fb352e74f4d01"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0)
unshare(0x8000000)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x1, 0x50, 0x5]}}, 0x5c)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={0x0})
ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xb9532abf1fb6ff73, 0x0)

8m56.930007692s ago: executing program 34 (id=542):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010301010009210101000122050009058103"], 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000280)=0x14)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/cgroup.procs\x00', 0x200, 0x1d2)
open_by_handle_at(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="10"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2", 0xa2}], 0x1}, 0x20010000)
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi5\x00', 0xc00000, 0x0)
ioctl$COMEDI_RANGEINFO(r7, 0x80106408, &(0x7f0000000480)={0x4, &(0x7f0000000440)=[{}]})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x64, 0x12, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8b}]}}}, {0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xd236}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x20050800)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
r9 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r10 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r10, &(0x7f0000000180)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24)
sendmmsg(r8, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@in6={0xa, 0x4e23, 0x5, @remote, 0x7}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)="ab", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[{0x10, 0x84, 0x2}], 0x10}}], 0x2, 0x448d4)

8m53.036697738s ago: executing program 3 (id=555):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x4, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xffffffff, @mcast1, 0xbcd}}, @sadb_sa={0x2, 0x1, 0x0, 0xb0}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x70}}, 0x4004884)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x161300)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa0d, 0xfffffffb}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x101, 0x5, 0x5, 0xfffb, 0x8001, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x4}}, 0x20000000, 0xf4, 0x9, 0x0, 0x4}}, &(0x7f00000001c0)=0xb0)
r5 = socket(0x28, 0x1, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1})
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000000))
r8 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r9=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, <r10=>0x0], &(0x7f0000000040), 0x3, r9, 0xeeeeeeee})
ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r6, 0xc01864ba, &(0x7f0000000300)={0x4, r10, r9})
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0xb277, 0x0, 0x0, 0x0)

8m50.881940732s ago: executing program 3 (id=556):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x2102, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mbind(&(0x7f0000051000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000080)=0x2, 0x95, 0x102)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}})
poll(&(0x7f0000000100), 0x0, 0x8)
r4 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto(r5, &(0x7f0000000100)="51bf7336f6cdf0ca6c13c866d6bc7b55f2d501845841bb2c078a988b7eb38f11a326083cf884920013fbae4a3a5d9c8ea7ea86669fb6212da0b5c82136d9519daeb17c9f96ad78cccef50ab4eabcafbc1a18735359cd7329816984d180735476f901401079349dfbe2e614f51a07c00544d90a594972ba60e1b497f88dcdc1e45dd28c0678d803638e7bd70a8638136e52c5e932c4111d3c917fb22583198b00707e3a2e001260cbc206759c2454", 0xae, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0x0, 0x0, 0xb71}, 0x10)
sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfd, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc080)
close_range(r0, 0xffffffffffffffff, 0x0)

8m49.075086734s ago: executing program 3 (id=557):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
socket$inet6(0xa, 0x80003, 0xff)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x8000, 0xfffffffffffff000})
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$unix(0x1, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES64=r1], 0x90}}, 0x0)

8m48.987047298s ago: executing program 35 (id=551):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
r2 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x109800, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})
open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xffffffffffffff38}, 0x1, 0x0, 0x0, 0x40}, 0x26000051)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='unlock io'], 0xe)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1})
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0)
sendfile(r3, r3, 0x0, 0x4800000009)

8m48.422085414s ago: executing program 3 (id=559):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0)
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400)
fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}})
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0))
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)

8m47.338019676s ago: executing program 3 (id=560):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfff7fffe, 0xbde, 0xb, 0x10000}})
r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='auto_da_alloc', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x900, 0x0)
syz_emit_ethernet(0x7a, 0x0, 0x0)
sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2140, 0x0)
sendmsg$key(r0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}})

8m31.866025867s ago: executing program 36 (id=560):
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$key(0xf, 0x3, 0x2)
socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfff7fffe, 0xbde, 0xb, 0x10000}})
r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='auto_da_alloc', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x900, 0x0)
syz_emit_ethernet(0x7a, 0x0, 0x0)
sched_getattr(0x0, &(0x7f00000000c0)={0x38}, 0x38, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2140, 0x0)
sendmsg$key(r0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f00000001c0)=0x2)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}})

1m4.13145563s ago: executing program 6 (id=2010):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
ioctl$int_in(r1, 0x5452, 0x0)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48)
listen(r1, 0x1ad72f7)
accept4(r1, 0x0, 0x0, 0x80000)
r3 = accept4$netrom(r1, 0x0, 0x0, 0x80000)
writev(r3, &(0x7f00000001c0), 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)

1m3.176149718s ago: executing program 6 (id=2023):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031})

1m2.550997344s ago: executing program 7 (id=2029):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}}, 0x2)

1m2.211988352s ago: executing program 6 (id=2033):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000)
fadvise64(0xffffffffffffffff, 0x7f, 0x0, 0x4)
r0 = socket$kcm(0xa, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0xff00, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)

1m2.147687894s ago: executing program 7 (id=2035):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)

1m1.961070618s ago: executing program 9 (id=2037):
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_io_uring_setup(0x10f, &(0x7f0000000280)={0x0, 0x211d, 0x400, 0x40205, 0x11e}, &(0x7f0000000240)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xefefffd7, 0x0, 0x4)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0})
io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0)

1m1.272625785s ago: executing program 9 (id=2044):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1m0.370627192s ago: executing program 9 (id=2055):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES16=r1, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="a800028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000010038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080)

1m0.222021951s ago: executing program 9 (id=2058):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x5)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, 0x0, 0x0)
listen(r1, 0x1ad72f7)
accept4(r1, 0x0, 0x0, 0x80000)
r3 = accept4$netrom(r1, 0x0, 0x0, 0x80000)
writev(r3, &(0x7f00000001c0), 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)

59.267970398s ago: executing program 9 (id=2072):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, 0x0, 0x0, r1, 0x0, 0x50, 0x8}, 0x0, 0x0, 0x313, 0x1, 0x81, 0x3, 0x3, 0x10, 0x4, 0x2, 0xffffffffffffffff})

59.138194367s ago: executing program 9 (id=2074):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, 0x0)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

59.125461028s ago: executing program 6 (id=2075):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20a00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd5000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4d, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="672e670fc7baf5ceb9230200000f320fc5b0040000000f9a000000008b000f01cfc4e21d4501c74424ba00e40000660f38823d0e3000005224020f01c50000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66b8004066ef", 0x63}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

58.999391472s ago: executing program 7 (id=2077):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

58.657914204s ago: executing program 6 (id=2080):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x10009, 0x8, 0x7, 0x4000000080000e52, 0x1, 0x1, 0x1043, 0x200000000006, 0x2, 0x5, 0x1, 0x100000000, 0x800000000000001, 0x40000000008, 0x8000000000005, 0x800040066], 0x0, 0x40110})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

58.594686816s ago: executing program 7 (id=2082):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x5)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r2, 0x0, 0x0)
listen(r1, 0x1ad72f7)
accept4(r1, 0x0, 0x0, 0x80000)
r3 = accept4$netrom(r1, 0x0, 0x0, 0x80000)
writev(r3, &(0x7f00000001c0), 0x7)
close_range(r0, 0xffffffffffffffff, 0x0)

58.486719526s ago: executing program 6 (id=2083):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x2, [@random="03c8981e6e1d", @empty]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

57.566734888s ago: executing program 7 (id=2093):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r0}, 0x18)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x80)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}}, 0x4)
mkdir(0x0, 0x31)

56.540299312s ago: executing program 7 (id=2105):
socket(0x10, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

44.830801217s ago: executing program 8 (id=2271):
io_uring_setup(0x29d5, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cgroups\x00', 0x0, 0x0)
preadv2(r1, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000600)=""/14, 0xe}], 0x2, 0x40, 0x3, 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cgroup_ro(r1, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0)
listen(r0, 0x1ff)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r2, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10)
pipe(&(0x7f0000000d00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
bind$inet(r5, 0x0, 0x0)
write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc)
splice(r3, 0x0, r5, 0x0, 0x714f, 0x0)

44.814101454s ago: executing program 8 (id=2272):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000087000000000000000600000018110000", @ANYRES32=r0], &(0x7f0000000080)='GPL\x00', 0xa, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

44.745020834s ago: executing program 8 (id=2273):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000140)=0x5)

44.642644466s ago: executing program 8 (id=2274):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x1200}], 0x1, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f0000002200)="44e211a385424bf02640ba0d3a219de1033222bea86d14dc6bc540f652f0873cec4d2b540364b6e4ff506bf40b976a8485725d9cfab14bb4c91a5fd888b8b983ef960999942529696b90b853c1f1a3b01af9b0cdc6a605c13de44b58eaf66b597768a5a9bccdb34c1aa1c48b2484cf0f1d68f8b5c1d9f6179459a466a2e865c2a66274717ef95f59fcf4d5b05c4540a35bb64a8fab9af3ad51f3c648121e933ea77809f3901ca59ed3e990ff80d87a814eb6fb68e3305fd9420d4a163ad5654ce60386346b6d1154ecef0f4a782c4459c0a8ca7278655e6f806c4bc2e870000bfcb1346232b0ccce39ee18152165cf3f85e87ae23c4113586cf300b39d7589b28372e554f7d748b618bca2a4298d82864e0d8212f4fbd80fd854691ccac21279bb85aacac8a3301ad2ece3d6061dbcc63e4af0fefc68fab6e5319f6d9e6a2708e41e60b2673d62ec952bae35b854fe7e87bc78e2d1a56cc383e5a1783ce35eaa20868d97eb1198ecae2d6375d7cd6992883aa3bbbdcb93b92b6eca3d6cde5baa92a6adda4540d5fce6d4772e5711b3744210587c05833966b300da0a378787ad06e9d5cba6e569b14c013b8428dad38eb6d2bc547615dac42aca90ac891e6db4d1dd029fe628170433f9229a286a814d39afd5a019db11c185b72c34e01ea5e82a5008a059e6791c9b807c4aab4e9807a5a7896a4c5bfa42f15284c1481618461ce3501cf24a722e74923d01bd7d586eec5d5ccba03eee1c8fc83bc5d73675a11eaaebdcd25fb806155f5e669ed8af3267b214f7d23cf8600ab7e909e7347783b94f235ea797d2c1bd83c7f499c04532f2b63a55b336fa9e5305a4a22cdde74360995ffd241c9592043df3dc99dac462dd43443604ffed04b1ee23b6665e0955e0b38fa71f73af930a9762d6d4d762e11df043a78b90f49f1645acffe61094a20b4caaeca22feca5f66c549cfcda38a1a7b6b79b71aba7a696975a257a94344bf65b7b79212a61f465ee55b530582e8b1dc993c379dd40ab5dd860c5828e2c27afae20539978340db55a68897920c1019e75e0b43b4c93cb1061c98f683f8d407fae9b1a87f2f9cd2b8252059ac39766fc174c344c5224b43bbea978d722c93e727292c738b293da0b9f12b4f11c8f354ae91d644131ce3873612146d79fe3ace49c1446a79e0a324f23cc0b6fb673fc6c34315fa0baf03fb5bd36656a2272c9a4d80a312dfbec125af5aacd2faf633650e3ab54f9fd2c6ee76d5abd9fac547fe7880d0dd9341ac0f095c529d3232447a0d1b28c101a2a95c4a9040041fbdf47ff7da3abe4ee7d8acac57b6553e58f1c5f832e7b920ef3708b98e4917f5b855928344da2ad0a9755d3f90d31f3e427bc869a163844b5e38c62302cc2938b03c132caa4d8044ed92680d406b7d635026f38082b26d6d3dfe80e8f659f1101cec8ea74418699a4fedfcd4ce6f2693cce43123c03122f61b62497bc2fdc2307786943feb7325d645657ae5e58d1e2587003ed4712aba34973199238d3f3d29704ba86538a764abb4d69b9efabcd956fa688536e0661a2a2e0fc84d3e4152187fd90dfbd5023aa12e964d1f3bff4e2c2915f2600a3ab701b177bda95ba8203a45182e03cc07db3b20342cd45d4f8954edebb32fb7fdf49d1952477da9ead5d4ba6de96c42f5923e3dce7188b9e9ec1862dd2fd39d256e1de8cd0906f67a8423b29f0b5bf81539828a1f8ae7e747e6b43bd639c6d6a52a29a0e4944f6b07390fc390770154135acf448ed23c507009af66d20b175723069f8eef06c2cd3edc86bd80ebbe2f5cd56c379d655632b62794aa3757ea10fb232414a9477277261879e88c49e8eb5253c91551c13ed725f3551939533d7c131109d10b4300e24db600f8020b10e9aac24d8572873fac24d149398a3306707c5c3de875eca837e140d23b02637ef888d539b6f0c7fd6d97fd8b9edf9a82bf19d75cec625237a6b9716ac0003d1b8c8db5d04f5231bed4aac9e93da9b6bfea002af81eb77a3ef8cab9878fac2574742277e5403e44844e50e64d1471213c724cf14142291a44ff108c1334fd2aa086aff52cdf1e7c53a3c9757a6717ad360137a50c4968865083c132abfc3a5eba97a4387bd5affdf091f8396b443dad822a15150d68a0d9728c548fb793e6c9d5420561fe683b8b5e89227d357873891e95d87db4a33056f3af5aabdffa3cbaacc44bdbcca971d8e84586545ae5b0e5eb5c7fada201db84c3faf06eb3812c560d7b0c680e9c4908837c5fb10627eb828dc34718004c066b8d999d34fe25b831771eda169c2bd54aab176e851db66c2623a01b8ef09c006c9aeb2fc87502231f75f5e4e01cc2674847c4c4eef86afee4ae3646b25d11d885befe01c43a34d60eff675eabefceba4664fbc211b3f014e315ea8e4c95f5088b82c590695616127cf63ebcee2fd78f3856443d3cb529376d34db3db1a6949cb7c80bc403ba92952b694dec72c540763ce3901d262087bf5a16a89c4151ce2d2d97eb77dce3d93d99e087bc5352cbda39935c686cf294c3ba66fab0135acb713281c90d562fc473df7133df5af7d42e183e4b860ee7b624038141ee757cb14db143ef8e8617eb6cb24a0eb73ef230e417d543f4afc5858c43ad20819bf6eda31bd5c258e66e9703a9b1daa8b34f9db16cae43b131ef258da25272320e2b357357b1d12fd87d9a00551185f3d494426d3f33b0ee84e1ae65508b9916fec12805783a857ac5d70a661fce59088437cf991821d3cf5b0db477dc8f6bb38c8455bb628e563ca45cb65383db9ecfc80386cd05f92ab32bf825a0953c101609ca8239b6ef1fb5a7fcc55642f9b2911df108d64b8c72c5bd31645955056968d4917cbab525ae5994b5dcbd33de392081819012a16be8c1b4f164fa6a1c2d88fd957bd62f28a3e87ba1ffcf644116ffdcf26937d4e64b4e87bd4771b9e0a8d8eba4605a8eac0f8e320b1204eeab358a5a5b2caf3e534c28f9da5598fedc5f13b4a7930a569439c3bc43ac5f5195a29280042278f194f84f8e5ee210223f8a486d568fe4a51bf8ef813c1bd02a669e4e0ea79d1e6bad48257ace2e7feba18123a5e67fd7212a341f92061df472db87f1158b0a2088e48a3680edc29ce3d3156108c04e3b16a1cf18cd70c5f5eeeb59824fb869906679eceb4a6ab8ec8733e72db06403f357e128e3383e2b35269b20f032cc21da717ba3febe02fba9f4893074ee2fd98e85499e36ffe2077348bc541548a34bc32fa0f7c00d84cabfd31e5c75b6769a1ba5770c5217cb03d1f0a8c91ba8d524b42c7365e09d94d95cf43f7ec896718f210fd0ba4ef91a5262daf7cd2bae3c2aad3e2eb925bec9ca7c1b874776dc28784a3719cb191cc317ff897698b2667081cc9db30c96c6510766b65c55c5fd4b8564faca924e6f52c2b181561ee5403184a822f0a207d747602f616c5513cabfe55e525b2bce4d662ae0b9ea68c015d6ca87bc752ed3e527826191a36d23e8032e15f65b3d60a517f16c4ece8bc8b09681bad96a5300f7e30e6848612d67ad853bc1523799c568e46b1dfe0d37cbc202c1332718cfadd4d6938bc0bfb21fc15ad19a0506f669d5c8790b685d81c4acbdb8e1b06918e934b459e3f2b46fe0999e6eae4185edac1cb3e85e8b61de24794d339014c03a285a3d7ba91e00bed2d63b0edb933c290ddd62fb1c56b6d08cb99f47dabd72a667805d63a7784450a1bd1af6dfc2ec785ddb8b86fe4a44a7c8f86c4b19a61fdb701a81bd720bb70f8657e256b0f531ab7848b6206ba7cd4c32b866735a4b46091a0bb6c47c923a3efa99a09c0344228ed412f94c4eca96e6bf6ee75f23a1ae8415a892ff19bd190e1d67b8e1212be638eb179176e4074435ed381a7c2faaee9acbcf873823abd906e92f308b36c6c259e43d13b328ded6bf3c1f4a93a76e9a6d0483875456cf8f30eda231d9f26d6b3861a3f2db165758b0d7aacb7b5a8e9f4d775798556cee8dbe8a94fae8df837f71d66a0aaa48df5c36afa9033ec5283e713806d5a07f82729f9e888d309b713db36256757292443f00f1af08058057373ae710d90cefa5872bbeac931ddd145ba9a64997c0bc53cc59a954f8ee2670caac75e2a63b5a1ca6ca6e3f9287f080b271f34b2e63be2ad4c2b85b7c9683245b12491d221314ab2685e2a44787733af58502245e19af646f65dd26b44dda320d583d9ddd6567d6021dc2d7d731963d6cc790d8b082889045cb749de9857ee4388d0f3c2ef83d405d0a2328bd7f76fa4d3d0a2e8238c979babe572ab3e8ae2768ca212bad33249523fa89fc0498f5f29a68aa7aae681e41284f46b47cc996679c4f1d9936647cb9b47ca8dac8e161b5cc0ff29f48f4a42b6a567f1116a5c239e67069b96862e2ba0cb3d424d4c4810cc1f3da1c61f39e7cca3e519159c057a440db9838f9f14351f64ec24c70a21a874da100af89d4753d274bd87c6574de363d44ee5aa37bb360b3acf347b3a72fac5e66c939daf4c6cbfacb43ab73229cc0badacc30b6c771bee9a7a8e36a5839cf5d68ffac084e69cb7bb34f71fc2244e5d16d056f97f581e3c50112e81d8410b6aa6b33b924cbafbc8dcb163f22f0e7b618ecd22296328e3fafdc2366e49a7ab08fa0d5b55c8aaffa8c9fc2899c07cabcf35748b0f30edb03a8a55807b6c73cd0b64cdd1a77ec0dcb8be359715b284a9476a0013d69c825274f45b6ffa59df58ca07756af102a6bb0efa1b4b356f89c504097cf79c76ca07d325375bfac4d7c8483cabd8d7c9141c96948c32ec87c231b69d6776160b8b31dada7e0837b4c2dc2ecb28f9b0400589c12cde99dc7db30a9d4c4f8a904f6b2f2fba1d0c36544f84db803bef904ec5b1f976345f67688df6e2d866d9eda4a87395b8953c0dc1e93ca742d2141b3591bb0bfdb56a0f8eabf710a3479d8b8f7e3f0e73a6fd29fc946909f77a6ad3044495e4d6e661bc633f4eb63204dd9f47ee85676ec0aa8b713819a280c27f086445d62f258379ffd77ced5d2c8cdf7d87135d6806f340a111f42b042058b96daa2633a6975dc0c5580f93a38e3daba8fdfb21fd94ebb30a2e165a75c1788c1cfe2687af2c3d3908514722e19afb385a74d6ac8cb12ca6232cde2e99d4ac651b280e65b3b897e39984a64d55eb4f65ab0912675c3f334d7c7ce6ecd84044125d98ef9eb6cf46c5d5d01b3ba01fa4bb5ff70ba1d18cba8b28f3980fca9c75441ada9122d497ac2e779277edece11bd175bf79657c37b982acb078591520792cf8278b75177ad1aad8133b2e4a61c561b42f6ab11ff8227d75303720d121ad3f3ad2e350b4cbfb6c5476e0f73e58dd25a18f3b50d0b30a629b2f5e053422c5a18decb3ad311ca978dcb53d44c64f43ceec7f803370a9b4b91e837371c4ed274d636423cb189cfe1302c6605142d5765239c6c86384b7c6de980764793956cacff762f8c4feaef7dee318a977e942e3a2ef45e220857162ac83b0fd4f1deef6510005737e7588dac6679fd8ae630d60bb9509d848f00939134f0c52b2b122bcf7e46ce5ca2592d649ff00252e57d9541bafdfeb6492113f401eb428e543168a96bd06b31a9becd8f0fbb2b89d19479411bbe4e265480cf2a6f34e5bc02a98b9f29b8adc10f9096aa5096fe12ef67d9690388459664f9583095f9bef69f9725a76a2bab82cdefe92fefa283ad56c21ab3e8ea602130ad2d831c0a4fbbb7779476e74674034c6051272ca292540de9bfcb34536604865c759b639c6f1e58699635e037d3a8c", 0x1000)

44.637187544s ago: executing program 8 (id=2275):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={0x0, <r1=>0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xa4, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[<r3=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000500)={r3, r1, r2, 0x51b3, 0x8, 0xfffffffe})

44.564405845s ago: executing program 8 (id=2276):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})

43.911409129s ago: executing program 37 (id=2074):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, 0x0)
write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd)

43.403235579s ago: executing program 38 (id=2083):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x2, [@random="03c8981e6e1d", @empty]})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket$unix(0x1, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

41.339273905s ago: executing program 39 (id=2105):
socket(0x10, 0x803, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0xb, @loopback, 0x9}, 0x1c)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, &(0x7f0000000640)={{0x12, 0x1, 0x0, 0x5d, 0xba, 0xfc, 0x40, 0xbfd, 0x10c, 0x2d16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x21, 0xef, 0xb0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)

937.047362ms ago: executing program 5 (id=2355):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}], 0x18})
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x403, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x0, 0xbdb], 0xfec00000, 0x3c4210})
ioctl$KVM_RUN(r1, 0xae80, 0x0)

839.943773ms ago: executing program 5 (id=2356):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000340)={0x1, 0x0, {0xdb, 0x0, 0x3002, 0x4, 0xc, 0x0, 0x1, 0x4}})

734.517589ms ago: executing program 5 (id=2357):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x403, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x113, 0x4}}, 0x20)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x0, 0xf1, 0x3, 0x7fffffffffffd, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x200040001, 0xbdb], 0x40000, 0x1c4213})
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

438.476958ms ago: executing program 5 (id=2358):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7ffb, 0x4})
close(r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})

359.576746ms ago: executing program 5 (id=2359):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4088001}, 0x0)

0s ago: executing program 5 (id=2360):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x1200}], 0x1, 0x0, 0x0, 0x0)
write$dsp(r0, &(0x7f0000002200)="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", 0xc00)

kernel console output (not intermixed with test programs):

  693.915436][ T8886] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  693.915458][ T8886] usb 7-1: config 0 has no interface number 0
[  693.915491][ T8886] usb 7-1: config 0 interface 184 has no altsetting 0
[  693.966559][ T8886] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  693.966583][ T8886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.966599][ T8886] usb 7-1: Product: syz
[  693.966610][ T8886] usb 7-1: Manufacturer: syz
[  693.966638][ T8886] usb 7-1: SerialNumber: syz
[  694.096100][ T8886] usb 7-1: config 0 descriptor??
[  694.109724][ T8886] smsc75xx v1.0.0
[  695.931501][ T8886] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  695.931539][ T8886] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  695.931561][ T8886] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  695.931864][ T8886] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  696.036462][ T8886] usb 7-1: USB disconnect, device number 6
[  696.762654][ T9915] netlink: 'syz.9.745': attribute type 1 has an invalid length.
[  696.951632][ T9920] netlink: 28 bytes leftover after parsing attributes in process `syz.9.745'.
[  696.995607][ T9915] 8021q: adding VLAN 0 to HW filter on device bond1
[  697.061491][ T9920] bond1: entered promiscuous mode
[  697.257166][ T9915] bond1: (slave dummy0): making interface the new active one
[  697.259574][ T9915] dummy0: entered promiscuous mode
[  697.280073][ T9915] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  698.017783][ T9927] netlink: 48 bytes leftover after parsing attributes in process `syz.5.748'.
[  698.074446][ T9930] netlink: 48 bytes leftover after parsing attributes in process `syz.5.748'.
[  698.244429][ T9927] bond1: peer notification delay (2365) is not a multiple of miimon (20), value rounded to 2360 ms
[  698.790101][ T9930] bond2: Unable to set peer notification delay as MII monitoring is disabled
[  698.885881][ T9930] bond2 (unregistering): Released all slaves
[  699.504874][ T9946] netlink: 48 bytes leftover after parsing attributes in process `syz.5.751'.
[  700.044271][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.753'.
[  700.671326][ T6283] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  700.841273][ T6283] usb 6-1: Using ep0 maxpacket: 32
[  700.845079][ T6283] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  700.845109][ T6283] usb 6-1: config 0 has no interface number 0
[  700.845160][ T6283] usb 6-1: config 0 interface 184 has no altsetting 0
[  700.850609][ T6283] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  700.850638][ T6283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.850659][ T6283] usb 6-1: Product: syz
[  700.850673][ T6283] usb 6-1: Manufacturer: syz
[  700.850688][ T6283] usb 6-1: SerialNumber: syz
[  700.963249][ T6283] usb 6-1: config 0 descriptor??
[  700.991824][ T6283] smsc75xx v1.0.0
[  703.296921][ T6283] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  703.296957][ T6283] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  703.296980][ T6283] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  703.297285][ T6283] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  703.333090][ T6283] usb 6-1: USB disconnect, device number 7
[  708.550187][T10056] vivid-000: disconnect
[  708.644695][ T8826] IPVS: starting estimator thread 0...
[  708.808003][T10060] IPVS: using max 11 ests per chain, 26400 per kthread
[  708.816168][ T5959] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  708.991596][ T5959] usb 6-1: Using ep0 maxpacket: 8
[  709.021418][ T5959] usb 6-1: config 0 has an invalid interface number: 31 but max is 0
[  709.021449][ T5959] usb 6-1: config 0 has no interface number 0
[  709.071236][ T5959] usb 6-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[  709.071270][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.071291][ T5959] usb 6-1: Product: syz
[  709.071306][ T5959] usb 6-1: Manufacturer: syz
[  709.071321][ T5959] usb 6-1: SerialNumber: syz
[  709.168689][ T5959] usb 6-1: config 0 descriptor??
[  709.224317][ T5959] redrat3 6-1:0.31: Couldn't find all endpoints
[  709.448658][ T5959] usb 6-1: USB disconnect, device number 8
[  709.475934][T10051] vivid-000: reconnect
[  711.682758][ T8826] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  711.838157][ T8826] usb 10-1: Using ep0 maxpacket: 16
[  711.863216][ T8826] usb 10-1: config 8 has an invalid interface number: 159 but max is 0
[  711.863253][ T8826] usb 10-1: config 8 has no interface number 0
[  711.863279][ T8826] usb 10-1: config 8 interface 159 has no altsetting 0
[  711.913967][ T8826] usb 10-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c
[  711.914001][ T8826] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  711.914023][ T8826] usb 10-1: Product: syz
[  711.914038][ T8826] usb 10-1: Manufacturer: syz
[  711.914055][ T8826] usb 10-1: SerialNumber: syz
[  712.167071][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.6.776'.
[  715.809890][ T8826] gspca_main: sonixj-2.14.0 probing 0c45:612a
[  715.817863][ T8826] gspca_sonixj: reg_w1 err -71
[  715.817960][ T8826] sonixj 10-1:8.159: probe with driver sonixj failed with error -71
[  715.877812][ T8826] usb 10-1: USB disconnect, device number 3
[  718.021351][ T5959] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  718.171382][ T5959] usb 10-1: Using ep0 maxpacket: 32
[  718.177602][ T5959] usb 10-1: config 0 has an invalid interface number: 184 but max is 0
[  718.177631][ T5959] usb 10-1: config 0 has no interface number 0
[  718.177683][ T5959] usb 10-1: config 0 interface 184 has no altsetting 0
[  718.198501][ T5959] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  718.198527][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.198542][ T5959] usb 10-1: Product: syz
[  718.198553][ T5959] usb 10-1: Manufacturer: syz
[  718.198582][ T5959] usb 10-1: SerialNumber: syz
[  718.424303][ T5959] usb 10-1: config 0 descriptor??
[  718.473980][ T5959] smsc75xx v1.0.0
[  718.939489][T10151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.940531][T10151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.481330][ T8882] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  720.651309][ T8882] usb 8-1: Using ep0 maxpacket: 32
[  720.659524][ T8882] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  720.659547][ T8882] usb 8-1: config 0 has no interface number 0
[  720.659663][ T8882] usb 8-1: config 0 interface 184 has no altsetting 0
[  720.663155][ T8882] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  720.663177][ T8882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.663192][ T8882] usb 8-1: Product: syz
[  720.663203][ T8882] usb 8-1: Manufacturer: syz
[  720.663255][ T8882] usb 8-1: SerialNumber: syz
[  720.752020][ T8882] usb 8-1: config 0 descriptor??
[  720.869675][ T8882] smsc75xx v1.0.0
[  721.917709][T10189] syzkaller0: entered promiscuous mode
[  721.917737][T10189] syzkaller0: entered allmulticast mode
[  723.385233][ T8882] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  723.389176][ T8882] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  723.389198][ T8882] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  723.390337][ T8882] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[  723.500963][ T8882] usb 8-1: USB disconnect, device number 8
[  723.811599][ T5959] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110
[  723.811635][ T5959] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110
[  723.811656][ T5959] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  723.811951][ T5959] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -110
[  725.281347][ T8893] usb 10-1: USB disconnect, device number 4
[  726.396088][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.796'.
[  731.591406][ T6204] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  731.681403][ T5959] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  731.741293][ T6204] usb 10-1: Using ep0 maxpacket: 32
[  731.743929][ T6204] usb 10-1: config 0 has an invalid interface number: 184 but max is 0
[  731.743957][ T6204] usb 10-1: config 0 has no interface number 0
[  731.744029][ T6204] usb 10-1: config 0 interface 184 has no altsetting 0
[  731.749157][ T6204] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  731.749191][ T6204] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.749214][ T6204] usb 10-1: Product: syz
[  731.749231][ T6204] usb 10-1: Manufacturer: syz
[  731.749247][ T6204] usb 10-1: SerialNumber: syz
[  731.833614][ T5959] usb 6-1: config 150 has an invalid interface number: 204 but max is 2
[  731.833649][ T5959] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  731.833675][ T5959] usb 6-1: config 150 has no interface number 0
[  731.833750][ T5959] usb 6-1: config 150 interface 204 has no altsetting 0
[  731.873742][ T5959] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  731.873775][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  731.873797][ T5959] usb 6-1: Product: syz
[  731.873812][ T5959] usb 6-1: Manufacturer: syz
[  731.873828][ T5959] usb 6-1: SerialNumber: syz
[  731.880767][ T6204] usb 10-1: config 0 descriptor??
[  731.924511][ T6204] smsc75xx v1.0.0
[  732.721298][ T8886] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  732.788318][ T5959] xr_serial 6-1:150.204: skipping garbage
[  732.788360][ T5959] xr_serial 6-1:150.204: xr_serial converter detected
[  732.823415][ T5959] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  732.823538][ T5959] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  732.940040][ T5959] usb 6-1: USB disconnect, device number 9
[  732.981472][T10288] netlink: 'syz.8.806': attribute type 1 has an invalid length.
[  733.007600][ T5959] xr_serial 6-1:150.204: device disconnected
[  733.022669][ T8886] usb 7-1: Using ep0 maxpacket: 32
[  733.060161][ T8886] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  733.060250][ T8886] usb 7-1: config 0 has no interface number 0
[  733.060302][ T8886] usb 7-1: config 0 interface 184 has no altsetting 0
[  733.069912][ T8886] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  733.069945][ T8886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.069971][ T8886] usb 7-1: Product: syz
[  733.070046][ T8886] usb 7-1: Manufacturer: syz
[  733.070064][ T8886] usb 7-1: SerialNumber: syz
[  733.146209][ T8886] usb 7-1: config 0 descriptor??
[  733.194384][T10290] netlink: 28 bytes leftover after parsing attributes in process `syz.8.806'.
[  733.326656][ T8886] smsc75xx v1.0.0
[  733.766664][T10282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.767526][T10282] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  733.839985][ T6204] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  733.840020][ T6204] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  733.840092][ T6204] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  733.840667][ T6204] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -71
[  734.025293][ T6204] usb 10-1: USB disconnect, device number 5
[  734.561413][T10288] 8021q: adding VLAN 0 to HW filter on device bond1
[  734.877988][T10291] bond1: (slave dummy0): making interface the new active one
[  734.895456][T10291] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  735.843427][ T8821] IPVS: starting estimator thread 0...
[  735.931459][T10314] IPVS: using max 11 ests per chain, 26400 per kthread
[  738.611622][ T8886] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -110
[  738.611657][ T8886] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -110
[  738.611679][ T8886] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  738.611984][ T8886] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -110
[  740.281686][ T6204] usb 7-1: USB disconnect, device number 7
[  740.418773][T10347] netlink: 'syz.8.816': attribute type 9 has an invalid length.
[  740.418791][T10347] netlink: 'syz.8.816': attribute type 11 has an invalid length.
[  740.418809][T10347] netlink: 'syz.8.816': attribute type 12 has an invalid length.
[  740.418822][T10347] netlink: 210020 bytes leftover after parsing attributes in process `syz.8.816'.
[  740.418951][T10347] netlink: 4 bytes leftover after parsing attributes in process `syz.8.816'.
[  741.015743][ T8886] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  741.241218][ T8886] usb 7-1: Using ep0 maxpacket: 32
[  741.253032][ T8886] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  741.253055][ T8886] usb 7-1: config 0 has no interface number 0
[  741.253089][ T8886] usb 7-1: config 0 interface 184 has no altsetting 0
[  741.255469][ T8886] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  741.255489][ T8886] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.255504][ T8886] usb 7-1: Product: syz
[  741.255515][ T8886] usb 7-1: Manufacturer: syz
[  741.255525][ T8886] usb 7-1: SerialNumber: syz
[  741.278684][ T8886] usb 7-1: config 0 descriptor??
[  741.295859][ T8886] smsc75xx v1.0.0
[  744.139284][ T8886] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  744.139320][ T8886] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  744.139342][ T8886] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  744.139645][ T8886] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  744.296138][ T8886] usb 7-1: USB disconnect, device number 8
[  749.743788][ T5959] IPVS: starting estimator thread 0...
[  749.857904][T10430] IPVS: using max 8 ests per chain, 19200 per kthread
[  750.568421][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.830'.
[  752.467841][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  752.467916][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  754.803141][T10499] netlink: 'syz.5.843': attribute type 1 has an invalid length.
[  755.120491][T10499] 8021q: adding VLAN 0 to HW filter on device bond2
[  755.220892][T10500] bond2: (slave dummy0): making interface the new active one
[  755.240645][T10500] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  760.501276][ T8884] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  760.631268][ T8884] usb 8-1: device descriptor read/64, error -71
[  761.031308][ T8884] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  761.451984][ T8884] usb 8-1: device descriptor read/64, error -71
[  761.561903][ T8884] usb usb8-port1: attempt power cycle
[  762.001282][ T8882] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  762.031191][ T8884] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  762.172536][ T8884] usb 8-1: device descriptor read/8, error -71
[  762.301321][ T8882] usb 9-1: Using ep0 maxpacket: 16
[  762.305021][ T8882] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  762.305058][ T8882] usb 9-1: config 0 interface 0 has no altsetting 0
[  762.305094][ T8882] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  762.305121][ T8882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  762.388139][ T8882] usb 9-1: config 0 descriptor??
[  762.421310][ T8884] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[  762.442741][ T8884] usb 8-1: device descriptor read/8, error -71
[  762.554490][ T8884] usb usb8-port1: unable to enumerate USB device
[  762.857989][ T8882] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0
[  762.858030][ T8882] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0
[  762.858060][ T8882] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0
[  762.858088][ T8882] nzxt-smart2 0003:1E71:2009.0009: unknown main item tag 0x0
[  762.897594][ T8882] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0
[  763.088638][    C1] usb 9-1: input irq status -75 received
[  763.308865][T10582] netlink: 'syz.9.856': attribute type 1 has an invalid length.
[  763.424560][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz.9.856'.
[  763.819276][T10582] 8021q: adding VLAN 0 to HW filter on device bond2
[  763.837615][T10585] bond2: entered promiscuous mode
[  763.966950][T10586] bond1: (slave dummy0): Releasing active interface
[  763.966993][T10586] dummy0: left promiscuous mode
[  764.109213][T10586] bond2: (slave dummy0): making interface the new active one
[  764.109250][T10586] dummy0: entered promiscuous mode
[  764.239592][T10586] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  764.812024][ T8836] usb 9-1: USB disconnect, device number 6
[  767.622028][T10628] netlink: 64 bytes leftover after parsing attributes in process `syz.7.864'.
[  769.991468][ T8893] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  770.172759][ T8893] usb 9-1: device descriptor read/64, error -71
[  770.431045][ T8893] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  770.601489][ T8893] usb 9-1: device descriptor read/64, error -71
[  770.711713][ T8893] usb usb9-port1: attempt power cycle
[  771.071313][ T8893] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  771.096291][ T8893] usb 9-1: device descriptor read/8, error -71
[  771.331466][ T8893] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  771.374669][ T8893] usb 9-1: device descriptor read/8, error -71
[  771.481735][ T8893] usb usb9-port1: unable to enumerate USB device
[  776.828121][   T37] audit: type=1326 audit(1768356085.596:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10865 comm="syz.9.957" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6f530bf749 code=0x0
[  776.830971][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x495a
[  776.865499][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1016
[  776.912255][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1000048ad
[  776.912323][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  776.920774][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x61c6
[  776.964880][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x2a74
[  776.964969][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  776.967601][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x85b
[  776.967685][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  777.052972][T10855] kvm_intel: kvm [10854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3187
[  777.054246][T10855] kvm: kvm [10854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3187
[  777.055904][T10855] kvm_intel: kvm [10854]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x5149
[  778.154961][T10907] netlink: 52 bytes leftover after parsing attributes in process `syz.8.975'.
[  778.260681][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.9.977'.
[  778.260735][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.9.977'.
[  778.260753][T10912] netlink: 24 bytes leftover after parsing attributes in process `syz.9.977'.
[  778.366335][ T8886] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  778.523719][ T8886] usb 7-1: Using ep0 maxpacket: 32
[  778.529117][ T8886] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  778.529151][ T8886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.549334][ T8886] usb 7-1: config 0 descriptor??
[  778.589614][T10918] team0: Port device vxlan0 added
[  778.598433][  T976] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  778.616722][  T976] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  778.630020][ T4453] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  778.630072][ T4453] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  778.790935][ T8886] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  778.873162][ T8886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  778.874563][ T8886] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  778.874620][ T8886] usb 7-1: media controller created
[  778.940022][T10923] i2c i2c-0: Invalid block write size 252
[  778.975352][ T8886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  779.065246][T10929] netlink: 'syz.9.985': attribute type 1 has an invalid length.
[  779.065269][T10929] netlink: 88 bytes leftover after parsing attributes in process `syz.9.985'.
[  779.067202][T10929] nbd: couldn't find a device at index 34
[  779.194058][ T8886] az6027: usb out operation failed. (-71)
[  779.194523][ T8886] az6027: usb out operation failed. (-71)
[  779.194538][ T8886] stb0899_attach: Driver disabled by Kconfig
[  779.194549][ T8886] az6027: no front-end attached
[  779.194549][ T8886] 
[  779.196144][ T8886] az6027: usb out operation failed. (-71)
[  779.196161][ T8886] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  779.255330][ T8886] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input18
[  779.432266][ T8886] dvb-usb: schedule remote query interval to 400 msecs.
[  779.432292][ T8886] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  779.455820][ T8886] usb 7-1: USB disconnect, device number 9
[  779.702789][T10945] netlink: 'syz.9.988': attribute type 10 has an invalid length.
[  779.789389][T10945] syz_tun: entered promiscuous mode
[  779.829856][ T8886] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  779.885044][T10945] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  781.712635][ T8836] kernel read not supported for file /input/mice (pid: 8836 comm: kworker/0:3)
[  782.034310][T11011] input: syz0 as /devices/virtual/input/input19
[  782.644590][T11030] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1011'.
[  783.738268][T11072] input: syz1 as /devices/virtual/input/input20
[  784.842348][T11090] syzkaller0: entered promiscuous mode
[  784.842379][T11090] syzkaller0: entered allmulticast mode
[  785.411487][ T5809] Bluetooth: hci0: command 0x0406 tx timeout
[  785.561565][ T6283] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  785.711308][ T6283] usb 6-1: Using ep0 maxpacket: 32
[  785.715540][ T6283] usb 6-1: config 0 has an invalid interface number: 231 but max is 0
[  785.715569][ T6283] usb 6-1: config 0 has no interface number 0
[  785.715618][ T6283] usb 6-1: config 0 interface 231 altsetting 2 bulk endpoint 0xA has invalid maxpacket 1023
[  785.715649][ T6283] usb 6-1: config 0 interface 231 has no altsetting 0
[  785.719467][ T6283] usb 6-1: New USB device found, idVendor=1fb9, idProduct=0303, bcdDevice=97.8b
[  785.719499][ T6283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.719525][ T6283] usb 6-1: Product: syz
[  785.719541][ T6283] usb 6-1: Manufacturer: syz
[  785.719558][ T6283] usb 6-1: SerialNumber: syz
[  785.795937][ T6283] usb 6-1: config 0 descriptor??
[  785.796866][T11107] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  786.070365][T11107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  786.083869][T11107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  786.134592][ T6283] cp210x 6-1:0.231: cp210x converter detected
[  786.136403][ T6283] cp210x 6-1:0.231: failed to get vendor val 0x370b size 1: -71
[  786.136443][ T6283] cp210x 6-1:0.231: querying part number failed
[  786.165111][ T6283] usb 6-1: cp210x converter now attached to ttyUSB0
[  786.181646][ T6283] usb 6-1: USB disconnect, device number 10
[  786.218130][ T6283] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  786.219027][ T6283] cp210x 6-1:0.231: device disconnected
[  787.347942][T11162] tipc: Started in network mode
[  787.347980][T11162] tipc: Node identity d6981036c0c4, cluster identity 4711
[  787.348183][T11162] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  787.379708][T11162] syzkaller0: entered promiscuous mode
[  787.379740][T11162] syzkaller0: entered allmulticast mode
[  787.441896][T11162] tipc: Resetting bearer <eth:syzkaller0>
[  787.465321][   T61] block nbd6: Receive control failed (result -107)
[  787.489650][T11160] tipc: Resetting bearer <eth:syzkaller0>
[  787.584974][T11169] sysfs: cannot create duplicate filename '/devices/virtual/block/nbd6/pid'
[  787.585027][T11169] CPU: 0 UID: 0 PID: 11169 Comm: syz.6.1070 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  787.585056][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  787.585079][T11169] Call Trace:
[  787.585092][T11169]  <TASK>
[  787.585102][T11169]  dump_stack_lvl+0xe8/0x150
[  787.585160][T11169]  sysfs_warn_dup+0x8e/0xa0
[  787.585194][T11169]  sysfs_add_file_mode_ns+0x287/0x300
[  787.585233][T11169]  sysfs_create_file_ns+0x128/0x1a0
[  787.585264][T11169]  ? __pfx_set_disk_ro+0x10/0x10
[  787.585294][T11169]  ? __pfx_sysfs_create_file_ns+0x10/0x10
[  787.585329][T11169]  ? nbd_start_device+0x189/0xb20
[  787.585351][T11169]  ? mutex_lock_nested+0x16a/0x1d0
[  787.585383][T11169]  ? device_create_file+0xf4/0x1b0
[  787.585413][T11169]  nbd_start_device+0x2b4/0xb20
[  787.585454][T11169]  nbd_ioctl+0x570/0xe10
[  787.585486][T11169]  ? __pfx_nbd_ioctl+0x10/0x10
[  787.585508][T11169]  ? __asan_memset+0x22/0x50
[  787.585541][T11169]  ? smack_file_ioctl+0x24d/0x340
[  787.585574][T11169]  ? __pfx_smack_file_ioctl+0x10/0x10
[  787.585609][T11169]  ? __pfx_nbd_ioctl+0x10/0x10
[  787.585637][T11169]  blkdev_ioctl+0x611/0x710
[  787.585675][T11169]  ? __pfx_blkdev_ioctl+0x10/0x10
[  787.585707][T11169]  ? __fget_files+0x2a/0x420
[  787.585735][T11169]  ? bpf_lsm_file_ioctl+0x9/0x20
[  787.585765][T11169]  ? __pfx_blkdev_ioctl+0x10/0x10
[  787.585796][T11169]  __se_sys_ioctl+0xff/0x170
[  787.585826][T11169]  do_syscall_64+0xec/0xf80
[  787.585846][T11169]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.585867][T11169]  ? trace_irq_disable+0x37/0x100
[  787.585900][T11169]  ? clear_bhb_loop+0x60/0xb0
[  787.585925][T11169]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  787.585947][T11169] RIP: 0033:0x7fd1d120f749
[  787.585977][T11169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  787.585997][T11169] RSP: 002b:00007fd1cf44d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  787.586025][T11169] RAX: ffffffffffffffda RBX: 00007fd1d1466090 RCX: 00007fd1d120f749
[  787.586043][T11169] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003
[  787.586059][T11169] RBP: 00007fd1d1293f91 R08: 0000000000000000 R09: 0000000000000000
[  787.586074][T11169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  787.586086][T11169] R13: 00007fd1d1466128 R14: 00007fd1d1466090 R15: 00007ffc70848698
[  787.586116][T11169]  </TASK>
[  787.586267][T11169] block nbd6: device_create_file failed for pid!
[  787.756357][T11164] block nbd6: shutting down sockets
[  787.882268][T11160] tipc: Disabling bearer <eth:syzkaller0>
[  788.495640][T11193] bridge0: port 1(bridge_slave_0) entered disabled state
[  788.516252][T11193] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.637910][T11204] Bluetooth: MGMT ver 1.23
[  788.637950][T11204] Bluetooth: hci0: unsupported parameter 255
[  788.637971][T11204] Bluetooth: hci0: unsupported parameter 255
[  788.871572][ T8836] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[  789.027360][ T8836] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  789.027392][ T8836] usb 8-1: config 0 has no interfaces?
[  789.029863][ T8836] usb 8-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43
[  789.029897][ T8836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  789.029921][ T8836] usb 8-1: Product: syz
[  789.030022][ T8836] usb 8-1: Manufacturer: syz
[  789.030039][ T8836] usb 8-1: SerialNumber: syz
[  789.075861][ T8836] usb 8-1: config 0 descriptor??
[  789.303691][T11201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  789.304251][T11201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  789.338993][T11201] dummy0: entered promiscuous mode
[  789.360422][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1086'.
[  789.360572][T11201] dummy0: left promiscuous mode
[  789.414929][ T8836] usb 8-1: USB disconnect, device number 13
[  789.645006][T11231] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  790.300201][T11250] loop9: detected capacity change from 0 to 7
[  790.380446][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.380511][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.380557][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.380589][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.380669][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.428228][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.428286][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.428312][ T8767] ldm_validate_partition_table(): Disk read failed.
[  790.428348][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.428516][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.428552][ T8767] Buffer I/O error on dev loop9, logical block 0, async page read
[  790.428595][ T8767] Dev loop9: unable to read RDB block 0
[  790.428681][ T8767]  loop9: unable to read partition table
[  790.428989][ T8767] loop9: partition table beyond EOD, truncated
[  790.583357][T11250] ldm_validate_partition_table(): Disk read failed.
[  790.583541][T11250] Dev loop9: unable to read RDB block 0
[  790.583617][T11250]  loop9: unable to read partition table
[  790.584082][T11250] loop9: partition table beyond EOD, truncated
[  790.584138][T11250] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ �â·û
[  790.584138][T11250] 
) failed (rc=-5)
[  791.281331][ T8882] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  791.433512][ T8882] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  791.433571][ T8882] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  791.435088][ T8882] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  791.435118][ T8882] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  791.435141][ T8882] usb 10-1: Manufacturer: syz
[  791.495273][ T8882] usb 10-1: config 0 descriptor??
[  791.513290][ T8882] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  792.677833][T11328] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  792.678449][T11328] syzkaller0: entered promiscuous mode
[  792.678465][T11328] syzkaller0: entered allmulticast mode
[  792.731582][T11327] tipc: Resetting bearer <eth:syzkaller0>
[  792.741310][ T8836] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  792.874170][T11327] tipc: Disabling bearer <eth:syzkaller0>
[  792.896019][ T8836] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  792.896090][ T8836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.896114][ T8836] usb 7-1: Product: syz
[  792.896131][ T8836] usb 7-1: Manufacturer: syz
[  792.896148][ T8836] usb 7-1: SerialNumber: syz
[  792.906211][ T8836] usb 7-1: config 0 descriptor??
[  793.589184][ T8836] usb 7-1: f81604_read: reg: 105 failed: -EPROTO
[  793.589223][ T8836] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  793.589266][ T8836] f81604 7-1:0.0: probe with driver f81604 failed with error -71
[  793.617712][ T8836] usb 7-1: USB disconnect, device number 10
[  794.025413][T11356] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  794.027870][T11356] syzkaller0: entered promiscuous mode
[  794.027898][T11356] syzkaller0: entered allmulticast mode
[  794.121633][T11354] tipc: Resetting bearer <eth:syzkaller0>
[  794.142080][T11360] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1142'.
[  794.197251][ T8882] usb 10-1: USB disconnect, device number 6
[  794.371516][T11354] tipc: Disabling bearer <eth:syzkaller0>
[  794.465510][T11369] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  794.831338][ T8836] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  794.957617][T11389] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1154'.
[  794.984197][ T8836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  794.984232][ T8836] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  794.984272][ T8836] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  794.984296][ T8836] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  794.988285][ T8836] usb 10-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  794.988325][ T8836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.988348][ T8836] usb 10-1: Product: syz
[  794.988364][ T8836] usb 10-1: Manufacturer: syz
[  794.988380][ T8836] usb 10-1: SerialNumber: syz
[  795.001360][   T44] usb 8-1: new high-speed USB device number 14 using dummy_hcd
[  795.019844][ T8836] usb 10-1: config 0 descriptor??
[  795.113557][ T8836] kvaser_usb 10-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  795.113587][ T8836] kvaser_usb 10-1:0.0: error -EMSGSIZE: Failed to initialize card
[  795.113905][ T8836] kvaser_usb 10-1:0.0: probe with driver kvaser_usb failed with error -90
[  795.164522][   T44] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  795.164553][   T44] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  795.166929][   T44] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  795.166963][   T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  795.166987][   T44] usb 8-1: SerialNumber: syz
[  795.436200][T11396] vxlan0: entered promiscuous mode
[  795.460764][   T44] usb 8-1: 0:2 : does not exist
[  795.489002][T11396] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  795.548178][   T44] usb 8-1: USB disconnect, device number 14
[  795.639077][ T6181] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  795.691213][ T3552] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  795.691283][ T3552] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  795.691327][ T3552] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  796.616817][ T8767] udevd[8767]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  797.623974][T11409] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  798.019436][ T6283] usb 10-1: USB disconnect, device number 7
[  798.522742][    C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank
[  798.910057][T11450] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  800.106531][T11486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  800.996143][T11517] tipc: Started in network mode
[  800.996177][T11517] tipc: Node identity 9aa7dc5faa2e, cluster identity 4711
[  800.996373][T11517] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  800.999786][T11517] syzkaller0: entered promiscuous mode
[  800.999812][T11517] syzkaller0: entered allmulticast mode
[  801.151934][T11512] tipc: Resetting bearer <eth:syzkaller0>
[  801.385214][T11528] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  801.474235][T11512] tipc: Disabling bearer <eth:syzkaller0>
[  802.581327][T11577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  802.768977][T11584] program syz.5.1234 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  802.789385][T11580] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  802.790286][T11580] syzkaller0: entered promiscuous mode
[  802.790311][T11580] syzkaller0: entered allmulticast mode
[  802.857616][T11579] tipc: Resetting bearer <eth:syzkaller0>
[  803.108822][T11579] tipc: Disabling bearer <eth:syzkaller0>
[  803.243581][T11600] input: syz1 as /devices/virtual/input/input21
[  804.251220][ T8882] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  804.303747][T11633] tipc: Started in network mode
[  804.303770][T11633] tipc: Node identity 62d99e1a81b1, cluster identity 4711
[  804.303905][T11633] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  804.350741][T11633] tipc: Resetting bearer <eth:syzkaller0>
[  804.428328][T11632] tipc: Disabling bearer <eth:syzkaller0>
[  804.429919][ T8882] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  804.429951][ T8882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.429974][ T8882] usb 9-1: Product: syz
[  804.429989][ T8882] usb 9-1: Manufacturer: syz
[  804.430003][ T8882] usb 9-1: SerialNumber: syz
[  804.476550][ T8882] usb 9-1: config 0 descriptor??
[  804.898278][ T8882] usb 9-1: f81604_write: reg: 105 data: 0 failed: -EPROTO
[  804.898312][ T8882] f81604 9-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  804.898347][ T8882] f81604 9-1:0.0: probe with driver f81604 failed with error -71
[  804.968019][ T8882] usb 9-1: USB disconnect, device number 11
[  805.759598][T11673] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.774654][T11673] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.984845][T11676] kvm: emulating exchange as write
[  806.501492][ T6283] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  806.522614][ T8836] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  806.677306][ T6283] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  806.677342][ T6283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  806.677364][ T6283] usb 6-1: Product: syz
[  806.677380][ T6283] usb 6-1: Manufacturer: syz
[  806.677395][ T6283] usb 6-1: SerialNumber: syz
[  806.678800][ T8836] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  806.678849][ T8836] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  806.750252][ T8836] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  806.750289][ T8836] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  806.750312][ T8836] usb 10-1: Manufacturer: syz
[  806.786564][ T8836] usb 10-1: config 0 descriptor??
[  806.798445][ T6283] usb 6-1: config 0 descriptor??
[  806.817324][ T8836] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  807.011728][ T6283] usb 6-1: f81604_read: reg: 105 failed: -EPIPE
[  807.011759][ T6283] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPIPE
[  807.011800][ T6283] f81604 6-1:0.0: probe with driver f81604 failed with error -32
[  807.071465][ T6283] usb 6-1: USB disconnect, device number 11
[  807.361659][ T8882] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  807.515078][ T8882] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  807.515141][ T8882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  807.521624][ T8882] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  807.521710][ T8882] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  807.521773][ T8882] usb 9-1: Manufacturer: syz
[  807.584044][ T8882] usb 9-1: config 0 descriptor??
[  807.703171][ T8882] rc_core: IR keymap rc-hauppauge not found
[  807.703187][ T8882] Registered IR keymap rc-empty
[  807.705324][ T8882] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  807.748186][ T8882] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input22
[  807.804977][    C1] igorplugusb 9-1:0.0: Error: urb status = -32
[  807.870484][ T8882] usb 9-1: USB disconnect, device number 12
[  807.941574][ T8836] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  808.094013][ T8836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  808.094035][ T8836] usb 7-1: config 0 has no interfaces?
[  808.096561][ T8836] usb 7-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43
[  808.096591][ T8836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  808.096615][ T8836] usb 7-1: Product: syz
[  808.096631][ T8836] usb 7-1: Manufacturer: syz
[  808.096642][ T8836] usb 7-1: SerialNumber: syz
[  808.101039][ T8836] usb 7-1: config 0 descriptor??
[  808.359435][T11751] bridge0: port 1(bridge_slave_0) entered disabled state
[  808.374175][T11735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  808.374674][T11735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  808.406789][T11751] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.597057][ T8836] usb 7-1: USB disconnect, device number 11
[  809.564447][ T8882] usb 10-1: USB disconnect, device number 8
[  810.241295][ T8836] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  810.391283][ T8836] usb 6-1: Using ep0 maxpacket: 16
[  810.398344][ T8836] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  810.398378][ T8836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.398401][ T8836] usb 6-1: Product: syz
[  810.398417][ T8836] usb 6-1: Manufacturer: syz
[  810.398433][ T8836] usb 6-1: SerialNumber: syz
[  810.448442][ T8836] usb 6-1: config 0 descriptor??
[  810.471316][   T44] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[  810.474518][ T8836] ums-onetouch 6-1:0.0: USB Mass Storage device detected
[  810.626025][   T44] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  810.626089][   T44] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  810.630895][   T44] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  810.630927][   T44] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  810.630950][   T44] usb 8-1: Manufacturer: syz
[  810.746175][ T8836] usb 6-1: USB disconnect, device number 12
[  810.758371][   T44] usb 8-1: config 0 descriptor??
[  810.785134][   T44] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[  811.241615][ T8836] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  811.399021][ T8836] usb 10-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  811.399152][ T8836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.399178][ T8836] usb 10-1: Product: syz
[  811.399195][ T8836] usb 10-1: Manufacturer: syz
[  811.399212][ T8836] usb 10-1: SerialNumber: syz
[  811.447254][ T8836] usb 10-1: config 0 descriptor??
[  811.664242][ T8836] usb 10-1: f81604_read: reg: 105 failed: -EPIPE
[  811.664275][ T8836] f81604 10-1:0.0: Setting termination of CH#0 failed: -EPIPE
[  811.664318][ T8836] f81604 10-1:0.0: probe with driver f81604 failed with error -32
[  811.702996][ T8836] usb 10-1: USB disconnect, device number 9
[  812.296915][T11866] bridge0: port 1(bridge_slave_0) entered disabled state
[  812.300511][T11866] bridge0: port 2(bridge_slave_1) entered disabled state
[  812.781388][ T8836] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  812.931307][ T8836] usb 7-1: Using ep0 maxpacket: 16
[  812.948451][ T8836] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  812.948493][ T8836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.948516][ T8836] usb 7-1: Product: syz
[  812.948532][ T8836] usb 7-1: Manufacturer: syz
[  812.948548][ T8836] usb 7-1: SerialNumber: syz
[  813.004402][ T8836] usb 7-1: config 0 descriptor??
[  813.025769][ T8836] ums-onetouch 7-1:0.0: USB Mass Storage device detected
[  813.231948][ T8836] usb 7-1: USB disconnect, device number 12
[  813.583781][ T8882] usb 8-1: USB disconnect, device number 15
[  813.896873][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  813.896973][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  814.671249][ T8882] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  814.833678][ T8882] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  814.833736][ T8882] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  814.835259][ T8882] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  814.835290][ T8882] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  814.835314][ T8882] usb 6-1: Manufacturer: syz
[  814.856850][ T8882] usb 6-1: config 0 descriptor??
[  814.931269][   T44] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  814.963663][ T8882] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  815.081388][   T44] usb 10-1: Using ep0 maxpacket: 16
[  815.086539][   T44] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  815.086563][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.086578][   T44] usb 10-1: Product: syz
[  815.086589][   T44] usb 10-1: Manufacturer: syz
[  815.086600][   T44] usb 10-1: SerialNumber: syz
[  815.107970][   T44] usb 10-1: config 0 descriptor??
[  815.142998][   T44] ums-onetouch 10-1:0.0: USB Mass Storage device detected
[  815.167590][T11937] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  815.167670][ T8950] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  815.167719][ T8950] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  815.167758][ T8950] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  815.167806][ T8950] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  815.345652][ T6283] usb 10-1: USB disconnect, device number 10
[  817.652749][ T6283] usb 6-1: USB disconnect, device number 13
[  818.011229][ T6283] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  818.038660][T12019] 9p: Bad value for 'rfdno'
[  818.161226][ T6283] usb 8-1: Using ep0 maxpacket: 8
[  818.163626][ T6283] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  818.163655][ T6283] usb 8-1: config 179 has no interface number 0
[  818.163720][ T6283] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  818.163750][ T6283] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  818.163780][ T6283] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  818.163809][ T6283] usb 8-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  818.163840][ T6283] usb 8-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  818.163870][ T6283] usb 8-1: config 179 interface 65 has no altsetting 0
[  818.163906][ T6283] usb 8-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  818.163931][ T6283] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.232069][T12008] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  818.329980][ T6283] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input25
[  818.458492][ T5153] input input25: unable to receive magic message: -110
[  818.557686][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1
[  818.619375][ T6283] usb 8-1: USB disconnect, device number 16
[  818.619467][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  819.111475][   T44] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  819.283527][   T44] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  819.283583][   T44] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  819.284872][   T44] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  819.284903][   T44] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  819.284927][   T44] usb 10-1: Manufacturer: syz
[  819.349658][   T44] usb 10-1: config 0 descriptor??
[  819.375609][   T44] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[  819.501476][ T6283] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  819.661217][ T6283] usb 8-1: Using ep0 maxpacket: 16
[  819.692488][ T6283] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  819.692527][ T6283] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.692549][ T6283] usb 8-1: Product: syz
[  819.692590][ T6283] usb 8-1: Manufacturer: syz
[  819.692606][ T6283] usb 8-1: SerialNumber: syz
[  819.729281][ T6283] usb 8-1: config 0 descriptor??
[  819.747967][ T6283] ums-onetouch 8-1:0.0: USB Mass Storage device detected
[  819.775712][T12052] 9p: Bad value for 'rfdno'
[  819.939669][ T6283] usb 8-1: USB disconnect, device number 17
[  820.361325][ T6283] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  820.515351][ T6283] usb 9-1: config 0 has no interfaces?
[  820.515390][ T6283] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  820.515415][ T6283] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  820.554220][ T6283] usb 9-1: config 0 descriptor??
[  820.821877][T12059] Bluetooth: hci0: invalid length 0, exp 2 for type 29
[  820.924072][ T6283] usb 9-1: USB disconnect, device number 13
[  821.154131][T12088] 9p: Bad value for 'rfdno'
[  821.768343][T12100] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  822.076264][ T6283] usb 10-1: USB disconnect, device number 11
[  822.912731][T12130] i2c i2c-0: Invalid block write size 252
[  823.461291][ T6283] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  823.626228][ T6283] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  823.626284][ T6283] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  823.627521][ T6283] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  823.627553][ T6283] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  823.627577][ T6283] usb 7-1: Manufacturer: syz
[  823.694968][ T6283] usb 7-1: config 0 descriptor??
[  823.712877][ T6283] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  824.140975][T12170] i2c i2c-0: Invalid block write size 252
[  824.827933][T12197] i2c i2c-0: Invalid block write size 252
[  825.811652][T12233] i2c i2c-0: Invalid block write size 252
[  826.505946][ T8836] usb 7-1: USB disconnect, device number 13
[  826.683937][T12266] i2c i2c-0: Invalid block write size 252
[  827.960332][T12305] i2c i2c-0: Invalid block write size 252
[  828.191310][T12313] bridge0: port 3(gretap0) entered blocking state
[  828.200672][T12313] bridge0: port 3(gretap0) entered disabled state
[  828.225879][T12313] gretap0: entered allmulticast mode
[  828.272322][T12313] gretap0: entered promiscuous mode
[  828.295664][T12315] gretap0: left allmulticast mode
[  828.295686][T12315] gretap0: left promiscuous mode
[  828.319987][T12315] bridge0: port 3(gretap0) entered disabled state
[  829.048102][ T8821] kernel write not supported for file /amidi2 (pid: 8821 comm: kworker/0:0)
[  829.158454][T12346] i2c i2c-0: Invalid block write size 252
[  829.525268][T12358] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  830.069639][T12380] i2c i2c-0: Invalid block write size 252
[  830.356820][T12388] bond0: (slave vxlan0): Enslaving as an active interface with an up link
[  830.380900][ T8950] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  830.380966][ T8950] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  830.381008][ T8950] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  830.381049][ T8950] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  830.626306][T12399] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  831.051290][ T8882] usb 8-1: new high-speed USB device number 18 using dummy_hcd
[  831.281809][T12419] 9p: Bad value for 'rfdno'
[  831.411386][ T8882] usb 8-1: Using ep0 maxpacket: 16
[  831.434497][ T8882] usb 8-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  831.434530][ T8882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.434552][ T8882] usb 8-1: Product: syz
[  831.434568][ T8882] usb 8-1: Manufacturer: syz
[  831.434584][ T8882] usb 8-1: SerialNumber: syz
[  831.500973][ T8882] usb 8-1: config 0 descriptor??
[  831.520051][ T8882] ums-onetouch 8-1:0.0: USB Mass Storage device detected
[  831.719664][ T8882] usb 8-1: USB disconnect, device number 18
[  831.876078][T12434] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  832.221423][ T8884] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  832.372862][ T8884] usb 6-1: Using ep0 maxpacket: 8
[  832.389446][ T8884] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  832.389481][ T8884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  832.389504][ T8884] usb 6-1: Product: syz
[  832.389521][ T8884] usb 6-1: Manufacturer: syz
[  832.389537][ T8884] usb 6-1: SerialNumber: syz
[  832.432310][ T8884] usb 6-1: config 0 descriptor??
[  832.663967][ T8884] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  833.161288][ T8821] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  833.324743][ T8821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  833.324777][ T8821] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  833.324804][ T8821] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  833.324827][ T8821] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  833.327973][ T8821] usb 9-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  833.328005][ T8821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  833.328027][ T8821] usb 9-1: Product: syz
[  833.328043][ T8821] usb 9-1: Manufacturer: syz
[  833.328059][ T8821] usb 9-1: SerialNumber: syz
[  833.415547][ T8821] usb 9-1: config 0 descriptor??
[  833.440151][ T8821] kvaser_usb 9-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  833.440176][ T8821] kvaser_usb 9-1:0.0: error -EMSGSIZE: Failed to initialize card
[  833.440271][ T8821] kvaser_usb 9-1:0.0: probe with driver kvaser_usb failed with error -90
[  833.626094][T12486] 9p: Bad value for 'rfdno'
[  833.656257][   T44] usb 9-1: USB disconnect, device number 14
[  833.674011][ T8884] gspca_sunplus: reg_w_riv err -71
[  833.674094][ T8884] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  833.716524][ T8884] usb 6-1: USB disconnect, device number 14
[  834.513514][T12501] input: syz1 as /devices/virtual/input/input26
[  834.861208][ T8884] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  834.994946][ T8884] usb 8-1: device descriptor read/64, error -71
[  835.131386][ T8836] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  835.231392][ T8884] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  835.281241][ T8836] usb 10-1: Using ep0 maxpacket: 32
[  835.283612][ T8836] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  835.283671][ T8836] usb 10-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  835.283705][ T8836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  835.327633][ T8836] usb 10-1: config 0 descriptor??
[  835.346186][ T8836] dvb-usb: found a 'TeVii S662' in warm state.
[  835.346245][ T8836] dw2102: su3000_power_ctrl: 1, initialized 0
[  835.346799][ T8836] dvb-usb: bulk message failed: -22 (2/0)
[  835.362010][ T8884] usb 8-1: device descriptor read/64, error -71
[  835.398808][ T8836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  835.418752][ T8836] dvbdev: DVB: registering new adapter (TeVii S662)
[  835.418815][ T8836] usb 10-1: media controller created
[  835.419580][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  835.419599][ T8836] dw2102: i2c transfer failed.
[  835.419616][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  835.419632][ T8836] dw2102: i2c transfer failed.
[  835.419648][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  835.419663][ T8836] dw2102: i2c transfer failed.
[  835.419678][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  835.419700][ T8836] dw2102: i2c transfer failed.
[  835.419714][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  835.472314][ T8884] usb usb8-port1: attempt power cycle
[  835.492160][ T8836] dw2102: i2c transfer failed.
[  835.492192][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  835.492209][ T8836] dw2102: i2c transfer failed.
[  835.492221][ T8836] dvb-usb: MAC address: 02:02:02:02:02:02
[  835.535323][T12508] dvb-usb: bulk message failed: -22 (5/0)
[  835.535347][T12508] dw2102: i2c transfer failed.
[  835.580793][ T8836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  835.658126][ T8836] dvb-usb: bulk message failed: -22 (3/0)
[  835.658156][ T8836] dw2102: command 0x0e transfer failed.
[  835.658167][ T8836] dvb-usb: bulk message failed: -22 (3/0)
[  835.658184][ T8836] dw2102: command 0x0e transfer failed.
[  835.818901][T12533] input: syz1 as /devices/virtual/input/input27
[  835.831341][ T8884] usb 8-1: new high-speed USB device number 21 using dummy_hcd
[  835.853795][ T8884] usb 8-1: device descriptor read/8, error -71
[  835.961878][ T8836] dvb-usb: bulk message failed: -22 (3/0)
[  835.961901][ T8836] dw2102: command 0x0e transfer failed.
[  835.961912][ T8836] dvb-usb: bulk message failed: -22 (3/0)
[  835.961927][ T8836] dw2102: command 0x0e transfer failed.
[  835.961937][ T8836] dvb-usb: bulk message failed: -22 (1/0)
[  835.961952][ T8836] dw2102: command 0x51 transfer failed.
[  835.961962][ T8836] dvb-usb: bulk message failed: -22 (5/0)
[  835.961978][ T8836] dw2102: i2c probe for address 0x68 failed.
[  835.961990][ T8836] dvb-usb: bulk message failed: -22 (5/0)
[  835.962005][ T8836] dw2102: i2c probe for address 0x69 failed.
[  835.962017][ T8836] dvb-usb: bulk message failed: -22 (5/0)
[  835.962032][ T8836] dw2102: i2c probe for address 0x6a failed.
[  835.962044][ T8836] dw2102: probing for demodulator failed. Is the external power switched on?
[  835.962056][ T8836] dvb-usb: no frontend was attached by 'TeVii S662'
[  836.111445][ T8884] usb 8-1: new high-speed USB device number 22 using dummy_hcd
[  836.134240][ T8884] usb 8-1: device descriptor read/8, error -71
[  836.242238][ T8884] usb usb8-port1: unable to enumerate USB device
[  836.242485][ T8836] rc_core: IR keymap rc-tt-1500 not found
[  836.242502][ T8836] Registered IR keymap rc-empty
[  836.244423][ T8836] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0
[  836.311766][ T8836] input: TeVii S662 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input28
[  836.315933][ T8836] dvb-usb: schedule remote query interval to 250 msecs.
[  836.315959][ T8836] dw2102: su3000_power_ctrl: 0, initialized 1
[  836.315975][ T8836] dvb-usb: TeVii S662 successfully initialized and connected.
[  836.319411][ T8836] usb 10-1: USB disconnect, device number 12
[  836.614041][ T8836] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  836.727468][T12548] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1612'.
[  837.437441][T12564] input: syz1 as /devices/virtual/input/input29
[  837.645128][T12569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  837.860842][T12579] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1624'.
[  838.209798][T12587] netlink: 'syz.8.1628': attribute type 1 has an invalid length.
[  838.209824][T12587] netlink: 'syz.8.1628': attribute type 2 has an invalid length.
[  838.915813][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1636'.
[  838.915839][T12605] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1636'.
[  838.915863][T12605] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1636'.
[  839.559193][T12627] IPv6: addrconf: prefix option has invalid lifetime
[  839.606544][T12625] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  839.624321][T12625] tipc: Resetting bearer <eth:syzkaller0>
[  839.694063][T12624] tipc: Disabling bearer <eth:syzkaller0>
[  840.112936][T12640] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1651'.
[  840.112962][T12640] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1651'.
[  840.164518][T12641] Bluetooth: hci0: unsupported parameter 255
[  840.164546][T12641] Bluetooth: hci0: unsupported parameter 255
[  840.323930][T12640] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1651'.
[  841.137047][T12672] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1665'.
[  841.137072][T12672] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1665'.
[  842.109615][T12700] trusted_key: syz.9.1678 sent an empty control message without MSG_MORE.
[  842.128761][T12701] __nla_validate_parse: 1 callbacks suppressed
[  842.128781][T12701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1677'.
[  842.128798][T12701] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1677'.
[  842.581274][ T8821] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  842.599017][T12701] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1677'.
[  842.747217][ T8821] usb 7-1: config index 0 descriptor too short (expected 23569, got 27)
[  842.747283][ T8821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  842.771293][ T8836] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  842.776997][ T8821] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  842.777095][ T8821] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  842.777119][ T8821] usb 7-1: Manufacturer: syz
[  842.915085][ T8821] usb 7-1: config 0 descriptor??
[  842.971302][ T8836] usb 9-1: Using ep0 maxpacket: 8
[  842.988616][ T8836] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  842.988648][ T8836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.198326][ T8836] pvrusb2: Hardware description: Terratec Grabster AV400
[  843.198346][ T8836] pvrusb2: **********
[  843.198354][ T8836] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  843.198368][ T8836] pvrusb2: Important functionality might not be entirely working.
[  843.198379][ T8836] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  843.198392][ T8836] pvrusb2: **********
[  843.352082][ T8821] rc_core: IR keymap rc-hauppauge not found
[  843.352105][ T8821] Registered IR keymap rc-empty
[  843.393699][ T2369] pvrusb2: Invalid write control endpoint
[  843.396242][ T8821] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0
[  843.421800][ T8821] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input30
[  843.491302][ T8884] usb 8-1: new high-speed USB device number 23 using dummy_hcd
[  843.531479][ T8821] usb 7-1: USB disconnect, device number 14
[  843.602486][T12714] pvrusb2: Invalid write control endpoint
[  843.605248][ T8836] usb 9-1: USB disconnect, device number 15
[  843.641171][ T8884] usb 8-1: Using ep0 maxpacket: 32
[  843.643533][ T8884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  843.643591][ T8884] usb 8-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  843.643617][ T8884] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.721255][ T8884] usb 8-1: config 0 descriptor??
[  843.729180][ T8884] dvb-usb: found a 'TeVii S662' in warm state.
[  843.729230][ T8884] dw2102: su3000_power_ctrl: 1, initialized 0
[  843.729251][ T8884] dvb-usb: bulk message failed: -22 (2/0)
[  843.843133][ T2369] pvrusb2: Invalid write control endpoint
[  843.843151][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  843.843162][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  843.843172][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  843.843183][ T2369] pvrusb2: Device being rendered inoperable
[  843.843213][ T2369] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  843.843252][ T2369] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[  843.957441][ T8884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  843.959384][ T8884] dvbdev: DVB: registering new adapter (TeVii S662)
[  843.959439][ T8884] usb 8-1: media controller created
[  843.959467][ T8884] dvb-usb: bulk message failed: -22 (6/0)
[  843.959484][ T8884] dw2102: i2c transfer failed.
[  843.959501][ T8884] dvb-usb: bulk message failed: -22 (6/0)
[  843.959518][ T8884] dw2102: i2c transfer failed.
[  843.959536][ T8884] dvb-usb: bulk message failed: -22 (6/0)
[  843.959551][ T8884] dw2102: i2c transfer failed.
[  843.959568][ T8884] dvb-usb: bulk message failed: -22 (6/0)
[  843.959585][ T8884] dw2102: i2c transfer failed.
[  843.959602][ T8884] dvb-usb: bulk message failed: -22 (6/0)
[  843.959617][ T8884] dw2102: i2c transfer failed.
[  843.959634][ T8884] dvb-usb: bulk message failed: -22 (6/0)
[  843.959648][ T8884] dw2102: i2c transfer failed.
[  843.959658][ T8884] dvb-usb: MAC address: 02:02:02:02:02:02
[  843.961809][ T2369] pvrusb2: Attached sub-driver cx25840
[  843.961843][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  843.961874][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  844.186968][ T8884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  844.291187][ T8821] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  844.398801][ T8884] dvb-usb: bulk message failed: -22 (3/0)
[  844.398827][ T8884] dw2102: command 0x0e transfer failed.
[  844.398839][ T8884] dvb-usb: bulk message failed: -22 (3/0)
[  844.398856][ T8884] dw2102: command 0x0e transfer failed.
[  844.449262][ T8821] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  844.449315][ T8821] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  844.453920][ T8821] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  844.453954][ T8821] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  844.453979][ T8821] usb 7-1: Manufacturer: syz
[  844.511485][ T8821] usb 7-1: config 0 descriptor??
[  844.552512][ T8821] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  844.653777][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1696'.
[  844.653803][T12742] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1696'.
[  844.653825][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1696'.
[  844.711262][ T8884] dvb-usb: bulk message failed: -22 (3/0)
[  844.711289][ T8884] dw2102: command 0x0e transfer failed.
[  844.711300][ T8884] dvb-usb: bulk message failed: -22 (3/0)
[  844.711316][ T8884] dw2102: command 0x0e transfer failed.
[  844.711326][ T8884] dvb-usb: bulk message failed: -22 (1/0)
[  844.711342][ T8884] dw2102: command 0x51 transfer failed.
[  844.711353][ T8884] dvb-usb: bulk message failed: -22 (5/0)
[  844.711368][ T8884] dw2102: i2c probe for address 0x68 failed.
[  844.711381][ T8884] dvb-usb: bulk message failed: -22 (5/0)
[  844.711397][ T8884] dw2102: i2c probe for address 0x69 failed.
[  844.711410][ T8884] dvb-usb: bulk message failed: -22 (5/0)
[  844.711425][ T8884] dw2102: i2c probe for address 0x6a failed.
[  844.711438][ T8884] dw2102: probing for demodulator failed. Is the external power switched on?
[  844.711450][ T8884] dvb-usb: no frontend was attached by 'TeVii S662'
[  845.091274][ T8884] rc_core: IR keymap rc-tt-1500 not found
[  845.091297][ T8884] Registered IR keymap rc-empty
[  845.093172][ T8884] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0
[  845.097004][ T8884] input: TeVii S662 as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input31
[  845.112087][ T8884] dvb-usb: schedule remote query interval to 250 msecs.
[  845.112148][ T8884] dw2102: su3000_power_ctrl: 0, initialized 1
[  845.112190][ T8884] dvb-usb: TeVii S662 successfully initialized and connected.
[  845.140635][ T8884] usb 8-1: USB disconnect, device number 23
[  845.515419][ T8884] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  845.601387][   T44] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  845.757887][   T44] usb 9-1: config index 0 descriptor too short (expected 23569, got 27)
[  845.757950][   T44] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  845.759211][   T44] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  845.759240][   T44] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  845.759262][   T44] usb 9-1: Manufacturer: syz
[  845.771486][   T44] usb 9-1: config 0 descriptor??
[  845.881303][   T44] rc_core: IR keymap rc-hauppauge not found
[  845.881328][   T44] Registered IR keymap rc-empty
[  845.882983][   T44] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  845.885689][   T44] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input32
[  846.096267][   T44] usb 9-1: USB disconnect, device number 16
[  846.517906][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1711'.
[  846.517931][T12784] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1711'.
[  846.517952][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1711'.
[  846.727582][T12790] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  846.729501][T12790] syzkaller0: entered promiscuous mode
[  846.729526][T12790] syzkaller0: entered allmulticast mode
[  846.794723][T12790] tipc: Resetting bearer <eth:syzkaller0>
[  846.831691][T12789] tipc: Resetting bearer <eth:syzkaller0>
[  846.975423][T12789] tipc: Disabling bearer <eth:syzkaller0>
[  847.277644][ T8884] usb 7-1: USB disconnect, device number 15
[  847.301242][ T8836] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  847.452084][   T44] usb 8-1: new high-speed USB device number 24 using dummy_hcd
[  847.471424][ T8836] usb 10-1: Using ep0 maxpacket: 16
[  847.473525][ T8836] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.473564][ T8836] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.473582][ T8836] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  847.473602][ T8836] usb 10-1: config 0 interface 0 has no altsetting 0
[  847.473650][ T8836] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  847.473677][ T8836] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.478548][ T8836] usb 10-1: config 0 descriptor??
[  847.604230][   T44] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  847.604266][   T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.627577][   T44] usb 8-1: config 0 descriptor??
[  847.660336][   T44] cp210x 8-1:0.0: cp210x converter detected
[  848.084022][   T44] cp210x 8-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  848.138824][   T44] usb 8-1: cp210x converter now attached to ttyUSB0
[  848.147978][ T8884] usb 10-1: USB disconnect, device number 13
[  848.176107][T12818] tipc: Enabled bearer <udp:syz1>, priority 10
[  848.304678][   T44] usb 8-1: USB disconnect, device number 24
[  848.364669][   T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  848.503223][   T44] cp210x 8-1:0.0: device disconnected
[  848.852604][ T8836] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  849.025142][ T8836] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  849.025195][ T8836] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  849.026710][ T8836] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  849.026740][ T8836] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  849.026764][ T8836] usb 6-1: Manufacturer: syz
[  849.094927][ T8836] usb 6-1: config 0 descriptor??
[  849.109245][ T8836] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  849.555323][   T44] tipc: Node number set to 375132214
[  850.114193][T12869] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1744'.
[  850.269038][T12872] input: syz1 as /devices/virtual/input/input33
[  851.307575][T12899] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1755'.
[  851.972696][ T8836] usb 6-1: USB disconnect, device number 15
[  851.992400][   T44] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  852.215429][   T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  852.215459][   T44] usb 7-1: config 0 has no interfaces?
[  852.233591][   T44] usb 7-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43
[  852.233678][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.233751][   T44] usb 7-1: Product: syz
[  852.233785][   T44] usb 7-1: Manufacturer: syz
[  852.233827][   T44] usb 7-1: SerialNumber: syz
[  852.282037][   T44] usb 7-1: config 0 descriptor??
[  852.473841][T12929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1767'.
[  852.493978][T12906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  852.494560][T12906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  852.542254][T12906] team_slave_0: entered promiscuous mode
[  852.542311][T12906] team_slave_1: entered promiscuous mode
[  852.545155][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1758'.
[  852.545308][T12906] team_slave_0: left promiscuous mode
[  852.545378][T12906] team_slave_1: left promiscuous mode
[  852.565206][   T44] usb 7-1: USB disconnect, device number 16
[  852.891282][ T8884] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  853.044227][ T8884] usb 9-1: Using ep0 maxpacket: 32
[  853.051362][   T44] usb 8-1: new high-speed USB device number 25 using dummy_hcd
[  853.052050][ T8882] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  853.088682][ T8884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  853.088719][ T8884] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  853.088761][ T8884] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  853.088787][ T8884] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  853.130567][ T8884] usb 9-1: config 0 descriptor??
[  853.206644][   T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  853.206667][   T44] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  853.206684][   T44] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  853.206700][   T44] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  853.210971][   T44] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  853.210992][   T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  853.211007][   T44] usb 8-1: Product: syz
[  853.211018][   T44] usb 8-1: Manufacturer: syz
[  853.211028][   T44] usb 8-1: SerialNumber: syz
[  853.259846][ T8882] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  853.292167][ T8882] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  853.309924][ T8882] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  853.312383][ T8882] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  853.312412][ T8882] usb 6-1: Manufacturer: syz
[  853.462629][   T44] usb 8-1: config 0 descriptor??
[  853.480485][ T8882] usb 6-1: config 0 descriptor??
[  853.554616][   T44] kvaser_usb 8-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  853.554643][   T44] kvaser_usb 8-1:0.0: error -EMSGSIZE: Failed to initialize card
[  853.554963][   T44] kvaser_usb 8-1:0.0: probe with driver kvaser_usb failed with error -90
[  853.608998][ T8882] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  853.754645][ T8836] usb 8-1: USB disconnect, device number 25
[  853.767693][ T8884] savu 0003:1E7D:2D5A.000B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0
[  854.005316][ T8884] usb 9-1: USB disconnect, device number 17
[  854.181473][ T8821] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  854.277392][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1781'.
[  854.277409][T12962] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1781'.
[  854.277424][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1781'.
[  854.341396][ T8821] usb 10-1: Using ep0 maxpacket: 32
[  854.344021][ T8821] usb 10-1: config 0 has an invalid interface number: 90 but max is 0
[  854.344049][ T8821] usb 10-1: config 0 has no interface number 0
[  854.346535][ T8821] usb 10-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 7.8a
[  854.346565][ T8821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.346580][ T8821] usb 10-1: Product: syz
[  854.346591][ T8821] usb 10-1: Manufacturer: syz
[  854.346601][ T8821] usb 10-1: SerialNumber: syz
[  854.408161][ T8821] usb 10-1: config 0 descriptor??
[  854.419651][ T8821] usb-storage 10-1:0.90: USB Mass Storage device detected
[  854.461562][ T8821] usb-storage 10-1:0.90: Quirks match for vid 04cb pid 0100: 9
[  854.998188][T12988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.000215][T12988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  855.146226][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1792'.
[  855.146251][T12992] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1792'.
[  855.146274][T12992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1792'.
[  855.933191][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1804'.
[  855.933215][T13019] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1804'.
[  855.933238][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1804'.
[  855.984937][ T8836] usb 6-1: USB disconnect, device number 16
[  856.441646][ T8884] usb 8-1: new high-speed USB device number 26 using dummy_hcd
[  856.594769][ T8884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  856.594806][ T8884] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  856.594834][ T8884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  856.594859][ T8884] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  856.598154][ T8884] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  856.598186][ T8884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  856.598210][ T8884] usb 8-1: Product: syz
[  856.598226][ T8884] usb 8-1: Manufacturer: syz
[  856.598242][ T8884] usb 8-1: SerialNumber: syz
[  856.691314][ T8884] usb 8-1: config 0 descriptor??
[  856.695350][ T8884] kvaser_usb 8-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  856.695375][ T8884] kvaser_usb 8-1:0.0: error -EMSGSIZE: Failed to initialize card
[  856.695466][ T8884] kvaser_usb 8-1:0.0: probe with driver kvaser_usb failed with error -90
[  856.846902][ T8884] usb 10-1: USB disconnect, device number 14
[  856.895396][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1817'.
[  856.895419][T13045] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1817'.
[  856.895440][T13045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1817'.
[  857.047760][ T8836] usb 8-1: USB disconnect, device number 26
[  858.211241][ T8836] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  858.391306][ T8836] usb 7-1: Using ep0 maxpacket: 32
[  858.407762][ T8836] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  858.407820][ T8836] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  858.407847][ T8836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.481346][ T8836] usb 7-1: config 0 descriptor??
[  858.483191][ T8821] usb 8-1: new full-speed USB device number 27 using dummy_hcd
[  858.523638][ T8836] dvb-usb: found a 'TeVii S662' in warm state.
[  858.523690][ T8836] dw2102: su3000_power_ctrl: 1, initialized 0
[  858.523714][ T8836] dvb-usb: bulk message failed: -22 (2/0)
[  858.529054][ T8836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  858.560859][ T8836] dvbdev: DVB: registering new adapter (TeVii S662)
[  858.560918][ T8836] usb 7-1: media controller created
[  858.560948][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  858.560965][ T8836] dw2102: i2c transfer failed.
[  858.560984][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  858.561000][ T8836] dw2102: i2c transfer failed.
[  858.561018][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  858.561033][ T8836] dw2102: i2c transfer failed.
[  858.561137][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  858.561155][ T8836] dw2102: i2c transfer failed.
[  858.561172][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  858.561188][ T8836] dw2102: i2c transfer failed.
[  858.568755][ T8836] dvb-usb: bulk message failed: -22 (6/0)
[  858.568777][ T8836] dw2102: i2c transfer failed.
[  858.568790][ T8836] dvb-usb: MAC address: 02:02:02:02:02:02
[  858.665696][ T8821] usb 8-1: unable to get BOS descriptor or descriptor too short
[  858.668953][ T8821] usb 8-1: not running at top speed; connect to a high speed hub
[  858.687734][ T8821] usb 8-1: config 136 has an invalid interface number: 30 but max is 0
[  858.687764][ T8821] usb 8-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config
[  858.687792][ T8821] usb 8-1: config 136 has no interface number 0
[  858.687842][ T8821] usb 8-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  858.735333][ T8821] usb 8-1: New USB device found, idVendor=0499, idProduct=f00e, bcdDevice=f0.f3
[  858.735357][ T8821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.735373][ T8821] usb 8-1: Product: syz
[  858.735383][ T8821] usb 8-1: Manufacturer: syz
[  858.735400][ T8821] usb 8-1: SerialNumber: syz
[  858.826512][T13084] dvb-usb: bulk message failed: -22 (5/0)
[  858.826537][T13084] dw2102: i2c transfer failed.
[  858.919009][ T8836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  859.082102][ T8821] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  859.082962][ T8821] usb 8-1: invalid MIDI in EP 0
[  859.087060][ T8836] dvb-usb: bulk message failed: -22 (3/0)
[  859.087080][ T8836] dw2102: command 0x0e transfer failed.
[  859.087092][ T8836] dvb-usb: bulk message failed: -22 (3/0)
[  859.087108][ T8836] dw2102: command 0x0e transfer failed.
[  859.251470][ T8884] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  859.381219][ T8884] usb 10-1: device descriptor read/64, error -71
[  859.402709][ T8836] dvb-usb: bulk message failed: -22 (3/0)
[  859.402730][ T8836] dw2102: command 0x0e transfer failed.
[  859.402739][ T8836] dvb-usb: bulk message failed: -22 (3/0)
[  859.402753][ T8836] dw2102: command 0x0e transfer failed.
[  859.402762][ T8836] dvb-usb: bulk message failed: -22 (1/0)
[  859.402776][ T8836] dw2102: command 0x51 transfer failed.
[  859.402784][ T8836] dvb-usb: bulk message failed: -22 (5/0)
[  859.402798][ T8836] dw2102: i2c probe for address 0x68 failed.
[  859.402809][ T8836] dvb-usb: bulk message failed: -22 (5/0)
[  859.402824][ T8836] dw2102: i2c probe for address 0x69 failed.
[  859.402835][ T8836] dvb-usb: bulk message failed: -22 (5/0)
[  859.402848][ T8836] dw2102: i2c probe for address 0x6a failed.
[  859.402859][ T8836] dw2102: probing for demodulator failed. Is the external power switched on?
[  859.402870][ T8836] dvb-usb: no frontend was attached by 'TeVii S662'
[  859.597234][T13119] process 'syz.7.1851' launched './file1' with NULL argv: empty string added
[  859.621242][ T8884] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  859.628538][ T8821] snd-usb-audio 8-1:136.30: probe with driver snd-usb-audio failed with error -22
[  859.668542][ T8821] usb 8-1: USB disconnect, device number 27
[  859.737036][ T8776] udevd[8776]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  859.765508][ T8884] usb 10-1: device descriptor read/64, error -71
[  859.812223][ T8836] rc_core: IR keymap rc-tt-1500 not found
[  859.812245][ T8836] Registered IR keymap rc-empty
[  859.815887][ T8836] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0
[  859.827601][ T8836] input: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input34
[  859.872909][ T8884] usb usb10-port1: attempt power cycle
[  859.912489][ T8836] dvb-usb: schedule remote query interval to 250 msecs.
[  859.912509][ T8836] dw2102: su3000_power_ctrl: 0, initialized 1
[  859.912523][ T8836] dvb-usb: TeVii S662 successfully initialized and connected.
[  859.958498][ T8836] usb 7-1: USB disconnect, device number 17
[  860.211829][ T8836] dvb-usb: TeVii S662 successfully deinitialized and disconnected.
[  860.241498][ T8884] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[  860.262215][ T8884] usb 10-1: device descriptor read/8, error -71
[  860.322917][T13133] Bluetooth: hci0: invalid length 0, exp 2 for type 22
[  860.501265][ T8884] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[  860.521960][ T8884] usb 10-1: device descriptor read/8, error -71
[  860.551200][ T8836] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  860.631889][ T8884] usb usb10-port1: unable to enumerate USB device
[  860.707503][ T8836] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  860.707569][ T8836] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253
[  860.708967][ T8836] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  860.708998][ T8836] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  860.709023][ T8836] usb 7-1: Manufacturer: syz
[  860.730364][ T8836] usb 7-1: config 0 descriptor??
[  860.811141][ T8836] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[  861.427973][T13167] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  862.202169][ T8884] usb 8-1: new high-speed USB device number 28 using dummy_hcd
[  862.353208][ T8884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  862.353241][ T8884] usb 8-1: config 0 has no interfaces?
[  862.357579][ T8884] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  862.357612][ T8884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.357727][ T8884] usb 8-1: Product: syz
[  862.357745][ T8884] usb 8-1: Manufacturer: syz
[  862.357763][ T8884] usb 8-1: SerialNumber: syz
[  862.423004][ T8884] usb 8-1: config 0 descriptor??
[  863.176650][ T8884] usb 7-1: USB disconnect, device number 18
[  864.091326][ T8884] usb 10-1: new high-speed USB device number 19 using dummy_hcd
[  864.243254][ T8884] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  864.243289][ T8884] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.271940][ T8884] usb 10-1: config 0 descriptor??
[  864.302034][ T8884] cp210x 10-1:0.0: cp210x converter detected
[  864.371324][ T8836] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  864.541469][ T8836] usb 6-1: Using ep0 maxpacket: 16
[  864.546556][ T8836] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  864.546576][ T8836] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  864.549929][ T8836] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  864.549960][ T8836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  864.549983][ T8836] usb 6-1: Product: syz
[  864.549998][ T8836] usb 6-1: Manufacturer: syz
[  864.550014][ T8836] usb 6-1: SerialNumber: syz
[  864.613157][ T8836] usb 6-1: config 0 descriptor??
[  864.731235][ T6283] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  864.825622][ T8821] usb 6-1: USB disconnect, device number 17
[  864.884161][ T8884] cp210x 10-1:0.0: failed to get vendor val 0x000e size 678: -71
[  864.884220][ T8884] cp210x 10-1:0.0: GPIO initialisation failed: -71
[  864.912574][ T8884] usb 10-1: cp210x converter now attached to ttyUSB0
[  864.918614][ T8884] usb 10-1: USB disconnect, device number 19
[  864.918827][ T6283] usb 7-1: config 0 has no interfaces?
[  864.918863][ T6283] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  864.918897][ T6283] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.978602][ T6283] usb 7-1: config 0 descriptor??
[  865.002942][ T8884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  865.003722][ T8884] cp210x 10-1:0.0: device disconnected
[  865.035619][   T44] usb 8-1: USB disconnect, device number 28
[  865.244350][   T44] usb 7-1: USB disconnect, device number 19
[  866.151276][ T8884] usb 8-1: new high-speed USB device number 29 using dummy_hcd
[  866.303521][ T8884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  866.303553][ T8884] usb 8-1: config 0 has no interfaces?
[  866.306482][ T8884] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  866.306518][ T8884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.306541][ T8884] usb 8-1: Product: syz
[  866.306557][ T8884] usb 8-1: Manufacturer: syz
[  866.306574][ T8884] usb 8-1: SerialNumber: syz
[  866.379155][ T8884] usb 8-1: config 0 descriptor??
[  866.557983][T13309] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1936'.
[  866.731460][ T6283] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  866.881285][ T6283] usb 7-1: Using ep0 maxpacket: 16
[  866.885322][ T6283] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  866.885360][ T6283] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  866.885388][ T6283] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  866.885420][ T6283] usb 7-1: config 0 interface 0 has no altsetting 0
[  866.885457][ T6283] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  866.885484][ T6283] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.947989][ T6283] usb 7-1: config 0 descriptor??
[  867.368924][ T6283] usbhid 7-1:0.0: can't add hid device: -71
[  867.369054][ T6283] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  867.381329][ T8821] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  867.395038][ T6283] usb 7-1: USB disconnect, device number 20
[  867.553277][ T8821] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  867.553402][ T8821] usb 6-1: config 0 has no interfaces?
[  867.560652][ T8821] usb 6-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43
[  867.560685][ T8821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.560706][ T8821] usb 6-1: Product: syz
[  867.560723][ T8821] usb 6-1: Manufacturer: syz
[  867.560740][ T8821] usb 6-1: SerialNumber: syz
[  867.628298][ T8821] usb 6-1: config 0 descriptor??
[  867.834664][T13327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  867.835222][T13327] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  867.839442][T13327] team_slave_0: entered promiscuous mode
[  867.839496][T13327] team_slave_1: entered promiscuous mode
[  867.840929][T13327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1944'.
[  867.840985][T13327] team_slave_0: left promiscuous mode
[  867.886286][T13327] team_slave_1: left promiscuous mode
[  867.941539][ T8821] usb 6-1: USB disconnect, device number 18
[  868.434356][T13365] netlink: 176 bytes leftover after parsing attributes in process `syz.9.1964'.
[  868.691485][ T6281] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  868.858063][ T6281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  868.858108][ T6281] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  868.858136][ T6281] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  868.858160][ T6281] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  868.860551][ T6281] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  868.860581][ T6281] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.860603][ T6281] usb 7-1: Product: syz
[  868.860619][ T6281] usb 7-1: Manufacturer: syz
[  868.860635][ T6281] usb 7-1: SerialNumber: syz
[  868.939152][ T6281] usb 7-1: config 0 descriptor??
[  868.953546][ T6281] kvaser_usb 7-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  868.953570][ T6281] kvaser_usb 7-1:0.0: error -EMSGSIZE: Failed to initialize card
[  868.953662][ T6281] kvaser_usb 7-1:0.0: probe with driver kvaser_usb failed with error -90
[  869.044283][ T6281] usb 8-1: USB disconnect, device number 29
[  869.152012][ T8821] usb 7-1: USB disconnect, device number 21
[  869.390958][T13396] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1975'.
[  869.752486][ T8884] usb 8-1: new high-speed USB device number 30 using dummy_hcd
[  869.906152][ T8884] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  869.906184][ T8884] usb 8-1: config 0 has no interfaces?
[  869.933088][ T8884] usb 8-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43
[  869.933122][ T8884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.933146][ T8884] usb 8-1: Product: syz
[  869.933162][ T8884] usb 8-1: Manufacturer: syz
[  869.933179][ T8884] usb 8-1: SerialNumber: syz
[  869.976752][ T8884] usb 8-1: config 0 descriptor??
[  870.092490][ T6281] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  870.184573][T13400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  870.185108][T13400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  870.195040][T13400] team_slave_0: entered promiscuous mode
[  870.195083][T13400] team_slave_1: entered promiscuous mode
[  870.196960][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1977'.
[  870.197046][T13400] team_slave_0: left promiscuous mode
[  870.197223][T13400] team_slave_1: left promiscuous mode
[  870.257197][ T6281] usb 7-1: config 0 has no interfaces?
[  870.257238][ T6281] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  870.257265][ T6281] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  870.301844][ T6281] usb 7-1: config 0 descriptor??
[  870.318154][ T8884] usb 8-1: USB disconnect, device number 30
[  870.518650][T13411] Bluetooth: hci0: unsupported parameter 255
[  870.518675][T13411] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  870.583269][ T6281] usb 7-1: USB disconnect, device number 22
[  872.482290][T13494] loop8: detected capacity change from 0 to 8
[  872.518624][T13494] Dev loop8: unable to read RDB block 8
[  872.518689][T13494]  loop8: unable to read partition table
[  872.518920][T13494] loop8: partition table beyond EOD, truncated
[  872.519327][T13494] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  873.031341][ T8884] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  873.141241][   T44] usb 10-1: new high-speed USB device number 20 using dummy_hcd
[  873.181207][ T8884] usb 6-1: Using ep0 maxpacket: 16
[  873.185818][ T8884] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  873.185851][ T8884] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.185873][ T8884] usb 6-1: Product: syz
[  873.185889][ T8884] usb 6-1: Manufacturer: syz
[  873.185905][ T8884] usb 6-1: SerialNumber: syz
[  873.234753][ T8884] usb 6-1: config 0 descriptor??
[  873.240895][ T8884] ums-onetouch 6-1:0.0: USB Mass Storage device detected
[  873.303645][   T44] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  873.303676][   T44] usb 10-1: config 0 has no interfaces?
[  873.307475][   T44] usb 10-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43
[  873.307513][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.307535][   T44] usb 10-1: Product: syz
[  873.307551][   T44] usb 10-1: Manufacturer: syz
[  873.307566][   T44] usb 10-1: SerialNumber: syz
[  873.374345][   T44] usb 10-1: config 0 descriptor??
[  873.441839][ T8821] usb 6-1: USB disconnect, device number 19
[  873.580582][T13507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  873.590828][T13507] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  873.602267][T13507] team_slave_0: entered promiscuous mode
[  873.602330][T13507] team_slave_1: entered promiscuous mode
[  873.602716][T13507] vxlan0: entered promiscuous mode
[  873.604197][T13507] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2018'.
[  873.604251][T13507] team_slave_0: left promiscuous mode
[  873.604298][T13507] team_slave_1: left promiscuous mode
[  873.604457][T13507] vxlan0: left promiscuous mode
[  873.663314][ T6281] usb 10-1: USB disconnect, device number 20
[  874.571281][ T8884] usb 8-1: new high-speed USB device number 31 using dummy_hcd
[  874.701209][ T8884] usb 8-1: device descriptor read/64, error -71
[  874.950389][ T8884] usb 8-1: new high-speed USB device number 32 using dummy_hcd
[  875.081682][ T8884] usb 8-1: device descriptor read/64, error -71
[  875.191731][ T8884] usb usb8-port1: attempt power cycle
[  875.339899][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  875.339983][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  875.741281][ T8884] usb 8-1: new high-speed USB device number 33 using dummy_hcd
[  875.761974][ T8884] usb 8-1: device descriptor read/8, error -71
[  876.001245][ T8884] usb 8-1: new high-speed USB device number 34 using dummy_hcd
[  876.023354][ T8884] usb 8-1: device descriptor read/8, error -71
[  876.131886][ T8884] usb usb8-port1: unable to enumerate USB device
[  877.291178][ T8821] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  877.450658][T13634] syzkaller0: entered promiscuous mode
[  877.450687][T13634] syzkaller0: entered allmulticast mode
[  877.464303][ T8821] usb 6-1: config 0 has no interfaces?
[  877.465514][ T8821] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  877.465544][ T8821] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  877.465571][ T8821] usb 6-1: Manufacturer: syz
[  877.521449][ T8821] usb 6-1: config 0 descriptor??
[  877.582377][T13646] syzkaller0: tun_chr_ioctl cmd 2147767520
[  877.589695][ T9280] syzkaller0: tun_net_xmit 48
[  877.759410][ T8821] usb 6-1: USB disconnect, device number 20
[  878.671269][ T6281] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  878.854785][ T6281] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  878.877269][ T6281] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  878.877293][ T6281] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.877308][ T6281] usb 6-1: Product: syz
[  878.877319][ T6281] usb 6-1: Manufacturer: syz
[  878.877330][ T6281] usb 6-1: SerialNumber: syz
[  878.921799][ T6281] usb 6-1: config 0 descriptor??
[  880.161318][ T8884] usb 8-1: new high-speed USB device number 35 using dummy_hcd
[  880.340674][ T8884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  880.340712][ T8884] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  880.340800][ T8884] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  880.340826][ T8884] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  880.384524][ T8884] usb 8-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  880.384558][ T8884] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  880.384580][ T8884] usb 8-1: Product: syz
[  880.384596][ T8884] usb 8-1: Manufacturer: syz
[  880.384611][ T8884] usb 8-1: SerialNumber: syz
[  880.390092][ T8884] usb 8-1: config 0 descriptor??
[  880.436415][ T8884] kvaser_usb 8-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  880.436441][ T8884] kvaser_usb 8-1:0.0: error -EMSGSIZE: Failed to initialize card
[  880.436582][ T8884] kvaser_usb 8-1:0.0: probe with driver kvaser_usb failed with error -90
[  881.495119][ T6281] usb 6-1: USB disconnect, device number 21
[  892.082353][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  892.106006][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  892.108336][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  892.110071][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  892.156379][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  892.643811][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  892.660786][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  892.663020][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  892.668593][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  892.671362][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  893.069176][   T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  893.117432][   T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  893.127856][   T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  893.145055][   T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  893.145847][   T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  894.211413][ T5809] Bluetooth: hci4: command tx timeout
[  894.691603][ T5809] Bluetooth: hci2: command tx timeout
[  894.740893][T13663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  894.746055][T13666] syzkaller0: entered promiscuous mode
[  894.746130][T13666] syzkaller0: entered allmulticast mode
[  894.765553][T13672] tipc: Resetting bearer <eth:syzkaller0>
[  895.198680][   T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  895.219530][   T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  895.253414][   T61] Bluetooth: hci6: command tx timeout
[  895.255324][   T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  895.303436][   T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  895.326000][   T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  895.492359][T13661] tipc: Resetting bearer <eth:syzkaller0>
[  895.633065][T13661] tipc: Disabling bearer <eth:syzkaller0>
[  896.074409][T13632] bond0: (slave syz_tun): Releasing backup interface
[  896.291376][   T61] Bluetooth: hci4: command tx timeout
[  896.771366][   T61] Bluetooth: hci2: command tx timeout
[  896.793148][ T8821] usb 8-1: USB disconnect, device number 35
[  897.188601][ T6018] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  897.188631][ T6018] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.333077][   T61] Bluetooth: hci6: command tx timeout
[  897.411390][   T61] Bluetooth: hci7: command tx timeout
[  897.536174][ T6018] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  897.536217][ T6018] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.826769][ T6018] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  897.826800][ T6018] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.158482][ T6018] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  898.158525][ T6018] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.373036][   T61] Bluetooth: hci4: command tx timeout
[  898.461218][   T44] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  898.621865][   T44] usb 6-1: Using ep0 maxpacket: 32
[  898.623702][   T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  898.623731][   T44] usb 6-1: config 0 has no interfaces?
[  898.623775][   T44] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  898.623802][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  898.678377][   T44] usb 6-1: config 0 descriptor??
[  898.790456][T14077] chnl_net:caif_netlink_parms(): no params data found
[  898.857343][   T61] Bluetooth: hci2: command tx timeout
[  898.939324][ T8821] usb 6-1: USB disconnect, device number 22
[  898.963924][T14088] chnl_net:caif_netlink_parms(): no params data found
[  899.100366][T14080] chnl_net:caif_netlink_parms(): no params data found
[  899.186765][T14071] chnl_net:caif_netlink_parms(): no params data found
[  899.411344][   T61] Bluetooth: hci6: command tx timeout
[  899.467483][ T6018] bridge_slave_1: left allmulticast mode
[  899.467525][ T6018] bridge_slave_1: left promiscuous mode
[  899.467778][ T6018] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.491314][   T61] Bluetooth: hci7: command tx timeout
[  899.555483][ T6018] bridge_slave_0: left allmulticast mode
[  899.555507][ T6018] bridge_slave_0: left promiscuous mode
[  899.555693][ T6018] bridge0: port 1(bridge_slave_0) entered disabled state
[  900.467928][   T61] Bluetooth: hci4: command tx timeout
[  900.691895][ T6018] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  900.941559][   T61] Bluetooth: hci2: command tx timeout
[  901.361356][ T8882] usb 6-1: new full-speed USB device number 23 using dummy_hcd
[  901.491581][   T61] Bluetooth: hci6: command tx timeout
[  901.517617][ T8882] usb 6-1: unable to get BOS descriptor or descriptor too short
[  901.518414][ T8882] usb 6-1: not running at top speed; connect to a high speed hub
[  901.519706][ T8882] usb 6-1: config 136 has an invalid interface number: 30 but max is 0
[  901.519733][ T8882] usb 6-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config
[  901.519755][ T8882] usb 6-1: config 136 has no interface number 0
[  901.519803][ T8882] usb 6-1: config 136 interface 30 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  901.571266][   T61] Bluetooth: hci7: command tx timeout
[  901.581347][ T8882] usb 6-1: New USB device found, idVendor=0499, idProduct=f00e, bcdDevice=f0.f3
[  901.581377][ T8882] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  901.581397][ T8882] usb 6-1: Product: syz
[  901.581411][ T8882] usb 6-1: Manufacturer: syz
[  901.581424][ T8882] usb 6-1: SerialNumber: syz
[  901.913672][ T8882] usb 6-1: USB disconnect, device number 23
[  901.932810][ T6018] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  901.935499][T14076] udevd[14076]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  902.021881][ T6018] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  902.064114][ T6018] bond0 (unregistering): Released all slaves
[  902.942548][ T6018] bond1 (unregistering): (slave dummy0): Releasing active interface
[  902.969455][ T6018] bond1 (unregistering): Released all slaves
[  903.312761][ T6018] tipc: Disabling bearer <udp:syz1>
[  903.315600][ T6018] tipc: Left network mode
[  903.315802][T14077] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.315953][T14077] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.316162][T14077] bridge_slave_0: entered allmulticast mode
[  903.318619][T14077] bridge_slave_0: entered promiscuous mode
[  903.432400][T14077] bridge0: port 2(bridge_slave_1) entered blocking state
[  903.432813][T14077] bridge0: port 2(bridge_slave_1) entered disabled state
[  903.433027][T14077] bridge_slave_1: entered allmulticast mode
[  903.438996][T14077] bridge_slave_1: entered promiscuous mode
[  903.661273][   T61] Bluetooth: hci7: command tx timeout
[  903.972541][T14088] bridge0: port 1(bridge_slave_0) entered blocking state
[  903.972772][T14088] bridge0: port 1(bridge_slave_0) entered disabled state
[  903.972995][T14088] bridge_slave_0: entered allmulticast mode
[  903.975880][T14088] bridge_slave_0: entered promiscuous mode
[  904.286264][T14088] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.286570][T14088] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.286740][T14088] bridge_slave_1: entered allmulticast mode
[  904.288728][T14088] bridge_slave_1: entered promiscuous mode
[  904.290312][T14080] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.290441][T14080] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.290581][T14080] bridge_slave_0: entered allmulticast mode
[  904.297244][T14080] bridge_slave_0: entered promiscuous mode
[  904.316742][T14077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  904.843218][T14080] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.843337][T14080] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.843520][T14080] bridge_slave_1: entered allmulticast mode
[  904.845572][T14080] bridge_slave_1: entered promiscuous mode
[  904.850489][T14077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  904.906932][T14071] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.907069][T14071] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.907376][T14071] bridge_slave_0: entered allmulticast mode
[  904.971236][T14071] bridge_slave_0: entered promiscuous mode
[  905.203544][T14071] bridge0: port 2(bridge_slave_1) entered blocking state
[  905.203757][T14071] bridge0: port 2(bridge_slave_1) entered disabled state
[  905.203940][T14071] bridge_slave_1: entered allmulticast mode
[  905.205845][T14071] bridge_slave_1: entered promiscuous mode
[  905.213747][T14088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  905.435054][T14088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  905.440735][T14080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  905.561278][ T6018] hsr_slave_0: left promiscuous mode
[  905.581395][ T6018] hsr_slave_1: left promiscuous mode
[  905.582472][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  905.582499][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_0
[  905.642890][ T6018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  905.642915][ T6018] batman_adv: batadv0: Removing interface: batadv_slave_1
[  905.725618][ T6018] veth1_macvtap: left promiscuous mode
[  905.725705][ T6018] veth0_macvtap: left promiscuous mode
[  905.725857][ T6018] veth1_vlan: left promiscuous mode
[  905.725963][ T6018] veth0_vlan: left promiscuous mode
[  908.313743][ T6018] team0 (unregistering): Port device team_slave_1 removed
[  908.563326][ T6018] team0 (unregistering): Port device team_slave_0 removed
[  911.044171][T14077] team0: Port device team_slave_0 added
[  911.215505][T14080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  911.318435][T14077] team0: Port device team_slave_1 added
[  911.330595][T14071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  911.684661][T14071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  911.689355][T14088] team0: Port device team_slave_0 added
[  911.951587][T14088] team0: Port device team_slave_1 added
[  911.954162][T14080] team0: Port device team_slave_0 added
[  912.062961][T14077] batman_adv: batadv0: Adding interface: batadv_slave_0
[  912.062990][T14077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.063021][T14077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.204537][T14080] team0: Port device team_slave_1 added
[  912.205378][T14077] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.205391][T14077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.205413][T14077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.208798][T14071] team0: Port device team_slave_0 added
[  912.479191][T14071] team0: Port device team_slave_1 added
[  912.614445][T14088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  912.614460][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.614482][T14088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.835453][T14088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.835468][T14088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.835488][T14088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.836779][T14080] batman_adv: batadv0: Adding interface: batadv_slave_0
[  912.836790][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  912.836810][T14080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  913.023717][T14080] batman_adv: batadv0: Adding interface: batadv_slave_1
[  913.023736][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  913.023872][T14080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  913.135614][T14071] batman_adv: batadv0: Adding interface: batadv_slave_0
[  913.135647][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  913.135670][T14071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  913.196456][ T6018] IPVS: stop unused estimator thread 0...
[  913.284522][T14071] batman_adv: batadv0: Adding interface: batadv_slave_1
[  913.284540][T14071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  913.284571][T14071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  913.409597][T14077] hsr_slave_0: entered promiscuous mode
[  913.410635][T14077] hsr_slave_1: entered promiscuous mode
[  913.630386][T14088] hsr_slave_0: entered promiscuous mode
[  913.634084][T14088] hsr_slave_1: entered promiscuous mode
[  913.636732][T14088] debugfs: 'hsr0' already exists in 'hsr'
[  913.636793][T14088] Cannot create hsr debugfs directory
[  914.330556][T14080] hsr_slave_0: entered promiscuous mode
[  914.341631][T14080] hsr_slave_1: entered promiscuous mode
[  914.342711][T14080] debugfs: 'hsr0' already exists in 'hsr'
[  914.342738][T14080] Cannot create hsr debugfs directory
[  914.878778][T14071] hsr_slave_0: entered promiscuous mode
[  914.879863][T14071] hsr_slave_1: entered promiscuous mode
[  914.880579][T14071] debugfs: 'hsr0' already exists in 'hsr'
[  914.880597][T14071] Cannot create hsr debugfs directory
[  915.133713][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.201299][   T44] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  915.356606][   T44] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  915.356691][   T44] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  915.357936][   T44] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  915.357964][   T44] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  915.357979][   T44] usb 6-1: Manufacturer: syz
[  915.367029][   T44] usb 6-1: config 0 descriptor??
[  915.428855][   T44] igorplugusb 6-1:0.0: incorrect number of endpoints
[  915.630315][ T8821] usb 6-1: USB disconnect, device number 24
[  915.706511][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.115558][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.624568][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.873696][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  917.873737][   T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.208448][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  918.208498][   T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  918.656094][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  918.656136][   T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  919.024359][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  919.024400][   T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.446954][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  920.446993][   T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  920.905652][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  920.905682][   T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.209820][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  921.209860][   T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.495971][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  921.496000][   T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  921.931560][   T12] bridge_slave_1: left allmulticast mode
[  921.931591][   T12] bridge_slave_1: left promiscuous mode
[  921.931850][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.042752][   T12] bridge_slave_0: left allmulticast mode
[  922.042784][   T12] bridge_slave_0: left promiscuous mode
[  922.043083][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.125740][   T12] bridge_slave_1: left allmulticast mode
[  922.125771][   T12] bridge_slave_1: left promiscuous mode
[  922.126025][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.387663][   T12] bridge_slave_0: left allmulticast mode
[  922.387695][   T12] bridge_slave_0: left promiscuous mode
[  922.387994][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.524757][   T12] bridge_slave_1: left allmulticast mode
[  922.524788][   T12] bridge_slave_1: left promiscuous mode
[  922.525038][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  922.573619][   T12] bridge_slave_0: left allmulticast mode
[  922.573651][   T12] bridge_slave_0: left promiscuous mode
[  922.573907][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  922.783868][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2345'.
[  925.284345][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  925.352060][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  925.373810][   T12] bond0 (unregistering): Released all slaves
[  926.224159][   T12] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  927.343401][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  927.406804][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  927.443930][   T12] bond0 (unregistering): Released all slaves
[  928.011322][   T12] gretap0 (unregistering): left promiscuous mode
[  928.332429][   T12] team0: Port device vxlan0 removed
[  929.241328][   T12] bond0 (unregistering): left promiscuous mode
[  929.241381][   T12] bond_slave_0: left promiscuous mode
[  929.241569][   T12] bond_slave_1: left promiscuous mode
[  929.392031][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  929.452791][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  929.495483][   T12] bond0 (unregistering): Released all slaves
[  930.257375][   T12] bond1 (unregistering): Released all slaves
[  931.061942][   T12] bond2 (unregistering): (slave dummy0): Releasing active interface
[  931.061970][   T12] dummy0: left promiscuous mode
[  931.107269][   T12] bond2 (unregistering): Released all slaves
[  931.450680][T14378] netlink: 'syz.5.2349': attribute type 83 has an invalid length.
[  931.459764][   T12] tipc: Left network mode
[  932.185243][   T12] tipc: Left network mode
[  932.446399][T14401] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2352'.
[  933.921213][T14370] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  934.076776][T14370] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  934.076814][T14370] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  934.076838][T14370] usb 6-1: Product: syz
[  934.076854][T14370] usb 6-1: Manufacturer: syz
[  934.076871][T14370] usb 6-1: SerialNumber: syz
[  934.131004][T14370] usb 6-1: config 0 descriptor??
[  934.760045][T14370] usb 6-1: f81604_read: reg: 105 failed: -EPROTO
[  934.760077][T14370] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  934.760117][T14370] f81604 6-1:0.0: probe with driver f81604 failed with error -71
[  934.836376][T14370] usb 6-1: USB disconnect, device number 25
[  935.854706][T14471] faux_driver vkms: [drm] Unknown color mode 262147; guessing buffer size.
[  935.933152][T14473] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2359'.
[  936.777546][ T1321] ieee802154 phy0 wpan0: encryption failed: -22
[  936.777620][ T1321] ieee802154 phy1 wpan1: encryption failed: -22
[  937.140541][T14474] ==================================================================
[  937.140555][T14474] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0
[  937.140585][T14474] Read of size 1 at addr ffff88805c01c200 by task syz.5.2360/14474
[  937.140601][T14474] 
[  937.140611][T14474] CPU: 0 UID: 0 PID: 14474 Comm: syz.5.2360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  937.140630][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  937.140641][T14474] Call Trace:
[  937.140647][T14474]  <TASK>
[  937.140654][T14474]  dump_stack_lvl+0xe8/0x150
[  937.140677][T14474]  print_report+0xca/0x240
[  937.140698][T14474]  ? rt_spin_lock+0x88/0x3e0
[  937.140719][T14474]  kasan_report+0x118/0x150
[  937.140747][T14474]  ? rt_spin_lock+0x88/0x3e0
[  937.140771][T14474]  ? __wake_up_common_lock+0x2f/0x1e0
[  937.140791][T14474]  __kasan_check_byte+0x2a/0x40
[  937.140815][T14474]  lock_acquire+0x84/0x340
[  937.140836][T14474]  ? rt_mutex_slowunlock+0x668/0x8a0
[  937.140858][T14474]  ? reacquire_held_locks+0x104/0x190
[  937.140885][T14474]  rt_spin_lock+0x88/0x3e0
[  937.140906][T14474]  ? __wake_up_common_lock+0x2f/0x1e0
[  937.140927][T14474]  ? __pfx_rt_spin_lock+0x10/0x10
[  937.140948][T14474]  ? rt_spin_unlock+0x161/0x200
[  937.140971][T14474]  ? __wake_up_common_lock+0x18a/0x1e0
[  937.140993][T14474]  __wake_up_common_lock+0x2f/0x1e0
[  937.141057][T14474]  ? snd_pcm_post_stop+0x14a/0x1e0
[  937.141079][T14474]  ? __pfx_snd_pcm_post_stop+0x10/0x10
[  937.141106][T14474]  snd_pcm_action+0x1f4/0x240
[  937.141137][T14474]  loopback_trigger+0xb82/0x1b60
[  937.141162][T14474]  ? rcu_is_watching+0x15/0xb0
[  937.141186][T14474]  snd_pcm_do_start+0xb7/0x180
[  937.141213][T14474]  snd_pcm_action+0xe7/0x240
[  937.141245][T14474]  __snd_pcm_lib_xfer+0x1762/0x1d00
[  937.141275][T14474]  ? __pfx_interleaved_copy+0x10/0x10
[  937.141300][T14474]  ? __pfx_default_write_copy+0x10/0x10
[  937.141328][T14474]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  937.141353][T14474]  ? __pfx___snd_pcm_lib_xfer+0x10/0x10
[  937.141376][T14474]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  937.141406][T14474]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  937.141440][T14474]  ? snd_pcm_oss_write3+0x1a2/0x350
[  937.141480][T14474]  snd_pcm_oss_write3+0x1bc/0x350
[  937.141528][T14474]  snd_pcm_oss_sync1+0x345/0x760
[  937.141560][T14474]  ? __pfx_snd_pcm_oss_sync1+0x10/0x10
[  937.141579][T14474]  ? __pfx_default_wake_function+0x10/0x10
[  937.141607][T14474]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  937.141625][T14474]  ? __asan_memset+0x22/0x50
[  937.141644][T14474]  ? snd_pcm_format_set_silence+0x11c/0x2d0
[  937.141666][T14474]  snd_pcm_oss_sync+0x6ef/0x9d0
[  937.141685][T14474]  snd_pcm_oss_release+0x102/0x250
[  937.141701][T14474]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  937.141717][T14474]  __fput+0x45b/0xa80
[  937.141740][T14474]  task_work_run+0x1d4/0x260
[  937.141767][T14474]  ? __pfx_task_work_run+0x10/0x10
[  937.141795][T14474]  exit_to_user_mode_loop+0xef/0x4e0
[  937.141817][T14474]  ? rcu_is_watching+0x15/0xb0
[  937.141832][T14474]  do_syscall_64+0x2c1/0xf80
[  937.141848][T14474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.141864][T14474]  ? trace_irq_disable+0x37/0x100
[  937.141882][T14474]  ? clear_bhb_loop+0x60/0xb0
[  937.141899][T14474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.141915][T14474] RIP: 0033:0x7fb4c82df749
[  937.141929][T14474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  937.141944][T14474] RSP: 002b:00007ffe98020e28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  937.141961][T14474] RAX: 0000000000000000 RBX: 00007fb4c8537da0 RCX: 00007fb4c82df749
[  937.141973][T14474] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  937.141982][T14474] RBP: 00007fb4c8537da0 R08: 00000000000003f4 R09: 000000059802111f
[  937.141993][T14474] R10: 00007fb4c8537cb0 R11: 0000000000000246 R12: 00000000000e4b0f
[  937.142004][T14474] R13: 00007fb4c8536090 R14: ffffffffffffffff R15: 00007ffe98020f40
[  937.142023][T14474]  </TASK>
[  937.142029][T14474] 
[  937.142033][T14474] Allocated by task 14475:
[  937.142041][T14474]  kasan_save_track+0x3e/0x80
[  937.142062][T14474]  __kasan_kmalloc+0x93/0xb0
[  937.142083][T14474]  __kmalloc_cache_noprof+0x1fb/0x6d0
[  937.142104][T14474]  snd_pcm_attach_substream+0x5b7/0xb30
[  937.142121][T14474]  snd_pcm_open_substream+0xb6/0x2410
[  937.142142][T14474]  snd_pcm_oss_open+0xf2a/0x1bd0
[  937.142155][T14474]  chrdev_open+0x4cf/0x5e0
[  937.142167][T14474]  do_dentry_open+0x7d0/0x1270
[  937.142181][T14474]  vfs_open+0x3b/0x350
[  937.142195][T14474]  path_openat+0x342a/0x3df0
[  937.142214][T14474]  do_filp_open+0x1fa/0x410
[  937.142234][T14474]  do_sys_openat2+0x121/0x200
[  937.142249][T14474]  __x64_sys_openat+0x138/0x170
[  937.142264][T14474]  do_syscall_64+0xec/0xf80
[  937.142278][T14474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.142292][T14474] 
[  937.142295][T14474] Freed by task 14475:
[  937.142301][T14474]  kasan_save_track+0x3e/0x80
[  937.142320][T14474]  kasan_save_free_info+0x46/0x50
[  937.142336][T14474]  __kasan_slab_free+0x5c/0x80
[  937.142358][T14474]  kfree+0x1bd/0x900
[  937.142376][T14474]  snd_pcm_detach_substream+0x1e1/0x290
[  937.142393][T14474]  snd_pcm_oss_release+0x184/0x250
[  937.142406][T14474]  __fput+0x45b/0xa80
[  937.142421][T14474]  task_work_run+0x1d4/0x260
[  937.142443][T14474]  exit_to_user_mode_loop+0xef/0x4e0
[  937.142463][T14474]  do_syscall_64+0x2c1/0xf80
[  937.142477][T14474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.142496][T14474] 
[  937.142500][T14474] The buggy address belongs to the object at ffff88805c01c000
[  937.142500][T14474]  which belongs to the cache kmalloc-2k of size 2048
[  937.142513][T14474] The buggy address is located 512 bytes inside of
[  937.142513][T14474]  freed 2048-byte region [ffff88805c01c000, ffff88805c01c800)
[  937.142530][T14474] 
[  937.142534][T14474] The buggy address belongs to the physical page:
[  937.142553][T14474] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c018
[  937.142567][T14474] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  937.142580][T14474] flags: 0x80000000000040(head|node=0|zone=1)
[  937.142597][T14474] page_type: f5(slab)
[  937.142612][T14474] raw: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122
[  937.142626][T14474] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  937.142641][T14474] head: 0080000000000040 ffff88813ff27000 dead000000000100 dead000000000122
[  937.142657][T14474] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[  937.142671][T14474] head: 0080000000000003 ffffea0001700601 00000000ffffffff 00000000ffffffff
[  937.142685][T14474] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  937.142693][T14474] page dumped because: kasan: bad access detected
[  937.142705][T14474] page_owner tracks the page as allocated
[  937.142710][T14474] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5795, tgid 5795 (syz-executor), ts 97636292919, free_ts 0
[  937.142738][T14474]  post_alloc_hook+0x234/0x290
[  937.142761][T14474]  get_page_from_freelist+0x28c0/0x2960
[  937.142776][T14474]  __alloc_frozen_pages_noprof+0x181/0x370
[  937.142790][T14474]  alloc_pages_mpol+0xd1/0x380
[  937.142802][T14474]  allocate_slab+0x86/0x3b0
[  937.142819][T14474]  ___slab_alloc+0xb10/0x13e0
[  937.142833][T14474]  __slab_alloc+0xc6/0x1f0
[  937.142847][T14474]  __kmalloc_node_track_caller_noprof+0x2bf/0x810
[  937.142870][T14474]  kmalloc_reserve+0x136/0x290
[  937.142887][T14474]  pskb_expand_head+0x19d/0x1160
[  937.142908][T14474]  netlink_trim+0x1b3/0x2c0
[  937.142925][T14474]  netlink_broadcast_filtered+0xd6/0x1000
[  937.142944][T14474]  nlmsg_notify+0xf0/0x1a0
[  937.142963][T14474]  __dev_notify_flags+0xf4/0x2e0
[  937.142981][T14474]  rtnl_configure_link+0x22c/0x350
[  937.143005][T14474]  veth_newlink+0x4ad/0xa60
[  937.143021][T14474] page_owner free stack trace missing
[  937.143026][T14474] 
[  937.143030][T14474] Memory state around the buggy address:
[  937.143038][T14474]  ffff88805c01c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  937.143049][T14474]  ffff88805c01c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  937.143059][T14474] >ffff88805c01c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  937.143067][T14474]                    ^
[  937.143075][T14474]  ffff88805c01c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  937.143086][T14474]  ffff88805c01c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  937.143094][T14474] ==================================================================
[  937.157644][T14474] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  937.157707][T14474] CPU: 0 UID: 0 PID: 14474 Comm: syz.5.2360 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  937.157774][T14474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  937.157814][T14474] Call Trace:
[  937.157836][T14474]  <TASK>
[  937.157858][T14474]  vpanic+0x1e0/0x670
[  937.157954][T14474]  panic+0xb9/0xc0
[  937.158014][T14474]  ? __pfx_panic+0x10/0x10
[  937.158097][T14474]  ? preempt_schedule_thunk+0x16/0x30
[  937.158172][T14474]  ? preempt_schedule_thunk+0x16/0x30
[  937.158234][T14474]  ? rt_spin_lock+0x88/0x3e0
[  937.158312][T14474]  check_panic_on_warn+0x89/0xb0
[  937.158395][T14474]  ? rt_spin_lock+0x88/0x3e0
[  937.158483][T14474]  end_report+0x6f/0x140
[  937.158579][T14474]  kasan_report+0x129/0x150
[  937.158675][T14474]  ? rt_spin_lock+0x88/0x3e0
[  937.158756][T14474]  ? __wake_up_common_lock+0x2f/0x1e0
[  937.158830][T14474]  __kasan_check_byte+0x2a/0x40
[  937.158864][T14474]  lock_acquire+0x84/0x340
[  937.158894][T14474]  ? rt_mutex_slowunlock+0x668/0x8a0
[  937.158925][T14474]  ? reacquire_held_locks+0x104/0x190
[  937.158976][T14474]  rt_spin_lock+0x88/0x3e0
[  937.159003][T14474]  ? __wake_up_common_lock+0x2f/0x1e0
[  937.159031][T14474]  ? __pfx_rt_spin_lock+0x10/0x10
[  937.159058][T14474]  ? rt_spin_unlock+0x161/0x200
[  937.159086][T14474]  ? __wake_up_common_lock+0x18a/0x1e0
[  937.159114][T14474]  __wake_up_common_lock+0x2f/0x1e0
[  937.159140][T14474]  ? snd_pcm_post_stop+0x14a/0x1e0
[  937.159162][T14474]  ? __pfx_snd_pcm_post_stop+0x10/0x10
[  937.159183][T14474]  snd_pcm_action+0x1f4/0x240
[  937.159235][T14474]  loopback_trigger+0xb82/0x1b60
[  937.159260][T14474]  ? rcu_is_watching+0x15/0xb0
[  937.159287][T14474]  snd_pcm_do_start+0xb7/0x180
[  937.159311][T14474]  snd_pcm_action+0xe7/0x240
[  937.159344][T14474]  __snd_pcm_lib_xfer+0x1762/0x1d00
[  937.159376][T14474]  ? __pfx_interleaved_copy+0x10/0x10
[  937.159402][T14474]  ? __pfx_default_write_copy+0x10/0x10
[  937.159431][T14474]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  937.159457][T14474]  ? __pfx___snd_pcm_lib_xfer+0x10/0x10
[  937.159482][T14474]  ? rt_mutex_slowunlock+0x1be/0x2e0
[  937.159523][T14474]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  937.159557][T14474]  ? snd_pcm_oss_write3+0x1a2/0x350
[  937.159598][T14474]  snd_pcm_oss_write3+0x1bc/0x350
[  937.159640][T14474]  snd_pcm_oss_sync1+0x345/0x760
[  937.159675][T14474]  ? __pfx_snd_pcm_oss_sync1+0x10/0x10
[  937.159703][T14474]  ? __pfx_default_wake_function+0x10/0x10
[  937.159740][T14474]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  937.159781][T14474]  ? __asan_memset+0x22/0x50
[  937.159810][T14474]  ? snd_pcm_format_set_silence+0x11c/0x2d0
[  937.159840][T14474]  snd_pcm_oss_sync+0x6ef/0x9d0
[  937.159867][T14474]  snd_pcm_oss_release+0x102/0x250
[  937.159889][T14474]  ? __pfx_snd_pcm_oss_release+0x10/0x10
[  937.159912][T14474]  __fput+0x45b/0xa80
[  937.159943][T14474]  task_work_run+0x1d4/0x260
[  937.159979][T14474]  ? __pfx_task_work_run+0x10/0x10
[  937.160019][T14474]  exit_to_user_mode_loop+0xef/0x4e0
[  937.160051][T14474]  ? rcu_is_watching+0x15/0xb0
[  937.160074][T14474]  do_syscall_64+0x2c1/0xf80
[  937.160096][T14474]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.160118][T14474]  ? trace_irq_disable+0x37/0x100
[  937.160141][T14474]  ? clear_bhb_loop+0x60/0xb0
[  937.160167][T14474]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  937.160190][T14474] RIP: 0033:0x7fb4c82df749
[  937.160228][T14474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  937.160249][T14474] RSP: 002b:00007ffe98020e28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  937.160274][T14474] RAX: 0000000000000000 RBX: 00007fb4c8537da0 RCX: 00007fb4c82df749
[  937.160290][T14474] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  937.160305][T14474] RBP: 00007fb4c8537da0 R08: 00000000000003f4 R09: 000000059802111f
[  937.160321][T14474] R10: 00007fb4c8537cb0 R11: 0000000000000246 R12: 00000000000e4b0f
[  937.160337][T14474] R13: 00007fb4c8536090 R14: ffffffffffffffff R15: 00007ffe98020f40
[  937.160366][T14474]  </TASK>
[  937.160971][T14474] Kernel Offset: disabled