last executing test programs:

9.999487323s ago: executing program 2 (id=2718):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0xefff, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x64, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

9.881839002s ago: executing program 2 (id=2719):
sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffffe0, 0x40004, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x400}, 0x1c)
r0 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x8800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x11, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001040)={<r2=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00me\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000240)=""/182, 0x74)
getdents64(r4, &(0x7f0000000380)=""/208, 0xd0)
ioctl$SIOCSIFHWADDR(r2, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000001, 0x4, 0xc2, 0x4f, 0x40, 0x4, 0x80, 0x1, 0x80, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa7f2, 0x6, 0x8, 0x5, 0xff, 0x4, 0x3, 0xa, 0x13, 0xb, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x4, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x17, 0x0, 0x64, 0x4}], 0x7})
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
unshare(0x8040480)
r7 = socket$unix(0x1, 0x1, 0x0)
cachestat(r7, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})

8.929569785s ago: executing program 2 (id=2726):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffc, 0x80, 0x0, 0x14, "8100e1c8e80b598c36ff000800"})
r2 = syz_open_pts(r1, 0x141601)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x400382, 0x0)
close(r4) (async)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x46fd, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

8.011339933s ago: executing program 0 (id=2727):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1)
setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)
r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0)
pread64(r2, &(0x7f0000000080)=""/4073, 0xfffffffffffffeda, 0x400)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$tipc(0x1e, 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x4a, &(0x7f0000000500), 0x4)

7.63445153s ago: executing program 3 (id=2730):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = eventfd(0x5ef)
ioctl$KVM_IOEVENTFD(r4, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r5})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f00000001c0)={0xffff1000, 0x20f000, 0x8})
socket$nl_route(0x10, 0x3, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
recvmsg$unix(r1, &(0x7f00000007c0)={&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000340)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/218, 0xda}, {&(0x7f0000000680)=""/83, 0x53}], 0x5e, &(0x7f0000000700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x102)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
unshare(0x6020400)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
mmap(&(0x7f0000417000/0x3000)=nil, 0x3000, 0x4, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000280)='veth0_to_team\x00', &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x4, 0x7f, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x185e02, 0x0)
statx(r7, &(0x7f0000000180)='./file0\x00', 0x1000, 0x800, &(0x7f00000003c0))
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x200100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x80001000001000, 0x49}, 0x0, &(0x7f0000000140)={0x3ff, 0x7, 0xffffffffffffffff, 0x20000009, 0x1, 0xc, 0x80004006, 0x802}, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000580)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)

7.07919271s ago: executing program 0 (id=2732):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)={0x0, 0x8}, 0x0, 0x0})

6.647897427s ago: executing program 3 (id=2733):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x40, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x5, 0x2, 0x25, 0x40001, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0xb}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r1], 0x50)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x4}, 0x38)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
r6 = socket$igmp(0x2, 0x3, 0x2)
fgetxattr(r6, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/10], &(0x7f0000000040)=""/1, 0x1)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3})
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000240)={0x0, <r9=>0x0, 0x1})
ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f00000002c0)={0x0, r9})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r10=>0x0})
r11 = socket(0x10, 0x80002, 0x0)
connect$inet6(r11, 0x0, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xa}}}, 0x24}}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x84100)

5.888105634s ago: executing program 1 (id=2734):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0], 0x90}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044)

5.881528691s ago: executing program 1 (id=2735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000140)=0x2, 0x3)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r2})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r0)
r4 = socket$netlink(0x10, 0x3, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0xfffffffffffffdcc, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x0)

5.672335671s ago: executing program 2 (id=2736):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000380))
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETLINK(r3, 0x400454cd, 0x6)

5.336029215s ago: executing program 2 (id=2737):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x2, 0x3, 0x84)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)}, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x400, 0x0, 0x3, 0xfa11, 0x7ff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = socket$tipc(0x1e, 0x5, 0x0)
socket$inet6(0xa, 0x2, 0xfffffffd)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000200)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$tipc(r3, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0)
socket$kcm(0x2, 0xa, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000})
sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca8", 0x26}], 0x1}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[], 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x4001)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x10}}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x420600, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428)
r7 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ptrace$setregs(0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000540)="278a8fe3223230febf8ba9f127d2377ff5146cd41627a0419f0069d05db6d9c747e88e3416920095e635e92539168c32979add7c76341c")
fsopen(&(0x7f0000000580)='adfs\x00', 0x1)
write$apparmor_current(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff)

4.987632406s ago: executing program 1 (id=2738):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="68000000ee05c420090000004eb805d9e8e04e69b6044f622fb130fe70b4a7cdee763f9ebbf47402918b5d4f43a9712e538f6125382b4c8544dc1ddfd55abe160279acd6a7964f2cffcf698eca76847e8855361abfdf47f4eb4b82193c33256138e64029ab22ff640423b64141a009438b560d", @ANYRES16=r4, @ANYBLOB="01000000000003000000030000004c0007800c00030000000000000004000c000300ff010000000000000c00030001000000000000000c000400000000000000000008000100c3ea000008000200090000000800020001000080"], 0x60}}, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000328bd7000ffdbdf250b0000000c000280084ee93f21d22d79fa000980080002000b0000000800010000000000080001000500800008000100529e000008000100f5a993460800010054000000080001000b000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4002}, 0x1)
r5 = signalfd4(r2, &(0x7f0000000280)={[0xfffffffffffffffb]}, 0x8, 0xb601065ee6e9d8d9)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={<r6=>0x0, 0xc7, 0x3, 0x3, 0x0, 0x4}, 0x0)
unshare(0x26020480)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f0000002340)=[{{&(0x7f0000001f80)=@pptp, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)=""/204, 0xcc}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/85, 0x55}, {&(0x7f0000001880)=""/130, 0x82}, {&(0x7f0000001940)=""/250, 0xfa}, {&(0x7f0000001a40)=""/98, 0x62}, {&(0x7f00000005c0)=""/20, 0x3}, {&(0x7f0000001ac0)=""/102, 0x66}], 0x8, &(0x7f0000001bc0)=""/157, 0x9d}, 0x8}, {{&(0x7f0000001c80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001d00)=""/140, 0x8c}, {&(0x7f0000001dc0)=""/9, 0x9}, {&(0x7f0000001e00)=""/212, 0xd4}, {&(0x7f0000001f00)=""/52, 0xfffffffffffffcde}, {&(0x7f0000001f40)=""/5, 0xf}, {&(0x7f0000002400)=""/211, 0xd3}], 0x6, &(0x7f0000002100)=""/141, 0x8d}, 0x5a2232c8}, {{&(0x7f00000021c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002300)=[{&(0x7f0000002240)=""/145, 0x91}], 0x1}, 0x9}], 0x3, 0x152, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, 'V\aj', 0x0, 0x88, 0x1, @local, @local}}}}, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0)
r8 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
r9 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
r10 = syz_open_procfs$namespace(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB="2032583b629a7866baf0fd923ef2569d828a0ebab829dcc542993d7185ae4b4f9a806cc27882e13ae10d29dc9d8d62079230f7f60cd547a4ef498e68b45b9214faee3743fcd9147735aed1961456466302d4f6837729120caed2c5777cb6eecebbb69623aca9a5d7051131d21f0e34a6ceff98", @ANYRES32, @ANYRESDEC, @ANYRESDEC=r6, @ANYRES32=r10, @ANYRES16=r1, @ANYRES32=r8, @ANYRESHEX=r6, @ANYRESOCT=r4], 0x3c}}, 0x4004000)
ioctl$HIDIOCSREPORT(r9, 0x81044804, &(0x7f0000000400)={0x1})
ioctl$HIDIOCGUSAGES(r8, 0xd01c4813, 0x0)
r11 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r11, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r12 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

4.876631223s ago: executing program 4 (id=2739):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80041, 0x0) (rerun: 32)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000040)={0x9, 0x4, 0x2, 0x0, 0x0, [{{r1}, 0x400}, {{r0}, 0x3}]})
r2 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
dup(r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0}) (async, rerun: 64)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r9, 0x1, 0x80, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) (async)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2})
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @vbi={0x0, 0x590, 0x10001, 0x166110c, [0x0, 0x7f], [0x3, 0x2], 0x1}})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x44}}, 0x20048010)

3.901766846s ago: executing program 0 (id=2740):
syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x6c, 0xe3, 0x7d, 0x20, 0x8ca, 0x111, 0xa99b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x2, 0x1, 0x1f, 0x46, 0x40, 0x8, [], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x1, 0x8, 0x5}}]}}]}}]}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101080, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x118, 0x29, 0x4, {0x4, 0x1f, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @hopopts={{0x1d0, 0x29, 0x36, {0x5e, 0x36, '\x00', [@generic={0xff, 0x45, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70dac43574"}, @pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @calipso={0x7, 0x10, {0x0, 0x2, 0x7, 0x6, [0x7fff]}}, @generic={0x8, 0xe2, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab309f93fd8146e6672c844ca0c43cde3afb3f9b0e9c19b929779fe65f579221b81"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0x8000]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x3b8}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000002400010025bd7000fbdb7a0f0c0000000000040000000000060004094beb00000000005000030000"], 0x2c}}, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x6, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3, 0x4})

3.872929034s ago: executing program 4 (id=2741):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@iv={0x70, 0x117, 0x2, 0x55, "2d2658500b5a771b2f7e153d1b6773e331f6d5f82a6de41ede7da7262359e9d434c886b3a8a630f1961242369c76f65f339c2cf24a44d98fccff9de6006d1a328f7e306e83fe9587f7df48ef9f53a9b4a40c68a82b"}], 0x70, 0x40}, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0)
accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0)

3.109426008s ago: executing program 4 (id=2742):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000500), 0x4)

2.932008622s ago: executing program 4 (id=2743):
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x2, 0x3, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0xf, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfffffc01, 0x3f, &(0x7f0000000140)=""/63, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000002c0)=[{0x4, 0x2, 0x9, 0x1}, {0x2, 0x3, 0xd, 0x7}, {0x0, 0x3, 0x4, 0x4}, {0x3, 0x4, 0x0, 0x5}], 0x10, 0xb9}, 0x94)
r7 = openat$cgroup_root(0xffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000f14010000000000000000000c00450072646d615f636b00"], 0x1c}}, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={r6, r7, 0x12, 0x0, @val=@netkit={@void, @value=r6}}, 0x1c)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
socket$packet(0x11, 0x2, 0x300)

1.84781969s ago: executing program 2 (id=2744):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x1c, 0x16, 0x32, 0x40, 0xfe9, 0xdb70, 0x58d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x37, 0x0, 0x0, 0x9b, 0x62, 0xc0}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r3, &(0x7f0000000200)={0xfd, 0x400, 0x1, 0x1})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8905, &(0x7f0000000140)={'xfrm0\x00', &(0x7f00000000c0)=@ethtool_ts_info})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10009, 0x8a0}, [@IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x34}}, 0x4804)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

1.674288179s ago: executing program 3 (id=2745):
r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
connect$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000640)="f5", 0x1}, {0x0}], 0x2)

1.428554497s ago: executing program 1 (id=2746):
syz_open_dev$dri(&(0x7f0000000000), 0x8, 0x800)
iopl(0x7)
r0 = getpgrp(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x3, &(0x7f0000000040))
userfaultfd(0x800)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'netdevsim0\x00', 0x200})
getresuid(&(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140), &(0x7f0000000180))
ioctl$TUNSETOWNER(r1, 0x400454cc, r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1f}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3f}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x48001)
write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x5, 0x9, 0x1, 0x1}, 0x8)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc, 0x22}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x48c0}, 0x40001)
prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x1, &(0x7f00000004c0))
sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r4, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x40, 0x78}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00'})
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
timer_create(0x3, &(0x7f0000000640)={0x0, 0x2a, 0x2, @tid=r0}, &(0x7f0000000680)=<r7=>0x0)
timer_settime(r7, 0x1, &(0x7f00000006c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000700))
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000740), 0x121040)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r8, 0xc02054a5, &(0x7f0000000780)={0x6, r3, 'id0\x00'})
r9 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r9, &(0x7f0000001b00)={&(0x7f0000000800)=@x25={0x9, @remote}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000880)=""/119, 0x77}, {&(0x7f0000000900)=""/89, 0x59}, {&(0x7f0000000980)=""/102, 0x66}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, &(0x7f0000001a40)=""/132, 0x84}, 0x0)
ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, &(0x7f0000001b40))
sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000001c80)={&(0x7f0000001bc0), 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xe9}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x32d}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7f}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x1510d5d2052cb62d)
r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001cc0), 0x10000, 0x0)
sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000001e80)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001d40)={0xdc, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xe}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}, @IPSET_ATTR_IFACE={0x14, 0x17, 'geneve1\x00'}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x68, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x9, 0x1a, ':%,*\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0xdc}}, 0x10000004)

1.425754909s ago: executing program 3 (id=2747):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
membarrier(0x10, 0x0)
membarrier(0x8, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000003c0)="e8700e", 0x3}], 0x2}], 0x1, 0x40800)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x2001, 0x0)
write$sequencer(r3, &(0x7f0000000240)=[@t={0x81, 0x8, 0x2, 0xf9}], 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x9, 0x10000006, 0x4111, 0x0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3})
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000000)=0xfff)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x6, 0x3, 0x42, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x9, 0x7bcd1daa}, {0x1, 0x8080, 0x7, 0x0, 0x7, 0x7, 0x49, 0xff, 0x2, 0x1, 0x9, 0xf, 0x20000000006}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x7, 0xfd, 0x40, 0x5, 0x2, 0x2, 0x3}], 0xf85})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.337761054s ago: executing program 4 (id=2748):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r3, 0xc02c563a, &(0x7f0000000080)={0x2, {0x3, 0x0, 0x0, 0x10}, {0x2f1e, 0xc, 0x6, 0x200}, {0x5, 0x7}})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', <r5=>0x0})
bind$packet(r4, &(0x7f0000000240)={0x11, 0xd, r5, 0x1, 0x10, 0x6, @local}, 0x14)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

1.262428376s ago: executing program 0 (id=2749):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="16"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0xec}}, 0x0)
r0 = syz_open_dev$audion(&(0x7f0000000080), 0x7, 0x20000) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={<r1=>0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xf, 0x1}, &(0x7f0000000200)=0x90)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e23, @private=0xa010101}}, 0x5, 0x8}, &(0x7f00000003c0)=0x90) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10)

861.092675ms ago: executing program 0 (id=2750):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r1, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
r2 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={'ip6gretap0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3b}}}) (async)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async)
sendmmsg$inet6(r1, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) (async)
syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2)
r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0xc40, 0x0)
r4 = syz_io_uring_setup(0xbde, &(0x7f0000000640)={0x0, 0xd101, 0x2, 0x1, 0x83}, &(0x7f0000000540)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r4, 0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0xc86, 0x0, 0xe, 0x0, 0x0) (async)
recvmmsg(r1, &(0x7f0000000b40)=[{{&(0x7f0000000580)=@isdn, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000600)=""/34, 0x22}], 0x1, &(0x7f0000000940)=""/134, 0x86}, 0x7}, {{&(0x7f0000000a00)=@generic, 0x80, &(0x7f0000000780)=[{&(0x7f0000000a80)=""/167, 0xa7}, {&(0x7f0000000700)=""/24, 0x18}], 0x2}, 0x6}], 0x2, 0x40012041, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000740)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010002080000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="08009f000b0000000800a120000000000800a000f9ffffff08002600b409"], 0x3c}}, 0x4000084) (async, rerun: 64)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYRESDEC=r3, @ANYRES16=0x0, @ANYBLOB="7fd9b04b4a45d5191805574d493108000300", @ANYRES32=0x0, @ANYBLOB="20005a801c000080140103000d68040059bae6d6f506c9f800000000000000002dc3727299cf3f75abf82e09c343c01e278a613cf17cb4fb77704ffe57bdc611f4966a89c7a39627229b4ff3339bc5e9c6c4b3cea19a3bde4248cbc3b407dc859c27b7d1245939444175edb0635f8290d2c917eca93df2177fffff96923a59f35dfb04ebd9023bb14d865e0377f7d2476a18be91b0c7d716f1e1012d5307b45b382a77dbc4c79923ad17f6d6aa9e0e320f668d5ddd5f02ea75500fc6db4c5e9382260148d8e12e4430ca47c86eb84bf190f3ba6ada1bbc335a2487ba06"], 0x3c}}, 0x0) (rerun: 64)
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000004d00)=ANY=[@ANYBLOB="dc330000", @ANYRES16=r8, @ANYBLOB="200028bd7000fbdbdf257a00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x33dc}, 0x1, 0x0, 0x0, 0x4}, 0x1)
r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents(r9, 0x0, 0x20000) (async)
setsockopt$inet_mreqsrc(r9, 0x0, 0x28, &(0x7f0000000080)={@loopback, @multicast1, @dev={0xac, 0x14, 0x14, 0x1d}}, 0xc) (async)
ioctl$IOMMU_VFIO_SET_IOMMU(r9, 0x3b66, 0x3) (async, rerun: 32)
r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32)
r11 = dup(r10)
write$6lowpan_control(r11, &(0x7f00000007c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
write$FUSE_INIT(r11, &(0x7f00000004c0)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r11, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000000301030000000000000000000000ffff3400108008000140000005eb0800014000010000080001400000000708000140000000010800024000000d180800024000000007"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000084)

813.589807ms ago: executing program 4 (id=2751):
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000})
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
io_setup(0x7a, &(0x7f0000000000)=<r6=>0x0)
io_cancel(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000)
r7 = syz_clone3(&(0x7f00000076c0)={0x40208200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r4, r3, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r3})
ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003f40)={&(0x7f0000000200)={0x50, 0xfffffffffffffff5, 0xc36, {0x7, 0x2b, 0x10001, 0xffffffffc0010425, 0x1, 0x1ff, 0xae, 0xf38b68, 0x0, 0x0, 0x10, 0x2}}, &(0x7f0000000340)={0x18, 0x0, 0x100, {0x1}}, &(0x7f0000000380)={0x18, 0x0, 0x1, {0x8f}}, &(0x7f00000003c0)={0x18, 0x4df60775bc85ec92, 0x2, {0x400}}, &(0x7f00000014c0)={0x18, 0xffffffffffffffda, 0x7fffffff, {0x40000000}}, &(0x7f0000001500)={0x28, 0x0, 0x400, {{0xff, 0x3, 0x1, r7}}}, &(0x7f0000001540)={0x60, 0xfffffffffffffff5, 0x8, {{0x20000000000001, 0xbcb0, 0x1, 0x80000000, 0x8, 0x8, 0x6, 0x2}}}, &(0x7f00000015c0)={0x18, 0x0, 0x102, {0x6}}, &(0x7f0000001600)={0x1b, 0x0, 0x5, {'/dev/iommu\x00'}}, &(0x7f0000003680)={0x20, 0x0, 0x3, {0x0, 0x8}}, &(0x7f00000038c0)={0x78, 0x0, 0xffffffffffffffff, {0x4, 0x3e2, 0x0, {0x2, 0xfffffffffffffff7, 0x1, 0xd, 0x4, 0x4, 0x1, 0xe80c, 0x1, 0x4000, 0x1ff, 0x0, 0x0, 0x6, 0x5}}}, &(0x7f0000003940)={0x90, 0x0, 0x2b0, {0x5, 0x0, 0x101, 0x2, 0x2, 0xe5f, {0x3, 0x7, 0x8, 0x5, 0x75b, 0x10, 0x9, 0x5, 0x15d87b66, 0x2000, 0xe, 0x0, 0x0, 0x0, 0x1}}}, &(0x7f0000003a00)={0xe0, 0xffffffffffffffda, 0x3ff, [{0x4, 0x1, 0xb, 0x6, '>d\xc8\xe8\xdc]o/\x10u\x00'}, {0x9, 0x9, 0xf, 0x0, '/dev/dri/card#\x00'}, {0x4, 0x7fff, 0x13, 0x4, './binderfs/binder1\x00'}, {0x4, 0x7, 0xf, 0x8, '/dev/dri/card#\x00'}, {0x6, 0xffff, 0xa, 0x8, '#\x1b-{@/:3&]'}]}, &(0x7f00000036c0)=ANY=[], &(0x7f0000003cc0)={0xa0, 0x0, 0x401, {{0x1, 0x1, 0xa, 0x6, 0x8, 0xffffffff, {0x0, 0x1, 0x401, 0x4, 0xc, 0xf095, 0x1, 0x6, 0xe33f, 0x6000, 0x8, 0x0, 0xee01, 0xffffffff}}, {0x0, 0x1}}}, &(0x7f0000003d80)={0x20, 0x0, 0x6, {0x0, 0x0, 0x200, 0xb}}, &(0x7f0000003e00)={0x130, 0x0, 0x1, {0x2, 0x3da7, 0x0, '\x00', {0x10, 0x8, 0x2, 0x3, 0x0, 0x0, 0xa000, '\x00', 0x9, 0x0, 0x6, 0x7, {0xc, 0x3}, {0x9, 0xa}, {0x3, 0x9}, {0x5, 0x1}, 0xbb9, 0x8, 0x4, 0x8}}}})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r9, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)
read(r0, 0x0, 0x0)

701.630706ms ago: executing program 3 (id=2752):
r0 = socket$igmp6(0xa, 0x3, 0x2) (async)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@gettaction={0xe0, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x21, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x5, 0x0, 0x0, {0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004805}, 0x10) (async)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000240)=""/39, &(0x7f0000000280)=0x27) (async)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$TIPC_NL_MON_PEER_GET(r2, 0x0, 0x40000) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async)
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"]) (async)
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) (async)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r2)
sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200080}, 0xc, &(0x7f0000000340)={&(0x7f0000000980)={0x2dc, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xa13a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x97}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_MEDIA={0xdc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6e0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8234}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x344f}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010101}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dvmrp1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4c004}, 0x50) (async)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@random="e33110495bfd", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request={0x80, 0x0, 0x0, 0xa18, 0x800}}}}}}, 0x0)

348.277595ms ago: executing program 1 (id=2753):
r0 = syz_io_uring_setup(0x312e, &(0x7f0000000000)={0x0, 0x278a, 0x2, 0x3, 0xc0}, &(0x7f0000000080), &(0x7f00000000c0))
syz_io_uring_setup(0x797, &(0x7f0000000100)={0x0, 0xcb91, 0x0, 0xf, 0x1a0, 0x0, r0}, &(0x7f0000000180), &(0x7f00000001c0)) (async)
r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0xfffffffffffffff7, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000240)=0x3b64, 0x4) (async)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000280)=0x5f) (async)
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x10001, 0x0) (async)
unshare(0x8040000)
r3 = io_uring_setup(0x517b, &(0x7f0000000300)={0x0, 0x24fe, 0x8000, 0x2, 0x181, 0x0, r0})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000001540)=[{&(0x7f0000000380)=""/144, 0x90}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x3d) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000015c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001600)=0x14)
sendmsg$nl_route(r4, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)=@ipv4_getnexthop={0x38, 0x6a, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NHA_MASTER={0x8, 0xa, 0x2}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, r5}, @NHA_ID={0x8, 0x1, 0x7fffffff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000800}, 0x6b5f461d4086b205) (async, rerun: 32)
socket(0x2c, 0x3, 0x600000) (async, rerun: 32)
mmap(&(0x7f0000001000/0x6000)=nil, 0x6000, 0x1, 0x10, r2, 0xf1c9f000) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000001740)={&(0x7f0000001700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x800, <r6=>0x0, <r7=>0xffffffffffffffff}) (rerun: 64)
ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r1, 0xc00464c9, &(0x7f0000001780)={r6}) (async)
r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001880)={r1, r5, 0x25, 0x6, @val=@uprobe_multi={&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)=[0x7, 0x6, 0x10000, 0xd3c, 0xffff], &(0x7f0000001840)=[0x3, 0x3, 0x4, 0x0, 0x3], 0x8, 0x5, 0x0, 0xffffffffffffffff}}, 0x40)
bpf$ITER_CREATE(0x21, &(0x7f00000018c0)={r8}, 0x8) (async)
r9 = dup2(r7, r0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r9, 0x800455d1, &(0x7f0000001900)) (async, rerun: 32)
openat$uinput(0xffffffffffffff9c, &(0x7f0000001940), 0x802, 0x0) (async, rerun: 32)
getpeername$netlink(r4, &(0x7f0000001980), &(0x7f00000019c0)=0xc) (async)
ioctl$VIDIOC_TRY_ENCODER_CMD(0xffffffffffffffff, 0xc028564e, &(0x7f0000001a00)={0x2, 0x0, [0xffff, 0xa5d1, 0x7, 0x3000, 0x1, 0x2, 0x4f0e, 0x2]}) (async, rerun: 64)
pwritev(r9, &(0x7f0000002f40)=[{&(0x7f0000001a40)="e4cc1f9a31396aad7b6104d279a2a2326e4050811f8411fe561ecfb4faa0aafc0e083dfac4fec1b2d8b080e736e8920d409d23d82d22f6665d5a716f170885a0d1b356d23dca90f7c971a12db98f5c2fae92eef3e3cf2fc42c8340865102d40643c6d78f659a45cb0ff0ff5403028ac1c70e06a693a33e8bf91765c97893f8e8f3a656d6c220ef8ca784a99f6dd58627", 0x90}, {&(0x7f0000001b00)="e4967c032257e12014f7376659d34d7f24249fb4461e33af25dd048fe6d1f0448458a97508d22ea47dbe9e432e3461ef106e4e3f8113c1cfa5a1495db2b3ebccc67b87942fa1bd6ef57e5c02fde7b90cf69f60497f594d20c188c8d011bcad2e43a733c55eb3fda3974ee19bf7dff76d3d8c17aa7185b87b4aad982d3d09b7aba2901a4248e153508c0c676cd855ed9215f949b6307cc5517c5639fdbe9bb4af15474b1913f87573c4a52b479d61542c519cf5cf18699f85250aa63a44fbdb665a52d4119eb604d52e21a7494cd89c26df6d3d8924393d4aa928b0cb18723d3d3c32900046e4a05c27abaa680a6efda538875c485634f3cd990ce93e85d94e0f6246e979351a878d634ec30001d91f6708d1488a3a11ef6ebaa5ab8d2b460bf6613ac6eca2578674024ee2d4f23f527bb052491abc9750dcdae7024a38329655a9b232d856305859e2c75e8582f83acf75346b86563bd3e0185a384672bcccade7be82d1ebe17816819f09a3bc2c860fe79fcf15995ff34c63ee8a5a87be71c6de2bfd24767d0ca53d9c08bfb1b375b6f010495d7cd183e604eec6169e41c4966fef296edc73c947ee08dd8e626a8c6de58cc2b6472d0b5bbc01af35a4cfe35089cfa1d28ccaf9727afc30361e111a759794bc828cffbbd64fd0c4d9b88d291d46647f3bdf4209f2444ad2acd921b037023af443d9f7648793103eb7a9a892d5d35a7dc2a5b1a662e5a19189103830214d2cd6e043a7bcb446f2aaf3ae94c7124ad7000cb6bd5275bfbd79b1d0f11d9a5cfb8091fb9356db7705d8a39c0046f80e5490d514d4fc19556ee0eb3ddf886d18caa2bf80dbdaf8c6b84d865fbeb71e65f2388dde385be7d750c1921ac03bf0d28772c8ef1e909ef4862ff075ac700b679114d7e7c703700a0132b88fe9ae82352d6a7f38384cb24686f9ba729d803c3177a479fe3940796560f1c3fd574ebb35cf38a8c729938ad0b6d8ee4a1099d0151851206a44d1a3a99e9da6149b3d21dda07a13574545441f122a6d40d6bcbd06b1d60564e04f47e2b63c9d2fa5203f17901bb0b8a59485487e4791488dd0c67f4e53073b4e6a282dbf57db19fdd4e372c829952c4436cc6d8bdcd685eb9e8a74223e7497477cead6ed3cf6cb4bbaa78088612445f408fc9d708892240d2e5acdecfcc6759bf07e87216de31299a67e7f6b9ce70a07a296253eac65c58ceeebb30144d8da08683d468ab94f5f7e25c0efae7c739fcda7158d82ddecd826b69c2b98731520769293ecd65a212fc727215db1acd16f38a4de580c4c6aea263e57356706c1af90912f79a50b7cb2ac6cf5719dfefbb4d11a58d49da76380ca053679b8a0238a4040152ad959941bd11f816fe52eea7f5d90349233f9246586621b4cdac5f09064ea82e027d1dc21b68dadcd4f0e53d6e8c75436a8ccdbdff33c8f2e40fef72381ec838d260ca9fbd5fbb65241049b3447aa272adcf4fbabfc4e5db2139ab65f26b7b0c89dc2fbe7a061351f31a4ca74531eccbb9bc7f484f569000cffc341674ee74c46701d61b4d4453194c130d5beda22838ec5d9168ba46f79d9fc2e4298b06a8738b7c8bd9df5ad3c188ae2878096bdaf2ff07d68e327907098f0ba3331f14366d20734addef6c11298ab2a6ea876520a98c57af62275bf3675ee87c0a66b51f94c38f8894973945622d727869c898958e7c72b6b3a6acad2e8a92adc340fb9f2a99530c223bbbad8bdec8090421bde349b59cace418bdc861284bd16b283ce9a36c4eb880d13089749b659fd28dd163108dae14479a1f2be2472c90c8d16612cb5276cca332dae725f66e9c521b70cbc39661457ba95a511cea4616fe005ea53c5c7820897e81d2bfe2d27f2fca56ad6c3f30a03d1a35d67e7f53609abc39b0082f838f69aa435809027b07ce6fcd430cb8e0265ef849bc47fe8c86b2428025042e6a1f2135f87e24102925b86cf7dd713148d4da93b80215e56fe7acffd81949c6ce749b39dcf10f8f914002839eee1d75a9a58bb0d508eff95729f0998f4d92c05a88c90c8f43fa211d591c848017738f99dbd16385e475866b0018f05c7cfe2a1168ae9602aba80641ccaaadb254775868208e8da58e5713001a007d5aeca0bf67bf99668ad3a38be552c4e576126a7822fd6af4c6b3dff4f78098eba0d8fd6145694f0e697635c236e7ddea76f35ca5c8aec943963282aff8a730561cd369693fb2f28d91615f7fd8ee1cc703a7d87bfece78ef9046906c31db856e7284bfe95cf2bb95e502bb7f5490df17218d1a94fd318ead63363c18e1fd4fdd37f6256d738fe3aeb3aed068484fdb3ce4f2c2c36e24cee62bd3af6dcb9f2823e804674d50f74ee0a719f52032172cdedc93c2f64606b3f1c9ddb10bc3a7c4e0f863451f4bc4e2d003ee550306b30792c1c839f051c3330ff42cd3cd0536e4232d0392e01b63ab2c47577d13bee30974cb4f7bf6009f9b27ad0c2aa3a984dbbed42f84ea93460fea9edf0919b9faa1759df478f85ec9d6f559f2228bf7ffc98a050ad5e9f0c794943a38d1527d615931712f556027f91febbb97f0d8600a28d979918cbfa1faea84f112114ab90cc8ee396689060623dbb04602899b41341649a0b70417248f9fb97914d205fc046956d183125e0d949cdab1d759d8102d623529ecdf8161a0745994992c9aa54408b0a90b8c96b2ff293e0fc099267f364039d2215f4af3f79340c8dbb681dceb598ed1544397fd8e0184b725895890ccc3668ee4b34685afa0f749d2e03c0382178233f51c35459abd2c8c4bdcd189b90597c7c5f6940f73093b8e184d0ce2cda3dbf0ae34ebc4f5f7632e5d3cdd0b5bd2d18e05163a7a9bd97818ac8bcbf3bc086aace1952e801ef6d4e38ed86033ba9430c330b4c38127d6663944134fd504844991789a6fc5c22b2a88afcf3c528651a5ae6f4966d8d69f1297639e42950aa7db3de0e9f4d03078900358251164c97a13daea25f0b5af8a6693e98e7efe16198c5c1b3f37148f74666d4919c98694e00a3fdef457c74ca30640f79980cfee07d9388682a8303af40a9c27492541e5aa25841264cc49a57cba9f5f3062149c0d53d1aa9d5e097cd733875937f85d5249cc03813d908ab923f68762a4ede96fe3e4e39989b088045d142d75ebc229436f4f7859629fb5294960db6cb4252164f5fa8a9a9954c8ce69250f3d76089c1ae19be057fb95d303d6ae8d138d6ee4282abf65510b5c312e8da355c9b84f63c89cf0dde200d0e362ff0ab33881df134b5d65f90d211696b437ca830d012886c927a14d3468a5d370ee7271f5c37e2f5c0b2cf51a6559f673fe3c1ec21747c770c98bfab2db7d4ae01b176f1c61ef1c164f181843e284ca9ca4e458b675767eb7901e973205200ea923ae9f3eab873aefc65129854f2c50d7386e9e31c0098ae8c7817ac54634932abff51cad71f2321ac3e39c1d187ae01565b2cd28ea81a62ae5be0ae5c1c1dda9265048596f33fcc6b92b5f15ef3b352783d5cde14ab50b5ba51dc1c32afb60fc6df1ad5a1081163204085b04e0158eee6749317483335b619ec81be9e58d5c5c1f21f0c5bf42e3f599c2e023efe923e4888dc4166c1e3ba79eb9a428a7810be215d77635f5cbd18b4ad0f5ea27467ba09f7b56901a1b9828d3253bffa130899fefc5e2c009f3e62aa5185f82102d9bdad41cdfaec2cec9f23d99220b44dfe5dfec06e8aa8e0af3cfeb667d9fd16b9c41b50e96377ca599a0470248dd1763ac90f2de386bf65a8af301319721a1caf239c3ac5e6e7afe0d8c8574c072ec17f2eff9dfc22c74550432c3f57254ca26651bbac34d41ced6bbbc3e9eddb20dde2a6a7bf9ac4b97d897cfb741c94a2cd651420f83996222f5c8ecc0e8fa537db687d82dc4dd67720aa31334dd94546b5b2654f6fa18f68f5266c057981acfc139cafba8f6a861e697cf68b57072b947eefa339f967b38ce1ca53dc1ad441dc47a9247db1fe068f4558e1f9c82532dd92f9558f6434d52082f1f30dac32a5889dc7fc5017ae80ab53b708e136dbfc5446a0ee2b4fef358c8a61ed7c685604b17f321627961305d1db6f6e4b192ea3d57860e737341d090f9f1d390c0b9587e60c4de8b4c784718069fe0e706400f69e3ae17d45b75eb49848d13b2a45e75ffd7753be0ac35a221dc9a5a18a97a9f35cce29be12c0891d9743bd5ddcecea84dd21506702319dfbf20daecfac446e2b036c86acf5ed4b021c2169037ee4e73ce7a2b8f74e0aec234e95dd59f4dfa6e497fce9db036cbf69d610cf36a94afa2ea890e85e64a13a78ae8b17d3aa3e3b5333aa15f20be661f82f38cc2a516c066447b15882083e7ffda6ccae35e5910b33358f9a2162da8f13b2e0fa1232d5e457e193a1bf35aa3ad6de32e51134925c81a7e08bad71e32ff7b3e10ad1f563f57a542a0c61e14a5c4b2abbc9bb89aa6b950244bd7b9f03d77ac7b495e85ae55bb81be6368244ae987d65ccb8d1e61c6937fc4ec656e06a31861239eb8b40c323fa09a7d3e07aa3e35f54d7ab7c8daf3d0962d63501ffd7be464e0969c87a1db85e415b2b287f804a32fe4680bb1343c5e89a97e56cb8ec9415c54ba7b340d0d23fa13e3595dad8730b67c5d099179757025996c5543214f0d4d32e6ea5b141e7d5a5162be878008f87af2754fb76007046d00ee1a30a997656661a46dabd971a5c301551bcb2a6ab1b76b9b4c79f6d00a832acc5797a41d4a22d035a7b437537420f9d0d1cfdafb007335c112d5f0c1b2a0d94f9f12fd639a2cc059eeb8bb53e58944390453cdb6a4d612fd79528fd8e89f844cd455b49fde82df40ea5d55eec47dcac683b2c9d0a66bf1f968fb07f18394b153cc6e67984b8ff56bfc57e18c2f2d5c34a176e8feadddaca42cdc11cbf7841aa96fe3069d970e9b5c427e4e3b4ef8894ed5c9713dc8f22be78b5e2a8c08ed6a142625c9c8959d21b808cc6a9caabf5e77f9a333d5e157ec35a171741c7707983bc7b4c398c0c533900fbdefef7547aac55cf188c360e9e78cff93d5a3444a4ced53da8021d26cb6c8430e761854d672076e4d4a794696415eaf31f2bc31ec9b6c246aafea8c83de0bc32ac86aae74beaa41484676522370a5d4f5bea59ce3ff8791189bd1987170293bb78593ac4bbf5f25e936a4fe82ee3d94929c7087103a9369c2c9ed499852d5a29012f61d63a51c6d583da47a4b4db2af437e19221d676cdca16bcb0bd47ba31c96495d6facdecd47170214f62ebe468f457da9a69d36171bbfb9d869dbee49b3731b69614a24d0b77498cb5042bb3714ed15079b633460f8c606e8da444b8a7d29b3e61dc740d238711f41aef268aed66a930e1c7f9bc3e600465c3714f6a4f9adb3b3cd1174c64361f3098e0e4feb58dab1c07592bafae55a7d6d3851708414a16f6b876a0d0f755bdf3351c6d4c279873ac4a1fe44d8c2fd169bd59b40bc82bc4f16a645cff4c9c1f1d09108d0e79d3ca0389037e103fd728753b3951a6b00f9142c0ffe56ae0f2111845c8ae6bfd09bce8a00ad39d98fcf709c1b50375bd96e0442339875566e842d7ba4b523af5f99701d79483ffcb4117587d74a70f566d696f24a1bfe493cb7ac6c3e41958e891d680c0e48ec7de0447aac41b6889cff4a995332eac63a7ae9666ebe7cc9679c334bf3f8e596f9266c04775e2f93a5947acbd9756639b813c2a6bd54cc4db475852b477acf1b0d30a0095ad1945e6506b7f6b22b68b44d4adefee429d3b913811b79bb37d7bad4b94a0f9a18296", 0x1000}, {&(0x7f0000002b00)="715f0b8fee180b45688466f54390bd23f3d7848f17e33353f2464d0837edd8ee413e583f0764e8c06c2f7e3b1d0f23e06c8b61e4e8187b99d5ab2a5d4a8e0958d1c15803b0d3e057635e83dab1219fee69c58764cebba889f42f3e1035329ce56b4136082b49816da48b7225cbed68dcc2a362edf0499c10e6eb9ff72b0f6ca18041e9237e281450a97c7ab57e055fb158c33d649938f51c8893", 0x9a}, {&(0x7f0000002bc0)="ad1460ea11447bd98125716e9693f2fe41d2f9bbb20736d8e2ffd34d6b00701527bf7bf295967ae02044164107eb2abe232e91283ede6ecc306697f8db281c07f5a4aced28ae4599c621442b4ff798feaedaa74519d4f517fcffcf4a768c0182d6c869c74db055cb8725942055fdcc3607f7f6eaea163fd6fea56cb4f528abadeb62586154b4f99c3b6a44470c3573922454821e220552fb45c5ed2530a0cea66ca9ff1ca95d79314c4e9aca6e8b0e5bff1bb574d91b83b25e28872d37e39be2f36bb6e4223b2834c510657c2a4bac5c5dca0f91b5601b55b77953d661e4273094192cce2d08", 0xe6}, {&(0x7f0000002cc0)="e6bb2ef0fc2d05a5e337a509456734bdff3dc5e5b5cc5b2e14f0f418c323ce7a2b0634ce5cfb47e4b7d0498b1b1718717e1c7a2f4c9667bcd8b33edf", 0x3c}, {&(0x7f0000002d00)="3ecb42ab07b653ab0a21577dca29197aab625b6fbe7c933a149198004de09e5260fbe15ebcbf4275ef867a2cad0c3d0c77ca69efef6b6022cea2833d78488159bfaa9635365d5997fc9afd2907dc09c55eeee5dc9638f7078f4ea3b4824079db583acfd78a42ec86f444b50cd901a5a970456ad9f5257b59e38fd4ed41d99096d0f2b5db67cddc5fdf7d619a", 0x8c}, {&(0x7f0000002dc0)="267ce0ee946bf021b7819a8d158069099cbea4910b942c272b9f175f8e69b2530b671802acc9328299354c0c4deaf567803e78e583559d0136547485b82f11f1d667d6bb66594d46bb0ffdb4f8fd0df53b1414629b49bf67edfb1c7eb67c7d91de7703203673df922ee3c92211809347619ade22a7ed551784d0999a57a0ccdbd8284fb22e4bffe16218aba19866eda8418efb0bd8e974fa989ac6e95c3eb17ad7487d8475ac98a5ef8950718b7029e6be31e9390082e26aa1f5c85d3645af20635992f70135a7738057778d92bf82bc2a0a742fedc7c0f61a", 0xd9}, {&(0x7f0000002ec0)="e293f00daa41ef33aa00a749e22aa032ddbb1f9a6bcbb471b9d18e2429338ad5edc237f18d969f3d2b686850b2284845ae4a25f1604b11014492382628af7884782bc03f07412b5886343fd9138ef879b342624e8e75ac600ee23dc5a7eeb86a2f533df1ad452b9d152323446ee053902f16a8423d2502", 0x77}], 0x8, 0x800, 0x2) (rerun: 64)
r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002fc0), 0x367642)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000003000)={0x2, r10, 0x4, {0x5, 0x6}, 0x7}, 0x1) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000003040)={@private, @empty}, &(0x7f0000003080)=0xc)
ioctl$int_in(r10, 0x73, &(0x7f00000030c0)=0x7)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000031c0)={'wg2\x00'})

260.83627ms ago: executing program 0 (id=2754):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901) (async)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1901)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000001200)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/4096, 0x1000, 0x1, &(0x7f0000001140)=""/175, 0xaf}, &(0x7f0000001240)=0x40)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001280)={0x1, 0x0, 0x0, 0x2000, &(0x7f000010e000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000001280)={0x1, 0x0, 0x0, 0x2000, &(0x7f000010e000/0x2000)=nil})
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x800)
ioctl$int_in(r1, 0x5452, &(0x7f0000006a00)=0x1)
fchmod(r1, 0xa0) (async)
fchmod(r1, 0xa0)
r2 = socket(0x5, 0x800, 0x100)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r3, 0x0, 0x0)
syz_usb_control_io$hid(r3, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00228f00000056db090b4550182145f5674d502af2"], 0x0}, 0x0)
syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x107fff, 0x10, 0x4, 0x3ff, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x80, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x28, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x8007f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4001, 0x8b, 0x5, 0x3e73, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0xfffffffe, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x280, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xc, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x107fff, 0x10, 0x4, 0x3ff, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x80, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x28, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x8007f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4001, 0x8b, 0x5, 0x3e73, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0xfffffffe, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x280, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xc, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
getsockopt$inet_pktinfo(r2, 0x0, 0x34, 0x0, &(0x7f0000000100)=0x2)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000001300)=0x7ff, 0x2)
socket(0x22, 0x3, 0xcaa)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r4}, 0x8)
setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001340)=@assoc_id=r4, 0x4)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) (async)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0xe, 0x8, 0xfffffff1, 0xe, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x3, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0xfffffff9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x3ae2, 0x3b, 0xda6, 0x5, 0x80, 0x7, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x7fffffff, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x20, [0xe, 0x8, 0xfffffff1, 0xe, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x7fffffff, 0x40000000, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0xffff, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x3ff, 0x2, 0x24, 0x3, 0x3, 0x43, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x9, 0x80071, 0x5, 0xfffff000, 0x104, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x3, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000004, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xfffffff8, 0x400, 0x101, 0x3, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0xfffffff9, 0x6, 0x5, 0x4, 0x1, 0x0, 0xffff, 0x0, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0xfffffff9, 0x4, 0xffffffff, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0x14, 0x87, 0x0, 0x5, 0x3ae2, 0x3b, 0xda6, 0x5, 0x80, 0x7, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x3, 0x3, 0x1, 0xbf, 0x200, 0x0, 0x400002, 0x8, 0x4, 0x5, 0xf23, 0x0, 0x6, 0x8, 0x9, 0x3, 0x6, 0xd, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0xfffffffc, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x100002, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0xffffffa1, 0x5, 0x9, 0x8, 0x4, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x7fffffff, 0xfffffffe, 0x8, 0x6, 0xa23, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) (async)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r5, &(0x7f0000000040)="e2", 0x918)
r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000001c0)={0x7, 0x1, 0x0, "eee906000000d734fc70157dcb4f1891e20000000200003b00"}) (async)
ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f00000001c0)={0x7, 0x1, 0x0, "eee906000000d734fc70157dcb4f1891e20000000200003b00"})
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000012c0)=0x1010100, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc200100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007112180000000000bc200100000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

241.450465ms ago: executing program 3 (id=2755):
r0 = socket$xdp(0x2c, 0x3, 0x0)
getpid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={<r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r3 = fsmount(r2, 0x0, 0x90)
fchdir(r3)
r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6, 0x0, r1}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0})
r8 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @empty, 0x20000000}, 0x1c)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000100)=0x3)
ioctl$TCFLSH(r9, 0x540b, 0x6)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0)
setsockopt$inet6_int(r8, 0x29, 0xb, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000000)={<r10=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000000100)={r10, 0x0, r7, 0x0, 0x80000})
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x20044011})
io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x241, 0x0)
ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x3d)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000003, 0x100010, r4, 0x0)

0s ago: executing program 1 (id=2756):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/223, 0xdf}, {0x0}], 0x2, 0x5, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x722, 0xfdef)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32)
r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x5, 0x2, 0xf, 0x86}]}) (async)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000340)={0xc}) (async, rerun: 32)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) (async, rerun: 64)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) (rerun: 64)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000580)=0x10) (async, rerun: 32)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (async, rerun: 32)
r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b6, 0x200, 0xfffffffd, 0x283}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0) (async, rerun: 32)
connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x80000, @local, 0xd3ff}, 0x1c) (rerun: 32)
ioctl$F2FS_IOC_GET_PIN_FILE(r5, 0x8004f50e, &(0x7f00000000c0)) (async)
ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000300)={0x0, 0x6, 0xfffffff9, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async)
syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x9, 0x22, 0x0, 0x0, 0x6, 0x1}) (async)
io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0)

kernel console output (not intermixed with test programs):

eftover after parsing attributes in process `syz.2.2348'.
[  700.860459][T10958] usb 5-1: Using ep0 maxpacket: 8
[  700.872259][T10958] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 64
[  700.899704][T10958] usb 5-1: config 1 interface 0 has no altsetting 0
[  700.912269][T10958] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  700.922733][T10958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.931067][T10958] usb 5-1: Product: syz
[  700.935411][T10958] usb 5-1: Manufacturer: я
[  700.940845][T10958] usb 5-1: SerialNumber: syz
[  700.953005][T15191] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  701.180251][T15213] fuse: Unknown parameter ''
[  701.360033][ T5890] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  701.370071][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.399614][T15191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.408604][T15191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.459183][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.496131][T10958] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  701.544769][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  701.566160][T10958] usb 5-1: USB disconnect, device number 31
[  701.579703][ T5890] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  701.601391][ T5890] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  701.634328][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.665867][ T5890] usb 2-1: config 0 descriptor??
[  701.703486][ T5890] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  701.711613][T15224] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2355'.
[  701.719102][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[  701.737521][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  701.755186][ T5890] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  701.778957][ T5890] usb 2-1: media controller created
[  701.801218][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  701.853122][ T5890] dvb-usb: bulk message failed: -22 (6/0)
[  701.869010][ T5890] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  701.913887][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input73
[  701.962171][ T5890] dvb-usb: schedule remote query interval to 150 msecs.
[  701.981915][ T5890] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  702.046945][ T5890] usb 2-1: USB disconnect, device number 33
[  702.163385][ T5890] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  702.173291][   T30] audit: type=1326 audit(1768887033.421:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fa58f749 code=0x7ffc0000
[  702.175808][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2358'.
[  702.266343][   T30] audit: type=1326 audit(1768887033.421:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f47fa58f749 code=0x7ffc0000
[  702.270952][T14277] usb 3-1: new low-speed USB device number 23 using dummy_hcd
[  702.333115][   T30] audit: type=1326 audit(1768887033.421:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fa58f749 code=0x7ffc0000
[  702.359043][   T30] audit: type=1326 audit(1768887033.421:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f47fa58f749 code=0x7ffc0000
[  702.383388][   T30] audit: type=1326 audit(1768887033.511:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fa58f749 code=0x7ffc0000
[  702.406642][   T30] audit: type=1326 audit(1768887033.511:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47fa58f749 code=0x7ffc0000
[  702.432803][   T30] audit: type=1326 audit(1768887033.551:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fa58f34b code=0x7ffc0000
[  702.461035][   T30] audit: type=1326 audit(1768887033.551:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fa58f34b code=0x7ffc0000
[  702.487324][   T30] audit: type=1326 audit(1768887033.551:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fa58f34b code=0x7ffc0000
[  702.519527][T14277] usb 3-1: Invalid ep0 maxpacket: 16
[  702.575444][T15237] syzkaller0: entered promiscuous mode
[  702.585631][T15237] syzkaller0: entered allmulticast mode
[  702.594014][   T30] audit: type=1326 audit(1768887033.551:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15231 comm="syz.0.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f47fa58f34b code=0x7ffc0000
[  702.649471][T14277] usb 3-1: new low-speed USB device number 24 using dummy_hcd
[  702.793470][T15239] syzkaller0: left allmulticast mode
[  702.799243][T14277] usb 3-1: Invalid ep0 maxpacket: 16
[  702.806097][T14277] usb usb3-port1: attempt power cycle
[  702.833062][T15251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2362'.
[  702.952398][T15253] raw_sendmsg: syz.1.2364 forgot to set AF_INET. Fix it!
[  703.218990][ T5890] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  703.220350][T14277] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[  703.271407][T14277] usb 3-1: Invalid ep0 maxpacket: 16
[  703.379077][   T44] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  703.411223][T14277] usb 3-1: new low-speed USB device number 26 using dummy_hcd
[  703.420225][ T5890] usb 4-1: unable to get BOS descriptor or descriptor too short
[  703.431253][ T5890] usb 4-1: not running at top speed; connect to a high speed hub
[  703.442623][ T5890] usb 4-1: config 129 has an invalid interface number: 135 but max is 0
[  703.452124][ T5890] usb 4-1: config 129 has an invalid interface number: 5 but max is 0
[  703.461957][ T5890] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1
[  703.471211][ T5890] usb 4-1: config 129 has no interface number 0
[  703.477865][ T5890] usb 4-1: config 129 has no interface number 1
[  703.484841][ T5890] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  703.499978][ T5890] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30
[  703.512510][T14277] usb 3-1: Invalid ep0 maxpacket: 16
[  703.518145][ T5890] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  703.518666][T14277] usb usb3-port1: unable to enumerate USB device
[  703.548543][ T5890] usb 4-1: config 129 interface 135 has no altsetting 0
[  703.557871][ T5890] usb 4-1: config 129 interface 5 has no altsetting 0
[  703.570435][ T5890] usb 4-1: language id specifier not provided by device, defaulting to English
[  703.585690][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62
[  703.595302][   T44] usb 1-1: Using ep0 maxpacket: 16
[  703.602153][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  703.615391][T15267] xt_policy: output policy not valid in PREROUTING and INPUT
[  703.624366][ T5890] usb 4-1: Manufacturer: 
[  703.629467][ T5890] usb 4-1: SerialNumber: Ჸ
[  703.651292][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.662982][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  703.674160][   T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  703.687618][   T44] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  703.698022][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.718356][   T44] usb 1-1: config 0 descriptor??
[  703.748647][   T44] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input74
[  703.786067][ T5187] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  703.821029][ T5187] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  703.844499][ T5187] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  703.872419][ T5990] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  703.888138][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  703.898007][ T5890] usb 4-1: MIDIStreaming interface descriptor not found
[  703.900965][ T5187] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  703.953888][T15257] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  703.984820][ T5187] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  704.005884][ T5187] pxrc 1-1:0.0: pxrc_open - usb_submit_urb failed, error: -90
[  704.016186][   T44] usb 1-1: USB disconnect, device number 50
[  704.046666][ T5890] usb 4-1: USB disconnect, device number 35
[  704.365719][ T8232] udevd[8232]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:129.5/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  704.657999][T15274] fuse: Unknown parameter ''
[  704.664273][T15274] netlink: 179596 bytes leftover after parsing attributes in process `syz.3.2370'.
[  704.757156][T15279] fuse: Unknown parameter '
'
[  704.988990][ T5890] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[  705.102354][T15282] netlink: 'syz.2.2372': attribute type 23 has an invalid length.
[  705.167336][ T5890] usb 1-1: device descriptor read/64, error -71
[  705.409036][ T5890] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  705.548986][ T5890] usb 1-1: device descriptor read/64, error -71
[  705.659756][ T5890] usb usb1-port1: attempt power cycle
[  706.020672][ T5890] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  706.048218][ T5890] usb 1-1: device descriptor read/8, error -71
[  706.318867][ T5890] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[  706.362558][ T5890] usb 1-1: device descriptor read/8, error -71
[  706.490037][ T5890] usb usb1-port1: unable to enumerate USB device
[  707.289516][T10959] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  707.405614][T10958] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  707.438855][T10959] usb 4-1: Using ep0 maxpacket: 32
[  707.446631][T10959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  707.459829][T10959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  707.470654][T10959] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  707.481231][T10959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.494840][T10959] usb 4-1: config 0 descriptor??
[  707.570276][T10958] usb 3-1: Using ep0 maxpacket: 32
[  707.583044][T10958] usb 3-1: config 1 interface 0 has no altsetting 0
[  707.601663][T10958] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.40
[  707.612447][T10958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.639873][T10958] usb 3-1: Product: syz
[  707.646478][T10958] usb 3-1: Manufacturer: syz
[  707.660463][T10958] usb 3-1: SerialNumber: syz
[  707.908188][T10958] usbhid 3-1:1.0: can't add hid device: -71
[  707.943038][T10958] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  707.957297][T10959] savu 0003:1E7D:2D5A.002A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  707.993666][T10958] usb 3-1: USB disconnect, device number 27
[  708.140194][ T5890] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  708.161555][T15295] ALSA: mixer_oss: invalid OSS volume 'PHl�6��q
ӆ���ONEOUT'
[  708.169255][   T44] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[  708.177360][T15295] ALSA: mixer_oss: invalid index 1374389
[  708.184649][T15328] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  708.188285][T10959] usb 4-1: USB disconnect, device number 36
[  708.204703][T15328] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode
[  708.311778][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  708.324645][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  708.338889][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  708.350479][   T44] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  708.360765][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  708.377519][   T44] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  708.386814][ T5890] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  708.396177][   T44] usb 1-1: config 1 has no interface number 1
[  708.403851][   T44] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  708.416843][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.428497][ T5890] usb 5-1: config 0 descriptor??
[  708.436816][   T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  708.450147][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.458283][   T44] usb 1-1: Product: syz
[  708.462663][   T44] usb 1-1: Manufacturer: syz
[  708.467344][   T44] usb 1-1: SerialNumber: syz
[  708.533599][ T6790] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  708.674980][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2389'.
[  708.699438][   T44] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  708.709000][ T6790] usb 2-1: Using ep0 maxpacket: 32
[  708.720289][ T6790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  708.745813][   T44] usb 1-1: USB disconnect, device number 55
[  708.754944][ T6790] usb 2-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae
[  708.769797][ T6790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.793562][ T6790] usb 2-1: Product: syz
[  708.798121][ T6790] usb 2-1: Manufacturer: syz
[  708.807666][ T6790] usb 2-1: SerialNumber: syz
[  708.820457][ T6790] usb 2-1: config 0 descriptor??
[  708.836265][ T6790] usbsevseg 2-1:0.0: USB 7 Segment device now attached
[  708.854584][ T5890] plantronics 0003:047F:FFFF.002B: ignoring exceeding usage max
[  708.886814][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  708.923156][ T5890] plantronics 0003:047F:FFFF.002B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  708.928688][T15338] batadv_slave_1: entered promiscuous mode
[  709.386102][T15356] fuse: Bad value for 'user_id'
[  709.395089][T15356] fuse: Bad value for 'user_id'
[  709.417484][T15358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2394'.
[  709.558550][ T5890] usb 2-1: USB disconnect, device number 34
[  709.574568][ T5890] usbsevseg 2-1:0.0: USB 7 Segment now disconnected
[  709.748991][   T44] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  709.758495][T15337] batadv_slave_1: left promiscuous mode
[  709.932223][   T44] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  709.944454][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.962611][   T44] usb 1-1: config 0 descriptor??
[  710.385284][T15361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.420459][T15361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.484368][   T44] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  710.505750][   T44] [drm:udl_init] *ERROR* Selecting channel failed
[  710.575662][   T44] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  710.593938][   T44] [drm] Initialized udl on minor 2
[  710.613424][   T44] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  710.641765][   T44] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  710.661220][ T5982] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  710.679228][   T44] usb 1-1: USB disconnect, device number 56
[  710.685666][ T5982] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  710.960407][ T6790] usb 5-1: USB disconnect, device number 32
[  711.146458][T15388] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  712.864962][T15427] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2412'.
[  714.181657][T15441] IPVS: set_ctl: invalid protocol: 22 172.20.20.20:20000
[  714.468918][ T6790] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  714.621791][ T6790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  714.632775][ T6790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  714.675327][ T6790] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  714.718050][ T6790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  714.740011][ T6790] usb 4-1: SerialNumber: syz
[  714.768974][   T44] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  714.925596][   T44] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  714.945247][   T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  714.971937][   T44] usb 3-1: Product: syz
[  714.986677][   T44] usb 3-1: Manufacturer: syz
[  714.993457][   T44] usb 3-1: SerialNumber: syz
[  715.048628][ T6790] usb 4-1: 0:2 : does not exist
[  715.064845][ T6790] usb 4-1: unit 5: unexpected type 0x0c
[  715.106104][ T6790] usb 4-1: USB disconnect, device number 37
[  715.185899][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  715.438216][ T5834] Bluetooth: hci1: Unknown advertising packet type: 0x7f
[  715.438277][ T5834] Bluetooth: hci1: adv larger than maximum supported
[  715.448069][ T5834] Bluetooth: hci1: Malformed LE Event: 0x0d
[  715.502866][   T44] rtl8150 3-1:1.0: couldn't reset the device
[  715.510810][   T44] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[  715.534254][   T44] usb 3-1: USB disconnect, device number 28
[  715.641645][ T5982] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  715.699233][T15462] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  715.745361][T15462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2422'.
[  715.909047][ T6790] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  715.964546][ T5982] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  715.976032][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  715.997731][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  716.021114][ T5982] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  716.022894][T15468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2424'.
[  716.043141][ T5982] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  716.103453][ T5982] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  716.112622][ T5982] usb 2-1: Manufacturer: syz
[  716.123424][ T6790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  716.138385][ T5982] usb 2-1: config 0 descriptor??
[  716.146342][ T6790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  716.178645][ T6790] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  716.194883][ T6790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.225995][ T6790] usb 4-1: Product: syz
[  716.230410][ T6790] usb 4-1: Manufacturer: syz
[  716.236757][T15457] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512
[  716.307535][ T6790] usb 4-1: SerialNumber: syz
[  716.310716][T15469] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2424'.
[  716.570668][T15460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.609867][T15460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.678335][ T5982] usbhid 2-1:0.0: can't add hid device: -71
[  716.687273][ T5982] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  716.732990][ T6790] usb 4-1: 0:2 : does not exist
[  716.760736][ T5982] usb 2-1: USB disconnect, device number 35
[  717.056224][T15482] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  717.148425][T10959] usb 4-1: USB disconnect, device number 38
[  717.403538][T15487] warning: `syz.4.2428' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  719.519646][T15519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2436'.
[  719.882415][T15528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2440'.
[  720.111247][T15532] fuse: Bad value for 'fd'
[  720.331180][T10959] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  720.397161][T15540] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode
[  720.417526][T15540] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig
[  720.491701][T10959] usb 4-1: Using ep0 maxpacket: 16
[  720.501063][T10959] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  720.537669][T10959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.606704][T10959] usb 4-1: config 0 descriptor??
[  720.627053][T10959] gspca_main: sonixj-2.14.0 probing 0471:0327
[  720.722501][T15549] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  720.758439][T15548] netdevsim netdevsim0: Direct firmware load for /
[  720.758439][T15548]  failed with error -2
[  720.909849][T15548] netdevsim netdevsim0: Falling back to sysfs fallback for: /
[  720.909849][T15548] 
[  722.059886][T14277] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  722.231260][T14277] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  722.269801][T14277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.381439][T14277] usb 2-1: config 0 descriptor??
[  722.846749][T14277] logitech 0003:046D:C298.002C: unknown main item tag 0x0
[  722.870405][T14277] logitech 0003:046D:C298.002C: unknown main item tag 0x0
[  722.887561][T14277] logitech 0003:046D:C298.002C: unknown main item tag 0x0
[  722.896774][T14277] logitech 0003:046D:C298.002C: unknown main item tag 0x0
[  722.906584][T14277] logitech 0003:046D:C298.002C: unknown main item tag 0x0
[  722.916441][T14277] logitech 0003:046D:C298.002C: unknown main item tag 0x0
[  722.944746][T14277] logitech 0003:046D:C298.002C: unknown main item tag 0x0
[  722.956413][T14277] logitech 0003:046D:C298.002C: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.1-1/input0
[  722.971855][T14277] logitech 0003:046D:C298.002C: no inputs found
[  722.998889][ T6790] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  723.179500][ T6790] usb 5-1: Using ep0 maxpacket: 16
[  723.191305][ T6790] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  723.203283][ T6790] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  723.215493][ T6790] usb 5-1: Product: syz
[  723.220232][ T6790] usb 5-1: Manufacturer: syz
[  723.225148][ T6790] usb 5-1: SerialNumber: syz
[  723.230307][T10959] gspca_sonixj: i2c_w8 err -110
[  723.235405][T10959] sonixj 4-1:0.0: probe with driver sonixj failed with error -110
[  723.256099][ T6790] usb 5-1: config 0 descriptor??
[  723.440586][ T5982] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  723.481514][ T6790] usb 5-1: USB disconnect, device number 33
[  723.602450][ T5982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  723.614997][ T5982] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=8e.0b
[  723.625827][ T5982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.634516][ T5982] usb 3-1: Product: syz
[  723.639312][ T5982] usb 3-1: Manufacturer: syz
[  723.644090][ T5982] usb 3-1: SerialNumber: syz
[  723.669775][ T5982] usb 3-1: config 0 descriptor??
[  723.951553][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2458'.
[  723.953803][ T5982] usb 3-1: USB disconnect, device number 29
[  724.046433][ T5890] usb 4-1: USB disconnect, device number 39
[  724.086284][ T6307] udevd[6307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  724.259571][T10959] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  724.440709][T10959] usb 1-1: Using ep0 maxpacket: 8
[  724.451798][T10959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[  724.464767][T10959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  724.641498][T10959] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  724.657052][T10959] usb 1-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  724.676355][T10959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.719242][T10959] usb 1-1: config 0 descriptor??
[  724.842163][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2462'.
[  724.964989][ T5982] usb 2-1: USB disconnect, device number 36
[  725.215338][T15597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2458'.
[  725.417872][T10959] aquacomputer_d5next 0003:0C70:F0B6.002D: unbalanced delimiter at end of report description
[  725.499454][T10959] aquacomputer_d5next 0003:0C70:F0B6.002D: probe with driver aquacomputer_d5next failed with error -22
[  725.802181][T15641] tipc: Invalid UDP bearer configuration
[  725.802243][T15641] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  725.884241][T15644] overlayfs: missing 'lowerdir'
[  726.298863][ T5982] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  726.314429][T15654] netlink: 'syz.4.2471': attribute type 9 has an invalid length.
[  726.317757][T15651] input: syz0 as /devices/virtual/input/input77
[  726.342445][T15654] netlink: 'syz.4.2471': attribute type 11 has an invalid length.
[  726.389118][T15654] netlink: 'syz.4.2471': attribute type 12 has an invalid length.
[  726.451548][T15654] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.2471'.
[  726.478987][ T5982] usb 2-1: Using ep0 maxpacket: 8
[  726.500112][ T5982] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  726.515123][T15654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2471'.
[  726.526758][ T5982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.551096][ T5982] usb 2-1: Product: syz
[  726.562126][ T5982] usb 2-1: Manufacturer: syz
[  726.575698][ T5982] usb 2-1: SerialNumber: syz
[  726.607005][ T5982] usb 2-1: config 0 descriptor??
[  726.652203][ T5982] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  726.983990][T10959] usb 1-1: USB disconnect, device number 57
[  727.289596][T14277] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  727.448869][T14277] usb 3-1: Using ep0 maxpacket: 16
[  727.456817][T14277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  727.469667][T14277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  727.480539][T14277] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  727.494670][T14277] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  727.505958][T14277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.520724][T14277] usb 3-1: config 0 descriptor??
[  727.578980][ T5890] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[  727.747122][T14277] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0
[  727.766219][T14277] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max
[  727.774282][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2303, setting to 64
[  727.774389][ T5890] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  727.850180][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  727.901774][ T5890] usb 1-1: config 0 descriptor??
[  727.949258][T15673] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  727.968272][ T5890] uvcvideo 1-1:0.0: Found UVC 0.00 device <unnamed> (10c4:ea90)
[  727.987698][ T5890] uvcvideo 1-1:0.0: No valid video chain found.
[  728.381709][T15673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  728.396946][T15673] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  728.416748][ T5972] usb 1-1: USB disconnect, device number 58
[  728.640045][T14277] microsoft 0003:045E:07DA.002E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  728.702410][T14277] microsoft 0003:045E:07DA.002E: no inputs found
[  728.713025][T14277] microsoft 0003:045E:07DA.002E: could not initialize ff, continuing anyway
[  728.744221][T14277] usb 3-1: USB disconnect, device number 30
[  728.795957][T15684] veth4: entered promiscuous mode
[  728.801434][T15684] veth4: entered allmulticast mode
[  728.839103][ T5890] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  728.888226][T15682] fido_id[15682]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  728.999123][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  729.011095][ T5890] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  729.046398][ T5890] usb 4-1: config 0 has no interface number 0
[  729.075636][ T5890] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  729.124425][ T5890] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  729.133785][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  729.149336][ T5890] usb 4-1: Product: syz
[  729.157329][ T5890] usb 4-1: SerialNumber: syz
[  729.187454][ T5890] usb 4-1: config 0 descriptor??
[  729.220721][ T5890] cm109 4-1:0.8: invalid payload size 208, expected 4
[  729.236215][ T5890] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input79
[  729.413573][T15649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.469842][T15649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.625589][T15681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.656816][T15681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.670434][T15681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.683941][T15681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.735131][T10959] usb 4-1: USB disconnect, device number 40
[  729.736087][    C1] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71
[  729.748210][    C1] cm109 4-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[  729.758187][ T5982] gspca_sonixj: i2c_w8 err -71
[  729.778913][ T5982] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  729.787745][T10959] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  729.845475][ T5982] usb 2-1: USB disconnect, device number 37
[  730.401842][T15720] fuse: Invalid rootmode
[  730.488585][T15725] netlink: 'syz.3.2488': attribute type 23 has an invalid length.
[  730.498980][T15725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2488'.
[  730.569531][T10959] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  730.683708][T15726] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2488'.
[  730.721673][T10959] usb 1-1: config 8 has an invalid interface number: 70 but max is 0
[  730.731573][T10959] usb 1-1: config 8 has no interface number 0
[  730.760315][T10959] usb 1-1: New USB device found, idVendor=2184, idProduct=0057, bcdDevice=ae.61
[  730.775629][T10959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.795495][T10959] usb 1-1: Product: syz
[  730.800523][T10959] usb 1-1: Manufacturer: syz
[  730.805153][T10959] usb 1-1: SerialNumber: syz
[  731.139098][T15713] Attempt to restore checkpoint with obsolete wellknown handles
[  731.150587][T15713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  731.180876][T15713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  731.450942][T10959] ch341 1-1:8.70: ch341-uart converter detected
[  731.544878][T10959] usb 1-1: failed to receive control message: -71
[  731.611927][T10959] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  731.647308][T10959] usb 1-1: USB disconnect, device number 59
[  731.686383][T10959] ch341 1-1:8.70: device disconnected
[  732.085996][T15742] netlink: 'syz.0.2493': attribute type 33 has an invalid length.
[  732.109500][T15742] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2493'.
[  732.577404][ T5982] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  732.612446][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2493'.
[  732.740437][ T5982] usb 2-1: config 0 has an invalid interface number: 30 but max is 0
[  732.749236][ T5982] usb 2-1: config 0 has no interface number 0
[  732.755765][ T5982] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2
[  732.806136][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  732.910770][ T5982] usb 2-1: config 0 descriptor??
[  732.942861][ T5982] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state.
[  732.992354][ T5982] usb 2-1: setting power ON
[  732.996952][ T5982] dvb-usb: bulk message failed: -22 (2/0)
[  733.198928][ T5982] dvb-usb: bulk message failed: -22 (1/0)
[  733.323207][ T5982] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  733.392330][T15757] input: syz1 as /devices/virtual/input/input80
[  733.416553][ T5982] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19)
[  733.467720][ T5982] dvb_usb_cxusb 2-1:0.30: probe with driver dvb_usb_cxusb failed with error -22
[  733.549524][ T5982] usb 2-1: USB disconnect, device number 38
[  733.759512][T10959] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  733.782866][T15760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2497'.
[  733.787989][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'.
[  733.827647][T15760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  733.841939][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2498'.
[  733.941097][T10959] usb 1-1: Using ep0 maxpacket: 16
[  733.948371][T10959] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  733.960131][T10959] usb 1-1: config 0 has no interface number 0
[  733.968428][T10959] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  733.979154][T10959] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  733.987408][T10959] usb 1-1: Product: syz
[  733.993086][T10959] usb 1-1: SerialNumber: syz
[  734.000998][T15760] batman_adv: batadv0: Removing interface: batadv_slave_1
[  734.016864][T10959] usb 1-1: config 0 descriptor??
[  734.051190][T10959] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input81
[  734.234933][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.242877][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.251607][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.263065][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.271097][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.278460][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.285703][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.297813][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.305047][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.313013][    C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[  734.325261][T10959] usb 1-1: USB disconnect, device number 60
[  734.331773][    C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  734.343033][ T5982] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  734.363152][T10959] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  734.527301][ T5982] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  734.538681][ T5982] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  734.553465][ T5982] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  734.588929][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.822873][T15774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  734.857332][T15774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  734.867411][ T5982] usb 5-1: usb_control_msg returned -32
[  734.873525][ T5982] usbtmc 5-1:16.0: can't read capabilities
[  735.098574][T14277] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  735.213443][T10959] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  735.423150][T10959] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  735.433723][T10959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.444033][T10959] usb 3-1: Product: syz
[  735.448378][T10959] usb 3-1: Manufacturer: syz
[  735.457740][T10959] usb 3-1: SerialNumber: syz
[  735.480298][T10959] usb 3-1: config 0 descriptor??
[  735.489725][T10959] gspca_main: sq905c-2.14.0 probing 2770:9052
[  735.509542][T14277] usb 4-1: Using ep0 maxpacket: 16
[  735.520521][T14277] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  735.545374][T14277] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  735.583786][T14277] usb 4-1: Product: syz
[  735.588168][T14277] usb 4-1: Manufacturer: syz
[  735.595393][T14277] usb 4-1: SerialNumber: syz
[  735.605208][T14277] usb 4-1: config 0 descriptor??
[  735.819864][ T5982] usb 4-1: USB disconnect, device number 41
[  736.501934][T15818] syzkaller1: entered promiscuous mode
[  736.507680][T15818] syzkaller1: entered allmulticast mode
[  736.549804][T14277] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  736.725554][T14277] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  736.736316][T14277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  736.756801][T14277] usb 1-1: Product: syz
[  736.765823][T14277] usb 1-1: Manufacturer: syz
[  736.771746][T14277] usb 1-1: SerialNumber: syz
[  736.988837][T14277] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  737.006424][T14277] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  737.050177][T10959] usb 5-1: USB disconnect, device number 34
[  737.102930][T14277] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  737.197599][T14277] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  737.298212][T14277] usb 1-1: USB disconnect, device number 61
[  737.520522][T10959] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  737.695981][T10959] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  737.919583][T10958] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  737.999674][T10959] usb 5-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00
[  738.017053][T10959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.051062][T10959] usb 5-1: config 0 descriptor??
[  738.089992][T10959] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  738.099332][T10958] usb 4-1: Using ep0 maxpacket: 8
[  738.120030][T10958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  738.138113][T10958] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  738.149825][T10958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.190243][T10958] usb 4-1: config 0 descriptor??
[  738.198033][ T5890] usb 3-1: USB disconnect, device number 31
[  738.414307][T10958] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  738.602157][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2518'.
[  738.633576][T15820] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2514'.
[  738.976888][ T5982] usb 4-1: USB disconnect, device number 42
[  739.222980][T15852] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  739.229575][T15852] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  739.238407][T15852] vhci_hcd vhci_hcd.0: Device attached
[  739.307479][ T5890] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0
[  739.334653][ T5890] hid-generic 0000:0000:0000.002F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  739.431335][ T5972] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  739.465486][T15857] fido_id[15857]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  739.493488][ T5890] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  739.501376][ T5982] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  739.511097][ T5972] usb 35-1: new low-speed USB device number 3 using vhci_hcd
[  739.678899][ T5890] usb 2-1: Using ep0 maxpacket: 32
[  739.687905][ T5890] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  739.697255][ T5890] usb 2-1: config 0 has no interface number 0
[  739.703648][ T5982] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  739.715492][ T5982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.723980][ T5890] usb 2-1: too many endpoints for config 0 interface 12 altsetting 2: 235, using maximum allowed: 30
[  739.735434][ T5982] usb 4-1: Product: syz
[  739.741873][ T5982] usb 4-1: Manufacturer: syz
[  739.746646][ T5890] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  739.759633][ T5982] usb 4-1: SerialNumber: syz
[  739.768260][ T5890] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  739.800537][ T5890] usb 2-1: config 0 interface 12 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 235
[  739.825455][ T5890] usb 2-1: config 0 interface 12 has no altsetting 0
[  739.835837][ T5890] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  739.862626][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.881372][ T5890] usb 2-1: Product: syz
[  739.892526][ T5890] usb 2-1: Manufacturer: syz
[  739.903018][ T5890] usb 2-1: SerialNumber: syz
[  739.937591][ T5890] usb 2-1: config 0 descriptor??
[  739.970169][ T5890] f81534 2-1:0.12: unsupported endpoint max packet size
[  740.184867][T15853] vhci_hcd: connection reset by peer
[  740.187204][T10958] usb 2-1: USB disconnect, device number 39
[  740.206101][T12648] vhci_hcd vhci_hcd.1: stop threads
[  740.212154][T12648] vhci_hcd vhci_hcd.1: release socket
[  740.223646][T12648] vhci_hcd vhci_hcd.1: disconnect device
[  740.257337][ T5982] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  740.307815][ T5982] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  740.329351][ T5890] usb 5-1: USB disconnect, device number 35
[  740.949062][ T5890] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  741.119192][ T5890] usb 5-1: Using ep0 maxpacket: 16
[  741.140012][ T5890] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  741.149516][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  741.159424][ T5890] usb 5-1: Product: syz
[  741.163762][ T5890] usb 5-1: Manufacturer: syz
[  741.168422][ T5890] usb 5-1: SerialNumber: syz
[  741.181334][ T5890] usb 5-1: config 0 descriptor??
[  741.404958][T15871] netlink: 27 bytes leftover after parsing attributes in process `syz.2.2526'.
[  741.415520][T10959] usb 5-1: USB disconnect, device number 36
[  742.170302][T10959] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  742.341338][T10959] usb 1-1: config 9 has an invalid interface number: 3 but max is 0
[  742.350292][T10959] usb 1-1: config 9 has no interface number 0
[  742.356508][T10959] usb 1-1: config 9 interface 3 has no altsetting 0
[  742.373103][T10959] usb 1-1: New USB device found, idVendor=0fcf, idProduct=1003, bcdDevice=87.04
[  742.428926][ T5890] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  742.437028][T10959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.445338][ T5982] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO
[  742.445401][ T5982] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[  742.445425][ T5982] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  742.446765][ T5982] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  742.679596][T10959] usb 1-1: Product: syz
[  742.684201][T10959] usb 1-1: Manufacturer: syz
[  742.699690][T10959] usb 1-1: SerialNumber: syz
[  742.723465][ T5982] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  742.748986][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  742.756096][ T5982] usb 4-1: USB disconnect, device number 43
[  742.780389][ T5890] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  742.790194][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.826960][ T5890] usb 5-1: Product: syz
[  742.837248][ T5890] usb 5-1: Manufacturer: syz
[  742.867451][ T5890] usb 5-1: SerialNumber: syz
[  742.887201][ T5890] usb 5-1: config 0 descriptor??
[  742.945599][ T5890] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  743.019140][T15876] netlink: 'syz.0.2527': attribute type 10 has an invalid length.
[  743.030690][T15876] 8021q: adding VLAN 0 to HW filter on device bond0
[  743.051156][T15876] team0: Port device bond0 added
[  743.058292][T15876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'.
[  743.259467][ T6790] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  743.468324][ T6790] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  743.487110][ T6790] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  743.529507][ T6790] usb 2-1: config 0 interface 0 has no altsetting 0
[  743.585510][ T6790] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00
[  743.610564][ T6790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.659522][ T6790] usb 2-1: config 0 descriptor??
[  743.670035][T15895] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  744.214708][ T6790] hid-u2fzero 0003:10C4:8ACF.0030: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.1-1/input0
[  744.304254][ T6790] hid-u2fzero 0003:10C4:8ACF.0030: U2F Zero LED initialised
[  744.346597][ T6790] hid-u2fzero 0003:10C4:8ACF.0030: U2F Zero RNG initialised
[  744.413899][ T6790] usb 2-1: USB disconnect, device number 40
[  744.507071][T15876] team0 (unregistering): Port device bridge3 removed
[  744.534785][T15901] fido_id[15901]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  744.599825][T15876] team0 (unregistering): Port device bond0 removed
[  744.679105][ T5972] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  744.798273][ T5890] gspca_ov534_9: reg_w failed -71
[  745.068880][ T5890] gspca_ov534_9: Unknown sensor 0000
[  745.068984][ T5890] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  745.119172][ T5890] usb 5-1: USB disconnect, device number 37
[  745.191047][T10959] hub 1-1:9.3: bad descriptor, ignoring hub
[  745.226647][T10959] hub 1-1:9.3: probe with driver hub failed with error -5
[  745.274110][T10959] cp210x 1-1:9.3: cp210x converter detected
[  745.298065][T10959] cp210x 1-1:9.3: failed to get vendor val 0x370b size 1: -71
[  745.347896][T10959] cp210x 1-1:9.3: querying part number failed
[  745.374156][T10959] usb 1-1: cp210x converter now attached to ttyUSB0
[  745.479178][T10959] usb 1-1: USB disconnect, device number 62
[  745.551208][T10959] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  745.592928][T10959] cp210x 1-1:9.3: device disconnected
[  746.101034][T15924] vxlan0: entered promiscuous mode
[  746.121671][T15924] vxlan0: entered allmulticast mode
[  746.263527][   T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  746.275936][   T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  746.368109][   T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  746.404758][   T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  746.434247][T15929] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2541'.
[  746.450914][T15929] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2541'.
[  747.186407][T15947] kvm: kvm [15945]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00
[  747.209336][T15947] kvm: kvm [15945]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00
[  747.237259][T15947] kvm: kvm [15945]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00
[  747.268593][T15947] kvm: kvm [15945]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00
[  747.288093][T15947] kvm: kvm [15945]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00
[  747.339251][T10959] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  747.366390][T15956] ALSA: mixer_oss: invalid OSS volume ''
[  747.489547][T10959] usb 1-1: Using ep0 maxpacket: 32
[  747.513274][T10959] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  747.526611][T10959] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  747.600515][T10959] usb 1-1: config 0 has no interface number 0
[  747.616713][T10959] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 1024
[  747.689026][T10959] usb 1-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  747.732379][T10959] usb 1-1: config 0 interface 12 has no altsetting 0
[  747.743350][T10959] usb 1-1: New USB device found, idVendor=1542, idProduct=0000, bcdDevice=85.00
[  747.811714][T15968] random: crng reseeded on system resumption
[  747.820101][T10959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.838912][T10959] usb 1-1: Product: syz
[  747.844120][T10959] usb 1-1: Manufacturer: syz
[  747.869868][T10959] usb 1-1: SerialNumber: syz
[  747.877626][T10959] usb 1-1: config 0 descriptor??
[  747.884067][T14277] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  747.910370][T15949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  748.049766][T14277] usb 5-1: Using ep0 maxpacket: 16
[  748.062097][T15974] binder: BINDER_SET_CONTEXT_MGR already set
[  748.071853][T14277] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  748.088263][T15974] binder: 15973:15974 ioctl 4018620d 200000000100 returned -16
[  748.098039][T15974] binder: BINDER_SET_CONTEXT_MGR already set
[  748.104663][   T44] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  748.112618][T15974] binder: 15973:15974 ioctl 4018620d 200000004a80 returned -16
[  748.127072][T14277] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  748.140310][T14277] usb 5-1: config 0 interface 0 has no altsetting 0
[  748.150576][T14277] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  748.160530][T14277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  748.178836][T14277] usb 5-1: Product: syz
[  748.185818][T14277] usb 5-1: Manufacturer: syz
[  748.196516][T14277] usb 5-1: SerialNumber: syz
[  748.208471][T14277] usb 5-1: config 0 descriptor??
[  748.249920][   T44] usb 2-1: device descriptor read/64, error -71
[  748.400411][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2556'.
[  748.409868][T15982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2556'.
[  748.425130][T14277] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input83
[  748.426677][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2556'.
[  748.443658][T15982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2556'.
[  748.467674][T15982] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  748.518804][   T44] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  748.657016][T15963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.666886][T15963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.690310][T14277] usb 5-1: USB disconnect, device number 38
[  748.690549][    C1] synaptics_usb 5-1:0.0: synusb_irq - usb_submit_urb failed with result: -19
[  748.710611][ T5187] synaptics_usb 5-1:0.0: synusb_open - usb_submit_urb failed, error: -19
[  748.759883][   T44] usb 2-1: device descriptor read/64, error -71
[  748.878251][   T44] usb usb2-port1: attempt power cycle
[  749.238877][   T44] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  749.267790][   T44] usb 2-1: device descriptor read/8, error -71
[  749.343463][T15997] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2548'.
[  749.538957][ T5972] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  749.546681][   T44] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  749.569642][   T44] usb 2-1: device descriptor read/8, error -71
[  749.690745][   T44] usb usb2-port1: unable to enumerate USB device
[  749.720606][ T5972] usb 5-1: Using ep0 maxpacket: 32
[  749.736172][ T5972] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  749.842902][ T5972] usb 5-1: config 0 has no interface number 0
[  749.849513][ T5972] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  749.869689][ T5972] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  749.892534][ T5972] usb 5-1: config 0 interface 126 has no altsetting 0
[  749.903262][ T5972] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  749.912772][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  749.923691][ T5972] usb 5-1: Product: syz
[  749.941857][ T5972] usb 5-1: Manufacturer: syz
[  749.954211][ T5972] usb 5-1: SerialNumber: syz
[  749.984813][ T5972] usb 5-1: config 0 descriptor??
[  749.995762][T15996] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  750.004100][T15996] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  750.176025][T16019] fuse: Bad value for 'fd'
[  750.194943][T16019] ipip0: entered promiscuous mode
[  750.200807][T16019] ipip0: entered allmulticast mode
[  750.426378][ T5972] ir_usb 5-1:0.126: IR Dongle converter detected
[  750.466973][T14277] usb 1-1: USB disconnect, device number 63
[  750.625804][ T5972] usb 5-1: IRDA class descriptor not found, device not bound
[  750.829893][ T5972] usb 5-1: USB disconnect, device number 39
[  751.298432][T14277] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  751.539476][T14277] usb 1-1: Using ep0 maxpacket: 32
[  751.547024][T14277] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  751.578473][T14277] usb 1-1: config 0 interface 0 has no altsetting 0
[  751.608810][T14277] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  751.634931][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  751.647639][T14277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.669563][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  751.698265][T14277] usb 1-1: config 0 descriptor??
[  751.859544][T10959] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  752.086757][T10959] usb 5-1: Using ep0 maxpacket: 16
[  752.097211][T10959] usb 5-1: config 0 has an invalid interface number: 9 but max is 0
[  752.117293][T10959] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  752.131502][T10959] usb 5-1: config 0 has no interface number 0
[  752.165717][T10959] usb 5-1: config 0 interface 9 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  752.218410][T10959] usb 5-1: config 0 interface 9 has no altsetting 0
[  752.244672][T10959] usb 5-1: New USB device found, idVendor=86d1, idProduct=607c, bcdDevice=15.ed
[  752.256566][T10959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  752.280636][T10959] usb 5-1: Product: syz
[  752.290905][T10959] usb 5-1: Manufacturer: syz
[  752.303216][T10959] usb 5-1: SerialNumber: syz
[  752.330351][T10959] usb 5-1: config 0 descriptor??
[  752.456392][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  752.464957][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  752.553549][T10959] usb-storage 5-1:0.9: USB Mass Storage device detected
[  752.629009][ T5890] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  752.653161][T10959] usb 5-1: USB disconnect, device number 40
[  752.788969][ T5890] usb 3-1: Using ep0 maxpacket: 16
[  752.810463][ T5890] usb 3-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config
[  752.849160][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  752.875152][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 29811, setting to 1024
[  752.896599][ T5890] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  752.927264][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  752.951861][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  752.970518][ T5890] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  752.978677][ T5890] usb 3-1: Manufacturer: syz
[  752.998364][ T5890] usb 3-1: config 0 descriptor??
[  753.368854][ T5890] rc_core: IR keymap rc-hauppauge not found
[  753.378123][ T5890] Registered IR keymap rc-empty
[  753.393432][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.417099][T16063] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  753.427552][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.480656][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  753.495945][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input85
[  753.526259][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.574458][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.619611][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.639351][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.661179][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.682662][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.703866][T14277] usbhid 1-1:0.0: can't add hid device: -71
[  753.710670][T14277] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  753.725103][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.731866][T14277] usb 1-1: USB disconnect, device number 64
[  753.829233][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.869383][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.899314][ T5890] mceusb 3-1:0.0: Error: mce write urb status = -71
[  753.934121][ T5890] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  753.962831][ T5890] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  754.518945][ T5890] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  754.681189][ T5890] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  754.732257][   T44] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  754.771028][T16090] sctp: [Deprecated]: syz.3.2582 (pid 16090) Use of int in maxseg socket option.
[  754.771028][T16090] Use struct sctp_assoc_value instead
[  754.785535][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  754.796557][ T5890] usb 5-1: config 0 descriptor??
[  754.925559][T16090] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  754.938998][   T44] usb 2-1: Using ep0 maxpacket: 8
[  754.962772][   T44] usb 2-1: config 2 has an invalid interface number: 31 but max is 0
[  755.039567][   T44] usb 2-1: config 2 has no interface number 0
[  755.055700][   T44] usb 2-1: config 2 interface 31 has no altsetting 0
[  755.074468][   T44] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  755.087160][   T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.117859][   T44] usb 2-1: Product: syz
[  755.129885][   T44] usb 2-1: Manufacturer: syz
[  755.143366][   T44] usb 2-1: SerialNumber: syz
[  755.322397][T14277] usb 3-1: USB disconnect, device number 32
[  755.447572][T16082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.469264][T16082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.581173][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.606632][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.630230][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.641405][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.660172][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.691580][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.731071][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.804589][   T44] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22
[  755.839070][ T5972] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  755.855923][T16082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.865328][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.879813][T16082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  755.946812][T16094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  755.958459][   T44] usb 2-1: USB disconnect, device number 45
[  755.994512][T16094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.009055][ T5972] usb 1-1: Using ep0 maxpacket: 8
[  756.046513][ T5972] usb 1-1: unable to get BOS descriptor or descriptor too short
[  756.082493][ T5972] usb 1-1: config 127 has an invalid interface number: 181 but max is 0
[  756.113281][ T5972] usb 1-1: config 127 has no interface number 0
[  756.136703][ T5972] usb 1-1: config 127 interface 181 altsetting 249 bulk endpoint 0xC has invalid maxpacket 64
[  756.158222][ T5972] usb 1-1: config 127 interface 181 altsetting 249 bulk endpoint 0x6 has invalid maxpacket 64
[  756.186036][ T5972] usb 1-1: config 127 interface 181 has no altsetting 0
[  756.204804][T16099] netlink: 'syz.2.2584': attribute type 23 has an invalid length.
[  756.213197][ T5972] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0123, bcdDevice=12.8b
[  756.246524][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  756.267283][ T5972] usb 1-1: Product: syz
[  756.276272][ T5972] usb 1-1: Manufacturer: syz
[  756.284588][T16099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2584'.
[  756.299029][ T5972] usb 1-1: SerialNumber: syz
[  756.325167][T16082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.347291][T16093] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  756.401959][T16082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.420013][T16093] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  756.501256][ T5890] usb 5-1: Cannot set autoneg
[  756.506618][ T5890] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  756.555315][ T5890] usb 5-1: USB disconnect, device number 41
[  756.764556][ T5972] kvaser_usb 1-1:127.181: error -ENODEV: Cannot get usb endpoint(s)
[  756.825652][ T5972] usb 1-1: USB disconnect, device number 65
[  756.987067][T16119] fuse: Unknown parameter '�9w0x0000000000000005'
[  757.149698][T14277] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  757.159731][T16121] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.2589'.
[  757.179751][T16121] openvswitch: netlink: Message has 16 unknown bytes.
[  757.203764][T16121] loop7: detected capacity change from 0 to 7
[  757.214148][T16121] Dev loop7: unable to read RDB block 7
[  757.220080][T16121]  loop7: unable to read partition table
[  757.226140][T16121] loop7: partition table beyond EOD, truncated
[  757.239972][T16121] loop_reread_partitions: partition scan of loop7 (�被x������ ) failed (rc=-5)
[  757.309887][T14277] usb 5-1: Using ep0 maxpacket: 8
[  757.321590][T14277] usb 5-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config
[  757.361676][T14277] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5
[  757.381615][T14277] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 146, changing to 11
[  757.411868][T14277] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  757.466960][T14277] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8
[  757.497850][T14277] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.514223][T14277] usb 5-1: Product: syz
[  757.518453][T14277] usb 5-1: Manufacturer: syz
[  757.532555][T14277] usb 5-1: SerialNumber: syz
[  757.549699][T14277] usb 5-1: config 0 descriptor??
[  757.558832][T10959] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  757.569910][T14277] usbtest 5-1:0.0: couldn't get endpoints, -22
[  757.576185][T14277] usbtest 5-1:0.0: probe with driver usbtest failed with error -22
[  757.689357][T10959] usb 3-1: device descriptor read/64, error -71
[  757.766180][ T5890] usb 5-1: USB disconnect, device number 42
[  757.898988][T14277] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  757.931771][T10959] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  758.049385][T14277] usb 4-1: Using ep0 maxpacket: 8
[  758.058478][T14277] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  758.067249][T14277] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  758.077393][T10959] usb 3-1: device descriptor read/64, error -71
[  758.083870][T14277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  758.094500][T14277] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  758.105141][T14277] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  758.119201][T14277] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  758.128295][T14277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.199812][T10959] usb usb3-port1: attempt power cycle
[  758.343882][T14277] usb 4-1: GET_CAPABILITIES returned 0
[  758.355025][T14277] usbtmc 4-1:16.0: can't read capabilities
[  758.549716][T10959] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  758.589518][T10959] usb 3-1: device descriptor read/8, error -71
[  758.836608][ T5972] usb 4-1: USB disconnect, device number 44
[  758.850455][T10959] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  758.910421][T10959] usb 3-1: device descriptor read/8, error -71
[  759.020554][T10959] usb usb3-port1: unable to enumerate USB device
[  759.098905][T14277] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  759.253070][T14277] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  759.262778][T14277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.272088][T14277] usb 1-1: Product: syz
[  759.276452][T14277] usb 1-1: Manufacturer: syz
[  759.281439][T14277] usb 1-1: SerialNumber: syz
[  759.705592][T16158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.735481][T16158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.756096][ T5834] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  759.756148][ T5834] Bluetooth: hci0: adv larger than maximum supported
[  759.770488][ T5834] Bluetooth: hci0: Malformed LE Event: 0x0d
[  759.902145][T14277] rtl8150 1-1:1.0: couldn't reset the device
[  759.936943][T14277] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5
[  760.011392][T14277] usb 1-1: USB disconnect, device number 66
[  760.097082][T16178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2605'.
[  760.469074][T10959] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  760.619503][T10959] usb 4-1: Using ep0 maxpacket: 8
[  760.627133][T10959] usb 4-1: config index 0 descriptor too short (expected 28277, got 36)
[  760.645172][T10959] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  760.686329][T10959] usb 4-1: config 0 has no interfaces?
[  760.693350][T10959] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  760.705254][T10959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.761791][T10959] usb 4-1: config 0 descriptor??
[  760.849444][T14277] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  761.019402][T14277] usb 1-1: device descriptor read/64, error -71
[  761.259350][T14277] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  761.389333][T14277] usb 1-1: device descriptor read/64, error -71
[  761.499837][T14277] usb usb1-port1: attempt power cycle
[  761.514985][T16203] fuse: Unknown parameter 'gr��Rp_�Si�id'
[  761.532909][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2611'.
[  761.839785][T14277] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  761.862249][T14277] usb 1-1: device descriptor read/8, error -71
[  762.209531][T14277] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  762.243466][T14277] usb 1-1: device descriptor read/8, error -71
[  762.359184][T14277] usb usb1-port1: unable to enumerate USB device
[  762.597480][T16209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  762.648554][T16209] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  762.962285][ T5972] usb 4-1: USB disconnect, device number 45
[  763.239088][ T5890] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  763.373305][T16237] netdevsim netdevsim3: Direct firmware load for /
[  763.373305][T16237]  failed with error -2
[  763.386123][T16237] netdevsim netdevsim3: Falling back to sysfs fallback for: /
[  763.386123][T16237] 
[  763.431402][T16244] pimreg: entered allmulticast mode
[  763.438915][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  763.447800][T16244] pimreg: left allmulticast mode
[  763.454972][ T5890] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  763.482192][ T5890] usb 5-1: config 0 has no interface number 0
[  763.488359][ T5890] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  763.557461][ T5890] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  763.572183][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.590432][ T5890] usb 5-1: Product: syz
[  763.601310][ T5890] usb 5-1: Manufacturer: syz
[  763.612992][ T5890] usb 5-1: SerialNumber: syz
[  763.663020][ T5890] usb 5-1: config 0 descriptor??
[  763.732207][T16250] binder: 16247:16250 ioctl c0306201 200000000080 returned -14
[  763.899691][ T5890] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  763.938148][ T5890] em28xx 5-1:0.132: Video interface 132 found:
[  764.198188][ T5890] em28xx 5-1:0.132: unknown em28xx chip ID (39)
[  764.401246][T16250] binder: 16247:16250 ioctl d000941e 0 returned -22
[  764.454798][T16229] loop2: detected capacity change from 0 to 7
[  764.541134][T16229] Dev loop2: unable to read RDB block 7
[  764.559938][T16229]  loop2: unable to read partition table
[  764.576392][T16229] loop2: partition table beyond EOD, truncated
[  764.639526][T16229] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  764.673741][T16263] fuse: Bad value for 'fd'
[  764.883625][ T5890] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  764.922927][ T5890] em28xx 5-1:0.132: board has no eeprom
[  764.988867][ T5890] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  765.018087][ T5890] em28xx 5-1:0.132: analog set to bulk mode.
[  765.058921][ T6790] em28xx 5-1:0.132: Registering V4L2 extension
[  765.097480][ T5890] usb 5-1: USB disconnect, device number 43
[  765.159801][ T5890] em28xx 5-1:0.132: Disconnecting em28xx
[  765.557640][ T6790] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  765.608852][ T6790] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  765.629338][ T6790] em28xx 5-1:0.132: No AC97 audio processor
[  765.668208][ T6790] usb 5-1: Decoder not found
[  765.697586][ T6790] em28xx 5-1:0.132: failed to create media graph
[  765.737741][ T6790] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  765.753162][ T5972] psmouse serio5: Failed to reset mouse on : -5
[  765.813420][ T6790] em28xx 5-1:0.132: Remote control support is not available for this card.
[  765.827777][T16288] mmap: syz.1.2633 (16288): VmData 41783296 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  765.840696][ T5890] em28xx 5-1:0.132: Closing input extension
[  765.863431][ T5890] em28xx 5-1:0.132: Freeing device
[  765.869224][T16289] netlink: 'syz.1.2633': attribute type 23 has an invalid length.
[  766.153101][T16301] netlink: 'syz.0.2632': attribute type 6 has an invalid length.
[  766.169961][ T5890] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  766.279449][T10959] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  766.430951][T10959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  766.442293][T10959] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  766.460125][T10959] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[  766.470201][T10959] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.494870][T16307] random: crng reseeded on system resumption
[  766.543664][T10959] usb 3-1: Product: syz
[  766.548300][T10959] usb 3-1: Manufacturer: syz
[  766.554011][T10959] usb 3-1: SerialNumber: syz
[  766.565315][T10959] usb 3-1: config 0 descriptor??
[  766.581138][T10959] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (18ec:3288)
[  766.592616][T10959] uvcvideo 3-1:0.0: No valid video chain found.
[  766.668989][ T5890] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  766.780039][T10959] usb 3-1: USB disconnect, device number 37
[  766.831811][ T5890] usb 5-1: unable to get BOS descriptor or descriptor too short
[  766.844403][ T5890] usb 5-1: not running at top speed; connect to a high speed hub
[  766.865323][T16309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2639'.
[  766.887716][ T5890] usb 5-1: config 6 has an invalid interface number: 4 but max is 0
[  766.904689][ T5890] usb 5-1: config 6 has no interface number 0
[  766.924646][ T5890] usb 5-1: config 6 interface 4 altsetting 4 endpoint 0x5 has invalid maxpacket 1032, setting to 64
[  766.966616][T16312] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2639'.
[  766.986042][ T5890] usb 5-1: config 6 interface 4 altsetting 4 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  767.007528][ T5890] usb 5-1: config 6 interface 4 has no altsetting 0
[  767.023365][ T5890] usb 5-1: New USB device found, idVendor=1235, idProduct=0001, bcdDevice= 6.d0
[  767.034562][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.107443][ T5890] usb 5-1: Product: syz
[  767.111890][ T5890] usb 5-1: Manufacturer: syz
[  767.116521][ T5890] usb 5-1: SerialNumber: syz
[  767.135327][T16305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  767.183970][T16305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  767.793834][ T5890] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  767.868615][ T5890] usb 5-1: USB disconnect, device number 45
[  767.957784][ T5943] udevd[5943]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  769.409015][ T5972] misc userio: Buffer overflowed, userio client isn't keeping up
[  770.675503][ T5972] input: PS/2 Generic Mouse as /devices/serio5/input/input87
[  770.898932][ T5972] psmouse serio5: Failed to enable mouse on 
[  813.892159][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  813.899252][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  827.049789][T16326] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2644'.
[  827.268910][ T5890] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  827.411656][T16344] Invalid logical block size (44876)
[  827.458857][ T5890] usb 3-1: Using ep0 maxpacket: 16
[  827.468310][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  827.482352][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  827.498415][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  827.508244][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.539977][ T5890] usb 3-1: Product: syz
[  827.564069][ T5890] usb 3-1: Manufacturer: syz
[  827.574787][ T5890] usb 3-1: SerialNumber: syz
[  827.590031][ T5890] usb 3-1: config 0 descriptor??
[  827.607101][ T5890] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  827.624154][ T5890] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  827.631587][T10959] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  827.789570][T10959] usb 5-1: Using ep0 maxpacket: 16
[  827.801558][T10959] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  827.811650][T10959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.822842][T10959] usb 5-1: Product: syz
[  827.827556][T10959] usb 5-1: Manufacturer: syz
[  827.839629][T10959] usb 5-1: SerialNumber: syz
[  827.871622][T10959] r8152-cfgselector 5-1: Unknown version 0x0000
[  827.886247][T10959] r8152-cfgselector 5-1: config 0 descriptor??
[  828.008917][ T5890] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  828.016120][ T5890] em28xx 3-1:0.0: Config register raw data: 0x71
[  828.022961][ T5890] em28xx 3-1:0.0: I2S Audio (3 sample rate(s))
[  828.030011][ T5890] em28xx 3-1:0.0: No AC97 audio processor
[  828.250882][ T5890] usb 3-1: USB disconnect, device number 38
[  828.321272][T10959] r8152-cfgselector 5-1: Unknown version 0x0000
[  828.335566][T10959] r8152-cfgselector 5-1: bad CDC descriptors
[  828.351801][T10959] r8152-cfgselector 5-1: USB disconnect, device number 46
[  828.513921][T16362] netlink: 'syz.3.2653': attribute type 22 has an invalid length.
[  828.522994][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'.
[  828.594070][T16362] netlink: 'syz.3.2653': attribute type 22 has an invalid length.
[  828.602718][T16362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2653'.
[  828.723298][T16369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2654'.
[  828.972359][T10959] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  829.039513][T14277] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  829.134542][T10959] usb 4-1: Using ep0 maxpacket: 8
[  829.153612][T10959] usb 4-1: config 4 has an invalid interface number: 38 but max is 0
[  829.166113][T10959] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  829.181543][T10959] usb 4-1: config 4 has no interface number 0
[  829.187754][T10959] usb 4-1: config 4 interface 38 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  829.201472][T10959] usb 4-1: config 4 interface 38 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  829.215286][T10959] usb 4-1: config 4 interface 38 has no altsetting 0
[  829.224790][T14277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  829.239749][T10959] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=55.58
[  829.252850][T14277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  829.263512][T10959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.271796][T14277] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  829.281004][T10959] usb 4-1: Product: syz
[  829.285231][T10959] usb 4-1: Manufacturer: syz
[  829.290302][T14277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.299478][T10959] usb 4-1: SerialNumber: syz
[  829.308351][T14277] usb 3-1: config 0 descriptor??
[  829.547246][T10959] usb 4-1: USB disconnect, device number 46
[  829.636199][T16390] netlink: 'syz.0.2661': attribute type 1 has an invalid length.
[  829.699735][T16390] 8021q: adding VLAN 0 to HW filter on device bond9
[  829.797415][T16395] veth1_to_bond: entered allmulticast mode
[  830.613101][T16423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2669'.
[  830.699420][   T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  830.869343][   T10] usb 4-1: Using ep0 maxpacket: 16
[  830.878242][   T10] usb 4-1: config 0 has an invalid interface number: 129 but max is 0
[  830.889470][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  830.904006][   T10] usb 4-1: config 0 has no interface number 0
[  830.930040][   T10] usb 4-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  830.965841][T16435] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2671'.
[  831.147882][   T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=1165, bcdDevice=c1.d5
[  831.157162][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.165342][   T10] usb 4-1: Product: syz
[  831.172604][   T10] usb 4-1: Manufacturer: syz
[  831.182436][   T10] usb 4-1: SerialNumber: syz
[  831.203008][ T5890] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  831.204380][   T10] usb 4-1: config 0 descriptor??
[  831.244857][   T10] option 4-1:0.129: GSM modem (1-port) converter detected
[  831.400678][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  831.411738][ T5890] usb 5-1: config 0 has an invalid interface number: 230 but max is 0
[  831.430017][ T5890] usb 5-1: config 0 has no interface number 0
[  831.460430][ T5890] usb 5-1: config 0 interface 230 has no altsetting 0
[  831.496700][ T5890] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  831.530062][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.556459][ T5890] usb 5-1: Product: syz
[  831.572243][ T5890] usb 5-1: Manufacturer: syz
[  831.607752][ T5890] usb 5-1: SerialNumber: syz
[  831.637348][ T5890] usb 5-1: config 0 descriptor??
[  831.677795][ T5890] ums-usbat 5-1:0.230: USB Mass Storage device detected
[  831.716683][ T5890] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1
[  831.843618][T16395] veth1_to_bond: left allmulticast mode
[  831.888001][T14277] usbhid 3-1:0.0: can't add hid device: -71
[  831.895842][T14277] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  831.923450][T14277] usb 3-1: USB disconnect, device number 39
[  832.319626][T14277] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  832.469551][T14277] usb 3-1: device descriptor read/64, error -71
[  832.796745][T16463] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2673'.
[  832.812382][T16464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2679'.
[  832.949510][T14277] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  833.045374][T16466] batadv_slave_1: entered promiscuous mode
[  833.051787][T16468] batadv_slave_1: left promiscuous mode
[  833.059896][T16467] batadv_slave_1: entered promiscuous mode
[  833.100193][T16468] batadv_slave_1: left promiscuous mode
[  833.159562][T14277] usb 3-1: device descriptor read/64, error -71
[  833.269892][T14277] usb usb3-port1: attempt power cycle
[  833.369071][   T10] usb 4-1: USB disconnect, device number 47
[  833.382106][   T10] option 4-1:0.129: device disconnected
[  833.609712][T14277] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  833.650878][T14277] usb 3-1: device descriptor read/8, error -71
[  833.681895][T16478] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2682'.
[  833.899630][T14277] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  833.921724][T14277] usb 3-1: device descriptor read/8, error -71
[  833.999696][ T6790] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  834.029402][T14277] usb usb3-port1: unable to enumerate USB device
[  834.163622][ T6790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  834.177140][ T6790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  834.192197][ T6790] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  834.212759][ T6790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.241676][ T6790] usb 4-1: config 0 descriptor??
[  835.080900][ T5890] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5
[  835.166460][ T5890] usb 5-1: USB disconnect, device number 47
[  835.225011][ T6790] usbhid 4-1:0.0: can't add hid device: -71
[  835.234392][ T6790] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  835.282236][ T6790] usb 4-1: USB disconnect, device number 48
[  835.422527][T16486] x_tables: duplicate underflow at hook 4
[  835.536669][T16493] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2686'.
[  835.961383][T14277] usb 3-1: new low-speed USB device number 44 using dummy_hcd
[  835.970208][T10959] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  836.129652][T10959] usb 4-1: Using ep0 maxpacket: 8
[  836.136943][T14277] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  836.156466][T10959] usb 4-1: unable to get BOS descriptor or descriptor too short
[  836.181079][T14277] usb 3-1: config 0 has no interface number 0
[  836.187226][T14277] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  836.216855][T10959] usb 4-1: config index 0 descriptor too short (expected 9526, got 54)
[  836.236559][T10959] usb 4-1: config 0 has too many interfaces: 80, using maximum allowed: 32
[  836.246235][T14277] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  836.263341][T10959] usb 4-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config
[  836.279985][T14277] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  836.298121][T10959] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 80
[  836.308243][T14277] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  836.326785][T14277] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  836.343524][T10959] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57
[  836.360285][T10959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.369462][T14277] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  836.399746][T10959] usb 4-1: Product: syz
[  836.403961][T10959] usb 4-1: Manufacturer: syz
[  836.408601][T10959] usb 4-1: SerialNumber: syz
[  836.413945][T14277] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  836.424791][T14277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.434161][T10959] usb 4-1: config 0 descriptor??
[  836.450356][T14277] usb 3-1: config 0 descriptor??
[  836.460517][T16498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  836.467850][T16498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  836.509710][T14277] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  836.518792][ T6790] usb 5-1: new full-speed USB device number 48 using dummy_hcd
[  836.659568][T10959] usb 4-1: USB disconnect, device number 49
[  836.802746][ T6790] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  836.817197][ T6790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.825859][ T6790] usb 5-1: Product: syz
[  836.831678][ T6790] usb 5-1: Manufacturer: syz
[  836.836542][ T6790] usb 5-1: SerialNumber: syz
[  836.898091][ T6790] usb 5-1: config 0 descriptor??
[  836.915526][T14277] usb 3-1: USB disconnect, device number 44
[  836.927790][ T6790] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  836.947083][T14277] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[  837.137149][T16517] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  837.150646][T16517] tipc: Resetting bearer <eth:syzkaller0>
[  837.423539][ T5890] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  837.519541][T14277] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  837.648763][ T5890] usb 2-1: Using ep0 maxpacket: 8
[  837.660502][T16527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'.
[  837.690546][ T5890] usb 2-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  837.759526][T16527] hsr_slave_0: left promiscuous mode
[  837.787823][ T5890] usb 2-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  837.811416][T16527] hsr_slave_1: left promiscuous mode
[  837.831048][T14277] usb 1-1: Using ep0 maxpacket: 16
[  837.831828][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0
[  837.846918][T14277] usb 1-1: config 0 has an invalid interface number: 238 but max is 0
[  837.865819][ T5890] usb 2-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  837.879471][ T6790] gspca_stk1135: reg_w 0x0 err -110
[  837.896355][ T6790] gspca_stk1135: serial bus timeout: status=0x00
[  837.897857][T14277] usb 1-1: config 0 has no interface number 0
[  837.909776][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  837.915841][ T5890] usb 2-1: config 0 descriptor??
[  837.938719][ T6790] gspca_stk1135: Sensor write failed
[  837.949255][T14277] usb 1-1: config 0 interface 238 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  837.966067][ T6790] gspca_stk1135: serial bus timeout: status=0x00
[  837.986120][T14277] usb 1-1: config 0 interface 238 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[  838.014602][ T6790] gspca_stk1135: Sensor write failed
[  838.021405][ T5890] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count
[  838.041276][ T6790] gspca_stk1135: serial bus timeout: status=0x00
[  838.045463][T14277] usb 1-1: config 0 interface 238 has no altsetting 0
[  838.047649][ T6790] gspca_stk1135: Sensor read failed
[  838.096376][T14277] usb 1-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00
[  838.101568][ T6790] gspca_stk1135: serial bus timeout: status=0x00
[  838.141607][T14277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.148858][ T6790] gspca_stk1135: Sensor read failed
[  838.154932][ T6790] gspca_stk1135: Detected sensor type unknown (0x0)
[  838.192656][ T6790] gspca_stk1135: serial bus timeout: status=0x00
[  838.212915][ T6790] gspca_stk1135: Sensor read failed
[  838.225159][ T5890] usbhid 2-1:0.0: can't add hid device: -71
[  838.237157][T14277] usb 1-1: config 0 descriptor??
[  838.281217][ T5890] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  838.301326][ T6790] gspca_stk1135: serial bus timeout: status=0x00
[  838.307710][ T6790] gspca_stk1135: Sensor read failed
[  838.380174][ T5890] usb 2-1: USB disconnect, device number 46
[  838.388942][ T6790] gspca_stk1135: serial bus timeout: status=0x00
[  838.395317][ T6790] gspca_stk1135: Sensor write failed
[  838.449231][ T6790] gspca_stk1135: serial bus timeout: status=0x00
[  838.455620][ T6790] gspca_stk1135: Sensor write failed
[  838.519431][ T6790] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110
[  838.957126][T14277] logitech-djreceiver 0003:046D:C513.0031: unknown main item tag 0x0
[  838.979811][T14277] logitech-djreceiver 0003:046D:C513.0031: unknown main item tag 0x0
[  838.987966][T14277] logitech-djreceiver 0003:046D:C513.0031: unknown main item tag 0x0
[  839.031328][T14277] logitech-djreceiver 0003:046D:C513.0031: unknown main item tag 0x0
[  839.059898][T14277] logitech-djreceiver 0003:046D:C513.0031: unknown main item tag 0x0
[  839.081453][T14277] logitech-djreceiver 0003:046D:C513.0031: hidraw0: USB HID v0.05 Device [HID 046d:c513] on usb-dummy_hcd.0-1/input238
[  839.238877][ T6790] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  839.406423][T14277] usb 1-1: USB disconnect, device number 71
[  839.418912][ T6790] usb 2-1: Using ep0 maxpacket: 16
[  839.435006][ T6790] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  839.461070][ T6790] usb 2-1: config 0 interface 0 has no altsetting 0
[  839.470330][ T6790] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  839.480105][ T6790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.494270][ T6790] usb 2-1: config 0 descriptor??
[  839.639463][ T5890] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  839.808966][ T5890] usb 4-1: Using ep0 maxpacket: 32
[  839.816760][ T5890] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  839.828457][ T5890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  839.842893][ T5890] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  839.852489][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.860809][ T5890] usb 4-1: Product: 㠊
[  839.865287][ T5890] usb 4-1: Manufacturer: 虧ꚼ핹ⸯ洇䅴囱鰠⥵ꐁ봡珮厐绖뾏⏀掣錡ɀ޳䭹ꋰ㮬უ坺≇鬿樟ɿ눮짒啛깼⟝ƥ쯳䘊龻嶗ο渠ẝ჉䟛﫥樑꓉ᕡ꫿ꭑ绀≦ㇿᦕꍇ᧮鈶㠊亊鿿ש鎳抳㏳지튈ｑ그⸲䃈㞁䱛莬
[  839.890935][T14277] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  840.084119][   T10] usb 5-1: USB disconnect, device number 48
[  840.099489][T14277] usb 3-1: Using ep0 maxpacket: 16
[  840.112189][T14277] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  840.157664][T16534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  840.173843][T14277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  840.176585][T16534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  840.217569][T14277] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  840.249400][ T5890] usb 4-1: 0:2 : does not exist
[  840.254647][T14277] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.274024][T14277] usb 3-1: Product: syz
[  840.282362][T14277] usb 3-1: Manufacturer: syz
[  840.292253][T14277] usb 3-1: SerialNumber: syz
[  840.323017][T14277] usb 3-1: config 0 descriptor??
[  840.341259][T14277] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  840.342923][ T5890] usb 4-1: USB disconnect, device number 50
[  840.360542][T14277] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  840.362153][ T6790] usbhid 2-1:0.0: can't add hid device: -71
[  840.390018][ T6790] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  840.417913][ T6790] usb 2-1: USB disconnect, device number 47
[  840.444010][T16345] udevd[16345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  840.539526][   T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  840.736870][   T10] usb 5-1: config 0 has an invalid interface number: 197 but max is 0
[  840.746951][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  840.767244][   T10] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  840.779576][   T10] usb 5-1: config 0 has no interface number 1
[  840.785823][   T10] usb 5-1: config 0 interface 197 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  840.796958][   T10] usb 5-1: config 0 interface 197 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  840.813933][   T10] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42
[  840.848882][ T6790] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  840.849431][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  840.907264][   T10] usb 5-1: Product: syz
[  840.929607][   T10] usb 5-1: Manufacturer: syz
[  840.934299][   T10] usb 5-1: SerialNumber: syz
[  840.961463][T14277] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  840.981302][T14277] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  841.016172][   T10] usb 5-1: config 0 descriptor??
[  841.029558][T16555] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  841.052349][   T10] qmi_wwan 5-1:0.197: probe with driver qmi_wwan failed with error -22
[  841.068832][ T6790] usb 2-1: Using ep0 maxpacket: 32
[  841.099623][ T6790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  841.118759][ T6790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  841.164018][ T6790] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  841.164053][ T6790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  841.187781][ T6790] usb 2-1: config 0 descriptor??
[  841.239580][T14277] em28xx 3-1:0.0: AC97 command still being executed: not handled properly!
[  841.239612][T14277] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  841.239631][T14277] em28xx 3-1:0.0: No AC97 audio processor
[  841.274879][T16555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  841.277929][T16555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  841.280453][T14277] usb 5-1: USB disconnect, device number 49
[  841.425183][T16569] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  841.601266][ T6790] usbhid 2-1:0.0: can't add hid device: -32
[  841.609933][ T6790] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[  842.729164][T16591] CUSE: unknown device info "�KJ�H+��ۤ2Lh��nL�1�`�Cc��n�����8���0���(�3նi��>f���_ٮ,��
�<�_e�F��"
[  842.729188][T16591] CUSE: unknown device info "3�ܟ�,��̘�"
[  842.729201][T16591] CUSE: unknown device info "J���2SZ�� !e/��������J�+-n��a4����D�|G$��5O~�q	��
[  842.729201][T16591] f����z��X�SA�x��j��T�ǔ��w���xR�ɐQ��(hҏj	p�VdY0��|M?2J��I�v�^
R�@��"
[  842.729222][T16591] CUSE: unknown device info "!To�}ݝ&|L+U��o��ϲ���"��FstV�:׌E�gJ�����<@c�����4�T�M�M|�����"
[  842.729238][T16591] CUSE: DEVNAME unspecified
[  843.083174][T16598] kvm: requested 143314 ns i8254 timer period limited to 200000 ns
[  843.092931][T16598] kvm: requested 180190 ns i8254 timer period limited to 200000 ns
[  843.101953][T16598] kvm: requested 196952 ns i8254 timer period limited to 200000 ns
[  843.110851][T16598] kvm: requested 182704 ns i8254 timer period limited to 200000 ns
[  843.243809][ T6790] usb 3-1: USB disconnect, device number 45
[  843.262033][ T6790] em28xx 3-1:0.0: Disconnecting em28xx
[  843.280293][T10958] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  843.290147][ T6790] em28xx 3-1:0.0: Freeing device
[  843.434180][T16608] bridge0: port 3(veth0_to_bridge) entered blocking state
[  843.443618][T16608] bridge0: port 3(veth0_to_bridge) entered disabled state
[  843.459473][T10958] usb 1-1: Using ep0 maxpacket: 32
[  843.474488][T10958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  843.494171][T16608] veth0_to_bridge: entered allmulticast mode
[  843.503888][T10958] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  843.524521][T16608] veth0_to_bridge: entered promiscuous mode
[  843.537318][T10958] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  843.553442][T16611] xt_SECMARK: invalid mode: 2
[  843.578459][   T10] usb 2-1: USB disconnect, device number 48
[  843.593116][T16608] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  843.596847][T10958] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  843.645931][T10958] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  843.684089][T10958] usb 1-1: config 0 descriptor??
[  843.691841][T16608] bridge0: port 3(veth0_to_bridge) entered blocking state
[  843.700064][T16608] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  843.925998][T16623] netlink: 'syz.1.2724': attribute type 12 has an invalid length.
[  844.174513][T10958] ft260 0003:0403:6030.0032: unknown main item tag 0x0
[  844.183565][T10958] ft260 0003:0403:6030.0032: unknown main item tag 0x0
[  844.190926][ T6790] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  844.221435][T10958] ft260 0003:0403:6030.0032: unknown main item tag 0x0
[  844.228584][T10958] ft260 0003:0403:6030.0032: unknown main item tag 0x0
[  844.263788][T10958] ft260 0003:0403:6030.0032: unknown main item tag 0x0
[  844.361457][ T6790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  844.375237][T16600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  844.393886][ T6790] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  844.404303][T16600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  844.428775][ T6790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.570776][ T6790] usb 2-1: config 0 descriptor??
[  844.576013][T10958] ft260 0003:0403:6030.0032: failed to retrieve chip version
[  844.594918][T10958] ft260 0003:0403:6030.0032: probe with driver ft260 failed with error -71
[  844.642851][T10958] usb 1-1: USB disconnect, device number 72
[  844.859709][ T5890] usb 3-1: new full-speed USB device number 46 using dummy_hcd
[  845.009042][ T5890] usb 3-1: device descriptor read/64, error -71
[  845.029835][ T6790] usbhid 2-1:0.0: can't add hid device: -71
[  845.041558][ T6790] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  845.071567][ T6790] usb 2-1: USB disconnect, device number 49
[  845.249407][ T5890] usb 3-1: new full-speed USB device number 47 using dummy_hcd
[  845.378821][ T5890] usb 3-1: device descriptor read/64, error -71
[  845.489159][ T5890] usb usb3-port1: attempt power cycle
[  845.659160][   T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  845.789462][   T10] usb 5-1: device descriptor read/64, error -71
[  845.848902][ T5890] usb 3-1: new full-speed USB device number 48 using dummy_hcd
[  845.871493][ T5890] usb 3-1: device descriptor read/8, error -71
[  845.949494][T10958] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  846.029442][   T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  846.101766][T10958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  846.113609][T10958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  846.121822][ T5890] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  846.130687][T10958] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00
[  846.141548][T10958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  846.153988][T10958] usb 2-1: config 0 descriptor??
[  846.159775][ T5890] usb 3-1: device descriptor read/8, error -71
[  846.166623][   T10] usb 5-1: device descriptor read/64, error -71
[  846.270285][ T5890] usb usb3-port1: unable to enumerate USB device
[  846.289845][   T10] usb usb5-port1: attempt power cycle
[  846.458895][ T5890] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  846.585452][T10958] aquacomputer_d5next 0003:0C70:F00D.0033: hidraw0: USB HID v0.00 Device [HID 0c70:f00d] on usb-dummy_hcd.1-1/input0
[  846.598894][ T5890] usb 1-1: device descriptor read/64, error -71
[  846.639706][   T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  846.680493][   T10] usb 5-1: device descriptor read/8, error -71
[  846.781029][T16648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  846.790265][T16648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  846.801143][T10958] usb 2-1: USB disconnect, device number 50
[  846.852903][ T5890] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  846.919399][   T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  846.939296][T14277] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  846.948016][   T10] usb 5-1: device descriptor read/8, error -71
[  846.989007][ T5890] usb 1-1: device descriptor read/64, error -71
[  847.059876][   T10] usb usb5-port1: unable to enumerate USB device
[  847.101796][T14277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  847.112912][ T5890] usb usb1-port1: attempt power cycle
[  847.120418][T14277] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  847.131319][T14277] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  847.141583][T14277] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  847.152573][T14277] usb 4-1: config 0 descriptor??
[  847.448849][ T5890] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  847.469515][ T5890] usb 1-1: device descriptor read/8, error -71
[  847.568213][T14277] hid-steam 0003:28DE:1142.0034: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  847.639744][T14277] hid-steam 0003:28DE:1142.0034: Steam wireless receiver connected
[  847.673413][T14277] hid-steam 0003:28DE:1142.0035: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  847.687092][T16662] pimreg: tun_chr_ioctl cmd 1074025677
[  847.693065][T16662] pimreg: linktype set to 6
[  847.739130][ T5890] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  847.801257][ T5890] usb 1-1: device descriptor read/8, error -71
[  847.919273][ T5890] usb usb1-port1: unable to enumerate USB device
[  847.953996][T16655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2733'.
[  848.003230][T16655] vlan4: left promiscuous mode
[  848.008631][T16655] bridge0: port 2(vlan4) entered disabled state
[  848.018485][T16655] bridge_slave_0: left promiscuous mode
[  848.024852][T16655] bridge0: port 1(bridge_slave_0) entered disabled state
[  848.252436][T16655] bond0: (slave bridge0): Releasing backup interface
[  848.343901][ T6790] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  848.529917][ T6790] usb 3-1: Using ep0 maxpacket: 8
[  848.555302][T16677] bridge3: entered promiscuous mode
[  848.562822][T16677] bridge3: entered allmulticast mode
[  848.594409][ T6790] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  848.619923][ T6790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  848.644121][ T6790] usb 3-1: Product: syz
[  848.662452][ T5890] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  848.679307][ T6790] usb 3-1: Manufacturer: syz
[  848.694772][ T6790] usb 3-1: SerialNumber: syz
[  848.704118][ T6790] usb 3-1: config 0 descriptor??
[  848.810593][T14277] usb 4-1: reset high-speed USB device number 51 using dummy_hcd
[  848.862652][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  848.878972][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  848.909859][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  848.926882][ T6790] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  848.942417][ T5890] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  848.953861][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  848.997448][ T5890] usb 2-1: config 0 descriptor??
[  849.349590][   T30] kauditd_printk_skb: 44 callbacks suppressed
[  849.349612][   T30] audit: type=1400 audit(1768887180.601:849): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D28 pid=16668 comm="syz.2.2737"
[  849.467171][ T5890] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  849.769473][T10959] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  849.919563][T10959] usb 1-1: Using ep0 maxpacket: 32
[  849.927008][T10959] usb 1-1: config 0 has an invalid interface number: 23 but max is 0
[  849.936089][T10959] usb 1-1: config 0 has no interface number 0
[  849.945997][T10959] usb 1-1: config 0 interface 23 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  849.958074][T10959] usb 1-1: config 0 interface 23 has no altsetting 0
[  849.967022][T10959] usb 1-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=a9.9b
[  849.988201][T10959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.005857][T10959] usb 1-1: config 0 descriptor??
[  850.142715][ T6790] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  850.662626][T16674] usb 2-1: string descriptor 0 read error: -2
[  850.746154][T16701] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2740'.
[  850.848590][T16698] syzkaller1: entered promiscuous mode
[  850.855248][T16698] syzkaller1: entered allmulticast mode
[  850.939604][ T6790] usb 2-1: reset high-speed USB device number 51 using dummy_hcd
[  851.071684][ T6790] usb 2-1: device descriptor read/64, error -32
[  851.329796][ T6790] usb 2-1: reset high-speed USB device number 51 using dummy_hcd
[  851.400410][ T5890] usb 3-1: USB disconnect, device number 50
[  851.418301][T10959] usb 1-1: string descriptor 0 read error: -71
[  851.470504][ T6790] usb 2-1: device descriptor read/64, error -32
[  851.492836][T10959] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[  851.513520][T10959] gspca_mr97310a: reg write [21] error -22
[  851.563668][T10959] mr97310a 1-1:0.23: probe with driver mr97310a failed with error -22
[  851.593010][T10959] usb 1-1: USB disconnect, device number 77
[  851.708864][ T6790] usb 2-1: reset high-speed USB device number 51 using dummy_hcd
[  851.729070][ T6790] usb 2-1: device descriptor read/8, error -32
[  851.849143][ T5890] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  852.021107][   T30] audit: type=1326 audit(1768887183.271:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de138f749 code=0x7ffc0000
[  852.046793][ T5890] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[  852.055319][ T5890] usb 3-1: config 0 has no interface number 0
[  852.062205][   T30] audit: type=1326 audit(1768887183.271:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de138f749 code=0x7ffc0000
[  852.086523][   T30] audit: type=1326 audit(1768887183.271:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f0de138f749 code=0x7ffc0000
[  852.086580][   T30] audit: type=1326 audit(1768887183.271:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de138f749 code=0x7ffc0000
[  852.089002][   T30] audit: type=1326 audit(1768887183.271:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f0de138f749 code=0x7ffc0000
[  852.091586][   T30] audit: type=1326 audit(1768887183.271:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de138f749 code=0x7ffc0000
[  852.186879][ T5890] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db70, bcdDevice=58.d0
[  852.197953][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.208147][ T5890] usb 3-1: Product: syz
[  852.212449][T16715] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  852.212461][ T5890] usb 3-1: Manufacturer: syz
[  852.212482][ T5890] usb 3-1: SerialNumber: syz
[  852.233672][ T5890] usb 3-1: config 0 descriptor??
[  852.245845][   T30] audit: type=1326 audit(1768887183.271:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0de138df90 code=0x7ffc0000
[  852.275731][ T5890] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2' in warm state.
[  852.292105][ T5890] usb 3-1: setting power ON
[  852.296700][ T5890] dvb-usb: bulk message failed: -22 (2/0)
[  852.334573][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  852.350770][   T10] usb 4-1: USB disconnect, device number 51
[  852.359897][ T5890] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T NANO2)
[  852.368172][ T5890] usb 3-1: media controller created
[  852.375657][   T10] hid-steam 0003:28DE:1142.0034: Steam wireless receiver disconnected
[  852.414827][   T30] audit: type=1326 audit(1768887183.291:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de138f749 code=0x7ffc0000
[  852.481858][   T30] audit: type=1326 audit(1768887183.311:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16711 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0de138f749 code=0x7ffc0000
[  852.505624][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  852.642277][ T5890] cxusb: set interface failed
[  852.648193][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[  852.660621][   T44] usb 2-1: USB disconnect, device number 51
[  852.673150][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[  852.681035][ T5890] usb 3-1: bluebird_gpio_write failed.
[  852.747601][T16729] xt_connbytes: Forcing CT accounting to be enabled
[  852.773197][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[  852.785715][ T5890] usb 3-1: bluebird_gpio_write failed.
[  852.808791][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[  852.849011][ T5890] usb 3-1: bluebird_gpio_write failed.
[  852.855207][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[  852.861172][ T5890] usb 3-1: bluebird_gpio_write failed.
[  852.889159][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[  852.895450][ T5890] usb 3-1: bluebird_gpio_write failed.
[  852.911377][ T5890] dvb-usb: bulk message failed: -22 (5/0)
[  852.941106][ T5890] zl10353_read_register: readreg error (reg=127, ret==-121)
[  853.278550][ T5890] DVB: Unable to find symbol mt352_attach()
[  853.320658][ T5890] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T NANO2'
[  853.478875][   T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  853.526443][T16755] syz.3.2755: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  853.559663][T16755] CPU: 0 UID: 0 PID: 16755 Comm: syz.3.2755 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  853.559703][T16755] Tainted: [L]=SOFTLOCKUP
[  853.559712][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  853.559728][T16755] Call Trace:
[  853.559739][T16755]  <TASK>
[  853.559750][T16755]  dump_stack_lvl+0xe8/0x150
[  853.559789][T16755]  warn_alloc+0x214/0x310
[  853.559817][T16755]  ? stack_trace_save+0x9c/0xe0
[  853.559858][T16755]  ? __pfx_warn_alloc+0x10/0x10
[  853.559891][T16755]  ? kasan_save_track+0x4f/0x80
[  853.559913][T16755]  ? kasan_save_track+0x3e/0x80
[  853.559935][T16755]  ? __kasan_kmalloc+0x93/0xb0
[  853.559959][T16755]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  853.559983][T16755]  ? xskq_create+0x56/0x170
[  853.560005][T16755]  ? xsk_setsockopt+0x4dc/0x8d0
[  853.560039][T16755]  ? do_sock_setsockopt+0x17c/0x1b0
[  853.560067][T16755]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  853.560095][T16755]  ? do_syscall_64+0xec/0xf80
[  853.560124][T16755]  __vmalloc_node_range_noprof+0x134/0x16a0
[  853.560183][T16755]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  853.560215][T16755]  ? __kasan_kmalloc+0x93/0xb0
[  853.560248][T16755]  vmalloc_user_noprof+0xad/0xf0
[  853.560273][T16755]  ? xskq_create+0xbf/0x170
[  853.560297][T16755]  xskq_create+0xbf/0x170
[  853.560324][T16755]  xsk_init_queue+0xb0/0x110
[  853.560365][T16755]  xsk_setsockopt+0x4dc/0x8d0
[  853.560406][T16755]  ? __pfx_xsk_setsockopt+0x10/0x10
[  853.560442][T16755]  ? __pfx_aa_sk_perm+0x10/0x10
[  853.560477][T16755]  ? aa_sock_opt_perm+0xff/0x1a0
[  853.560514][T16755]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  853.560546][T16755]  ? __pfx_xsk_setsockopt+0x10/0x10
[  853.560585][T16755]  do_sock_setsockopt+0x17c/0x1b0
[  853.560620][T16755]  __x64_sys_setsockopt+0x13f/0x1b0
[  853.560657][T16755]  do_syscall_64+0xec/0xf80
[  853.560684][T16755]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.560708][T16755]  ? trace_irq_disable+0x37/0x100
[  853.560740][T16755]  ? clear_bhb_loop+0x60/0xb0
[  853.560769][T16755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  853.560793][T16755] RIP: 0033:0x7f0de138f749
[  853.560815][T16755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  853.560836][T16755] RSP: 002b:00007f0ddf5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  853.560862][T16755] RAX: ffffffffffffffda RBX: 00007f0de15e6090 RCX: 00007f0de138f749
[  853.560881][T16755] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  853.560896][T16755] RBP: 00007f0de1413f91 R08: 0000000000000004 R09: 0000000000000000
[  853.560912][T16755] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  853.560928][T16755] R13: 00007f0de15e6128 R14: 00007f0de15e6090 R15: 00007f0de170fa28
[  853.560966][T16755]  </TASK>
[  853.561900][T16755] Mem-Info:
[  853.600771][   T44] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  853.949359][T16755] active_anon:7514 inactive_anon:3 isolated_anon:0
[  853.949359][T16755]  active_file:12098 inactive_file:48292 isolated_file:0
[  853.949359][T16755]  unevictable:807 dirty:140 writeback:0
[  853.949359][T16755]  slab_reclaimable:9947 slab_unreclaimable:105249
[  853.949359][T16755]  mapped:33649 shmem:1444 pagetables:1815
[  853.949359][T16755]  sec_pagetables:0 bounce:0
[  853.949359][T16755]  kernel_misc_reclaimable:0
[  853.949359][T16755]  free:1286403 free_pcp:16392 free_cma:0
[  854.028808][ T5890] rc_core: IR keymap rc-dvico-portable not found
[  854.029205][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  854.035213][ T5890] Registered IR keymap rc-empty
[  854.110698][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  854.121804][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  854.140259][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  854.150183][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.170488][T16755] Node 0 active_anon:30560kB inactive_anon:12kB active_file:48216kB inactive_file:192960kB unevictable:1692kB isolated(anon):0kB isolated(file):0kB mapped:134396kB dirty:600kB writeback:0kB shmem:4240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14808kB pagetables:7048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  854.207975][   T10] usb 1-1: config 0 descriptor??
[  854.240062][ T5890] rc rc0: DViCO FusionHDTV DVB-T NANO2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  854.259425][T16755] Node 1 active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  854.311526][   T44] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  854.334313][   T44] usb 5-1: config 0 has no interface number 0
[  854.341031][ T5890] input: DViCO FusionHDTV DVB-T NANO2 as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input90
[  854.369529][   T44] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4
[  854.436860][   T44] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  854.447715][   T44] usb 5-1: config 0 interface 113 has no altsetting 0
[  854.460730][ T5890] dvb-usb: schedule remote query interval to 100 msecs.
[  854.478557][ T5890] usb 3-1: setting power OFF
[  854.484329][T16755] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  854.515109][ T5890] dvb-usb: bulk message failed: -22 (2/0)
[  854.532595][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[  854.538543][ T5890] usb 3-1: bluebird_gpio_write failed.
[  854.555569][ T5890] dvb-usb: DViCO FusionHDTV DVB-T NANO2 successfully initialized and connected.
[  854.571331][   T44] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  854.584266][ T5982] dvb-usb: bulk message failed: -22 (4/0)
[  854.593724][ T5982] cxusb: i2c read failed
[  854.624800][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.684097][   T44] usb 5-1: Product: syz
[  854.697637][   T44] usb 5-1: Manufacturer: syz
[  854.708649][   T44] usb 5-1: SerialNumber: syz
[  854.717577][T16755] lowmem_reserve[]:
[  854.722613][ T5982] dvb-usb: bulk message failed: -22 (4/0)
[  854.722659][ T5982] cxusb: i2c read failed
[  854.764055][   T44] usb 5-1: config 0 descriptor??
[  854.805747][    C1] usb 5-1: NFC: Urb failure (status -71)
[  854.838146][   T44] usb 5-1: NFC: Unable to get FW version
[  854.855768][   T44] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90
[  854.890007][ T5982] dvb-usb: bulk message failed: -22 (4/0)
[  854.895811][ T5982] cxusb: i2c read failed
[  854.935161][   T10] plantronics 0003:047F:FFFF.0037: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  855.001371][T16755]  0 2499 2501 2501 2501
[  855.005735][T16755] Node 0 DMA32 free:1258696kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31864kB inactive_anon:12kB active_file:48216kB inactive_file:192960kB unevictable:1692kB writepending:600kB zspages:276kB present:3129332kB managed:2559464kB mlocked:0kB bounce:0kB free_pcp:29568kB local_pcp:17712kB free_cma:0kB
[  855.060825][ T5890] dvb-usb: bulk message failed: -22 (4/0)
[  855.066717][ T5890] cxusb: i2c read failed
[  855.141559][T16744] 
[  855.143961][T16744] =====================================================
[  855.150934][T16744] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  855.152252][T16755] lowmem_reserve[]: 0 0
[  855.158436][T16744] syzkaller #0 Tainted: G             L     
[  855.158453][T16744] -----------------------------------------------------
[  855.175576][T16744] syz.0.2754/16744 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  855.183387][T16744] ffff8880243032b8 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  855.192119][T16744] 
[  855.192119][T16744] and this task is already holding:
[  855.199528][T16744] ffff888146bb7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[  855.209358][T16744] which would create a new lock dependency:
[  855.215272][T16744]  (&dev->event_lock#2){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  855.223242][T16744] 
[  855.223242][T16744] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  855.232971][T16744]  (&dev->event_lock#2){..-.}-{3:3}
[  855.233007][T16744] 
[  855.233007][T16744] ... which became SOFTIRQ-irq-safe at:
[  855.245960][T16744]   lock_acquire+0x107/0x340
[  855.250572][T16744]   _raw_spin_lock_irqsave+0x40/0x60
[  855.255877][T16744]   input_event+0x76/0xe0
[  855.260261][T16744]   atp_complete_geyser_3_4+0x11f2/0x1e80
[  855.266023][T16744]   __usb_hcd_giveback_urb+0x376/0x540
[  855.271514][T16744]   dummy_timer+0x85f/0x45b0
[  855.276149][T16744]   __hrtimer_run_queues+0x51c/0xc30
[  855.281466][T16744]   hrtimer_run_softirq+0x187/0x2b0
[  855.286684][T16744]   handle_softirqs+0x22b/0x7c0
[  855.291550][T16744]   __irq_exit_rcu+0x60/0x150
[  855.296253][T16744]   irq_exit_rcu+0x9/0x30
[  855.300591][T16744]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  855.306316][T16744]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  855.312403][T16744]   _raw_spin_unlock_irqrestore+0x47/0x80
[  855.318136][T16744]   dummy_urb_enqueue+0x58a/0x780
[  855.323270][T16744]   usb_hcd_submit_urb+0x328/0x1b80
[  855.328495][T16744]   atp_open+0x63/0xc0
[  855.332588][T16744]   input_open_device+0x1d3/0x390
[  855.337637][T16744]   mousedev_open_device+0xcc/0x150
[  855.342855][T16744]   mousedev_open+0x2ef/0x4a0
[  855.347552][T16744]   chrdev_open+0x4cc/0x5e0
[  855.352162][T16744]   do_dentry_open+0x7ce/0x1420
[  855.357030][T16744]   vfs_open+0x3b/0x340
[  855.361202][T16744]   path_openat+0x340e/0x3dd0
[  855.365885][T16744]   do_filp_open+0x1fa/0x410
[  855.370480][T16744]   do_sys_openat2+0x121/0x200
[  855.375265][T16744]   __x64_sys_openat+0x138/0x170
[  855.380226][T16744]   do_syscall_64+0xec/0xf80
[  855.384829][T16744]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.390818][T16744] 
[  855.390818][T16744] to a SOFTIRQ-irq-unsafe lock:
[  855.397852][T16744]  (tasklist_lock){.+.+}-{3:3}
[  855.397881][T16744] 
[  855.397881][T16744] ... which became SOFTIRQ-irq-unsafe at:
[  855.410533][T16744] ...
[  855.410542][T16744]   lock_acquire+0x107/0x340
[  855.417732][T16744]   _raw_read_lock+0x36/0x50
[  855.422340][T16744]   __do_wait+0xde/0x740
[  855.426606][T16744]   do_wait+0x1e8/0x4f0
[  855.430794][T16744]   kernel_wait+0xab/0x170
[  855.435233][T16744]   call_usermodehelper_exec_work+0xbe/0x230
[  855.441226][T16744]   process_scheduled_works+0xad1/0x1770
[  855.446980][T16744]   worker_thread+0x8a0/0xda0
[  855.451675][T16744]   kthread+0x711/0x8a0
[  855.455852][T16744]   ret_from_fork+0x510/0xa50
[  855.460545][T16744]   ret_from_fork_asm+0x1a/0x30
[  855.465424][T16744] 
[  855.465424][T16744] other info that might help us debug this:
[  855.465424][T16744] 
[  855.475662][T16744] Chain exists of:
[  855.475662][T16744]   &dev->event_lock#2 --> &new->fa_lock --> tasklist_lock
[  855.475662][T16744] 
[  855.488640][T16744]  Possible interrupt unsafe locking scenario:
[  855.488640][T16744] 
[  855.496973][T16744]        CPU0                    CPU1
[  855.502365][T16744]        ----                    ----
[  855.507749][T16744]   lock(tasklist_lock);
[  855.512010][T16744]                                local_irq_disable();
[  855.518795][T16744]                                lock(&dev->event_lock#2);
[  855.526024][T16744]                                lock(&new->fa_lock);
[  855.532804][T16744]   <Interrupt>
[  855.536280][T16744]     lock(&dev->event_lock#2);
[  855.541166][T16744] 
[  855.541166][T16744]  *** DEADLOCK ***
[  855.541166][T16744] 
[  855.549327][T16744] 6 locks held by syz.0.2754/16744:
[  855.554543][T16744]  #0: ffff888029d29118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[  855.563710][T16744]  #1: ffff888146bb7230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[  855.574109][T16744]  #2: ffffffff8df41ae0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[  855.583786][T16744]  #3: ffffffff8df41ae0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[  855.593377][T16744]  #4: ffffffff8df41ae0 (rcu_read_lock){....}-{1:3}, at: mousedev_notify_readers+0x2c/0xc00
[  855.603487][T16744]  #5: ffffffff8df41ae0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  855.612571][T16744] 
[  855.612571][T16744] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  855.622978][T16744] -> (&dev->event_lock#2){..-.}-{3:3} {
[  855.628559][T16744]    IN-SOFTIRQ-W at:
[  855.632550][T16744]                     lock_acquire+0x107/0x340
[  855.638727][T16744]                     _raw_spin_lock_irqsave+0x40/0x60
[  855.645601][T16744]                     input_event+0x76/0xe0
[  855.651521][T16744]                     atp_complete_geyser_3_4+0x11f2/0x1e80
[  855.658841][T16744]                     __usb_hcd_giveback_urb+0x376/0x540
[  855.665978][T16744]                     dummy_timer+0x85f/0x45b0
[  855.672145][T16744]                     __hrtimer_run_queues+0x51c/0xc30
[  855.679190][T16744]                     hrtimer_run_softirq+0x187/0x2b0
[  855.685991][T16744]                     handle_softirqs+0x22b/0x7c0
[  855.692421][T16744]                     __irq_exit_rcu+0x60/0x150
[  855.698685][T16744]                     irq_exit_rcu+0x9/0x30
[  855.704602][T16744]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[  855.711903][T16744]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  855.719559][T16744]                     _raw_spin_unlock_irqrestore+0x47/0x80
[  855.726864][T16744]                     dummy_urb_enqueue+0x58a/0x780
[  855.733481][T16744]                     usb_hcd_submit_urb+0x328/0x1b80
[  855.740283][T16744]                     atp_open+0x63/0xc0
[  855.745945][T16744]                     input_open_device+0x1d3/0x390
[  855.752557][T16744]                     mousedev_open_device+0xcc/0x150
[  855.759346][T16744]                     mousedev_open+0x2ef/0x4a0
[  855.765608][T16744]                     chrdev_open+0x4cc/0x5e0
[  855.771694][T16744]                     do_dentry_open+0x7ce/0x1420
[  855.778130][T16744]                     vfs_open+0x3b/0x340
[  855.783864][T16744]                     path_openat+0x340e/0x3dd0
[  855.790127][T16744]                     do_filp_open+0x1fa/0x410
[  855.796304][T16744]                     do_sys_openat2+0x121/0x200
[  855.802657][T16744]                     __x64_sys_openat+0x138/0x170
[  855.809177][T16744]                     do_syscall_64+0xec/0xf80
[  855.815356][T16744]                     entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.822914][T16744]    INITIAL USE at:
[  855.826933][T16744]                    lock_acquire+0x107/0x340
[  855.833021][T16744]                    _raw_spin_lock_irqsave+0x40/0x60
[  855.839801][T16744]                    input_inject_event+0xa5/0x340
[  855.846329][T16744]                    kbd_led_trigger_activate+0xbc/0x100
[  855.853367][T16744]                    led_trigger_set+0x52d/0x950
[  855.859718][T16744]                    led_trigger_set_default+0x260/0x2a0
[  855.866766][T16744]                    led_classdev_register_ext+0x73d/0x960
[  855.873986][T16744]                    input_leds_connect+0x517/0x790
[  855.880597][T16744]                    input_register_device+0xd00/0x1170
[  855.887550][T16744]                    atkbd_connect+0x73b/0xa50
[  855.893728][T16744]                    serio_driver_probe+0x82/0xd0
[  855.900150][T16744]                    really_probe+0x26d/0xad0
[  855.906226][T16744]                    __driver_probe_device+0x18c/0x320
[  855.913096][T16744]                    driver_probe_device+0x4f/0x240
[  855.919708][T16744]                    __driver_attach+0x349/0x650
[  855.926047][T16744]                    bus_for_each_dev+0x233/0x2b0
[  855.932493][T16744]                    serio_handle_event+0x1f9/0x8d0
[  855.939098][T16744]                    process_scheduled_works+0xad1/0x1770
[  855.946230][T16744]                    worker_thread+0x8a0/0xda0
[  855.952394][T16744]                    kthread+0x711/0x8a0
[  855.958043][T16744]                    ret_from_fork+0x510/0xa50
[  855.964212][T16744]                    ret_from_fork_asm+0x1a/0x30
[  855.970565][T16744]  }
[  855.973079][T16744]  ... key      at: [<ffffffff99c4a560>] input_allocate_device.__key.6+0x0/0x20
[  855.982125][T16744] 
[  855.982125][T16744] the dependencies between the lock to be acquired
[  855.982135][T16744]  and SOFTIRQ-irq-unsafe lock:
[  855.995761][T16744]   -> (tasklist_lock){.+.+}-{3:3} {
[  856.001190][T16744]      HARDIRQ-ON-R at:
[  856.005358][T16744]                         lock_acquire+0x107/0x340
[  856.011877][T16744]                         _raw_read_lock+0x36/0x50
[  856.018382][T16744]                         __do_wait+0xde/0x740
[  856.024585][T16744]                         do_wait+0x1e8/0x4f0
[  856.030709][T16744]                         kernel_wait+0xab/0x170
[  856.037055][T16744]                         call_usermodehelper_exec_work+0xbe/0x230
[  856.044966][T16744]                         process_scheduled_works+0xad1/0x1770
[  856.052524][T16744]                         worker_thread+0x8a0/0xda0
[  856.059134][T16744]                         kthread+0x711/0x8a0
[  856.065227][T16744]                         ret_from_fork+0x510/0xa50
[  856.071857][T16744]                         ret_from_fork_asm+0x1a/0x30
[  856.078644][T16744]      SOFTIRQ-ON-R at:
[  856.082815][T16744]                         lock_acquire+0x107/0x340
[  856.089323][T16744]                         _raw_read_lock+0x36/0x50
[  856.095839][T16744]                         __do_wait+0xde/0x740
[  856.102008][T16744]                         do_wait+0x1e8/0x4f0
[  856.108097][T16744]                         kernel_wait+0xab/0x170
[  856.114446][T16744]                         call_usermodehelper_exec_work+0xbe/0x230
[  856.122362][T16744]                         process_scheduled_works+0xad1/0x1770
[  856.129929][T16744]                         worker_thread+0x8a0/0xda0
[  856.136628][T16744]                         kthread+0x711/0x8a0
[  856.142717][T16744]                         ret_from_fork+0x510/0xa50
[  856.149319][T16744]                         ret_from_fork_asm+0x1a/0x30
[  856.156117][T16744]      INITIAL USE at:
[  856.160198][T16744]                        lock_acquire+0x107/0x340
[  856.166640][T16744]                        _raw_write_lock_irq+0x3d/0x50
[  856.173506][T16744]                        copy_process+0x2185/0x3950
[  856.180119][T16744]                        kernel_clone+0x21e/0x820
[  856.186559][T16744]                        user_mode_thread+0xdd/0x140
[  856.193266][T16744]                        rest_init+0x23/0x300
[  856.199365][T16744]                        start_kernel+0x381/0x3d0
[  856.205804][T16744]                        x86_64_start_reservations+0x24/0x30
[  856.213192][T16744]                        x86_64_start_kernel+0x143/0x1c0
[  856.220245][T16744]                        common_startup_64+0x13e/0x147
[  856.227122][T16744]      INITIAL READ USE at:
[  856.231636][T16744]                             lock_acquire+0x107/0x340
[  856.238497][T16744]                             _raw_read_lock+0x36/0x50
[  856.245371][T16744]                             __do_wait+0xde/0x740
[  856.251893][T16744]                             do_wait+0x1e8/0x4f0
[  856.258331][T16744]                             kernel_wait+0xab/0x170
[  856.265024][T16744]                             call_usermodehelper_exec_work+0xbe/0x230
[  856.273282][T16744]                             process_scheduled_works+0xad1/0x1770
[  856.281193][T16744]                             worker_thread+0x8a0/0xda0
[  856.288146][T16744]                             kthread+0x711/0x8a0
[  856.294577][T16744]                             ret_from_fork+0x510/0xa50
[  856.301524][T16744]                             ret_from_fork_asm+0x1a/0x30
[  856.308656][T16744]    }
[  856.311339][T16744]    ... key      at: [<ffffffff8dc0c058>] tasklist_lock+0x18/0x40
[  856.319295][T16744]    ... acquired at:
[  856.323288][T16744]    _raw_read_lock+0x36/0x50
[  856.327986][T16744]    send_sigurg+0x12b/0x420
[  856.332611][T16744]    sk_send_sigurg+0x6c/0x2e0
[  856.337395][T16744]    queue_oob+0x420/0x4f0
[  856.341826][T16744]    unix_stream_sendmsg+0xc32/0xde0
[  856.347131][T16744]    __sock_sendmsg+0x21c/0x270
[  856.352010][T16744]    ____sys_sendmsg+0x52d/0x820
[  856.357201][T16744]    ___sys_sendmsg+0x21f/0x2a0
[  856.362085][T16744]    __sys_sendmmsg+0x227/0x430
[  856.366951][T16744]    __x64_sys_sendmmsg+0xa0/0xc0
[  856.372003][T16744]    do_syscall_64+0xec/0xf80
[  856.376702][T16744]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.382781][T16744] 
[  856.385116][T16744]  -> (&f_owner->lock){....}-{3:3} {
[  856.390430][T16744]     INITIAL USE at:
[  856.394430][T16744]                      lock_acquire+0x107/0x340
[  856.400702][T16744]                      _raw_write_lock_irq+0x3d/0x50
[  856.407390][T16744]                      __f_setown+0x67/0x370
[  856.413392][T16744]                      fcntl_dirnotify+0x3fa/0x6a0
[  856.419923][T16744]                      do_fcntl+0x745/0x1a50
[  856.425924][T16744]                      __se_sys_fcntl+0xc8/0x150
[  856.432275][T16744]                      do_syscall_64+0xec/0xf80
[  856.438533][T16744]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.446170][T16744]     INITIAL READ USE at:
[  856.450602][T16744]                           lock_acquire+0x107/0x340
[  856.457298][T16744]                           _raw_read_lock_irqsave+0x48/0x60
[  856.464685][T16744]                           send_sigio+0x38/0x370
[  856.471210][T16744]                           dnotify_handle_event+0x169/0x440
[  856.478595][T16744]                           fsnotify+0x180b/0x1ab0
[  856.485113][T16744]                           path_openat+0x1aa1/0x3dd0
[  856.491877][T16744]                           do_filp_open+0x1fa/0x410
[  856.498559][T16744]                           do_sys_openat2+0x121/0x200
[  856.505429][T16744]                           __x64_sys_creat+0x8f/0xc0
[  856.512209][T16744]                           do_syscall_64+0xec/0xf80
[  856.518926][T16744]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.527013][T16744]   }
[  856.529613][T16744]   ... key      at: [<ffffffff9992cc60>] file_f_owner_allocate.__key+0x0/0x20
[  856.538575][T16744]   ... acquired at:
[  856.542474][T16744]    _raw_read_lock_irqsave+0x48/0x60
[  856.547871][T16744]    send_sigio+0x38/0x370
[  856.552308][T16744]    kill_fasync+0x24d/0x4d0
[  856.556923][T16744]    sock_wake_async+0x137/0x160
[  856.561876][T16744]    sk_wake_async+0x189/0x280
[  856.566658][T16744]    tcp_rcv_state_process+0x1d9d/0x4520
[  856.572335][T16744]    tcp_v4_do_rcv+0x6bb/0x1430
[  856.577196][T16744]    __release_sock+0x265/0x3a0
[  856.582082][T16744]    release_sock+0x5f/0x1f0
[  856.586687][T16744]    __inet_stream_connect+0x8df/0xe70
[  856.592168][T16744]    inet_stream_connect+0x66/0xa0
[  856.597301][T16744]    __sys_connect+0x316/0x440
[  856.602083][T16744]    __x64_sys_connect+0x7a/0x90
[  856.607033][T16744]    do_syscall_64+0xec/0xf80
[  856.611727][T16744]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.617814][T16744] 
[  856.620152][T16744] -> (&new->fa_lock){....}-{3:3} {
[  856.625316][T16744]    INITIAL USE at:
[  856.629224][T16744]                    lock_acquire+0x107/0x340
[  856.635326][T16744]                    _raw_write_lock_irq+0x3d/0x50
[  856.641840][T16744]                    fasync_remove_entry+0xf1/0x1c0
[  856.648447][T16744]                    lease_modify+0x1ca/0x3c0
[  856.654525][T16744]                    locks_remove_file+0x4bf/0xe20
[  856.661040][T16744]                    __fput+0x3ab/0xa70
[  856.666617][T16744]                    task_work_run+0x1d4/0x260
[  856.672793][T16744]                    exit_to_user_mode_loop+0xef/0x4e0
[  856.679662][T16744]                    do_syscall_64+0x2c1/0xf80
[  856.685845][T16744]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.693322][T16744]    INITIAL READ USE at:
[  856.697668][T16744]                         lock_acquire+0x107/0x340
[  856.704188][T16744]                         _raw_read_lock_irqsave+0x48/0x60
[  856.711405][T16744]                         kill_fasync+0x199/0x4d0
[  856.717843][T16744]                         sock_wake_async+0x137/0x160
[  856.724625][T16744]                         sk_wake_async+0x189/0x280
[  856.731245][T16744]                         tcp_rcv_state_process+0x1d9d/0x4520
[  856.738735][T16744]                         tcp_v4_do_rcv+0x6bb/0x1430
[  856.745432][T16744]                         __release_sock+0x265/0x3a0
[  856.752134][T16744]                         release_sock+0x5f/0x1f0
[  856.758583][T16744]                         __inet_stream_connect+0x8df/0xe70
[  856.765887][T16744]                         inet_stream_connect+0x66/0xa0
[  856.772850][T16744]                         __sys_connect+0x316/0x440
[  856.779460][T16744]                         __x64_sys_connect+0x7a/0x90
[  856.786247][T16744]                         do_syscall_64+0xec/0xf80
[  856.792774][T16744]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.800689][T16744]  }
[  856.803306][T16744]  ... key      at: [<ffffffff9992cc80>] fasync_insert_entry.__key+0x0/0x20
[  856.812006][T16744]  ... acquired at:
[  856.815824][T16744]    _raw_read_lock_irqsave+0x48/0x60
[  856.821218][T16744]    kill_fasync+0x199/0x4d0
[  856.825836][T16744]    mousedev_notify_readers+0x6f1/0xc00
[  856.831498][T16744]    mousedev_event+0x602/0x1320
[  856.836445][T16744]    input_handle_events_default+0xd4/0x1a0
[  856.842363][T16744]    input_pass_values+0x288/0x890
[  856.847481][T16744]    input_event_dispose+0x330/0x6b0
[  856.852787][T16744]    input_inject_event+0x1dd/0x340
[  856.858013][T16744]    evdev_write+0x2fc/0x480
[  856.862622][T16744]    vfs_write+0x27e/0xb30
[  856.867056][T16744]    ksys_write+0x145/0x250
[  856.871574][T16744]    do_syscall_64+0xec/0xf80
[  856.876277][T16744]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.882362][T16744] 
[  856.884701][T16744] 
[  856.884701][T16744] stack backtrace:
[  856.890705][T16744] CPU: 1 UID: 0 PID: 16744 Comm: syz.0.2754 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  856.890730][T16744] Tainted: [L]=SOFTLOCKUP
[  856.890736][T16744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  856.890748][T16744] Call Trace:
[  856.890757][T16744]  <TASK>
[  856.890765][T16744]  dump_stack_lvl+0xe8/0x150
[  856.890788][T16744]  __lock_acquire+0x2a95/0x2cf0
[  856.890814][T16744]  ? kill_fasync+0x199/0x4d0
[  856.890838][T16744]  lock_acquire+0x107/0x340
[  856.890854][T16744]  ? kill_fasync+0x199/0x4d0
[  856.890883][T16744]  _raw_read_lock_irqsave+0x48/0x60
[  856.890900][T16744]  ? kill_fasync+0x199/0x4d0
[  856.890924][T16744]  kill_fasync+0x199/0x4d0
[  856.890948][T16744]  ? kill_fasync+0x53/0x4d0
[  856.890973][T16744]  mousedev_notify_readers+0x6f1/0xc00
[  856.890994][T16744]  ? mousedev_notify_readers+0x2c/0xc00
[  856.891012][T16744]  mousedev_event+0x602/0x1320
[  856.891030][T16744]  input_handle_events_default+0xd4/0x1a0
[  856.891053][T16744]  ? input_pass_values+0x8d/0x890
[  856.891087][T16744]  input_pass_values+0x288/0x890
[  856.891107][T16744]  ? input_handle_event+0x70c/0xf30
[  856.891132][T16744]  input_event_dispose+0x330/0x6b0
[  856.891159][T16744]  input_inject_event+0x1dd/0x340
[  856.891183][T16744]  ? input_inject_event+0xb6/0x340
[  856.891214][T16744]  evdev_write+0x2fc/0x480
[  856.891235][T16744]  ? __pfx_evdev_write+0x10/0x10
[  856.891255][T16744]  ? bpf_lsm_file_permission+0x9/0x20
[  856.891273][T16744]  ? security_file_permission+0x75/0x290
[  856.891293][T16744]  ? rw_verify_area+0x255/0x4d0
[  856.891320][T16744]  ? __pfx_evdev_write+0x10/0x10
[  856.891339][T16744]  vfs_write+0x27e/0xb30
[  856.891358][T16744]  ? __pfx_vfs_write+0x10/0x10
[  856.891375][T16744]  ? __fget_files+0x2a/0x420
[  856.891397][T16744]  ? __fget_files+0x2a/0x420
[  856.891417][T16744]  ? __fget_files+0x3a0/0x420
[  856.891438][T16744]  ? __fget_files+0x2a/0x420
[  856.891464][T16744]  ksys_write+0x145/0x250
[  856.891481][T16744]  ? __pfx_ksys_write+0x10/0x10
[  856.891497][T16744]  ? __secure_computing+0xe2/0x2a0
[  856.891516][T16744]  do_syscall_64+0xec/0xf80
[  856.891536][T16744]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.891553][T16744]  ? clear_bhb_loop+0x60/0xb0
[  856.891572][T16744]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.891589][T16744] RIP: 0033:0x7f47fa58f749
[  856.891606][T16744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  856.891622][T16744] RSP: 002b:00007f47fb460038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  856.891641][T16744] RAX: ffffffffffffffda RBX: 00007f47fa7e5fa0 RCX: 00007f47fa58f749
[  856.891654][T16744] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000008
[  856.891666][T16744] RBP: 00007f47fa613f91 R08: 0000000000000000 R09: 0000000000000000
[  856.891677][T16744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  856.891688][T16744] R13: 00007f47fa7e6038 R14: 00007f47fa7e5fa0 R15: 00007f47fa90fa28
[  856.891708][T16744]  </TASK>
[  857.186316][T16755]  1 1 1
[  857.189979][T16755] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  857.220638][T16755] lowmem_reserve[]: 0 0 0 0 0
[  857.225414][T16755] Node 1 Normal free:3870776kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:176kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:35928kB local_pcp:24256kB free_cma:0kB
[  857.244047][ T5890] dvb-usb: bulk message failed: -22 (4/0)
[  857.259856][T16755] lowmem_reserve[]: 0 0 0
[  857.263687][ T5890] cxusb: i2c read failed
[  857.263689][T16755]  0
[  857.273144][T16755]  0
[  857.278232][T16755] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  857.332136][T16755] Node 0 DMA32: 3685*4kB (UME) 4156*8kB (UME) 2509*16kB (UME) 2116*32kB (UME) 707*64kB (UME) 238*128kB (UME) 47*256kB (UME) 21*512kB (UME) 60*1024kB (UME) 6*2048kB (UME) 227*4096kB (UM) = 1257860kB
[  857.368747][ T5890] dvb-usb: bulk message failed: -22 (4/0)
[  857.374726][ T5890] cxusb: i2c read failed
[  857.379559][   T10] usb 1-1: reset high-speed USB device number 78 using dummy_hcd
[  857.429802][T16755] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  857.446609][T16755] Node 1 Normal: 174*4kB (UE) 56*8kB (UME) 42*16kB (UE) 167*32kB (UE) 53*64kB (UME) 14*128kB (UME) 8*256kB (UME) 4*512kB (UM) 4*1024kB (UME) 6*2048kB (UME) 937*4096kB (UM) = 3870776kB
[  857.495834][ T5890] dvb-usb: bulk message failed: -22 (4/0)
[  857.513129][ T5890] cxusb: i2c read failed
[  857.559823][T16755] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  857.619369][ T5890] dvb-usb: bulk message failed: -22 (4/0)
[  857.625143][ T5890] cxusb: i2c read failed
[  857.690124][T10958] usb 3-1: USB disconnect, device number 51
[  857.708430][T16755] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=1 hugepages_size=2048kB
[  857.745765][T10958] dvb-usb: DViCO FusionHDTV DVB-T NANO2 successfully deinitialized and disconnected.
[  857.784666][T16755] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  857.815922][T16755] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  857.839518][T16755] 61839 total pagecache pages
[  857.848800][T16755] 1 pages in swap cache
[  857.857588][T16755] Free swap  = 124996kB
[  857.865253][T16755] Total swap = 124996kB
[  857.874079][T16755] 2097051 pages RAM
[  857.882490][T16755] 0 pages HighMem/MovableOnly
[  857.891720][T16755] 425095 pages reserved
[  857.901558][T16755] 0 pages cma reserved
[  858.009996][ T5890] usb 5-1: USB disconnect, device number 54
[  858.269820][T10959] usb 1-1: USB disconnect, device number 78