last executing test programs:

7m33.10283338s ago: executing program 2 (id=601):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, 0x0)
r1 = syz_open_pts(r0, 0xc0000)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100))

7m32.147021426s ago: executing program 2 (id=603):
setregid(0xee00, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000180)='io\x00')
pread64(r2, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009)

7m32.083904405s ago: executing program 2 (id=604):
r0 = syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x40, 0x69, 0xa8, 0x20, 0x8e3, 0x301, 0xf320, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x2, 0x40, 0x44, "", [{{0x9, 0x4, 0x18, 0x0, 0x2, 0xee, 0x7a, 0x95, 0x5, [], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x80, 0x8, 0x43}}, {{0x9, 0x5, 0x5, 0xc, 0x1ff, 0x62, 0x40, 0x25}}]}}]}}]}}, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0})
r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0)
read$snddsp(r1, &(0x7f0000000240)=""/203, 0xcb)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$cgroup_ro(r1, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r5, 0x12}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000000c0)="ce1b", 0x2}], 0x1}}], 0x1, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1, 0x3ff, 0x2e, 0x1ff, 0x400, r2})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x80000000, 0x171000)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0x40084149, &(0x7f0000000180)=0x6)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x262000)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x882400, 0x140)
landlock_create_ruleset(&(0x7f0000000080)={0x4008, 0x3, 0x1}, 0x18, 0x1)

7m30.775381794s ago: executing program 2 (id=610):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c8f022482395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0900010069707673000000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x4)
preadv(r2, &(0x7f0000001240)=[{&(0x7f0000001280)=""/106, 0xfffffffffffffd7a}, {&(0x7f00000011c0)=""/11, 0xb}, {&(0x7f0000001200)=""/6, 0x6}], 0x3, 0x1fffff, 0x0)
ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r3 = syz_open_pts(r1, 0x200)
r4 = dup3(r3, r1, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x4)
r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0)
ioctl$BLKCRYPTOGENERATEKEY(r5, 0xc030128a, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000140)={{<r6=>0x0, 0x6, 0x26, 0x6400000000000000, 0x9, 0x9, 0x0, 0xffffffff, 0x21, 0x8b1, 0xc36, 0x0, 0x1, 0x6, 0xb}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000001140)={{r6, 0x954000000000000, 0x6, 0x8, 0x10, 0xe, 0x52, 0x8001, 0x1ff, 0x8, 0x7, 0x1, 0x0, 0xece, 0x9}, 0x10, [0x0, 0x0]})

7m29.830611734s ago: executing program 2 (id=615):
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80000)
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, 0x0)
ioctl$FIONREAD(r0, 0x541b, 0x0)

7m29.78478495s ago: executing program 2 (id=616):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:', @ANYRESDEC], 0xa) (async, rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) (rerun: 64)
syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0, &(0x7f0000000000)) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}) (async)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000800)=<r5=>0x0)
syz_pidfd_open(r5, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r6=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000780)={{}, {0x9}, 0x40, 0x0, 0x0, &(0x7f0000000080)='./cgroup.net/devices.allow\x00', &(0x7f0000000200)='./cgroup.net/devices.allow\x00', &(0x7f0000000480)="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", 0x1b4, 0x0, &(0x7f0000000640)={0x2, 0xaf, {0x0, 0xc, 0x0, "", 0xa2, "6722f65db21d58dc8702934c75f1738553a2936186be567e353227ccdab7ec6164dab8fb262bdaf3338efc194eaca237c5bb53513c50d6c096c0cf7abf13d4d76890d6f6060a3730245aecea4bca9daa70318ab9522c14ba2f53d6288652dfc4120e989c919c57245f5e5338f3e48f6f35fb343ed80773b2b6074c13695b0949a790430e64b43a8f89005613368e8575da10c30183351d91e5b991313a4ae94d682d"}, 0x82, "7f3172ee51846354034ce859341844cb320878f24580f3603d81389eae82ba4c0f1a7bcfe108feb5eee16328375c8917e9bd172aabac39da130e210400489c77f88edb0d195b355e158d8fa90cb69ff671262371d3b4234d216a45ac2c917f9e394a1a936e5b05a4d4c2b83bcc1d843b8d53808bea8b9d072be67c57f9d530cbd1f1"}, 0x13d}) (async, rerun: 64)
munlock(&(0x7f0000001000/0x1000)=nil, 0x1000) (async, rerun: 64)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000300)={0x2, @pix_mp={0x0, 0x0, 0x3032344d, 0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x2}], 0x7}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r6, 0x8, 0x7800, 0x2, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

7m14.542090036s ago: executing program 32 (id=616):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB='b 7:', @ANYRESDEC], 0xa) (async, rerun: 64)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffd, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0x0, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in6=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) (rerun: 64)
syz_io_uring_setup(0x1727, &(0x7f00000002c0)={0x0, 0x7f9d, 0x4000, 0x1, 0xba}, 0x0, 0x0, &(0x7f0000000000)) (async)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}) (async)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) (async)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000800)=<r5=>0x0)
syz_pidfd_open(r5, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r6=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000780)={{}, {0x9}, 0x40, 0x0, 0x0, &(0x7f0000000080)='./cgroup.net/devices.allow\x00', &(0x7f0000000200)='./cgroup.net/devices.allow\x00', &(0x7f0000000480)="21be04fe5ce33e13f5802c155bc4a340a56811a1c483dd46b86b6e6c1a9f766aa97d0ca0dfff9b833ea97ba26030ae48ba84697b40e9f168f818be5750a6fba733ec58a5ddfdc00ac5f9d58696fd157525ee89bbe1b7f432ef25222d7ca01bfe0f5ce155f803b6ed69ead8dd869229b6624430a163330e039a74df718ae374828e386f6bda78a7b2025790ea39b5936dd5a06927a5158e7e163a869a53636ac13e9e047470e25bfaa3427477dfc3dbcda3f042af28098d04f496d0a49a0c3aa82c1809d98abcb7520c95d17a7c7e9c2feb2a191f5304d2b855f93537d3022306bd9ccb452446bfec5bb99ea22f27f8ab272941143cd60db86d533a54b655d893a5b5ddf11e9a999cd2baab0048c1727f7384ee36882c1fea20f67a7f0b5fdb74f5e0117968831b85dbf73b3dc4af188071fafd8b0c6f02a4f5e718c4fc36a31a712cb896864e20ab982be761ce1c4fc47b33160a12706ed4d6368d9490d89f632167b36e67393bf4ce141dfe371811cf02799ccf4684bf0b723f02f78913ce937f41d741ba4341c155b6d15e05a1698b9fe9fe0f58506f643f06f9abf7417a08e86b42badf823328ff3cc80c10936f4258f4228f", 0x1b4, 0x0, &(0x7f0000000640)={0x2, 0xaf, {0x0, 0xc, 0x0, "", 0xa2, "6722f65db21d58dc8702934c75f1738553a2936186be567e353227ccdab7ec6164dab8fb262bdaf3338efc194eaca237c5bb53513c50d6c096c0cf7abf13d4d76890d6f6060a3730245aecea4bca9daa70318ab9522c14ba2f53d6288652dfc4120e989c919c57245f5e5338f3e48f6f35fb343ed80773b2b6074c13695b0949a790430e64b43a8f89005613368e8575da10c30183351d91e5b991313a4ae94d682d"}, 0x82, "7f3172ee51846354034ce859341844cb320878f24580f3603d81389eae82ba4c0f1a7bcfe108feb5eee16328375c8917e9bd172aabac39da130e210400489c77f88edb0d195b355e158d8fa90cb69ff671262371d3b4234d216a45ac2c917f9e394a1a936e5b05a4d4c2b83bcc1d843b8d53808bea8b9d072be67c57f9d530cbd1f1"}, 0x13d}) (async, rerun: 64)
munlock(&(0x7f0000001000/0x1000)=nil, 0x1000) (async, rerun: 64)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000300)={0x2, @pix_mp={0x0, 0x0, 0x3032344d, 0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x2}], 0x7}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r6, 0x8, 0x7800, 0x2, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}})

11.20612102s ago: executing program 0 (id=3256):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c)
r1 = dup(r0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1)
sendmsg$NFT_BATCH(r1, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xe}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x10000000, {0x2}}, @NFT_MSG_DELRULE={0x58, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0x39, 0x7, 0x1, 0x0, "f74b7766e73ecb9cc5b62ebcb947da11e9d35165beda1c02bc2df3e9433fbe001e1079d46dc05dfe0c186c476e9f90157f1c2be7ed"}, @NFTA_RULE_POSITION_ID={0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x54, 0x12, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x40, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_HELPER_NAME={0x9, 0x1, 'snmp\x00'}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x2f}, @NFTA_CT_HELPER_NAME={0xe, 0x1, 'snmp_trap\x00'}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22eb}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}}, @NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x925141ee776db4b2}}}, 0x160}, 0x1, 0x0, 0x0, 0x2000c840}, 0xd1)

11.088578135s ago: executing program 0 (id=3257):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0x7, 0x1000, 0x6e, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0xb, 0x4, 0x7, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e5, 0xcd, 0x409, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0xfffffffe, 0x9, 0x2, 0x9, 0x8, 0x0, 0xef61, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x7, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x4, 0x5, 0x7fff, 0x2, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xff, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xfffffffd, 0xd, 0x4, 0x6d01, 0xc9d1, 0x9, 0x800000, 0x1fd, 0x80, 0x3, 0x400, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x800001, 0xffff, 0x3, 0x6, 0x1e, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x3, 0x53f53814, 0x12, 0x7, 0x22, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x6, 0xff7fffff, 0x95d, 0x5, 0x8, 0xc7, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9603, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x40000004, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x3]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0xffffffff, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

10.918431697s ago: executing program 0 (id=3260):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)={0x38, r1, 0x101, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="81"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x38}, 0x1, 0xb000000, 0x0, 0x4010}, 0x0)

10.875974422s ago: executing program 0 (id=3261):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[@ANYRES8=r1], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
setsockopt$inet6_int(r2, 0x29, 0x18, &(0x7f00000002c0)=0x6, 0x4)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000ad50120800014000000000140004"], 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x40810)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
copy_file_range(r3, 0x0, r3, 0x0, 0x8001, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000740)={0x0, 0x7, 0x3, 0x9, 0x7, 0x80, 0x90})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000ac0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a80)={&(0x7f00000007c0)={0x280, 0x1, 0x3, 0x101, 0x0, 0x0, {0x20de1932d652530d}, [@NFQA_PAYLOAD={0x7d, 0xa, "9765f43ac94fb26b3418edb42f934145a041567daafdf8059db5fc55ed51a6ba2ee9eedc8198331a4284cc190d79a0dabb86656a915f5b42d44146d19ed2bff8107b68900329895dd4812fa82c6e1c05aef18a4dc7a20dd50231438851bbf4ff8ef8e3897bcad559849418ff9f90a7d7302c83fce29221188c"}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xedd}}, @NFQA_VLAN={0x54, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x11150}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8bd8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x4454}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x2}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_PAYLOAD={0xd8, 0xa, "c601a9565425c762345e8ffa57adc8e592cb24e3ed492edecb47f351aa0cd7e628f122c9ff95082a0d4ba6a83d3bdd9c18da8a4543d71a1d4c4c49efba63e99040ab4bfe87bcde0d8c9c60849bb950740fa93f817454806ffd95a1a3637c35b29f175d4b0a865df8381c8be59a5072de070c4f5827eb610a3b6f7e6ca0a0a0f730977bd7d0c79cfe858904774b3d1ce6b5c28d480415de98b48847d674db7ab9579443fd25d46d1b890b63bf27ac4613ac62ad8164b31be670cd8fdd2591f008684f0de1d43cc30a9b12dc603a97424cb1f608e1"}, @NFQA_PAYLOAD={0xb3, 0xa, "b48ee8603b4218d2f5dcebb4360dc5da7d80420ac9793d52a76a5b54a1d1a68b05b28ce77280d4e069abaa7339e7fb663050a566434938a16781f8888889e06068f48f4dd7ba9dace5b4e934c305c6c3e0a65cf9d0cf9c851391b3bc26eb6b404f8a3a3eba770dc639337bd8834aa5c6e3afe3f52d3843ace064eb3cec724ed13ca1da18644d6c1547f47eca41d215b7c48b9240fdcee6b95ae1182394d69812d8114b05e1d2394ae1909ff98a34ca"}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x105091, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x80, 0x0, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x5]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x754]}, @CTA_NAT_SRC={0x5c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000001}, 0x1)
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x80080, 0x108, 0x16}, 0x18)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000b00)={0x234, r6, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x7, 0x99, {0xfffffe01, 0x73}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1f4, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @device_a, @from_mac=@device_b, {0xc, 0x7}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, @void, @void, @void, @void, @val={0x72, 0x6}, [{0xdd, 0x28, "748056c58eaf2b268bed79ec3ab341ac685d4ba3a58cd4689ce43b315b30fd61ac748624c013790c"}, {0xdd, 0xdf, "470ceb4ec0bb3e56e2ecba8db69207d8883a5cb0145c4c35c0e45052643fcd323ad4a3a1614b637c1bf8ded927b09222746aa4cd77c046a52795b011b391512ba6ec42e47292cad9f3240d8cc90e9aec286adeb0b7a3a56df1ef207c815aab4d413c8383f919ec37c0b475e4d3eaa2baf8a321d45fd855481d328e37fe8b871d1e99f7a0daed9adc6a7740f458cf4a9fa68917ef505911d19f655721de05007c9b669f851cde88a36fb2222bb8d704c842d2fe5aef448054742458c87616aafd15c73f4a005bcff90ef0123efb596fb5352584bedba5f2f61f423a9634dbec"}, {0xdd, 0xbf, "72cbe0023859331aa787a0da53b70060d88c0baa8441bdac57567fa5be712d7fad7d749521d31b614eb2673b63c58595c10a95a3da112c7a627ef130242631f8df22e7285b4f497ebc20c337c075896305aa852071ddfcbf668a8210cc480fde828ef5971903649ce980717c40c55394337174920f0c975045d19d3d21188e41698c0e903c8d4409215a83c3bc5b16c04f2b91bde4b42b8b87cf9dace347d2a134db1d3569823de6e7973d0b75b351bb7d4e70ff16d04469beb7bac22d64c6"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x12ed}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2d2}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xb5}, 0x1, 0x0, 0x0, 0x20004085}, 0x800)

9.094666047s ago: executing program 0 (id=3271):
syz_open_dev$audion(&(0x7f0000000000), 0x10001, 0x2c0880) (async)
r0 = syz_open_dev$audion(&(0x7f0000000000), 0x10001, 0x2c0880)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040)) (async)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040))
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0xb5, &(0x7f0000000080)="323ec57ae8c63602cbb3640befb5efac3791261d0e749b2766de923cb492ba9c0e649caecdb228e700aa1a408485215c065ea4557825476f14d8582e85328328ec4e1945fd73369f749dfc7d9f2ca0214518b585c16b6d6f70af6af25e09fa2aeb09a5ac99f8ab0f840777f7628832941645ddacc659644f5bf5d60f943fc971b510d5d04c60072ede2ad00d4bccbb78311eaaf51d5f56890410281704c4815c833753c47a69f073613626bebe29b1d416cfccb862"}) (async)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000140)={0x0, 0xb5, &(0x7f0000000080)="323ec57ae8c63602cbb3640befb5efac3791261d0e749b2766de923cb492ba9c0e649caecdb228e700aa1a408485215c065ea4557825476f14d8582e85328328ec4e1945fd73369f749dfc7d9f2ca0214518b585c16b6d6f70af6af25e09fa2aeb09a5ac99f8ab0f840777f7628832941645ddacc659644f5bf5d60f943fc971b510d5d04c60072ede2ad00d4bccbb78311eaaf51d5f56890410281704c4815c833753c47a69f073613626bebe29b1d416cfccb862"})
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000180)={0x4, 0x0, 0x84c, 0xcc0, '\x00', '\x00', '\x00', 0x5, 0x6, 0x8, 0x7, "c88fc810a6b3f9ebc3b3bbfd861e8b6f"})
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000081}, 0x44800)
ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000440)={0xfa, 0x5, 0x6, 0xcf9, "c6972b42660a5035fabe923e5e3cf6819ad9031ce5ddc323204926ba21b81b0d"})
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
r2 = syz_open_dev$tty20(0xc, 0x4, 0x0)
setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000480)="46dc7a2d30dfbf7743a1", 0xa) (async)
setsockopt$packet_buf(r0, 0x107, 0x5, &(0x7f0000000480)="46dc7a2d30dfbf7743a1", 0xa)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4054}, 0x1021) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4054}, 0x1021)
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000600)) (async)
ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000000600))
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x40010, r0, 0xa4222000) (async)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000003, 0x40010, r0, 0xa4222000)
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000007c0))
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x124, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xfa0c}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0xf0}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xecc4ece}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x124, r3, 0x10, 0x70bd2a, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0xfa0c}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0xf0}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xecc4ece}, {0x6, 0x11, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}]}, 0x124}, 0x1, 0x0, 0x0, 0x80}, 0x4000004)
write$tun(0xffffffffffffffff, &(0x7f0000000a40)={@void, @val={0x2, 0x4, 0x100, 0x8, 0x7, 0xd470}, @eth={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@mpls_mc={0x8848, {[{0x9d5, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2}, {0x8, 0x0, 0x1}], @llc={@snap={0xaa, 0x1, 'M', "a22509", 0xd25a, "85905c82ab20c5ea484a7c4939579a15840e84ff6bcbe011e1b8cd60d7327582601356bd1ec37681390cbb763f63598335c8cd7a399ba34267e60dd9d741407bf3146eb19efc756dde9a887f72"}}}}}}}, 0x85)
write$binfmt_misc(r0, &(0x7f0000000b00)="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", 0x1000)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
close_range(r2, r4, 0x2)
ioctl$FITHAW(r0, 0xc0045878)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001b80)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000001cc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x408b041}, 0xc, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x8c, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IE={0x47, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x9d, 0xa2}}, @link_id={0x65, 0x12, {@random="b4321240fcd2"}}, @chsw_timing={0x68, 0x4, {0x7ff, 0xfff}}, @ht={0x2d, 0x1a, {0x8, 0x1, 0x1, 0x0, {0x1, 0x10, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x2b, 0x3}}, @cf={0x4, 0x6, {0x4, 0x2}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0xc0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/key-users\x00', 0x0, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001d40), 0x244140, 0x0)
ioctl$PPPIOCGDEBUG(r8, 0x80047441, &(0x7f0000001d80))
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, r5, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x50}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x31001f158682d}, 0x10)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000001f00)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000001ec0)=0x81}) (async)
ioctl$KVM_GET_DEVICE_ATTR_vcpu(r8, 0x4018aee2, &(0x7f0000001f00)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000001ec0)=0x81})
r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_XCRS(r9, 0x4188aea7, &(0x7f0000001f40)={0x7, 0x1, [{0xfff, 0x0, 0x3}, {0x100, 0x0, 0x883d}, {0x2, 0x0, 0x400}, {0x101, 0x0, 0x6}, {0x9, 0x0, 0x9}, {0x800, 0x0, 0x7}, {0x9, 0x0, 0x9}, {0x2, 0x0, 0xfffffffffffffffb}, {0x9, 0x0, 0x1}, {0x5f, 0x0, 0xbb}, {0x7, 0x0, 0x6}, {0xfffffffd, 0x0, 0xf}, {0x4, 0x0, 0xfffffffffffffffb}, {0xe4b, 0x0, 0x9}, {0x4, 0x0, 0x7}, {0x6, 0x0, 0x3}]})

8.83501617s ago: executing program 0 (id=3274):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601019e56000000000000000000050500010007000000090002"], 0x60}}, 0x4000820)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
writev(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x2000000}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0xa00, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)

8.650360454s ago: executing program 33 (id=3274):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="60000000020601019e56000000000000000000050500010007000000090002"], 0x60}}, 0x4000820)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0x0, 0x0)
writev(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x2000000}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x0, 0xa00, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000)

3.316370638s ago: executing program 3 (id=3311):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c)
io_setup(0x6, &(0x7f0000000680)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x1802, 0x0, 0x100000000000000}])

3.114879495s ago: executing program 5 (id=3313):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc9ba832c4f3a79cd}]}, 0x24}, 0x1, 0xfcffffffffffffff, 0x0, 0x8000}, 0x840)

3.026836579s ago: executing program 3 (id=3314):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r2 = dup(r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x4a, 0x421, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}}, 0x4080)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r4, 0x0, 0x3, 0x1}}, 0x20)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
r5 = eventfd2(0x800, 0x0)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)="6995", 0x2}], 0x1)
r6 = syz_clone(0x1000, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0)
syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.007896092s ago: executing program 5 (id=3316):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x268, 0x0, 0x2000000}]})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc02c5341, &(0x7f00000000c0))
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), 0x3f, 0x0, 0x0, 0x5865}, 0x8851)
clock_getres(0x7ffffffff000, 0x0)
r5 = socket(0x400000010, 0x3, 0x0)
write(r5, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10)
r7 = getuid()
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'})
socket$kcm(0x29, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000280))
mount$9p_unix(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), 0x200000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=unix,dont_appraise,permit_directio,pcr=00000000000000000057,obj_role=$&{$,euid<', @ANYRESDEC=r7, @ANYBLOB="2af9ab8bd1ebcea78f6dc07813af663d68cb1955337c9596a790a51377a45a9794287ad580a90dbe9a889db1c4d613b9891075470100000001000000f69e0cdf423d225d9af863d1558998830e710126b3b4d37cdf1c9abc2ced4221a45ab294a78de997b124eaef3decb5bf68e466d8988a72492f8efbb6aa7d0c5f7e8130b2d7ae517b904246ff2b9d731f5fa51d1110db64d3396edd1152339b2658da41e7b3b3b46d294d23863135af92ac315a7fa5d46f739e095837254884330c0cc02f3b50cd7b98c9ae"])

2.745247722s ago: executing program 3 (id=3319):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000004100000500000a64000000060a0b0400000000000000000200000038000480340001800b0001007461726765740000240002800c0001004e465155455545000a000300000000102400000008000240000000030900010073797a30000000000900020073797a32"], 0x8c}}, 0x0)

2.618362685s ago: executing program 1 (id=3321):
r0 = socket$caif_stream(0x25, 0x1, 0x1)
ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000000)={{r0}, "382f4bf99d747902a05b8725e80409d1d521ec7205075fc49a74772c2b519e87a2939c1f23b8e859e79458fedaa361e30ebfb822a72ff9e10af861c052a2640de6eae703495950265203a5479406747c358edeb3379af5f1525cc2fcdf79007e33b9dce6257da9018fccc197986d21a9ff06ef37504149352e1a03590986ac75f9f754a40d5737b041dc1ac51f97bb91c60759fd24fc703b241dc1feedb894d0857980db3d79d8271f202cb2c647c8f886d4a7c13eadb411bb500f0352601636d84185ac4fe64ddeaf8066ed543c1d7b174b51a3bbcb97909687c5fd6842471a444109f40f3b50c658b2ba189f10df4df183fae34eb56f88b9645eaa7e6aeef3ff3bb23ac5a937f798ebf553e96d272d2b6269b312fc52f0a5dff465ba17da68980e1978d4dfb23e11f5d05dcc52e8ca521d4d98223f82f0d1fb5f85f0bf8485a229a6ef3b1bce5c39db3cfe8bc5ab343269952e9e9b025a86408d7a43b82b518d18733d5031e50a741189cd41495f9010d56e286f7e4c9bc1b40e84d1553dc9fa79c88d3a0323d22016f6a42ed9b791dc03311d87cea9104866e7149d5645509431a2612d9b901ccb11d17f6632b0b8c5dd527c5765f39f69c546dcdacf8822e9090a88975c127ac6e36d9c345788dd0b573ff618e1b46efb13ed54066bbdf4ff7e3396f994da9ba94d26a11a81f9ed6b6063d92a0c1434c358eac7170602b09245b2707857de99be623e0cd0302e5c3a7d4713191cb666ad4de887c02620deb86c55d281b30b8c9b4aa240d7c58430af0f40c6f7691a5f71f003ebc4dedd437d625c8053e5c57c05675d37e89a681962cfdd03ea520ddbbd464b8e2aff0de4637d6333a3179ea2b50e66757f4c8a00737a8a7845b0f67f7eeb3db41fe0d10123adf592e157d8343019b2e82733394c88b29b70bd34e42dcb82d7494692e79d7bc3067b76d8f4fc13edae7c1a11d27bdf73e5dafb238de3798d0db1f967b1e371a2c477f90066826c2a5cde49fc798729d9405ac9e1924194c93d7622e0cc81d560fb4c4e4f91f64a16d80cecc1fc84fb597c589369cffeb86b4c1359ae527e66eb3ba15302333354ef0bb10fdfff89853906f01d2c699ae9cd66906ce666069dc02a96fa67fa66e7133a3dc4dda1382a0a0f119e1843a11461470a821fe0c871b9045001472f73122c08a3fca42ccfc77845aa36c36e7ee16411dca1d78e6754150aa2ad224aa5c7b39a34fc522c3946cd307530f5084381aa73218c5ab4230f8cf35f58f8ef07744f490a0607ab231f704517d26348a92f909fa3a8acb8db762ea2d68b8b911e090780620ef2c7190611f2a51679327a3ca168f1344663609352b1360be12d01f5025b4efa58f7c2b9e0ca33f6469c27377aaf2e3487c57300f1667b5eecb4b2578b6d6b50da71a984067d831bf85fda5d322b7563321291b59ebaaaf423869b0f8aebb2460a67185bb968920646a29cf89acce6809702e89290c29e4d2fa62f7d56699ae8f5c3715eddb74277aed5f679d56841a881d2a1b65ea009a578b3edef3a03628b7b0c4b29d4922f5c157cf3ccfcf41fa9fe54be1479e8bd02145c2de11f70e20ccf33c9e49b2924bf6489f7f2b03b5a5a1d31e5a59ca0b1293b82a48d24ea4be6118a64325052eac8735860f7783a0ee9e44b29857bf199fc97e04e118dc7883d10c51bab53328d2998674f655496ab611cd72a966a4596bdb41ce888a316e73ebf47d6db1ecbf7e60160abed33b67a2fcb5a1b6fae72ab8bce7acd41e963d6616ed34e269c6224b0431a7f342fd4b4fe3777ed6d8b81f45c0ff473c70bae468736adf1059b78b6cd8107ff281c3be41af8eed8bb203162936cc80ec7557915e2fa1e2bc1d2eb8b80df713bf9bbcd8c7ab57699d15a2a069209a5200c52e25403a505cdfa33b6337375776c583b4e5d10defa73376576e5318f49d1e3d8ad03ffa887daf81b6a05e96bae46fb47afddc872d6d1890f32238bb9ca700b2dedff38fc555cefb5ad3eca6cdd9605d52e6d6ac7dafb1d37a05332f8e76a8d001b37b215b312a1cb26275c6b16c1b22369695fcc781930b5f5e0af733d2e03008992fe8e551df8c7e0758bc5f89e92fcc4a341f3e25762ce7d23efd508d5fb363dbd82daef7a8cb5c6450fd477aa5ee18d0b821a4a497cc973edaf41622387b592e2a7c5507eff5f30976e8e8a311430fde38cea974144b7d18397fa82fc01836b363d11baa8b9855427a83094ff897684ae9ca86d1f1d284e49783592c8c667261e67ec5efb9f4fdd45fef2e4035338c845861537bb6bb5ddab57f91086f743ee956777f6562c9ff77c2bd42b426cafbe2e9b02901a6ababab835909b2c9d65e197d28ce434af4151aad161af4445736f96810a9d0cba90be53b77d5accd10837bae9761203d0b066fc69afecb4668120c43507d3c78c8a89283cb998f7e02305753993955db559d9b444396b30df3e5ae4af2f74fbba987809b10e6986c27d48abb4cc5715a7b5b846964736004d364427a1cd0375f67e4ec3ddef2288372569cb1c4735f59caf569c851790c7771e61f4fe7ef0e7e844f5ee4c8a7613d42b183ba2d4c172600faeb884f8a66f2fb8fe9a02982d29562c31dff523fed6e9ec4ce51d6ff694bb7f4cfe8d92b5c7f89a1c2555dedacb8621443954f365ab0f017e4f7c34073d56e46cab2c5ff839a33328098d5650b1765e018be9f4e2f397e6c5a028b92d52ed56463b98a6cb94e76af15c4d4925b68fd947e3b37782bc9627c8723c86d8983f71c432c82eeab20820664898e3e949684696988cb380cf8c14851f6dbde1cce3f78f7294ebff933f9001cde80f651e6ce77c656e0eaa765ecc3d93e0058b63b067d742768ea46f5bf1eab2728ec7754c4809eb3e7eb1c400686df63c54e0a5401ca5ab2ef3b1d5aba18ec997946165ab928f060fc24593c701b05f82539ce9aec8ba81b34428090f99ce5a2f842b2441dd329d8e8dcea1a66d768075f212b9de1c7141b36dcd5cb776f8cf0067b9735d2e6cfc3fefb53c7d8a7cc3eba65dd92bb7b9b2c8df247adc0ce50a3a14764bf4276804a5af5cfabd0e69651a47fe0a37ca85a9bc7df36b691c95614996d94b7a3ba0be702a6f91fc0e895949ab44c5056c1e46d5977ad5f45f6d4f877341444e1d1c1c2bd9b4e1f6f7b5cdc08f3a16e960c3c26db8f5ed7e4a432022fed84c869dafc4022f189cf82127d359cc441460bd914ec61e53efeacd62be9e7e1146f46fba8ec0d05b767893acd42985929826b345729a2b321846202da2fd101c6d2fc944e264c6eb91f9b016c85c2cf117be8547d43f7bf225d222e5608ff64e568127d26b8f1ccaea86574583268699d2d9fa24c9e5c48e1bd7eb94184d796708372ddf4e31d6f5058121421417355c5522b3caf213d0b72d5ade7e7b42db8e451e21a5053c3ff2f9a6f44887dffb87d65ba2dfecfc4c1f8bb3bba96cfd4871553669aa7bcdba54dd58b602b2d13f2b94cbc7392d5125f2672b1834de372477cbe64aa673393b438ad773aeea848fb09828bac8497b241358151e0043241040b074ebecacb64fab8dd344eb6cda4f50c5a2ccd8476bcec30007ea7e741c7f82d3eda8a145c549dbea17b33f9e45761750b8b8a183bdab836396dedb45b813cffadebc4cd1251bfabe2dcb409a60dfddff64bf3cd8ce635a2b21fa7efed7c14b5efe3beab6e3e9f251f110b6c6651b5affbe596a48f9348c26dc710ab812eefce61be2e5634897898e8445e1d16d2e1ea824ddd80e42e2aba1a610eadaa9789a08e8b2badab459647f2e0b3d00cedec43d0ed8a3594964480293754e770b0a20c8b48e406d7acaedc5f92a3b1f5e0f015072a7aa5ee89a160c54508502198ab288c337c3791d07626ff1a7db1f8594fda3839ffc6f525db62097bc7de9fefadba5bf90be6df9d71fd0667e841b8b231a787bfa95a82aaabb14a969a63402b39bcb00428b4972da5fbf0f9043c720614488400cee77dd401ecf498502c71287ba656dd5d4cd5d728c795a4cac9bd4f229b95aa27eb9891b09790971ec6298382c639d14843f08e600524c49cdd8cb1cd5ac1c9089b1d436d9dc1e54ce544476614e6f79e72a1954ab04b98845343da486229a6055808e7ab0cfafb1e7dfe2899b4e7269c03cd52e74a452bdd946069a8f598d3086f955a77e36a2146ccdf71d354665e0433276144fce5ad8f875fea5dcf9c2d858263208e6c5b08e428998c518397d52f6dc34de9f982d96659c3776e0d53c8e29d64ad534bd4e6f221dfb14da1cc528a539ae45575d14df435de585d036479f7dbbba1863d38c10eb8163fc7851e1267662637e8714caab1b77732d4866923a70dc6e65418ad7436f7beb982d2bd2e77f27b321caf542f7708657c31fe31f351e50f170caa2985b8fd0ac15a39ea4474e350935a8ddbdf4ddc7b2e9fdce30765cef0dcce7073dcabeea574ef0c254bdd64efaaf20f1905ef314cb5bc7190711fca5d59db841e295cdfe470d9e65dee6327b9c8839de9bef4c48bfbf89ff0dae428e9f2f59959fd0bcb00852f88e9478e669e247f86f4758dad1e8511df39fcf293d67023a2b3f64900a63fa8cf8dba83ba0bdbb976a0a925fafb7b76d3c16556038bfe08046a918700e15d27ec987f668de2fae5463c88c70f1fcbf51e8f56881ee9ef647ead263574f67054d85c4880df886a7de5dfdc7304991654ceaf88c845ffc7a8bdb6450ad340226b60b9e56b38de3d1d53332b363f50fe93cb0cbcf56d2856a4261b1c0e16e813268df74dea31827104031201c761af3c78d1f9939ef79dfc44951466329df7b4db4fe11bcbfcec96c8cf6988092df4c9cd731ce4235b48f197f69769225059b85c035eedcde5a176217138d8e30a1f171c6f9075da0bb96a502424f8752e580eb23271491ee4a75a082a5de6ca987cdddfe151f1d2aba9fbb2417c316ad1e4849a08c6c87fa43921206f4b38598ceafe91c26583129c91a6e8b461cf27242395305dfa6d69235663385d203825e77a9a52c0cf90df0be86aee5f7773459680f3106b6c9389bf803edc5a1c2cbd856f544fe105d1cae40016c6d8feb3f51c90ea99eca3cef68b93e9c13b871caece4aae3fbf399c82cfd63188e23a355d05e09e90601d870080517dcc75641f51dc6f45168b07ff1995d308be3cc420b9eda176c186e450f9b53f866d914fc61db9d0dc3b3473882982e340bf7643a08fb7e7779c8aa184e6ae8d65a0fc261e6197cc9bb69e06a0d2ccfcae105af6e1c5fddb794106a405692a9f03f82bf372c4f04cf7eba539d7080fc175ca7c0709d5700d6bda053d2f56c256ac0adb475b72a787a1063a79d692cd0e04a54e9898184e0dc4d4ffb0d8aacc552544c2636693b3201c352138ee9653265bfc824a3bf3367caa234c084df77d2067f1d2c4f510641b92c24a585f37602fa3d19050653d53b51813cdab999bd6cfc98d778224bef09807ce6b5209d272799bee2bdd0e2d802b729ad82ea02a65cacb77b56af1446cc1e5ad2fb695a5ea7fc5ec799ba994585cb41d72d398cea1f050fe8e1947255303f635611faca6f97cd83423d64aa96dec3c4cf519deb107cff093f29179dfd0b68b32993796f21f05218bcc08242559aaf329addbe0e2554e00b1325cce53752a444b4a9a330cf726e3a90c823600cca51837ccb0f5c3f4a69a3524040037ca39dadee6f9608aafc3ee92924479bbcc6fe3b4552837cc34333f75de178ba237551a3475659ad46426a54969b"})
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000001000)=0x16f, 0x4)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000001040)={0x2, 0x6})
setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000001080)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0x1, "8e5a1f91e5402f5981a8e335a690dac12d0a91aef38b087c56fe24119b340452", 0x1ff, 0xfffffff9, 0xb97, 0x4a}, 0x3c)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000010c0), 0x10801, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000001140)=0x63, 0x2)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000001180))
connect$bt_sco(r3, &(0x7f00000011c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000001200))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xd4, 0x2, 0x9, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast2}}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_TUPLE={0x64, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x400}}]}, 0xd4}}, 0x40006)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000001480)={0x9, 0x400, {}, {<r5=>0xee00}, 0xfba2, 0x1})
r6 = geteuid()
mount$9p_fd(0x0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x242058, &(0x7f00000014c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x9}}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@mmap}, {@fscache}, {@noxattr}, {@cachetag={'cachetag', 0x3d, 'blkio.bfq.io_queued_recursive\x00'}}, {@nodevmap}, {@cache_none}, {@access_client}], [{@obj_type={'obj_type', 0x3d, '/dev/net/tun\x00'}}, {@fowner_lt={'fowner<', r5}}, {@pcr={'pcr', 0x3d, 0x5}}, {@uid_gt={'uid>', r6}}]}})
ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000001600)={0x100000001, <r7=>r2, 'id0\x00'})
setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0)
setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000001680)={0x32, 0x2, 0x0, 0x0, 0x0, [@mcast2]}, 0x18)
fstat(r2, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
lstat(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001880)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{}, 0x0, @in=@remote}}, &(0x7f0000001980)=0xe8)
statx(r7, &(0x7f00000019c0)='./file0\x00', 0x0, 0x40, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
mount$bpf(0x0, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700), 0x40000, &(0x7f0000001b00)={[{@mode={'mode', 0x3d, 0x2}}, {@uid={'uid', 0x3d, r5}}, {@uid={'uid', 0x3d, r8}}, {@mode={'mode', 0x3d, 0x8000000000000001}}, {@gid={'gid', 0x3d, r9}}, {@uid={'uid', 0x3d, r10}}, {@uid={'uid', 0x3d, r6}}, {@gid={'gid', 0x3d, r11}}, {@uid={'uid', 0x3d, r5}}], [{@obj_user={'obj_user', 0x3d, 'cache=none'}}, {@fsname={'fsname', 0x3d, 'trans=fd,'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'rfdno'}}]})
ioctl$DRM_IOCTL_AGP_ACQUIRE(0xffffffffffffffff, 0x6430)
fallocate(0xffffffffffffffff, 0x4, 0x8, 0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000001c40)={<r12=>0x0, 0x6, 0x6, [0xe77, 0x7, 0x7, 0x9, 0xb, 0x9]}, &(0x7f0000001c80)=0x14)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001d00)={r12, 0x1c, &(0x7f0000001cc0)=[@in6={0xa, 0x4e20, 0xc7, @empty, 0x4}]}, &(0x7f0000001d40)=0x10)
copy_file_range(r1, 0x0, r0, &(0x7f0000001d80)=0x3, 0x3, 0x0)

2.617976434s ago: executing program 5 (id=3322):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000010140)=""/159, 0x9f}], 0x1}, 0xfbfffffe}], 0x1, 0x40000002, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x42}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0xa1ffffff, &(0x7f0000003700)={0x77359400})

2.609397785s ago: executing program 3 (id=3324):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x29})
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)='b:::\x00\xef\xdfB\xfa=\xe3\xd1\x9d\xe1\xbfUlJ4]y-,\x8a\x03\x91xu\x9cP\xdc\xe5\x95\xa2@\x9c\x98\xa4\xd2\xd4}\xc8]7N\xf3\x0e\'\xa0x\xfbdt\xb4\x1fW\xe7\xbe\xaf\x01.zT\xab\x92I\x104\x8c\x18\x16\x1c\x8a\x8e\xfd\x8b{ZVHZ2\xd3\xd6-~\x96\x80#\xee)+L\xf1\x00\xd5p\xe7 \x8c\xd2\a\x1e\xae\xb4\xe8\xd1\xe1\xed\xb8\x94\xb2*\x1c\xaeG\x1e\xdb\xc0Q\xb9`K\xffG\xc0\xa2\xb41\xac\x98\x01\xde}:\b\xa0Oq\xec\xa8\xf0\x8f\xe3\xa17\xe3\xd7\x9c^\x90\xfal\xbe\x81\x9a\xa4\x00K', 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

2.433402738s ago: executing program 5 (id=3326):
pipe2(&(0x7f0000000200)={<r0=>0xffffffffffffffff}, 0x900)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000300)={@local, 0x1, 0x0, 0x80, 0x0, [{@multicast1}, {@private}, {@initdev}, {@empty}, {@multicast2}, {@private}, {@local}, {@private}]}})
syz_usb_connect$midi(0x2, 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000002030144b4740000102030109022e00010118100409040000020103000609058e0b20000fd702052501012709058c0200066df780052501013a"], &(0x7f0000000640)={0xa, &(0x7f0000000080)={0x0, 0x6, 0x200, 0x9, 0x1, 0xe, 0x40, 0x40}, 0x8, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}})
sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9090)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
fsetxattr$system_posix_acl(r4, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x3)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x8000000000000000)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r5, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000480)=[{&(0x7f0000000f80)=""/162, 0xa2}], 0x1, 0x47}}], 0x48, 0x4000000}, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x24080, 0x0)

2.336960775s ago: executing program 1 (id=3327):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r2 = dup(r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x4a, 0x421, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}}, 0x4080)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r4, 0x0, 0x3, 0x1}}, 0x20)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
r5 = eventfd2(0x800, 0x0)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)="6995", 0x2}], 0x1)
r6 = syz_clone(0x1000, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0)
syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2.149941864s ago: executing program 1 (id=3329):
syz_usb_connect(0x5, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100024003a820e308010320f30102030109021b0001030240440904180001ee7a9505090502034000800843"], &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0})
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000340)={0xdc, 0x0, 0x5})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0xde187bfeedb11a59, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x400c814)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', <r4=>0x0, 0x29, 0x0, 0x50, 0x10, 0x0, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8700, 0x7, 0x7, 0x9}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000010}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x13c, r3, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1c}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x13c}, 0x1, 0x0, 0x0, 0x44800}, 0x4008000)
signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x9, 0x0, 0x10020000000000, 0x10, 0x8, 0x0, 0x1000001004, 0x49}, 0x0, 0x0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
landlock_create_ruleset(0x0, 0x0, 0x1)

2.080531631s ago: executing program 4 (id=3330):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="000088640000030000000100000011000fc000110283"], 0xfce)

1.912216396s ago: executing program 4 (id=3331):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x2103, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x2103, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
socket$inet(0x2, 0x80000, 0x8001)
r2 = socket$packet(0x11, 0x2, 0x300)
socket$packet(0x11, 0x3, 0x300) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05111600d3fc141200004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
sendto$packet(r3, &(0x7f00000002c0)="05111600d3fc141200004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
getresuid(&(0x7f00000000c0), &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140))
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001280)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x4e21, 0x0, 0x4e20, 0x4, 0x2, 0x2a71cf982f3a247, 0x20, 0x33, r4, r5}, {0xade5, 0x80000001, 0x7f, 0x7, 0x2300004, 0xfffffffffffff973, 0x2, 0x3}, {0x1001, 0xe, 0xfe62, 0x4}, 0x9, 0x6e6bba, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d6, 0x3c}, 0x2, @in6=@local, 0x3501, 0x3, 0x2, 0x9, 0x8, 0x8, 0x9}}, 0xe8) (async)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001280)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@local, 0x4e21, 0x0, 0x4e20, 0x4, 0x2, 0x2a71cf982f3a247, 0x20, 0x33, r4, r5}, {0xade5, 0x80000001, 0x7f, 0x7, 0x2300004, 0xfffffffffffff973, 0x2, 0x3}, {0x1001, 0xe, 0xfe62, 0x4}, 0x9, 0x6e6bba, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010100, 0x4d6, 0x3c}, 0x2, @in6=@local, 0x3501, 0x3, 0x2, 0x9, 0x8, 0x8, 0x9}}, 0xe8)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="05f51fb40000000000fa0c000000"], 0x14}}, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) (async)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf250f0000000500140024000000080001"], 0x38}, 0x1, 0x0, 0x0, 0x30000801}, 0x800)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001440)='blkio.bfq.time_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r10, &(0x7f0000000240)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b200fedea1c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0xf47)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, &(0x7f0000000040)=0x8, 0x8)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r8)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r8, &(0x7f0000001400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x14, r11, 0x2, 0x70bd27, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040811}, 0x44)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x800, 0xfffffe01, 0x881}, 0x18, 0x1000)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

1.752577747s ago: executing program 4 (id=3332):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000540)=""/2, 0x2}], 0x1}, 0x40000000)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x300, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000060e000a001000000002800000121f", 0x2e}], 0x1}, 0x84)

1.622743154s ago: executing program 4 (id=3333):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
syslog(0x2, &(0x7f0000000000)=""/136, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
bind$rxrpc(r0, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e1d, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}}, 0x24)
syz_usb_connect$midi(0x3, 0x31, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000020861a2d7540000102030109021f00010118100409040100010320060905e352f897c4f3687c32aa1659fe253646bda84ae0b3c07c0b7787026569f0953ff97ce4f41e15d9e1837bc5759728f16be02644988d29ff7936b3d8daf03815e1210e90d4af2eaca070d583b419321d19c7e7e100"/131], 0x0)

1.465822438s ago: executing program 3 (id=3334):
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@string={0x4, 0x3, "4ddf"}}]})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000dadaffffffffffffaaaaaaaaaaaa86dd6900001000782c01fc020000000000000000000000000004ff0200000000000000000000000000012b"], 0xb2)

793.503988ms ago: executing program 3 (id=3335):
madvise(&(0x7f00003ca000/0x1000)=nil, 0x1000, 0x66)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0x9, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0xe}}}}}}}}]}}, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x0, 0x21, 0x9e, {0x9e, 0x11, "6feb7598ed6f3a4149dc1aaaae008f68694d656ad67cac9d69c50fc24b239b16f56211617037beefc18526c50ed002371e6ac7c5ffaead062ca735c78acdabf91d45ebf531828abac78b8170df60de391b927714dc15534addb7e024a9f0dd0bf47e49e84c32f4c03306d8d7603ab0aa5c029b0a05df1b217dc36c23b81415c9dd0d1737b344f0acbfec621be506389fc62bcc494f8c5510b67ef8fc"}}, &(0x7f00000000c0)={0x0, 0x3, 0xeb, @string={0xeb, 0x3, "5e4531383f43b6a09cddb81ddc77577a1cdfe92e6e6ce417f2613a1eb5b0ac9e3ecee825510ae51b8f64e5c3047a5d4b347f6d745140acb5a2c372a8b5981e377140406c6cd2e91df6d9245788d174376ff12e248aaf06ce1a04f8b8b7331f8ee0ac34acba1356ce83ab186f99c6108d83143a8830878d3308c294820bcd5ba494c0587b83ed0225d91e093e803b25c33ed65749ab76b8de2df0798d1ace3a73e51a8934be8171c1d11b861ff3e0d5a2e1c25045edbdd9e099cb807a7e5c8d25077518ca4c395368e603bc6443734ab1d02f8cabdde212bc044bbc22119e5d8476e3056ca854869ba5"}}}, &(0x7f0000000400)={0x44, &(0x7f0000000200)={0x0, 0x0, 0x36, "31c2ea1400935c789e0c3ac668147d360b32622ee9f6f3c4acd32af606fadf866ea8f48041b17731c295ce3418909110ebd95e88473d"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xe}, &(0x7f00000002c0)={0x20, 0x81, 0x3, "e8c3da"}, &(0x7f0000000300)={0x20, 0x82, 0x1, "a9"}, &(0x7f0000000340)={0x20, 0x83, 0x2, "8e48"}, &(0x7f0000000380)={0x20, 0x84, 0x4, "eac6c1cc"}, &(0x7f00000003c0)={0x20, 0x85, 0x3, "d04df4"}})

746.703949ms ago: executing program 5 (id=3336):
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@string={0x4, 0x3, "4ddf"}}]})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x1, 0x700, 0x7, 0x81, {{0xc, 0x4, 0x3, 0x2d, 0x30, 0x66, 0x0, 0x6, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x1c, 0xd6, 0x3, 0x1, [{@multicast1, 0x4}, {@private=0xa010101, 0xffff}, {@loopback, 0xffffffff}]}]}}}}})
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008800)
getsockopt$inet_mptcp_buf(r1, 0x11c, 0x4, &(0x7f00000000c0)=""/206, &(0x7f0000000080)=0xce)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f0000000000)=0x9, 0x4)
write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000dadaffffffffffffaaaaaaaaaaaa86dd6900001000782c01fc020000000000000000000000000004ff0200000000000000000000000000012b"], 0xb2)

634.274856ms ago: executing program 1 (id=3337):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
r2 = dup(r1)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, 0x4a, 0x421, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}}, 0x4080)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000080), r4, 0x0, 0x3, 0x1}}, 0x20)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
r5 = eventfd2(0x800, 0x0)
writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)="6995", 0x2}], 0x1)
r6 = syz_clone(0x1000, 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0)
syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

382.750475ms ago: executing program 1 (id=3338):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0x7, 0x1000, 0x6e, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3f, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x2, 0x6, 0xb, 0x4, 0x7, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e5, 0xcd, 0x409, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x312, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0xfffffffe, 0x9, 0x2, 0x9, 0x8, 0x0, 0xef61, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x7, 0x9, 0x48c93690, 0x42, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x4, 0x5, 0x7fff, 0x2, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0xff, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xfffffffd, 0xd, 0x4, 0x6d01, 0xc9d1, 0x9, 0x800000, 0x1fd, 0x80, 0x3, 0x400, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x800001, 0xffff, 0x3, 0x6, 0x1e, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x3, 0x53f53814, 0x12, 0x7, 0x22, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x4, 0x6, 0xff7fffff, 0x95d, 0x5, 0x8, 0xc7, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9603, 0x7, 0x2, 0x4, 0x6, 0x1, 0x6, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x40000004, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0x3]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

320.27593ms ago: executing program 1 (id=3339):
r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x20402)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x20303, 0xe3)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}})
r2 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00')
openat2(r2, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000000)={0x4400, 0x0, 0x11}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './cgroup/file0\x00'})
write$UHID_INPUT(r2, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x20402) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x20303, 0xe3) (async)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={r1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x5, 0xc, "c44ef9682a689185ff07ec0f9eddd770e010a8b62022fd106fa715e63fee8ab07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e192e4a", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) (async)
syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') (async)
openat2(r2, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000000)={0x4400, 0x0, 0x11}, 0x18) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r2}}, './cgroup/file0\x00'}) (async)
write$UHID_INPUT(r2, &(0x7f0000000540)={0x8, {"7272a6d1e9aed09bf82ef65cb1b3c31b630a83308b0862ef6344f0af712347897fb20d910dfe5d9813b2f328666136353d52e048fbf0391df23e6cfa5fb4faa64d0451a9e4b04c1c76f8f49cf63085c9b1a0ee6f9aa286cb730bd5ce37d5305ae4e2b832c48ad2c51b7f0f057475cc594b54ff4ab652b095a94cdaa0bb1fbf1a55ccee196e4691170f2372beb5f9d91dacf4288dfca1e6d55f97057540becf9e63d41c6a74868a37f7e3358ba436c68685191b99cb140034e8bff6e8f455c3055763a261eface40dd65128968ac4e48076a86338a3444f03834ef398446f48bdf52d7155c802276b5237fb10bfca47afed0b47cbedb609e529d9b684cea4ab4fe5fcdc1fab41f2c78f2cd8b9d20c60b9235631adf99efb5aaf7603a66c6b28a09412e5828e5902319e0d9624b4d2b5c6509d1f62206de27f969430999b35a0877a43b0204fea81700d9d836a88930dabd9c9d25760fb179afd89b7f7d910b21f74f7436eb608a3b0dbad106481180bb069e2391215d3f330fcddcb66f0762fb61447de648e8e8d74cd6e706411f479416dfb2ed149543e3aa2453cc7137fb279e414a1c3dca56e5d645c0a5eec430222fc399f2a619afe43b8908689200c904fcbb34c0214a0956171a25ab2d3924803154ea31ba67868396e411f6379dbef0999532418dc56453b4937b0ed4073ec01af25697b7c89d896267f9cb8f17fdaa365d8934ec6b547f470a4644b1d912adb1d4a4a93397853296cda2289df7cfbeb68ad9c335c1a3529b672b3791b682748df402d333e15e03eabfd91e9c8db592aea5c4c92665085d8eb117f38a78f93ba2e4853388ce3c49cd86b17078f3db77f1e7f9bbc0531960fc8f3e669aa9c2b162af827cf7618f706f5cb5c8287c9a18a6376744711736c06e3ef0531c726ac6c08f590da55c8ab80b23969cf190c9ac646bfa513819671b43397e233f89949641ad3833b656271e2683a2b41341c9de604b46b63b534601ac3c795fafeed65dba4cbfd0355c4363ead4c4315d292ac9dd0046712613890785de1ffd45c52f89cfdc1e020bac22ca4d34eacf1ac0f1250d5cb90de0207c1cf795b0b40efb7065fbd80715f63c6ea30b3678c58a1e096813fc0ac3a3f1e862a7a9571ac4dc4fc7193cce63f77ac1eb977a90af8e963261c765095f53666813276a70d51b30f8a4735312839497036afb1a1954edc53de79b60b68ff797eab54c8b124e913eff7dad54f2c945a008c4686cb9a52d5d33dbf290f7ab628794a95148bef11543d90f22782d894b5f4f2029b1388a16768ae27afb916e0c4d639b81e36a4f26226b7738f1916060e98306e3eeb8ebc43aab8be5b5e413a4408124c8f789fac593fcc07c83ec78137a8645cf78e2d86712ea47a2383308c91e33903ad1eb054094bd41a99ffd5b166a07232be99a913540fccddb09e84bdc629209001deac9834ae310f8975f6f279014a795fffe42c4c7f07d2130a838600f8275bd30d1a5febe9e4acd0e3db52b2a857f56b9af9ea883ccd95c4b8e4c296bce767f127964b6cd664d542dfcc127f0efca7b2125fffd18db3f01fc980eeee9164a65316ecb3e0062ffcc4019ea278cda8182eea3a04660fda6087728289ae902942b83945b5bbfc1c1cff5642b9cb09b8f592a574b8ecae677a4f74143fe43acddd141b4c3031fa22dd7003f1a3c389721224353e333019a5d5f32bd51c38a5a7f961245438596fc0e2b6822db8523b0f0818ecfa2675fbc92f7d3c86d9f4a4af484cfcbff5ac1d9aac70b45d85543c63ec3d16edca60a4111ada3f125647d854a6c9a0cda2ac9e73e6b034dae91f370b88cb2c20e0b5d29536c3f4d9ab26d91b0d40f5fae319b25bab9d110dd84b3636d5a81623ecf29887b4b038f53d8a4321b4d66b6e563d80d8ca57a5d99f85c261bbb59d18425b7f263aa1d2bece1940de7602be534fb6d7ed71709128e3b4d8c1180ee06e8d9376886ebc703bddc0fef722aea09788c863816e2c6eb2f935cc49a1ecc3322f18e219926d954b781f4d3b2e9ca0f728c777f59cac77ad5daf1aea7e7faa6928831074d8e8d8036b226fdd3bc3481e522227f47b241fbf301cc4ec2dc4fc77290c962feaf2313856319dd1239308fe4f6405eef1b155d13bcde7a74b5cd59e275d5b4449658694225c8df58122e10850f01718a134f14621ee78469391585c114c655ccf44f26e1ef232849b016ad87a1f82d95d748b7610548a36129b6d7b6b11bd2d7f2ecd9d9ebc843ae3f3596a2d38c6b221b386ea5cddfd76df4e807ec366095d8969db629fc8a653629a62364df18d8eafaf97c437d063b93d76e7ea9fcfbeaa017bf31828dcdc349526284059777823585298c3ee8518f463bca78a1fc595f94626113048b61d343ac9820f9e057db75c723aa8cb871cf4ee41fc9fc8b57b6715662c659cee14c13d946c5d492fb20c38d9877a7b39ca870c26fe4c8561fc877ceda7a96dc04607a5670ab1322628b32f4034ea045fe99264c908c0ebfdcb803d65c695b5769ac5bb66a805cf217f39b54d572a58accfa019b66114386a95ec0bcc0a0d7ec79671a8b7e691b6800d48135272aac159013a9d88fc914e76e9b1569afb646bb503d3820f5b632889ab6a9d348c53f2db1f7077fae123cad24ae18d60c6dc313532a340801b222b61daf00ebe43c582d7d32e1f8eba43eb2086c352a48943ea10eb71f93370cb03522a69471289cc645f12b2dcab491532f1fe2dd49148d54d32a7cdcacf2bfdc89f9e6050ebffb0b60b17d9e9d8e2c56a1e2cb8592e3009c20b6593f7ac944b56a0a3ecd8a78e0f1a75b02ccf1e03f9f1c0b821c9a915653a7a31ec35adbd8715e8e26bb3ea9fa0df3a09e7f3689a39ca1540ba21c58cad0a519b182f05c0308862f2682cb5132444d060194466cfd089df9658228d50c34cc7890b6361d5b336605e11112b8c3a2943b3c436a42f109d4cb0f83a448ac9dc5f2b25cea5864bf55464db63ac6c3632525c4e2f58ad82c084cef5d024c9afb080d0a19358033113e2ebec167ea6e8cbaa7cc53598dd2c6f90bea935002c61b7b45c6f308a6734636df9e438dd1a9a977547fd0c67aedcdcc17faa9815b02788e899f6a53616774df9a41fe15a7ba5b34ba8861b4b4eef64d1fd28c92c4e9f785c5f7a734c0e2fb7f8acdc67f0f367d926c5a309df96341b144aa468ccbfb7ebf7a94552f75e5d7169e31174626c03eb526e94a9dc38dc4caae12891c41be857fc6e44b17678383f47cd9c2c5c6d573527468a5a2ca589e603ca08ce581baf1359919eaeb0c319003cecce32a908ccfc164f963161ae5b1433e7dbfeb8d4fafa704a582c40566236c500df386f2f8f29c6f28fefd6667149c1d5a2402a4121adcd1818b4d75d7ca440bd8342284e215b7f20e958f46d3c9ba9cff6b8208c25b0621b247d1b2a93ad7dd9d1fba7aaeebbb9eff9f72d1bb6aa4c1f507f3342854f9b49ca0c68cbd665882b1cde2569a202a85910f18659e14a97da3180a736addae5efe906376d79503ec10be60df1d1774c8b7f082e8ffa4f3dbbfe80f134de78c497bfd679aa9a86457e91b6f1982316fea986f19c0c914e6f97b7a2bc37ba3592203964d4da007cea0b32149175d2f46ed6581c933ce3576cff26cb5d652f639aba3e36ee77fb2989f0a3af5d683524c48560bcb1aab5d9b85db578470f43472e038444eee8c343f79e9bc59e59b33404583ec1c67a2077778022a4c41d39e1c4df2195af07efd43b290157534e86f20ee65c7e84a8e65c3a98df1193eb9ae9e58b844b2da7a39cfabae022455ab568642751c9ac2cc7e05d7513168671874de7debd9f7e79100a0f2883fceb6a74d8ace97822baea8b5a347efc40a7d41923d24aed69f4b86dc33583f1b02690025756aa2481e364dd0a0fe7f60c136fa986d3bbbc097062f2684921f3dc9b8bcb54bfc2a3278456875c06f017a76719210caff54ebc0714598af38f78121e61eb05de193b85b2c33ed17a12d55e6331ed2e54e849a52bc3f3db03486717bec43e55283dc31ecd239210742e596f6f14542cce0ad8581b0e1b1fbdcad218e44bfa96b6c3ac617ccb356e25203060e087b0b0a34809b439ffba684413ad7e121c5260284e394d3a39eef39f44f85a720362df83ad950d429da9224809cb891960e8b0387bbce5fa88bcd784d5b998f73f5526b2bc5392200e628de03dad8345159a4e3f77cd9406f0c2d1e0b269ad3e0d1842f0c49e5080368fcb18b8c1248fc92f9944bca2e2d6305316922c3c113c4b4164737b2740ab76125ae3e1e29eb7022b6275ccb3e924260d3f8799a1271e21da669d8acf0cf25bbc108822cf3c100a1bca66bfe6d516e95ef165250f2048cb3cd0f4c72073f22b147c9386f9e25034a83abad3f178342513309602c9584b9c3c02ece7143dc868aad88e06e54b08932a53d555fb7464ac5d8bb6756c8e509e818db6f027813b7c4820795734c2d5b37c1f87fc659df01c5626686ade0ae3427fed1a678528c5356378e342f355c2a8282665e46a47b8f7766280fe8113995da716b4bdbfabcebdccb3761f9a57f2ab745a7ef07e190d4185da0d03e172a17ff75f2d610c7d9cf5c4fefbe10abcfcc4ff26284d4323f86793c964f8c9541029b31424c808d08a79cd4ed1734f826cf2b4a58bc444d36c73566fd0f7f768103e4f1241336c316335311d670b968c9193f9865015ad89f67db6f08e846376102a2dee145328da8e83ac947556d636b04b22927a184903d7d03624648a920c52f9bb7bf576dc61da278d5d528ade64e417f0fcc4900e999350c4b0c9a6ad4c642aa0da4824120388be37511a2e878bf03ba360a6f175d9457a4ec2334fb698f4c3e1d008d1a19161e4f7596ed0829dcf2197a82ade85534b5846d7a63db2636a17d5f6303d3c8555d416332c5216665e93f35dd9601e3c77042cf2d3a6807bdfa25b17a287a5b719c7aacaedbb82f48ff3e01fad66af46b68ae86442f33c7dc05ea482d3bd5b85c0a28adbd32f82e3b4f8daec90e1ae0259465151238a0c46c1c1186661df5765e2cf0037ac7e7b3d7eaa8c8f890fc87221250611d0d0b8d499a9d5ea4bef662dc08649cfa94fa9f2403fc371abb636fe0be29a3fc0b2681282f2b0960da259f57ae92b1a054629490e7d5b3048a9600188e86715f7f3b2fd86be7e8e87949d00f44f604cd398e2be5780f406992efa28ece7b09c762a4ecf562c0b9827c66568055af7e1482c3206cc9cfd9ca4f949d6b674158e5c3729cd390b24848f3e1b4ebbf631d5dd8b88baf7946aaa4c2bb2a031b360cca999e16604e020a94d01e25ab8bf24a6490869552e5bc2e314082496d46fed1235ccc565360ee0fb87338f747b1a03cca63649ff25e88409663e04137d37040bd954421b405b0f8ea9508c7dc025fac770bee2fef1351b9657e0f964a668a90d3b8ef11cbd7609baf0968c6467e62402f3da8db59998d0fe378e125e95534fadc772a4b91cf354e83ab386c078d8306bb30f34d40536973c5a5276c568d159fb12fdaf39875e8f9d64b4dac336b906cf208d8043918045cfa3341d947eab40eed1370ff2e8856f085ac20988ac997b25f34c60ff1b79be86b170ca3d383c7e5b6cdb3984ff8718f312815b24fe44d268193b9c0de42a08e9159ed7af9e80a7fa7b8bd8ece4976eb2cf5e2f3b5e68057bfb3024d1a1a840c79bc2da27d5068157f5ffa05d19102ccab4b699857accc95ce3b7699587ceb60bd90c86dbcdc2f1a909589ab3", 0x1000}}, 0x1006) (async)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async)

150.481333ms ago: executing program 4 (id=3340):
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c)
sendmmsg$sock(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="74b17a07", 0x4}], 0x1}, 0xffffffff}], 0x1, 0xc4)

71.853051ms ago: executing program 4 (id=3341):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff3f}, 0x2000000)

0s ago: executing program 5 (id=3342):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000)

kernel console output (not intermixed with test programs):

s_ioctl+0xfc/0x170
[  566.632623][T15297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.632643][T15297]  do_syscall_64+0x15f/0xf80
[  566.632670][T15297]  ? trace_irq_disable+0x3b/0x140
[  566.632687][T15297]  ? clear_bhb_loop+0x40/0x90
[  566.632708][T15297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  566.632723][T15297] RIP: 0033:0x7f715b79c819
[  566.632751][T15297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  566.632768][T15297] RSP: 002b:00007f71599f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  566.632788][T15297] RAX: ffffffffffffffda RBX: 00007f715ba15fa0 RCX: 00007f715b79c819
[  566.632802][T15297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  566.632813][T15297] RBP: 00007f71599f6090 R08: 0000000000000000 R09: 0000000000000000
[  566.632826][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  566.632834][T15297] R13: 00007f715ba16038 R14: 00007f715ba15fa0 R15: 00007ffc7c3da638
[  566.632856][T15297]  </TASK>
[  566.632876][T15297] syz.4.2900: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  566.676835][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  566.681624][T15297] ,cpuset=
[  566.989271][   T24] snd-usb-audio 2-1:6.4: probe with driver snd-usb-audio failed with error -2
[  567.038442][   T24] usb 2-1: USB disconnect, device number 121
[  567.047772][T15300] kvm: Disabled LAPIC found during irq injection
[  567.118044][T15297] /,mems_allowed=0-1
[  567.128236][T15297] CPU: 1 UID: 0 PID: 15297 Comm: syz.4.2900 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  567.128268][T15297] Tainted: [L]=SOFTLOCKUP
[  567.128277][T15297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  567.128290][T15297] Call Trace:
[  567.128298][T15297]  <TASK>
[  567.128307][T15297]  dump_stack_lvl+0xe8/0x150
[  567.128342][T15297]  warn_alloc+0x249/0x340
[  567.128364][T15297]  ? kasan_quarantine_put+0xbb/0x1f0
[  567.128397][T15297]  ? __pfx_warn_alloc+0x10/0x10
[  567.128419][T15297]  ? __get_vm_area_node+0x211/0x300
[  567.128447][T15297]  ? __kmalloc_cache_node_noprof+0x248/0x6b0
[  567.128480][T15297]  ? copy_process+0x89b/0x4430
[  567.128511][T15297]  ? __get_vm_area_node+0x211/0x300
[  567.128548][T15297]  __vmalloc_node_range_noprof+0x38f/0x1750
[  567.128601][T15297]  ? __memcg_slab_post_alloc_hook+0x493/0xe80
[  567.128668][T15297]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  567.128702][T15297]  ? rcu_is_watching+0x15/0xb0
[  567.128735][T15297]  ? memcpy_and_pad+0x48/0x80
[  567.128763][T15297]  __vmalloc_node_noprof+0xc2/0x100
[  567.128793][T15297]  ? copy_process+0x89b/0x4430
[  567.128821][T15297]  ? copy_process+0x89b/0x4430
[  567.128856][T15297]  dup_task_struct+0x298/0x840
[  567.128891][T15297]  copy_process+0x89b/0x4430
[  567.128952][T15297]  ? __pfx_copy_process+0x10/0x10
[  567.128990][T15297]  ? mutex_init_lockdep+0xdf/0x110
[  567.129013][T15297]  vhost_task_create+0x1f9/0x380
[  567.129038][T15297]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  567.129062][T15297]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  567.129086][T15297]  ? __pfx_vhost_task_create+0x10/0x10
[  567.129118][T15297]  ? __pfx_vhost_task_fn+0x10/0x10
[  567.129147][T15297]  ? __lock_acquire+0x6b5/0x2cf0
[  567.129178][T15297]  ? kasan_save_track+0x4f/0x80
[  567.129207][T15297]  ? kasan_save_track+0x3e/0x80
[  567.129245][T15297]  ? kasan_save_free_info+0x46/0x50
[  567.129268][T15297]  ? __kasan_slab_free+0x5c/0x80
[  567.129284][T15297]  ? kfree+0x1c5/0x640
[  567.129312][T15297]  kvm_mmu_post_init_vm+0x147/0x2d0
[  567.129340][T15297]  kvm_arch_vcpu_ioctl_run+0x106/0x20d0
[  567.129371][T15297]  ? __mutex_trylock_common+0x158/0x260
[  567.129391][T15297]  ? look_up_lock_class+0x57/0x110
[  567.129417][T15297]  ? register_lock_class+0x31/0x2e0
[  567.129444][T15297]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  567.129470][T15297]  ? __lock_acquire+0x6b5/0x2cf0
[  567.129500][T15297]  ? __mutex_lock+0x320/0x1420
[  567.129534][T15297]  ? kasan_quarantine_put+0xbb/0x1f0
[  567.129574][T15297]  ? do_raw_write_lock+0x11d/0x260
[  567.129621][T15297]  kvm_vcpu_ioctl+0xa62/0xfd0
[  567.129649][T15297]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  567.129669][T15297]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  567.129717][T15297]  ? __fget_files+0x2a/0x420
[  567.129746][T15297]  ? __fget_files+0x2a/0x420
[  567.129770][T15297]  ? __fget_files+0x3a0/0x420
[  567.129794][T15297]  ? __fget_files+0x2a/0x420
[  567.129821][T15297]  ? bpf_lsm_file_ioctl+0x9/0x20
[  567.129841][T15297]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  567.129863][T15297]  __se_sys_ioctl+0xfc/0x170
[  567.129882][T15297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.129903][T15297]  do_syscall_64+0x15f/0xf80
[  567.129929][T15297]  ? trace_irq_disable+0x3b/0x140
[  567.129951][T15297]  ? clear_bhb_loop+0x40/0x90
[  567.129974][T15297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.129994][T15297] RIP: 0033:0x7f715b79c819
[  567.130011][T15297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.130028][T15297] RSP: 002b:00007f71599f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  567.130047][T15297] RAX: ffffffffffffffda RBX: 00007f715ba15fa0 RCX: 00007f715b79c819
[  567.130061][T15297] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  567.130072][T15297] RBP: 00007f71599f6090 R08: 0000000000000000 R09: 0000000000000000
[  567.130084][T15297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  567.130095][T15297] R13: 00007f715ba16038 R14: 00007f715ba15fa0 R15: 00007ffc7c3da638
[  567.130126][T15297]  </TASK>
[  567.134037][T15297] Mem-Info:
[  567.199615][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:6.4/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  567.249505][T15297] active_anon:7314 inactive_anon:0 isolated_anon:0
[  567.249505][T15297]  active_file:18344 inactive_file:40201 isolated_file:0
[  567.249505][T15297]  unevictable:768 dirty:34 writeback:0
[  567.249505][T15297]  slab_reclaimable:11190 slab_unreclaimable:103025
[  567.249505][T15297]  mapped:32140 shmem:2209 pagetables:1309
[  567.249505][T15297]  sec_pagetables:0 bounce:0
[  567.249505][T15297]  kernel_misc_reclaimable:0
[  567.249505][T15297]  free:1300610 free_pcp:10480 free_cma:0
[  567.610220][T15297] Node 0 active_anon:29056kB inactive_anon:0kB active_file:73376kB inactive_file:160600kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:128560kB dirty:136kB writeback:0kB shmem:7300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12532kB pagetables:5076kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  567.647114][T15297] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  567.682548][   T29] audit: type=1326 audit(4408.634:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15301 comm="syz.3.2901" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde3ed9c819 code=0x0
[  567.704922][T15297] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  567.801622][T15297] lowmem_reserve[]: 0 2489 2490 2490 2490
[  567.818249][T15297] Node 0 DMA32 free:1242368kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29256kB inactive_anon:0kB active_file:73376kB inactive_file:160600kB unevictable:4836kB writepending:136kB zspages:0kB present:3129332kB managed:2549200kB mlocked:3400kB bounce:0kB free_pcp:39360kB local_pcp:14768kB free_cma:0kB
[  567.852374][T15297] lowmem_reserve[]: 0 0 0 0 0
[  567.857169][T15297] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:580kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  567.887787][T15297] lowmem_reserve[]: 0 0 0 0 0
[  567.893229][T15297] Node 1 Normal free:3944124kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  567.957837][T15297] lowmem_reserve[]: 0 0 0 0 0
[  567.964128][T15297] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  567.997369][T15297] Node 0 DMA32: 1659*4kB (UE) 3031*8kB (UME) 1505*16kB (UME) 722*32kB (UME) 369*64kB (UME) 409*128kB (UME) 266*256kB (UM) 114*512kB (UME) 64*1024kB (UME) 27*2048kB (UM) 204*4096kB (UM) = 1236916kB
[  568.030206][T15297] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  568.059000][T15297] Node 1 Normal: 1*4kB (M) 9*8kB (UM) 5*16kB (UM) 7*32kB (UM) 7*64kB (UM) 5*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 960*4096kB (M) = 3944124kB
[  568.067122][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  568.099308][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  568.110387][T15297] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  568.122146][T15310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  568.134456][T15297] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  568.136286][T15310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  568.168012][T15297] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  568.183004][T15297] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  568.201821][T15297] 60750 total pagecache pages
[  568.207452][T15297] 0 pages in swap cache
[  568.213783][T15297] Free swap  = 124996kB
[  568.218146][T15297] Total swap = 124996kB
[  568.222406][T15297] 2097051 pages RAM
[  568.227350][T15297] 0 pages HighMem/MovableOnly
[  568.234149][T15297] 427991 pages reserved
[  568.238760][T15297] 0 pages cma reserved
[  568.298106][ T5897] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  568.428023][ T5897] usb 2-1: device descriptor read/64, error -71
[  568.452142][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2905'.
[  568.515265][ T5955] usb 1-1: USB disconnect, device number 49
[  568.678327][ T5897] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  568.818007][ T5897] usb 2-1: device descriptor read/64, error -71
[  568.931375][ T5897] usb usb2-port1: attempt power cycle
[  569.017392][T15333] binder_alloc: 15332: binder_alloc_buf size 12520 failed, no address space
[  569.026599][T15333] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  569.278014][ T5897] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  569.298892][ T5897] usb 2-1: device descriptor read/8, error -71
[  569.314831][   T29] audit: type=1326 audit(4410.264:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15344 comm="syz.3.2916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde3ed9c819 code=0x0
[  569.558163][ T5897] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  569.589374][ T5897] usb 2-1: device descriptor read/8, error -71
[  569.698559][ T5897] usb usb2-port1: unable to enumerate USB device
[  570.066021][T15365] FAULT_INJECTION: forcing a failure.
[  570.066021][T15365] name failslab, interval 1, probability 0, space 0, times 0
[  570.080785][T15365] CPU: 0 UID: 0 PID: 15365 Comm: syz.4.2923 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  570.080815][T15365] Tainted: [L]=SOFTLOCKUP
[  570.080822][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  570.080834][T15365] Call Trace:
[  570.080842][T15365]  <TASK>
[  570.080851][T15365]  dump_stack_lvl+0xe8/0x150
[  570.080884][T15365]  should_fail_ex+0x412/0x560
[  570.080916][T15365]  should_failslab+0xa8/0x100
[  570.080944][T15365]  __kmalloc_cache_noprof+0x88/0x660
[  570.080972][T15365]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[  570.081019][T15365]  ? sctp_add_bind_addr+0x8c/0x370
[  570.081052][T15365]  sctp_add_bind_addr+0x8c/0x370
[  570.081085][T15365]  sctp_copy_local_addr_list+0x314/0x4f0
[  570.081117][T15365]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  570.081145][T15365]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  570.081176][T15365]  ? sctp_v6_is_any+0x64/0x80
[  570.081207][T15365]  ? sctp_copy_one_addr+0x93/0x360
[  570.081239][T15365]  sctp_bind_addr_copy+0xb3/0x3c0
[  570.081269][T15365]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  570.081299][T15365]  sctp_connect_new_asoc+0x2ff/0x6b0
[  570.081324][T15365]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  570.081353][T15365]  ? __local_bh_enable_ip+0xd0/0x130
[  570.081383][T15365]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  570.081412][T15365]  ? security_sctp_bind_connect+0x7e/0x2c0
[  570.081445][T15365]  sctp_sendmsg+0x1528/0x2c10
[  570.081495][T15365]  ? __pfx_sctp_sendmsg+0x10/0x10
[  570.081532][T15365]  ? aa_sk_perm+0x6d5/0x900
[  570.081552][T15365]  ? __might_fault+0xaf/0x130
[  570.081589][T15365]  ? __pfx_aa_sk_perm+0x10/0x10
[  570.081613][T15365]  ? sock_rps_record_flow+0x19/0x350
[  570.081642][T15365]  ? __pfx_inet_sendmsg+0x10/0x10
[  570.081670][T15365]  ? inet_sendmsg+0x2f4/0x370
[  570.081695][T15365]  ? __pfx_inet_sendmsg+0x10/0x10
[  570.081721][T15365]  __sys_sendto+0x5de/0x710
[  570.081748][T15365]  ? __pfx___sys_sendto+0x10/0x10
[  570.081770][T15365]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  570.081813][T15365]  ? __fget_files+0x3a0/0x420
[  570.081853][T15365]  ? ksys_write+0x242/0x270
[  570.081877][T15365]  ? __pfx_ksys_write+0x10/0x10
[  570.081903][T15365]  __x64_sys_sendto+0xde/0x100
[  570.081928][T15365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.081953][T15365]  do_syscall_64+0x15f/0xf80
[  570.081980][T15365]  ? trace_irq_disable+0x3b/0x140
[  570.082006][T15365]  ? clear_bhb_loop+0x40/0x90
[  570.082033][T15365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.082055][T15365] RIP: 0033:0x7f715b79c819
[  570.082076][T15365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  570.082094][T15365] RSP: 002b:00007f71599f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  570.082117][T15365] RAX: ffffffffffffffda RBX: 00007f715ba15fa0 RCX: 00007f715b79c819
[  570.082133][T15365] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004
[  570.082147][T15365] RBP: 00007f71599f6090 R08: 000020000005ffe4 R09: 000000000000001c
[  570.082161][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  570.082174][T15365] R13: 00007f715ba16038 R14: 00007f715ba15fa0 R15: 00007ffc7c3da638
[  570.082226][T15365]  </TASK>
[  570.666318][T15377] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  570.786611][T15385] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  571.025494][T15395] virt_wifi0 speed is unknown, defaulting to 1000
[  571.299815][ T5928] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  571.464845][ T5928] usb 4-1: config 0 has no interfaces?
[  571.482446][ T5928] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  571.508423][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  571.526393][ T5928] usb 4-1: config 0 descriptor??
[  571.765761][ T5928] usb 4-1: USB disconnect, device number 47
[  572.198012][ T5897] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  572.278937][ T5928] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  572.348013][ T5897] usb 2-1: Using ep0 maxpacket: 8
[  572.368342][ T5897] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  572.393478][ T5897] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  572.422148][ T5897] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  572.433639][ T5928] usb 1-1: Using ep0 maxpacket: 8
[  572.445892][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0
[  572.457674][ T5928] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  572.470510][ T5928] usb 1-1: config 179 has no interface number 0
[  572.476976][ T5928] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  572.488006][ T5897] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  572.488047][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.514224][T15434] binder_alloc: 15433: pid 15433 spamming oneway? 1 buffers allocated for a total size of 4096
[  572.533596][ T5897] usb 2-1: config 0 descriptor??
[  572.558046][ T5928] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  572.571740][ T5928] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  572.584122][ T5928] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  572.595754][ T5928] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  572.609366][ T5928] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  572.618529][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  572.631166][T15427] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  572.761634][T15425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  572.763695][T15425] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  572.912994][ T5928] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input55
[  573.055729][T15427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.073474][T15427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.173909][ T5897] usbhid 2-1:0.0: can't add hid device: -71
[  573.186318][ T5897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  573.199625][ T5897] usb 2-1: USB disconnect, device number 126
[  573.298268][    T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  573.452780][    T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  573.462033][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.470316][    T9] usb 5-1: Product: syz
[  573.476576][    T9] usb 5-1: Manufacturer: syz
[  573.482252][    T9] usb 5-1: SerialNumber: syz
[  573.506452][T15427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.527231][T15427] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.608351][T15445] FAULT_INJECTION: forcing a failure.
[  573.608351][T15445] name failslab, interval 1, probability 0, space 0, times 0
[  573.621474][T15445] CPU: 1 UID: 0 PID: 15445 Comm: syz.3.2953 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  573.621507][T15445] Tainted: [L]=SOFTLOCKUP
[  573.621516][T15445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  573.621529][T15445] Call Trace:
[  573.621538][T15445]  <TASK>
[  573.621547][T15445]  dump_stack_lvl+0xe8/0x150
[  573.621588][T15445]  should_fail_ex+0x412/0x560
[  573.621623][T15445]  should_failslab+0xa8/0x100
[  573.621648][T15445]  __kmalloc_cache_noprof+0x88/0x660
[  573.621680][T15445]  ? sctp_v6_cmp_addr+0x15/0xd0
[  573.621708][T15445]  ? sctp_add_bind_addr+0x8c/0x370
[  573.621741][T15445]  sctp_add_bind_addr+0x8c/0x370
[  573.621774][T15445]  sctp_copy_local_addr_list+0x314/0x4f0
[  573.621807][T15445]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  573.621835][T15445]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  573.621866][T15445]  ? sctp_v6_is_any+0x64/0x80
[  573.621896][T15445]  ? sctp_copy_one_addr+0x93/0x360
[  573.621928][T15445]  sctp_bind_addr_copy+0xb3/0x3c0
[  573.621957][T15445]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  573.621986][T15445]  sctp_connect_new_asoc+0x2ff/0x6b0
[  573.622011][T15445]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  573.622040][T15445]  ? __local_bh_enable_ip+0xd0/0x130
[  573.622068][T15445]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  573.622089][T15445]  ? security_sctp_bind_connect+0x7e/0x2c0
[  573.622122][T15445]  sctp_sendmsg+0x1528/0x2c10
[  573.622169][T15445]  ? __pfx_sctp_sendmsg+0x10/0x10
[  573.622206][T15445]  ? aa_sk_perm+0x6d5/0x900
[  573.622224][T15445]  ? irqentry_exit+0x61a/0x700
[  573.622260][T15445]  ? __pfx_aa_sk_perm+0x10/0x10
[  573.622284][T15445]  ? sock_rps_record_flow+0x19/0x350
[  573.622309][T15445]  ? __pfx_inet_sendmsg+0x10/0x10
[  573.622335][T15445]  ? inet_sendmsg+0x2f4/0x370
[  573.622359][T15445]  ? __pfx_inet_sendmsg+0x10/0x10
[  573.622385][T15445]  __sys_sendto+0x5de/0x710
[  573.622412][T15445]  ? __pfx___sys_sendto+0x10/0x10
[  573.622439][T15445]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  573.622481][T15445]  ? __fget_files+0x3a0/0x420
[  573.622520][T15445]  ? ksys_write+0x242/0x270
[  573.622538][T15445]  ? __irq_exit_rcu+0xca/0x220
[  573.622570][T15445]  ? __pfx_ksys_write+0x10/0x10
[  573.622587][T15445]  ? handle_softirqs+0x715/0x840
[  573.622622][T15445]  __x64_sys_sendto+0xde/0x100
[  573.622646][T15445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.622669][T15445]  do_syscall_64+0x15f/0xf80
[  573.622699][T15445]  ? clear_bhb_loop+0x40/0x90
[  573.622736][T15445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  573.622756][T15445] RIP: 0033:0x7fde3ed9c819
[  573.622774][T15445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  573.622790][T15445] RSP: 002b:00007fde3fd1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  573.622810][T15445] RAX: ffffffffffffffda RBX: 00007fde3f015fa0 RCX: 00007fde3ed9c819
[  573.622825][T15445] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004
[  573.622837][T15445] RBP: 00007fde3fd1b090 R08: 000020000005ffe4 R09: 000000000000001c
[  573.622850][T15445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  573.622861][T15445] R13: 00007fde3f016038 R14: 00007fde3f015fa0 R15: 00007ffd72c8b0c8
[  573.622892][T15445]  </TASK>
[  573.987404][ T5955] usb 1-1: USB disconnect, device number 50
[  573.987632][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  574.001706][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  574.041255][T15442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.071984][T15442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.291556][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  574.306033][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  574.318148][ T5928] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  574.458119][ T5928] usb 2-1: device descriptor read/64, error -71
[  574.699596][ T5928] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  574.733022][T15467] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  574.837981][ T5928] usb 2-1: device descriptor read/64, error -71
[  574.961282][ T5928] usb usb2-port1: attempt power cycle
[  575.308004][ T5928] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  575.328688][ T5928] usb 2-1: device descriptor read/8, error -71
[  575.538038][T15442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  575.549223][T15442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  575.568479][ T5928] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  575.588658][ T5928] usb 2-1: device descriptor read/8, error -71
[  575.699469][ T5928] usb usb2-port1: unable to enumerate USB device
[  575.760778][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE
[  575.976363][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  575.990836][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  576.004212][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  576.014159][    T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  576.024561][    T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  576.038645][    T9] usb 5-1: USB disconnect, device number 29
[  576.517991][ T5928] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  576.667993][ T5928] usb 4-1: Using ep0 maxpacket: 8
[  576.677823][ T5928] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  576.687039][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[  576.702187][ T5928] usb 4-1: Product: syz
[  576.706398][ T5928] usb 4-1: Manufacturer: syz
[  576.711045][ T5928] usb 4-1: SerialNumber: syz
[  576.717828][ T5928] usb 4-1: config 0 descriptor??
[  576.727463][ T5928] gspca_main: sq905-2.14.0 probing 2770:9120
[  577.113756][T15486] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2965'.
[  577.196977][   T29] audit: type=1326 audit(4418.144:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.1.2966" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f48ddb9c819 code=0x0
[  578.048192][ T5928] gspca_sq905: sq905_read_data: usb_control_msg failed (-110)
[  578.055884][ T5928] sq905 4-1:0.0: probe with driver sq905 failed with error -110
[  578.179185][T15505] 9p: Bad value for 'sq'
[  578.437979][ T2171] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  578.612473][ T2171] usb 2-1: Using ep0 maxpacket: 16
[  578.628793][ T1103] nci: nci_rsp_packet: unknown rsp opcode 0x22d
[  578.632579][ T2171] usb 2-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config
[  578.665665][ T2171] usb 2-1: too many endpoints for config 0 interface 0 altsetting 52: 101, using maximum allowed: 30
[  578.677536][ T2171] usb 2-1: config 0 interface 0 altsetting 52 has 0 endpoint descriptors, different from the interface descriptor's value: 101
[  578.692500][T15513] binder_alloc: 15512: binder_alloc_buf, no vma
[  578.694517][ T2171] usb 2-1: config 0 interface 0 has no altsetting 0
[  578.712447][ T2171] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  578.722649][ T2171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.732195][ T2171] usb 2-1: Product: syz
[  578.736493][ T2171] usb 2-1: Manufacturer: syz
[  578.741234][ T2171] usb 2-1: SerialNumber: syz
[  578.749380][ T2171] usb 2-1: config 0 descriptor??
[  578.995153][ T2171] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  579.008560][ T2171] usb 2-1: USB disconnect, device number 5
[  579.300950][ T2171] usb 4-1: USB disconnect, device number 48
[  579.918047][ T5928] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  580.068129][ T5928] usb 4-1: Using ep0 maxpacket: 32
[  580.074857][ T5928] usb 4-1: config 242 has an invalid interface number: 168 but max is 0
[  580.083607][ T5928] usb 4-1: config 242 has an invalid descriptor of length 255, skipping remainder of the config
[  580.094293][ T5928] usb 4-1: config 242 has no interface number 0
[  580.100689][ T5928] usb 4-1: config 242 interface 168 altsetting 8 endpoint 0x8 has an invalid bInterval 64, changing to 7
[  580.111983][ T5928] usb 4-1: config 242 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping
[  580.122923][ T5928] usb 4-1: config 242 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  580.134026][ T5928] usb 4-1: config 242 interface 168 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 10
[  580.149166][ T5928] usb 4-1: config 242 interface 168 has no altsetting 0
[  580.160182][ T5928] usb 4-1: New USB device found, idVendor=19d2, idProduct=6cbf, bcdDevice=cf.54
[  580.169498][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.177527][ T5928] usb 4-1: Product: syz
[  580.181879][ T5928] usb 4-1: Manufacturer: syz
[  580.186538][ T5928] usb 4-1: SerialNumber: syz
[  581.554937][T15507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  581.593342][ T5928] rndis_host 4-1:242.168: rndis: master #0/0000000000000000 slave #1/0000000000000000
[  581.644274][ T5928] usb 4-1: USB disconnect, device number 49
[  581.968068][  T808] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  581.977994][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  582.048671][ T5890] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  582.098057][  T808] usb 1-1: device descriptor read/64, error -71
[  582.133242][   T24] usb 2-1: config 2 has an invalid interface number: 97 but max is 0
[  582.143727][   T24] usb 2-1: config 2 has no interface number 0
[  582.152115][   T24] usb 2-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  582.163463][   T24] usb 2-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64
[  582.174959][   T24] usb 2-1: config 2 interface 97 has no altsetting 0
[  582.181936][ T5890] usb 5-1: device descriptor read/64, error -71
[  582.190403][   T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  582.201582][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.215101][   T24] usb 2-1: Product: syz
[  582.219476][   T24] usb 2-1: Manufacturer: syz
[  582.224135][   T24] usb 2-1: SerialNumber: syz
[  582.233712][T15534] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  582.241637][T15534] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  582.337986][  T808] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  582.428068][ T5890] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  582.468211][  T808] usb 1-1: device descriptor read/64, error -71
[  582.488801][   T24] usb-storage 2-1:2.97: USB Mass Storage device detected
[  582.499616][   T24] usb-storage 2-1:2.97: Quirks match for vid 04e6 pid 000b: 4
[  582.509291][   T24] scsi host1: usb-storage 2-1:2.97
[  582.523029][   T24] usb 2-1: USB disconnect, device number 6
[  582.558303][ T5890] usb 5-1: device descriptor read/64, error -71
[  582.588265][  T808] usb usb1-port1: attempt power cycle
[  582.670843][ T5890] usb usb5-port1: attempt power cycle
[  582.928211][  T808] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  582.958467][  T808] usb 1-1: device descriptor read/8, error -71
[  583.018002][ T5890] usb 5-1: new low-speed USB device number 32 using dummy_hcd
[  583.061585][ T5890] usb 5-1: device descriptor read/8, error -71
[  583.188228][    T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  583.198044][  T808] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  583.219367][  T808] usb 1-1: device descriptor read/8, error -71
[  583.308124][ T5890] usb 5-1: new low-speed USB device number 33 using dummy_hcd
[  583.329992][  T808] usb usb1-port1: unable to enumerate USB device
[  583.337304][ T5890] usb 5-1: device descriptor read/8, error -71
[  583.338084][    T9] usb 4-1: Using ep0 maxpacket: 16
[  583.350184][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  583.361085][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  583.368211][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  583.372181][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  583.389936][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  583.399738][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  583.420184][    T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  583.429377][    T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  583.437655][    T9] usb 4-1: Manufacturer: syz
[  583.445864][    T9] usb 4-1: config 0 descriptor??
[  583.458829][ T5890] usb usb5-port1: unable to enumerate USB device
[  583.540415][   T24] usb 2-1: config 0 has an invalid interface number: 168 but max is 0
[  583.548846][   T24] usb 2-1: config 0 has no interface number 0
[  583.555012][   T24] usb 2-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  583.566720][   T24] usb 2-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  583.577839][   T24] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  583.587931][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  583.598868][   T24] usb 2-1: config 0 descriptor??
[  583.708008][    T9] rc_core: IR keymap rc-hauppauge not found
[  583.714092][    T9] Registered IR keymap rc-empty
[  583.719597][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.738076][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.759229][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  583.773365][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input56
[  583.789759][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.808617][   T24] usb 2-1: string descriptor 0 read error: -71
[  583.810848][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.824552][   T24] keyspan 2-1:0.168: Keyspan 2 port adapter converter detected
[  583.834304][   T24] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 1
[  583.843984][   T24] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 84
[  583.852434][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.862077][   T24] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 2
[  583.869011][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.877876][   T24] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  583.888597][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.895901][   T24] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 88
[  583.904239][   T24] keyspan 2-1:0.168: found no endpoint descriptor for endpoint 6
[  583.915559][   T24] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  583.928102][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.946689][   T24] usb 2-1: USB disconnect, device number 7
[  583.958498][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.970492][   T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  583.979006][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  583.997229][   T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  584.008074][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  584.010477][   T24] keyspan 2-1:0.168: device disconnected
[  584.039246][    T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  584.063337][    T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  584.072717][    T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  584.115574][T15562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.142544][T15562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.187768][    T9] usb 4-1: USB disconnect, device number 50
[  584.778443][    T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  584.938302][    T9] usb 4-1: Using ep0 maxpacket: 32
[  584.948719][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.959417][    T9] usb 4-1: config 0 has no interfaces?
[  584.967033][    T9] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  584.981568][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.989755][    T9] usb 4-1: Product: syz
[  584.993970][    T9] usb 4-1: Manufacturer: syz
[  585.000068][    T9] usb 4-1: SerialNumber: syz
[  585.010671][    T9] usb 4-1: config 0 descriptor??
[  585.125209][T15592] binder_alloc: 15591: binder_alloc_buf size 12520 failed, no address space
[  585.129106][ T5955] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  585.146480][T15592] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  585.337761][ T5955] usb 1-1: Using ep0 maxpacket: 16
[  585.354416][ T5955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  585.367946][ T5955] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  585.384154][ T5955] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  585.394770][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.412867][ T5955] usb 1-1: config 0 descriptor??
[  585.756807][T15611] FAULT_INJECTION: forcing a failure.
[  585.756807][T15611] name failslab, interval 1, probability 0, space 0, times 0
[  585.770262][T15611] CPU: 0 UID: 0 PID: 15611 Comm: syz.1.3007 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  585.770285][T15611] Tainted: [L]=SOFTLOCKUP
[  585.770290][T15611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  585.770300][T15611] Call Trace:
[  585.770307][T15611]  <TASK>
[  585.770313][T15611]  dump_stack_lvl+0xe8/0x150
[  585.770340][T15611]  should_fail_ex+0x412/0x560
[  585.770368][T15611]  should_failslab+0xa8/0x100
[  585.770386][T15611]  __kmalloc_cache_noprof+0x88/0x660
[  585.770408][T15611]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[  585.770430][T15611]  ? sctp_add_bind_addr+0x8c/0x370
[  585.770454][T15611]  sctp_add_bind_addr+0x8c/0x370
[  585.770484][T15611]  sctp_copy_local_addr_list+0x314/0x4f0
[  585.770508][T15611]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[  585.770530][T15611]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  585.770552][T15611]  ? sctp_v6_is_any+0x64/0x80
[  585.770574][T15611]  ? sctp_copy_one_addr+0x93/0x360
[  585.770597][T15611]  sctp_bind_addr_copy+0xb3/0x3c0
[  585.770618][T15611]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  585.770639][T15611]  sctp_connect_new_asoc+0x2ff/0x6b0
[  585.770657][T15611]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  585.770677][T15611]  ? __local_bh_enable_ip+0xd0/0x130
[  585.770698][T15611]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  585.770713][T15611]  ? security_sctp_bind_connect+0x7e/0x2c0
[  585.770738][T15611]  sctp_sendmsg+0x1528/0x2c10
[  585.770772][T15611]  ? __pfx_sctp_sendmsg+0x10/0x10
[  585.770797][T15611]  ? aa_sk_perm+0x6d5/0x900
[  585.770811][T15611]  ? __might_fault+0xaf/0x130
[  585.770837][T15611]  ? __pfx_aa_sk_perm+0x10/0x10
[  585.770854][T15611]  ? sock_rps_record_flow+0x19/0x350
[  585.770871][T15611]  ? __pfx_inet_sendmsg+0x10/0x10
[  585.770889][T15611]  ? inet_sendmsg+0x2f4/0x370
[  585.770906][T15611]  ? __pfx_inet_sendmsg+0x10/0x10
[  585.770924][T15611]  __sys_sendto+0x5de/0x710
[  585.770943][T15611]  ? __pfx___sys_sendto+0x10/0x10
[  585.770957][T15611]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  585.770988][T15611]  ? __fget_files+0x3a0/0x420
[  585.771015][T15611]  ? ksys_write+0x242/0x270
[  585.771030][T15611]  ? __pfx_ksys_write+0x10/0x10
[  585.771047][T15611]  __x64_sys_sendto+0xde/0x100
[  585.771064][T15611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.771080][T15611]  do_syscall_64+0x15f/0xf80
[  585.771100][T15611]  ? clear_bhb_loop+0x40/0x90
[  585.771119][T15611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.771133][T15611] RIP: 0033:0x7f48ddb9c819
[  585.771146][T15611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  585.771158][T15611] RSP: 002b:00007f48dea74028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  585.771174][T15611] RAX: ffffffffffffffda RBX: 00007f48dde15fa0 RCX: 00007f48ddb9c819
[  585.771185][T15611] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000004
[  585.771195][T15611] RBP: 00007f48dea74090 R08: 000020000005ffe4 R09: 000000000000001c
[  585.771204][T15611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  585.771213][T15611] R13: 00007f48dde16038 R14: 00007f48dde15fa0 R15: 00007fff4a191448
[  585.771235][T15611]  </TASK>
[  585.829003][  T808] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  585.857521][ T5955] hid_map_usage: 4377 callbacks suppressed
[  585.857572][ T5955] HID 045e:07da: Invalid code 65791 type 1
[  585.940279][T15612] kvm: Disabled LAPIC found during irq injection
[  585.999423][ T5955] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0034/input/input57
[  586.092988][  T808] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  586.162003][  T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  586.190840][  T808] usb 5-1: config 0 descriptor??
[  586.197375][ T5955] microsoft 0003:045E:07DA.0034: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  586.235448][  T808] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input58
[  586.430653][ T5955] usb 5-1: USB disconnect, device number 34
[  586.432399][ T5194] bcm5974 5-1:0.0: could not read from device
[  586.438918][ T5194] bcm5974 5-1:0.0: could not read from device
[  586.440986][ T9233] bcm5974 5-1:0.0: could not read from device
[  586.465194][ T9233] udevd[9233]: Error opening device "/dev/input/event5": No such file or directory
[  586.465316][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event5"
[  586.468809][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event5"
[  586.468923][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event5"
[  586.469131][ T9233] udevd[9233]: Unable to EVIOCGABS device "/dev/input/event5"
[  586.774037][   T29] audit: type=1326 audit(4683.726:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15582 comm="syz.0.2994" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3fe39c819 code=0x0
[  587.227999][ T5928] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  587.378275][ T5928] usb 2-1: device descriptor read/64, error -71
[  587.540532][ T5955] usb 4-1: USB disconnect, device number 51
[  587.618725][ T5928] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  587.758016][ T5928] usb 2-1: device descriptor read/64, error -71
[  587.863868][T14507] usb 1-1: USB disconnect, device number 55
[  587.874775][ T5928] usb usb2-port1: attempt power cycle
[  587.969869][ T5955] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  588.048150][ T5911] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  588.128152][ T5955] usb 4-1: Using ep0 maxpacket: 32
[  588.137567][ T5955] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  588.146993][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.155410][ T5955] usb 4-1: Product: syz
[  588.159669][ T5955] usb 4-1: Manufacturer: syz
[  588.164526][ T5955] usb 4-1: SerialNumber: syz
[  588.171795][ T5955] usb 4-1: config 0 descriptor??
[  588.201442][ T5911] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  588.213388][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.223480][ T5911] usb 5-1: Product: syz
[  588.227736][ T5911] usb 5-1: Manufacturer: syz
[  588.232762][ T5911] usb 5-1: SerialNumber: syz
[  588.238199][ T5928] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  588.258736][ T5928] usb 2-1: device descriptor read/8, error -71
[  588.308085][T14507] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  588.455483][T15649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.464467][T15649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.472556][T14507] usb 1-1: Using ep0 maxpacket: 32
[  588.480104][T14507] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  588.492885][T14507] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  588.502039][T14507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.510357][ T5928] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  588.518687][T14507] usb 1-1: Product: syz
[  588.523080][T14507] usb 1-1: Manufacturer: syz
[  588.527730][T14507] usb 1-1: SerialNumber: syz
[  588.540711][ T5928] usb 2-1: device descriptor read/8, error -71
[  588.548773][T14507] usb 1-1: config 0 descriptor??
[  588.562339][T14507] usb 1-1: no audio or video endpoints found
[  588.580716][ T5955] airspy 4-1:0.0: Board ID: 00
[  588.585618][ T5955] airspy 4-1:0.0: Firmware version: 
[  588.648227][ T5928] usb usb2-port1: unable to enumerate USB device
[  588.678690][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  588.691423][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  588.766404][T14507] usb 1-1: USB disconnect, device number 56
[  588.781484][ T5955] airspy 4-1:0.0: usb_control_msg() failed -71 request 11
[  588.798962][ T5955] airspy 4-1:0.0: Registered as swradio24
[  588.808622][ T5955] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  588.824140][ T5955] usb 4-1: USB disconnect, device number 52
[  589.678047][ T2171] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  589.838012][ T2171] usb 4-1: Using ep0 maxpacket: 8
[  589.852061][ T2171] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  589.867509][ T2171] usb 4-1: config 0 interface 0 has no altsetting 0
[  589.880171][ T2171] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  589.893618][ T2171] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  589.905272][ T2171] usb 4-1: config 0 descriptor??
[  589.915623][T15649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.930350][T15649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.359030][ T2171] hid_parser_main: 4007 callbacks suppressed
[  590.359055][ T2171] waltop 0003:172F:0037.0035: unknown main item tag 0x2
[  590.377105][T15681] netlink: 'syz.0.3035': attribute type 10 has an invalid length.
[  590.379506][ T2171] waltop 0003:172F:0037.0035: unknown main item tag 0x0
[  590.393429][T15681] team0: Device bond0 is up. Set it down before adding it as a team port
[  590.409747][ T2171] waltop 0003:172F:0037.0035: unexpected long global item
[  590.421761][ T2171] waltop 0003:172F:0037.0035: probe with driver waltop failed with error -22
[  590.556716][ T2171] usb 4-1: USB disconnect, device number 53
[  590.751187][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  590.766021][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  590.782513][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  590.794737][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  590.805008][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  590.816678][ T5911] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  590.834350][ T5911] usb 5-1: USB disconnect, device number 35
[  590.887161][T15692] FAULT_INJECTION: forcing a failure.
[  590.887161][T15692] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  590.900464][ T5955] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  590.902295][T15692] CPU: 1 UID: 0 PID: 15692 Comm: syz.1.3039 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  590.902365][T15692] Tainted: [L]=SOFTLOCKUP
[  590.902385][T15692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  590.902416][T15692] Call Trace:
[  590.902436][T15692]  <TASK>
[  590.902457][T15692]  dump_stack_lvl+0xe8/0x150
[  590.902546][T15692]  should_fail_ex+0x412/0x560
[  590.902633][T15692]  _copy_from_user+0x2d/0xb0
[  590.902690][T15692]  ___sys_recvmsg+0x175/0x590
[  590.902769][T15692]  ? __pfx____sys_recvmsg+0x10/0x10
[  590.902847][T15692]  ? ktime_get_ts64+0xa9/0x410
[  590.902998][T15692]  do_recvmmsg+0x334/0x800
[  590.903103][T15692]  ? __pfx_do_recvmmsg+0x10/0x10
[  590.903200][T15692]  ? _copy_from_user+0x94/0xb0
[  590.903286][T15692]  __x64_sys_recvmmsg+0x1b7/0x250
[  590.903368][T15692]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  590.903497][T15692]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.903548][T15692]  do_syscall_64+0x15f/0xf80
[  590.903615][T15692]  ? trace_irq_disable+0x3b/0x140
[  590.903682][T15692]  ? clear_bhb_loop+0x40/0x90
[  590.903742][T15692]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  590.903793][T15692] RIP: 0033:0x7f48ddb9c819
[  590.903842][T15692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  590.903885][T15692] RSP: 002b:00007f48dea74028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  590.903942][T15692] RAX: ffffffffffffffda RBX: 00007f48dde15fa0 RCX: 00007f48ddb9c819
[  590.903994][T15692] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  590.904024][T15692] RBP: 00007f48dea74090 R08: 0000200000003700 R09: 0000000000000000
[  590.904061][T15692] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002
[  590.904090][T15692] R13: 00007f48dde16038 R14: 00007f48dde15fa0 R15: 00007fff4a191448
[  590.904173][T15692]  </TASK>
[  591.249118][ T5955] usb 1-1: Using ep0 maxpacket: 32
[  591.259801][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short
[  591.269102][ T5955] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2031, setting to 1024
[  591.282362][ T5955] usb 1-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40
[  591.292208][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.300426][ T5955] usb 1-1: Product: syz
[  591.304723][ T5955] usb 1-1: Manufacturer: syz
[  591.309647][ T5955] usb 1-1: SerialNumber: syz
[  591.374296][T15701] sctp: [Deprecated]: syz.4.3042 (pid 15701) Use of int in max_burst socket option.
[  591.374296][T15701] Use struct sctp_assoc_value instead
[  591.488175][ T5911] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  591.526192][ T5955] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  591.534076][ T5955] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  591.604639][ T5955] usb 1-1: USB disconnect, device number 57
[  591.639060][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  591.662682][ T5911] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.686651][ T5911] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.709947][ T5911] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  591.727649][ T5911] usb 4-1: config 0 interface 0 has no altsetting 0
[  591.737078][ T5911] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  591.747772][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.763687][ T9233] udevd[9233]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  591.770895][ T5911] usb 4-1: config 0 descriptor??
[  592.151683][T15719] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3045'.
[  592.211284][ T5911] lg-g15 0003:046D:C22D.0036: unknown main item tag 0x0
[  592.227116][ T5911] lg-g15 0003:046D:C22D.0036: unknown main item tag 0x0
[  592.245869][ T5911] lg-g15 0003:046D:C22D.0036: unknown main item tag 0x0
[  592.253783][ T5911] lg-g15 0003:046D:C22D.0036: unknown main item tag 0x0
[  592.261419][ T5911] lg-g15 0003:046D:C22D.0036: unknown main item tag 0x0
[  592.271378][ T5911] lg-g15 0003:046D:C22D.0036: unknown main item tag 0x0
[  592.292755][ T5911] lg-g15 0003:046D:C22D.0036: unknown main item tag 0x0
[  592.308050][ T5911] lg-g15 0003:046D:C22D.0036: unknown main item tag 0x0
[  592.323669][ T5911] lg-g15 0003:046D:C22D.0036: hidraw0: USB HID vff.fc Device [HID 046d:c22d] on usb-dummy_hcd.3-1/input0
[  592.718028][ T2171] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  592.869820][ T2171] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  592.880151][ T2171] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  592.889645][ T2171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  592.906167][ T2171] gspca_main: stv0680-2.14.0 probing 041e:4007
[  593.678001][ T5911] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  593.831498][ T5911] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  593.840954][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  593.849061][ T5911] usb 5-1: Product: syz
[  593.853297][ T5911] usb 5-1: Manufacturer: syz
[  593.857969][ T5911] usb 5-1: SerialNumber: syz
[  593.970379][ T2171] stv0680 1-1:4.0: STV(e): camera ping failed!!
[  594.071048][T15734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.081488][T15734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.173375][ T2171] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  594.186338][ T2171] stv0680 1-1:4.0: last error: 0,  command = 0x0
[  594.196184][ T2171] usb 1-1: USB disconnect, device number 58
[  594.240807][T14507] usb 4-1: USB disconnect, device number 54
[  594.293504][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  594.312814][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  594.618102][ T2171] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  594.769422][   T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  594.778000][ T2171] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  594.803971][ T2171] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  594.816606][ T2171] usb 2-1: config 0 descriptor??
[  594.948966][   T24] usb 4-1: Using ep0 maxpacket: 8
[  594.960825][   T24] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  594.971287][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.979604][   T24] usb 4-1: Product: syz
[  594.983961][   T24] usb 4-1: Manufacturer: syz
[  594.989104][   T24] usb 4-1: SerialNumber: syz
[  594.997541][   T24] usb 4-1: config 0 descriptor??
[  595.029476][   T24] usb 4-1: selecting invalid altsetting 3
[  595.037170][   T24] comedi comedi5: could not set alternate setting 3 in high speed
[  595.051680][   T24] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device.
[  595.079704][   T24] usbdux 4-1:0.0: probe with driver usbdux failed with error -22
[  595.210260][T15743] netlink: 'syz.3.3055': attribute type 21 has an invalid length.
[  595.222928][T15743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3055'.
[  595.235158][T15743] input: syz0 as /devices/virtual/input/input59
[  595.295918][T15743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.308228][T14507] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  595.329616][T15743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.495621][T14507] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  595.511204][T14507] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  595.528132][T14507] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  595.537381][T14507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  595.545905][T14507] usb 1-1: Product: syz
[  595.551578][T14507] usb 1-1: Manufacturer: syz
[  595.556354][T14507] usb 1-1: SerialNumber: syz
[  595.564063][T15743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.582506][T15743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.643193][ T2171] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  595.694423][ T5955] usb 4-1: USB disconnect, device number 55
[  595.728014][T14497] Bluetooth: hci5: command 0x0406 tx timeout
[  595.798443][    T9] usb 1-1: USB disconnect, device number 59
[  595.843912][ T2171] [drm:udl_init] *ERROR* Selecting channel failed
[  595.894204][ T2171] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  595.919876][ T2171] [drm] Initialized udl on minor 2
[  595.935889][ T2171] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  595.948829][ T2171] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  595.971044][ T5955] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  595.979577][ T2171] usb 2-1: USB disconnect, device number 12
[  596.008466][ T5955] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  596.332138][T15781] binder_alloc: 15780: binder_alloc_buf, no vma
[  596.351718][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  596.398102][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  596.432752][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  596.474266][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  596.485883][ T5911] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  596.503386][ T5911] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71
[  596.535394][ T5911] usb 5-1: USB disconnect, device number 36
[  596.698036][ T2171] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  596.808010][ T5955] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  596.853749][ T2171] usb 1-1: not running at top speed; connect to a high speed hub
[  596.866029][ T2171] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  596.881003][ T2171] usb 1-1: can't read configurations, error -22
[  596.960715][ T5955] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  596.971624][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  596.983739][ T5955] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  596.996996][ T5955] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  597.006514][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.014873][ T5955] usb 4-1: Product: syz
[  597.019442][ T2171] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  597.027085][ T5955] usb 4-1: Manufacturer: syz
[  597.032451][ T5955] usb 4-1: SerialNumber: syz
[  597.041868][ T5955] usb 4-1: config 0 descriptor??
[  597.047659][T15786] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  597.056039][T15786] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  597.067093][ T5955] usb 4-1: ucan: probing device on interface #0
[  597.168054][T14507] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  597.179367][ T2171] usb 1-1: not running at top speed; connect to a high speed hub
[  597.180355][ T2171] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  597.180398][ T2171] usb 1-1: can't read configurations, error -22
[  597.180725][ T2171] usb usb1-port1: attempt power cycle
[  597.271592][ T5955] usb 4-1: ucan: could not read protocol version, ret=128
[  597.279533][ T5955] usb 4-1: ucan: probe failed; try to update the device firmware
[  597.308042][T14507] usb 5-1: device descriptor read/64, error -71
[  597.399421][T15802] loop6: detected capacity change from 0 to 2640
[  597.410521][T15802] buffer_io_error: 29 callbacks suppressed
[  597.410533][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.425984][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.434308][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.442378][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.450509][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.459660][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.468890][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.476873][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.491901][T15802] ldm_validate_partition_table(): Disk read failed.
[  597.501022][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.509395][T15802] Buffer I/O error on dev loop6, logical block 0, async page read
[  597.517538][T15802] Dev loop6: unable to read RDB block 0
[  597.524380][ T2171] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  597.533205][T15802]  loop6: unable to read partition table
[  597.539560][T15802] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  597.550346][ T2171] usb 1-1: not running at top speed; connect to a high speed hub
[  597.559806][T14507] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  597.560013][ T2171] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  597.577211][ T2171] usb 1-1: can't read configurations, error -22
[  597.719129][T14507] usb 5-1: device descriptor read/64, error -71
[  597.721779][ T2171] usb 1-1: new full-speed USB device number 63 using dummy_hcd
[  597.770550][ T2171] usb 1-1: not running at top speed; connect to a high speed hub
[  597.784711][ T2171] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 0
[  597.794806][ T2171] usb 1-1: can't read configurations, error -22
[  597.801812][ T2171] usb usb1-port1: unable to enumerate USB device
[  597.838450][T14507] usb usb5-port1: attempt power cycle
[  598.008839][   T29] audit: type=1326 audit(4694.966:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15816 comm="syz.1.3073" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48ddb9c819 code=0x0
[  598.198032][T14507] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  598.239029][T14507] usb 5-1: device descriptor read/8, error -71
[  598.478009][T14507] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  598.498810][T14507] usb 5-1: device descriptor read/8, error -71
[  598.612295][T14507] usb usb5-port1: unable to enumerate USB device
[  599.018796][T15822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3074'.
[  599.348139][ T2171] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  599.500382][ T2171] usb 2-1: unable to get BOS descriptor or descriptor too short
[  599.509185][ T2171] usb 2-1: not running at top speed; connect to a high speed hub
[  599.519438][ T2171] usb 2-1: config 8 has an invalid interface number: 221 but max is 0
[  599.528388][ T2171] usb 2-1: config 8 has no interface number 0
[  599.534767][ T2171] usb 2-1: config 8 interface 221 has no altsetting 0
[  599.547722][ T2171] usb 2-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice=2f.2a
[  599.559361][ T2171] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.578464][ T2171] usb 2-1: Product: syz
[  599.588895][ T2171] usb 2-1: Manufacturer: syz
[  599.596627][ T2171] usb 2-1: SerialNumber: syz
[  599.607414][  T808] usb 4-1: USB disconnect, device number 56
[  599.782149][T15838] binder_alloc: 15837: binder_alloc_buf size 12520 failed, no address space
[  599.791023][T15838] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  599.847176][T15828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.857859][T15828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.880120][   T29] audit: type=1326 audit(4696.826:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15839 comm="syz.0.3082" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3fe39c819 code=0x0
[  599.905454][ T2171] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.221/input/input60
[  599.917158][ T5194] bcm5974 2-1:8.221: could not read from device
[  599.942731][ T5194] bcm5974 2-1:8.221: could not read from device
[  599.946938][ T2171] usb 2-1: USB disconnect, device number 13
[  599.957303][ T5194] bcm5974 2-1:8.221: could not read from device
[  599.987536][ T5194] bcm5974 2-1:8.221: could not read from device
[  600.028024][  T808] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  600.191099][  T808] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  600.201729][  T808] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  600.216347][  T808] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40
[  600.225689][  T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.235043][  T808] usb 4-1: Product: syz
[  600.239491][  T808] usb 4-1: Manufacturer: syz
[  600.244136][  T808] usb 4-1: SerialNumber: syz
[  600.480656][  T808] usb 4-1: 0:1 : does not exist
[  600.485706][  T808] usb 4-1: unit 6 not found!
[  600.491313][  T808] usb 4-1: unit 2 not found!
[  600.540059][  T808] usb 4-1: USB disconnect, device number 57
[  600.570167][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  600.705403][T15858] binder: 15857:15858 ioctl c0306201 2000000003c0 returned -14
[  600.847986][T14497] Bluetooth: hci2: command 0x0406 tx timeout
[  601.078968][ T2171] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  601.255355][ T2171] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  601.280175][ T2171] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.291684][ T2171] usb 1-1: Product: syz
[  601.295918][ T2171] usb 1-1: Manufacturer: syz
[  601.301302][ T2171] usb 1-1: SerialNumber: syz
[  601.309744][ T2171] usb 1-1: config 0 descriptor??
[  601.320793][   T29] audit: type=1326 audit(4698.276:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15879 comm="syz.4.3096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f715b79c819 code=0x0
[  601.358122][ T5955] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  601.509319][ T5955] usb 4-1: Using ep0 maxpacket: 32
[  601.519747][ T5955] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.530855][ T5955] usb 4-1: config 0 has no interfaces?
[  601.539921][ T5955] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  601.553475][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.562422][ T5955] usb 4-1: Product: syz
[  601.566843][ T5955] usb 4-1: Manufacturer: syz
[  601.571759][ T5955] usb 4-1: SerialNumber: syz
[  601.582306][ T5955] usb 4-1: config 0 descriptor??
[  601.938193][ T2171] usb 1-1: f81604_read: reg: 105 failed: -EPROTO
[  601.957154][ T2171] f81604 1-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  601.976948][ T2171] f81604 1-1:0.0: probe with driver f81604 failed with error -71
[  601.995837][ T2171] usb 1-1: USB disconnect, device number 64
[  602.248104][ T5928] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  602.398001][ T5928] usb 2-1: Using ep0 maxpacket: 32
[  602.406814][ T5928] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  602.416043][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  602.424917][ T5928] usb 2-1: Product: syz
[  602.429319][ T5928] usb 2-1: Manufacturer: syz
[  602.433966][ T5928] usb 2-1: SerialNumber: syz
[  602.440826][ T5928] usb 2-1: config 0 descriptor??
[  602.448163][ T2171] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  602.502089][T15889] kvm: Disabled LAPIC found during irq injection
[  602.609773][ T2171] usb 5-1: config 0 has an invalid interface number: 11 but max is 0
[  602.620322][ T2171] usb 5-1: config 0 has no interface number 0
[  602.626530][ T2171] usb 5-1: config 0 interface 11 altsetting 245 endpoint 0x7 has an invalid bInterval 129, changing to 11
[  602.638537][ T2171] usb 5-1: config 0 interface 11 altsetting 245 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  602.650078][ T2171] usb 5-1: config 0 interface 11 altsetting 245 endpoint 0x87 has invalid wMaxPacketSize 0
[  602.660460][ T2171] usb 5-1: config 0 interface 11 has no altsetting 0
[  602.667256][ T2171] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  602.676759][ T2171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.691806][ T2171] usb 5-1: config 0 descriptor??
[  602.698095][T15885] mkiss: ax0: crc mode is auto.
[  602.710024][ T2171] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected
[  602.720626][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81
[  602.731497][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82
[  602.744085][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1
[  602.752977][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2
[  602.761137][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85
[  602.770279][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5
[  602.785981][ T2171] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  602.809193][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83
[  602.817188][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84
[  602.825784][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3
[  602.835427][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4
[  602.839913][  T808] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  602.845718][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86
[  602.862087][ T2171] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6
[  602.871662][ T2171] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  602.909975][ T2171] usb 5-1: USB disconnect, device number 41
[  602.925706][ T2171] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  602.940017][ T2171] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  602.951859][ T2171] keyspan 5-1:0.11: device disconnected
[  602.961499][ T5928] airspy 2-1:0.0: Board ID: 00
[  602.968979][ T5928] airspy 2-1:0.0: Firmware version: 
[  603.003263][  T808] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  603.012578][  T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.020679][  T808] usb 1-1: Product: syz
[  603.024977][  T808] usb 1-1: Manufacturer: syz
[  603.029692][  T808] usb 1-1: SerialNumber: syz
[  603.233773][ T5928] airspy 2-1:0.0: usb_control_msg() failed -71 request 11
[  603.247112][T15893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  603.260231][ T5928] airspy 2-1:0.0: Registered as swradio24
[  603.266026][ T5928] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  603.276950][T15893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.289124][ T5928] usb 2-1: USB disconnect, device number 14
[  603.496082][  T808] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  603.522096][  T808] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  604.121013][ T2171] usb 4-1: USB disconnect, device number 58
[  604.245844][T15913] binder_alloc: 15912: pid 15912 spamming oneway? 1 buffers allocated for a total size of 4096
[  604.871262][T15934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  604.951162][  T808] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPIPE
[  605.105484][    C1] sd 0:0:1:0: [sda] tag#7028 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.116005][    C1] sd 0:0:1:0: [sda] tag#7028 CDB: Read(6) 08 00 ff f5 00 00
[  605.133820][    C1] sd 0:0:1:0: [sda] tag#7029 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.144383][    C1] sd 0:0:1:0: [sda] tag#7029 CDB: Read(6) 08 00 ff f5 00 00
[  605.154413][    C1] sd 0:0:1:0: [sda] tag#7030 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.164891][    C1] sd 0:0:1:0: [sda] tag#7030 CDB: Read(6) 08 00 ff f5 00 00
[  605.184972][  T808] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO
[  605.209435][    C1] sd 0:0:1:0: [sda] tag#7031 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.219871][    C1] sd 0:0:1:0: [sda] tag#7031 CDB: Read(6) 08 00 ff f5 00 00
[  605.252935][  T808] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  605.265250][  T808] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  605.285453][    C1] sd 0:0:1:0: [sda] tag#7032 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.295896][    C1] sd 0:0:1:0: [sda] tag#7032 CDB: Read(6) 08 00 ff f5 00 00
[  605.304080][  T808] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  605.319732][    C1] sd 0:0:1:0: [sda] tag#7033 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.330207][    C1] sd 0:0:1:0: [sda] tag#7033 CDB: Read(6) 08 00 ff f5 00 00
[  605.338058][    C1] sd 0:0:1:0: [sda] tag#7034 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.348525][    C1] sd 0:0:1:0: [sda] tag#7034 CDB: Read(6) 08 00 ff f5 00 00
[  605.357156][    C1] sd 0:0:1:0: [sda] tag#7035 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.367618][    C1] sd 0:0:1:0: [sda] tag#7035 CDB: Read(6) 08 00 ff f5 00 00
[  605.375099][    C1] sd 0:0:1:0: [sda] tag#7036 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.385552][    C1] sd 0:0:1:0: [sda] tag#7036 CDB: Read(6) 08 00 ff f5 00 00
[  605.393022][    C1] sd 0:0:1:0: [sda] tag#7037 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  605.403462][    C1] sd 0:0:1:0: [sda] tag#7037 CDB: Read(6) 08 00 ff f5 00 00
[  605.418966][  T808] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  605.454463][  T808] usb 1-1: USB disconnect, device number 65
[  605.495905][T15946] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3119'.
[  605.857986][   T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  606.028284][   T24] usb 2-1: Using ep0 maxpacket: 8
[  606.030442][   T24] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.030473][   T24] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  606.030496][   T24] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  606.030522][   T24] usb 2-1: config 0 interface 0 has no altsetting 0
[  606.030556][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  606.030578][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.035617][   T24] usb 2-1: config 0 descriptor??
[  606.107387][T15970] netlink: 'syz.4.3129': attribute type 64 has an invalid length.
[  606.180850][T15970] netlink: 'syz.4.3129': attribute type 4 has an invalid length.
[  606.182035][T15971] netlink: 'syz.4.3129': attribute type 64 has an invalid length.
[  606.197201][T15971] netlink: 'syz.4.3129': attribute type 4 has an invalid length.
[  606.205630][T15971] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3129'.
[  606.215220][T15970] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3129'.
[  606.461182][   T24] hid_parser_main: 32 callbacks suppressed
[  606.461205][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.475710][T15979] netlink: 'syz.4.3132': attribute type 27 has an invalid length.
[  606.493043][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.510056][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.522412][T15979] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  606.522520][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.552560][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.561220][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.568623][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.575684][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.585129][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.592388][   T24] lg-g15 0003:046D:C22D.0037: unknown main item tag 0x0
[  606.603182][   T24] lg-g15 0003:046D:C22D.0037: hidraw0: USB HID vff.fc Device [HID 046d:c22d] on usb-dummy_hcd.1-1/input0
[  606.984818][T15995] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3138'.
[  607.004526][T15995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3138'.
[  607.016520][T15995] fuse: Bad value for 'user_id'
[  607.022088][T15995] fuse: Bad value for 'user_id'
[  607.031867][T15997] netlink: 'syz.4.3139': attribute type 3 has an invalid length.
[  607.188360][ T2171] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  607.263292][T16010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.291346][T16010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.321304][T16011] tipc: Enabling of bearer <dth:v> rejected, media not registered
[  607.338001][ T2171] usb 1-1: device descriptor read/64, error -71
[  607.548196][  T808] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  607.578059][ T2171] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  607.688002][  T808] usb 4-1: device descriptor read/64, error -71
[  607.718047][ T2171] usb 1-1: device descriptor read/64, error -71
[  607.828306][ T2171] usb usb1-port1: attempt power cycle
[  607.927973][  T808] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  608.058028][  T808] usb 4-1: device descriptor read/64, error -71
[  608.168359][  T808] usb usb4-port1: attempt power cycle
[  608.178232][ T2171] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  608.198473][ T2171] usb 1-1: device descriptor read/8, error -71
[  608.447995][ T2171] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  608.468497][ T2171] usb 1-1: device descriptor read/8, error -71
[  608.508011][  T808] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  608.528805][  T808] usb 4-1: device descriptor read/8, error -71
[  608.578286][ T2171] usb usb1-port1: unable to enumerate USB device
[  608.634169][ T2171] usb 2-1: USB disconnect, device number 15
[  608.778051][  T808] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  608.796889][T16030] FAULT_INJECTION: forcing a failure.
[  608.796889][T16030] name failslab, interval 1, probability 0, space 0, times 0
[  608.819721][  T808] usb 4-1: device descriptor read/8, error -71
[  608.837973][T16030] CPU: 1 UID: 0 PID: 16030 Comm: syz.4.3149 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  608.838004][T16030] Tainted: [L]=SOFTLOCKUP
[  608.838012][T16030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  608.838025][T16030] Call Trace:
[  608.838034][T16030]  <TASK>
[  608.838043][T16030]  dump_stack_lvl+0xe8/0x150
[  608.838078][T16030]  should_fail_ex+0x412/0x560
[  608.838112][T16030]  should_failslab+0xa8/0x100
[  608.838136][T16030]  __kvmalloc_node_noprof+0x178/0x8a0
[  608.838158][T16030]  ? vmemdup_user+0x2b/0xd0
[  608.838190][T16030]  vmemdup_user+0x2b/0xd0
[  608.838213][T16030]  kvm_vm_ioctl+0xcb2/0xd50
[  608.838248][T16030]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  608.838296][T16030]  ? kasan_quarantine_put+0xbb/0x1f0
[  608.838335][T16030]  ? tomoyo_path_number_perm+0x219/0x630
[  608.838369][T16030]  ? tomoyo_path_number_perm+0x219/0x630
[  608.838402][T16030]  ? do_vfs_ioctl+0x1166/0x1530
[  608.838426][T16030]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  608.838467][T16030]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  608.838516][T16030]  ? __fget_files+0x2a/0x420
[  608.838545][T16030]  ? __fget_files+0x2a/0x420
[  608.838570][T16030]  ? __fget_files+0x3a0/0x420
[  608.838596][T16030]  ? __fget_files+0x2a/0x420
[  608.838625][T16030]  ? bpf_lsm_file_ioctl+0x9/0x20
[  608.838647][T16030]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  608.838677][T16030]  __se_sys_ioctl+0xfc/0x170
[  608.838697][T16030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.838719][T16030]  do_syscall_64+0x15f/0xf80
[  608.838746][T16030]  ? trace_irq_disable+0x3b/0x140
[  608.838778][T16030]  ? clear_bhb_loop+0x40/0x90
[  608.838804][T16030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.838825][T16030] RIP: 0033:0x7f715b79c819
[  608.838844][T16030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.838862][T16030] RSP: 002b:00007f71599f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  608.838883][T16030] RAX: ffffffffffffffda RBX: 00007f715ba15fa0 RCX: 00007f715b79c819
[  608.838898][T16030] RDX: 0000200000000000 RSI: 000000004008ae6a RDI: 0000000000000004
[  608.838911][T16030] RBP: 00007f71599f6090 R08: 0000000000000000 R09: 0000000000000000
[  608.838924][T16030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.838936][T16030] R13: 00007f715ba16038 R14: 00007f715ba15fa0 R15: 00007ffc7c3da638
[  608.838968][T16030]  </TASK>
[  609.094806][  T808] usb usb4-port1: unable to enumerate USB device
[  609.187318][T16032] netlink: 'syz.4.3150': attribute type 9 has an invalid length.
[  609.195224][T16032] netlink: 'syz.4.3150': attribute type 11 has an invalid length.
[  609.207249][T16032] netlink: 'syz.4.3150': attribute type 12 has an invalid length.
[  609.215530][T16032] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.3150'.
[  609.225222][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3150'.
[  610.017306][T16053] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  610.309514][ T2171] usb 5-1: new full-speed USB device number 42 using dummy_hcd
[  610.470270][ T2171] usb 5-1: not running at top speed; connect to a high speed hub
[  610.483521][ T2171] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 7
[  610.495153][ T2171] usb 5-1: can't read configurations, error -22
[  610.509992][T16069] binder_alloc: 16068: binder_alloc_buf size 12520 failed, no address space
[  610.541121][T16069] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  610.638400][ T2171] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  610.820111][ T2171] usb 5-1: not running at top speed; connect to a high speed hub
[  610.821128][ T2171] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 7
[  610.821163][ T2171] usb 5-1: can't read configurations, error -22
[  610.821631][ T2171] usb usb5-port1: attempt power cycle
[  611.158492][ T2171] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  611.181821][ T2171] usb 5-1: not running at top speed; connect to a high speed hub
[  611.183275][ T2171] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 7
[  611.183310][ T2171] usb 5-1: can't read configurations, error -22
[  611.308018][ T2171] usb 5-1: new full-speed USB device number 45 using dummy_hcd
[  611.352240][ T2171] usb 5-1: not running at top speed; connect to a high speed hub
[  611.381796][ T2171] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 7
[  611.399964][ T2171] usb 5-1: can't read configurations, error -22
[  611.418278][ T2171] usb usb5-port1: unable to enumerate USB device
[  611.849836][ T2171] usb 4-1: new full-speed USB device number 63 using dummy_hcd
[  612.046701][ T2171] usb 4-1: unable to get BOS descriptor or descriptor too short
[  612.071486][ T2171] usb 4-1: not running at top speed; connect to a high speed hub
[  612.085699][ T2171] usb 4-1: config 61 has an invalid interface number: 37 but max is 0
[  612.099287][ T2171] usb 4-1: config 61 has no interface number 0
[  612.113640][ T2171] usb 4-1: config 61 interface 37 has no altsetting 0
[  612.131279][ T2171] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice=fa.4f
[  612.148060][ T2171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.167772][ T2171] usb 4-1: Product: syz
[  612.177328][ T2171] usb 4-1: Manufacturer: syz
[  612.197965][ T2171] usb 4-1: SerialNumber: syz
[  612.670356][ T2171] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  612.759427][T16136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3182'.
[  613.027983][  T808] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  613.066989][ T2171] gp8psk: usb in 128 operation failed.
[  613.084731][ T2171] gp8psk: usb in 137 operation failed.
[  613.099950][ T2171] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  613.127589][ T2171] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver error while loading driver (-19)
[  613.162800][ T2171] usb 4-1: USB disconnect, device number 63
[  613.198769][  T808] usb 1-1: Using ep0 maxpacket: 16
[  613.207988][  T808] usb 1-1: unable to get BOS descriptor or descriptor too short
[  613.230935][  T808] usb 1-1: config 12 has an invalid interface number: 104 but max is 0
[  613.257201][  T808] usb 1-1: config 12 has no interface number 0
[  613.275047][  T808] usb 1-1: config 12 interface 104 has no altsetting 0
[  613.287757][  T808] usb 1-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=1b.bd
[  613.304791][  T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.317925][  T808] usb 1-1: Product: syz
[  613.325102][  T808] usb 1-1: Manufacturer: syz
[  613.334591][  T808] usb 1-1: SerialNumber: syz
[  613.552313][T16136] gfs2: gfs2 mount does not exist
[  613.563649][  T808] ums-cypress 1-1:12.104: USB Mass Storage device detected
[  613.655056][  T808] usb 1-1: USB disconnect, device number 70
[  614.448148][  T808] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  614.609021][  T808] usb 1-1: Using ep0 maxpacket: 32
[  614.623707][  T808] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  614.638882][  T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.651858][  T808] usb 1-1: Product: syz
[  614.658172][  T808] usb 1-1: Manufacturer: syz
[  614.665519][  T808] usb 1-1: SerialNumber: syz
[  614.679085][  T808] usb 1-1: config 0 descriptor??
[  615.095288][  T808] airspy 1-1:0.0: Board ID: 00
[  615.105156][  T808] airspy 1-1:0.0: Firmware version: 
[  615.303620][  T808] airspy 1-1:0.0: usb_control_msg() failed -71 request 11
[  615.326029][  T808] airspy 1-1:0.0: Registered as swradio24
[  615.339644][  T808] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  615.366459][  T808] usb 1-1: USB disconnect, device number 71
[  616.165788][T16179] virt_wifi0 speed is unknown, defaulting to 1000
[  616.188120][ T5928] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[  616.376281][ T5928] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  616.384538][  T808] usb 5-1: new full-speed USB device number 46 using dummy_hcd
[  616.392365][ T5928] usb 1-1: config 0 has no interface number 0
[  616.399047][ T5928] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  616.412509][ T5928] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.423704][ T5928] usb 1-1: config 0 interface 1 has no altsetting 0
[  616.430582][   T24] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[  616.438612][ T5928] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  616.449008][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.461115][ T5928] usb 1-1: config 0 descriptor??
[  616.559883][  T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 128, setting to 64
[  616.573428][  T808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.591949][  T808] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  616.603225][   T24] usb 4-1: config 0 has no interfaces?
[  616.609537][   T24] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  616.623175][  T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.633084][  T808] usb 5-1: Product: syz
[  616.637434][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.647372][  T808] usb 5-1: Manufacturer: syz
[  616.653993][  T808] usb 5-1: SerialNumber: syz
[  616.660597][   T24] usb 4-1: config 0 descriptor??
[  616.680632][  T808] usb 5-1: config 0 descriptor??
[  616.694206][T16178] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  616.730872][  T808] mcba_usb 5-1:0.0 can0: couldn't setup read URBs
[  616.731774][T16173] syzkaller1: entered promiscuous mode
[  616.737816][  T808] mcba_usb 5-1:0.0 can0: couldn't start device: -90
[  616.749938][T16173] syzkaller1: entered allmulticast mode
[  616.883230][   T24] usb 4-1: USB disconnect, device number 64
[  616.921428][  T808] mcba_usb 5-1:0.0: probe with driver mcba_usb failed with error -90
[  617.043883][T16178] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3196'.
[  617.254426][ T5897] usb 5-1: USB disconnect, device number 46
[  617.344216][ T5928] uclogic 0003:2179:0053.0038: failed retrieving string descriptor #100: -71
[  617.363202][ T5928] uclogic 0003:2179:0053.0038: failed retrieving pen parameters: -71
[  617.373698][ T5928] uclogic 0003:2179:0053.0038: pen probing failed: -71
[  617.381266][ T5928] uclogic 0003:2179:0053.0038: failed probing parameters: -71
[  617.391178][ T5928] uclogic 0003:2179:0053.0038: probe with driver uclogic failed with error -71
[  617.417473][ T5928] usb 1-1: USB disconnect, device number 72
[  617.688013][ T2171] usb 2-1: new low-speed USB device number 16 using dummy_hcd
[  617.832484][ T2171] usb 2-1: device descriptor read/64, error -71
[  618.031924][T16206] binder_alloc: 16205: pid 16205 spamming oneway? 1 buffers allocated for a total size of 4096
[  618.043584][T16206] binder_alloc: 16205: pid 16205 spamming oneway? 2 buffers allocated for a total size of 5120
[  618.079060][ T2171] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  618.115795][T16208] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3204'.
[  618.198155][ T5897] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  618.227994][ T2171] usb 2-1: device descriptor read/64, error -71
[  618.338274][ T2171] usb usb2-port1: attempt power cycle
[  618.368178][ T5897] usb 1-1: Using ep0 maxpacket: 32
[  618.381412][ T5897] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  618.390772][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.399215][ T5897] usb 1-1: Product: syz
[  618.403506][ T5897] usb 1-1: Manufacturer: syz
[  618.411070][ T5897] usb 1-1: SerialNumber: syz
[  618.424407][ T5897] usb 1-1: config 0 descriptor??
[  618.433438][T16217] netlink: 'syz.3.3207': attribute type 27 has an invalid length.
[  618.457347][T16217] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  618.640446][ T5897] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71
[  618.652397][ T5897] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71)
[  618.678030][ T2171] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[  618.700227][ T2171] usb 2-1: device descriptor read/8, error -71
[  618.709617][ T5897] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71
[  618.725218][ T5897] usb 1-1: USB disconnect, device number 73
[  618.831983][T16223] netlink: 'syz.4.3210': attribute type 2 has an invalid length.
[  618.843051][T16223] fuse: Unknown parameter '00000000000000000005'
[  618.854046][T16223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3210'.
[  618.939576][ T2171] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  618.968995][ T2171] usb 2-1: device descriptor read/8, error -71
[  619.013227][T16229] binder_alloc: 16228: binder_alloc_buf, no vma
[  619.075379][T16231] netlink: 'syz.4.3214': attribute type 10 has an invalid length.
[  619.086743][T16231] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3214'.
[  619.103223][ T2171] usb usb2-port1: unable to enumerate USB device
[  620.158047][ T2171] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  620.350900][ T2171] usb 5-1: Using ep0 maxpacket: 8
[  620.379607][ T2171] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.421410][ T2171] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.455700][ T2171] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  620.517973][ T2171] usb 5-1: config 0 interface 0 has no altsetting 0
[  620.541954][ T2171] usb 5-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  620.569678][ T2171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.607001][ T2171] usb 5-1: config 0 descriptor??
[  620.650728][   T24] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  620.826861][   T24] usb 1-1: config 2 has an invalid interface number: 97 but max is 0
[  620.848657][   T24] usb 1-1: config 2 has no interface number 0
[  620.855245][   T24] usb 1-1: config 2 interface 97 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64
[  620.865357][T16283] netlink: 'syz.1.3224': attribute type 9 has an invalid length.
[  620.870649][   T24] usb 1-1: config 2 interface 97 altsetting 13 bulk endpoint 0x82 has invalid maxpacket 64
[  620.888870][T16261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.890402][   T24] usb 1-1: config 2 interface 97 has no altsetting 0
[  620.903357][T16283] netlink: 'syz.1.3224': attribute type 11 has an invalid length.
[  620.926037][T16283] netlink: 'syz.1.3224': attribute type 12 has an invalid length.
[  620.936943][   T24] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  620.942130][T16261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  620.954347][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.968984][   T24] usb 1-1: Product: syz
[  620.975538][   T24] usb 1-1: Manufacturer: syz
[  620.978066][T16283] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.3224'.
[  620.987710][   T24] usb 1-1: SerialNumber: syz
[  621.012298][T16271] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  621.021796][T16271] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  621.040512][T16283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3224'.
[  621.289114][ T2171] hid_parser_main: 30 callbacks suppressed
[  621.289138][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.324266][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.333273][   T24] usb-storage 1-1:2.97: USB Mass Storage device detected
[  621.358895][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.374767][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.377548][   T24] usb-storage 1-1:2.97: Quirks match for vid 04e6 pid 000b: 4
[  621.396579][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.416271][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.424200][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.432606][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.440159][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.440721][   T24] scsi host1: usb-storage 1-1:2.97
[  621.447194][ T2171] lg-g15 0003:046D:C22D.0039: unknown main item tag 0x0
[  621.473931][ T2171] lg-g15 0003:046D:C22D.0039: hidraw0: USB HID vff.fc Device [HID 046d:c22d] on usb-dummy_hcd.4-1/input0
[  621.501226][ T2171] usb 5-1: USB disconnect, device number 47
[  621.527451][   T24] usb 1-1: USB disconnect, device number 74
[  621.671081][T16297] fido_id[16297]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  622.323380][   T29] audit: type=1326 audit(4975.270:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16323 comm="syz.1.3234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48ddb9c819 code=0x0
[  623.578289][T16380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.617573][T16380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.739232][   T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  623.857472][   T29] audit: type=1326 audit(4976.800:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16386 comm="syz.4.3250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f715b79c819 code=0x0
[  623.918676][   T24] usb 4-1: Using ep0 maxpacket: 32
[  623.940604][   T24] usb 4-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  623.973973][   T24] usb 4-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  623.974009][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  623.974046][   T24] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  623.974070][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  623.981990][   T24] usb 4-1: config 0 descriptor??
[  624.383527][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  624.437625][   T24] elecom 0003:056E:010D.003A: hidraw0: USB HID vff.fe Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0
[  624.640432][ T5928] usb 4-1: USB disconnect, device number 65
[  624.800009][T16423] binder_alloc: 16420: pid 16420 spamming oneway? 1 buffers allocated for a total size of 4096
[  625.018409][   T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  625.179353][   T24] usb 2-1: Using ep0 maxpacket: 16
[  625.187253][ T5928] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  625.201699][   T24] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  625.212808][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.222725][   T24] usb 2-1: Product: syz
[  625.226940][   T24] usb 2-1: Manufacturer: syz
[  625.232931][   T24] usb 2-1: SerialNumber: syz
[  625.359982][ T5928] usb 1-1: Using ep0 maxpacket: 32
[  625.364654][ T5928] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  625.364684][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.364731][ T5928] usb 1-1: Product: syz
[  625.364747][ T5928] usb 1-1: Manufacturer: syz
[  625.364762][ T5928] usb 1-1: SerialNumber: syz
[  625.370841][ T5928] usb 1-1: config 0 descriptor??
[  625.454658][T16422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.464493][T16422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  625.492628][   T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[  625.511859][   T24] usb 2-1: USB disconnect, device number 20
[  625.644262][ T5897] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[  625.794107][ T5928] airspy 1-1:0.0: Board ID: 00
[  625.799891][ T5928] airspy 1-1:0.0: Firmware version: 
[  625.825089][ T5897] usb 4-1: not running at top speed; connect to a high speed hub
[  625.835927][ T5897] usb 4-1: config 45 has an invalid interface number: 205 but max is 0
[  625.844312][ T5897] usb 4-1: config 45 has no interface number 0
[  625.850811][ T5897] usb 4-1: config 45 interface 205 has no altsetting 0
[  625.872346][ T5897] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=8e.bb
[  625.908426][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.916498][ T5897] usb 4-1: Product: syz
[  625.923749][ T5897] usb 4-1: Manufacturer: syz
[  625.932980][ T5897] usb 4-1: SerialNumber: syz
[  626.016045][   T29] audit: type=1326 audit(4978.960:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16444 comm="syz.4.3267" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f715b79c819 code=0x0
[  626.040529][ T5928] airspy 1-1:0.0: usb_control_msg() failed -71 request 11
[  626.083050][ T5928] airspy 1-1:0.0: Registered as swradio24
[  626.090048][ T5928] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  626.103894][ T5928] usb 1-1: USB disconnect, device number 75
[  626.150953][T16440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.172007][T16440] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.217461][ T5897] dvb-usb: found a 'TeVii S662' in warm state.
[  626.239745][ T5897] dw2102: su3000_power_ctrl: 1, initialized 0
[  626.253781][ T5897] dvb-usb: bulk message failed: -22 (2/0)
[  626.293509][ T5897] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  626.322078][ T5897] dvb-usb: TeVii S662 error while loading driver (-19)
[  626.363158][ T5897] usb 4-1: USB disconnect, device number 66
[  626.503714][    C1] scsi_io_completion_action: 18 callbacks suppressed
[  626.503775][    C1] sd 0:0:1:0: [sda] tag#7017 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.521091][    C1] sd 0:0:1:0: [sda] tag#7017 CDB: Read(6) 08 00 f5 ff 00 00
[  626.528621][    C1] sd 0:0:1:0: [sda] tag#7018 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.539059][    C1] sd 0:0:1:0: [sda] tag#7018 CDB: Read(6) 08 00 f5 ff 00 00
[  626.546482][    C1] sd 0:0:1:0: [sda] tag#7019 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.556886][    C1] sd 0:0:1:0: [sda] tag#7019 CDB: Read(6) 08 00 f5 ff 00 00
[  626.564279][    C1] sd 0:0:1:0: [sda] tag#7020 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.574704][    C1] sd 0:0:1:0: [sda] tag#7020 CDB: Read(6) 08 00 f5 ff 00 00
[  626.582125][    C1] sd 0:0:1:0: [sda] tag#7021 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.592545][    C1] sd 0:0:1:0: [sda] tag#7021 CDB: Read(6) 08 00 f5 ff 00 00
[  626.599970][    C1] sd 0:0:1:0: [sda] tag#7022 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.610401][    C1] sd 0:0:1:0: [sda] tag#7022 CDB: Read(6) 08 00 f5 ff 00 00
[  626.618261][    C1] sd 0:0:1:0: [sda] tag#7023 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.628709][    C1] sd 0:0:1:0: [sda] tag#7023 CDB: Read(6) 08 00 f5 ff 00 00
[  626.636123][    C1] sd 0:0:1:0: [sda] tag#7024 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.646564][    C1] sd 0:0:1:0: [sda] tag#7024 CDB: Read(6) 08 00 f5 ff 00 00
[  626.656131][    C1] sd 0:0:1:0: [sda] tag#7025 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.666582][    C1] sd 0:0:1:0: [sda] tag#7025 CDB: Read(6) 08 00 f5 ff 00 00
[  626.674479][    C1] sd 0:0:1:0: [sda] tag#7026 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  626.684953][    C1] sd 0:0:1:0: [sda] tag#7026 CDB: Read(6) 08 00 f5 ff 00 00
[  627.158088][ T5928] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  627.320498][T14497] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  627.335624][T14497] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  627.340391][ T5928] usb 5-1: Using ep0 maxpacket: 32
[  627.353081][ T5928] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.360752][T14497] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  627.371819][ T5928] usb 5-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  627.376388][T14497] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  627.385786][ T5928] usb 5-1: config 0 interface 0 has no altsetting 0
[  627.396370][T14497] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  627.403728][ T5928] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  627.414862][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.429786][T16476] comedi comedi4: bad chanlist[0]=0x0000009c chan=156 range length=2
[  627.479434][ T5928] usb 5-1: config 0 descriptor??
[  627.512052][T16473] virt_wifi0 speed is unknown, defaulting to 1000
[  627.526164][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  627.536632][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  627.706867][   T29] audit: type=1326 audit(4980.650:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16484 comm="syz.1.3280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48ddb9c819 code=0x0
[  627.758003][ T2171] usb 4-1: new full-speed USB device number 67 using dummy_hcd
[  627.791639][T16473] chnl_net:caif_netlink_parms(): no params data found
[  627.905370][T16473] bridge0: port 1(bridge_slave_0) entered blocking state
[  627.912658][ T2171] usb 4-1: device descriptor read/64, error -71
[  627.919218][T16473] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.926433][T16473] bridge_slave_0: entered allmulticast mode
[  627.934776][T16473] bridge_slave_0: entered promiscuous mode
[  627.943670][T16473] bridge0: port 2(bridge_slave_1) entered blocking state
[  627.951506][T16473] bridge0: port 2(bridge_slave_1) entered disabled state
[  627.958910][T16473] bridge_slave_1: entered allmulticast mode
[  627.966488][T16473] bridge_slave_1: entered promiscuous mode
[  627.991531][ T5928] hid_parser_main: 66 callbacks suppressed
[  627.991551][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.006557][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.013838][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.021210][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.028736][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.035969][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.043296][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.056524][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.064253][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.071579][ T5928] elecom 0003:056E:010D.003B: unknown main item tag 0x0
[  628.086725][ T5928] elecom 0003:056E:010D.003B: hidraw0: USB HID vff.fe Device [HID 056e:010d] on usb-dummy_hcd.4-1/input0
[  628.104551][T16473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.123770][T16473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  628.168055][ T2171] usb 4-1: new full-speed USB device number 68 using dummy_hcd
[  628.177426][T16473] team0: Port device team_slave_0 added
[  628.187800][T16473] team0: Port device team_slave_1 added
[  628.234115][T16473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  628.236450][   T24] usb 5-1: USB disconnect, device number 49
[  628.241303][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  628.241333][T16473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  628.247388][T16473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  628.247404][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  628.320741][T16473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  628.378065][ T2171] usb 4-1: device descriptor read/64, error -71
[  628.390931][T16473] hsr_slave_0: entered promiscuous mode
[  628.397574][T16473] hsr_slave_1: entered promiscuous mode
[  628.404039][T16473] debugfs: 'hsr0' already exists in 'hsr'
[  628.409976][T16473] Cannot create hsr debugfs directory
[  628.488229][ T2171] usb usb4-port1: attempt power cycle
[  628.634946][T16473] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  628.653498][T16473] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  628.683104][T16473] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  628.701510][T16473] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  628.753341][T16473] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.760611][T16473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  628.768177][T16473] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.775359][T16473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  628.838024][ T2171] usb 4-1: new full-speed USB device number 69 using dummy_hcd
[  628.841056][T16473] 8021q: adding VLAN 0 to HW filter on device bond0
[  628.855268][T16473] 8021q: adding VLAN 0 to HW filter on device team0
[  628.858841][ T2171] usb 4-1: device descriptor read/8, error -71
[  628.860071][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.863326][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.886566][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.886649][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state
[  628.915780][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.915861][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state
[  629.097986][ T2171] usb 4-1: new full-speed USB device number 70 using dummy_hcd
[  629.115787][T16511] netlink: 'syz.4.3285': attribute type 27 has an invalid length.
[  629.128598][ T2171] usb 4-1: device descriptor read/8, error -71
[  629.151134][T16511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  629.248423][ T2171] usb usb4-port1: unable to enumerate USB device
[  629.365976][T16473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  629.482545][   T29] audit: type=1326 audit(4982.430:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16523 comm="syz.1.3288" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48ddb9c819 code=0x0
[  629.507564][ T5159] Bluetooth: hci0: command tx timeout
[  629.580123][ T2171] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  629.687339][T16473] veth0_vlan: entered promiscuous mode
[  629.699845][T16473] veth1_vlan: entered promiscuous mode
[  629.735117][T16473] veth0_macvtap: entered promiscuous mode
[  629.745120][T16473] veth1_macvtap: entered promiscuous mode
[  629.753974][ T2171] usb 5-1: not running at top speed; connect to a high speed hub
[  629.773833][T16473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  629.784768][ T2171] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 64
[  629.800106][ T2171] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  629.810074][ T2171] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.818676][ T2171] usb 5-1: Product: syz
[  629.830064][T16473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  629.837669][ T2171] usb 5-1: Manufacturer: syz
[  629.842928][ T2171] usb 5-1: SerialNumber: syz
[  629.855118][T16519] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  629.866072][   T35] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.878211][   T35] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  629.894979][   T35] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  629.911495][   T35] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.029322][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.040701][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.096417][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  630.096460][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  630.192187][ T2171] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  630.200237][ T2171] usb 5-1: MIDIStreaming interface descriptor not found
[  630.260505][T16534] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  630.319614][ T2171] usb 5-1: USB disconnect, device number 50
[  630.512085][T16541] netlink: 'syz.5.3290': attribute type 9 has an invalid length.
[  630.528428][T16541] netlink: 'syz.5.3290': attribute type 11 has an invalid length.
[  630.552642][T16541] netlink: 'syz.5.3290': attribute type 12 has an invalid length.
[  630.563665][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'.
[  630.572675][T16541] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.3290'.
[  630.585174][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'.
[  630.594402][T16541] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3290'.
[  630.790466][T16550] Invalid argument reading file caps for ./file0
[  630.815281][T16550] hfs: can't find a HFS filesystem on dev nbd1
[  630.948528][ T2171] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  630.989701][   T29] audit: type=1326 audit(4983.930:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16557 comm="syz.1.3297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f48ddb9c819 code=0x0
[  631.120425][ T2171] usb 6-1: Using ep0 maxpacket: 32
[  631.122030][ T2171] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  631.122061][ T2171] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  631.122130][ T2171] usb 6-1: config 0 interface 0 has no altsetting 0
[  631.122163][ T2171] usb 6-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  631.122185][ T2171] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  631.124961][ T2171] usb 6-1: config 0 descriptor??
[  631.428071][    T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  631.561471][ T2171] elecom 0003:056E:010D.003C: hidraw0: USB HID vff.fe Device [HID 056e:010d] on usb-dummy_hcd.5-1/input0
[  631.578480][ T5159] Bluetooth: hci0: command tx timeout
[  631.599863][    T9] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  631.607792][T16579] binder: BINDER_SET_CONTEXT_MGR already set
[  631.614503][T16579] binder: 16577:16579 ioctl 4018620d 200000000040 returned -16
[  631.623432][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  631.639670][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  631.665953][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  631.686750][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  631.704071][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  631.733549][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  631.755894][ T2171] usb 6-1: USB disconnect, device number 2
[  631.764910][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  631.778672][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  631.791173][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  631.821305][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  631.844747][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  631.877067][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  631.906928][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  631.920763][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  631.932117][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  631.942414][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  631.950663][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  631.960649][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  631.975248][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  631.985913][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  631.995726][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  632.019697][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  632.048062][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  632.067070][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  632.088426][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  632.107558][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  632.129231][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  632.158458][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  632.179878][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  632.195014][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  632.207401][    T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  632.218602][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  632.227530][    T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  632.237618][    T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  632.246293][    T9] usb 5-1: Product: syz
[  632.250764][    T9] usb 5-1: Manufacturer: syz
[  632.255458][    T9] usb 5-1: SerialNumber: syz
[  632.263932][    T9] usb 5-1: config 0 descriptor??
[  632.278396][    T9] yurex 5-1:0.0: Could not submitting URB
[  632.289051][    T9] yurex 5-1:0.0: probe with driver yurex failed with error -5
[  632.523551][T16565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  632.565297][T16565] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.596799][ T5897] usb 5-1: USB disconnect, device number 51
[  632.900562][T16608] netlink: 140 bytes leftover after parsing attributes in process `syz.5.3316'.
[  632.933225][T16608] ALSA: seq fatal error: cannot create timer (-22)
[  632.976326][T16608] 9pnet_fd: p9_fd_create_unix (16608): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  633.246809][T16623] netlink: 'syz.1.3321': attribute type 1 has an invalid length.
[  633.296094][T16623] netlink: 'syz.1.3321': attribute type 2 has an invalid length.
[  633.334431][T16623] netlink: 'syz.1.3321': attribute type 1 has an invalid length.
[  633.364092][T16623] netlink: 'syz.1.3321': attribute type 2 has an invalid length.
[  633.378633][T14507] libceph: connect (1)[c::]:6789 error -101
[  633.386298][T14507] libceph: mon0 (1)[c::]:6789 connect error
[  633.659285][ T5159] Bluetooth: hci0: command tx timeout
[  633.665588][ T5928] libceph: connect (1)[c::]:6789 error -101
[  633.682455][ T5928] libceph: mon0 (1)[c::]:6789 connect error
[  633.689258][T14507] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  633.861776][T14507] usb 6-1: not running at top speed; connect to a high speed hub
[  633.871837][T14507] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 64
[  633.886730][T14507] usb 6-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  633.896717][T14507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.904795][T14507] usb 6-1: Product: syz
[  633.909357][T14507] usb 6-1: Manufacturer: syz
[  633.913996][T14507] usb 6-1: SerialNumber: syz
[  633.923564][T16637] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  633.959144][T15790] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  633.986964][   T29] audit: type=1326 audit(4986.930:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b79c819 code=0x7fc00000
[  634.009190][   T29] audit: type=1326 audit(4986.930:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16649 comm="syz.4.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f715b79c819 code=0x7fc00000
[  634.099339][T16655] netlink: 'syz.4.3332': attribute type 10 has an invalid length.
[  634.107314][T16655] team0: Device bond0 is up. Set it down before adding it as a team port
[  634.119270][T15790] usb 2-1: Using ep0 maxpacket: 32
[  634.122110][T16628] ceph: No mds server is up or the cluster is laggy
[  634.136366][T15790] usb 2-1: config 3 has an invalid interface number: 24 but max is 0
[  634.155832][T15790] usb 2-1: config 3 has no interface number 0
[  634.155883][T15790] usb 2-1: config 3 interface 24 altsetting 0 endpoint 0x2 has an invalid bInterval 128, changing to 11
[  634.158817][T15790] usb 2-1: New USB device found, idVendor=08e3, idProduct=0301, bcdDevice=f3.20
[  634.158846][T15790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.158868][T15790] usb 2-1: Product: syz
[  634.158885][T15790] usb 2-1: Manufacturer: syz
[  634.158901][T15790] usb 2-1: SerialNumber: syz
[  634.216955][ T5890] libceph: connect (1)[c::]:6789 error -101
[  634.217147][ T5890] libceph: mon0 (1)[c::]:6789 connect error
[  634.473351][T14507] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  634.481491][T14507] usb 6-1: MIDIStreaming interface descriptor not found
[  634.529305][T15790] HFC-S_USB 2-1:3.24: probe with driver HFC-S_USB failed with error -5
[  634.541079][T15790] usb 2-1: USB disconnect, device number 21
[  634.560517][T14507] usb 6-1: USB disconnect, device number 3
[  634.597996][   T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  634.654334][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  634.788228][   T24] usb 5-1: Using ep0 maxpacket: 32
[  634.794958][   T24] usb 5-1: config 1 has an invalid interface number: 1 but max is 0
[  634.803155][   T24] usb 5-1: config 1 has an invalid descriptor of length 196, skipping remainder of the config
[  634.813491][   T24] usb 5-1: config 1 has no interface number 0
[  634.819710][   T24] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  634.835034][   T24] usb 5-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40
[  634.845470][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.853979][   T24] usb 5-1: Product: syz
[  634.858253][   T24] usb 5-1: Manufacturer: syz
[  634.862868][   T24] usb 5-1: SerialNumber: syz
[  635.097579][   T24] usbhid 5-1:1.1: couldn't find an input interrupt endpoint
[  635.131572][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  635.245333][   T24] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -2
[  635.274201][   T24] usb 5-1: USB disconnect, device number 52
[  635.317163][ T5857] udevd[5857]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  635.448956][T16674] binder_alloc: 16673: pid 16673 spamming oneway? 1 buffers allocated for a total size of 4096
[  635.500501][T16676] loop6: detected capacity change from 0 to 8
[  635.619023][T14507] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  635.727921][ T5159] Bluetooth: hci0: command tx timeout
[  635.768196][T14507] usb 4-1: device descriptor read/64, error -71
[  635.828686][T16677] 
[  635.829738][T16676] Dev loop6: unable to read RDB block 8
[  635.831061][T16677] ======================================================
[  635.831071][T16677] WARNING: possible circular locking dependency detected
[  635.831103][T16677] syzkaller #0 Tainted: G             L     
[  635.856024][T16676]  loop6: unable to read partition table
[  635.856738][T16677] ------------------------------------------------------
[  635.869435][T16677] syz.1.3339/16677 is trying to acquire lock:
[  635.875517][T16677] ffff88801be9d210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450
[  635.883646][T16676] loop6: partition table beyond EOD, 
[  635.885834][T16677] 
[  635.885834][T16677] but task is already holding lock:
[  635.885845][T16677] ffff8880270f8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0
[  635.908401][T16677] 
[  635.908401][T16677] which lock already depends on the new lock.
[  635.908401][T16677] 
[  635.918824][T16677] 
[  635.918824][T16677] the existing dependency chain (in reverse order) is:
[  635.927858][T16677] 
[  635.927858][T16677] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}:
[  635.936501][T16677]        blk_alloc_queue+0x546/0x680
[  635.941821][T16677]        __blk_mq_alloc_disk+0x197/0x390
[  635.947460][T16677]        loop_add+0x482/0xb40
[  635.952149][T16677]        loop_init+0xd9/0x170
[  635.956849][T16677]        do_one_initcall+0x250/0x870
[  635.962168][T16677]        do_initcall_level+0x104/0x190
[  635.967656][T16677]        do_initcalls+0x59/0xa0
[  635.972561][T16677]        kernel_init_freeable+0x2a6/0x3e0
[  635.978295][T16677]        kernel_init+0x1d/0x1d0
[  635.983175][T16677]        ret_from_fork+0x514/0xb70
[  635.988311][T16677]        ret_from_fork_asm+0x1a/0x30
[  635.993616][T16677] 
[  635.993616][T16677] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  636.000850][T16677]        fs_reclaim_acquire+0x71/0x100
[  636.006318][T16677]        kmem_cache_alloc_noprof+0x40/0x650
[  636.012236][T16677]        __kernfs_iattrs+0xdf/0x320
[  636.017451][T16677]        kernfs_iop_setattr+0xea/0x3f0
[  636.022950][T16677]        notify_change+0xc1a/0xf40
[  636.028069][T16677]        do_truncate+0x1c2/0x250
[  636.033019][T16677]        path_openat+0x2f89/0x3860
[  636.038139][T16677]        do_file_open+0x23e/0x4a0
[  636.043190][T16677]        do_sys_openat2+0x113/0x200
[  636.048407][T16677]        __x64_sys_openat+0x138/0x170
[  636.053803][T16677]        do_syscall_64+0x15f/0xf80
[  636.058933][T16677]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.065359][T16677] 
[  636.065359][T16677] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  636.073884][T16677]        __lock_acquire+0x15a5/0x2cf0
[  636.079276][T16677]        lock_acquire+0x106/0x350
[  636.084315][T16677]        down_read+0x47/0x2e0
[  636.089019][T16677]        kernfs_iop_getattr+0x9e/0x450
[  636.094507][T16677]        vfs_getattr_nosec+0x2e1/0x430
[  636.099979][T16677]        loop_assign_backing_file+0x27a/0x4b0
[  636.106064][T16677]        lo_ioctl+0x1acb/0x1fb0
[  636.110936][T16677]        blkdev_ioctl+0x5e3/0x740
[  636.115966][T16677]        __se_sys_ioctl+0xfc/0x170
[  636.121083][T16677]        do_syscall_64+0x15f/0xf80
[  636.126214][T16677]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.132638][T16677] 
[  636.132638][T16677] other info that might help us debug this:
[  636.132638][T16677] 
[  636.142871][T16677] Chain exists of:
[  636.142871][T16677]   &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23
[  636.142871][T16677] 
[  636.157408][T16677]  Possible unsafe locking scenario:
[  636.157408][T16677] 
[  636.164884][T16677]        CPU0                    CPU1
[  636.170252][T16677]        ----                    ----
[  636.175628][T16677]   lock(&q->q_usage_counter(io)#23);
[  636.181018][T16677]                                lock(fs_reclaim);
[  636.187536][T16677]                                lock(&q->q_usage_counter(io)#23);
[  636.195441][T16677]   rlock(&root->kernfs_iattr_rwsem);
[  636.200824][T16677] 
[  636.200824][T16677]  *** DEADLOCK ***
[  636.200824][T16677] 
[  636.208975][T16677] 3 locks held by syz.1.3339/16677:
[  636.214191][T16677]  #0: ffff888027250430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0
[  636.223256][T16677]  #1: ffff8880270f8060 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0
[  636.233454][T16677]  #2: ffff8880270f8098 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0
[  636.243832][T16677] 
[  636.243832][T16677] stack backtrace:
[  636.249744][T16677] CPU: 1 UID: 0 PID: 16677 Comm: syz.1.3339 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  636.249767][T16677] Tainted: [L]=SOFTLOCKUP
[  636.249774][T16677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  636.249784][T16677] Call Trace:
[  636.249791][T16677]  <TASK>
[  636.249799][T16677]  dump_stack_lvl+0xe8/0x150
[  636.249824][T16677]  print_circular_bug+0x2e1/0x300
[  636.249842][T16677]  check_noncircular+0x12e/0x150
[  636.249860][T16677]  __lock_acquire+0x15a5/0x2cf0
[  636.249891][T16677]  ? kernfs_iop_getattr+0x9e/0x450
[  636.249912][T16677]  lock_acquire+0x106/0x350
[  636.249934][T16677]  ? kernfs_iop_getattr+0x9e/0x450
[  636.249959][T16677]  down_read+0x47/0x2e0
[  636.249983][T16677]  ? kernfs_iop_getattr+0x9e/0x450
[  636.250005][T16677]  kernfs_iop_getattr+0x9e/0x450
[  636.250028][T16677]  vfs_getattr_nosec+0x2e1/0x430
[  636.250049][T16677]  loop_assign_backing_file+0x27a/0x4b0
[  636.250068][T16677]  ? __pfx_loop_assign_backing_file+0x10/0x10
[  636.250098][T16677]  lo_ioctl+0x1acb/0x1fb0
[  636.250117][T16677]  ? __pfx_lo_ioctl+0x10/0x10
[  636.250133][T16677]  ? update_cfs_rq_load_avg+0x3fb/0x4e0
[  636.250155][T16677]  ? __dequeue_entity+0x4c/0x11b0
[  636.250178][T16677]  ? __lock_acquire+0x6b5/0x2cf0
[  636.250202][T16677]  ? __lock_acquire+0x6b5/0x2cf0
[  636.250230][T16677]  ? __lock_acquire+0x6b5/0x2cf0
[  636.250264][T16677]  ? __lock_acquire+0x6b5/0x2cf0
[  636.250287][T16677]  ? __lock_acquire+0x6b5/0x2cf0
[  636.250307][T16677]  ? __lock_acquire+0x6b5/0x2cf0
[  636.250349][T16677]  ? unwind_next_frame+0xa6/0x2550
[  636.250367][T16677]  ? unwind_next_frame+0xa6/0x2550
[  636.250383][T16677]  ? is_bpf_text_address+0x26/0x2b0
[  636.250410][T16677]  ? is_bpf_text_address+0x26/0x2b0
[  636.250434][T16677]  ? is_bpf_text_address+0x292/0x2b0
[  636.250455][T16677]  ? is_bpf_text_address+0x26/0x2b0
[  636.250479][T16677]  ? kernel_text_address+0xa5/0xe0
[  636.250500][T16677]  ? __kernel_text_address+0xd/0x30
[  636.250519][T16677]  ? unwind_get_return_address+0x4d/0x90
[  636.250535][T16677]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  636.250556][T16677]  ? arch_stack_walk+0xfb/0x150
[  636.250576][T16677]  ? stack_trace_save+0xa9/0x100
[  636.250595][T16677]  ? __pfx_stack_trace_save+0x10/0x10
[  636.250614][T16677]  ? kasan_save_free_info+0x46/0x50
[  636.250636][T16677]  ? stack_depot_save_flags+0x33/0x810
[  636.250662][T16677]  ? kasan_save_track+0x4f/0x80
[  636.250686][T16677]  ? kasan_save_track+0x3e/0x80
[  636.250714][T16677]  ? kasan_save_free_info+0x46/0x50
[  636.250734][T16677]  ? __kasan_slab_free+0x5c/0x80
[  636.250747][T16677]  ? kfree+0x1c5/0x640
[  636.250768][T16677]  ? tomoyo_path_number_perm+0x501/0x630
[  636.250793][T16677]  ? security_file_ioctl+0xc3/0x2a0
[  636.250815][T16677]  ? __se_sys_ioctl+0x47/0x170
[  636.250831][T16677]  ? do_syscall_64+0x15f/0xf80
[  636.250852][T16677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.250871][T16677]  ? __asan_memset+0x22/0x50
[  636.250892][T16677]  ? blk_get_meta_cap+0x16d/0x7a0
[  636.250919][T16677]  ? __pfx_blk_get_meta_cap+0x10/0x10
[  636.250946][T16677]  ? blkdev_common_ioctl+0x14b7/0x3250
[  636.250967][T16677]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  636.250984][T16677]  ? kasan_quarantine_put+0xbb/0x1f0
[  636.251011][T16677]  ? tomoyo_path_number_perm+0x219/0x630
[  636.251036][T16677]  ? tomoyo_path_number_perm+0x219/0x630
[  636.251061][T16677]  ? do_vfs_ioctl+0x1166/0x1530
[  636.251078][T16677]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  636.251099][T16677]  ? do_futex+0x333/0x420
[  636.251130][T16677]  ? __pfx_lo_ioctl+0x10/0x10
[  636.251146][T16677]  blkdev_ioctl+0x5e3/0x740
[  636.251163][T16677]  ? __pfx_blkdev_ioctl+0x10/0x10
[  636.251178][T16677]  ? __fget_files+0x2a/0x420
[  636.251201][T16677]  ? bpf_lsm_file_ioctl+0x9/0x20
[  636.251218][T16677]  ? __pfx_blkdev_ioctl+0x10/0x10
[  636.251234][T16677]  __se_sys_ioctl+0xfc/0x170
[  636.251249][T16677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.251266][T16677]  do_syscall_64+0x15f/0xf80
[  636.251287][T16677]  ? trace_irq_disable+0x3b/0x140
[  636.251307][T16677]  ? clear_bhb_loop+0x40/0x90
[  636.251326][T16677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  636.251343][T16677] RIP: 0033:0x7f48ddb9c819
[  636.251359][T16677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  636.251373][T16677] RSP: 002b:00007f48dea53028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  636.251390][T16677] RAX: ffffffffffffffda RBX: 00007f48dde16090 RCX: 00007f48ddb9c819
[  636.251403][T16677] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003
[  636.251413][T16677] RBP: 00007f48ddc32c91 R08: 0000000000000000 R09: 0000000000000000
[  636.251424][T16677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  636.251434][T16677] R13: 00007f48dde16128 R14: 00007f48dde16090 R15: 00007fff4a191448
[  636.251453][T16677]  </TASK>
[  636.749153][ T5159] Bluetooth: hci3: command 0x0406 tx timeout
[  636.777934][T16676] truncated
[  636.781119][T16676] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í¯ÊºöÙXDˆÚ
bÔÌp0ìO{š¸›>.) failed (rc=-5)
[  636.927939][T14507] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  637.160755][T16677] Dev loop6: unable to read RDB block 8
[  637.188115][T16677]  loop6: unable to read partition table
[  637.208127][T16677] loop6: partition table beyond EOD, truncated
[  637.217325][T16677] loop_reread_partitions: partition scan of loop6 (ÄNùh*h‘…ÿìžÝ×pਸ਼ "ýo§æ?<í¯ÊºöÙXDˆÚ
bÔÌp0ìO{š¸›>.) failed (rc=-5)
[  637.437491][ T1111] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.541745][ T1111] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.606452][ T1111] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.654083][ T1111] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  637.743085][ T1111] bridge_slave_1: left allmulticast mode
[  637.753208][ T1111] bridge_slave_1: left promiscuous mode
[  637.758976][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.767439][ T1111] bridge_slave_0: left allmulticast mode
[  637.773243][ T1111] bridge_slave_0: left promiscuous mode
[  637.779032][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.855618][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  637.866584][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  637.876517][ T1111] bond0 (unregistering): Released all slaves
[  638.091357][ T1111] hsr_slave_0: left promiscuous mode
[  638.097162][ T1111] hsr_slave_1: left promiscuous mode
[  638.103400][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  638.111093][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0
[  638.121944][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  638.130450][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1
[  638.141666][ T1111] veth1_macvtap: left promiscuous mode
[  638.147200][ T1111] veth0_macvtap: left promiscuous mode
[  638.153138][ T1111] veth1_vlan: left promiscuous mode
[  638.158469][ T1111] veth0_vlan: left promiscuous mode
[  638.292835][ T1111] team0 (unregistering): Port device team_slave_1 removed
[  638.314441][ T1111] team0 (unregistering): Port device team_slave_0 removed
[  638.643949][ T1111] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.698831][ T1111] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.765921][ T1111] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.813818][ T1111] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.876961][ T1111] bridge_slave_1: left allmulticast mode
[  638.886886][ T1111] bridge_slave_1: left promiscuous mode
[  638.896169][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state
[  638.904844][ T1111] bridge_slave_0: left allmulticast mode
[  638.910732][ T1111] bridge_slave_0: left promiscuous mode
[  638.916448][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.071523][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  639.082014][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  639.091959][ T1111] bond0 (unregistering): Released all slaves
[  639.290847][ T1111] hsr_slave_0: left promiscuous mode
[  639.296721][ T1111] hsr_slave_1: left promiscuous mode
[  639.302718][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  639.310418][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0
[  639.322008][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  639.329529][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1
[  639.340820][ T1111] veth1_macvtap: left promiscuous mode
[  639.346686][ T1111] veth0_macvtap: left promiscuous mode
[  639.352610][ T1111] veth1_vlan: left promiscuous mode
[  639.357959][ T1111] veth0_vlan: left promiscuous mode
[  639.492809][ T1111] team0 (unregistering): Port device team_slave_1 removed
[  639.503695][ T1111] team0 (unregistering): Port device team_slave_0 removed