last executing test programs:

25m27.608160013s ago: executing program 0 (id=450):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x20008, 0x10, 0x100000002, 0x0, 0x6, 0xffffffffffffb473, 0xffffffffffffffff, 0x4}, {0x1000000003, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x3000000}, 0x4004)

25m27.316350614s ago: executing program 0 (id=452):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_emit_ethernet(0xd6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0)
mknod$loop(&(0x7f0000000100)='./file0\x00', 0x100000000000600d, 0x1)
r0 = creat(0x0, 0x110)
fadvise64(r0, 0x10001, 0x10, 0x3)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
futex(0x0, 0x800000000006, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0x2c0, [0x200000000080, 0x0, 0x0, 0x2000000001d8, 0x200000000208], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x338)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000020bd2875000000000000010902240000ef00002709040000fe0300300009210500fc0122280009058103ff03038102"], 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000480), 0x9, 0x181000)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000004c0)={r0, r0, 0x4, r3}, 0x10)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="00082a0000002a31f17d3816e9bc3556381a3761291bb59e2b8c801e9e4d76cbdc52c94ecaaf85549a3fd6ee750ada48354cd7927f778e2c4bbe9f9fec5f11f4cf2a6604a6659724fab7e879e1d4bc030cf4b59c83687e"], 0x0, 0x0, 0x0, 0x0}, 0x0)

25m26.520604657s ago: executing program 0 (id=461):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000580)=0x1000000, 0x4)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
ioctl$TIOCNOTTY(r2, 0x5422)
pwritev(0xffffffffffffffff, &(0x7f0000006fc0)=[{&(0x7f0000006bc0)="8dce68d5b802cb89b45f0f396116f3bccf5dd1b7d12e69b7e769f86e8b08e2c4906d646a81b38544c116945e49c2a1308594f7c0f109ad8d65cb0936108c6b6d2043606ae12dca9724c95acc82b649761fadb8ad47799a3bd29b2b8172230054fa22840e907b55f5c4f25db46291a0cfb1a0bb993927a115dfabc2901639518e316792cc9957caeb65e1525d53773dc61f97ed204c7bd55cf07bed3d7db40c1e13a2d0ab91532c5f4d1d42a963f71a95920eb4611348f6a464054e468256df583b155fbd1c5ccab76d27b58e0f5938b7c06e80f507ad6604c1ae0fb69008cb00b797036a68356f", 0xe7}, {0x0}, {0x0}, {&(0x7f0000006e40)="24aaa0d63525ed3e046a5f6dd7db78872cd39f2b59886c099bb418d1f7f6f91aea71cacbdcc904090d9a5ba85c5ef24074c5342f5626845671d7b495e7de5bbedb522a2288aeb9573bc4c700a5bdd15f1fbe68655560a9c54fdb4a5b895599ec68925e7f0379de6b25a86ad8c4a3829a7b490f803db2e8a656007ce4bbba6b6150e53d03269b12258b78c268b64772e483", 0x91}, {&(0x7f0000006f40)="327258e91fa01d6955ffbb898fd1ec08f24cc362c32270371ad9295ce31847d8220ddd6620235d2a49c6d13a39efcc6cb65f5f20cf4356379e32f5006ab75a0e11aff8d6c606334ea5f719", 0x4b}], 0x5, 0xfffffff7, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r4 = syz_pidfd_open(0x0, 0x0)
r5 = add_key$user(&(0x7f0000000380), &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='5', 0x1, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1)
setns(r4, 0x24020000)
syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240))
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f00000002c0))
timer_create(0x5, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000340)='test_dummy_encryption', 0x0, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', <r7=>0x0})
sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r7, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x2, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x18, r8, 0xaff49dcb2601bfbb, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40c0810}, 0x40000)
syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x20, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0)

25m25.993538597s ago: executing program 0 (id=462):
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000100)='.\x00', 0xffffffffffffff9c, 0x0, 0x41)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x2001, 0x1, 0x3, 0x9, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000200)=0x2001)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mounts\x00')
r5 = epoll_create(0x10000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000400)={0x9000000d})
mount$fuse(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x8001, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x89901)
move_mount(r6, &(0x7f00000005c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x89901)
move_mount(r7, &(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)

25m25.588715409s ago: executing program 0 (id=464):
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48)
write$rfkill(r0, 0x0, 0x0)
r1 = socket(0x1e, 0x1, 0x0)
connect$tipc(r1, &(0x7f0000000000)=@id, 0x10)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000440)={0x6, 'macsec0\x00', {0x1}, 0xdd3c})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000780)={0x0, 'veth0_vlan\x00', {0xffd}})
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f00000002c0), 0x10, &(0x7f0000000400)={&(0x7f0000000700)={0x4, 0x615, 0x200, {0x0, 0x2710}, {}, {0x2, 0x1, 0x0, 0x1}, 0x1, @can={{}, 0x7, 0x3, 0x0, 0x0, "e570e1815799ac76"}}, 0x48}}, 0x40010)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000840), 0x1, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000d00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0xffffffff, 0xffffffff], [0xffffffff, 0x7, 0xfffffffd, 0xa, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000f80)=0x3, 0xac5)
syz_clone3(&(0x7f0000000fc0)={0x23800000, &(0x7f0000001040)=<r5=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x5, &(0x7f0000001080)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f00000010c0)=[&(0x7f0000001100)={0x0, 0x0, 0x0, 0x5, 0x7, r5, 0x0}])
ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0)
recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/133, 0x85}], 0x1, &(0x7f0000000640)=""/146, 0x92}, 0x4}], 0x1, 0x0, 0x0)
shutdown(r1, 0x2)
r7 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0, &(0x7f0000000300)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=<r11=>0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
mount$fuseblk(&(0x7f00000007c0), &(0x7f0000000800)='./cgroup\x00', 0x0, 0x3002891, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x3aba, 0x40800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0)

25m23.324427142s ago: executing program 0 (id=478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e)
r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000380)={0x0, 0x0, 0x569, 0x80000001, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0xc, 0x8})
r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0xe212, 0x1000, 0x1, 0x158}, &(0x7f0000000440)=<r7=>0x0, &(0x7f0000000480)=<r8=>0x0, &(0x7f00000004c0)=<r9=>0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000640)=<r11=>0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x5, 0x0, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000680)={r13, &(0x7f00000006c0)='.k\x98\'^\x00', 0x0, &(0x7f0000000700)={@_ha_fsid={[0x1, 0x2]}, {0x0, 0x3, 0x1, 0xfffffffffffffffb}}, 0x9, 0x0, &(0x7f0000000740)=0x8000})
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000780)={0x0, 0x20000, 0x0, 0x3, 0x2000000}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x1000, 0x2, 0xe3, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29e7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000a80)={0x2e, 0x44, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0xe0ffffff, {}, 0x1f, r10, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000b00)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001000ffff25bd7000fbdadf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500580012800e00010069703667726574617000000044000280140007000000000000000000fffffffffffffffe060011004e230000060010004e230000050016000100000014000600ff01"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x24040810)

25m22.078654889s ago: executing program 32 (id=478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file1\x00'}, 0x6e)
r4 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil)
shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0)
recvmmsg(r2, &(0x7f0000000300), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000380)={0x0, 0x0, 0x569, 0x80000001, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0xf0, 0x8, 0xc, 0x8})
r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0xe212, 0x1000, 0x1, 0x158}, &(0x7f0000000440)=<r7=>0x0, &(0x7f0000000480)=<r8=>0x0, &(0x7f00000004c0)=<r9=>0x0)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, <r10=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000600)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000640)=<r11=>0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x5, 0x0, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000680)={r13, &(0x7f00000006c0)='.k\x98\'^\x00', 0x0, &(0x7f0000000700)={@_ha_fsid={[0x1, 0x2]}, {0x0, 0x3, 0x1, 0xfffffffffffffffb}}, 0x9, 0x0, &(0x7f0000000740)=0x8000})
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000780)={0x0, 0x20000, 0x0, 0x3, 0x2000000}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x33e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x1000, 0x2, 0xe3, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29e7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000a80)={0x2e, 0x44, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x0, 0xe0ffffff, {}, 0x1f, r10, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000b00)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000001000ffff25bd7000fbdadf2500000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a0500580012800e00010069703667726574617000000044000280140007000000000000000000fffffffffffffffe060011004e230000060010004e230000050016000100000014000600ff01"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x24040810)

7m30.833323579s ago: executing program 2 (id=5394):
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000040000000400", @ANYRES32=0x0, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000200"/21], 0x48)

7m30.729032037s ago: executing program 2 (id=5397):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xd7ff}}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

7m30.455731099s ago: executing program 2 (id=5401):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', <r1=>0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000240), 0x4)
sendto$inet(r2, &(0x7f0000000280), 0x0, 0x4004, 0x0, 0x0)
sendto$inet(r2, &(0x7f00000002c0), 0xffffffffffffff94, 0xb, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x200000, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000600)={'nr0\x00', 0x4000})
socket(0x10, 0x3, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x29, &(0x7f00000003c0)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000440), 0x4)
recvfrom$inet(r2, &(0x7f0000000480)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x8, 0x0, 0xff, r1}, [@IFA_ADDRESS={0x14, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={<r6=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
r7 = open(&(0x7f0000000540)='.\x00', 0x8000, 0x112)
getdents(r7, 0x0, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000580)={0x12, 0x10, 0xfa00, {&(0x7f00000002c0), r6, r7}}, 0x18)

7m29.392196948s ago: executing program 2 (id=5409):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x104000, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000180)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "45208e", 0x88, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0xe, '\x00', {0xe, 0x6, "ea7878", 0x7fff, 0x33, 0xff, @empty, @mcast2, [@routing={0x2f, 0xa, 0x0, 0x1, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3d}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}]}}}}}}}, 0x0)

7m28.369995062s ago: executing program 2 (id=5415):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x60241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000ec0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000f00)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000f40)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0xfffffffd, 0x5}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x0)
write$tun(r0, &(0x7f00000013c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000002082f"], 0xfdef)

7m28.036262903s ago: executing program 2 (id=5417):
open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0xa8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x74, 0x19, 0x200, 0x70bd29, 0x25dfdbfc, {0x1d, 0x1, 0x7}, [@CGW_FILTER={0xc, 0xb, {{0x1, 0x1}, {0x2, 0x1, 0x1}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x4, 0x6, 0x0, 0x0, "4f9b8667fdd5129d"}, 0x3}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "4cd5f89bf33f1716"}, 0x3}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "7f9c0a281a7abcd6"}, 0x4}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2004080}, 0x40)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f00000005c0), 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000600)={0x2, 0x51a, 0x8208, 0x81, 0x4, 0xffffffff, 0x6, 0x8, 0x1}, 0x20)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r3, 0x46c9f4585edba946, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8010)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x18440, 0x0)
ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000800)={0x5a76, 0x3, @value=0x7})
syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff)
r5 = getpgrp(0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000880)='net/ip_vs_stats_percpu\x00')
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000008c0)=0x100)
ioctl$TIOCCONS(r6, 0x541d)
getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r4, 0x84, 0x84, &(0x7f0000000900)={<r7=>0x1, @in6={{0xa, 0x4e21, 0xfffffffb, @mcast2, 0xfffffffa}}, 0x4e21}, &(0x7f00000009c0)=0x90)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000a00)={0x9, 0x2, 0x8002, 0x4e, 0x8, 0x5, 0x0, 0x2, r7}, &(0x7f0000000a40)=0x20)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x13040000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff65a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004801}, 0x8000040)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000c80)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000d00)={0x1, [0xc8, 0x7451, 0x3], [{0x7fffffff, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x40, 0x0, 0x1, 0x1}, {0x1000, 0x1, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0x4, 0x1}, {0x1, 0x40, 0x1}, {0x0, 0x9, 0x1, 0x0, 0x1}, {0x1}, {0x3, 0xfff, 0x0, 0x1, 0x1}, {0xdff, 0xfffffff7, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x1}, {0x2e495ca0, 0xb, 0x0, 0x1}, {0x5, 0xc, 0x1, 0x1, 0x0, 0x1}], 0xd})
fstatfs(r0, &(0x7f0000000e00)=""/227)
r8 = accept4$inet(r4, &(0x7f0000000f00)={0x2, 0x0, @local}, &(0x7f0000000f40)=0x10, 0x80800)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000f80)={{0x3b, @rand_addr=0x64010102, 0x4e20, 0x2, 'wrr\x00', 0x1c, 0x4, 0x60}, {@remote, 0x4e24, 0x2, 0x0, 0x8, 0x7f}}, 0x44)

7m27.447417901s ago: executing program 33 (id=5417):
open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0xa8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@can_delroute={0x74, 0x19, 0x200, 0x70bd29, 0x25dfdbfc, {0x1d, 0x1, 0x7}, [@CGW_FILTER={0xc, 0xb, {{0x1, 0x1}, {0x2, 0x1, 0x1}}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x0, 0x1}, 0x4, 0x6, 0x0, 0x0, "4f9b8667fdd5129d"}, 0x3}}, @CGW_MOD_OR={0x15, 0x2, {{{}, 0x0, 0x0, 0x0, 0x0, "4cd5f89bf33f1716"}, 0x3}}, @CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "7f9c0a281a7abcd6"}, 0x4}}, @CGW_FILTER={0xc, 0xb, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x2, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x2004080}, 0x40)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f00000005c0), 0x4)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000600)={0x2, 0x51a, 0x8208, 0x81, 0x4, 0xffffffff, 0x6, 0x8, 0x1}, 0x20)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r3, 0x46c9f4585edba946, 0x70bd2a, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x8010)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000007c0), 0x18440, 0x0)
ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000800)={0x5a76, 0x3, @value=0x7})
syz_genetlink_get_family_id$fou(&(0x7f0000000840), 0xffffffffffffffff)
r5 = getpgrp(0x0)
r6 = syz_open_procfs(r5, &(0x7f0000000880)='net/ip_vs_stats_percpu\x00')
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000008c0)=0x100)
ioctl$TIOCCONS(r6, 0x541d)
getsockopt$inet_sctp_SCTP_REMOTE_UDP_ENCAPS_PORT(r4, 0x84, 0x84, &(0x7f0000000900)={<r7=>0x1, @in6={{0xa, 0x4e21, 0xfffffffb, @mcast2, 0xfffffffa}}, 0x4e21}, &(0x7f00000009c0)=0x90)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000a00)={0x9, 0x2, 0x8002, 0x4e, 0x8, 0x5, 0x0, 0x2, r7}, &(0x7f0000000a40)=0x20)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x13040000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff65a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4004801}, 0x8000040)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000c80)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000d00)={0x1, [0xc8, 0x7451, 0x3], [{0x7fffffff, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x40, 0x0, 0x1, 0x1}, {0x1000, 0x1, 0x0, 0x1, 0x1, 0x1}, {0xffffffff, 0x4, 0x1}, {0x1, 0x40, 0x1}, {0x0, 0x9, 0x1, 0x0, 0x1}, {0x1}, {0x3, 0xfff, 0x0, 0x1, 0x1}, {0xdff, 0xfffffff7, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x8, 0x0, 0x0, 0x1}, {0x2e495ca0, 0xb, 0x0, 0x1}, {0x5, 0xc, 0x1, 0x1, 0x0, 0x1}], 0xd})
fstatfs(r0, &(0x7f0000000e00)=""/227)
r8 = accept4$inet(r4, &(0x7f0000000f00)={0x2, 0x0, @local}, &(0x7f0000000f40)=0x10, 0x80800)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000f80)={{0x3b, @rand_addr=0x64010102, 0x4e20, 0x2, 'wrr\x00', 0x1c, 0x4, 0x60}, {@remote, 0x4e24, 0x2, 0x0, 0x8, 0x7f}}, 0x44)

10.796648996s ago: executing program 6 (id=6983):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)
write(r0, &(0x7f0000000300)="6c0000002c0001060200000000000000000000000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c00", 0x36)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='100000', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r2, &(0x7f0000000200)='1', 0x1)
write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, r2, 0x6}, 0x50)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

9.690967675s ago: executing program 5 (id=6987):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xfffffffe, 0x8, 0xb, 0xb3f9, 0x200})
r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000240)={0x0, &(0x7f0000000080)=[@nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x2, 0xafff}}, @nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x16, 0x4, 0x8, 0x8001}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @arbitrary=0x9}}, @out_dx={0x6a, 0x28, {0x5505, 0x4, 0x5}}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @unmapped=0xfffffffffffff000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x8000, 0x7, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x459, 0x0, 0x1e, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x2542, 0xe3a}}], 0x198})
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000280)={0x3, 0x0, [{0xb56, 0x0, 0x2}, {0x253, 0x0, 0x3}, {0x60b}]})
ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f00000002c0)={{0xfffffffffffffff8, 0x5, 0x6fe1, 0x1ff, 0xb}, [{0x4, 0x0, 0x81, 0x5}, {0x0, 0x161, 0x9f, 0x7}]})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000340)=<r2=>0x0)
quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r2, &(0x7f0000000380))
getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000480)={'nat\x00', 0x0, 0x3, 0x0, [0x2a6, 0xfffffffffffffffd, 0xffffffffffffff50, 0x8000000000000001, 0x7, 0x80], 0x6, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000440)}, &(0x7f0000000500)=0x78)
r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000540), 0x101001, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xdc, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x16}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3ae6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xf}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffe01}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xbed4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff2c1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
pipe2$watch_queue(&(0x7f0000000780)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r5, 0x6, 0x15, &(0x7f00000007c0)=0x81, 0x4)
ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000800))
syz_open_dev$cec(&(0x7f0000000840), 0x0, 0x4000)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000880)={0x9, 0x6})
r6 = memfd_create(&(0x7f00000008c0)='/dev/cec#\x00', 0x5)
sendmsg$nl_generic(r0, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x18c, 0x13, 0x800, 0x70bd26, 0x25dfdbfc, {0x19}, [@typed={0xc, 0x79, 0x0, 0x0, @u64=0x2}, @typed={0x7, 0x132, 0x0, 0x0, @str='nq\x00'}, @generic, @nested={0xc, 0x33, 0x0, 0x1, [@typed={0x8, 0x98, 0x0, 0x0, @u32=0x2}]}, @nested={0x62, 0x10, 0x0, 0x1, [@nested={0x4, 0x12d}, @nested={0x4, 0x126}, @generic="f172a4fbbacded3e5ed27c3ad73695c20618ff8702a4867c580b016ba16678d54a938909702b1621cf47277b4851528eb558961f46c791c5793bacaf0449cc9d8c1c576bb2ca416a17dfaf601ca37a91640dedb498e6"]}, @generic="7e71f5cbedeb870f37b246656c9475460c0cb2d289d0d790e2a57b39a60d6075b9618c44799d60bb7ca00353ad5dec634465dd066603a945a8ea5c21f5e506532a10abc52ac77482abeaf2c0263a", @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@broadcast}, @generic="3064347290e36d508ae8bf833ca40bb492e7783612a1db54ccd4aa8bdb9b655def5652c2b1a7edd4a9d2de16d701582db8e64be6844f6a69e239fffba990e169cd4149c492a90c12e44900675e42e622098e2a51ba1ff69a60cd0202afe86e051c5edba61f3cb42e61db4e7c91db807b32590a29bd12dba48806a541ae487b942912880982a8fcc99a65fcff2d54c830f17aaabc8022aebaf3428d"]}, 0x18c}, 0x1, 0x0, 0x0, 0x4040001}, 0x40000)
shmget$private(0x0, 0x1000, 0x400, &(0x7f0000fff000/0x1000)=nil)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000c00)={'syztnl0\x00', <r8=>0x0, 0x29, 0x7, 0x39, 0x10a, 0x10, @private0={0xfc, 0x0, '\x00', 0xd0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x700, 0x20, 0x8fab, 0x8acf}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x74, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4080)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000dc0)={'veth0_to_hsr\x00', {0x2, 0x4e21, @multicast1}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001e00)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000000e00)="534d5ec4af8cd6d81d75614addbf5e616eed7a53b7066d6bfb99be68c54487aa2405ec1f461160f0d5047f546f8f738efc3ea4203533bca80477f588bb9f62582fe3823cd2fbaf336abb8218bc02b46ba775dd47affba48dc4c9cb15262bd673b3ab1a88336e5847ff8120a6c18cbfae47260e158e63f005772c3fd3647074ee61f1ac436f68e0f0fb28080a463288bd1858ea024aa75e9426d9eccde79df05fc4941d5871a2d73fb8f941d4780edef8dd24b5104f2955acdafb83312ed1050b6a04ff9ce955084b6cac65500d0b640206ac5e3864a512e7d3b650c5cb97c347f041277c3ca6d5e1fd2406bcf23a9b1cf68c758bb8984f6f2f562206c93f1ce0fc96f17fc3712bbf14bcd696d8c2366c60e7b7d38a1e60840f2daceda76113604d7e256f2a64bbb08e00b6cb74f04ae7a56be10582513e511065799b6e9e82a1c46136d37ad0c49d2d619c11dbf4ad07cc9871182da4c5fa8409d217afa9eef6fb096cbc7a8948314da41f045f20194ce0753e8fb9bf0feb356f825f9067c97a16c3508d3f4fee31e75e0c8a69e8f5cc95015e4a034c80d8c16cf63614defce7c35daeb7eff12041daec94aec12151a0d0bce722e3775794cdb5aebbafde569da9b0cdf6f7c57530318e6859454f30f409c60562607c758934393e6977efd5405b2d778a649fc1c2168ec3492d24b616b60037352a69d6c69f28a14b00861cc0a4b1136df0eac98e723ed63918921d0ebb32bfa440fd47dbe444ff18a684469f1bc51c42a1e39d82b0b833ae67f06c759aecd4c4d09687b6ffbdb8a76150f3e029452ef6c5f3bce1fb91823331252e304b9bca82b03158b8c3189cc89431d601552b5c20a4047de270e553afd70d0a5de3765d23c3e7f544cb0c0de448e7ca3e51cc9584a01ab0e4efb4c4f2ee03f6c6b9bae385c1fbf7f2a9dde6c72acb4125af173d3045b37fea934384b338c84aa35da0a55eb2937ee50ba501bbda9794054bea451a913cbe5715ed5c70476f8c9dc4b7c55c59e7cbed5c7062cdcaba3d91e5b50974ca416d71b23d43849cffaded994630c231c334e79b035baae71d837babd459a9d701a88fc0e1fd1a5ade7ffae55ac162974596a489f56f050b1e9e8713bbcfa9f94849b4884a940c240a864c4c79fe81e8b4cb7039007efe462a375cb7c168106ba67784db0679aae2fc6de96c9ed0e78f1462ec371d974c724e052ac63d1b8df4dcf06c7599af758aca9e37e80dfee63e05888d0f1cd3fb11ea6e58db09e588887f98834581d782d492cf70a933d217d6df6cc0496950329170a5ba28ef8d5d568599245446eec1bbd7d30ebd20306bd50aad03f3665b345c27bf46adc95d1fe7fbc5cb8a2aaa61dbf3e4747a897affd9a027f4c7984cecd711eaa361154504ab4719b24b69fbcbb5c086d39343ff0dc04a192edda873586398e7714b48fd1fb352050fd330b11ccb39be543792f63d202f9575446f9cadf8b07b28aab250b8280d76c733f24eb5553b12a84d181e30256fd27dedc6b30bfcf94be27ac3046221a977e1fefc4aac22fd41ee5ceef69379416c17ad7c517a31febd129b7f0cc0d258a2d42a0d57b0df905cc15d86e15b8b3cb7d5b074b255f9d06ab9fd0450a0cadb87384642cb3aeb7d600944b0cdb61e10359741fd2938d2c773f8b5d829970a92c06751cc9c8158bfa1f056f2713e8faf3e5c3df10e82f392d8283a1a40d56f52ed1ee9471633426784a3bc0aed2107dc4090d7970ef248a63136410f0e1a19898517a98b8a3bf0cdd7a35d449a0700a23ac28f31302696f7e536ead17445c13f35ad71625cac21ae3c4411f0a6b0b3313710b4d5eb8bb4603e093e7dad8879df87aa62a1dfe31c854e40e0700eaaa0f3fad33895bf196f92cdf75d578de87192e184bb314b500baae7e428ab853626559012e45aa731caa678edc2b598ce9421d02df8ab96ab58b0f8a26d5ce2a40668fc2cc99a1362cf7e17707c2d2fdba3d4f0401f4581d660801db633fb853855954cc039c441116423d917cbadc1385c9595119ebaa80b3540b1df9785c0b9ab6d7ff785e9190fcf5eea682d7180661a801bb3f6ec67994d91cac13639017fdaf7e0fd3bbc42271eb1bf5faca29376a09f608612ae1ae3851716db691327e5f98549cf80f9be1bac9588ff93eba2f18d99c68f097ef2ecfe6905a2571a3c49506f432913cd97b9d3e0f4ea0e6f108dac79fcc13b5f36c67f98d4b993b97c8628a1d34e43af8db7f40728af552674b9f1b9a6453c346175d9f566603b5d654d338ac0be2d2e89afe8f21b322d26cb39882b6464439677736a88fab080b8f2b8fe2997159c94588f5bd4d8a255bd150bb17c302f1f184f689ee12665899a5d554a7551de06d3507ed0ab62987a375ea7e1cc774abd8370630fa6113606c2403b7ac9ad428df035d909f2524c5fa44692114e41a905dc99f89f2c1f47ee0ecc0ba2d255cc28a942606ab84bc7c586d9cb5b6130263f06f62ea47eba04107a58b186d537a1833be7ecabf810cbb493aa3278baed9a9b1c7b16db4d86def2052932a0cbf604811801e57fd7923fbd98f0ac9c3d8d2c702900d9205783b0f5fc90186aed0ad3594a517e6cb1ce15c9a1d3960faeb87cd9ceea7e84ccab85f4f02d755c2c7c36776c5bf86cbe2c5031b0a3278d6938322189daab5d25372d22d3d77f6ac03c19392e212bd3a991392d2d416c9785d4f9b67c787514aa14b8126367b5ffab4f69c5df31befb6bd984bd1683cee72bfa0c0f52235b28b7908a43006e84fc71df5ba564b43b0a8793d3eb9e90d55d4bf7a5ee249b8d8a0295bfa942494cfb0e7b0b43183f6877b79d9c741de970df92127411aa80a2e1886e7fc34bbe2f61a82269ea80185b517e9686b2d1b3b5471be7d55c2c471c2c5dd7a850744c569ff7b17283b52c4b74c5b5b34f736b44b2bc7fecf1e8b14f774998c978be18caa37c3ac8e9b2511e8be0b73053887231b8ca731d82732dd796828d3829f086cd1c597d387697e996140dcb3e7096e1ba0e23bc86b46a5959627161836b6ef9f396d0924cffb843ad8b510f459d336184f8678277786ff4a1c4a76225f3aab46a0d6bd417a844336c7c3c596adf871d596fa5f18c9e26540ab461cb15e12364b659a8ea273b99010c4e44e9bdb10f39f6b061d622f11cd71fc30538148cde568ffff461933a46b3f76262a5ea7dbe4dfac92c3e9a239281dd4a9d1d2736d17234e6317019476228504d4320e9b722f29ffcd8f2dfec5be4270163b49c48f30c2e7ff45e74c69105500f7fa9374d97065ea5e1a0b74e1daecb78940da4c21c7e0d160789a79533481c07c2115d4f528a742cd4a37acee0e1f59d46e4c7aaac39f807ef6bf7596960d9cfa74d41cbd423fe8709f41955f2aec5e49aecbe449ac9828604273d9eb650d830f5b11e1b5b1a963123fd0276009263050f0204422e4bcb71033bdbc2caee615293bd2bc6c640c418c5e8ade693c3b83928c24d5a0cfc7986ebdc69f8f91fc1c9e0b1fdc5844af12091db0cb116445e3185720c91888ea4b6ec7b0f501347aac8553e6541cd4aee15d3ed170fb2bcc8a1771bb84de5744da61995047955517c492322da3dbaa05a60e03e806b6bbe5108dece64e925a7ef11db349844a197eeaf9537a03ad9c8697976994c99611f8f53a43e537996e4026d20ede4d08e862582153082c2ac8d5ea0297c9b5116d529a47641d4a80d82eb1c4e3d8dfbe73b327433cc97985e618013eec5c723a0868d36a74f9eb6182ac2f5397b78ce813e238a9a4e3b31afde7b3e05f118255005c721c8be29dd3325be136cece6b5c71f1d44bc40568cb45f0395e520bd4fefa285e4dfcbe61c4d945d1d95fe5f45cf29d7c5046632e43cc70b9c427190d3515381332b631d6cbf78e1c2b2dddac5f4c4d0b041cb0f40f20c870b3963f47e45b40c522a7a3210f5375859e9eb965c421f3905fbe1fa3f6b3ee3f398a5342bce6005dd153803fea271f9024b077a1a6d770c96f29b8073231b5750e7fe26b41bc05af3e7a9c37e9168c75dda09d3934d5981f2f88ebb12c790ad2eacba1176516cd0c3a03d675435e173901142c4fd7a66236dc55ff8f79bad7ec40f2e2ae9e00e3d9629cf148aa58ce17572628b5929f1960cdfdf9c36bd77cfa496f1ca957c4db6b7973e1158b0bdf483c8ad874c6e6c0c8a33260d7c68a85292b6e6bbc696bdbc632984ea02c6ad66f300dd7927afc9712c322197ba3f4c1c6612ae5351f4940e72b1c3abccadbe4d0fc4801046232a8376e44a7f788655a905bfb553db5757c9e0b2460d3d8cbe7e8a461425bf6da7079f0f5641f851b9501d4297d1291ffa5861c7483b073ce5c5cfcf019e2e4a8f29e58f12fd884993918add57b8905fcba89108fe2d0802c7d243ccf64e39fbc688b0324ceb91c97f7e9b4bf219864f16fbf80eb0dca0861437c7c3b03466c8ceb5f3e57a7a21f48f4254cf92ae2fbccb6e013c29491d9e8abf5af8a773cb80cebdd3cdc909ed520e06570ebefced78b9443a4b3359331abfe4f0917ac2581ca2d0cce81900bde60f5d1eff63fe9d22981083cb08cf1bfe54c4a1d044e2a202c931f02fc01d496447c154b9c8011aae3dff197bd0d8afe5024256e18a7cd48f171fa8c0edf45baa28fd5301dda5604ceb4c4c340e27b39e456916f1a66a1afa759c862008d2c29d905364ab04641561f28be76bf6728f8daed7e51ba1dca153f6c05dc8fa2d77cf4782084160d4f081cbc25449ad7ebc002a554368b81cac54307bea5d183f1f1589d20ba7c07594ee0819b22b645de0c921d96787e24e5ca5881bf6da09ef48df6a07cf6cf8dc02c6cdacca2ce9791c92ed928d5c49ac1ba6c861619dbc9d6c39f5dba6581e5b8f8bdbc2a47c91489a561a6ce061e2514a47f9ac3cc9074520c4c7ed90aba2f114c4ec6570094f6d359e599f6f60c46179044605d6e3c4ff6ac87d18d3d0fb2ec2b0405f5abf444ac2d545bc33b745212b0b4449dff818069527b5a6d848ac20f92146cfb7e6d146a4199facc500892913cc58757f72428b8f5bf1d81ffcac6c01d7b7d9c50a0b0b996f03845442242b13ded31ebd0902b0b1dbaa14e9946ff2d1366168712073c6da361c57468851a7f81a0542a79ec8250512aa2f15f8bb9474041d102e306a56cbdd93131820cd7fe23cf5a728096c5dae9a193f1bfe580b6e57fee9e23f16112c2da539d7d10a262692f0b23bdd2971c2b0237870e514d90ce74f5a6a5fcac49f330c38a79da6585755138bf5f16822121ad4b5b7d37a69a06042f2bbeca6a8cc35fb8fb141df09b9e27ae04beb847062c4e1ae6e010ff31d44734841002ce29df587d7107a43c6ae916e132d24c9319dd1db9ccbf1b33399e54f7f9512514c21540ba538530a043c9bf212b7d0e68f2cb377bdab29fe264babdddc4187425d89e41f92a963df4e6fca09a8098528546fe030573d1d433fda51deec9a8ee1b296b41d00f674114382e95609295f14cf7103336f59232db1f3e4665176b6c67cc44b7bc021bb63d68feaa0a43037022df35b31f8be1d84e2e0d4c7dd121f7bfceb5c72ff5abcdbfa5f65185bb2dc6c8ee073afad7b37a6faa8f25545fbe95ce672ed0666e02902c12d3c6339b7829feada290618df67133b465f6fc6b75a4e49ec34f43c3c9a21d70e297b39cdc5dcee88363dcbfba91de2d0868e440c3464a1034f576e0ab7ae2a9ae5a6d4e5fe9d991c93d02e2f2fd5d2528a541290be6d6488b73dbcfdae43fe7a93918b489c5872", 0x1000, r6}, 0x68)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001e80), r3)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f00), r0)
sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000001fc0)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x1c, r9, 0x8, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000080)
setsockopt$MRT6_PIM(r5, 0x29, 0xcf, &(0x7f0000002000)=0x1, 0x4)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000002040)=0x11)

9.341493672s ago: executing program 5 (id=6989):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777)
r0 = socket$netlink(0x10, 0x3, 0x0)
write(r0, 0x0, 0x0)
write(r0, &(0x7f0000000300)="6c0000002c0001060200000000000000000000000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c00", 0x36)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='100000', 0x6)
write(0xffffffffffffffff, &(0x7f0000000200)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='0', 0x1)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x73, 0x55, 0x78, 0x20, 0x545, 0x800d, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x7, 0x80, 0x0, "", [{{0x9, 0x4, 0xa0, 0x6, 0x1, 0x7a, 0x8d, 0x91, 0x2, [], [{{0x9, 0x5, 0x85, 0x10, 0x8, 0xa, 0xfc}}]}}]}}]}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0xbc6c, 0x4936, 0xc2, 0x1, 0xffffffffffffffff, 0x6}, 0x50)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)

9.216592622s ago: executing program 6 (id=6991):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x400007f)
write$FUSE_DIRENT(r0, &(0x7f0000000340)=ANY=[], 0x128)
read(r0, &(0x7f0000000280)=""/1, 0x1)
pread64(r0, &(0x7f0000000080)=""/144, 0x90, 0x5)
dup(r0)

8.908992255s ago: executing program 6 (id=6993):
r0 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @local, 0xb}, 0x1c)
ftruncate(0xffffffffffffffff, 0x40000008008975)
ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0)

8.316709901s ago: executing program 1 (id=6996):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000200)={0xf0f01c, 0x2})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000240)=0x1, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x4e2de}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x10, 0x0, 0x0, 0x1}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)
syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="1201010200000020861a2d7540000102030109026e000301086003080b010101253008090400d163892c2dd0ea21fbf1540ff9d40000010130000a2401050a00040000000904010000010230000904010101010230000905010940006602090a2525080000000904000904020000010230000904020101010230000905820940000005030a252500000000070101"], &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x0})

6.71134272s ago: executing program 3 (id=6998):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800)

6.63937732s ago: executing program 4 (id=6999):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x1, 0xc, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0x0, 0xf3}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x2f}}]}, &(0x7f0000000d80)='GPL\x00', 0x6, 0x80d, &(0x7f0000000dc0)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)

6.508570252s ago: executing program 3 (id=7000):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x2) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r0, r0, 0x0, 0x20000005) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = fsopen(&(0x7f00000002c0)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000340)='test_d \xfd\xe8s\xfcp\x81\xd8\xae\xe6\x8aHC\x03\xfd\xf7\xd5\xe7\xd3f\xb2$W\xae|0\xdc\xae\x7faf\xb1\xc3S\x02\x83*Z\xb0Zt\xc6\xa0<\xfe\x85\x9d\xc7o\xd1\xcf\xec\xa9Z\xd3\xb8%\xa2\xb9\x86t\x8b\b\xdf\xb8\x9b\x172c\xe5\xc7\xf5\xbe\x96\x8e\x9fr8?+\xde\x1a\xe7jg\x8d\x95\xdc\xb5\xeb\x8a8\x16\x00'/112, &(0x7f0000000900)='v8\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000440)=[{0x6, 0x6, 0x4, 0x8}, {0x8, 0xf7, 0x2, 0x200008}]}, 0x10) (async)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0xffffffffffffffff)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000004c0)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
ioctl$XFS_IOC_FSBULKSTAT(r4, 0xc0205865, &(0x7f00000007c0)={&(0x7f0000000500)=0x3, 0x2, &(0x7f00000006c0)=[{}], &(0x7f0000000780)}) (async)
signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x7]}, 0x8) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24008011) (async)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000180)={[0x3, 0x934, 0x2, 0x100000001, 0x10001, 0xf69f, 0x6, 0x204, 0x100000000, 0x2, 0x10001, 0x7, 0x400, 0x80, 0x6071, 0x40], 0x41000, 0x8001}) (async)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
io_uring_setup(0x3a63, &(0x7f0000000800)={0x0, 0x8274, 0x40, 0x3, 0x846})

6.508142573s ago: executing program 1 (id=7001):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0x1, 0x2, {<r0=>0xffffffffffffffff}, {}, 0x9})
ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x0, 0x0)
syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000300)={0xe0002004})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000440)={0x10000014})
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3)
r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x11, r4, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000001000/0x2000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
r5 = syz_open_dev$I2C(&(0x7f00000007c0), 0x1, 0x2603)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000800)={&(0x7f0000000840)=[{0x1e, 0x8801, 0x0, 0x0}, {0xfe01, 0x0, 0x0, 0x0}], 0x2})
syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000880), 0xe8, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000003010103000000000000000082000008f0963dbbdf2a37684a08a1f0ffffffe5000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000170a0101000000000000000000000008926682a3da81618af59a0a247df3f5c4bcba1740b1301b15aaa43aabcc88e345c79202bc77509da63b35ad6645991f289252dfcbb4115b0d5bcf740acf9db2bd8abd075b79c0c7b201e4e1df73b07424342575ca9331f1dfd7fafacd05454dda57b5aae2af0c69dd54704998ed49d921c4615441a740a43b17674f026b02c9890271947ba9000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000b00), 0x20000, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff8d)
r7 = syz_open_dev$dvb_frontend(&(0x7f0000000b40), 0x0, 0x2)
ioctl$FE_SET_FRONTEND(r7, 0x40246f4c, &(0x7f0000000b80)={0x1c40aa80, 0x0, @ofdm})
r8 = syz_open_dev$dvb_demux(&(0x7f0000000bc0), 0x0, 0x2)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r8, 0x403c6f2b, &(0x7f0000000c00)={0x0, {}, 0x0, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee5, 0x8031, 0xffffffffffffffff, 0x1ab55000)

6.396166939s ago: executing program 4 (id=7002):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x4, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xfe, 0x80, '\x00', 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x4, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x21, 0x0, 0x0) (async)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) (async)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000380)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x34000) (async)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xfe, 0x80, '\x00', 0x8}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)

6.318560488s ago: executing program 6 (id=7003):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x4}}, './file0\x00'})
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff05, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x10002, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000380)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000003c0)=0x2) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f00000003c0)=0x2)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000400)=@mmap={0x401, 0x2, 0x4, 0x80, 0x4, {0x77359400}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x400}) (async)
ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000400)=@mmap={0x401, 0x2, 0x4, 0x80, 0x4, {0x77359400, <r5=>0x0}, {0x3, 0x2, 0xf, 0x6, 0x3, 0x1, "a91b63d9"}, 0x2, 0x1, {}, 0x400, 0x0, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000480)={0xf0f046, 0x100000})
socket$packet(0x11, 0x3, 0x300) (async)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'veth1_to_hsr\x00'})
accept4(r8, &(0x7f0000000080)=@ll={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x80, 0x80800)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRESHEX=r5, @ANYRESOCT=r9, @ANYRESOCT=0x0, @ANYRES64=r9, @ANYRESDEC=r6, @ANYRES16=r8], 0x24}, 0x1, 0x0, 0x0, 0x22040000}, 0x4)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
r11 = openat$nsim_new_device(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r11, 0x80049370, &(0x7f0000000300))
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1e)

5.953149428s ago: executing program 6 (id=7004):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
syz_open_dev$hiddev(&(0x7f00000000c0), 0x4, 0xa100) (async, rerun: 64)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) (async, rerun: 32)
r0 = syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) (rerun: 32)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r2 = dup(r1)
sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4008055}, 0x20004080) (async, rerun: 64)
write$UHID_INPUT(r2, &(0x7f00000003c0)={0xc, {"a2e3ad21ed0d52f90925090987f70e06d038e7ff7fc6e5539b3243078b089b3b33386d090890e0878f0e1ac6e7049b334c959b4a9a240f5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d076d0936cd3b78130daa61d8e809ea02b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203821b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18809a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348071f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed2bf1f847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aea019c982cd3b43eaeb1a5fb135c0c7dce61a0b29aa328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a06007c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d8c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687ea84afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb8052ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async, rerun: 64)
mmap(&(0x7f0000c79000/0x1000)=nil, 0x1000, 0x1000002, 0x1010, 0xffffffffffffffff, 0xe5129000)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380), 0x4000, 0x0)
ioctl$SNDCTL_SYNTH_ID(r3, 0xc08c5114, &(0x7f0000001400)={"4f90d728f4808accc98aa6cb00afa53842cff83400", 0x1000007f, 0x1, 0x400, 0xfffffffc, 0x81, 0xd, 0x8, 0x1, [0xfffd, 0x1, 0x5, 0xfffffffd, 0x401, 0x2, 0x0, 0xffffffff, 0x4, 0x3, 0x2, 0x8, 0x8000, 0x2, 0xa1af, 0x7ffffffb, 0x20020000, 0x8893, 0x80000000]}) (async, rerun: 32)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (rerun: 32)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000014c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001500), 0x2, 0x0) (async)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001540)='/proc/timer_list\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r7) (async)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r6, 0xe503, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, r4, 0xfffff000) (async)
syz_clone3(&(0x7f0000001580)={0x3c9851600, &(0x7f0000001600)=<r8=>0xffffffffffffffff, 0x0, 0x0, {0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0xffffffffffffff4d)
syz_open_dev$vcsn(&(0x7f0000001640), 0x8, 0x909840) (async)
ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000200))
process_madvise(r8, 0x0, 0x0, 0x13, 0x0) (async)
connect$unix(r7, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0xfffffea5) (async, rerun: 64)
ioctl$SNDCTL_SEQ_GETTIME(r3, 0x80045113, &(0x7f0000000180)) (async, rerun: 64)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000001700), 0x200082, 0x0) (async, rerun: 32)
setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000140)=0x40, 0x4) (rerun: 32)

5.822443848s ago: executing program 5 (id=7005):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x22020400)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x6, 0x36, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
listen(0xffffffffffffffff, 0x10040)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
unshare(0x20000)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x4, 0x1)
chown(0x0, 0x0, 0xee00)
ioctl$TIOCCBRK(r1, 0x5428)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x24, 0x226, 0x109, 0x870bd23, 0xfffffffa, {0x4}, [@typed={0x8, 0x61, 0x0, 0x0, @pid}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x600c800)

5.737300439s ago: executing program 4 (id=7006):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB, @ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000040)="be14071ec52235911fd6148529a8f3abf8fb4875e07c", &(0x7f00000002c0)=""/196, &(0x7f00000003c0)="a88fbbcad3e0f0d8e3a7325fbb2ea46a93e4002b0134be053f853003c78c85f643bd2c05aeb891b28a1bc949a6d1d5a0483b37c072e55820a91fecb3513bbb09ae152fe494fda405c017d83442020a5acde0b6380595de", &(0x7f0000000440)="9f96127a4b3299e4b2d3b6622ebe4edb804afd112d3b46a08705fbb8b7a20084e1c567f93e829abe773f8a90a68fdd8b67366a95d3b22893535727f788e36379d23980429ed91df28c50c193d7afd30abf7e0fdcc341fdef5f35374649749573083938c23949453ddea219", 0x4e2, r1}, 0x38)
sendmsg$inet(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x8000)

5.284975914s ago: executing program 4 (id=7007):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001f00000050010008000000005001b00df000000080007000200000008003a00", @ANYBLOB="f8ff07"], 0x94}}, 0x0)

4.719577192s ago: executing program 3 (id=7008):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x7, 0x30}, 0xc)
sendto$inet(r0, 0x0, 0x0, 0x20000004, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
sendto(r0, &(0x7f0000000380)="ec8df5aacf", 0x5, 0x5, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x5, 0x44, 0x2, 0x8, 0x400}, 0x20)
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x3, 0x8000, 0xa003})
sendmsg$sock(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)="50e75f4858f6da2039ef25c8095efb0898e2f9770e1371d3c021ca875f0865b7f9a13bdd732a3ed43f36590f9e569f23445b81e577cb53ee48fa8a2c9477f18f73febc9042b12e86b7956784eff91722025c8bacc9572537eb420d45ee9fcd3fca9347ecf3e5db6fc66eb55946e6029b0cfa2d2297470873b7678a6b7c7d47377adb0f40ee947b59545ba394d199a075233e7fa6e1b8dea2869334913ae8f67f357c0fac7e7ad29ff694e5da9f9058ba662cf815ecb7ec926aa2fff0adeec2640edd7dd3648ee9f9aa8067917287126335be74da9eaafb3c285c4e0cff01166be89300b119667dfcff4c4748edee77cb", 0xf0}, {&(0x7f00000004c0)="d9e40c9fcf2397d65c5922bb827b356cd253a9b9e7a3e97935be8d4fe9af773bad136c291b786e7c9a4e7de62fa6b53b6307eefaa8ca2fb083d895af115c130085e39ad63186f96f6d47e69b50", 0x4d}, {&(0x7f0000000540)="fa2e50aa6c16139e09871d6c0587b1e42906a4da11f8716e58b71417628db45a34f154ac99451ec9e67db5143df98600322881fa093bf7557c2ab10e51a5589480e9291fd9845b00a53665e9aef501a7930f67d437ab2a772ff91e1e2eaab9f552d6f134fe9052e0eca7fc2ec67c8bfc3246a20569c1121ffc3e6269571fb984a1b3d5aa5e061978597fe766bd0d5d175fb8254502469f7b9e40cf35991c", 0x9e}, {&(0x7f0000000600)="601a4fd7bd78b1004b65a1f6bb95d0fa24626102bf38b1218c40d7e4557905f0da94bfe0b71c73529a52a112c04bb68df127a1336192394e79ab0998dc6513752261faf2e86ca7ab0341db5c0eb1c0b9bcf1bbbe8b333556f935b9f05f845e1c7c7b61bfbdb133d9611fe6a2334b61f94c7626", 0x73}, {&(0x7f0000000680)="216e05100dbdece6f93d20e1c414001e3a77b6b21caf45872b694862286dbb10a529efe36c0ede3563745d67553a409506f3d2c9d552ad263e0c4c3c1867d30f87951d27f55cadb192e9453ded8bcc12af66281141208b3566bfaafc2820419e97ce8b743cf859c377f0172112ccd8766c66e240fe76524cdc1be9bb4962c59085f5d7c71ee0991d9d05f4337e995ee9344d37e0", 0x94}], 0x5}, 0x4044)
sendto$inet(r0, &(0x7f00000002c0)="ab", 0x34000, 0x0, &(0x7f0000000300)={0x2, 0x4e22, @local}, 0x10)

4.442813986s ago: executing program 4 (id=7009):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
pread64(r1, 0x0, 0x0, 0x80000000000000)
sendmsg$nl_route(r0, &(0x7f00000193c0)={0x0, 0x0, &(0x7f0000019400)={&(0x7f0000019440)=ANY=[@ANYBLOB="1c0000001a00010028bd7000fcdbdf250a808000a6"], 0x1c}}, 0x20000050)
syz_usb_connect(0x0, 0x62, &(0x7f0000019480)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000019500)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000018f000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00002ec000/0x4000)=nil, 0x0}, 0x68)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={&(0x7f0000019600)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000019640)={0x0, 0x0, &(0x7f0000019680)={&(0x7f00000196c0)=ANY=[@ANYBLOB="280000001000010025bd619cf9dbdf2500050000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000019700)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000019900)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$fuse(0x0, &(0x7f0000019940)='./file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000019980)='\x00', 0x89901)
open_tree(0xffffffffffffff9c, &(0x7f00000199c0)='./file0\x00', 0x81101)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000019740)=0x9, 0x8, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000019800)='./file0\x00', &(0x7f0000019a00), 0x800)
timer_create(0x0, &(0x7f0000019780)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000197c0))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ppoll(&(0x7f0000019840)=[{r1}, {r1, 0x80}, {0xffffffffffffffff, 0x9}, {r1, 0x2441}, {r3, 0x80}], 0x5, &(0x7f0000019880)={0x77359400}, &(0x7f00000198c0)={[0x8]}, 0x8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x70}}, 0x0)

4.271351513s ago: executing program 5 (id=7010):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xacd6a4e1331c8c5c, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x306)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r1, 0x80010)
mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x2, &(0x7f0000005000/0x4000)=nil)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1800, 0x0)
write$sndseq(r2, &(0x7f0000001240)=[{0x4, 0x10, 0x81, 0x8, @time={0x5, 0x34a}, {0x6, 0x8}, {0xf7, 0x9}, @time=@tick=0x2}, {0xd, 0xed, 0x3, 0x1, @time={0x3b}, {0x4, 0x6}, {0x8, 0x9}, @result={0x2, 0xd}}, {0x8, 0x9, 0xa, 0x9, @tick=0x8, {0x7, 0x7}, {0x2a, 0x80}, @addr={0x7, 0x8}}, {0xfc, 0x7, 0x2, 0x8, @tick=0x7, {0x4, 0x8}, {0x4, 0x5}, @control={0x0, 0x8ba, 0x4}}], 0x70)
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000080)=""/198, 0xc6}], 0x1, 0x7, 0x9)
r3 = msgget$private(0x0, 0x0)
msgsnd(r3, &(0x7f0000000180)=ANY=[], 0x8, 0x0)
msgsnd(r3, &(0x7f00000001c0)=ANY=[], 0x401, 0x0)
msgrcv(r3, 0x0, 0x0, 0x969edffe39095fd4, 0x3800)

3.456364152s ago: executing program 3 (id=7011):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5401000010000100feffffff0001000020010000000000000000000000000000fc01000000000107144e230005020000003c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000001000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000050000000000000000000000000000001f00000000000000feffffffffffffff0200000002000000070000002abd7000043500000a0001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004"], 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000440)={{0xfffe, 0x5, 0x0, 0x25}, 'syz0\x00', 0x43})
pselect6(0x40, &(0x7f0000000080)={0x1, 0x9, 0x100, 0x8, 0x4, 0x1, 0xaa, 0x9}, 0x0, &(0x7f0000000180)={0x9, 0x8000000000000001, 0x8, 0x3, 0x5, 0x9, 0x9, 0x1000}, 0x0, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12)
ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x7)
ioctl$UI_DEV_CREATE(r1, 0x5501)

2.611558168s ago: executing program 1 (id=7012):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}}, {{}, {0x95, 0x0, 0x0, 0xfeff}}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.140244158s ago: executing program 3 (id=7013):
socket$kcm(0x11, 0x2, 0x300)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr', 0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7001})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6375fd82}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1a26c00, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0)
close(r8)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000740)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', <r9=>0x0})
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_ACT={0x5c, 0x3, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x10, 0x3, '/de\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x7, 0x8, 0x8, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000940), 0x56)
sendmsg$kcm(r7, &(0x7f0000000980)={&(0x7f00000009c0)=@xdp={0x2c, 0x0, r9, 0x21, 0xf1ff}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000ac0)="9942d6af00007f8f", 0x8}], 0x2}, 0x0)
sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b788f8a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}], 0x2, 0x2090)
sendto(r0, &(0x7f00000005c0)="8d13", 0x2, 0x4000041, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4)

1.066756601s ago: executing program 5 (id=7014):
r0 = syz_ublk_setup_io_uring(0x18, &(0x7f0000000040)={0x0, 0x98c1, 0x0, 0x3, 0x262}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x40000, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd910, 0x8200, 0x2, 0x363}}], 0x1, 0x0, 0x0)
r7 = syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x1e9202)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r8, &(0x7f0000000640), 0xe09)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000680)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000fffffff0000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}})

596.887798ms ago: executing program 5 (id=7015):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
r0 = syz_open_dev$dvb_demux(&(0x7f0000000040), 0xcd79, 0x141000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000080)={0x2, 0x0, 0x1, 0x7, 0x4})
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x2, 0x1, 0x3, 0x4, 0x4})
ioctl$DVB_DEMUX_DMX_STOP(r0, 0x6f2a)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8005d})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r1, 0x6, 0xd, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f0000000140)=""/222, &(0x7f0000000240)=0x88fe)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000068a000000000000040000001801000020696c2500000000002020207b1ad8ff000000007ba1000000000000070100000400ffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000a40)='GPL\x00', 0x8, 0xffa, &(0x7f0000000a80)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000800)={&(0x7f0000000840)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000880)=0x800, 0x4)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000008c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001a80)={'dummy0\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000001ac0)=0x4000, 0x4)
bind$xdp(r3, &(0x7f0000001b00)={0x2c, 0x0, r5}, 0x10)
sendmsg$nl_route_sched_retired(r2, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000002c0)=@deltclass={0x4c0, 0x29, 0x800, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xfff2, 0x5}, {0x2, 0xffff}, {0xa, 0xb}}, [@c_cbq={{0x8}, {0x438, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x80, 0x5, 0x5, 0x40, 0x8, 0x10000, 0x1, 0x9, 0x4a4e, 0x4, 0x419a88d8, 0x9, 0x492, 0x8, 0x6, 0x0, 0x1, 0x1, 0x101, 0x400, 0x8000, 0xffff, 0x3, 0x200, 0x4a8, 0x4, 0x80, 0xfff, 0x9, 0x10000, 0x2, 0x3ff, 0x2, 0x4, 0x2, 0x1d6, 0x6, 0x1000, 0x42c8, 0x3, 0x4, 0x6, 0x6, 0x9, 0x7, 0x7, 0x5, 0x4, 0x6, 0xa, 0xc, 0x1, 0x7, 0x9, 0xa, 0x18000000, 0x81, 0xe92, 0x0, 0x8000, 0x1, 0xf3c7, 0x8, 0xfffff9d3, 0xb924, 0x4, 0x8, 0x8000, 0x4, 0x7, 0xfffffffd, 0x7, 0x3, 0x7, 0xfffffff8, 0x9, 0xffffffa9, 0x6, 0xe, 0x1, 0x80000001, 0x3, 0xc82, 0x8, 0x4, 0xfffffffe, 0x400, 0x2, 0x2, 0x7, 0xfb6, 0x2, 0xad, 0x2, 0x7, 0x1, 0x6, 0x101, 0x40, 0x6, 0x401, 0x0, 0xd, 0x2, 0x8, 0x6, 0x91, 0x1240, 0x8530, 0xf, 0x4, 0x0, 0x2, 0x0, 0x4, 0x400, 0xfff, 0x400, 0x9, 0x7, 0x10000, 0x5, 0x4, 0x4, 0x2, 0x6, 0x81, 0x1, 0x1, 0x2, 0x3, 0x7, 0x8, 0x400, 0x200, 0xc230, 0x9, 0x9, 0xff, 0xfffffff4, 0x400, 0x100, 0xb, 0x1, 0x76, 0x100, 0x1, 0x8, 0xe, 0x4, 0x7, 0x81, 0x3d68, 0x0, 0x9, 0x0, 0x7, 0x3, 0x4, 0x5, 0x6, 0x6, 0x8, 0x7, 0x2, 0x7, 0x3, 0x2, 0x7, 0xa, 0xbed5, 0x81, 0xf4, 0x0, 0x1, 0x81, 0x5, 0x6, 0x4, 0x7663, 0x0, 0x400, 0x1ff, 0x4, 0xb, 0x80000001, 0x0, 0x3, 0x3, 0x9, 0x8, 0x4, 0x0, 0x4, 0x7fff, 0xa, 0x8, 0x1, 0x8, 0x2, 0x8, 0x1, 0x9c89, 0xfffffff8, 0x0, 0x5, 0xfffffff8, 0x8, 0x1, 0x80000000, 0x8, 0x62f7, 0xafa2, 0xfffffff7, 0x9, 0xfff, 0x3ff, 0x4, 0x0, 0xfff, 0x3, 0xfffffe00, 0x8, 0x2, 0xc5ba, 0x9, 0x80000000, 0x5, 0xffffffff, 0x8, 0x400, 0x4, 0x9, 0xfffffff4, 0xbe, 0x2ac5, 0x2, 0xe7a2, 0x4, 0xffffffff, 0x100, 0x5, 0xf5, 0x1, 0x7, 0x0, 0x3, 0x200, 0xc, 0x7, 0x2, 0x200, 0x2, 0x6, 0x9, 0x6]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x2, 0x0, 0x40, 0x0, 0x5, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x1, 0x3, 0x375, 0x7, 0x5}}, @TCA_CBQ_RATE={0x10, 0x5, {0x48, 0x0, 0xb20, 0xa, 0x27, 0xd2}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x3}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5}}}, @c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xe}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xb, 0x10}}, @TCA_ATM_FD={0x8, 0x1, r1}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x400c4}, 0x44012)

560.518361ms ago: executing program 4 (id=7016):
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="96ed69887bb92318eee29acbb5269fd1af7c3949a59f93d716fe8b0fd708c721582d329e1b2b2c6bff697f909721c5856c38194e42333bef610fbbd9d6c974f99305f31fb9619f40589d75150233939e08c59876972ed68b59e5c5c5eaa9741e5bd4b7d4f5d6d2cc8c5c2e901c8017f3d2d0b183b0b2e91fd8764873064b98371e818be5ca92bb9bd82981add20c3a82", 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xf6b4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4048050)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYRES64=r0], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xfffffffffffffd7e, &(0x7f0000000280)=@string={0x3c, 0x3, "eb3311d5281281db00ae8b45fec408c092e1ea746ff55b92313dbbda1150834562fc9eeea960ef65cfb914596ce97394f801b71cab3b97e0e5acb44aa5d08b5968675f770e657148b4d70c47bd8af71a68c1b8895b7b6439f32d056b52313d2bd4aee8e0ab9a7cd309c595fa3396e51ec95ad9646c06fa2a0d49c6558cad0fdd452c8af655788d7e7f171e60eafe37ca02779c97ee406b72d7a09fdfe1fdf46356fb6061b959568f82ea3b3a20d4a022aa38cb97ec7012c83cd30e6e5ca7d4055437d1fdd0f6d3bd50008394adc3e455e8b6325d39ee585c4ee90214cd479842869685c9ae4336c0dedc3454e6b32230e9c3574a437f31b42d6354ea7aeee0f4"}}]})

481.422792ms ago: executing program 1 (id=7017):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmmsg$sock(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000840)="0100000003000000640000000000008000000000000000000000000000000000000000000000000020a1070000000000feffff7f010000000200000001000015b600000000000000", 0x48}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="0100000003000000640000f9ffffffffffffff00000000000000000000000000000000feffffffffffff7f000000000002", 0x31}], 0x1}}], 0x2, 0x20004090)

270.715287ms ago: executing program 1 (id=7018):
r0 = socket$inet6(0xa, 0x3, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f00000000c0)={{{@in=@private=0xa010102, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x40c, 0x0, 0xfffd, 0x0, 0x80, 0x20}, {0x1, 0x0, 0x4, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0x0, 0x0, 0x0, 0x3, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xe}, 0x400000, 0x6c}, 0x2, @in6=@mcast2, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93, 0x4000}}, 0xe8)

176.849625ms ago: executing program 3 (id=7019):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="9400000010000104000000000b9bdd51eb5d4f91", @ANYRES32=0x0, @ANYBLOB="80420000440001005c00128009000100626f6e64000000004c00028005000100050000000800030007000000080004000a000000080009000300000005001d00090000000500150001f30000050010008000000005001b00df000000080007000200000008003a00", @ANYBLOB="f8ff07"], 0x94}}, 0x0)

595.697µs ago: executing program 1 (id=7020):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x28100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000400)={0xa3, 0x0, 0xfffffffffffffffe})
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f0000000700)={0xb, 0x0, [{0x80000008, 0x2, 0x2, 0x5, 0x7, 0xfff, 0x3aa}, {0x2, 0x0, 0x6, 0x82e8, 0x200, 0x3, 0x6}, {0x7, 0xc, 0x5, 0x2, 0x0, 0x3, 0x1}, {0x80000019, 0x6, 0x3, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0xc9a9, 0x40000104, 0x5, 0x10000}, {0xd, 0x80000001, 0x3, 0x7c, 0x101, 0x39e, 0x2}, {0xb, 0x4, 0x1, 0x8, 0x807, 0x3, 0x2}, {0xb, 0x679, 0x5, 0x0, 0xf1, 0x0, 0x6}, {0x7, 0xe6, 0x0, 0x18000000, 0x82e, 0x7, 0xe}, {0x3, 0x8, 0x1, 0xa, 0x9, 0xd0b, 0xd9}, {0xa, 0x9, 0x1, 0x6, 0xd, 0xa991, 0x81}]})

0s ago: executing program 6 (id=7021):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x80001, 0x0)
write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB=' \t'], 0x33)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000040000000030a05000000000000000000050000000900010073797a3000000000b5ff030073797a30000000001400048008000140000000ec74bb459568a8640b6c000000060a010400000000000000000500000008000b400000000044000480240001800b00010072656a656374000014000280080001400000000005000200810000001c0001800a00010071756575650000000c00028006000140000e00000900010073797a30000000eb130000001100010000000000000000000000000a"], 0xf4}}, 0x0)
close(r0) (async)
close(r0)

kernel console output (not intermixed with test programs):

093323][T15109] usb usb4-port1: unable to enumerate USB device
[ 1596.115999][T28369] loop5: detected capacity change from 0 to 7
[ 1596.116954][T28369] Dev loop5: unable to read RDB block 7
[ 1596.116983][T28369]  loop5: unable to read partition table
[ 1596.117110][T28369] loop5: partition table beyond EOD, truncated
[ 1596.117121][T28369] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[ 1596.229235][T28373] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1596.257045][T28361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6653'.
[ 1596.405297][   T29] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1596.551913][   T29] usb 5-1: Using ep0 maxpacket: 32
[ 1596.552645][   T29] usb 5-1: New USB device found: idVendor=0545, idProduct=800d, bcdDevice=3.0a
[ 1596.554679][   T29] usb 5-1: config 7 has an invalid interface number: 160 but max is 0
[ 1596.554706][   T29] usb 5-1: config 7 has no interface number 0
[ 1596.554741][   T29] usb 5-1: config 7 interface 160 has no altsetting 0
[ 1596.559127][   T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.559147][   T29] usb 5-1: Product: syz
[ 1596.559157][   T29] usb 5-1: Manufacturer: syz
[ 1596.559166][   T29] usb 5-1: SerialNumber: syz
[ 1596.932904][T15109] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1596.956449][T28386] kvm: pic: non byte write
[ 1596.996106][   T29] usb 5-1: USB disconnect, device number 51
[ 1597.082611][T15109] usb 6-1: Using ep0 maxpacket: 16
[ 1597.083388][T15109] usb 6-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[ 1597.084586][T15109] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1597.084639][T15109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1597.089187][T15109] usb 6-1: config 0 descriptor??
[ 1597.114871][T15109] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input110
[ 1597.355312][ T4985] bcm5974 6-1:0.0: could not read from device
[ 1597.362571][ T4985] bcm5974 6-1:0.0: could not read from device
[ 1597.369201][T28395] loop4: detected capacity change from 0 to 7
[ 1597.372192][T28395]  loop4:
[ 1597.372220][T28395] loop4: partition table partially beyond EOD, truncated
[ 1597.372665][T15109] usb 6-1: USB disconnect, device number 46
[ 1597.890483][T28404] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6665'.
[ 1597.932165][T15109] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1598.006580][T28404] bond1: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[ 1598.015501][T28404] bond1 (unregistering): Released all slaves
[ 1598.091469][T15197] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1598.108619][T15109] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1598.125420][T15109] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1598.149432][T15109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1598.149454][T15109] usb 2-1: Product: syz
[ 1598.149464][T15109] usb 2-1: Manufacturer: syz
[ 1598.244298][T15109] usb 2-1: selecting invalid altsetting 1
[ 1598.244403][T15109] dvb_ttusb_budget: ttusb_init_controller: error
[ 1598.244411][T15109] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1598.293080][T15197] usb 4-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1598.296710][T15197] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1598.331701][T15197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1598.331736][T15197] usb 4-1: Product: syz
[ 1598.331752][T15197] usb 4-1: Manufacturer: syz
[ 1598.436044][T15197] usb 4-1: selecting invalid altsetting 1
[ 1598.436155][T15197] dvb_ttusb_budget: ttusb_init_controller: error
[ 1598.460868][T15197] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1598.474404][T22808] hid-generic 0000:0000:0000.0040: unknown main item tag 0x0
[ 1598.499981][T22808] hid-generic 0000:0000:0000.0040: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1598.869775][T15109] DVB: Unable to find symbol cx22700_attach()
[ 1598.904674][T15197] DVB: Unable to find symbol cx22700_attach()
[ 1599.163189][T15109] DVB: Unable to find symbol tda10046_attach()
[ 1599.163204][T15109] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1599.196581][T15109] usb 2-1: USB disconnect, device number 66
[ 1599.252895][T15197] DVB: Unable to find symbol tda10046_attach()
[ 1599.252911][T15197] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1599.321834][T15197] usb 4-1: USB disconnect, device number 51
[ 1600.007134][T28430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1600.205311][T28431] kvm: pic: non byte write
[ 1600.524570][T28438] loop4: detected capacity change from 0 to 7
[ 1600.532260][T28438]  loop4:
[ 1600.532293][T28438] loop4: partition table partially beyond EOD, truncated
[ 1600.655506][T28444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1600.655980][T28444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1600.893153][   T29] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[ 1600.901973][T22808] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1601.043454][   T29] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1601.044812][   T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1601.049228][   T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1601.049249][   T29] usb 2-1: Product: syz
[ 1601.049259][   T29] usb 2-1: Manufacturer: syz
[ 1601.052279][T22808] usb 4-1: Using ep0 maxpacket: 16
[ 1601.053124][T22808] usb 4-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[ 1601.055008][T22808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1601.055058][T22808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1601.068118][T22808] usb 4-1: config 0 descriptor??
[ 1601.138199][   T29] usb 2-1: selecting invalid altsetting 1
[ 1601.138311][   T29] dvb_ttusb_budget: ttusb_init_controller: error
[ 1601.138320][   T29] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1601.139561][T22808] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input111
[ 1601.379309][ T4985] bcm5974 4-1:0.0: could not read from device
[ 1601.414529][ T4985] bcm5974 4-1:0.0: could not read from device
[ 1601.438053][T22808] usb 4-1: USB disconnect, device number 52
[ 1601.475607][   T29] DVB: Unable to find symbol cx22700_attach()
[ 1601.659132][   T29] DVB: Unable to find symbol tda10046_attach()
[ 1601.659147][   T29] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1601.675746][   T29] usb 2-1: USB disconnect, device number 67
[ 1601.870972][T28466] netlink: 92 bytes leftover after parsing attributes in process `syz.1.6683'.
[ 1602.051194][T28470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6686'.
[ 1602.051220][T28470] netlink: 400 bytes leftover after parsing attributes in process `syz.4.6686'.
[ 1602.314339][T28481] kvm: pic: non byte write
[ 1602.429262][T28486] loop4: detected capacity change from 0 to 7
[ 1602.439674][T28486]  loop4:
[ 1602.439703][T28486] loop4: partition table partially beyond EOD, truncated
[ 1602.512907][T28480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6686'.
[ 1602.512943][T28480] netlink: 400 bytes leftover after parsing attributes in process `syz.4.6686'.
[ 1602.822543][T28500] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1602.870092][T28499] bond7: (slave bond_slave_1): Device is not our slave
[ 1602.870119][T28499] bond7: option active_slave: invalid value (bond_slave_1)
[ 1602.948889][T28499] bond7 (unregistering): Released all slaves
[ 1603.491816][T15192] usb 7-1: new high-speed USB device number 50 using dummy_hcd
[ 1603.656189][T28521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6699'.
[ 1603.672668][T15192] usb 7-1: Using ep0 maxpacket: 16
[ 1603.673770][T15192] usb 7-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[ 1603.691236][T15192] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1603.691306][T15192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1603.719555][T15192] usb 7-1: config 0 descriptor??
[ 1603.743717][T15192] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input112
[ 1603.862629][T15197] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1603.991534][T15197] usb 4-1: device descriptor read/64, error -71
[ 1604.037520][T15109] usb 7-1: USB disconnect, device number 50
[ 1604.038815][ T4985] bcm5974 7-1:0.0: could not read from device
[ 1604.060394][ T4985] bcm5974 7-1:0.0: could not read from device
[ 1604.079077][T24775] bcm5974 7-1:0.0: could not read from device
[ 1604.109253][ T4985] bcm5974 7-1:0.0: could not read from device
[ 1604.242990][T15197] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1604.371544][T15197] usb 4-1: device descriptor read/64, error -71
[ 1604.482770][T15197] usb usb4-port1: attempt power cycle
[ 1604.773440][T28532] kvm: pic: non byte write
[ 1604.835965][T28534] syzkaller0: entered promiscuous mode
[ 1604.835983][T28534] syzkaller0: entered allmulticast mode
[ 1604.854420][T15197] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1604.873170][T15197] usb 4-1: device descriptor read/8, error -71
[ 1605.177328][T15197] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1605.238524][T15197] usb 4-1: device descriptor read/8, error -71
[ 1605.341826][T15197] usb usb4-port1: unable to enumerate USB device
[ 1606.622195][T15109] usb 7-1: new high-speed USB device number 51 using dummy_hcd
[ 1606.772397][T15109] usb 7-1: Using ep0 maxpacket: 32
[ 1606.776333][T15109] usb 7-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1606.778835][T15109] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[ 1606.778881][T15109] usb 7-1: config 0 has no interface number 0
[ 1606.788213][T15109] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1606.788244][T15109] usb 7-1: Product: syz
[ 1606.788258][T15109] usb 7-1: Manufacturer: syz
[ 1606.788272][T15109] usb 7-1: SerialNumber: syz
[ 1606.857495][T15109] usb 7-1: config 0 descriptor??
[ 1606.907552][T15109] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1606.907574][T15109] usb 7-1: selecting invalid altsetting 1
[ 1606.907584][T15109] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1606.932531][T15109] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1606.932883][T15109] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1606.932928][T15109] usb 7-1: media controller created
[ 1607.029759][T28558] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1607.067062][T15109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1608.452627][T15109] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1608.452692][T15109] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1608.661966][T24806] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1608.811858][T24806] usb 4-1: Using ep0 maxpacket: 16
[ 1608.812655][T24806] usb 4-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[ 1608.813833][T24806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1608.813883][T24806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1608.862388][T24806] usb 4-1: config 0 descriptor??
[ 1608.896616][T24806] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input113
[ 1608.980307][T28583] FAULT_INJECTION: forcing a failure.
[ 1608.980307][T28583] name failslab, interval 1, probability 0, space 0, times 0
[ 1608.980335][T28583] CPU: 0 UID: 0 PID: 28583 Comm: syz.5.6714 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1608.980383][T28583] Tainted: [L]=SOFTLOCKUP
[ 1608.980391][T28583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1608.980405][T28583] Call Trace:
[ 1608.980414][T28583]  <TASK>
[ 1608.980424][T28583]  dump_stack_lvl+0xe8/0x150
[ 1608.980461][T28583]  should_fail_ex+0x410/0x560
[ 1608.980483][T28583]  should_failslab+0xa8/0x100
[ 1608.980503][T28583]  __kmalloc_noprof+0xf9/0x710
[ 1608.980521][T28583]  ? rcu_is_watching+0x16/0xb0
[ 1608.980566][T28583]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1608.980591][T28583]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1608.980619][T28583]  tomoyo_realpath_from_path+0xef/0x640
[ 1608.980641][T28583]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1608.980654][T28583]  tomoyo_path_number_perm+0x246/0x5f0
[ 1608.980673][T28583]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1608.980692][T28583]  ? __lock_acquire+0x747/0x2de0
[ 1608.980758][T28583]  ? __fget_files+0x2a/0x420
[ 1608.980785][T28583]  ? __fget_files+0x2a/0x420
[ 1608.980808][T28583]  ? __fget_files+0x2a/0x420
[ 1608.980835][T28583]  security_file_ioctl+0xc3/0x2a0
[ 1608.980870][T28583]  __se_sys_ioctl+0x47/0x170
[ 1608.980909][T28583]  do_syscall_64+0x166/0x520
[ 1608.980933][T28583]  ? trace_irq_disable+0x3b/0x140
[ 1608.980962][T28583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1608.980985][T28583]  ? clear_bhb_loop+0x70/0xc0
[ 1608.981011][T28583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1608.981033][T28583] RIP: 0033:0x7f095599f559
[ 1608.981055][T28583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1608.981074][T28583] RSP: 002b:00007f09567ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1608.981099][T28583] RAX: ffffffffffffffda RBX: 00007f0955c26090 RCX: 00007f095599f559
[ 1608.981116][T28583] RDX: 0000000000000000 RSI: 00000000405c5503 RDI: 0000000000000003
[ 1608.981130][T28583] RBP: 00007f09567ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1608.981143][T28583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1608.981157][T28583] R13: 00007f0955c26128 R14: 00007f0955c26090 R15: 00007f0955d4fa48
[ 1608.981192][T28583]  </TASK>
[ 1609.257496][T28583] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1609.273083][ T4985] bcm5974 4-1:0.0: could not read from device
[ 1609.279396][T28582] input: syz0 as /devices/virtual/input/input114
[ 1609.296855][ T4985] bcm5974 4-1:0.0: could not read from device
[ 1609.337939][ T4985] bcm5974 4-1:0.0: could not read from device
[ 1609.388007][ T4985] bcm5974 4-1:0.0: could not read from device
[ 1609.409439][T24806] usb 4-1: USB disconnect, device number 57
[ 1609.613472][T15109] usb 7-1: USB disconnect, device number 51
[ 1610.021625][T28588] netlink: 'syz.3.6717': attribute type 1 has an invalid length.
[ 1610.099424][T28588] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1610.178178][T28594] netlink: 'syz.5.6718': attribute type 1 has an invalid length.
[ 1610.178205][T28594] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6718'.
[ 1610.230766][T28590] bond2: (slave erspan1): making interface the new active one
[ 1610.246379][T28590] bond2: (slave erspan1): Enslaving as an active interface with an up link
[ 1610.287875][T28598] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6719'.
[ 1610.544223][T15109] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1610.570034][T28607] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1610.642001][T24806] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1610.703601][T15109] usb 5-1: New USB device found: idVendor=05ac, idProduct=0238, bcdDevice=0.00
[ 1610.706651][T15109] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1610.706702][T15109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1610.743351][T15192] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1610.749248][T15109] usb 5-1: config 0 descriptor??
[ 1610.833889][T24806] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1610.833957][T24806] usb 4-1: New USB device found: idVendor=12d1, idProduct=1c23, bcdDevice=45.f1
[ 1610.835543][T24806] usb 4-1: config 74 has an invalid interface number: 116 but max is 0
[ 1610.835571][T24806] usb 4-1: config 74 has no interface number 0
[ 1610.835613][T24806] usb 4-1: config 74 interface 116 has no altsetting 0
[ 1610.840419][T24806] usb 4-1: Dual-Role OTG device on HNP port
[ 1610.840779][T24806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1610.840803][T24806] usb 4-1: Product: syz
[ 1610.840817][T24806] usb 4-1: Manufacturer: ≴䶵⺟ꀯ빲ꀢ䩖枖躹푤鈊켨㮀ԟ勬頊ૈ᾵怳ｨ䨥袤뮁叶抑聳ᔼ㶑鲠댷㱁╹诟烋껈ꆞፆٛ⭪ꗺᬲ䛊㘺婭ᕹ◲珫泭燽梳顯蹈首ﹹ儧⸙槃鄟Ҥ勤朞農䑰洪僕擺୥鵶鏡鲣ｦꃃᛦ컙뻽죀ꄸ犋ꆖ介팣멲ଡ଼懄⎚잦틛敵ᑛ椞텋ﺠ鑔꫚♚롆휺䄟陛ᔡ햨᧏﹨૥얺鞔♊
[ 1610.840850][T24806] usb 4-1: SerialNumber: syz
[ 1610.954704][T15192] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1610.965402][T15192] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1610.973475][T15192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1610.973503][T15192] usb 6-1: Product: syz
[ 1610.973517][T15192] usb 6-1: Manufacturer: syz
[ 1611.036587][T15192] usb 6-1: selecting invalid altsetting 1
[ 1611.036755][T15192] dvb_ttusb_budget: ttusb_init_controller: error
[ 1611.036770][T15192] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1611.181192][T15192] DVB: Unable to find symbol cx22700_attach()
[ 1611.195740][T24806] rndis_host 4-1:74.116: skipping garbage
[ 1611.195768][T24806] rndis_host 4-1:74.116: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1611.198915][T24806] option 4-1:74.116: GSM modem (1-port) converter detected
[ 1611.247263][T24806] usb 4-1: USB disconnect, device number 58
[ 1611.265764][T24806] option 4-1:74.116: device disconnected
[ 1611.387378][T15192] DVB: Unable to find symbol tda10046_attach()
[ 1611.387392][T15192] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1611.419643][T15192] usb 6-1: USB disconnect, device number 47
[ 1611.537975][T28620] netlink: 'syz.1.6725': attribute type 1 has an invalid length.
[ 1611.537994][T28620] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6725'.
[ 1612.013109][T15192] usb 7-1: new high-speed USB device number 52 using dummy_hcd
[ 1612.171537][T15192] usb 7-1: Using ep0 maxpacket: 16
[ 1612.172306][T15192] usb 7-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[ 1612.173456][T15192] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1612.173491][T15192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.224625][T15192] usb 7-1: config 0 descriptor??
[ 1612.262776][T15192] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input116
[ 1612.517362][ T4985] bcm5974 7-1:0.0: could not read from device
[ 1612.518114][T24806] usb 7-1: USB disconnect, device number 52
[ 1612.526240][T28637] bcm5974 7-1:0.0: could not read from device
[ 1612.551190][ T4985] bcm5974 7-1:0.0: could not read from device
[ 1613.255456][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1613.255498][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1613.517261][T15109] usb 5-1: USB disconnect, device number 52
[ 1615.178940][T28674] usb usb7: usbfs: process 28674 (syz.3.6739) did not claim interface 0 before use
[ 1615.386422][T28674] veth1_macvtap: left promiscuous mode
[ 1615.386457][T28674] macsec0: entered allmulticast mode
[ 1615.445630][T24806] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1615.614341][T24806] usb 5-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1615.621115][T24806] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1615.656331][T24806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1615.656353][T24806] usb 5-1: Product: syz
[ 1615.656363][T24806] usb 5-1: Manufacturer: syz
[ 1615.763482][T24806] usb 5-1: selecting invalid altsetting 1
[ 1615.763584][T24806] dvb_ttusb_budget: ttusb_init_controller: error
[ 1615.763593][T24806] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1615.804593][T28676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6741'.
[ 1615.965384][T28676] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[ 1615.988830][T28676] bond3 (unregistering): Released all slaves
[ 1616.185693][T24806] DVB: Unable to find symbol cx22700_attach()
[ 1616.405439][T24806] DVB: Unable to find symbol tda10046_attach()
[ 1616.405455][T24806] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1616.421480][T15192] usb 7-1: new full-speed USB device number 53 using dummy_hcd
[ 1616.437278][T24806] usb 5-1: USB disconnect, device number 53
[ 1616.582352][T15192] usb 7-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00
[ 1616.583605][T15192] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1616.583640][T15192] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1616.583680][T15192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1616.847770][T15192] aiptek 7-1:17.0: Aiptek using 400 ms programming speed
[ 1616.849137][T15192] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input117
[ 1616.893846][T15197] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[ 1616.950353][T15192] input: failed to attach handler kbd to device input117, error: -5
[ 1617.024343][T15192] usb 7-1: USB disconnect, device number 53
[ 1617.062523][T15197] usb 2-1: Using ep0 maxpacket: 16
[ 1617.064670][T15197] usb 2-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[ 1617.082651][T15197] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1617.082717][T15197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1617.132814][T15197] usb 2-1: config 0 descriptor??
[ 1617.174823][T15197] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input118
[ 1617.460060][ T4985] bcm5974 2-1:0.0: could not read from device
[ 1617.488384][ T4985] bcm5974 2-1:0.0: could not read from device
[ 1617.507563][T28688] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1617.538421][ T4985] bcm5974 2-1:0.0: could not read from device
[ 1617.549639][T15197] usb 2-1: USB disconnect, device number 68
[ 1618.040573][T28693] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6744'.
[ 1618.091932][   T29] usb 7-1: new high-speed USB device number 54 using dummy_hcd
[ 1618.243515][   T29] usb 7-1: New USB device found: idVendor=054c, idProduct=0268, bcdDevice=0.00
[ 1618.243546][   T29] usb 7-1: too many configurations: 107, using maximum allowed: 8
[ 1618.248249][   T29] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1618.248286][   T29] usb 7-1: can't read configurations, error -61
[ 1618.374097][   T29] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[ 1618.527789][   T29] usb 7-1: New USB device found: idVendor=054c, idProduct=0268, bcdDevice=0.00
[ 1618.527820][   T29] usb 7-1: too many configurations: 107, using maximum allowed: 8
[ 1618.529603][   T29] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1618.529629][   T29] usb 7-1: can't read configurations, error -61
[ 1618.529969][   T29] usb usb7-port1: attempt power cycle
[ 1618.902017][   T29] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[ 1618.929950][   T29] usb 7-1: New USB device found: idVendor=054c, idProduct=0268, bcdDevice=0.00
[ 1618.929984][   T29] usb 7-1: too many configurations: 107, using maximum allowed: 8
[ 1618.963368][   T29] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1618.963402][   T29] usb 7-1: can't read configurations, error -61
[ 1619.092021][   T29] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[ 1619.097519][T28710] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1619.146927][   T29] usb 7-1: New USB device found: idVendor=054c, idProduct=0268, bcdDevice=0.00
[ 1619.146959][   T29] usb 7-1: too many configurations: 107, using maximum allowed: 8
[ 1619.150215][   T29] usb 7-1: unable to read config index 0 descriptor/start: -61
[ 1619.150259][   T29] usb 7-1: can't read configurations, error -61
[ 1619.150569][   T29] usb usb7-port1: unable to enumerate USB device
[ 1620.042120][T15109] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1620.193579][T15109] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1620.200442][T15109] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1620.246734][T15109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1620.246766][T15109] usb 6-1: Product: syz
[ 1620.246779][T15109] usb 6-1: Manufacturer: syz
[ 1620.296103][T15109] usb 6-1: selecting invalid altsetting 1
[ 1620.299384][T15109] dvb_ttusb_budget: ttusb_init_controller: error
[ 1620.299406][T15109] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1620.678682][T15109] DVB: Unable to find symbol cx22700_attach()
[ 1620.989186][T15109] DVB: Unable to find symbol tda10046_attach()
[ 1620.989201][T15109] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1621.025351][T15109] usb 6-1: USB disconnect, device number 48
[ 1621.813515][T28742] netlink: 'syz.5.6761': attribute type 1 has an invalid length.
[ 1621.956900][T28742] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1622.002386][T15109] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[ 1622.103726][T28744] bond1: (slave erspan1): making interface the new active one
[ 1622.105342][T28744] bond1: (slave erspan1): Enslaving as an active interface with an up link
[ 1622.151956][T15109] usb 7-1: Using ep0 maxpacket: 16
[ 1622.152774][T15109] usb 7-1: New USB device found: idVendor=05ac, idProduct=0244, bcdDevice=0.00
[ 1622.159058][T15109] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1622.159098][T15109] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1622.161023][T15109] usb 7-1: config 0 descriptor??
[ 1622.228201][T15109] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input119
[ 1622.633785][ T4985] bcm5974 7-1:0.0: could not read from device
[ 1622.694198][ T4985] bcm5974 7-1:0.0: could not read from device
[ 1622.713791][T15109] usb 7-1: USB disconnect, device number 58
[ 1623.934441][T28774] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1624.759786][T28784] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.6769'.
[ 1624.759811][T28784] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1624.788938][T28784] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6769'.
[ 1624.788968][T28784] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6769'.
[ 1624.788984][T28784] netlink: 'syz.4.6769': attribute type 3 has an invalid length.
[ 1624.788998][T28784] netlink: 11 bytes leftover after parsing attributes in process `syz.4.6769'.
[ 1625.102217][T15199] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1625.264780][T15199] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1625.288187][T15199] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1625.316408][T15199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1625.316430][T15199] usb 6-1: Product: syz
[ 1625.316440][T15199] usb 6-1: Manufacturer: syz
[ 1625.407889][T15199] usb 6-1: selecting invalid altsetting 1
[ 1625.407996][T15199] dvb_ttusb_budget: ttusb_init_controller: error
[ 1625.408005][T15199] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1625.637813][T28796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6773'.
[ 1625.637833][T28796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6773'.
[ 1625.637928][T28796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6773'.
[ 1625.637937][T28796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6773'.
[ 1625.638017][T28796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6773'.
[ 1625.638026][T28796] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6773'.
[ 1625.984899][T15199] DVB: Unable to find symbol cx22700_attach()
[ 1626.217869][T15199] DVB: Unable to find symbol tda10046_attach()
[ 1626.217885][T15199] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1626.265052][T15199] usb 6-1: USB disconnect, device number 49
[ 1626.313157][T15192] usb 7-1: new full-speed USB device number 59 using dummy_hcd
[ 1626.483079][T15192] usb 7-1: New USB device found: idVendor=05ac, idProduct=024e, bcdDevice=20.a5
[ 1626.485969][T15192] usb 7-1: config index 0 descriptor too short (expected 65530, got 18)
[ 1626.486003][T15192] usb 7-1: config 160 has an invalid interface number: 110 but max is -1
[ 1626.486026][T15192] usb 7-1: config 160 has 1 interface, different from the descriptor's value: 0
[ 1626.486049][T15192] usb 7-1: config 160 has no interface number 0
[ 1626.486080][T15192] usb 7-1: config 160 interface 110 has no altsetting 0
[ 1626.566611][T15192] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.566634][T15192] usb 7-1: Product: syz
[ 1626.566644][T15192] usb 7-1: Manufacturer: syz
[ 1626.566654][T15192] usb 7-1: SerialNumber: syz
[ 1626.859601][T15192] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:160.110/input/input120
[ 1626.899833][ T4985] bcm5974 7-1:160.110: could not read from device
[ 1626.937114][T15192] usb 7-1: USB disconnect, device number 59
[ 1627.163097][T15197] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1627.202256][T15109] usb 2-1: new low-speed USB device number 69 using dummy_hcd
[ 1627.205878][T28812] program syz.5.6777 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1627.312183][T15197] usb 5-1: New USB device found: idVendor=0c45, idProduct=8008, bcdDevice=e1.85
[ 1627.313771][T15197] usb 5-1: config 220 has too many interfaces: 184, using maximum allowed: 32
[ 1627.313792][T15197] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 184
[ 1627.313824][T15197] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1627.383144][T15109] usb 2-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1627.384432][T15109] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1627.384460][T15109] usb 2-1: config 0 has no interface number 0
[ 1627.384505][T15109] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1627.384535][T15109] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1627.384587][T15109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1627.387345][T15109] usb 2-1: config 0 descriptor??
[ 1627.387966][T28810] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1627.467849][T15109] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1627.507220][T15197] gspca_main: sn9c2028-2.14.0 probing 0c45:8008
[ 1627.705735][   T29] usb 2-1: USB disconnect, device number 69
[ 1628.048716][T15197] gspca_sn9c2028: read1 error -110
[ 1628.051131][T15197] gspca_sn9c2028: read1 error -32
[ 1628.052387][T15197] gspca_sn9c2028: read1 error -32
[ 1628.052484][T15197] sn9c2028 5-1:220.0: probe with driver sn9c2028 failed with error -32
[ 1629.153427][ T5635] Bluetooth: hci1: unexpected event for opcode 0x2060
[ 1629.947688][T15109] usb 5-1: USB disconnect, device number 54
[ 1630.547140][T28835] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1630.732366][T15199] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1630.883480][T15199] usb 4-1: New USB device found: idVendor=1d50, idProduct=6089, bcdDevice=1.00
[ 1630.888539][T15199] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1630.917735][T15199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1630.917757][T15199] usb 4-1: Product: syz
[ 1630.917766][T15199] usb 4-1: Manufacturer: syz
[ 1630.917775][T15199] usb 4-1: SerialNumber: syz
[ 1631.006090][T23536] IPVS: starting estimator thread 0...
[ 1631.102727][T28858] IPVS: using max 26 ests per chain, 62400 per kthread
[ 1631.108283][T28861] __nla_validate_parse: 60 callbacks suppressed
[ 1631.108306][T28861] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6786'.
[ 1631.378260][T15199] hackrf 4-1:1.0: usb_control_msg() failed -32 request 0f
[ 1631.378293][T15199] hackrf 4-1:1.0: Could not detect board
[ 1631.378350][T15199] hackrf 4-1:1.0: probe with driver hackrf failed with error -32
[ 1631.431192][T28845] netlink: 'syz.3.6783': attribute type 1 has an invalid length.
[ 1631.456025][T15109] usb 4-1: USB disconnect, device number 59
[ 1631.518680][T28864] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6787'.
[ 1631.781921][T15199] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1631.821952][   T29] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1631.872041][T15197] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[ 1631.932837][T15199] usb 5-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1631.955345][T15199] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1631.955367][T15199] usb 5-1: Product: syz
[ 1631.955377][T15199] usb 5-1: Manufacturer: syz
[ 1631.955386][T15199] usb 5-1: SerialNumber: syz
[ 1631.999651][   T29] usb 6-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01
[ 1632.017031][   T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1632.017063][   T29] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1632.017077][   T29] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1632.017113][   T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1632.055906][T15197] usb 2-1: New USB device found: idVendor=05ac, idProduct=0249, bcdDevice=0.00
[ 1632.086830][T15197] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 1632.086902][T15197] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1632.086939][T15197] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1632.149793][T28865] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1632.187558][T15197] usb 2-1: config 0 descriptor??
[ 1632.191691][T28871] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1632.321799][T15197] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input121
[ 1632.354634][T15199] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1632.354698][T15199] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[ 1632.354759][T15199] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1632.418926][T28867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1632.435654][T15199] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32
[ 1632.456904][T28867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1632.500215][ T5635] Bluetooth: hci2: Reading Intel version command failed (-71)
[ 1632.522806][   T29] usb 6-1: USB disconnect, device number 50
[ 1632.831858][T28867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1632.837518][T28867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1632.880388][T15109] usb 5-1: USB disconnect, device number 55
[ 1633.151223][ T4985] bcm5974 2-1:0.0: could not read from device
[ 1633.174095][T15197] usb 2-1: USB disconnect, device number 70
[ 1633.458081][T28883] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6793'.
[ 1633.671813][T15109] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1633.834459][T15109] usb 4-1: New USB device found: idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1633.834505][T15109] usb 4-1: too many configurations: 9, using maximum allowed: 8
[ 1633.835831][T15109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1633.835885][T15109] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1633.835912][T15109] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1633.837222][T15109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1633.837274][T15109] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1633.837301][T15109] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1633.839038][T15109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1633.839091][T15109] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1633.839119][T15109] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1633.841769][T15109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1633.841819][T15109] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1633.841844][T15109] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1633.844778][T15109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1633.844827][T15109] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1633.844852][T15109] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1633.870668][T15109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1633.870725][T15109] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1633.870751][T15109] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1633.879908][T15109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1633.879965][T15109] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1633.879990][T15109] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1633.896084][T15109] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[ 1633.896140][T15109] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[ 1633.896165][T15109] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1633.916917][T15109] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1633.916949][T15109] usb 4-1: Product: syz
[ 1633.916963][T15109] usb 4-1: Manufacturer: syz
[ 1633.916977][T15109] usb 4-1: SerialNumber: syz
[ 1633.971998][T24806] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1634.023074][T15109] usb 4-1: config 0 descriptor??
[ 1634.142187][   T30] kauditd_printk_skb: 197 callbacks suppressed
[ 1634.142210][   T30] audit: type=1326 audit(1793132297.775:8797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.143051][T24806] usb 6-1: Using ep0 maxpacket: 32
[ 1634.148596][T24806] usb 6-1: New USB device found: idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1634.150014][T24806] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[ 1634.150039][T24806] usb 6-1: config 0 has no interface number 0
[ 1634.150107][T24806] usb 6-1: config 0 interface 12 has no altsetting 0
[ 1634.159808][   T30] audit: type=1326 audit(1793132297.775:8798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.169425][T24806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1634.169448][T24806] usb 6-1: Product: syz
[ 1634.169457][T24806] usb 6-1: Manufacturer: syz
[ 1634.169466][T24806] usb 6-1: SerialNumber: syz
[ 1634.199599][T24806] usb 6-1: config 0 descriptor??
[ 1634.260365][T15109] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[ 1634.324352][   T30] audit: type=1326 audit(1793132297.955:8799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.375411][   T30] audit: type=1326 audit(1793132298.005:8800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.375909][   T30] audit: type=1326 audit(1793132298.005:8801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.441407][   T30] audit: type=1326 audit(1793132298.065:8802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.441468][   T30] audit: type=1326 audit(1793132298.065:8803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.441512][   T30] audit: type=1326 audit(1793132298.065:8804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.444638][   T30] audit: type=1326 audit(1793132298.075:8805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.444697][   T30] audit: type=1326 audit(1793132298.075:8806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28888 comm="syz.4.6796" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f8d79f559 code=0x7ffc0000
[ 1634.610809][T15109] usb 4-1: USB disconnect, device number 60
[ 1634.646892][T15109] yurex 4-1:0.0: USB YUREX #0 now disconnected
[ 1634.972070][ T5688] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1635.121954][ T5688] usb 5-1: Using ep0 maxpacket: 16
[ 1635.122877][ T5688] usb 5-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00
[ 1635.124319][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1635.124343][ T5688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1635.124357][ T5688] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1635.124385][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.126849][ T5688] usb 5-1: config 0 descriptor??
[ 1635.889678][T28885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1635.912854][T28885] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1636.822619][ T5688] usbhid 5-1:0.0: can't add hid device: -71
[ 1636.822778][ T5688] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1636.909158][ T5688] usb 5-1: USB disconnect, device number 56
[ 1637.123851][T28904] xt_hashlimit: size too large, truncated to 1048576
[ 1637.344064][T28910] syzkaller0: entered promiscuous mode
[ 1637.344086][T28910] syzkaller0: entered allmulticast mode
[ 1638.431206][T24806] f81534 6-1:0.12: f81534_get_register: reg: 1004 failed: -71
[ 1638.431275][T24806] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[ 1638.431294][T24806] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1638.455364][T24806] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[ 1638.528400][T24806] usb 6-1: USB disconnect, device number 51
[ 1638.601442][T15197] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[ 1638.767766][T15197] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1638.768445][T15197] usb 5-1: not running at top speed; connect to a high speed hub
[ 1638.768469][T15197] usb 5-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00
[ 1638.804125][T15197] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1638.804157][T15197] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1638.804203][T15197] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1638.855190][T15197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1638.855212][T15197] usb 5-1: Product: syz
[ 1638.855222][T15197] usb 5-1: Manufacturer: syz
[ 1639.127900][T15197] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (8086:0ad2)
[ 1639.131213][T15197] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 6 on unit 3: -71 (exp. 1).
[ 1639.154095][T15197] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 9 on unit 3: -71 (exp. 1).
[ 1639.157669][T15197] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 10 on unit 3: -71 (exp. 1).
[ 1639.158705][T15197] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 4 on unit 3: -71 (exp. 1).
[ 1639.172589][T15197] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 5 on unit 3: -71 (exp. 1).
[ 1639.195776][T15197] uvcvideo 5-1:1.0: Failed to query (GET_CUR) UVC control 5 on unit 3: -71 (exp. 1).
[ 1639.207175][T15197] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 16 on unit 3: -71 (exp. 1).
[ 1639.230299][T15197] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 11 on unit 3: -71 (exp. 1).
[ 1639.231243][T15197] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 13 on unit 3: -71 (exp. 1).
[ 1639.255180][T15197] uvcvideo 5-1:1.0: Failed to query (GET_INFO) UVC control 15 on unit 3: -71 (exp. 1).
[ 1639.255255][T15197] uvcvideo 5-1:1.0: No streaming interface found for terminal 32770.
[ 1639.255341][T15197] uvcvideo 5-1:1.0: Failed to create links for entity 3
[ 1639.255358][T15197] uvcvideo 5-1:1.0: Failed to register entities (-22).
[ 1639.262922][T15197] usb 5-1: USB disconnect, device number 57
[ 1639.292602][T15199] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[ 1639.445387][T28917] netlink: 164 bytes leftover after parsing attributes in process `syz.5.6804'.
[ 1639.462772][T15199] usb 2-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01
[ 1639.463933][T15199] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1639.463967][T15199] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1639.463999][T15199] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1639.464038][T15199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1639.493346][T28920] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1639.786675][T15197] usb 2-1: USB disconnect, device number 71
[ 1639.795560][ T5635] Bluetooth: hci2: Reading Intel version command failed (-71)
[ 1640.662065][ T5688] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1640.812039][ T5688] usb 4-1: Using ep0 maxpacket: 32
[ 1640.812774][ T5688] usb 4-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1640.813479][ T5688] usb 4-1: config 0 has no interfaces?
[ 1640.820260][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1640.820291][ T5688] usb 4-1: Product: syz
[ 1640.820307][ T5688] usb 4-1: Manufacturer: syz
[ 1640.820322][ T5688] usb 4-1: SerialNumber: syz
[ 1640.873450][T15197] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[ 1640.893144][ T5688] usb 4-1: config 0 descriptor??
[ 1641.050010][T15197] usb 6-1: New USB device found: idVendor=046d, idProduct=c293, bcdDevice=0.00
[ 1641.050043][T15197] usb 6-1: too many configurations: 253, using maximum allowed: 8
[ 1641.052755][T15197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.052785][T15197] usb 6-1: config 0 has no interfaces?
[ 1641.090508][T15197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.090528][T15197] usb 6-1: config 0 has no interfaces?
[ 1641.119733][T15197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.119764][T15197] usb 6-1: config 0 has no interfaces?
[ 1641.149676][T15197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.149698][T15197] usb 6-1: config 0 has no interfaces?
[ 1641.174448][T15197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.174469][T15197] usb 6-1: config 0 has no interfaces?
[ 1641.210860][T15197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.210882][T15197] usb 6-1: config 0 has no interfaces?
[ 1641.246262][T15197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.246283][T15197] usb 6-1: config 0 has no interfaces?
[ 1641.275246][T15197] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1641.275278][T15197] usb 6-1: config 0 has no interfaces?
[ 1641.275313][T15197] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1641.324891][T15197] usb 6-1: config 0 descriptor??
[ 1641.743831][T28940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1641.744148][T28940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1641.831261][T28940] input: syz0 as /devices/virtual/input/input122
[ 1641.977445][T28953] kvm: pic: non byte write
[ 1642.172071][T15199] usb 4-1: USB disconnect, device number 61
[ 1643.468702][T28970] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6821'.
[ 1643.544172][T15197] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1643.706903][T15197] usb 4-1: Using ep0 maxpacket: 32
[ 1643.709747][T15197] usb 4-1: New USB device found: idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1643.717986][T15197] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[ 1643.718015][T15197] usb 4-1: config 0 has no interface number 0
[ 1643.718056][T15197] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1643.718081][T15197] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1643.786634][T15197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1643.786667][T15197] usb 4-1: Product: syz
[ 1643.786683][T15197] usb 4-1: Manufacturer: syz
[ 1643.786698][T15197] usb 4-1: SerialNumber: syz
[ 1643.827991][T15197] usb 4-1: config 0 descriptor??
[ 1644.066358][T15197] radio-si470x 4-1:0.35: this is not a si470x device.
[ 1644.091916][T15109] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[ 1644.154527][T15192] usb 6-1: USB disconnect, device number 52
[ 1644.255129][T15109] usb 2-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01
[ 1644.260139][T15109] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1644.260175][T15109] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1644.260195][T15109] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1644.260229][T15109] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1644.333948][T28974] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1644.452012][ T5688] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 1644.582320][T15192] usb 2-1: USB disconnect, device number 72
[ 1644.582472][ T5688] usb 7-1: device descriptor read/64, error -71
[ 1644.582573][ T5631] Bluetooth: hci2: Reading Intel version command failed (-71)
[ 1644.622752][T15197] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[ 1644.852277][ T5688] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[ 1644.981950][ T5688] usb 7-1: device descriptor read/64, error -71
[ 1645.093006][ T5688] usb usb7-port1: attempt power cycle
[ 1645.169478][T15109] usb 4-1: USB disconnect, device number 62
[ 1645.434797][ T5688] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 1645.460037][ T5688] usb 7-1: device descriptor read/8, error -71
[ 1645.476800][T28985] kvm: pic: non byte write
[ 1645.692506][ T5688] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 1645.714248][ T5688] usb 7-1: device descriptor read/8, error -71
[ 1645.822507][ T5688] usb usb7-port1: unable to enumerate USB device
[ 1646.036071][T15192] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1646.059825][ T5631] Bluetooth: hci0: command 0x0406 tx timeout
[ 1646.191411][T15192] usb 6-1: Using ep0 maxpacket: 16
[ 1646.192347][T15192] usb 6-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[ 1646.193840][T15192] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.193891][T15192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1646.193919][T15192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1646.193940][T15192] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1646.193963][T15192] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1646.195194][T15192] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1646.195219][T15192] usb 6-1: Manufacturer: syz
[ 1646.199670][T15192] usb 6-1: config 0 descriptor??
[ 1646.643578][T15192] rc_core: IR keymap rc-hauppauge not found
[ 1646.643607][T15192] Registered IR keymap rc-empty
[ 1646.643706][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.674378][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.697048][T15192] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1646.702281][T15192] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input123
[ 1646.740384][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.753262][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.773387][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.803975][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.831642][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.862211][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.882535][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.902161][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.925164][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.946300][T15192] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1646.976581][T15192] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1646.976602][T15192] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1647.007192][T29008] 
: renamed from bond_slave_0 (while UP)
[ 1647.027952][T15192] usb 6-1: USB disconnect, device number 53
[ 1647.737203][T29012] kvm: pic: non byte write
[ 1648.392947][ T5688] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1648.552962][ T5688] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1648.577257][ T5688] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1648.605404][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1648.605426][ T5688] usb 6-1: Product: syz
[ 1648.605436][ T5688] usb 6-1: Manufacturer: syz
[ 1648.677293][T29028] netlink: 'syz.4.6836': attribute type 1 has an invalid length.
[ 1648.679044][ T5688] usb 6-1: selecting invalid altsetting 1
[ 1648.679148][ T5688] dvb_ttusb_budget: ttusb_init_controller: error
[ 1648.679156][ T5688] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1648.823328][T29028] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1648.918179][T29030] bond2: (slave erspan1): making interface the new active one
[ 1648.934584][T29030] bond2: (slave erspan1): Enslaving as an active interface with an up link
[ 1649.079753][ T5688] DVB: Unable to find symbol cx22700_attach()
[ 1649.386388][ T5688] DVB: Unable to find symbol tda10046_attach()
[ 1649.386402][ T5688] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1649.410447][ T5688] usb 6-1: USB disconnect, device number 54
[ 1650.389762][T29047] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6840'.
[ 1650.403725][T29047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6840'.
[ 1650.436257][T29048] ublk_ctrl_add_dev: queue_id is wrong ff7f
[ 1650.582798][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1650.582822][   T30] audit: type=1326 audit(1793132314.215:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095599f559 code=0x7ffc0000
[ 1650.588003][   T30] audit: type=1326 audit(1793132314.215:8817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095599f559 code=0x7ffc0000
[ 1650.653974][   T30] audit: type=1326 audit(1793132314.285:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f095599f559 code=0x7ffc0000
[ 1650.654130][   T30] audit: type=1326 audit(1793132314.285:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095599f559 code=0x7ffc0000
[ 1650.654788][   T30] audit: type=1326 audit(1793132314.285:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095599f559 code=0x7ffc0000
[ 1650.658598][   T30] audit: type=1326 audit(1793132314.285:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f095599f559 code=0x7ffc0000
[ 1650.659391][   T30] audit: type=1326 audit(1793132314.285:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095599f559 code=0x7ffc0000
[ 1650.716153][   T30] audit: type=1326 audit(1793132314.295:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f095595fd8e code=0x7ffc0000
[ 1650.716206][   T30] audit: type=1326 audit(1793132314.295:8824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f095595fd8e code=0x7ffc0000
[ 1650.855322][   T30] audit: type=1326 audit(1793132314.295:8825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29050 comm="syz.5.6842" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f095599f559 code=0x7ffc0000
[ 1651.718030][T29067] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1652.169182][T29071] netlink: 'syz.3.6848': attribute type 1 has an invalid length.
[ 1652.238683][T29071] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1652.282042][T15109] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1652.436738][T15109] usb 5-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1652.456878][T15109] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1652.456917][T15109] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1652.456941][T15109] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1652.504098][T15109] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1652.504120][T15109] usb 5-1: Product: syz
[ 1652.504129][T15109] usb 5-1: Manufacturer: syz
[ 1652.504138][T15109] usb 5-1: SerialNumber: syz
[ 1652.548194][T15109] usb 5-1: config 0 descriptor??
[ 1652.609080][T15109] usb 5-1: selecting invalid altsetting 0
[ 1652.849452][T29062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6846'.
[ 1652.959792][T29069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1652.977978][T29069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1653.121929][T15199] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[ 1653.175296][T15109] usb 5-1: USB disconnect, device number 58
[ 1653.280154][T15199] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1653.300994][T15199] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1653.329170][T15199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1653.329192][T15199] usb 2-1: Product: syz
[ 1653.329209][T15199] usb 2-1: Manufacturer: syz
[ 1653.384526][T15199] usb 2-1: selecting invalid altsetting 1
[ 1653.384630][T15199] dvb_ttusb_budget: ttusb_init_controller: error
[ 1653.384638][T15199] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1653.609707][T29089] nvme nvme0: failed to connect socket: -111
[ 1653.662944][T15199] DVB: Unable to find symbol cx22700_attach()
[ 1653.688393][T24776] udevd[24776]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1654.015097][T29081] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1654.148444][T15199] DVB: Unable to find symbol tda10046_attach()
[ 1654.148458][T15199] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1654.181164][T15199] usb 2-1: USB disconnect, device number 73
[ 1654.704882][T29103] loop4: detected capacity change from 0 to 7
[ 1654.720681][T29103] Dev loop4: unable to read RDB block 7
[ 1654.720708][T29103]  loop4: AHDI p2 p3
[ 1654.720722][T29103] loop4: partition table partially beyond EOD, truncated
[ 1654.740496][T29103] loop4: p2 start 1459748864 is beyond EOD, truncated
[ 1655.222858][T29116] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6862'.
[ 1655.379787][T29122] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6864'.
[ 1655.881954][T24806] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1656.035311][T24806] usb 7-1: New USB device found: idVendor=1781, idProduct=0938, bcdDevice=9b.49
[ 1656.053796][T24806] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[ 1656.053838][T24806] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1656.053867][T24806] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1656.053894][T24806] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1656.116302][T24806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1656.116324][T24806] usb 7-1: Product: syz
[ 1656.116333][T24806] usb 7-1: Manufacturer: syz
[ 1656.116343][T24806] usb 7-1: SerialNumber: syz
[ 1656.155326][T24806] usb 7-1: config 0 descriptor??
[ 1656.213574][T24806] iguanair 7-1:0.0: failed to get version
[ 1656.215564][T24806] iguanair 7-1:0.0: probe with driver iguanair failed with error -90
[ 1656.828040][T29133] tun0: tun_chr_ioctl cmd 1074025677
[ 1656.828130][T29133] tun0: linktype set to 774
[ 1657.242090][T24806] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1657.393385][T24806] usb 6-1: Using ep0 maxpacket: 32
[ 1657.394225][T24806] usb 6-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1657.408468][T24806] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1657.408496][T24806] usb 6-1: config 0 has no interface number 0
[ 1657.427708][T24806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1657.427738][T24806] usb 6-1: Product: syz
[ 1657.427753][T24806] usb 6-1: Manufacturer: syz
[ 1657.427767][T24806] usb 6-1: SerialNumber: syz
[ 1657.465517][T24806] usb 6-1: config 0 descriptor??
[ 1657.499187][T24806] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1657.678889][T29135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1657.692743][T29135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1657.754264][T24806] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1657.790754][T24806] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1657.962012][T24806] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[ 1657.998452][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1658.002532][T15109] usb 6-1: USB disconnect, device number 55
[ 1658.100043][T15109] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1658.135281][T15109] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1658.135973][T15109] quatech2 6-1:0.51: device disconnected
[ 1658.138438][T24806] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1658.170179][T24806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1658.204140][T24806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1658.204163][T24806] usb 2-1: Product: syz
[ 1658.204172][T24806] usb 2-1: Manufacturer: syz
[ 1658.280914][T24806] usb 2-1: selecting invalid altsetting 1
[ 1658.288933][T24806] dvb_ttusb_budget: ttusb_init_controller: error
[ 1658.288949][T24806] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1658.710630][T15109] usb 7-1: USB disconnect, device number 64
[ 1658.801205][T24806] DVB: Unable to find symbol cx22700_attach()
[ 1658.900354][T29149] netlink: 'syz.3.6870': attribute type 1 has an invalid length.
[ 1659.084673][T29149] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1659.099909][T24806] DVB: Unable to find symbol tda10046_attach()
[ 1659.099926][T24806] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1659.134385][T24806] usb 2-1: USB disconnect, device number 74
[ 1659.404120][T29154] veth3: entered allmulticast mode
[ 1659.449598][T29154] bond4: (slave veth3): Enslaving as an active interface with a down link
[ 1659.566544][T29149] bond4: (slave veth0_to_bond): making interface the new active one
[ 1659.586384][T29149] veth0_to_bond: entered promiscuous mode
[ 1659.597307][T29149] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1659.682700][T29157] macvlan2: entered promiscuous mode
[ 1659.682728][T29157] macvlan2: entered allmulticast mode
[ 1659.703870][T29157] bond4: entered promiscuous mode
[ 1659.743162][T29157] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1659.774073][T29157] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth3
[ 1659.813412][T29157] bond4: left promiscuous mode
[ 1660.431541][T24806] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[ 1660.583256][T24806] usb 2-1: Using ep0 maxpacket: 16
[ 1660.583757][T24806] usb 2-1: New USB device found: idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[ 1660.587250][T24806] usb 2-1: config 3 has an invalid interface number: 20 but max is 0
[ 1660.587276][T24806] usb 2-1: config 3 has no interface number 0
[ 1660.587313][T24806] usb 2-1: config 3 interface 20 has no altsetting 0
[ 1660.624134][T24806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1660.624164][T24806] usb 2-1: Product: syz
[ 1660.624179][T24806] usb 2-1: Manufacturer: syz
[ 1660.624193][T24806] usb 2-1: SerialNumber: syz
[ 1660.711442][T15197] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1660.870674][T15197] usb 4-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00
[ 1660.908269][T15197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1660.908301][T15197] usb 4-1: Product: syz
[ 1660.908316][T15197] usb 4-1: Manufacturer: syz
[ 1660.908330][T15197] usb 4-1: SerialNumber: syz
[ 1660.996474][T24806] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.20/input/input125
[ 1660.998473][ T4985] bcm5974 2-1:3.20: could not read from device
[ 1661.047552][ T4985] bcm5974 2-1:3.20: could not read from device
[ 1661.067618][ T4985] bcm5974 2-1:3.20: could not read from device
[ 1661.107801][ T4985] bcm5974 2-1:3.20: could not read from device
[ 1661.110177][T24806] usb 2-1: USB disconnect, device number 75
[ 1661.426388][T15197] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1661.426725][T15197] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1661.465712][T15197] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1661.465754][T15197] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1661.514145][T15197] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1661.537949][T15197] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32
[ 1662.696258][T15192] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1662.811782][ T5702] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[ 1662.861473][T15192] usb 6-1: Using ep0 maxpacket: 8
[ 1662.864072][T15192] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1662.864125][T15192] usb 6-1: New USB device found: idVendor=05e3, idProduct=0503, bcdDevice=72.cc
[ 1662.865247][T15192] usb 6-1: config 6 has an invalid interface number: 96 but max is 1
[ 1662.865264][T15192] usb 6-1: config 6 has an invalid interface number: 225 but max is 1
[ 1662.865276][T15192] usb 6-1: config 6 has no interface number 0
[ 1662.865286][T15192] usb 6-1: config 6 has no interface number 1
[ 1662.865310][T15192] usb 6-1: config 6 interface 96 has no altsetting 0
[ 1662.865321][T15192] usb 6-1: config 6 interface 225 has no altsetting 0
[ 1662.867846][T15192] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1662.867867][T15192] usb 6-1: Product: syz
[ 1662.867877][T15192] usb 6-1: Manufacturer: syz
[ 1662.867886][T15192] usb 6-1: SerialNumber: syz
[ 1662.999939][ T5702] usb 2-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1663.022385][ T5702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1663.047412][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1663.047444][ T5702] usb 2-1: Product: syz
[ 1663.047460][ T5702] usb 2-1: Manufacturer: syz
[ 1663.206997][ T5702] usb 2-1: selecting invalid altsetting 1
[ 1663.207147][ T5702] dvb_ttusb_budget: ttusb_init_controller: error
[ 1663.207156][ T5702] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1663.309804][T29195] syzkaller0: entered promiscuous mode
[ 1663.309831][T29195] syzkaller0: entered allmulticast mode
[ 1663.870269][ T5702] DVB: Unable to find symbol cx22700_attach()
[ 1664.239695][T15192] usb 6-1: USB disconnect, device number 56
[ 1664.292017][ T5702] DVB: Unable to find symbol tda10046_attach()
[ 1664.292035][ T5702] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1664.322441][ T5702] usb 2-1: USB disconnect, device number 76
[ 1664.862948][ T5702] usb 4-1: USB disconnect, device number 63
[ 1664.989554][T29209] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6884'.
[ 1664.989578][T29209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6884'.
[ 1665.199876][T29209] bond7: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[ 1665.226919][T29209] bond7 (unregistering): Released all slaves
[ 1665.342037][ T5702] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1665.393858][ T5688] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[ 1665.493721][ T5702] usb 4-1: New USB device found: idVendor=05ac, idProduct=0238, bcdDevice=0.00
[ 1665.496704][ T5702] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1665.496751][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1665.540282][ T5702] usb 4-1: config 0 descriptor??
[ 1665.543400][ T5688] usb 2-1: Using ep0 maxpacket: 32
[ 1665.555287][ T5688] usb 2-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1665.589840][ T5688] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1665.589873][ T5688] usb 2-1: config 0 has no interface number 0
[ 1665.624741][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1665.624973][ T5688] usb 2-1: Product: syz
[ 1665.625721][ T5688] usb 2-1: Manufacturer: syz
[ 1665.625739][ T5688] usb 2-1: SerialNumber: syz
[ 1665.787924][ T5688] usb 2-1: config 0 descriptor??
[ 1665.833562][ T5688] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1665.833584][ T5688] usb 2-1: selecting invalid altsetting 1
[ 1665.833594][ T5688] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1665.883991][ T5688] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1665.884247][ T5688] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1665.884278][ T5688] usb 2-1: media controller created
[ 1666.050623][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1666.079445][T29212] bond5: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[ 1666.109248][T29212] bond5 (unregistering): Released all slaves
[ 1666.380813][ T5702] apple 0003:05AC:0238.0041: unknown main item tag 0x0
[ 1666.380841][ T5702] apple 0003:05AC:0238.0041: unknown main item tag 0x0
[ 1666.380862][ T5702] apple 0003:05AC:0238.0041: unknown main item tag 0x0
[ 1666.380887][ T5702] apple 0003:05AC:0238.0041: unknown main item tag 0x0
[ 1666.380932][ T5702] apple 0003:05AC:0238.0041: unknown main item tag 0x0
[ 1666.380966][ T5702] apple 0003:05AC:0238.0041: unknown main item tag 0x0
[ 1666.380982][ T5702] apple 0003:05AC:0238.0041: unknown main item tag 0x0
[ 1666.380997][ T5702] apple 0003:05AC:0238.0041: unknown main item tag 0x0
[ 1666.486052][ T5702] apple 0003:05AC:0238.0041: hidraw0: USB HID vef.fd Device [HID 05ac:0238] on usb-dummy_hcd.3-1/input0
[ 1667.572715][ T5688] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1667.572782][ T5688] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1667.711944][T29237] loop4: detected capacity change from 0 to 7
[ 1667.713967][T29237]  loop4:
[ 1667.713988][T29237] loop4: partition table partially beyond EOD, truncated
[ 1668.269387][ T5688] usb 2-1: USB disconnect, device number 77
[ 1668.348892][T15109] usb 4-1: USB disconnect, device number 64
[ 1668.963331][T15109] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1669.023106][ T5702] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1669.126832][T15109] usb 6-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1669.159066][T15109] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1669.159089][T15109] usb 6-1: Product: syz
[ 1669.159098][T15109] usb 6-1: SerialNumber: syz
[ 1669.184639][ T5702] usb 4-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1669.214077][T15109] usb 6-1: config 0 descriptor??
[ 1669.217715][ T5702] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1669.246273][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1669.246295][ T5702] usb 4-1: Product: syz
[ 1669.246304][ T5702] usb 4-1: Manufacturer: syz
[ 1669.447363][ T5702] usb 4-1: selecting invalid altsetting 1
[ 1669.447492][ T5702] dvb_ttusb_budget: ttusb_init_controller: error
[ 1669.447502][ T5702] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1669.967320][ T5702] DVB: Unable to find symbol cx22700_attach()
[ 1670.392190][ T5702] DVB: Unable to find symbol tda10046_attach()
[ 1670.392208][ T5702] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1670.450034][ T5702] usb 4-1: USB disconnect, device number 65
[ 1670.812380][T15109] usb 6-1: USB disconnect, device number 57
[ 1671.154409][T29270] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6901'.
[ 1671.154433][T29270] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6901'.
[ 1671.327061][T29268] bond5: entered allmulticast mode
[ 1671.346142][T29268] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1671.434391][T29268] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6900'.
[ 1671.579992][T29270] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[ 1671.623993][T29270] bond3 (unregistering): Released all slaves
[ 1671.928653][T29273] ip6gretap1: entered allmulticast mode
[ 1671.933969][T29273] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1672.057479][   T12] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1672.183800][T29268] bond0 (unregistering): (slave 
3
0
): Releasing backup interface
[ 1672.204016][  T104] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[ 1672.295620][T29268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1672.348050][T29268] bond0 (unregistering): Released all slaves
[ 1672.655868][T15510] bond4: (slave veth0_to_bond): link status definitely down, disabling slave
[ 1672.737219][T15510] veth0_to_bond: left promiscuous mode
[ 1672.764182][T15510] bond4: now running without any active interface!
[ 1673.251426][T15109] usb 4-1: new full-speed USB device number 66 using dummy_hcd
[ 1673.352005][ T5702] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[ 1673.407719][T15109] usb 4-1: not running at top speed; connect to a high speed hub
[ 1673.407759][T15109] usb 4-1: New USB device found: idVendor=054c, idProduct=06c1, bcdDevice=1.00
[ 1673.430940][T15109] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1673.430990][T15109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1673.467666][T15109] port100 4-1:1.0: NFC: Could not get supported command types
[ 1673.502169][ T5702] usb 2-1: Using ep0 maxpacket: 32
[ 1673.502943][ T5702] usb 2-1: New USB device found: idVendor=0545, idProduct=800d, bcdDevice=3.0a
[ 1673.504153][ T5702] usb 2-1: config 7 has an invalid interface number: 160 but max is 0
[ 1673.504178][ T5702] usb 2-1: config 7 has no interface number 0
[ 1673.504218][ T5702] usb 2-1: config 7 interface 160 has no altsetting 0
[ 1673.506815][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1673.506833][ T5702] usb 2-1: Product: syz
[ 1673.506842][ T5702] usb 2-1: Manufacturer: syz
[ 1673.506851][ T5702] usb 2-1: SerialNumber: syz
[ 1673.581757][ T5688] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1673.742045][ T5688] usb 6-1: Using ep0 maxpacket: 32
[ 1673.745430][ T5688] usb 6-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1673.784203][ T5688] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1673.784235][ T5688] usb 6-1: config 0 has no interface number 0
[ 1673.828116][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1673.828140][ T5688] usb 6-1: Product: syz
[ 1673.828159][ T5688] usb 6-1: Manufacturer: syz
[ 1673.828168][ T5688] usb 6-1: SerialNumber: syz
[ 1673.883114][ T5688] usb 6-1: config 0 descriptor??
[ 1673.918723][ T5688] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1673.918746][ T5688] usb 6-1: selecting invalid altsetting 1
[ 1673.918756][ T5688] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1673.948592][ T5688] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1673.949081][ T5688] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1673.949159][ T5688] usb 6-1: media controller created
[ 1673.951517][T15197] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1674.012935][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1674.137857][T15197] usb 5-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1674.156435][T15197] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1674.416591][T15109] usb 4-1: USB disconnect, device number 66
[ 1674.502840][T15197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1674.502872][T15197] usb 5-1: Product: syz
[ 1674.502882][T15197] usb 5-1: Manufacturer: syz
[ 1674.564383][T15197] usb 5-1: selecting invalid altsetting 1
[ 1674.564536][T15197] dvb_ttusb_budget: ttusb_init_controller: error
[ 1674.564545][T15197] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1674.754399][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1674.754545][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1674.856325][ T5702] usb 2-1: USB disconnect, device number 78
[ 1675.369782][T15197] DVB: Unable to find symbol cx22700_attach()
[ 1675.412259][ T5688] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1675.412302][ T5688] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1675.786047][T15197] DVB: Unable to find symbol tda10046_attach()
[ 1675.786180][T15197] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1675.827673][T15197] usb 5-1: USB disconnect, device number 60
[ 1676.001493][T15199] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1676.161408][T15199] usb 4-1: Using ep0 maxpacket: 32
[ 1676.165614][T15199] usb 4-1: New USB device found: idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[ 1676.167595][T15199] usb 4-1: config 4 has an invalid interface number: 228 but max is 0
[ 1676.167621][T15199] usb 4-1: config 4 has no interface number 0
[ 1676.167639][T15199] usb 4-1: too many endpoints for config 4 interface 228 altsetting 12: 129, using maximum allowed: 30
[ 1676.167664][T15199] usb 4-1: config 4 interface 228 altsetting 12 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1676.167682][T15199] usb 4-1: config 4 interface 228 altsetting 12 bulk endpoint 0x7 has invalid maxpacket 0
[ 1676.167706][T15199] usb 4-1: config 4 interface 228 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[ 1676.167734][T15199] usb 4-1: config 4 interface 228 has no altsetting 0
[ 1676.274670][T15199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1676.274692][T15199] usb 4-1: Product: syz
[ 1676.274702][T15199] usb 4-1: Manufacturer: syz
[ 1676.274711][T15199] usb 4-1: SerialNumber: syz
[ 1676.535715][T29316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1676.536038][T29316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1676.652354][T15109] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[ 1676.683302][ T5688] usb 6-1: USB disconnect, device number 58
[ 1676.766555][T29316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1676.766893][T29316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1676.803410][T15109] usb 2-1: Using ep0 maxpacket: 8
[ 1676.804371][T15109] usb 2-1: New USB device found: idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1676.806141][T15109] usb 2-1: config 0 has an invalid interface number: 31 but max is 0
[ 1676.806167][T15109] usb 2-1: config 0 has no interface number 0
[ 1676.831994][T15109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1676.832023][T15109] usb 2-1: Product: syz
[ 1676.832038][T15109] usb 2-1: Manufacturer: syz
[ 1676.832052][T15109] usb 2-1: SerialNumber: syz
[ 1676.835131][T15109] usb 2-1: config 0 descriptor??
[ 1676.916957][T15109] uvcvideo 2-1:0.31: probe with driver uvcvideo failed with error -22
[ 1677.412269][T29318] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1677.412821][T29318] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1677.881533][T15197] usb 7-1: new full-speed USB device number 65 using dummy_hcd
[ 1678.018513][T29318] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1678.057210][T15197] usb 7-1: New USB device found: idVendor=07c0, idProduct=1125, bcdDevice=0.00
[ 1678.074671][T15197] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1678.074697][T15197] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1678.074711][T15197] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1678.074766][T15197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1678.077251][T29318] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1678.173698][T15197] usb 7-1: config 0 descriptor??
[ 1678.406507][T29335] FAULT_INJECTION: forcing a failure.
[ 1678.406507][T29335] name failslab, interval 1, probability 0, space 0, times 0
[ 1678.406534][T29335] CPU: 0 UID: 0 PID: 29335 Comm: syz.5.6916 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1678.406553][T29335] Tainted: [L]=SOFTLOCKUP
[ 1678.406558][T29335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1678.406570][T29335] Call Trace:
[ 1678.406575][T29335]  <TASK>
[ 1678.406582][T29335]  dump_stack_lvl+0xe8/0x150
[ 1678.406632][T29335]  should_fail_ex+0x410/0x560
[ 1678.406655][T29335]  should_failslab+0xa8/0x100
[ 1678.406673][T29335]  ? __kernfs_new_node+0xe6/0x980
[ 1678.406754][T29335]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1678.406769][T29335]  ? __kernfs_new_node+0xe6/0x980
[ 1678.406791][T29335]  __kernfs_new_node+0xe6/0x980
[ 1678.406814][T29335]  ? __pfx___kernfs_new_node+0x10/0x10
[ 1678.406831][T29335]  ? lock_acquire+0x115/0x350
[ 1678.406848][T29335]  ? kernfs_root+0x1c/0x230
[ 1678.406869][T29335]  ? kernfs_root+0x1c/0x230
[ 1678.406885][T29335]  ? kernfs_root+0x1c/0x230
[ 1678.406900][T29335]  ? kernfs_root+0x1c/0x230
[ 1678.406920][T29335]  kernfs_new_node+0xeb/0x140
[ 1678.406940][T29335]  __kernfs_create_file+0x4b/0x2e0
[ 1678.406972][T29335]  sysfs_add_file_mode_ns+0x237/0x300
[ 1678.406992][T29335]  internal_create_group+0x679/0x1180
[ 1678.407019][T29335]  ? __pfx_internal_create_group+0x10/0x10
[ 1678.407038][T29335]  ? up_write+0x19d/0x4a0
[ 1678.407060][T29335]  sysfs_create_groups+0x59/0x120
[ 1678.407079][T29335]  device_add_attrs+0x12c/0x600
[ 1678.407148][T29335]  ? __pfx_device_add_attrs+0x10/0x10
[ 1678.407171][T29335]  ? kobject_put+0x50f/0x550
[ 1678.407237][T29335]  ? device_add_class_symlinks+0x21f/0x240
[ 1678.407264][T29335]  device_add+0x488/0xb80
[ 1678.407291][T29335]  input_register_device+0xa1f/0x11b0
[ 1678.407376][T29335]  uinput_create_device+0x53e/0x690
[ 1678.407408][T29335]  uinput_ioctl_handler+0x433/0x15a0
[ 1678.407438][T29335]  ? __pfx_uinput_ioctl_handler+0x10/0x10
[ 1678.407474][T29335]  ? __fget_files+0x2a/0x420
[ 1678.407506][T29335]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1678.407542][T29335]  ? __pfx_uinput_ioctl+0x10/0x10
[ 1678.407563][T29335]  __se_sys_ioctl+0xfc/0x170
[ 1678.407602][T29335]  do_syscall_64+0x166/0x520
[ 1678.407625][T29335]  ? trace_irq_disable+0x3b/0x140
[ 1678.407644][T29335]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1678.407659][T29335]  ? clear_bhb_loop+0x70/0xc0
[ 1678.407675][T29335]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1678.407688][T29335] RIP: 0033:0x7f095599f559
[ 1678.407703][T29335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1678.407714][T29335] RSP: 002b:00007f09567ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1678.407731][T29335] RAX: ffffffffffffffda RBX: 00007f0955c26090 RCX: 00007f095599f559
[ 1678.407741][T29335] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003
[ 1678.407750][T29335] RBP: 00007f09567ed090 R08: 0000000000000000 R09: 0000000000000000
[ 1678.407758][T29335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1678.407766][T29335] R13: 00007f0955c26128 R14: 00007f0955c26090 R15: 00007f0955d4fa48
[ 1678.407786][T29335]  </TASK>
[ 1678.893901][T24806] usb 7-1: USB disconnect, device number 65
[ 1679.500967][T29323] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1679.536082][T29323] 8021q: adding VLAN 0 to HW filter on device team0
[ 1679.609356][T29323] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1679.700584][T15199] usb 4-1: USB disconnect, device number 67
[ 1679.749280][T24812] udevd[24812]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:4.228/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1679.874316][T29323] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1679.874464][T29323] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1679.919591][T29323] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1679.919722][T29323] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1680.121025][T29323] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1680.167578][T29323] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1680.321083][T29323] veth1_vlan: left promiscuous mode
[ 1680.339732][T29323] veth0_vlan: left promiscuous mode
[ 1680.363967][T29323] veth0_vlan: entered promiscuous mode
[ 1680.398498][T29323] veth1_vlan: entered promiscuous mode
[ 1680.400450][T29354] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1680.469712][T29323] veth1_macvtap: left promiscuous mode
[ 1680.491077][T29323] veth0_macvtap: left promiscuous mode
[ 1680.515560][T29323] veth0_macvtap: entered promiscuous mode
[ 1680.543470][T29323] veth1_macvtap: entered promiscuous mode
[ 1680.561430][T23754] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1680.622427][T29323] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1680.623553][T29323] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1680.654874][T29323] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1680.669875][T29323] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1680.715303][T29323] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1680.729529][T23754] usb 5-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1680.743128][T24806] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1680.745582][T23754] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1680.774420][T23754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1680.774453][T23754] usb 5-1: Product: syz
[ 1680.774477][T23754] usb 5-1: Manufacturer: syz
[ 1680.775345][T29323] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1680.828536][T23754] usb 5-1: selecting invalid altsetting 1
[ 1680.828715][T23754] dvb_ttusb_budget: ttusb_init_controller: error
[ 1680.828728][T23754] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1680.930641][T23754] DVB: Unable to find symbol cx22700_attach()
[ 1680.950223][T24806] usb 7-1: New USB device found: idVendor=056a, idProduct=0062, bcdDevice=0.40
[ 1680.952400][T24806] usb 7-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1680.952432][T24806] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1680.997962][T24806] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1680.997994][T24806] usb 7-1: Product: 㱡
[ 1680.998011][T24806] usb 7-1: Manufacturer: ꫣ椑涼跴씈㌰烶
[ 1680.998028][T24806] usb 7-1: SerialNumber: syz
[ 1681.127368][T23754] DVB: Unable to find symbol tda10046_attach()
[ 1681.127388][T23754] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1681.169643][T23754] usb 5-1: USB disconnect, device number 61
[ 1681.216663][   T29] usb 2-1: USB disconnect, device number 79
[ 1681.359826][T29347] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check.
[ 1681.821743][ T5688] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1681.972729][ T5688] usb 4-1: Using ep0 maxpacket: 32
[ 1681.974899][ T5688] usb 4-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1681.998572][ T5688] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1681.998594][ T5688] usb 4-1: config 0 has no interface number 0
[ 1682.043273][ T5688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1682.043297][ T5688] usb 4-1: Product: syz
[ 1682.043307][ T5688] usb 4-1: Manufacturer: syz
[ 1682.043333][ T5688] usb 4-1: SerialNumber: syz
[ 1682.087897][ T5688] usb 4-1: config 0 descriptor??
[ 1682.119908][ T5688] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1682.119936][ T5688] usb 4-1: selecting invalid altsetting 1
[ 1682.119946][ T5688] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1682.167221][ T5688] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1682.167440][ T5688] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1682.167470][ T5688] usb 4-1: media controller created
[ 1682.345368][ T5688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1682.844465][T24806] usbhid 7-1:1.0: can't add hid device: -71
[ 1682.844628][T24806] usbhid 7-1:1.0: probe with driver usbhid failed with error -71
[ 1682.878189][T24806] usb 7-1: USB disconnect, device number 66
[ 1683.034247][T29374] loop4: detected capacity change from 0 to 7
[ 1683.050883][T29374]  loop4:
[ 1683.050922][T29374] loop4: partition table partially beyond EOD, truncated
[ 1683.638521][T29382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6931'.
[ 1683.652130][ T5688] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1683.652170][ T5688] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1684.415149][ T5688] usb 4-1: USB disconnect, device number 68
[ 1684.732363][T24806] usb 2-1: new full-speed USB device number 80 using dummy_hcd
[ 1684.884048][T24806] usb 2-1: New USB device found: idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[ 1684.885095][T24806] usb 2-1: config 0 has an invalid interface number: 35 but max is 0
[ 1684.885123][T24806] usb 2-1: config 0 has no interface number 0
[ 1684.885164][T24806] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[ 1684.888357][T24806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1684.888376][T24806] usb 2-1: Product: syz
[ 1684.888386][T24806] usb 2-1: Manufacturer: syz
[ 1684.888395][T24806] usb 2-1: SerialNumber: syz
[ 1684.962015][ T5688] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1684.995112][T24806] usb 2-1: config 0 descriptor??
[ 1685.027961][T24806] radio-si470x 2-1:0.35: could not find interrupt in endpoint
[ 1685.028011][T24806] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5
[ 1685.140153][ T5688] usb 6-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00
[ 1685.165352][ T5688] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1685.191709][ T5688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1685.191732][ T5688] usb 6-1: Product: syz
[ 1685.191742][ T5688] usb 6-1: Manufacturer: syz
[ 1685.226845][T24806] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A)
[ 1685.327842][ T5688] usb 6-1: selecting invalid altsetting 1
[ 1685.327977][ T5688] dvb_ttusb_budget: ttusb_init_controller: error
[ 1685.327986][ T5688] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1685.511108][T24806] radio-raremono 2-1:0.35: V4L2 device registered as radio48
[ 1685.544155][T29408] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1685.706408][ T5688] DVB: Unable to find symbol cx22700_attach()
[ 1686.184087][ T5688] DVB: Unable to find symbol tda10046_attach()
[ 1686.184107][ T5688] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[ 1686.226244][ T5688] usb 6-1: USB disconnect, device number 59
[ 1686.594808][T23754] usb 2-1: USB disconnect, device number 80
[ 1686.595830][T23754] radio-raremono 2-1:0.35: Thanko's Raremono disconnected
[ 1687.147696][T29428] kvm: pic: non byte write
[ 1687.383954][T29436] input: syz0 as /devices/virtual/input/input128
[ 1687.649624][T29439] socket: no more sockets
[ 1688.364291][T29451] netlink: 'syz.6.6947': attribute type 1 has an invalid length.
[ 1688.413723][T29455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1688.577937][T29459] loop4: detected capacity change from 0 to 7
[ 1688.598115][T29459] Dev loop4: unable to read RDB block 7
[ 1688.598138][T29459]  loop4: AHDI p2 p3
[ 1688.598151][T29459] loop4: partition table partially beyond EOD, truncated
[ 1688.600428][T29459] loop4: p2 start 1459748864 is beyond EOD, truncated
[ 1688.612741][T29451] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1688.868617][T29468] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6955'.
[ 1689.012303][T23754] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1689.173108][T23754] usb 6-1: New USB device found: idVendor=0bda, idProduct=0129, bcdDevice=1.00
[ 1689.175367][T23754] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1689.175403][T23754] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1689.175430][T23754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1689.706224][T23754] rtsx_usb 6-1:1.0: probe with driver rtsx_usb failed with error -71
[ 1689.726159][T15199] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1689.756840][T23754] usb 6-1: USB disconnect, device number 60
[ 1689.892648][T15199] usb 4-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00
[ 1689.894116][T15199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1689.894136][T15199] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1689.894150][T15199] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1689.894176][T15199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1689.897252][T15199] usb 4-1: config 0 descriptor??
[ 1689.969983][T29479] tun0: tun_chr_ioctl cmd 1074025677
[ 1689.970110][T29479] tun0: linktype set to 774
[ 1690.323068][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.323095][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.323111][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.323134][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.323158][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.323184][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.323201][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.323217][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.323232][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.323277][T15199] plantronics 0003:047F:FFFF.0043: unknown main item tag 0x0
[ 1690.422034][T15199] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1690.513589][T29476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1690.524399][T29476] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1690.545461][T29476] input input129: cannot allocate more than FF_MAX_EFFECTS effects
[ 1691.257836][T24806] usb 4-1: USB disconnect, device number 69
[ 1691.994566][T24806] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1692.143652][T24806] usb 4-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00
[ 1692.157289][T24806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1692.382262][T29519] tun0: tun_chr_ioctl cmd 1074025677
[ 1692.382410][T29519] tun0: linktype set to 774
[ 1692.499131][T24806] usb 4-1: Firmware version (0.0) predates our first public release.
[ 1692.499152][T24806] usb 4-1: Please update to version 0.2 or newer
[ 1692.726821][T24806] usb 4-1: USB disconnect, device number 70
[ 1693.070190][T29530] FAULT_INJECTION: forcing a failure.
[ 1693.070190][T29530] name failslab, interval 1, probability 0, space 0, times 0
[ 1693.070231][T29530] CPU: 1 UID: 0 PID: 29530 Comm: syz.1.6973 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1693.070260][T29530] Tainted: [L]=SOFTLOCKUP
[ 1693.070269][T29530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1693.070282][T29530] Call Trace:
[ 1693.070291][T29530]  <TASK>
[ 1693.070302][T29530]  dump_stack_lvl+0xe8/0x150
[ 1693.070343][T29530]  should_fail_ex+0x410/0x560
[ 1693.070377][T29530]  ? dup_task_struct+0x52/0xa00
[ 1693.070406][T29530]  should_failslab+0xa8/0x100
[ 1693.070436][T29530]  ? dup_task_struct+0x52/0xa00
[ 1693.070461][T29530]  kmem_cache_alloc_node_noprof+0x9c/0x600
[ 1693.070488][T29530]  ? dup_task_struct+0x52/0xa00
[ 1693.070523][T29530]  dup_task_struct+0x52/0xa00
[ 1693.070552][T29530]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1693.070580][T29530]  copy_process+0x7ea/0x44b0
[ 1693.070640][T29530]  ? rcu_is_watching+0x16/0xb0
[ 1693.070680][T29530]  ? __pfx_copy_process+0x10/0x10
[ 1693.070718][T29530]  ? mutex_init_lockdep+0xdf/0x110
[ 1693.070751][T29530]  vhost_task_create+0x1f9/0x380
[ 1693.070802][T29530]  ? __pfx_vhost_run_work_list+0x10/0x10
[ 1693.070887][T29530]  ? __pfx_vhost_worker_killed+0x10/0x10
[ 1693.070911][T29530]  ? __pfx_vhost_task_create+0x10/0x10
[ 1693.070947][T29530]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1693.070984][T29530]  ? snprintf+0xe8/0x140
[ 1693.071019][T29530]  vhost_task_worker_create+0x94/0x290
[ 1693.071042][T29530]  ? __pfx_snprintf+0x10/0x10
[ 1693.071073][T29530]  ? __pfx_vhost_task_worker_create+0x10/0x10
[ 1693.071101][T29530]  ? mutex_init_lockdep+0xdf/0x110
[ 1693.071135][T29530]  vhost_worker_create+0x245/0x310
[ 1693.071191][T29530]  ? trace_kmalloc+0x2a/0xf0
[ 1693.071215][T29530]  ? __pfx_vhost_worker_create+0x10/0x10
[ 1693.071246][T29530]  ? __kmalloc_noprof+0x1a6/0x710
[ 1693.071267][T29530]  ? vhost_dev_set_owner+0x316/0xb00
[ 1693.071303][T29530]  vhost_dev_set_owner+0x716/0xb00
[ 1693.071348][T29530]  vhost_net_ioctl+0x8ff/0x17e0
[ 1693.071416][T29530]  ? __pfx_vhost_net_ioctl+0x10/0x10
[ 1693.071469][T29530]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1693.071498][T29530]  ? __pfx_vhost_net_ioctl+0x10/0x10
[ 1693.071527][T29530]  __se_sys_ioctl+0xfc/0x170
[ 1693.071558][T29530]  do_syscall_64+0x166/0x520
[ 1693.071582][T29530]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1693.071605][T29530]  ? clear_bhb_loop+0x70/0xc0
[ 1693.071632][T29530]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1693.071653][T29530] RIP: 0033:0x7f893479f559
[ 1693.071675][T29530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1693.071693][T29530] RSP: 002b:00007f89329f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1693.071718][T29530] RAX: ffffffffffffffda RBX: 00007f8934a26180 RCX: 00007f893479f559
[ 1693.071734][T29530] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005
[ 1693.071748][T29530] RBP: 00007f89329f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1693.071762][T29530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1693.071785][T29530] R13: 00007f8934a26218 R14: 00007f8934a26180 R15: 00007f8934b4fa48
[ 1693.071822][T29530]  </TASK>
[ 1693.728440][T29536] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1693.744285][T29539] program syz.4.6978 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1694.114876][T15199] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1694.211822][ T5702] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1694.275783][T15199] usb 4-1: Using ep0 maxpacket: 8
[ 1694.283665][T15199] usb 4-1: New USB device found: idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1694.285774][T15199] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1694.337946][T15199] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1694.337967][T15199] pvrusb2: **********
[ 1694.337976][T15199] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1694.337989][T15199] pvrusb2: Important functionality might not be entirely working.
[ 1694.338000][T15199] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1694.338011][T15199] pvrusb2: **********
[ 1694.365728][ T5702] usb 5-1: Using ep0 maxpacket: 16
[ 1694.366554][ T5702] usb 5-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73
[ 1694.376481][ T5702] usb 5-1: config 0 has an invalid interface number: 34 but max is 0
[ 1694.376511][ T5702] usb 5-1: config 0 has no interface number 0
[ 1694.376553][ T5702] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[ 1694.376579][ T5702] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[ 1694.415021][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1694.415042][ T5702] usb 5-1: Product: syz
[ 1694.415051][ T5702] usb 5-1: Manufacturer: syz
[ 1694.415060][ T5702] usb 5-1: SerialNumber: syz
[ 1694.482941][ T5702] usb 5-1: config 0 descriptor??
[ 1694.484009][T29544] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1694.484277][T29544] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1694.542302][ T2355] pvrusb2: Invalid write control endpoint
[ 1694.542322][ T2355] pvrusb2: Device being rendered inoperable
[ 1694.546632][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1694.603931][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1694.625873][T15199] usb 4-1: USB disconnect, device number 71
[ 1694.688439][T29544] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1694.688533][T29544] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1694.892681][ T5702] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[ 1694.892845][ T5702] asix 5-1:0.34: probe with driver asix failed with error -61
[ 1695.068948][T29553] tun0: tun_chr_ioctl cmd 1074025677
[ 1695.069068][T29553] tun0: linktype set to 774
[ 1695.320651][T29561] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6986'.
[ 1695.335684][T29560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6986'.
[ 1696.329726][T29581] tun0: tun_chr_ioctl cmd 1074025677
[ 1696.329824][T29581] tun0: linktype set to 774
[ 1696.582480][T29587] FAULT_INJECTION: forcing a failure.
[ 1696.582480][T29587] name failslab, interval 1, probability 0, space 0, times 0
[ 1696.662915][T29587] CPU: 0 UID: 0 PID: 29587 Comm: syz.3.6994 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1696.662951][T29587] Tainted: [L]=SOFTLOCKUP
[ 1696.662959][T29587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1696.662972][T29587] Call Trace:
[ 1696.662980][T29587]  <TASK>
[ 1696.662990][T29587]  dump_stack_lvl+0xe8/0x150
[ 1696.663029][T29587]  should_fail_ex+0x410/0x560
[ 1696.663091][T29587]  should_failslab+0xa8/0x100
[ 1696.663132][T29587]  __kmalloc_cache_node_noprof+0xa5/0x620
[ 1696.663161][T29587]  ? __get_vm_area_node+0x155/0x2f0
[ 1696.663192][T29587]  ? __get_vm_area_node+0x155/0x2f0
[ 1696.663237][T29587]  __get_vm_area_node+0x155/0x2f0
[ 1696.663276][T29587]  __vmalloc_node_range_noprof+0x36e/0x16f0
[ 1696.663300][T29587]  ? copy_process+0x7ea/0x44b0
[ 1696.663352][T29587]  ? __memcg_slab_post_alloc_hook+0x46f/0xdb0
[ 1696.663392][T29587]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1696.663415][T29587]  ? dup_task_struct+0x52/0xa00
[ 1696.663441][T29587]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1696.663468][T29587]  ? memcpy_and_pad+0x48/0x80
[ 1696.663496][T29587]  __vmalloc_node_noprof+0xc2/0x100
[ 1696.663517][T29587]  ? copy_process+0x7ea/0x44b0
[ 1696.663541][T29587]  ? copy_process+0x7ea/0x44b0
[ 1696.663569][T29587]  dup_task_struct+0x2c6/0xa00
[ 1696.663593][T29587]  copy_process+0x7ea/0x44b0
[ 1696.663631][T29587]  ? rcu_is_watching+0x16/0xb0
[ 1696.663652][T29587]  ? __pfx_copy_process+0x10/0x10
[ 1696.663674][T29587]  ? mutex_init_lockdep+0xdf/0x110
[ 1696.663695][T29587]  vhost_task_create+0x1f9/0x380
[ 1696.663711][T29587]  ? __pfx_vhost_run_work_list+0x10/0x10
[ 1696.663725][T29587]  ? __pfx_vhost_worker_killed+0x10/0x10
[ 1696.663739][T29587]  ? __pfx_vhost_task_create+0x10/0x10
[ 1696.663759][T29587]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1696.663789][T29587]  ? snprintf+0xe8/0x140
[ 1696.663811][T29587]  vhost_task_worker_create+0x94/0x290
[ 1696.663825][T29587]  ? __pfx_snprintf+0x10/0x10
[ 1696.663844][T29587]  ? __pfx_vhost_task_worker_create+0x10/0x10
[ 1696.663861][T29587]  ? mutex_init_lockdep+0xdf/0x110
[ 1696.663880][T29587]  vhost_worker_create+0x245/0x310
[ 1696.663899][T29587]  ? trace_kmalloc+0x2a/0xf0
[ 1696.663912][T29587]  ? __pfx_vhost_worker_create+0x10/0x10
[ 1696.663932][T29587]  ? __kmalloc_noprof+0x1a6/0x710
[ 1696.663945][T29587]  ? vhost_dev_set_owner+0x316/0xb00
[ 1696.663967][T29587]  vhost_dev_set_owner+0x716/0xb00
[ 1696.663995][T29587]  vhost_net_ioctl+0x8ff/0x17e0
[ 1696.664019][T29587]  ? __pfx_vhost_net_ioctl+0x10/0x10
[ 1696.664050][T29587]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1696.664067][T29587]  ? __pfx_vhost_net_ioctl+0x10/0x10
[ 1696.664086][T29587]  __se_sys_ioctl+0xfc/0x170
[ 1696.664104][T29587]  do_syscall_64+0x166/0x520
[ 1696.664119][T29587]  ? trace_irq_disable+0x3b/0x140
[ 1696.664135][T29587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1696.664148][T29587]  ? clear_bhb_loop+0x70/0xc0
[ 1696.664164][T29587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1696.664177][T29587] RIP: 0033:0x7f3bbd99f559
[ 1696.664191][T29587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1696.664202][T29587] RSP: 002b:00007f3bbe7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1696.664218][T29587] RAX: ffffffffffffffda RBX: 00007f3bbdc26180 RCX: 00007f3bbd99f559
[ 1696.664228][T29587] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005
[ 1696.664237][T29587] RBP: 00007f3bbe7a7090 R08: 0000000000000000 R09: 0000000000000000
[ 1696.664245][T29587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1696.664253][T29587] R13: 00007f3bbdc26218 R14: 00007f3bbdc26180 R15: 00007f3bbdd4fa48
[ 1696.664274][T29587]  </TASK>
[ 1696.666550][T29587] syz.3.6994: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1696.818510][T29587] CPU: 0 UID: 0 PID: 29587 Comm: syz.3.6994 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1696.818543][T29587] Tainted: [L]=SOFTLOCKUP
[ 1696.818550][T29587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1696.818563][T29587] Call Trace:
[ 1696.818571][T29587]  <TASK>
[ 1696.818580][T29587]  dump_stack_lvl+0xe8/0x150
[ 1696.818617][T29587]  warn_alloc+0x24d/0x270
[ 1696.818639][T29587]  ? __kasan_kmalloc+0x22/0xb0
[ 1696.818667][T29587]  ? __pfx_warn_alloc+0x10/0x10
[ 1696.818687][T29587]  ? __get_vm_area_node+0x155/0x2f0
[ 1696.818723][T29587]  ? __get_vm_area_node+0x2a9/0x2f0
[ 1696.818779][T29587]  __vmalloc_node_range_noprof+0x396/0x16f0
[ 1696.818851][T29587]  ? __memcg_slab_post_alloc_hook+0x46f/0xdb0
[ 1696.818895][T29587]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1696.818915][T29587]  ? dup_task_struct+0x52/0xa00
[ 1696.818939][T29587]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1696.818960][T29587]  ? memcpy_and_pad+0x48/0x80
[ 1696.818985][T29587]  __vmalloc_node_noprof+0xc2/0x100
[ 1696.819005][T29587]  ? copy_process+0x7ea/0x44b0
[ 1696.819027][T29587]  ? copy_process+0x7ea/0x44b0
[ 1696.819055][T29587]  dup_task_struct+0x2c6/0xa00
[ 1696.819095][T29587]  copy_process+0x7ea/0x44b0
[ 1696.819149][T29587]  ? rcu_is_watching+0x16/0xb0
[ 1696.819180][T29587]  ? __pfx_copy_process+0x10/0x10
[ 1696.819213][T29587]  ? mutex_init_lockdep+0xdf/0x110
[ 1696.819243][T29587]  vhost_task_create+0x1f9/0x380
[ 1696.819274][T29587]  ? __pfx_vhost_run_work_list+0x10/0x10
[ 1696.819295][T29587]  ? __pfx_vhost_worker_killed+0x10/0x10
[ 1696.819316][T29587]  ? __pfx_vhost_task_create+0x10/0x10
[ 1696.819348][T29587]  ? __pfx_vhost_task_fn+0x10/0x10
[ 1696.819383][T29587]  ? snprintf+0xe8/0x140
[ 1696.819414][T29587]  vhost_task_worker_create+0x94/0x290
[ 1696.819436][T29587]  ? __pfx_snprintf+0x10/0x10
[ 1696.819463][T29587]  ? __pfx_vhost_task_worker_create+0x10/0x10
[ 1696.819490][T29587]  ? mutex_init_lockdep+0xdf/0x110
[ 1696.819536][T29587]  vhost_worker_create+0x245/0x310
[ 1696.819564][T29587]  ? trace_kmalloc+0x2a/0xf0
[ 1696.819580][T29587]  ? __pfx_vhost_worker_create+0x10/0x10
[ 1696.819599][T29587]  ? __kmalloc_noprof+0x1a6/0x710
[ 1696.819612][T29587]  ? vhost_dev_set_owner+0x316/0xb00
[ 1696.819634][T29587]  vhost_dev_set_owner+0x716/0xb00
[ 1696.819661][T29587]  vhost_net_ioctl+0x8ff/0x17e0
[ 1696.819686][T29587]  ? __pfx_vhost_net_ioctl+0x10/0x10
[ 1696.819717][T29587]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1696.819735][T29587]  ? __pfx_vhost_net_ioctl+0x10/0x10
[ 1696.819753][T29587]  __se_sys_ioctl+0xfc/0x170
[ 1696.819780][T29587]  do_syscall_64+0x166/0x520
[ 1696.819794][T29587]  ? trace_irq_disable+0x3b/0x140
[ 1696.819818][T29587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1696.819831][T29587]  ? clear_bhb_loop+0x70/0xc0
[ 1696.819847][T29587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1696.819860][T29587] RIP: 0033:0x7f3bbd99f559
[ 1696.819874][T29587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1696.819885][T29587] RSP: 002b:00007f3bbe7a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1696.819900][T29587] RAX: ffffffffffffffda RBX: 00007f3bbdc26180 RCX: 00007f3bbd99f559
[ 1696.819912][T29587] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000005
[ 1696.819922][T29587] RBP: 00007f3bbe7a7090 R08: 0000000000000000 R09: 0000000000000000
[ 1696.819930][T29587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1696.819941][T29587] R13: 00007f3bbdc26218 R14: 00007f3bbdc26180 R15: 00007f3bbdd4fa48
[ 1696.819961][T29587]  </TASK>
[ 1696.867789][T29587] Mem-Info:
[ 1696.867807][T29587] active_anon:14513 inactive_anon:6 isolated_anon:0
[ 1696.867807][T29587]  active_file:3221 inactive_file:25249 isolated_file:0
[ 1696.867807][T29587]  unevictable:0 dirty:363 writeback:0
[ 1696.867807][T29587]  slab_reclaimable:8769 slab_unreclaimable:116518
[ 1696.867807][T29587]  mapped:36914 shmem:8144 pagetables:1919
[ 1696.867807][T29587]  sec_pagetables:0 bounce:0
[ 1696.867807][T29587]  kernel_misc_reclaimable:0
[ 1696.867807][T29587]  free:1268940 free_pcp:19219 free_cma:0
[ 1696.867864][T29587] Node 0 active_anon:58052kB inactive_anon:24kB active_file:12884kB inactive_file:100680kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:147476kB dirty:1452kB writeback:0kB shmem:32576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16128kB pagetables:7516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1696.867914][T29587] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:180kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[ 1696.867968][T29587] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1696.868031][T29587] lowmem_reserve[]: 0 2464 2465 2465 2465
[ 1696.868067][T29587] Node 0 DMA32 free:1116572kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:58052kB inactive_anon:24kB active_file:12884kB inactive_file:100680kB unevictable:0kB writepending:1460kB zspages:0kB present:3129332kB managed:2523360kB mlocked:0kB bounce:0kB free_pcp:76088kB local_pcp:25572kB free_cma:0kB
[ 1696.868129][T29587] lowmem_reserve[]: 0 0 1 1 1
[ 1696.868161][T29587] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1668kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB
[ 1696.868213][T29587] lowmem_reserve[]: 0 0 0 0 0
[ 1696.868245][T29587] Node 1 Normal free:3943808kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:776kB local_pcp:0kB free_cma:0kB
[ 1696.868297][T29587] lowmem_reserve[]: 0 0 0 0 0
[ 1696.868330][T29587] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1696.868477][T29587] Node 0 DMA32: 22798*4kB (UME) 14993*8kB (UME) 7664*16kB (UME) 2843*32kB (UME) 650*64kB (UME) 174*128kB (UME) 87*256kB (UME) 31*512kB (UME) 14*1024kB (UM) 11*2048kB (UME) 135*4096kB (UM) = 1116576kB
[ 1696.869109][T29587] Node 0 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[ 1696.869215][T29587] Node 1 Normal: 12*4kB (UM) 12*8kB (UM) 19*16kB (UM) 14*32kB (UM) 10*64kB (UM) 5*128kB (UM) 7*256kB (UM) 5*512kB (UM) 7*1024kB (UM) 9*2048kB (UM) 955*4096kB (UM) = 3943808kB
[ 1696.869364][T29587] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1696.869380][T29587] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=1 hugepages_size=2048kB
[ 1696.869396][T29587] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1696.869411][T29587] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 1696.869426][T29587] 36625 total pagecache pages
[ 1696.869434][T29587] 1 pages in swap cache
[ 1696.869441][T29587] Free swap  = 124992kB
[ 1696.869449][T29587] Total swap = 124996kB
[ 1696.869457][T29587] 2097051 pages RAM
[ 1696.869465][T29587] 0 pages HighMem/MovableOnly
[ 1696.869472][T29587] 434178 pages reserved
[ 1696.869480][T29587] 0 pages cma reserved
[ 1696.944530][T15199] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1697.132975][T15199] usb 6-1: Using ep0 maxpacket: 32
[ 1697.133730][T15199] usb 6-1: New USB device found: idVendor=0545, idProduct=800d, bcdDevice=3.0a
[ 1697.139548][T15199] usb 6-1: config 7 has an invalid interface number: 160 but max is 0
[ 1697.139576][T15199] usb 6-1: config 7 has no interface number 0
[ 1697.139620][T15199] usb 6-1: config 7 interface 160 has no altsetting 0
[ 1697.167729][T15199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1697.167758][T15199] usb 6-1: Product: syz
[ 1697.167772][T15199] usb 6-1: Manufacturer: syz
[ 1697.167786][T15199] usb 6-1: SerialNumber: syz
[ 1698.023289][T23754] usb 5-1: USB disconnect, device number 62
[ 1698.051186][T29582] debugfs: out of free dentries, can not create file 'pf_mmio_spte_created'
[ 1698.414312][T15199] usb 6-1: USB disconnect, device number 61
[ 1698.716590][T29599] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[ 1699.132575][T15199] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[ 1699.311677][T15199] usb 2-1: Using ep0 maxpacket: 32
[ 1699.321560][T15199] usb 2-1: New USB device found: idVendor=8086, idProduct=9500, bcdDevice=93.d8
[ 1699.335546][T15199] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1699.335576][T15199] usb 2-1: config 0 has no interface number 0
[ 1699.374589][T15199] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1699.374623][T15199] usb 2-1: Product: syz
[ 1699.374639][T15199] usb 2-1: Manufacturer: syz
[ 1699.374653][T15199] usb 2-1: SerialNumber: syz
[ 1699.429220][T15199] usb 2-1: config 0 descriptor??
[ 1699.463114][T15199] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1699.463137][T15199] usb 2-1: selecting invalid altsetting 1
[ 1699.463147][T15199] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1699.503942][T15199] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1699.504155][T15199] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1699.504185][T15199] usb 2-1: media controller created
[ 1699.600004][T15199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1700.811068][T15199] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[ 1700.812169][T15199] zl10353_read_register: readreg error (reg=127, ret==-110)
[ 1701.162068][ T5688] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1701.189587][T29658] tun0: tun_chr_ioctl cmd 1074025677
[ 1701.189675][T29658] tun0: linktype set to 774
[ 1701.311964][ T5688] usb 5-1: Using ep0 maxpacket: 8
[ 1701.312746][ T5688] usb 5-1: New USB device found: idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[ 1701.314245][ T5688] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[ 1701.314266][ T5688] usb 5-1: config 0 has no interface number 0
[ 1701.317739][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1701.317763][ T5688] usb 5-1: Product: syz
[ 1701.317777][ T5688] usb 5-1: Manufacturer: syz
[ 1701.317791][ T5688] usb 5-1: SerialNumber: syz
[ 1701.321064][ T5688] usb 5-1: config 0 descriptor??
[ 1701.351278][ T5688] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22
[ 1701.889852][T29656] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1701.898911][T29656] 8021q: adding VLAN 0 to HW filter on device team0
[ 1701.969886][T29656] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1702.001157][T29667] input: syz0 as /devices/virtual/input/input131
[ 1702.064437][T15199] usb 2-1: USB disconnect, device number 81
[ 1702.507858][T29656] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1702.551199][T29656] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1702.657835][T29656] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1702.657864][T29656] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1702.743449][T29656] veth1_vlan: left promiscuous mode
[ 1702.776324][T29656] veth0_vlan: left promiscuous mode
[ 1702.809542][T29656] veth0_vlan: entered promiscuous mode
[ 1702.840281][T29656] veth1_vlan: entered promiscuous mode
[ 1702.922850][T29656] veth1_macvtap: left promiscuous mode
[ 1702.923622][T29656] veth0_macvtap: left promiscuous mode
[ 1702.924309][T29656] veth0_macvtap: entered promiscuous mode
[ 1702.958055][T29656] veth1_macvtap: entered promiscuous mode
[ 1703.035536][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1703.067529][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1703.095326][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1703.116147][T29656] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1703.170395][T29656] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1703.238230][T29656] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1703.394606][  T104] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1703.394675][  T104] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1703.396741][  T104] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1703.396802][  T104] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1703.649836][T29675] syzkaller0: entered promiscuous mode
[ 1703.649855][T29675] syzkaller0: entered allmulticast mode
[ 1703.703326][T23536] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.703575][T27278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.703615][T27278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1703.860971][ T6740] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1704.068317][ T5688] usb 5-1: USB disconnect, device number 63
[ 1704.115757][T29678] loop4: detected capacity change from 0 to 7
[ 1704.137870][T29678] Dev loop4: unable to read RDB block 7
[ 1704.137895][T29678]  loop4: AHDI p2 p3
[ 1704.137910][T29678] loop4: partition table partially beyond EOD, truncated
[ 1704.138027][T29678] loop4: p2 start 1459748864 is beyond EOD, truncated
[ 1704.881402][T23754] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1704.949697][T29691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7019'.
[ 1704.953019][ T5702] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1705.031421][T23754] usb 6-1: Using ep0 maxpacket: 32
[ 1705.032379][T23754] usb 6-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[ 1705.033699][T23754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1705.043635][T23754] usb 6-1: config 0 descriptor??
[ 1705.091825][ T5702] usb 5-1: device descriptor read/64, error -71
[ 1705.107328][T23754] as10x_usb: device has been detected
[ 1705.107970][T23754] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[ 1705.156426][T23754] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[ 1705.177862][T29691] bond0: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[ 1705.246822][T29691] bond0 (unregistering): Released all slaves
[ 1705.285923][T29684] ------------[ cut here ]------------
[ 1705.285935][T29684] DEBUG_LOCKS_WARN_ON(lock->magic != lock)
[ 1705.285941][T29684] WARNING: kernel/locking/mutex.c:625 at __mutex_lock+0x132a/0x15a0, CPU#0: syz.5.7015/29684
[ 1705.308064][T29684] Modules linked in:
[ 1705.312187][T29684] CPU: 0 UID: 0 PID: 29684 Comm: syz.5.7015 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1705.323484][T29684] Tainted: [L]=SOFTLOCKUP
[ 1705.328086][T29684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1705.331956][ T5702] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1705.346417][T29684] RIP: 0010:__mutex_lock+0x1331/0x15a0
[ 1705.352206][T29684] Code: 56 9d 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 63 b8 9b 05 00 75 13 48 8d 3d b6 b7 9e 05 48 c7 c6 e0 27 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f
[ 1705.372341][T29684] RSP: 0018:ffffc90004437a60 EFLAGS: 00010246
[ 1705.378607][T29684] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[ 1705.386812][T29684] RDX: ffffc9000d729000 RSI: ffffffff8c2d27e0 RDI: ffffffff91a05650
[ 1705.394941][T29684] RBP: ffffc90004437c00 R08: ffffffff919d56f3 R09: 1ffffffff233aade
[ 1705.403044][T29684] R10: dffffc0000000000 R11: fffffbfff233aadf R12: ffff88802b636b30
[ 1705.411112][T29684] R13: 0000000000000000 R14: 1ffff92000886f60 R15: 0000000000000000
[ 1705.419486][T29684] FS:  00007f095680e6c0(0000) GS:ffff88812362d000(0000) knlGS:0000000000000000
[ 1705.428927][T29684] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1705.435845][T29684] CR2: 0000001b2ec23ffc CR3: 000000005d334000 CR4: 00000000003526f0
[ 1705.443963][T29684] Call Trace:
[ 1705.447287][T29684]  <TASK>
[ 1705.450221][T29684]  ? trace_contention_end+0x3d/0x140
[ 1705.455596][T29684]  ? __mutex_lock+0x305/0x15a0
[ 1705.460390][T29684]  ? dmx_ts_feed_set+0x330/0x560
[ 1705.465369][T29684]  ? as102_dvb_dmx_start_feed+0x70/0x290
[ 1705.471243][T29684]  ? __pfx___mutex_lock+0x10/0x10
[ 1705.476439][T29684]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1705.482225][T29684]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1705.488340][T29684]  as102_dvb_dmx_start_feed+0x70/0x290
[ 1705.493872][T29684]  dmx_ts_feed_start_filtering+0x129/0x220
[ 1705.499788][T29684]  dvb_dmxdev_filter_start+0x434/0x10d0
[ 1705.505413][T29684]  dvb_demux_do_ioctl+0x48b/0x540
[ 1705.510444][T29684]  dvb_usercopy+0x199/0x2e0
[ 1705.515010][T29684]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1705.520810][T29684]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1705.526184][T29684]  ? __fget_files+0x2a/0x420
[ 1705.530848][T29684]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1705.536486][T29684]  dvb_demux_ioctl+0x29/0x40
[ 1705.541113][T29684]  __se_sys_ioctl+0xfc/0x170
[ 1705.545944][T29684]  do_syscall_64+0x166/0x520
[ 1705.550539][T29684]  ? trace_irq_disable+0x3b/0x140
[ 1705.555721][T29684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1705.561930][T29684]  ? clear_bhb_loop+0x70/0xc0
[ 1705.566622][T29684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1705.572806][T29684] RIP: 0033:0x7f095599f559
[ 1705.577288][T29684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1705.597200][T29684] RSP: 002b:00007f095680e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1705.605888][T29684] RAX: ffffffffffffffda RBX: 00007f0955c25fa0 RCX: 00007f095599f559
[ 1705.614284][T29684] RDX: 0000200000000080 RSI: 0000000040146f2c RDI: 0000000000000004
[ 1705.622417][T29684] RBP: 00007f0955a36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1705.630402][T29684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1705.638658][T29684] R13: 00007f0955c26038 R14: 00007f0955c25fa0 R15: 00007f0955d4fa48
[ 1705.646851][T29684]  </TASK>
[ 1705.649890][T29684] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1705.657279][T29684] CPU: 0 UID: 0 PID: 29684 Comm: syz.5.7015 Tainted: G             L       syzkaller #0 PREEMPT(full) 
[ 1705.668310][T29684] Tainted: [L]=SOFTLOCKUP
[ 1705.672675][T29684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1705.682820][T29684] Call Trace:
[ 1705.686121][T29684]  <TASK>
[ 1705.689078][T29684]  vpanic+0x56d/0xa60
[ 1705.693115][T29684]  ? __pfx__printk+0x10/0x10
[ 1705.697710][T29684]  ? __pfx_vpanic+0x10/0x10
[ 1705.702266][T29684]  ? is_bpf_text_address+0x292/0x2b0
[ 1705.707655][T29684]  ? is_bpf_text_address+0x26/0x2b0
[ 1705.712848][T29684]  panic+0xc5/0xd0
[ 1705.716577][T29684]  ? __pfx_panic+0x10/0x10
[ 1705.720991][T29684]  __warn+0x315/0x4c0
[ 1705.724968][T29684]  ? __mutex_lock+0x132a/0x15a0
[ 1705.729910][T29684]  ? __mutex_lock+0x132a/0x15a0
[ 1705.734780][T29684]  __report_bug+0x276/0x570
[ 1705.739297][T29684]  ? __mutex_lock+0x132a/0x15a0
[ 1705.744187][T29684]  ? __pfx___report_bug+0x10/0x10
[ 1705.749304][T29684]  ? __lock_acquire+0x747/0x2de0
[ 1705.754350][T29684]  report_bug_entry+0x19b/0x290
[ 1705.759297][T29684]  ? __mutex_lock+0x1331/0x15a0
[ 1705.764241][T29684]  ? __mutex_lock+0x1336/0x15a0
[ 1705.769257][T29684]  handle_bug+0xce/0x200
[ 1705.773523][T29684]  exc_invalid_op+0x1a/0x50
[ 1705.778034][T29684]  asm_exc_invalid_op+0x1a/0x20
[ 1705.782970][T29684] RIP: 0010:__mutex_lock+0x1331/0x15a0
[ 1705.788440][T29684] Code: 56 9d 91 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 46 02 00 00 83 3d 63 b8 9b 05 00 75 13 48 8d 3d b6 b7 9e 05 48 c7 c6 e0 27 2d 8c <67> 48 0f b9 3a 90 e9 1d ee ff ff 90 0f 0b 90 e9 f0 f1 ff ff 90 0f
[ 1705.808332][T29684] RSP: 0018:ffffc90004437a60 EFLAGS: 00010246
[ 1705.814519][T29684] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000080000
[ 1705.822494][T29684] RDX: ffffc9000d729000 RSI: ffffffff8c2d27e0 RDI: ffffffff91a05650
[ 1705.830825][T29684] RBP: ffffc90004437c00 R08: ffffffff919d56f3 R09: 1ffffffff233aade
[ 1705.839437][T29684] R10: dffffc0000000000 R11: fffffbfff233aadf R12: ffff88802b636b30
[ 1705.847617][T29684] R13: 0000000000000000 R14: 1ffff92000886f60 R15: 0000000000000000
[ 1705.855599][T29684]  ? trace_contention_end+0x3d/0x140
[ 1705.860913][T29684]  ? __mutex_lock+0x305/0x15a0
[ 1705.865684][T29684]  ? dmx_ts_feed_set+0x330/0x560
[ 1705.870650][T29684]  ? as102_dvb_dmx_start_feed+0x70/0x290
[ 1705.876339][T29684]  ? __pfx___mutex_lock+0x10/0x10
[ 1705.881379][T29684]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1705.887057][T29684]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1705.893042][T29684]  as102_dvb_dmx_start_feed+0x70/0x290
[ 1705.898508][T29684]  dmx_ts_feed_start_filtering+0x129/0x220
[ 1705.904349][T29684]  dvb_dmxdev_filter_start+0x434/0x10d0
[ 1705.909918][T29684]  dvb_demux_do_ioctl+0x48b/0x540
[ 1705.914960][T29684]  dvb_usercopy+0x199/0x2e0
[ 1705.919460][T29684]  ? __pfx_dvb_demux_do_ioctl+0x10/0x10
[ 1705.925113][T29684]  ? __pfx_dvb_usercopy+0x10/0x10
[ 1705.930314][T29684]  ? __fget_files+0x2a/0x420
[ 1705.935093][T29684]  ? __pfx_dvb_demux_ioctl+0x10/0x10
[ 1705.940401][T29684]  dvb_demux_ioctl+0x29/0x40
[ 1705.945101][T29684]  __se_sys_ioctl+0xfc/0x170
[ 1705.949725][T29684]  do_syscall_64+0x166/0x520
[ 1705.954448][T29684]  ? trace_irq_disable+0x3b/0x140
[ 1705.959492][T29684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1705.965564][T29684]  ? clear_bhb_loop+0x70/0xc0
[ 1705.970245][T29684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1705.976141][T29684] RIP: 0033:0x7f095599f559
[ 1705.980567][T29684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1706.000283][T29684] RSP: 002b:00007f095680e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1706.008704][T29684] RAX: ffffffffffffffda RBX: 00007f0955c25fa0 RCX: 00007f095599f559
[ 1706.016838][T29684] RDX: 0000200000000080 RSI: 0000000040146f2c RDI: 0000000000000004
[ 1706.024917][T29684] RBP: 00007f0955a36b20 R08: 0000000000000000 R09: 0000000000000000
[ 1706.032981][T29684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1706.040972][T29684] R13: 00007f0955c26038 R14: 00007f0955c25fa0 R15: 00007f0955d4fa48
[ 1706.048979][T29684]  </TASK>
[ 1706.052556][T29684] Kernel Offset: disabled
[ 1706.056890][T29684] Rebooting in 86400 seconds..