last executing test programs:

13m43.35357112s ago: executing program 2 (id=1102):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1200801, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = dup(r2)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
pwrite64$ublk_bdev(r1, &(0x7f0000000180), 0x0, 0x7f)
ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000000))
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FS_IOC_GETFSUUID(r5, 0x80111500, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010101010000000000000000000600124000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x2001, 0xc, 0x2}, 0x30, 0x2)
openat$dir(0xffffffffffffff9c, 0x0, 0x204200, 0x91)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x2001, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x48, 0x32, 0x829, 0x70bd2d, 0x0, {0x0, 0x0, 0x2}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8080}, 0x20000840)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000180)={0x5, 0x1c9e, 0x2, {0x1, @vbi={0x8005, 0x0, 0x8000, 0x33363248, [0x0, 0xfffff3fc], [0x5, 0x7], 0x1}}, 0x9})

13m42.115173705s ago: executing program 2 (id=1105):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c00010a00000000fbc2989a"], 0x14}}, 0x20008000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x1000000000, 0x5, 0x41, 0x4, 0x0, 0x2004cb, 0x0, 0x8, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{0xd000, 0x80a0000, 0x8, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x6, 0xf9}, {0xffff1000, 0xdddd1000, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0xd}, {0xeeee0000, 0x6000, 0xc, 0x3, 0x7, 0xc4, 0x0, 0x1, 0x48, 0x3, 0x1, 0x9}, {0x1, 0xffff1000, 0xf, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xd}, {0x6000, 0xffff1000, 0x3, 0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x40}, {0x50000, 0x4, 0x0, 0x74, 0x5, 0x2, 0xa, 0x0, 0x0, 0x2, 0x5}, {0x0, 0xeeee8000, 0x8, 0x4, 0x0, 0x2, 0xa1, 0x20, 0x0, 0x82}, {0x0, 0x6000, 0x10, 0xfc, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x1}, {0xeeef0000, 0x3}, {0x6000, 0x400}, 0x5df8ffe3, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0xf801, 0x8000000, [0x80000002, 0x0, 0x4001]})
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe80"], 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5)
sendfile(r3, 0xffffffffffffffff, &(0x7f00000001c0)=0x1, 0x8)
connect$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, 0x4}, 0x20)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c)
sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x404c840)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r6, 0xae80, 0x0)

13m40.864810032s ago: executing program 2 (id=1112):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x1ad)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000000)={0x6, 0x0, 0x0, r0, 0x100000})
r2 = gettid()
r3 = syz_open_procfs(r2, &(0x7f0000000040)='net/llc/socket\x00')
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000680)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)

13m40.620991628s ago: executing program 2 (id=1115):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000000)=0x200000000)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0\x00', 0x81900)
write$vhost_msg_v2(r1, &(0x7f0000002800)={0x2, 0x0, {&(0x7f0000001780)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r1, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xb8, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r1, &(0x7f0000000ac0)={0x2, 0x0, {&(0x7f0000000940)=""/81, 0x51, 0x0, 0x3, 0x3}}, 0x48)
r4 = openat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc41, 0x0)
tee(r4, r4, 0x2, 0x4)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103)
r5 = inotify_init1(0x0)
inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x20000510)
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
ioctl$TIOCSPTLCK(r4, 0x40045431, &(0x7f0000000000))
r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xb3d)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local})
r8 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000080)=<r11=>0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)
ioctl$TIOCMBIC(r6, 0x5417, 0x0)

13m39.682777145s ago: executing program 2 (id=1120):
syz_open_dev$media(0x0, 0x8, 0x80c00)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0)
r2 = semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(r2, 0x0, 0x14, &(0x7f0000000000)=[0x4])
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x40000000, 0x0, 0x0, 0x0, 0x0, 0x80000100], 0x0, 0x0, 0x0}, 0xdf)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000100000400000008000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000100"/27], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x4d4, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x3, 0x0, 0x0, 0x800000000000}, {0x0, 0x1}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'ecb(blowfish)\x00'}}}]}, 0x180}}, 0x40000)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x2, 0x2c0000)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
write$binfmt_misc(r6, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0xc0, 0x1, 0x4, 0x0, 0x9})
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405668, &(0x7f0000000140)={0x9, 0x1, 0x1, "0000087aba10fdfffffbe30b51751bc53051a30000000000000016ebffffff00", 0x34565559})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0)

13m39.283603341s ago: executing program 2 (id=1123):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002ec0)={0x14, 0x7, 0x2000000}, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
mprotect(&(0x7f000015e000/0x1000)=nil, 0x1000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = fsopen(0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000380)={0x2, @vbi={0xd12, 0x7, 0x3, 0x33424752, [0x1, 0x2], [0x7fff, 0x1], 0x1}})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x4050)
fsmount(r1, 0x1, 0x86)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x4, &(0x7f0000812000/0x3000)=nil, 0x6)
ftruncate(r3, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0)
ioctl$FE_GET_FRONTEND(r2, 0x80246f4d, &(0x7f0000000100))
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd0000001000010006f6ab185b02123665ac0000", 0x58}], 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x7}, 0x7, 0x40, &(0x7f0000000280), 0x0, 0x1, 0xa, 0xbc2, 0x0, 0x8, &(0x7f0000000100)})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004082, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = io_uring_setup(0x344c, &(0x7f0000000140)={0x0, 0xbf6e, 0x0, 0x7, 0x4})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20)
dup(r5)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$nl_route(0x10, 0x3, 0x0)

13m38.673619874s ago: executing program 32 (id=1123):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$FUSE_NOTIFY_RESEND(r0, &(0x7f0000002ec0)={0x14, 0x7, 0x2000000}, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
mprotect(&(0x7f000015e000/0x1000)=nil, 0x1000, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x2)
r1 = fsopen(0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000380)={0x2, @vbi={0xd12, 0x7, 0x3, 0x33424752, [0x1, 0x2], [0x7fff, 0x1], 0x1}})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x4050)
fsmount(r1, 0x1, 0x86)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x4, &(0x7f0000812000/0x3000)=nil, 0x6)
ftruncate(r3, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0)
ioctl$FE_GET_FRONTEND(r2, 0x80246f4d, &(0x7f0000000100))
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd0000001000010006f6ab185b02123665ac0000", 0x58}], 0x1)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x7}, 0x7, 0x40, &(0x7f0000000280), 0x0, 0x1, 0xa, 0xbc2, 0x0, 0x8, &(0x7f0000000100)})
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004082, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r6 = io_uring_setup(0x344c, &(0x7f0000000140)={0x0, 0xbf6e, 0x0, 0x7, 0x4})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x113}, 0x20)
dup(r5)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$nl_route(0x10, 0x3, 0x0)

12m43.826379777s ago: executing program 3 (id=1321):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$lock(r2, 0x5, &(0x7f00000002c0)={0x2, 0x1, 0x0, 0x4})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2", @ANYRES64=r1], 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="150000003c000000060000000800000008000000", @ANYRES32, @ANYBLOB="0600000000010000000000000000000000f0ff00", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="feffffff000000080200"/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRESOCT=r0], 0x50)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)

12m40.625237799s ago: executing program 3 (id=1333):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002})
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xc8, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x48}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xa9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x73}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x81}, 0x4004800)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20129, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x58}, 0x4000010)
write(r1, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="31032bbd7000000000000900000008000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x26040001}, 0x0)

12m39.952952011s ago: executing program 3 (id=1334):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0xc, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x111}}, 0x81)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0xfc91}, {&(0x7f0000000280)="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", 0x128}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3)
unshare(0x68040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000000)="9000000018001f2fb9409b52ffff65580200be04020c060560020b0243000f00ffffff9e00c8388827a685a168d0bf47ed2345653602648dcaaf6c26c291214549f100000000000000ec0cff3959547f500f58ba86c902000f1d012e02000280160012000a009b00000000000000000000080000000eceb6b342a570f4f2e70100aba4183b003e5fa424ac4d31c4f7a1", 0x90, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r4, &(0x7f0000000480)=ANY=[@ANYRESHEX=r4, @ANYRES8=r2, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES8=r2], 0xfce)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=ANY=[@ANYBLOB="f00700001000010400"/20, @ANYBLOB="3f000000000000002c0012800b0001006970"], 0x7f0}, 0x1, 0x0, 0x0, 0x200400c0}, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r10}, 0x18)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r12=>0x0})
bind$can_j1939(r11, &(0x7f0000000100)={0x1d, r12}, 0x18)
connect$can_j1939(r11, &(0x7f0000000140)={0x1d, r12}, 0x18)
sendmsg$can_j1939(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0)

12m37.933132645s ago: executing program 3 (id=1343):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
fcntl$lock(r2, 0x5, &(0x7f00000002c0)={0x2, 0x1, 0x0, 0x4})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_usb_connect(0x0, 0x371, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2", @ANYRES64=r1], 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffe, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000001c0)={@remote}, 0x14)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = fsopen(&(0x7f0000000100)='binder\x00', 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200), 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="150000003c000000060000000800000008000000", @ANYRES32, @ANYBLOB="0600000000010000000000000000000000f0ff00", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="feffffff000000080200"/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRESOCT=r0], 0x50)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)

12m34.761863845s ago: executing program 3 (id=1357):
r0 = gettid()
fspick(0xffffffffffffffff, 0x0, 0x1)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r0})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000004)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
readv(r1, &(0x7f0000000040)=[{0x0}], 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x84}, {0x6, 0x0, 0x0, 0x7fff0000}]})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x84}, {0x6, 0x0, 0x0, 0x7fff0000}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r2, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r3, 0x8008af26, &(0x7f00000000c0))
syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = socket$inet6(0xa, 0x2, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
write$tun(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf003060", @ANYRES64=r5], 0xb2)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
landlock_restrict_self(r2, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r4, 0x4008941a, &(0x7f0000000100)=0x2)
landlock_restrict_self(r2, 0xa)
landlock_create_ruleset(&(0x7f00000001c0)={0x2fbd, 0x1}, 0x18, 0x0)

12m33.946423541s ago: executing program 3 (id=1364):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00ffe300", "717f90602f8ddfad5c4117ec00000000080000000000000000004000", 0x800200})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time={0xfff, 0xd}, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c)
socket(0xa, 0x3, 0xff)
syz_io_uring_setup(0x20f02, &(0x7f00000007c0)={0x0, 0xcc, 0x10000, 0x2, 0x10000054}, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000000c0))
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000002ad00c60000006001500020000729600168010"], 0x38}}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
close(0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000006000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020}, 0xfffffffffffffcd6)
sendmsg$netlink(r2, 0x0, 0x14)
openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0xa, 0x400, 0x0})
ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x301400, 0x4e)
syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)

12m18.229124191s ago: executing program 33 (id=1364):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00ffe300", "717f90602f8ddfad5c4117ec00000000080000000000000000004000", 0x800200})
write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time={0xfff, 0xd}, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0x1c)
socket(0xa, 0x3, 0xff)
syz_io_uring_setup(0x20f02, &(0x7f00000007c0)={0x0, 0xcc, 0x10000, 0x2, 0x10000054}, &(0x7f0000000140), &(0x7f0000000080), &(0x7f00000000c0))
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$MAP_CREATE(0x300000000000000, 0x0, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d00000000000000000200000000002ad00c60000006001500020000729600168010"], 0x38}}, 0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
close(0xffffffffffffffff)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1, @ANYRESHEX, @ANYBLOB=',rootmode=0000000000000000006000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f0000001280)={0x2020}, 0xfffffffffffffcd6)
sendmsg$netlink(r2, 0x0, 0x14)
openat$sndseq(0xffffff9c, &(0x7f0000001240), 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0xa, 0x400, 0x0})
ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x301400, 0x4e)
syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0)

7m44.284557075s ago: executing program 4 (id=2674):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSPASS(r1, 0x40087447, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0xce}]})
pwritev(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)='\x00!', 0x2}], 0x1, 0x1000000, 0x0)
r2 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x184, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0xfc, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc, 0x0, 0x0, 0x64}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_PROTO_DOWN={0x5}, @IFLA_IFALIASn={0x4}, @IFLA_AF_SPEC={0x54, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x6, 0x0, 0x0, 0xca}, {0x8, 0x9, 0x0, 0x0, 0x9}, {0x8, 0x1a, 0x0, 0x0, 0x9}]}}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x17, 0x0, 0x0, 0x8}, {0x8, 0x2, 0x0, 0x0, 0x2}, {0x8, 0x16, 0x0, 0x0, 0x326}]}}]}]}, 0x184}}, 0x0)

7m42.688450527s ago: executing program 4 (id=2678):
r0 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r0, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
syz_usb_connect(0x5, 0x7a0, &(0x7f0000001200)=ANY=[@ANYBLOB="12011001df382540cd0c990095bd0102030109028e0703020910000904"], 0x0)

7m41.437772531s ago: executing program 4 (id=2688):
r0 = syz_open_dev$vbi(&(0x7f0000000140), 0x1, 0x2)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)) (async)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080))
bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0x6, 0x0, 0x0, 0x11, 0x5, 0x3}, @typedef={0x0, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x5f, 0x30]}}, &(0x7f00000003c0)=""/70, 0x38, 0x46, 0x0, 0x2}, 0x28)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5) (async)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}, @TCA_TBF_RATE64={0xc, 0x4, 0xa1998c3793c5815e}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$kcm(0x11, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94)
io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async)
io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0)
pwritev2(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)="5af84fef9de581d9182ff80d6f", 0xd}, {&(0x7f0000000240)="9dd2f9d40f97385d817c359007aab8269ecdbfe977d812905c7984815a494b8cd544c9cc4e4d38843743893945bd84bdbb4eab62692812c6dd7c145d19a76d5de4ade8f3e65bf6c57234ad443fe1a68e9f749912ee0a895f156fcc27b6d5a2f8783f82933ef1c4b5c58d29ff06a00d7ccc40", 0x72}, {&(0x7f0000000700)="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", 0x122}, {&(0x7f0000000340)="01f61c1b6623027a3df687156bbe07654700dd4e", 0x14}, {&(0x7f0000000640)="9ee00f9ad57451a9b85c7c5b774ac9f8f09a9603e4fd82ec5588e2b58b3e641eb8b7614cb06b6be12d564115164a2fee2ea6e6d56ccd4507517e57d00626e2f17d44a255dad1d671abbd3e607fd78c79faba83d0a6e1dd947b255d745519825b1105141bb4b243bd4082b3c7b06de813630509326ea1a9adb8613cfe04ed6df2cebf23", 0x83}, {&(0x7f0000000440)="1869e6a8501f86e16447f50232aa56cfb744", 0xfffffffffffffe6a}, {&(0x7f0000000480)="01a9c7fb64df44263bee9680be77e5b0e4bbece2f3a5966a4e2c573dae07233351423ce5e4", 0x25}, {&(0x7f00000004c0)="5a1a83f74c621433dd3cf6b483f29f51fae3832e83ef8a6dfe97a9d93232dab4d69a448d7e0f3a86e674ffd7e1520e2048bfdd1c1f5c2cc7dfe54b7825ec3b6156328a8b5743b30994ae147336bdd0077874e30d8fe4ba63af97c5d73ccf38afc0fcc854e9faa75d26ce9c4baac3ac7da9f95b2cf1d6691870914dac09e4c600ba0ff10327cc1f91d9bd5f69505ee9b74027d4a6e609e31ac0ddb5689423b2e1229d66ca556c8eb6b9edd99bdca55d91ea607d7f910b7906eb0b3aa72dd1e8c2c5801a0412d5cb281a7a184b87993c1c076cff06fec4dd6ec2533426a428", 0xde}], 0x8, 0x3, 0x100000, 0x0) (async)
pwritev2(r2, &(0x7f0000000600)=[{&(0x7f00000002c0)="5af84fef9de581d9182ff80d6f", 0xd}, {&(0x7f0000000240)="9dd2f9d40f97385d817c359007aab8269ecdbfe977d812905c7984815a494b8cd544c9cc4e4d38843743893945bd84bdbb4eab62692812c6dd7c145d19a76d5de4ade8f3e65bf6c57234ad443fe1a68e9f749912ee0a895f156fcc27b6d5a2f8783f82933ef1c4b5c58d29ff06a00d7ccc40", 0x72}, {&(0x7f0000000700)="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", 0x122}, {&(0x7f0000000340)="01f61c1b6623027a3df687156bbe07654700dd4e", 0x14}, {&(0x7f0000000640)="9ee00f9ad57451a9b85c7c5b774ac9f8f09a9603e4fd82ec5588e2b58b3e641eb8b7614cb06b6be12d564115164a2fee2ea6e6d56ccd4507517e57d00626e2f17d44a255dad1d671abbd3e607fd78c79faba83d0a6e1dd947b255d745519825b1105141bb4b243bd4082b3c7b06de813630509326ea1a9adb8613cfe04ed6df2cebf23", 0x83}, {&(0x7f0000000440)="1869e6a8501f86e16447f50232aa56cfb744", 0xfffffffffffffe6a}, {&(0x7f0000000480)="01a9c7fb64df44263bee9680be77e5b0e4bbece2f3a5966a4e2c573dae07233351423ce5e4", 0x25}, {&(0x7f00000004c0)="5a1a83f74c621433dd3cf6b483f29f51fae3832e83ef8a6dfe97a9d93232dab4d69a448d7e0f3a86e674ffd7e1520e2048bfdd1c1f5c2cc7dfe54b7825ec3b6156328a8b5743b30994ae147336bdd0077874e30d8fe4ba63af97c5d73ccf38afc0fcc854e9faa75d26ce9c4baac3ac7da9f95b2cf1d6691870914dac09e4c600ba0ff10327cc1f91d9bd5f69505ee9b74027d4a6e609e31ac0ddb5689423b2e1229d66ca556c8eb6b9edd99bdca55d91ea607d7f910b7906eb0b3aa72dd1e8c2c5801a0412d5cb281a7a184b87993c1c076cff06fec4dd6ec2533426a428", 0xde}], 0x8, 0x3, 0x100000, 0x0)
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff}, 0x84800)
ioctl$KVM_CREATE_VM(r13, 0xae01, 0x3e)

7m41.326362311s ago: executing program 4 (id=2690):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x0, 0x10000, 0x5, 0x0, 0x0, 0x0})
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', r2, 0x0, 0x41)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
writev(0xffffffffffffffff, 0x0, 0x0)
r5 = syz_open_dev$evdev(&(0x7f000001fa80), 0x0, 0x3f)
ioctl$EVIOCSCLOCKID(r5, 0x40084504, &(0x7f0000ffcffc))
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r7, 0x1)
r8 = open(&(0x7f0000000300)='.\x00', 0x2800, 0x0)
flock(r8, 0x6)
sendmsg$inet_sctp(r6, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e24, @rand_addr=0x5}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='^', 0x1}], 0x1, 0x0, 0x0, 0x20004811}, 0x0)
r9 = dup(r6)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x84, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x4}}, 0x651, 0xd}, 0x90)
move_mount(r3, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x220)
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xfffffffe}, 0x1)
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f00000000c0)={0x1, 0x5, 0x1, '\x00', 0x4388}, 0x1)
execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)={[&(0x7f00000001c0)='/+(\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='^\x00', &(0x7f00000002c0)='\x00']}, &(0x7f0000000400))
io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000140)={0x9, 0x9, 0x0, '\x00', 0x1}, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@getnexthop={0x1c, 0x6a, 0x501, 0x70bd26, 0x0, {}, [@NHA_GROUPS={0x4}]}, 0x1c}}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)

7m40.153996644s ago: executing program 4 (id=2695):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
ftruncate(r0, 0xc17a)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r1)
sched_setattr(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x1, 0x80)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0)
mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000000))

7m39.858411513s ago: executing program 4 (id=2696):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
get_mempolicy(0x0, &(0x7f0000000080), 0x200919, &(0x7f00001f8000/0x3000)=nil, 0xc)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xb3c6}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r5, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fanotify_mark(r5, 0x80, 0x8, 0xffffffffffffffff, 0x0)
ioctl$NILFS_IOCTL_GET_CPINFO(r5, 0x80186e82, &(0x7f0000000140)={0x0, 0x0, 0x38, 0x1, 0x1ff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000340)=@deltfilter={0x994, 0x2d, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb, 0xfff1}, {0xf, 0xa}, {0x7, 0x8}}, [@f_rsvp6={{0xa}, {0x964, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x6, 0x1ff}, {0x5, 0x2}, 0x29, 0x7f, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x20b9, 0x3fc0da64, 0x7}, {0x8, 0x7, 0x231}, 0x62, 0x5, 0x4}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0x8}}, @TCA_RSVP_ACT={0x918, 0x6, [@m_gact={0xcc, 0xf, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x200, 0x20000000, 0xfffffff8, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1be2, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x10000000, 0x5, 0x8a}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12da, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1a, 0x3, 0x4f6, 0x10000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x200c, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xc, 0x2, 0x42c, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xc24, 0x1, 0xfff, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x848, 0x13, 0x0, 0x0, {{0xb}, {0x81c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x32, 0x6a6, 0x475, 0xa50c, 0xfffffff7, 0x1, 0x7, 0x8ff, 0x4, 0xffff, 0xb01c, 0x4, 0x9, 0x7, 0x0, 0x6, 0xa4d3, 0x2, 0x1, 0x4, 0x4, 0x9, 0x4, 0xfffffff7, 0x2, 0x9, 0x5, 0x5, 0x2, 0xf2, 0x8, 0x40, 0x8, 0xdc1b, 0x0, 0x4, 0x7, 0x3, 0x79, 0xc1b6, 0x0, 0x7, 0x2, 0x2, 0x0, 0x2, 0x9, 0x3ff, 0x0, 0x0, 0x5, 0xf, 0x100, 0x4, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x9, 0x2, 0x8000, 0x5, 0x1ff, 0x7, 0x0, 0x101, 0x2, 0x9, 0xffffff84, 0x1000, 0xbdda00, 0x0, 0xdfe, 0xac5, 0x729e, 0x5ab3, 0x80, 0x95, 0x0, 0xffffff25, 0x4, 0x100, 0x9, 0x0, 0x798, 0x9, 0x1000, 0xf, 0x8, 0xe9, 0x0, 0xb6, 0x8, 0x2, 0x3, 0xd9f1, 0xb7, 0x36cfa4e8, 0xffffffff, 0x1, 0x3, 0x80, 0x80000000, 0x2, 0x6, 0x10000, 0xd, 0xe3e, 0x6, 0x1, 0x1ff, 0x2, 0x9, 0xfff, 0xcbed, 0x2024d2d5, 0x2, 0x7, 0x6, 0x7fffffff, 0x3, 0x1, 0x8, 0x80, 0xb966, 0x8, 0x7ff, 0x5, 0x10, 0x6, 0x9, 0xe, 0x1, 0x2, 0x2, 0x6, 0x2, 0x6, 0x100, 0x3, 0x3, 0x40bb, 0x3, 0x6, 0x7f, 0x7, 0x10000, 0x61a8, 0x7, 0xfffffffb, 0x4, 0x50d, 0xa9, 0xa, 0xffffffff, 0x1, 0x0, 0x0, 0x7fffffff, 0x28bd1f7, 0x3cc, 0x3, 0x4, 0xce7, 0xc, 0x6, 0x80000000, 0x25b2, 0x2, 0x8, 0x2, 0x3, 0x7, 0x517, 0x9, 0x4, 0xfffffff9, 0xe5a, 0x2, 0x6c, 0x4, 0xff, 0x7665, 0xf, 0x9, 0x1, 0xb2, 0x2, 0xb7, 0x10001, 0x3ff, 0x5, 0x101, 0x7b1, 0x4, 0x7fff, 0xe282, 0x10, 0xfff, 0x10000, 0xb, 0x8, 0x3, 0x7, 0x4, 0x4, 0x0, 0x7, 0x2, 0x400, 0x6, 0x0, 0x9, 0x400, 0x8, 0x8df, 0x8a, 0x1, 0x7fff, 0x8, 0x0, 0x2506, 0x9c1c, 0x6, 0x5, 0x1, 0x200, 0x7, 0x4, 0x3ab, 0xc7, 0x4, 0x5, 0x0, 0xf7bf, 0x5, 0xfffffffd, 0x8c06, 0xf, 0x8, 0xd, 0xb0, 0x4, 0x1, 0xb, 0xfffffff9, 0x231, 0x6, 0x4, 0x101, 0x6, 0x1, 0x6, 0x5, 0x4]}], [@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x98, 0x7, 0x644, 0x7, 0x1e2, 0x8, 0x5, 0x3d3f, 0x200, 0x2, 0x6, 0x9, 0x8000, 0x2, 0x7, 0x3, 0x5, 0x400, 0x7, 0x9f6, 0xd, 0x5, 0x3, 0x3, 0x4, 0xfffffff7, 0x6, 0x3, 0x1, 0xfd99, 0x9, 0x0, 0xc0000, 0x8, 0x81, 0x8, 0x3ff, 0x400, 0x8000, 0x4, 0x8, 0x95, 0xf, 0x4, 0xd65, 0x7, 0x6, 0x59, 0x2, 0x8000000, 0x2, 0x1, 0x40, 0x1, 0x5554369f, 0x0, 0x5, 0x5, 0x8, 0x4, 0xac15, 0x5, 0x4, 0x9, 0x2, 0x2, 0x5, 0x4b0b238c, 0xb, 0x5, 0x889c, 0x3, 0x1ff, 0xfffffffc, 0x401, 0x0, 0x1ff, 0xd0ab7aa7, 0x1, 0x7f, 0x3, 0xb, 0x9, 0x2, 0x5, 0x400, 0x4, 0x1, 0x4, 0x0, 0x2, 0x5, 0x14, 0x9bd7, 0x5, 0x5, 0x1, 0x8, 0x4, 0x0, 0x2, 0xffffffff, 0x4, 0x5, 0x9, 0x3, 0x100, 0x0, 0x3, 0xd, 0x5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x9, 0x10001, 0xfffffffd, 0x800, 0x0, 0x80000001, 0x7a, 0x10001, 0x10, 0x3, 0xffffff80, 0xb, 0x3, 0xa11a, 0x800, 0x2, 0x8000000, 0x525, 0x9, 0x5, 0x0, 0xffffffc0, 0x1, 0x7, 0xfffffff8, 0x7, 0x2, 0x4, 0x74, 0x7, 0x3, 0x6, 0xd90, 0x1f0, 0x0, 0x236fb841, 0xffffff09, 0x8, 0x7, 0xfffffffe, 0x7195, 0x0, 0x1, 0x1, 0x8001, 0x2, 0x0, 0x9, 0xfffffff9, 0x4, 0x3, 0x6, 0x7, 0x1, 0x9, 0xb, 0x9, 0x2, 0x0, 0x9, 0xc, 0x9, 0x7, 0x0, 0x2, 0x1, 0x6, 0x5, 0x4, 0x1000, 0xb7a3, 0xe3, 0xc, 0x8831, 0x101, 0x3, 0x3, 0x4, 0x3, 0xc000000, 0xfffffff2, 0xa, 0x10001, 0x5, 0x7fff, 0x2, 0x7, 0xc00, 0x7, 0x6, 0x897, 0xff, 0x8, 0x5, 0x6, 0xb, 0x8, 0x2, 0x4, 0x0, 0xbe8e, 0xfffffff7, 0x4, 0x4, 0x8, 0x4, 0x6, 0x1, 0x9, 0x4c6, 0x5, 0x7, 0x6, 0x80000000, 0x1, 0x5, 0x9, 0x1, 0x8, 0x48, 0x40, 0x8, 0x535a, 0x6, 0x55, 0xff9, 0x3, 0x9, 0x800, 0x6, 0x4, 0x8, 0x5, 0xfffffffe, 0x3, 0x6b54, 0x1, 0x7, 0x3ff, 0xf71]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x994}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040)
getsockname$packet(r5, &(0x7f0000000640)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)={0x3bc, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x61977ed0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0x3, 0x80, 0x9}, {0x8000, 0x3, 0x8, 0x6}, {0xd, 0x8e, 0x4, 0xd38e}, {0x6, 0xfe, 0x7, 0x73f}, {0x7, 0xfc, 0x3, 0x100}, {0x9, 0x7, 0xf9, 0x9}, {0xc, 0x7, 0xfb, 0xffff}, {0x1000, 0x2, 0x4, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}]}, 0x3bc}}, 0x4000040)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702"], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48)

7m39.442395432s ago: executing program 34 (id=2696):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
get_mempolicy(0x0, &(0x7f0000000080), 0x200919, &(0x7f00001f8000/0x3000)=nil, 0xc)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xb3c6}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r4}, 0x38)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r5, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
fanotify_mark(r5, 0x80, 0x8, 0xffffffffffffffff, 0x0)
ioctl$NILFS_IOCTL_GET_CPINFO(r5, 0x80186e82, &(0x7f0000000140)={0x0, 0x0, 0x38, 0x1, 0x1ff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r6=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0}}, 0x10)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000340)=@deltfilter={0x994, 0x2d, 0x4, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xb, 0xfff1}, {0xf, 0xa}, {0x7, 0x8}}, [@f_rsvp6={{0xa}, {0x964, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x6, 0x1ff}, {0x5, 0x2}, 0x29, 0x7f, 0x7}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x20b9, 0x3fc0da64, 0x7}, {0x8, 0x7, 0x231}, 0x62, 0x5, 0x4}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0x8}}, @TCA_RSVP_ACT={0x918, 0x6, [@m_gact={0xcc, 0xf, 0x0, 0x0, {{0x9}, {0xa0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x200, 0x20000000, 0xfffffff8, 0xa}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1be2, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x9, 0x10000000, 0x5, 0x8a}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12da, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x1a, 0x3, 0x4f6, 0x10000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x200c, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xc, 0x2, 0x42c, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0xc24, 0x1, 0xfff, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_police={0x848, 0x13, 0x0, 0x0, {{0xb}, {0x81c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x32, 0x6a6, 0x475, 0xa50c, 0xfffffff7, 0x1, 0x7, 0x8ff, 0x4, 0xffff, 0xb01c, 0x4, 0x9, 0x7, 0x0, 0x6, 0xa4d3, 0x2, 0x1, 0x4, 0x4, 0x9, 0x4, 0xfffffff7, 0x2, 0x9, 0x5, 0x5, 0x2, 0xf2, 0x8, 0x40, 0x8, 0xdc1b, 0x0, 0x4, 0x7, 0x3, 0x79, 0xc1b6, 0x0, 0x7, 0x2, 0x2, 0x0, 0x2, 0x9, 0x3ff, 0x0, 0x0, 0x5, 0xf, 0x100, 0x4, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x9, 0x2, 0x8000, 0x5, 0x1ff, 0x7, 0x0, 0x101, 0x2, 0x9, 0xffffff84, 0x1000, 0xbdda00, 0x0, 0xdfe, 0xac5, 0x729e, 0x5ab3, 0x80, 0x95, 0x0, 0xffffff25, 0x4, 0x100, 0x9, 0x0, 0x798, 0x9, 0x1000, 0xf, 0x8, 0xe9, 0x0, 0xb6, 0x8, 0x2, 0x3, 0xd9f1, 0xb7, 0x36cfa4e8, 0xffffffff, 0x1, 0x3, 0x80, 0x80000000, 0x2, 0x6, 0x10000, 0xd, 0xe3e, 0x6, 0x1, 0x1ff, 0x2, 0x9, 0xfff, 0xcbed, 0x2024d2d5, 0x2, 0x7, 0x6, 0x7fffffff, 0x3, 0x1, 0x8, 0x80, 0xb966, 0x8, 0x7ff, 0x5, 0x10, 0x6, 0x9, 0xe, 0x1, 0x2, 0x2, 0x6, 0x2, 0x6, 0x100, 0x3, 0x3, 0x40bb, 0x3, 0x6, 0x7f, 0x7, 0x10000, 0x61a8, 0x7, 0xfffffffb, 0x4, 0x50d, 0xa9, 0xa, 0xffffffff, 0x1, 0x0, 0x0, 0x7fffffff, 0x28bd1f7, 0x3cc, 0x3, 0x4, 0xce7, 0xc, 0x6, 0x80000000, 0x25b2, 0x2, 0x8, 0x2, 0x3, 0x7, 0x517, 0x9, 0x4, 0xfffffff9, 0xe5a, 0x2, 0x6c, 0x4, 0xff, 0x7665, 0xf, 0x9, 0x1, 0xb2, 0x2, 0xb7, 0x10001, 0x3ff, 0x5, 0x101, 0x7b1, 0x4, 0x7fff, 0xe282, 0x10, 0xfff, 0x10000, 0xb, 0x8, 0x3, 0x7, 0x4, 0x4, 0x0, 0x7, 0x2, 0x400, 0x6, 0x0, 0x9, 0x400, 0x8, 0x8df, 0x8a, 0x1, 0x7fff, 0x8, 0x0, 0x2506, 0x9c1c, 0x6, 0x5, 0x1, 0x200, 0x7, 0x4, 0x3ab, 0xc7, 0x4, 0x5, 0x0, 0xf7bf, 0x5, 0xfffffffd, 0x8c06, 0xf, 0x8, 0xd, 0xb0, 0x4, 0x1, 0xb, 0xfffffff9, 0x231, 0x6, 0x4, 0x101, 0x6, 0x1, 0x6, 0x5, 0x4]}], [@TCA_POLICE_AVRATE={0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x98, 0x7, 0x644, 0x7, 0x1e2, 0x8, 0x5, 0x3d3f, 0x200, 0x2, 0x6, 0x9, 0x8000, 0x2, 0x7, 0x3, 0x5, 0x400, 0x7, 0x9f6, 0xd, 0x5, 0x3, 0x3, 0x4, 0xfffffff7, 0x6, 0x3, 0x1, 0xfd99, 0x9, 0x0, 0xc0000, 0x8, 0x81, 0x8, 0x3ff, 0x400, 0x8000, 0x4, 0x8, 0x95, 0xf, 0x4, 0xd65, 0x7, 0x6, 0x59, 0x2, 0x8000000, 0x2, 0x1, 0x40, 0x1, 0x5554369f, 0x0, 0x5, 0x5, 0x8, 0x4, 0xac15, 0x5, 0x4, 0x9, 0x2, 0x2, 0x5, 0x4b0b238c, 0xb, 0x5, 0x889c, 0x3, 0x1ff, 0xfffffffc, 0x401, 0x0, 0x1ff, 0xd0ab7aa7, 0x1, 0x7f, 0x3, 0xb, 0x9, 0x2, 0x5, 0x400, 0x4, 0x1, 0x4, 0x0, 0x2, 0x5, 0x14, 0x9bd7, 0x5, 0x5, 0x1, 0x8, 0x4, 0x0, 0x2, 0xffffffff, 0x4, 0x5, 0x9, 0x3, 0x100, 0x0, 0x3, 0xd, 0x5, 0x4, 0x7, 0x7, 0x7, 0x5, 0x9, 0x10001, 0xfffffffd, 0x800, 0x0, 0x80000001, 0x7a, 0x10001, 0x10, 0x3, 0xffffff80, 0xb, 0x3, 0xa11a, 0x800, 0x2, 0x8000000, 0x525, 0x9, 0x5, 0x0, 0xffffffc0, 0x1, 0x7, 0xfffffff8, 0x7, 0x2, 0x4, 0x74, 0x7, 0x3, 0x6, 0xd90, 0x1f0, 0x0, 0x236fb841, 0xffffff09, 0x8, 0x7, 0xfffffffe, 0x7195, 0x0, 0x1, 0x1, 0x8001, 0x2, 0x0, 0x9, 0xfffffff9, 0x4, 0x3, 0x6, 0x7, 0x1, 0x9, 0xb, 0x9, 0x2, 0x0, 0x9, 0xc, 0x9, 0x7, 0x0, 0x2, 0x1, 0x6, 0x5, 0x4, 0x1000, 0xb7a3, 0xe3, 0xc, 0x8831, 0x101, 0x3, 0x3, 0x4, 0x3, 0xc000000, 0xfffffff2, 0xa, 0x10001, 0x5, 0x7fff, 0x2, 0x7, 0xc00, 0x7, 0x6, 0x897, 0xff, 0x8, 0x5, 0x6, 0xb, 0x8, 0x2, 0x4, 0x0, 0xbe8e, 0xfffffff7, 0x4, 0x4, 0x8, 0x4, 0x6, 0x1, 0x9, 0x4c6, 0x5, 0x7, 0x6, 0x80000000, 0x1, 0x5, 0x9, 0x1, 0x8, 0x48, 0x40, 0x8, 0x535a, 0x6, 0x55, 0xff9, 0x3, 0x9, 0x800, 0x6, 0x4, 0x8, 0x5, 0xfffffffe, 0x3, 0x6b54, 0x1, 0x7, 0x3ff, 0xf71]}]]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x994}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040)
getsockname$packet(r5, &(0x7f0000000640)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14)
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d00)={&(0x7f0000000d80)={0x3bc, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x61977ed0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x6, 0x3, 0x80, 0x9}, {0x8000, 0x3, 0x8, 0x6}, {0xd, 0x8e, 0x4, 0xd38e}, {0x6, 0xfe, 0x7, 0x73f}, {0x7, 0xfc, 0x3, 0x100}, {0x9, 0x7, 0xf9, 0x9}, {0xc, 0x7, 0xfb, 0xffff}, {0x1000, 0x2, 0x4, 0x1}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}]}, 0x3bc}}, 0x4000040)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702"], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48)

4m42.830848399s ago: executing program 1 (id=3585):
syz_open_dev$hiddev(&(0x7f0000000000), 0x1, 0x40000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000900)="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", 0x1a4, 0x12, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x18, 0x3f, 0x301, 0x2, 0x0, {0x3, 0x1}}, 0x18}}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x82802, 0x1f8)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28041, 0x0)
write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000200)=0x4081ff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {0x41}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87, 0x3}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601aaba5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r9=>0x0})
r10 = socket(0x400000000010, 0x3, 0x0)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x50}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000240), 0xc, &(0x7f0000000f40)={&(0x7f0000000c00)={0x2dc, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0xfb, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5a08}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r12}}}]}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000006c0)={0x50, r8, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xf}, @device_a, @device_a, @random="b5b9f3033437", {0x2, 0xfff}}, 0x600, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]]}, 0x50}, 0x1, 0x0, 0x0, 0x48058}, 0x8800)

4m41.932799203s ago: executing program 1 (id=3592):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r3, 0x100000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r9 = fanotify_init(0x200, 0x0)
fanotify_mark(r9, 0x1, 0x40000032, r8, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ioctl$TIOCPKT(r10, 0x5420, 0x0)
ioctl$TCSETS(r10, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})
splice(r10, 0x0, r8, 0x0, 0x7ffff000, 0x1)
readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r11=>0x0)
ioctl$KVM_TDX_FINALIZE_VM(r0, 0xc004aeba, &(0x7f0000002e00))
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, <r14=>0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050)
ioctl$DRM_IOCTL_GET_CAP(r14, 0xc010640c, &(0x7f0000001780)={0x10})
r15 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r15, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000540)="6797f04cdb6f2b8ff1c9aa15b0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d33243eaa", 0x2c}], 0x1}, 0x30008b08)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4024587b, &(0x7f0000002dc0)={{r15, &(0x7f00000010c0)='\x00', 0x20000, &(0x7f0000001100)={@_ha_fsid={[0x12, 0x2]}, {0x8, 0x7f, 0xe10, 0x2}}, 0x6, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)}, 0x7, &(0x7f0000002d00)=[{0x2, 0x2, &(0x7f00000011c0)='/dev/dri/card#\x00', &(0x7f0000001200)="37d69526d9fc145710bf8cd228d5f671aeba8f42b8e61efc09e67c08335ee4d9564e5f43a706babfbcec183631ad02e9c76ebeb4059855377ae780ecdac32a4143137819e7928c890330122c9060fb79e3dada272edfa5e7aa24816148554995b3216bca4fd6e4c3557e5e8e8fc007f6cda3b5609751bd87924e128a2465b1c702b5a2ce3260c9628ae5d8bc8e6f2337ddf1941e3f2b38ac452dc51c0949fa073b5bb954e93feb383347e55560a4331884ae9c4e067cec180357aefd31f51f94cb77c714f84a8b399a6a1cf1f7fba36b082769253282d931273ccbd8fbc369b5a01ecf0e08779ed4d4f3b0674ce6cf8f79c2ff", 0xf3, 0x12}, {0x3, 0xab, &(0x7f0000001300)='\x00', &(0x7f0000001340)="73fb4b7cc96a69b7a2812b43e6958a15ec526b30216cd1a7a2aab77697efd9d0a5df508a5a5ef9c803544776b165a8e6c958b7c0f2", 0x35, 0x18}, {0x1, 0xfffffff7, &(0x7f0000001380)='\x00', &(0x7f00000013c0)="ceb1c6716014ce2bfd6021d5b4feb414b300d10ba742cc2ffc32a20e725ac888ac21206cac56a1f05cfca515e92ad1dea5c9264b3f81d952090431e1e46a084a3a0c238a620f", 0x46, 0x10}, {0x2, 0x5, &(0x7f0000001440)=',-', &(0x7f0000001480)="b1b52605d18593fc570805642c3cd0b18068fa5562652015c1636f5d72ad5ed94b572453ab26cc827544598482c44b9fcee7c51da2d33347eb6aa576f1f7e43b7da48584ea9ba7157b998da1ee2dd246e41d05b5b0021d897a963cd2cbdb36b3215554eec8cb366fed2f79bdfa839d5054040844221912def6204ef1df8570909fb1f884a6e2c95808686de081df65bb7e779614eeb5e75616c0eb9597ec", 0x9e, 0x2}, {0x3, 0xb, &(0x7f0000001540)='^*\\\':\x00', &(0x7f0000001580)="adfc8cece84bd83f1f5cb14f1ae0d57245abd96b437c92f0ac551322b9414033d20d625639165d714566822e15e64bb841b490ba9b73e77e383d7c6d803e84b9349b4dd473296174ff3b3a22416615be578e0c264a6a9229cadd03d36723362cb62cc8aafb9a20fdcd96e43ccbdf76637ee3d311b03a6062cd7dcb87fa873baf5d8e0c668ed0c0051b241068ea19f28b01d6b4aa6c2996be960dc29ebeab31fe003b3bb8f4978833ce6f473fda8a7a8771a2fc", 0xb3, 0x2}, {0x3, 0x7, &(0x7f0000001640)='\x00', &(0x7f0000001c40)="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", 0x800, 0x12}, {0x2, 0x10, &(0x7f0000002c40)='-]@!\x00', &(0x7f0000002c80)="4247ad7343b32689ca733abb4258b72c76f0edb44821c95331938839d4ebdfdfd2f656b487c9a8cfe0a0e814b214b49fc5132e5790c8eb0ef3792c0c98a117a31608783bf0dbcc751a1f", 0x4a}]})
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)='\r', 0x1}])

4m40.858286985s ago: executing program 1 (id=3595):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dbdbfb, {0x2, 0x0, 0x2}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "03e08b113c0af5000000000000008000", '\x00', "b08068ebce17ab00"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @loopback}, 0x1c)
r2 = gettid()
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x42}]}, &(0x7f0000000c40)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r3 = msgget$private(0x0, 0x7ac)
msgrcv(r3, 0x0, 0x0, 0x3, 0x2000)
msgrcv(r3, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000)
msgsnd(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="031000003b5503e26fa7f16846ef8d76bfa0c8cbb868f2156194a446984cfe02eb9c673ef882f75b1019f0b1fa78b01edb1a48ce327e95b15687e9fc05ea7d08a0ef923505ef1833d4968e66200cf566da60c322d0540223e142baf55b9c3a4601bfb94eb714f33ecd10e413053941771a6978150b4fdb4ac3364d6d33719d16710fb25e3f5b725e17922e2e87c5b7b0e37176b7b43327b08e345270291fbd4019674fdb07e5002dc1b0d48ee7c35262de6baf9697cffb83b51c7e2972bd4fa0f5ea7373a9ff0355ade5e26e55b89312a1ae5d10bba43c01227abb50c2dee4954299e4bf4d6774b3"], 0x8, 0x8fa2496c381b7ad5)
msgsnd(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf4, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1000004)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3})
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4)

4m40.612043426s ago: executing program 1 (id=3597):
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x8010, 0xffffffffffffffff, 0xda4ea000)
socket(0x11, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x3, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="77933605903e8c2ca07a3941f93e0e7808a5415636", 0x15}], 0x1, 0x0, 0x0, 0x4000800}], 0x1, 0x24004041)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4031, &(0x7f0000000180)=ANY=[@ANYBLOB="2c326052d741ec0b177237a853c74186b6abe02c"], 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r7)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x2, 0x1000, 0xc, 0x5}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
r10 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000000)={0x4, 0x7, 0x2, 0x0, <r11=>0x0})
ioctl$DRM_IOCTL_MODE_MAP_DUMB(r10, 0xc01064b3, &(0x7f0000000040)={r11})
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600))

4m40.337675376s ago: executing program 1 (id=3598):
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000001c0)={0x28, 0x0, 0x9, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x14}}}}}, 0x28}}, 0x40000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0)
mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x100000b, 0x11, r1, 0xffffc000)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000900)={{&(0x7f00001eb000/0x800000)=nil, 0x800000}, 0x1})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000249000/0x2000)=nil, &(0x7f0000059000/0x4000)=nil, 0x2000})
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x6, 0x4, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800)
r3 = openat$vim2m(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x6, 0x1, 0x80, "27425289090002000011000010aa84feea0be7b88b005ad763e61f9d13f019e3", 0x30313953})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8f}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

4m40.068906878s ago: executing program 1 (id=3600):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r3, 0x100000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r9 = fanotify_init(0x200, 0x0)
fanotify_mark(r9, 0x1, 0x40000032, r8, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ioctl$TIOCPKT(r10, 0x5420, 0x0)
ioctl$TCSETS(r10, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})
splice(r10, 0x0, r8, 0x0, 0x7ffff000, 0x1)
readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r11=>0x0)
ioctl$KVM_TDX_FINALIZE_VM(r0, 0xc004aeba, &(0x7f0000002e00))
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, <r14=>0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050)
ioctl$DRM_IOCTL_GET_CAP(r14, 0xc010640c, &(0x7f0000001780)={0x10})
r15 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r15, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000540)="6797f04cdb6f2b8ff1c9aa15b0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d33243eaa", 0x2c}], 0x1}, 0x30008b08)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4024587b, &(0x7f0000002dc0)={{r15, &(0x7f00000010c0)='\x00', 0x20000, &(0x7f0000001100)={@_ha_fsid={[0x12, 0x2]}, {0x8, 0x7f, 0xe10, 0x2}}, 0x6, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)}, 0x7, &(0x7f0000002d00)=[{0x2, 0x2, &(0x7f00000011c0)='/dev/dri/card#\x00', &(0x7f0000001200)="37d69526d9fc145710bf8cd228d5f671aeba8f42b8e61efc09e67c08335ee4d9564e5f43a706babfbcec183631ad02e9c76ebeb4059855377ae780ecdac32a4143137819e7928c890330122c9060fb79e3dada272edfa5e7aa24816148554995b3216bca4fd6e4c3557e5e8e8fc007f6cda3b5609751bd87924e128a2465b1c702b5a2ce3260c9628ae5d8bc8e6f2337ddf1941e3f2b38ac452dc51c0949fa073b5bb954e93feb383347e55560a4331884ae9c4e067cec180357aefd31f51f94cb77c714f84a8b399a6a1cf1f7fba36b082769253282d931273ccbd8fbc369b5a01ecf0e08779ed4d4f3b0674ce6cf8f79c2ff", 0xf3, 0x12}, {0x3, 0xab, &(0x7f0000001300)='\x00', &(0x7f0000001340)="73fb4b7cc96a69b7a2812b43e6958a15ec526b30216cd1a7a2aab77697efd9d0a5df508a5a5ef9c803544776b165a8e6c958b7c0f2", 0x35, 0x18}, {0x1, 0xfffffff7, &(0x7f0000001380)='\x00', &(0x7f00000013c0)="ceb1c6716014ce2bfd6021d5b4feb414b300d10ba742cc2ffc32a20e725ac888ac21206cac56a1f05cfca515e92ad1dea5c9264b3f81d952090431e1e46a084a3a0c238a620f", 0x46, 0x10}, {0x2, 0x5, &(0x7f0000001440)=',-', &(0x7f0000001480)="b1b52605d18593fc570805642c3cd0b18068fa5562652015c1636f5d72ad5ed94b572453ab26cc827544598482c44b9fcee7c51da2d33347eb6aa576f1f7e43b7da48584ea9ba7157b998da1ee2dd246e41d05b5b0021d897a963cd2cbdb36b3215554eec8cb366fed2f79bdfa839d5054040844221912def6204ef1df8570909fb1f884a6e2c95808686de081df65bb7e779614eeb5e75616c0eb9597ec", 0x9e, 0x2}, {0x3, 0xb, &(0x7f0000001540)='^*\\\':\x00', &(0x7f0000001580)="adfc8cece84bd83f1f5cb14f1ae0d57245abd96b437c92f0ac551322b9414033d20d625639165d714566822e15e64bb841b490ba9b73e77e383d7c6d803e84b9349b4dd473296174ff3b3a22416615be578e0c264a6a9229cadd03d36723362cb62cc8aafb9a20fdcd96e43ccbdf76637ee3d311b03a6062cd7dcb87fa873baf5d8e0c668ed0c0051b241068ea19f28b01d6b4aa6c2996be960dc29ebeab31fe003b3bb8f4978833ce6f473fda8a7a8771a2fc", 0xb3, 0x2}, {0x3, 0x7, &(0x7f0000001640)='\x00', &(0x7f0000001c40)="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", 0xe00, 0x12}, {0x2, 0x10, &(0x7f0000002c40)='-]@!\x00', &(0x7f0000002c80)="4247ad7343b32689ca733abb4258b72c76f0edb44821c95331938839d4ebdfdfd2f656b487c9a8cfe0a0e814b214b49fc5132e5790c8eb0ef3792c0c98a117a31608783bf0dbcc751a1f", 0x4a}]})
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)='\r', 0x1}])

4m39.311719964s ago: executing program 35 (id=3600):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
io_setup(0x8, &(0x7f0000000600)=<r1=>0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x12, r3, 0x100000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r9 = fanotify_init(0x200, 0x0)
fanotify_mark(r9, 0x1, 0x40000032, r8, 0x0)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0)
ioctl$TIOCPKT(r10, 0x5420, 0x0)
ioctl$TCSETS(r10, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000000, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"})
splice(r10, 0x0, r8, 0x0, 0x7ffff000, 0x1)
readv(r9, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}], 0x1)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r11=>0x0)
ioctl$KVM_TDX_FINALIZE_VM(r0, 0xc004aeba, &(0x7f0000002e00))
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, <r14=>0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000709726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c800}, 0x4000050)
ioctl$DRM_IOCTL_GET_CAP(r14, 0xc010640c, &(0x7f0000001780)={0x10})
r15 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r15, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000540)="6797f04cdb6f2b8ff1c9aa15b0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d33243eaa", 0x2c}], 0x1}, 0x30008b08)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4024587b, &(0x7f0000002dc0)={{r15, &(0x7f00000010c0)='\x00', 0x20000, &(0x7f0000001100)={@_ha_fsid={[0x12, 0x2]}, {0x8, 0x7f, 0xe10, 0x2}}, 0x6, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)}, 0x7, &(0x7f0000002d00)=[{0x2, 0x2, &(0x7f00000011c0)='/dev/dri/card#\x00', &(0x7f0000001200)="37d69526d9fc145710bf8cd228d5f671aeba8f42b8e61efc09e67c08335ee4d9564e5f43a706babfbcec183631ad02e9c76ebeb4059855377ae780ecdac32a4143137819e7928c890330122c9060fb79e3dada272edfa5e7aa24816148554995b3216bca4fd6e4c3557e5e8e8fc007f6cda3b5609751bd87924e128a2465b1c702b5a2ce3260c9628ae5d8bc8e6f2337ddf1941e3f2b38ac452dc51c0949fa073b5bb954e93feb383347e55560a4331884ae9c4e067cec180357aefd31f51f94cb77c714f84a8b399a6a1cf1f7fba36b082769253282d931273ccbd8fbc369b5a01ecf0e08779ed4d4f3b0674ce6cf8f79c2ff", 0xf3, 0x12}, {0x3, 0xab, &(0x7f0000001300)='\x00', &(0x7f0000001340)="73fb4b7cc96a69b7a2812b43e6958a15ec526b30216cd1a7a2aab77697efd9d0a5df508a5a5ef9c803544776b165a8e6c958b7c0f2", 0x35, 0x18}, {0x1, 0xfffffff7, &(0x7f0000001380)='\x00', &(0x7f00000013c0)="ceb1c6716014ce2bfd6021d5b4feb414b300d10ba742cc2ffc32a20e725ac888ac21206cac56a1f05cfca515e92ad1dea5c9264b3f81d952090431e1e46a084a3a0c238a620f", 0x46, 0x10}, {0x2, 0x5, &(0x7f0000001440)=',-', &(0x7f0000001480)="b1b52605d18593fc570805642c3cd0b18068fa5562652015c1636f5d72ad5ed94b572453ab26cc827544598482c44b9fcee7c51da2d33347eb6aa576f1f7e43b7da48584ea9ba7157b998da1ee2dd246e41d05b5b0021d897a963cd2cbdb36b3215554eec8cb366fed2f79bdfa839d5054040844221912def6204ef1df8570909fb1f884a6e2c95808686de081df65bb7e779614eeb5e75616c0eb9597ec", 0x9e, 0x2}, {0x3, 0xb, &(0x7f0000001540)='^*\\\':\x00', &(0x7f0000001580)="adfc8cece84bd83f1f5cb14f1ae0d57245abd96b437c92f0ac551322b9414033d20d625639165d714566822e15e64bb841b490ba9b73e77e383d7c6d803e84b9349b4dd473296174ff3b3a22416615be578e0c264a6a9229cadd03d36723362cb62cc8aafb9a20fdcd96e43ccbdf76637ee3d311b03a6062cd7dcb87fa873baf5d8e0c668ed0c0051b241068ea19f28b01d6b4aa6c2996be960dc29ebeab31fe003b3bb8f4978833ce6f473fda8a7a8771a2fc", 0xb3, 0x2}, {0x3, 0x7, &(0x7f0000001640)='\x00', &(0x7f0000001c40)="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", 0xe00, 0x12}, {0x2, 0x10, &(0x7f0000002c40)='-]@!\x00', &(0x7f0000002c80)="4247ad7343b32689ca733abb4258b72c76f0edb44821c95331938839d4ebdfdfd2f656b487c9a8cfe0a0e814b214b49fc5132e5790c8eb0ef3792c0c98a117a31608783bf0dbcc751a1f", 0x4a}]})
io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000000040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000)='\r', 0x1}])

17.301679453s ago: executing program 6 (id=4775):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, 0x0)

17.04200288s ago: executing program 6 (id=4776):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x6f1022e4, 0x101)
syz_usb_disconnect(r0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x55, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x39, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$rtl8150(r2, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0)

14.546305642s ago: executing program 7 (id=4803):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e)

14.522505333s ago: executing program 7 (id=4804):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
readahead(r0, 0xe, 0xffffffffffffffff)

14.457399815s ago: executing program 7 (id=4805):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101002)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x2, 0x99, 0x0, 0x400}})
r1 = syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0xf, 0xe, 0x7, 0x1}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2={0xff, 0x5}, 0x8, 0x8000, 0xe3e1, 0xd04}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x2, 0x2}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)
syz_usb_control_io$uac2(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)

13.890130896s ago: executing program 6 (id=4806):
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/softnet_stat\x00')
preadv2(r0, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x0)

12.651349139s ago: executing program 7 (id=4813):
socket(0x1e, 0x4, 0x0)
socket$netlink(0x10, 0x3, 0x5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)

11.108742056s ago: executing program 6 (id=4817):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x10b, 0xfff, 0x9, 0x831a, 0x0, "040000000000000000c83cfdffff000800", 0x28})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xff)
openat(0xffffffffffffff9c, 0x0, 0x703f00, 0x0)
r1 = creat(0x0, 0x0)
close(r1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x64000600)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}})
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r5, &(0x7f0000000040)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000240)="d2a7b3", 0x3}, {&(0x7f0000000400)="e06bd3f745", 0xfcfd}, {&(0x7f0000000500)="86e9a0d8", 0x4}, {&(0x7f00000005c0)="25062456", 0x4}], 0x4}}], 0x1, 0x4000800)

10.122727359s ago: executing program 5 (id=4819):
request_key(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.441856737s ago: executing program 5 (id=4823):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2, 0x6, 0xff, 0x2, 0x2, 0x0, 0x0, 0x4000}, 0x10}}, 0x200080d0)

8.80125413s ago: executing program 5 (id=4827):
r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94)

8.182010079s ago: executing program 7 (id=4831):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x400, r0, 0x4}, 0x38)

8.158344081s ago: executing program 7 (id=4833):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_io_uring_setup(0x141c, &(0x7f0000000040)={0x0, 0x327a, 0x800, 0x1}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000)
syz_io_uring_submit$UBLK(r1, r2, r3, &(0x7f0000001480)=@ublk_ctrl_cmd_sqes={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207511, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', @start_user_recovery_cmd})
syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000340)={0x2e, 0x6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x1, 0xa75, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x4d}}}, 0x0)
io_uring_enter(r0, 0x317d, 0x5, 0x2, 0x0, 0x0)

7.292563298s ago: executing program 5 (id=4834):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
lseek(r0, 0xfffffffffffffff8, 0x1)

7.061842796s ago: executing program 5 (id=4835):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x3, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x5, 0xfffffffe, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x4e, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x9, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10001, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x1, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x9, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xe, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c)

5.030414358s ago: executing program 0 (id=4840):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x70bd2d, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r1}, [@IFA_CACHEINFO={0x14, 0x6, {0x4, 0x122, 0x100, 0x3}}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)

4.906167178s ago: executing program 0 (id=4841):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)

4.721944818s ago: executing program 0 (id=4842):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0)

4.618028225s ago: executing program 8 (id=4843):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0xa, 0x3, 0xff)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
keyctl$clear(0x3, 0xfffffffffffffffd)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES64=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.48116985s ago: executing program 6 (id=4844):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000200)=ANY=[], 0x0)

3.617842383s ago: executing program 8 (id=4845):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800)

3.587406055s ago: executing program 5 (id=4846):
syz_open_dev$evdev(&(0x7f00000000c0), 0x2000000003, 0x903d41)
syz_usb_connect(0x3, 0x63, &(0x7f0000000740)={{0x12, 0x1, 0x310, 0x78, 0xe8, 0x72, 0x20, 0x1f71, 0x3306, 0x2ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x2, 0x3, 0x1, 0x80, 0x5, "", [{{0x9, 0x4, 0xdf, 0x0, 0x0, 0x46, 0x35, 0x34, 0xf}}, {{0x9, 0x4, 0x19, 0x6, 0x5, 0xfb, 0xdc, 0x42, 0x0, [], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0x6, 0x6, 0x4, [@generic={0x9, 0x4, "df9b52d017dc73"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xaf, 0x2, 0x83}}, {{0x9, 0x5, 0x8b, 0x0, 0x20, 0x1, 0x8, 0x8}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x8, 0x1b, 0x6}}, {{0x9, 0x5, 0xe, 0x1, 0x200, 0x3, 0x9, 0x40}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0)
r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0)
syz_usb_disconnect(r1)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x0, 0x30, 0x2, {0x2, 0x7}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x1c, &(0x7f0000000480)={0x0, 0x1, 0xa3, "af63d59b864db2ae6716d5f9099892104325f3df6f0cb95267a65a44343f2d66af5bfad8556c29e3c3e9c83e4e90ff5c91a53fc240e842a4401df8967f65464913181287ad1950afa4eee53a7bc619d3011c55a8ed279dafb7d5e632736b620988e58aec4cad6cdddd0b0fd09f23ce7962e49769ec768e2d0091a1563c6534e38c0817998cafb23d40ad4f1af0af95bd2a2b6a304e913a24a93761931a7974d59d71c7"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x3}})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000001480)={0x44, &(0x7f0000001180)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x8000000000000000, 0x400000)
ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000240)=""/236)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)

3.201736685s ago: executing program 0 (id=4847):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000080)=0x6, 0x4)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
pipe(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = open(&(0x7f00000000c0)='./file1\x00', 0x108843, 0x98)
fcntl$setlease(r4, 0x400, 0x1)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0)
preadv(r5, &(0x7f0000001e80)=[{&(0x7f00000023c0)=""/4107, 0x100b}], 0x1, 0x33, 0x0)
fcntl$setlease(r4, 0x400, 0x1)
unshare(0x22020600)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
connect$tipc(r0, &(0x7f00000000c0)=@name, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x2}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x80}}}}}}, 0x0)

2.89376145s ago: executing program 6 (id=4848):
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0xe79ed000)

2.893508207s ago: executing program 8 (id=4849):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
close(0x4)

2.704741489s ago: executing program 8 (id=4850):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e32, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x1, 0x3, 0x0, 0x4}}, 0x2e)
socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f00fdfd}})

1.035371301s ago: executing program 0 (id=4851):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x300000b, 0x401d031, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x100, 0x52)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x200402, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x0, &(0x7f0000000e80))
openat$cgroup_procs(r0, &(0x7f0000000540)='tasks\x00', 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40)

970.150354ms ago: executing program 8 (id=4852):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f0000000040)={0xa, 0x4e20, 0xfffffffc, @remote, 0x2}, 0x1c, 0x0}, 0x20008814)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)

596.168473ms ago: executing program 0 (id=4853):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x6f1022e4, 0x101)

0s ago: executing program 8 (id=4854):
r0 = syz_usb_connect$rtl8150(0x5, 0x41, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="400509e9"]})
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0)

kernel console output (not intermixed with test programs):

nsport stream to the software demuxer
[ 1033.874902][T13490] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1033.874934][T13490] usb 8-1: media controller created
[ 1033.934289][T13490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1034.034350][T13490] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1034.034369][T13490] error writing reg: 0xff, val: 0x00
[ 1034.107208][ T7775] usb 9-1: USB disconnect, device number 51
[ 1034.128388][T13490] dvb_usb_mxl111sf 8-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1034.443144][T13490] usb 8-1: USB disconnect, device number 116
[ 1034.457804][ T5611] Bluetooth: hci4: connection err: -111
[ 1034.690915][ T7770] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1034.816660][T22367] IPVS: set_ctl: invalid protocol: 8 10.1.1.1:20001
[ 1034.850606][ T7770] usb 1-1: Using ep0 maxpacket: 16
[ 1034.851462][ T7770] usb 1-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[ 1034.852834][ T7770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10
[ 1034.852862][ T7770] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1034.852900][ T7770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1034.855724][ T7770] usb 1-1: config 0 descriptor??
[ 1035.145501][ T7770] usbhid 1-1:0.0: can't add hid device: -71
[ 1035.145614][ T7770] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1035.148809][ T7770] usb 1-1: USB disconnect, device number 79
[ 1035.226844][T22376] netlink: 'syz.5.4511': attribute type 30 has an invalid length.
[ 1035.306168][T22374] IPVS: Unknown mcast interface: lo
[ 1035.553635][T22387] program syz.8.4515 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1036.321291][ T7775] usb 8-1: new high-speed USB device number 117 using dummy_hcd
[ 1036.480699][ T7775] usb 8-1: Using ep0 maxpacket: 8
[ 1036.499446][ T7775] usb 8-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=f5.e7
[ 1036.534645][ T7775] usb 8-1: config 7 has an invalid interface number: 172 but max is 0
[ 1036.534675][ T7775] usb 8-1: config 7 has no interface number 0
[ 1036.534704][ T7775] usb 8-1: config 7 interface 172 has no altsetting 0
[ 1036.539047][ T7775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.539074][ T7775] usb 8-1: Product: syz
[ 1036.539088][ T7775] usb 8-1: Manufacturer: syz
[ 1036.539101][ T7775] usb 8-1: SerialNumber: syz
[ 1036.747800][T22390] FAULT_INJECTION: forcing a failure.
[ 1036.747800][T22390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1036.747833][T22390] CPU: 1 UID: 0 PID: 22390 Comm: syz.7.4517 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1036.747858][T22390] Tainted: [L]=SOFTLOCKUP
[ 1036.747866][T22390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1036.747876][T22390] Call Trace:
[ 1036.747884][T22390]  <TASK>
[ 1036.747893][T22390]  dump_stack_lvl+0xe8/0x150
[ 1036.747927][T22390]  should_fail_ex+0x410/0x560
[ 1036.747954][T22390]  _copy_from_user+0x2d/0xb0
[ 1036.747978][T22390]  __se_sys_io_uring_setup+0x1b4/0x2c0
[ 1036.747999][T22390]  ? __fget_files+0x2a/0x420
[ 1036.748034][T22390]  ? __pfx___se_sys_io_uring_setup+0x10/0x10
[ 1036.748069][T22390]  ? ksys_write+0x242/0x270
[ 1036.748106][T22390]  __do_fast_syscall_32+0x27a/0x6a0
[ 1036.748133][T22390]  ? do_fast_syscall_32+0x33/0x70
[ 1036.748157][T22390]  ? asm_int80_emulation+0x1a/0x20
[ 1036.748175][T22390]  ? do_int80_emulation+0x299/0x500
[ 1036.748197][T22390]  ? trace_irq_disable+0x3b/0x140
[ 1036.748220][T22390]  do_fast_syscall_32+0x33/0x70
[ 1036.748245][T22390]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1036.748267][T22390] RIP: 0023:0xf705f0ec
[ 1036.748285][T22390] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1036.748300][T22390] RSP: 002b:00000000f544d43c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9
[ 1036.748321][T22390] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808
[ 1036.748335][T22390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1036.748346][T22390] RBP: 00000000f544d4fc R08: 0000000000000000 R09: 0000000000000000
[ 1036.748358][T22390] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1036.748369][T22390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1036.748397][T22390]  </TASK>
[ 1036.773115][ T7775] uvcvideo 8-1:7.172: Found UVC 0.00 device syz (05a9:2641)
[ 1036.773149][ T7775] uvcvideo 8-1:7.172: No valid video chain found.
[ 1036.779262][ T7775] usb 8-1: USB disconnect, device number 117
[ 1037.012741][T22407] netlink: 'syz.8.4523': attribute type 30 has an invalid length.
[ 1037.120141][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1037.178400][T22412] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1037.251102][ T7770] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1037.400468][ T7770] usb 1-1: Using ep0 maxpacket: 32
[ 1037.401345][ T7770] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1037.402686][ T7770] usb 1-1: config 123 interface 0 has no altsetting 0
[ 1037.405084][ T7770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.405104][ T7770] usb 1-1: Product: syz
[ 1037.405116][ T7770] usb 1-1: Manufacturer: syz
[ 1037.405128][ T7770] usb 1-1: SerialNumber: syz
[ 1037.654943][ T7770] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1037.658094][ T7770] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1037.658492][ T7770] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1037.658539][ T7770] usb 1-1: media controller created
[ 1037.718460][ T7770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1037.800885][ T7775] usb 8-1: new high-speed USB device number 118 using dummy_hcd
[ 1037.854671][ T7770] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1037.854687][ T7770] error writing reg: 0xff, val: 0x00
[ 1037.916140][ T7770] dvb_usb_mxl111sf 1-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1037.954172][ T7775] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1037.955691][ T7775] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1037.955728][ T7775] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1037.955752][ T7775] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.963549][ T7775] usb 8-1: config 0 descriptor??
[ 1038.006119][ T7775] usbhid 8-1:0.0: couldn't find an input interrupt endpoint
[ 1038.232495][ T7775] usb 1-1: USB disconnect, device number 80
[ 1038.637405][T22462] program syz.6.4533 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1038.813425][T22465] netlink: 'syz.8.4534': attribute type 30 has an invalid length.
[ 1039.181128][ T7775] usb 9-1: new high-speed USB device number 52 using dummy_hcd
[ 1039.221161][ T7801] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1039.331181][ T7775] usb 9-1: Using ep0 maxpacket: 8
[ 1039.332347][ T7775] usb 9-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[ 1039.333701][ T7775] usb 9-1: config 254 has an invalid interface number: 105 but max is 0
[ 1039.333724][ T7775] usb 9-1: config 254 has no interface number 0
[ 1039.333752][ T7775] usb 9-1: too many endpoints for config 254 interface 105 altsetting 152: 112, using maximum allowed: 30
[ 1039.333789][ T7775] usb 9-1: config 254 interface 105 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 112
[ 1039.333814][ T7775] usb 9-1: config 254 interface 105 has no altsetting 0
[ 1039.336144][ T7775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.336166][ T7775] usb 9-1: Product: syz
[ 1039.336180][ T7775] usb 9-1: Manufacturer: syz
[ 1039.336194][ T7775] usb 9-1: SerialNumber: syz
[ 1039.370520][ T7801] usb 1-1: Using ep0 maxpacket: 8
[ 1039.378491][T22474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.379012][T22474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.382790][T22474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.383528][T22474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.432376][ T7801] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1039.432427][ T7801] usb 1-1: New USB device found, idVendor=413c, idProduct=8137, bcdDevice=e3.82
[ 1039.436864][ T7801] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1039.436944][ T7801] usb 1-1: can't read configurations, error -71
[ 1039.587143][ T7775] mxuport 9-1:254.105: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1039.588130][ T7775] mxuport 9-1:254.105: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1039.588192][ T7775] mxuport 9-1:254.105: probe with driver mxuport failed with error -71
[ 1039.596440][ T7775] usb 9-1: USB disconnect, device number 52
[ 1040.511848][T13490] usb 8-1: USB disconnect, device number 118
[ 1040.691547][ T7801] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1040.841078][ T7801] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1040.841892][ T7801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1040.841919][ T7801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1040.841932][ T7801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1040.841943][ T7801] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1040.841965][ T7801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.845703][ T7801] usb 1-1: config 0 descriptor??
[ 1041.068805][T22507] netlink: 'syz.7.4546': attribute type 30 has an invalid length.
[ 1041.311855][ T7801] plantronics 0003:047F:FFFF.0053: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1041.347966][T22515] program syz.7.4550 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1041.690279][ T7770] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1041.817307][T22524] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4543'.
[ 1041.851791][ T7770] usb 6-1: Using ep0 maxpacket: 32
[ 1041.875923][T22523] fuse: Unknown parameter 'user_id00000000000000000000'
[ 1041.893681][ T7770] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1041.909080][ T7770] usb 6-1: config 123 interface 0 has no altsetting 0
[ 1042.103354][ T7770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.103381][ T7770] usb 6-1: Product: syz
[ 1042.103392][ T7770] usb 6-1: Manufacturer: syz
[ 1042.103399][ T7770] usb 6-1: SerialNumber: syz
[ 1042.400655][ T7770] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1042.404852][ T7770] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1042.405306][ T7770] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1042.405350][ T7770] usb 6-1: media controller created
[ 1042.450688][ T7770] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1042.479180][T22521] binder: 22499:22521 ioctl c0045005 800002c0 returned -22
[ 1042.640678][ T7791] usb 1-1: reset high-speed USB device number 83 using dummy_hcd
[ 1042.648713][ T7770] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1042.648729][ T7770] error writing reg: 0xff, val: 0x00
[ 1042.766116][ T7770] dvb_usb_mxl111sf 6-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1043.411132][ T7801] usb 8-1: new full-speed USB device number 119 using dummy_hcd
[ 1043.507927][T22553] netlink: 'syz.6.4558': attribute type 30 has an invalid length.
[ 1043.540821][ T7801] usb 8-1: device descriptor read/64, error -71
[ 1043.780917][ T7801] usb 8-1: new full-speed USB device number 120 using dummy_hcd
[ 1043.910542][ T7801] usb 8-1: device descriptor read/64, error -71
[ 1043.997030][ T7770] usb 6-1: USB disconnect, device number 46
[ 1044.020993][ T7801] usb usb8-port1: attempt power cycle
[ 1044.360657][ T7801] usb 8-1: new full-speed USB device number 121 using dummy_hcd
[ 1044.382149][ T7801] usb 8-1: device descriptor read/8, error -71
[ 1044.624953][ T7801] usb 8-1: new full-speed USB device number 122 using dummy_hcd
[ 1044.661040][ T7801] usb 8-1: device descriptor read/8, error -71
[ 1044.751723][T22589] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[ 1044.771281][ T7801] usb usb8-port1: unable to enumerate USB device
[ 1044.811588][ T1839] usb 1-1: USB disconnect, device number 83
[ 1045.144097][T22593] overlayfs: missing 'lowerdir'
[ 1045.147619][T22593] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4566'.
[ 1045.331588][T22600] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[ 1045.565896][T22608] netlink: 'syz.5.4570': attribute type 30 has an invalid length.
[ 1045.669025][T22614] binder: 22603:22614 ioctl c0045005 800002c0 returned -22
[ 1045.890668][ T7775] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1046.040678][ T7775] usb 6-1: Using ep0 maxpacket: 8
[ 1046.041232][ T7775] usb 6-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=f5.e7
[ 1046.042250][ T7775] usb 6-1: config 7 has an invalid interface number: 172 but max is 0
[ 1046.042274][ T7775] usb 6-1: config 7 has no interface number 0
[ 1046.042312][ T7775] usb 6-1: config 7 interface 172 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1046.042330][ T7775] usb 6-1: config 7 interface 172 has no altsetting 0
[ 1046.044357][ T7775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1046.044374][ T7775] usb 6-1: Product: syz
[ 1046.044381][ T7775] usb 6-1: Manufacturer: syz
[ 1046.044388][ T7775] usb 6-1: SerialNumber: syz
[ 1046.276068][ T7775] usb 6-1: USB disconnect, device number 47
[ 1046.452981][T22621] syzkaller0: entered promiscuous mode
[ 1046.452996][T22621] syzkaller0: entered allmulticast mode
[ 1047.058676][T22638] FAULT_INJECTION: forcing a failure.
[ 1047.058676][T22638] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1047.058707][T22638] CPU: 1 UID: 0 PID: 22638 Comm: syz.6.4576 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1047.058735][T22638] Tainted: [L]=SOFTLOCKUP
[ 1047.058741][T22638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1047.058751][T22638] Call Trace:
[ 1047.058758][T22638]  <TASK>
[ 1047.058767][T22638]  dump_stack_lvl+0xe8/0x150
[ 1047.058798][T22638]  should_fail_ex+0x410/0x560
[ 1047.058825][T22638]  _copy_from_user+0x2d/0xb0
[ 1047.058841][T22638]  get_compat_msghdr+0xb3/0x4c0
[ 1047.058859][T22638]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1047.058880][T22638]  ___sys_sendmsg+0x201/0x360
[ 1047.058894][T22638]  ? __lock_acquire+0x747/0x2de0
[ 1047.058907][T22638]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1047.058920][T22638]  ? get_pid_task+0x20/0x1f0
[ 1047.058930][T22638]  ? get_pid_task+0x20/0x1f0
[ 1047.058938][T22638]  ? get_pid_task+0x20/0x1f0
[ 1047.058962][T22638]  ? __fget_files+0x2a/0x420
[ 1047.058975][T22638]  ? __fget_files+0x3a2/0x420
[ 1047.058994][T22638]  __sys_sendmsg+0x177/0x240
[ 1047.059008][T22638]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1047.059031][T22638]  __do_fast_syscall_32+0x27a/0x6a0
[ 1047.059045][T22638]  ? do_fast_syscall_32+0x33/0x70
[ 1047.059058][T22638]  ? asm_int80_emulation+0x1a/0x20
[ 1047.059068][T22638]  ? do_int80_emulation+0x299/0x500
[ 1047.059080][T22638]  ? trace_irq_disable+0x3b/0x140
[ 1047.059092][T22638]  do_fast_syscall_32+0x33/0x70
[ 1047.059105][T22638]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1047.059117][T22638] RIP: 0023:0xf704f0ec
[ 1047.059127][T22638] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1047.059136][T22638] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1047.059148][T22638] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080
[ 1047.059156][T22638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1047.059162][T22638] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1047.059167][T22638] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1047.059174][T22638] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1047.059195][T22638]  </TASK>
[ 1047.527936][   T31] kauditd_printk_skb: 118 callbacks suppressed
[ 1047.527955][   T31] audit: type=1326 audit(1790222696.437:14087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.528441][   T31] audit: type=1326 audit(1790222696.437:14088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.528590][   T31] audit: type=1326 audit(1790222696.437:14089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.528733][   T31] audit: type=1326 audit(1790222696.437:14090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.528880][   T31] audit: type=1326 audit(1790222696.437:14091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.529285][   T31] audit: type=1326 audit(1790222696.437:14092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.529438][   T31] audit: type=1326 audit(1790222696.437:14093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.529615][   T31] audit: type=1326 audit(1790222696.437:14094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.531736][T22643] syz.7.4580 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1047.536120][   T31] audit: type=1326 audit(1790222696.447:14095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.536168][   T31] audit: type=1326 audit(1790222696.447:14096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22642 comm="syz.7.4580" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000
[ 1047.771202][T13490] usb 8-1: new full-speed USB device number 123 using dummy_hcd
[ 1047.828496][T22647] netlink: 'syz.8.4581': attribute type 30 has an invalid length.
[ 1047.936341][T13490] usb 8-1: not running at top speed; connect to a high speed hub
[ 1047.936378][T13490] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1047.944586][T13490] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 959, setting to 64
[ 1047.944630][T13490] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1072, setting to 64
[ 1047.958051][T13490] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.958077][T13490] usb 8-1: Product: ␊
[ 1047.958091][T13490] usb 8-1: Manufacturer: Е
[ 1047.958104][T13490] usb 8-1: SerialNumber: П
[ 1047.993724][T22643] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[ 1048.208478][T22643] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.208751][T22643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.208953][T22643] bridge_slave_0: entered allmulticast mode
[ 1048.213205][T22643] bridge_slave_0: entered promiscuous mode
[ 1048.219172][T22643] bridge_slave_0: left allmulticast mode
[ 1048.219196][T22643] bridge_slave_0: left promiscuous mode
[ 1048.219477][T22643] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1048.360290][ T7770] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1048.531621][ T7770] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1048.532909][ T7770] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1048.532932][ T7770] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1048.532950][ T7770] usb 1-1: config 1 has no interface number 0
[ 1048.532987][ T7770] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1048.533011][ T7770] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1048.533048][ T7770] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1048.535725][ T7770] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1048.535747][ T7770] usb 1-1: Product: syz
[ 1048.535761][ T7770] usb 1-1: Manufacturer: syz
[ 1048.535768][ T7770] usb 1-1: SerialNumber: syz
[ 1048.801670][T22665] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1048.808893][T22662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1048.817979][T22662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1048.883114][T13490] cdc_ncm 8-1:1.0: bind() failure
[ 1048.888646][T13490] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found
[ 1048.888692][T13490] cdc_ncm 8-1:1.1: bind() failure
[ 1048.897129][T13490] usb 8-1: USB disconnect, device number 123
[ 1049.109157][T22674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4584'.
[ 1049.187833][T22674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1049.201786][T22674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1050.592934][ T7770] cdc_ncm 1-1:1.1: bind() failure
[ 1050.625681][ T7770] usb 1-1: USB disconnect, device number 84
[ 1050.718269][T22702] netlink: 'syz.8.4593': attribute type 30 has an invalid length.
[ 1050.791038][ T7801] usb 8-1: new high-speed USB device number 124 using dummy_hcd
[ 1050.940570][ T7801] usb 8-1: Using ep0 maxpacket: 8
[ 1050.941301][ T7801] usb 8-1: New USB device found, idVendor=05a9, idProduct=2641, bcdDevice=f5.e7
[ 1050.942704][ T7801] usb 8-1: config 7 has an invalid interface number: 172 but max is 0
[ 1050.942727][ T7801] usb 8-1: config 7 has no interface number 0
[ 1050.942764][ T7801] usb 8-1: config 7 interface 172 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[ 1050.942788][ T7801] usb 8-1: config 7 interface 172 has no altsetting 0
[ 1050.945461][ T7801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1050.945484][ T7801] usb 8-1: Product: syz
[ 1050.945496][ T7801] usb 8-1: Manufacturer: syz
[ 1050.945508][ T7801] usb 8-1: SerialNumber: syz
[ 1051.173788][T22716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1051.174338][T22716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1051.258403][ T7801] usb 8-1: USB disconnect, device number 124
[ 1051.414061][ T5611] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11
[ 1051.424834][T13490] usb 9-1: new low-speed USB device number 53 using dummy_hcd
[ 1051.583713][T13490] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1051.583759][T13490] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1051.585672][T13490] usb 9-1: config 1 has an invalid descriptor of length 98, skipping remainder of the config
[ 1051.585712][T13490] usb 9-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1051.585725][T13490] usb 9-1: config 1 interface 0 has no altsetting 0
[ 1051.597995][T13490] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.598020][T13490] usb 9-1: Product: 䓢냁柤ꠂ㝊ꝶ쀋谬䴭ۇ콈龞珠팭顉鶔엓ᦎ⌢㾽ը㶏埰䈴ᵲ࡫
[ 1051.598036][T13490] usb 9-1: SerialNumber: ⧏ڇ⡒烆澈灐臎娨灏蕽堚儴麩눪᫼ល᥯헋踍焁갧ᡩᮩ᫩帿奆襇륕턢⒲ﻳ熗켴澓簈Ʀ깮粷༗꧱Ჽ킻㦑梣佧Ɉ⺠蘍읃켵㷮弪풁抂盯㽃ﶮҹ嚚ᔆ駰낎쿐熢僲匥翓㓒莟쇺搊핣꒩屌గ栔뗽六⣏婉슐팓艹䄹ᳬ脸⬋૯긷犤蜁兟㶏씔㷠鄙䕧縠ॹ苿뿠㸰쵣
[ 1052.480680][ T7785] usb 8-1: new high-speed USB device number 125 using dummy_hcd
[ 1052.644767][ T7785] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1052.648616][ T7785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1052.648643][ T7785] usb 8-1: Product: syz
[ 1052.648657][ T7785] usb 8-1: Manufacturer: syz
[ 1052.648671][ T7785] usb 8-1: SerialNumber: syz
[ 1052.713523][ T1839] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1052.931437][ T7801] usb 8-1: USB disconnect, device number 125
[ 1053.117687][T22750] netlink: 'syz.0.4604': attribute type 30 has an invalid length.
[ 1053.531170][ T7775] usb 1-1: new full-speed USB device number 85 using dummy_hcd
[ 1053.683103][ T7775] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1053.683723][ T7775] usb 1-1: not running at top speed; connect to a high speed hub
[ 1053.683753][ T7775] usb 1-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=5b.c4
[ 1053.684803][ T7775] usb 1-1: config 4 has an invalid interface number: 228 but max is 0
[ 1053.684824][ T7775] usb 1-1: config 4 has no interface number 0
[ 1053.684886][ T7775] usb 1-1: config 4 interface 228 has no altsetting 0
[ 1053.686870][ T7775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1053.686891][ T7775] usb 1-1: Product: syz
[ 1053.686904][ T7775] usb 1-1: Manufacturer: syz
[ 1053.686914][ T7775] usb 1-1: SerialNumber: syz
[ 1053.760661][ T1839] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive
[ 1053.760869][ T1839] ath9k_htc: Failed to initialize the device
[ 1053.761993][ T7801] usb 8-1: ath9k_htc: USB layer deinitialized
[ 1053.944613][ T7775] quatech2 1-1:4.228: Quatech 2nd gen USB to Serial Driver converter detected
[ 1053.946678][ T7775] usb 1-1: qt2_attach - failed to power on unit: -71
[ 1053.946819][ T7775] quatech2 1-1:4.228: probe with driver quatech2 failed with error -71
[ 1053.953711][ T7775] usb 1-1: USB disconnect, device number 85
[ 1054.071051][ T7801] usb 8-1: new high-speed USB device number 126 using dummy_hcd
[ 1054.103423][T13490] cdc_ether 9-1:1.0: skipping garbage
[ 1054.103446][T13490] usb 9-1: No union descriptors
[ 1054.122779][T13490] usb 9-1: USB disconnect, device number 53
[ 1054.222951][ T7801] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1054.226756][ T7801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.226780][ T7801] usb 8-1: Product: syz
[ 1054.226793][ T7801] usb 8-1: Manufacturer: syz
[ 1054.226805][ T7801] usb 8-1: SerialNumber: syz
[ 1054.395685][   T31] kauditd_printk_skb: 73 callbacks suppressed
[ 1054.395704][   T31] audit: type=1326 audit(1790222703.307:14170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22770 comm="syz.6.4609" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x0
[ 1054.402161][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.402217][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.511019][T13490] usb 9-1: new high-speed USB device number 54 using dummy_hcd
[ 1054.593465][T22776] nvme_fabrics: missing parameter 'host_traddr=%s'
[ 1054.617325][T22780] IPVS: stopping master sync thread 17440 ...
[ 1054.665130][T13490] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1054.666239][T13490] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1054.666257][T13490] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1054.666267][T13490] usb 9-1: config 1 has no interface number 0
[ 1054.666288][T13490] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1054.666301][T13490] usb 9-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[ 1054.666334][T13490] usb 9-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1054.686076][T13490] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1054.686124][T13490] usb 9-1: Product: syz
[ 1054.686138][T13490] usb 9-1: Manufacturer: syz
[ 1054.686152][T13490] usb 9-1: SerialNumber: syz
[ 1054.836685][T22787] netlink: 'syz.5.4616': attribute type 30 has an invalid length.
[ 1054.918743][T22764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1054.919033][T22764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1055.240326][T22799] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4607'.
[ 1055.249155][T22799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1055.249760][T22800] input: syz0 as /devices/virtual/input/input231
[ 1055.286137][T22799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1055.681477][ T7801] usb 8-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed
[ 1055.808080][ T7801] usb 8-1: ath9k_htc: USB layer deinitialized
[ 1056.111212][ T7775] usb 1-1: new full-speed USB device number 86 using dummy_hcd
[ 1056.216569][T13490] cdc_ncm 9-1:1.1: bind() failure
[ 1056.237172][T13490] usb 9-1: USB disconnect, device number 54
[ 1056.264708][ T7775] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1056.265195][ T7775] usb 1-1: not running at top speed; connect to a high speed hub
[ 1056.265225][ T7775] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 1056.266180][ T7775] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[ 1056.266224][ T7775] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[ 1056.266243][ T7775] usb 1-1: config 14 has no interface number 0
[ 1056.266258][ T7775] usb 1-1: config 14 has no interface number 1
[ 1056.266316][ T7775] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 1056.266336][ T7775] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0x1B, changing to 0xB
[ 1056.266359][ T7775] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 1056.266381][ T7775] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64
[ 1056.266406][ T7775] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has invalid maxpacket 30768, setting to 64
[ 1056.266427][ T7775] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1056.266449][ T7775] usb 1-1: config 14 interface 57 has no altsetting 0
[ 1056.266466][ T7775] usb 1-1: config 14 interface 228 has no altsetting 0
[ 1056.268840][ T7775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.268862][ T7775] usb 1-1: Product: syz
[ 1056.268876][ T7775] usb 1-1: Manufacturer: syz
[ 1056.268897][ T7775] usb 1-1: SerialNumber: syz
[ 1056.474405][T13490] usb 8-1: USB disconnect, device number 126
[ 1056.756076][T22805] syzkaller1: tun_chr_ioctl cmd 2147767507
[ 1056.820735][T22826] cifs: Unknown parameter 'f,'
[ 1056.922239][T22833] netlink: 'syz.8.4628': attribute type 30 has an invalid length.
[ 1057.060476][ T7770] usb 8-1: new full-speed USB device number 127 using dummy_hcd
[ 1057.200406][ T7770] usb 8-1: device descriptor read/64, error -71
[ 1057.460237][ T7770] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[ 1057.590060][ T7770] usb 8-1: device descriptor read/64, error -71
[ 1057.711130][ T7770] usb usb8-port1: attempt power cycle
[ 1057.901055][T13490] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1058.050880][T13490] usb 6-1: Using ep0 maxpacket: 8
[ 1058.053208][T13490] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1058.081306][ T7770] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[ 1058.087097][T13490] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1058.087168][T13490] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1058.087181][T13490] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1058.087193][T13490] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1058.087204][T13490] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1058.087228][T13490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.167922][ T7770] usb 8-1: device descriptor read/8, error -71
[ 1058.410020][ T7770] usb 8-1: new full-speed USB device number 4 using dummy_hcd
[ 1058.430885][ T7770] usb 8-1: device descriptor read/8, error -71
[ 1058.451427][T13490] usb 6-1: GET_CAPABILITIES returned a
[ 1058.451475][T13490] usbtmc 6-1:16.0: can't read capabilities
[ 1058.540284][ T7770] usb usb8-port1: unable to enumerate USB device
[ 1058.994544][ T7775] legousbtower 1-1:14.57: interrupt endpoints not found
[ 1059.021929][ T7775] legousbtower 1-1:14.228: get version request failed: -71
[ 1059.022096][ T7775] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71
[ 1059.062072][ T7775] usb 1-1: USB disconnect, device number 86
[ 1059.112261][T13490] usb 9-1: new full-speed USB device number 55 using dummy_hcd
[ 1059.260957][T13490] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1059.261963][T13490] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1059.261981][T13490] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1059.263339][T13490] usb 9-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1059.263357][T13490] usb 9-1: Product: syz
[ 1059.263370][T13490] usb 9-1: Manufacturer: syz
[ 1059.268547][T13490] hub 9-1:4.0: USB hub found
[ 1059.430518][ T7775] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1059.581376][ T7775] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00
[ 1059.582472][ T7775] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1059.582517][ T7775] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1059.582537][ T7775] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1059.582600][ T7775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.613748][ T7775] cxacru 1-1:1.0: cxacru_bind: interface has incorrect endpoints
[ 1059.613910][ T7775] cxacru 1-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 1059.634651][T22867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1059.637072][T22867] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1059.974220][T22879] netlink: 'syz.7.4639': attribute type 1 has an invalid length.
[ 1060.019410][T22879] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1060.024412][T22876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1060.029877][T22876] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1060.049010][T22879] 8021q: adding VLAN 0 to HW filter on device batadv2
[ 1060.088319][T22879] bond15: (slave batadv2): making interface the new active one
[ 1060.098756][T22879] bond15: (slave batadv2): Enslaving as an active interface with an up link
[ 1060.136397][ T7801] usb 1-1: USB disconnect, device number 87
[ 1060.208248][T22882] netlink: 'syz.7.4640': attribute type 30 has an invalid length.
[ 1060.372513][ T1839] usb 6-1: USB disconnect, device number 48
[ 1060.951219][ T7775] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1061.101924][ T7775] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1061.103302][ T7775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1061.103385][ T7775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.106797][ T7775] usb 6-1: config 0 descriptor??
[ 1061.321071][ T7775] usbhid 6-1:0.0: can't add hid device: -71
[ 1061.321204][ T7775] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1061.326100][ T7775] usb 6-1: USB disconnect, device number 49
[ 1061.379936][ T1839] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[ 1061.539875][ T1839] usb 8-1: Using ep0 maxpacket: 32
[ 1061.540037][ T7785] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1061.540799][ T1839] usb 8-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1061.542181][ T1839] usb 8-1: config 123 interface 0 has no altsetting 0
[ 1061.544756][ T1839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.544779][ T1839] usb 8-1: Product: syz
[ 1061.544793][ T1839] usb 8-1: Manufacturer: syz
[ 1061.544806][ T1839] usb 8-1: SerialNumber: syz
[ 1061.700537][ T7785] usb 1-1: Using ep0 maxpacket: 16
[ 1061.702383][ T7785] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1061.703835][ T7785] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1061.703852][ T7785] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1061.706447][ T7785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1061.706461][ T7785] usb 1-1: Product: syz
[ 1061.706469][ T7785] usb 1-1: Manufacturer: syz
[ 1061.706480][ T7785] usb 1-1: SerialNumber: syz
[ 1061.709420][ T7785] usb 1-1: config 0 descriptor??
[ 1061.761241][ T7775] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1061.784176][ T1839] usb 8-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1061.789595][ T1839] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1061.809241][ T1839] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1061.809296][ T1839] usb 8-1: media controller created
[ 1061.834559][ T1839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1061.914018][ T7775] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1061.916281][T13490] hub 9-1:4.0: config failed, can't read hub descriptor (err -22)
[ 1061.942739][ T7775] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1061.942974][ T7775] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.955786][ T7775] usb 6-1: config 0 descriptor??
[ 1061.961869][ T1839] usb 8-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1061.961890][ T1839] error writing reg: 0xff, val: 0x00
[ 1061.963196][T13490] usb 9-1: USB disconnect, device number 55
[ 1062.029600][T22892] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1062.075082][ T1839] dvb_usb_mxl111sf 8-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1062.078250][ T7801] usb 1-1: USB disconnect, device number 88
[ 1062.196264][T22901] FAULT_INJECTION: forcing a failure.
[ 1062.196264][T22901] name failslab, interval 1, probability 0, space 0, times 0
[ 1062.196286][T22901] CPU: 1 UID: 0 PID: 22901 Comm: syz.8.4646 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1062.196301][T22901] Tainted: [L]=SOFTLOCKUP
[ 1062.196305][T22901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1062.196312][T22901] Call Trace:
[ 1062.196319][T22901]  <TASK>
[ 1062.196324][T22901]  dump_stack_lvl+0xe8/0x150
[ 1062.196344][T22901]  should_fail_ex+0x410/0x560
[ 1062.196360][T22901]  should_failslab+0xa8/0x100
[ 1062.196375][T22901]  __kmalloc_cache_noprof+0xa3/0x600
[ 1062.196386][T22901]  ? __kmalloc_cache_noprof+0x14d/0x600
[ 1062.196395][T22901]  ? sctp_add_bind_addr+0x8c/0x370
[ 1062.196410][T22901]  ? sctp_add_bind_addr+0x8c/0x370
[ 1062.196428][T22901]  sctp_add_bind_addr+0x8c/0x370
[ 1062.196445][T22901]  sctp_copy_local_addr_list+0x31a/0x4e0
[ 1062.196462][T22901]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[ 1062.196483][T22901]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1062.196501][T22901]  ? sctp_v4_is_any+0x35/0x60
[ 1062.196512][T22901]  ? sctp_copy_one_addr+0x93/0x360
[ 1062.196528][T22901]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1062.196543][T22901]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1062.196559][T22901]  sctp_connect_new_asoc+0x2ff/0x6b0
[ 1062.196573][T22901]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1062.196588][T22901]  ? __local_bh_enable_ip+0xd6/0x140
[ 1062.196601][T22901]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1062.196615][T22901]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1062.196627][T22901]  sctp_sendmsg+0x159b/0x2d00
[ 1062.196647][T22901]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1062.196666][T22901]  ? lock_acquire+0x115/0x350
[ 1062.196678][T22901]  ? aa_sock_msg_perm+0xfc/0x210
[ 1062.196691][T22901]  ? sock_rps_record_flow+0x19/0x350
[ 1062.196703][T22901]  ? inet_sendmsg+0x298/0x320
[ 1062.196715][T22901]  ? __pfx_inet_sendmsg+0x10/0x10
[ 1062.196724][T22901]  sock_sendmsg_nosec+0x10e/0x180
[ 1062.196737][T22901]  ____sys_sendmsg+0x54e/0x850
[ 1062.196754][T22901]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1062.196776][T22901]  ___sys_sendmsg+0x2a5/0x360
[ 1062.196789][T22901]  ? __lock_acquire+0x747/0x2de0
[ 1062.196801][T22901]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1062.196818][T22901]  ? kstrtoull+0x137/0x1d0
[ 1062.196848][T22901]  ? __fget_files+0x2a/0x420
[ 1062.196862][T22901]  ? __fget_files+0x3a2/0x420
[ 1062.196881][T22901]  __sys_sendmmsg+0x2de/0x4d0
[ 1062.196898][T22901]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1062.196926][T22901]  ? fput+0xa0/0xd0
[ 1062.196938][T22901]  ? ksys_write+0x242/0x270
[ 1062.196957][T22901]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 1062.196969][T22901]  __do_fast_syscall_32+0x27a/0x6a0
[ 1062.196987][T22901]  ? do_fast_syscall_32+0x33/0x70
[ 1062.196999][T22901]  ? asm_int80_emulation+0x1a/0x20
[ 1062.197009][T22901]  ? do_int80_emulation+0x299/0x500
[ 1062.197024][T22901]  do_fast_syscall_32+0x33/0x70
[ 1062.197037][T22901]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1062.197049][T22901] RIP: 0023:0xf6fcf0ec
[ 1062.197059][T22901] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1062.197067][T22901] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 1062.197079][T22901] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006d40
[ 1062.197086][T22901] RDX: 0000000000000001 RSI: 0000000000048000 RDI: 0000000000000000
[ 1062.197092][T22901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1062.197098][T22901] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1062.197104][T22901] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1062.197119][T22901]  </TASK>
[ 1062.516583][ T7801] usb 8-1: USB disconnect, device number 5
[ 1062.717971][T22913] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[ 1062.989284][T22918] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4649'.
[ 1062.989307][T22918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4649'.
[ 1062.989619][T22918] unsupported nlmsg_type 40
[ 1063.011614][   T31] audit: type=1326 audit(1790222711.927:14171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.016567][   T31] audit: type=1326 audit(1790222711.927:14172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.029443][   T31] audit: type=1326 audit(1790222711.937:14173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.029647][   T31] audit: type=1326 audit(1790222711.937:14174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.032996][   T31] audit: type=1326 audit(1790222711.937:14175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.034736][   T31] audit: type=1326 audit(1790222711.947:14176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.034948][   T31] audit: type=1326 audit(1790222711.947:14177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.035160][   T31] audit: type=1326 audit(1790222711.947:14178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.035626][   T31] audit: type=1326 audit(1790222711.947:14179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=104 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.035844][   T31] audit: type=1326 audit(1790222711.947:14180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.6.4650" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704f0ec code=0x7ffc0000
[ 1063.153022][ T7775] aiptek 6-1:0.0: Aiptek using 400 ms programming speed
[ 1063.155405][ T7775] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input232
[ 1063.298586][T22924] netlink: 'syz.7.4651': attribute type 41 has an invalid length.
[ 1063.298608][T22924] netlink: 'syz.7.4651': attribute type 17 has an invalid length.
[ 1063.383057][T22926] FAULT_INJECTION: forcing a failure.
[ 1063.383057][T22926] name failslab, interval 1, probability 0, space 0, times 0
[ 1063.383090][T22926] CPU: 0 UID: 0 PID: 22926 Comm: syz.7.4652 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1063.383114][T22926] Tainted: [L]=SOFTLOCKUP
[ 1063.383122][T22926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1063.383133][T22926] Call Trace:
[ 1063.383141][T22926]  <TASK>
[ 1063.383146][T22926]  dump_stack_lvl+0xe8/0x150
[ 1063.383165][T22926]  should_fail_ex+0x410/0x560
[ 1063.383180][T22926]  should_failslab+0xa8/0x100
[ 1063.383194][T22926]  __kmalloc_cache_noprof+0xa3/0x600
[ 1063.383204][T22926]  ? stack_trace_save+0xa9/0x100
[ 1063.383221][T22926]  ? rtnl_newlink+0x143/0x1c30
[ 1063.383243][T22926]  ? rtnl_newlink+0x143/0x1c30
[ 1063.383271][T22926]  rtnl_newlink+0x143/0x1c30
[ 1063.383295][T22926]  ? kasan_save_track+0x4f/0x80
[ 1063.383309][T22926]  ? kasan_save_track+0x3e/0x80
[ 1063.383322][T22926]  ? __kasan_slab_free+0x5c/0x80
[ 1063.383332][T22926]  ? kmem_cache_free+0x182/0x650
[ 1063.383342][T22926]  ? nlmon_xmit+0xb0/0x100
[ 1063.383353][T22926]  ? dev_hard_start_xmit+0x2cd/0x830
[ 1063.383458][T22926]  ? __dev_queue_xmit+0x14c0/0x3820
[ 1063.383485][T22926]  ? __netlink_deliver_tap+0x5b4/0x860
[ 1063.383512][T22926]  ? netlink_deliver_tap+0x19c/0x1b0
[ 1063.383548][T22926]  ? netlink_unicast+0x781/0x940
[ 1063.383561][T22926]  ? netlink_sendmsg+0x813/0xb40
[ 1063.383572][T22926]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1063.383591][T22926]  ? __do_fast_syscall_32+0x27a/0x6a0
[ 1063.383615][T22926]  ? do_fast_syscall_32+0x33/0x70
[ 1063.383638][T22926]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1063.383684][T22926]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1063.383696][T22926]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1063.383710][T22926]  ? nlmon_xmit+0xb0/0x100
[ 1063.383721][T22926]  ? kmem_cache_free+0x182/0x650
[ 1063.383743][T22926]  ? __lock_acquire+0x747/0x2de0
[ 1063.383771][T22926]  ? __local_bh_enable_ip+0xd6/0x140
[ 1063.383796][T22926]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1063.383818][T22926]  ? __dev_queue_xmit+0x29b/0x3820
[ 1063.383835][T22926]  ? __local_bh_enable_ip+0xd6/0x140
[ 1063.383847][T22926]  ? __dev_queue_xmit+0x29b/0x3820
[ 1063.383865][T22926]  ? lock_acquire+0x115/0x350
[ 1063.383875][T22926]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1063.383901][T22926]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1063.383924][T22926]  rtnetlink_rcv_msg+0x802/0xc00
[ 1063.383952][T22926]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1063.383974][T22926]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1063.383987][T22926]  ? ref_tracker_free+0x689/0x830
[ 1063.384001][T22926]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1063.384019][T22926]  netlink_rcv_skb+0x226/0x4a0
[ 1063.384039][T22926]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1063.384064][T22926]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1063.384105][T22926]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1063.384138][T22926]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1063.384159][T22926]  netlink_unicast+0x7bd/0x940
[ 1063.384178][T22926]  netlink_sendmsg+0x813/0xb40
[ 1063.384197][T22926]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1063.384222][T22926]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1063.384247][T22926]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1063.384265][T22926]  sock_sendmsg_nosec+0x13a/0x180
[ 1063.384287][T22926]  ____sys_sendmsg+0x54e/0x850
[ 1063.384304][T22926]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1063.384326][T22926]  ___sys_sendmsg+0x2a5/0x360
[ 1063.384338][T22926]  ? __lock_acquire+0x747/0x2de0
[ 1063.384358][T22926]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1063.384383][T22926]  ? get_pid_task+0x20/0x1f0
[ 1063.384401][T22926]  ? get_pid_task+0x20/0x1f0
[ 1063.384417][T22926]  ? get_pid_task+0x20/0x1f0
[ 1063.384451][T22926]  ? __fget_files+0x2a/0x420
[ 1063.384465][T22926]  ? __fget_files+0x3a2/0x420
[ 1063.384483][T22926]  __sys_sendmsg+0x177/0x240
[ 1063.384499][T22926]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1063.384550][T22926]  __do_fast_syscall_32+0x27a/0x6a0
[ 1063.384577][T22926]  ? do_fast_syscall_32+0x33/0x70
[ 1063.384595][T22926]  ? asm_int80_emulation+0x1a/0x20
[ 1063.384604][T22926]  ? do_int80_emulation+0x299/0x500
[ 1063.384617][T22926]  ? trace_irq_disable+0x3b/0x140
[ 1063.384630][T22926]  do_fast_syscall_32+0x33/0x70
[ 1063.384644][T22926]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1063.384664][T22926] RIP: 0023:0xf705f0ec
[ 1063.384683][T22926] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8
[ 1063.384699][T22926] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1063.384719][T22926] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[ 1063.384733][T22926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1063.384742][T22926] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1063.384749][T22926] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1063.384755][T22926] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1063.384770][T22926]  </TASK>
[ 1063.529844][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1063.549840][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1063.569834][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[ 1063.759969][    C1] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[ 1063.769852][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1063.889833][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1064.077671][T22929] netlink: 'syz.8.4654': attribute type 30 has an invalid length.
[ 1064.458318][ T7785] usb 6-1: USB disconnect, device number 50
[ 1064.458466][    C1] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1064.863516][ T1839] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[ 1065.035870][ T1839] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1065.036547][ T1839] usb 8-1: config 0 has no interfaces?
[ 1065.064230][ T1839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1065.064249][ T1839] usb 8-1: Product: syz
[ 1065.064256][ T1839] usb 8-1: Manufacturer: syz
[ 1065.064263][ T1839] usb 8-1: SerialNumber: syz
[ 1065.067786][ T1839] usb 8-1: config 0 descriptor??
[ 1065.131742][T22943] binfmt_misc: register: failed to install interpreter ./cgroup
[ 1065.659775][T22952] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4670'.
[ 1065.661972][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4670'.
[ 1065.661985][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4670'.
[ 1065.662418][T22952] netlink: 'syz.0.4670': attribute type 41 has an invalid length.
[ 1065.662433][T22952] netlink: 'syz.0.4670': attribute type 17 has an invalid length.
[ 1065.843962][ T1839] usb 9-1: new high-speed USB device number 56 using dummy_hcd
[ 1066.010789][ T1839] usb 9-1: Using ep0 maxpacket: 16
[ 1066.011843][ T1839] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1066.012871][ T1839] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1066.012892][ T1839] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1066.062160][ T1839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.062187][ T1839] usb 9-1: Product: syz
[ 1066.062201][ T1839] usb 9-1: Manufacturer: syz
[ 1066.062215][ T1839] usb 9-1: SerialNumber: syz
[ 1066.064846][ T1839] usb 9-1: config 0 descriptor??
[ 1066.329146][T22948] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1066.341613][ T7775] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[ 1066.434397][ T7770] usb 9-1: USB disconnect, device number 56
[ 1066.494158][ T7775] usb 1-1: Using ep0 maxpacket: 32
[ 1066.494868][ T7775] usb 1-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1066.496020][ T7775] usb 1-1: config 123 interface 0 has no altsetting 0
[ 1066.498097][ T7775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1066.498121][ T7775] usb 1-1: Product: syz
[ 1066.498134][ T7775] usb 1-1: Manufacturer: syz
[ 1066.498148][ T7775] usb 1-1: SerialNumber: syz
[ 1066.712530][ T7775] usb 1-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1066.714934][ T7775] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1066.715281][ T7775] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1066.715308][ T7775] usb 1-1: media controller created
[ 1066.726782][ T7775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1066.913442][ T7775] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1066.913459][ T7775] error writing reg: 0xff, val: 0x00
[ 1066.942232][ T7775] dvb_usb_mxl111sf 1-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1067.409315][ T7770] usb 1-1: USB disconnect, device number 89
[ 1067.492694][T13490] usb 8-1: USB disconnect, device number 6
[ 1067.845510][T22993] netlink: 'syz.8.4667': attribute type 30 has an invalid length.
[ 1068.338089][T23002] IPv6: addrconf: prefix option has invalid lifetime
[ 1068.365233][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4672'.
[ 1068.711152][T13490] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[ 1068.861853][T13490] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1068.864051][T13490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1068.864096][T13490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.869616][T13490] usb 1-1: config 0 descriptor??
[ 1069.112348][T13490] usbhid 1-1:0.0: can't add hid device: -71
[ 1069.112640][T13490] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1069.123291][T13490] usb 1-1: USB disconnect, device number 90
[ 1069.480208][ T7770] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1069.580017][ T7785] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[ 1069.580698][T13490] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[ 1069.630619][ T7801] usb 9-1: new high-speed USB device number 57 using dummy_hcd
[ 1069.650814][ T7770] usb 6-1: Using ep0 maxpacket: 8
[ 1069.652213][ T7770] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[ 1069.653539][ T7770] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.653582][ T7770] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[ 1069.653605][ T7770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[ 1069.653629][ T7770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[ 1069.653653][ T7770] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1069.653669][ T7770] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1069.655597][ T7770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.655618][ T7770] usb 6-1: Product: syz
[ 1069.655631][ T7770] usb 6-1: Manufacturer: syz
[ 1069.655644][ T7770] usb 6-1: SerialNumber: syz
[ 1069.657609][ T7770] usb 6-1: config 0 descriptor??
[ 1069.658380][T23019] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1069.731930][T13490] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[ 1069.733616][T13490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1069.733660][T13490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1069.737390][T13490] usb 1-1: config 0 descriptor??
[ 1069.781098][ T7801] usb 9-1: Using ep0 maxpacket: 16
[ 1069.781985][ T7801] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[ 1069.783593][ T7801] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.783615][ T7801] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1069.786518][ T7801] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.786540][ T7801] usb 9-1: Product: syz
[ 1069.786554][ T7801] usb 9-1: Manufacturer: syz
[ 1069.786566][ T7801] usb 9-1: SerialNumber: syz
[ 1069.795178][ T7801] usb 9-1: config 0 descriptor??
[ 1069.831150][ T7785] usb 8-1: Using ep0 maxpacket: 32
[ 1069.859490][ T7785] usb 8-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[ 1069.894961][ T7785] usb 8-1: config 0 has an invalid interface number: 196 but max is 0
[ 1069.895014][ T7785] usb 8-1: config 0 has no interface number 0
[ 1069.895052][ T7785] usb 8-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1069.895076][ T7785] usb 8-1: config 0 interface 196 has no altsetting 0
[ 1069.897377][ T7785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.897400][ T7785] usb 8-1: Product: syz
[ 1069.897412][ T7785] usb 8-1: Manufacturer: syz
[ 1069.897424][ T7785] usb 8-1: SerialNumber: syz
[ 1069.941349][ T7785] usb 8-1: config 0 descriptor??
[ 1069.946320][T23021] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22
[ 1070.016779][T23013] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1070.036159][ T7801] usb 9-1: USB disconnect, device number 57
[ 1070.553178][T13490] aiptek 1-1:0.0: Aiptek using 400 ms programming speed
[ 1070.555889][T13490] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input233
[ 1070.781294][ T1839] usb 1-1: USB disconnect, device number 91
[ 1070.781431][    C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1070.860865][ T7785] ipheth 8-1:0.196: ipheth_enable_ncm: usb_control_msg: -110
[ 1070.905493][ T7785] ipheth 8-1:0.196: Apple iPhone USB Ethernet device attached
[ 1070.931419][T13490] usb 9-1: new high-speed USB device number 58 using dummy_hcd
[ 1071.092068][T13490] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1071.093184][T13490] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1071.093248][T13490] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1071.096347][T13490] usb 9-1: config 0 descriptor??
[ 1071.222385][ T7770] rc_core: IR keymap rc-snapstream-firefly not found
[ 1071.222419][ T7770] Registered IR keymap rc-empty
[ 1071.223724][ T7770] rc rc0: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1071.225189][ T7770] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input234
[ 1071.277394][ T7770] input: syz syz mouse as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input235
[ 1071.310441][ T7770] usb 6-1: USB disconnect, device number 51
[ 1071.310560][    C0] ati_remote 6-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[ 1071.322823][T13490] usb 9-1: USB disconnect, device number 58
[ 1071.680057][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1071.720237][ T1839] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1071.761192][T13490] usb 9-1: new high-speed USB device number 59 using dummy_hcd
[ 1071.880755][ T1839] usb 1-1: Using ep0 maxpacket: 16
[ 1071.881559][ T1839] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[ 1071.882823][ T1839] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1071.882851][ T1839] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1071.882871][ T1839] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1071.882909][ T1839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1071.886799][ T1839] usb 1-1: config 0 descriptor??
[ 1071.914764][T13490] usb 9-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=b8.ef
[ 1071.919287][T13490] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1071.919312][T13490] usb 9-1: Product: syz
[ 1071.919326][T13490] usb 9-1: Manufacturer: syz
[ 1071.919338][T13490] usb 9-1: SerialNumber: syz
[ 1071.996091][ T7775] usb 8-1: USB disconnect, device number 7
[ 1072.024169][T13490] usb 9-1: config 0 descriptor??
[ 1072.044241][T13490] gspca_main: benq-2.14.0 probing 04a5:3035
[ 1072.327333][ T1839] input: HID 046a:0023 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046A:0023.0054/input/input236
[ 1072.373222][ T7775] ipheth 8-1:0.196: Apple iPhone USB Ethernet now disconnected
[ 1072.416244][ T1839] cherry 0003:046A:0023.0054: input,hiddev0,hidraw0: USB HID vff.fe Device [HID 046a:0023] on usb-dummy_hcd.0-1/input0
[ 1072.521846][ T7801] usb 1-1: USB disconnect, device number 92
[ 1072.578035][T23059] fido_id[23059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[ 1072.624071][T23064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1072.624517][T23064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1072.850662][ T7770] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[ 1073.022498][ T7770] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1073.023572][ T7770] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1073.023603][ T7770] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1073.025765][ T7770] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.025790][ T7770] usb 8-1: Product: syz
[ 1073.025804][ T7770] usb 8-1: Manufacturer: syz
[ 1073.025817][ T7770] usb 8-1: SerialNumber: syz
[ 1073.088431][ T7770] usb 8-1: config 0 descriptor??
[ 1073.096037][ T7770] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1073.096063][ T7770] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1073.122902][ T7770] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input237
[ 1073.142748][ T7785] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1073.340858][ T7785] usb 6-1: Using ep0 maxpacket: 16
[ 1073.341609][ T7785] usb 6-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00
[ 1073.342627][ T7785] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1073.342669][ T7785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1073.345443][ T7785] usb 6-1: config 0 descriptor??
[ 1073.450321][ T7791] usb 1-1: new full-speed USB device number 93 using dummy_hcd
[ 1073.621006][ T7791] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1073.623045][ T7791] usb 1-1: not running at top speed; connect to a high speed hub
[ 1073.623086][ T7791] usb 1-1: New USB device found, idVendor=046d, idProduct=c283, bcdDevice= 0.40
[ 1073.625515][ T7791] usb 1-1: config 1 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1073.625546][ T7791] usb 1-1: config 1 interface 0 has no altsetting 0
[ 1073.628756][ T7791] usb 1-1: string descriptor 0 read error: -22
[ 1073.628878][ T7791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1073.739716][T13490] usb 9-1: USB disconnect, device number 59
[ 1073.864415][ T7785] input: HID 1e7d:31ce as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:1E7D:31CE.0055/input/input238
[ 1073.928795][ T7785] ryos 0003:1E7D:31CE.0055: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.5-1/input0
[ 1074.096112][ T7801] usb 8-1: USB disconnect, device number 8
[ 1074.130597][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x2
[ 1074.130620][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x0
[ 1074.130652][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x0
[ 1074.130706][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x0
[ 1074.130721][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x0
[ 1074.130736][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x0
[ 1074.130750][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x0
[ 1074.130765][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x0
[ 1074.130795][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x0
[ 1074.130809][ T7791] logitech 0003:046D:C283.0056: unknown main item tag 0x0
[ 1074.161096][T13490] usb 9-1: new high-speed USB device number 60 using dummy_hcd
[ 1074.251115][ T7801] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[ 1074.279155][ T7791] input: HID 046d:c283 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:046D:C283.0056/input/input239
[ 1074.312199][T13490] usb 9-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=42.88
[ 1074.313419][T13490] usb 9-1: config 5 has an invalid interface number: 219 but max is 1
[ 1074.313434][T13490] usb 9-1: config 5 has an invalid interface number: 220 but max is 1
[ 1074.313444][T13490] usb 9-1: config 5 has no interface number 0
[ 1074.313452][T13490] usb 9-1: config 5 has no interface number 1
[ 1074.313487][T13490] usb 9-1: config 5 interface 220 altsetting 45 has an invalid descriptor for endpoint zero, skipping
[ 1074.313508][T13490] usb 9-1: config 5 interface 220 altsetting 45 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1074.313528][T13490] usb 9-1: config 5 interface 220 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1074.313552][T13490] usb 9-1: config 5 interface 219 has no altsetting 0
[ 1074.313568][T13490] usb 9-1: config 5 interface 220 has no altsetting 0
[ 1074.315638][T13490] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.315661][T13490] usb 9-1: Product: syz
[ 1074.315674][T13490] usb 9-1: Manufacturer: syz
[ 1074.315687][T13490] usb 9-1: SerialNumber: syz
[ 1074.341248][ T7791] logitech 0003:046D:C283.0056: offset (39) exceeds report_count (19)
[ 1074.341373][ T7791] logitech 0003:046D:C283.0056: offset (25) exceeds report_count (19)
[ 1074.410526][ T7801] usb 8-1: Using ep0 maxpacket: 16
[ 1074.414318][ T7801] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1074.415521][ T7801] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1074.415547][ T7801] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1074.418669][ T7801] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1074.418690][ T7801] usb 8-1: Product: syz
[ 1074.418703][ T7801] usb 8-1: Manufacturer: syz
[ 1074.418716][ T7801] usb 8-1: SerialNumber: syz
[ 1074.429580][ T7801] usb 8-1: config 0 descriptor??
[ 1074.441910][ T7801] hub 8-1:0.0: bad descriptor, ignoring hub
[ 1074.441960][ T7801] hub 8-1:0.0: probe with driver hub failed with error -5
[ 1074.454504][ T7801] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input240
[ 1074.572472][T13490] em28xx 9-1:5.220: New device syz syz @ 480 Mbps (eb1a:e303, interface 220, class 220)
[ 1074.572495][T13490] em28xx 9-1:5.220: DVB interface 220 found: bulk
[ 1074.632226][T13490] em28xx 9-1:5.220: unknown em28xx chip ID (0)
[ 1074.648658][ T7791] logitech 0003:046D:C283.0056: input,hidraw1: USB HID v0.0a Keyboard [HID 046d:c283] on usb-dummy_hcd.0-1/input0
[ 1074.648984][ T7791] hid_logitech: Force feedback for Logitech force feedback devices by Johann Deneux <johann.deneux@it.uu.se>
[ 1074.692185][ T7791] usb 1-1: USB disconnect, device number 93
[ 1074.808216][T23103] fido_id[23103]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[ 1074.839178][ T7799] usb 6-1: USB disconnect, device number 52
[ 1074.913958][T13490] em28xx 9-1:5.220: reading from i2c device at 0xa0 failed (error=-5)
[ 1074.913980][T13490] em28xx 9-1:5.220: board has no eeprom
[ 1074.971586][T13490] em28xx 9-1:5.220: Identified as Kaiomy TVnPC U2 (card=63)
[ 1074.971702][T13490] em28xx 9-1:5.220: dvb set to bulk mode.
[ 1074.972268][ T7801] em28xx 9-1:5.220: Registering input extension
[ 1075.024487][T13490] usb 9-1: USB disconnect, device number 60
[ 1075.058297][T13490] em28xx 9-1:5.220: Disconnecting em28xx
[ 1075.058565][T13490] em28xx 9-1:5.220: Closing input extension
[ 1075.307540][T13490] em28xx: Freeing device
[ 1075.361692][ T7791] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[ 1075.521612][ T7791] usb 1-1: Using ep0 maxpacket: 8
[ 1075.525010][ T7791] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 1075.528731][ T7791] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 1075.528757][ T7791] usb 1-1: config 179 has no interface number 0
[ 1075.528797][ T7791] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 1075.528822][ T7791] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 1075.528847][ T7791] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1075.528871][ T7791] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1075.528892][ T7791] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1075.528916][ T7791] usb 1-1: config 179 interface 65 has no altsetting 0
[ 1075.528948][ T7791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.602539][T13490] usb 9-1: new high-speed USB device number 61 using dummy_hcd
[ 1075.664829][ T7791] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input242
[ 1075.751112][T13490] usb 9-1: Using ep0 maxpacket: 32
[ 1075.755139][T13490] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1075.755189][T13490] usb 9-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[ 1075.756462][T13490] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[ 1075.758814][T13490] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1075.758838][T13490] usb 9-1: Product: syz
[ 1075.758851][T13490] usb 9-1: Manufacturer: syz
[ 1075.758865][T13490] usb 9-1: SerialNumber: syz
[ 1075.761531][ T4968] usb 8-1: reset high-speed USB device number 9 using dummy_hcd
[ 1075.772652][ T4968] usb 8-1: device reset changed ep0 maxpacket size!
[ 1075.798552][ T7775] usb 8-1: USB disconnect, device number 9
[ 1075.886658][ T7801] usb 1-1: USB disconnect, device number 94
[ 1075.980496][ T7791] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1076.000317][ T7775] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[ 1076.009142][T13490] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1076.009568][T13490] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1076.053695][T13490] usb 9-1: USB disconnect, device number 61
[ 1076.096268][T15781] udevd[15781]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1076.151789][ T7791] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1076.152968][ T7791] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 1076.153014][ T7775] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1076.153020][ T7791] usb 6-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6
[ 1076.154235][ T7775] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1076.154305][ T7775] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1076.154328][ T7775] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1076.154347][ T7775] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1076.155373][ T7791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1076.155396][ T7791] usb 6-1: Product: syz
[ 1076.155410][ T7791] usb 6-1: Manufacturer: syz
[ 1076.155423][ T7791] usb 6-1: SerialNumber: syz
[ 1076.155461][ T7775] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1076.155480][ T7775] usb 8-1: Manufacturer: syz
[ 1076.158762][ T7775] usb 8-1: config 0 descriptor??
[ 1076.334170][ T7785] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1076.596617][ T7801] usb 6-1: USB disconnect, device number 53
[ 1076.604132][ T7775] appleir 0003:05AC:8243.0057: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0
[ 1076.720570][T13490] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[ 1076.861523][ T7775] usb 9-1: new high-speed USB device number 62 using dummy_hcd
[ 1076.874899][T13490] usb 1-1: Using ep0 maxpacket: 8
[ 1076.878023][T13490] usb 1-1: New USB device found, idVendor=18d1, idProduct=5061, bcdDevice= 0.00
[ 1076.893564][T13490] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 66, using maximum allowed: 30
[ 1076.893590][T13490] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1076.893603][T13490] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 66
[ 1076.893616][T13490] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1076.893635][T13490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.895572][T13490] usb 1-1: config 0 descriptor??
[ 1077.011868][ T7775] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1077.012817][ T7775] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1077.012832][ T7775] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1077.012841][ T7775] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1077.012882][ T7775] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1077.014284][ T7775] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1077.014298][ T7775] usb 9-1: Product: syz
[ 1077.014305][ T7775] usb 9-1: Manufacturer: syz
[ 1077.023119][ T7775] cdc_wdm 9-1:1.0: skipping garbage
[ 1077.023138][ T7775] cdc_wdm 9-1:1.0: skipping garbage
[ 1077.051037][ T7775] cdc_wdm 9-1:1.0: cdc-wdm1: USB WDM device
[ 1077.051059][ T7775] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1077.223467][ T7775] usb 9-1: USB disconnect, device number 62
[ 1077.309740][T13490] hid-generic 0003:18D1:5061.0058: unbalanced collection at end of report description
[ 1077.316486][T13490] hid-generic 0003:18D1:5061.0058: probe with driver hid-generic failed with error -22
[ 1077.361043][ T7785] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[ 1077.361228][ T7785] ath9k_htc: Failed to initialize the device
[ 1077.363398][ T7801] usb 6-1: ath9k_htc: USB layer deinitialized
[ 1077.396582][T13490] usb 8-1: USB disconnect, device number 10
[ 1077.513108][ T7791] usb 1-1: USB disconnect, device number 95
[ 1077.661924][ T7801] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1077.680799][ T7770] usb 9-1: new high-speed USB device number 63 using dummy_hcd
[ 1077.811337][ T7801] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1077.812188][ T7801] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1077.814243][ T7801] usb 6-1: config 0 descriptor??
[ 1077.845872][ T7801] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1077.862392][ T7770] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1077.863394][ T7770] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1077.863419][ T7770] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1077.863429][ T7770] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1077.863453][ T7770] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1077.864919][ T7770] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1077.864942][ T7770] usb 9-1: Product: syz
[ 1077.864955][ T7770] usb 9-1: Manufacturer: syz
[ 1077.871328][ T7770] cdc_wdm 9-1:1.0: skipping garbage
[ 1077.871355][ T7770] cdc_wdm 9-1:1.0: skipping garbage
[ 1077.873055][ T7770] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device
[ 1077.873071][ T7770] cdc_wdm 9-1:1.0: Unknown control protocol
[ 1078.022270][T23115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1078.026774][T23115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1078.028030][ T7785] usb 6-1: USB disconnect, device number 54
[ 1078.190179][ T7770] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[ 1078.330658][ T7801] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[ 1078.350640][ T7770] usb 8-1: Using ep0 maxpacket: 16
[ 1078.351404][ T7770] usb 8-1: New USB device found, idVendor=1618, idProduct=9116, bcdDevice= 8.ea
[ 1078.352433][ T7770] usb 8-1: config 0 has an invalid interface number: 107 but max is 0
[ 1078.352447][ T7770] usb 8-1: config 0 has no interface number 0
[ 1078.352470][ T7770] usb 8-1: config 0 interface 107 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1078.352490][ T7770] usb 8-1: config 0 interface 107 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1078.352514][ T7770] usb 8-1: config 0 interface 107 has no altsetting 0
[ 1078.354480][ T7770] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.354502][ T7770] usb 8-1: Product: syz
[ 1078.354515][ T7770] usb 8-1: Manufacturer: syz
[ 1078.354527][ T7770] usb 8-1: SerialNumber: syz
[ 1078.356441][ T7770] usb 8-1: config 0 descriptor??
[ 1078.357270][T23125] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[ 1078.491514][ T7801] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1078.492445][ T7801] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1078.492489][ T7801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1078.494265][ T7801] usb 1-1: config 0 descriptor??
[ 1078.500804][ T7785] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1078.565373][T23125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1078.565787][T23125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1078.652390][ T7785] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 0.00
[ 1078.653347][ T7785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1078.655769][ T7785] usb 6-1: config 0 descriptor??
[ 1078.661331][ T7785] pcwd_usb: Couldn't find an INTR & IN endpoint
[ 1078.661636][ T7785] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1078.706166][ T7801] usbhid 1-1:0.0: can't add hid device: -71
[ 1078.706272][ T7801] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1078.727052][ T7801] usb 1-1: USB disconnect, device number 96
[ 1078.767260][T23125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1078.767524][T23125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1078.770517][T23125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1078.775118][T23125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1078.782226][T23125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1078.786682][T23125] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1078.795154][ T7785] usb 8-1: USB disconnect, device number 11
[ 1079.140861][ T7801] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[ 1079.291637][ T7801] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[ 1079.292619][ T7801] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1079.292664][ T7801] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256
[ 1079.292687][ T7801] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1079.294747][ T7801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1079.294769][ T7801] usb 1-1: Product: syz
[ 1079.294781][ T7801] usb 1-1: Manufacturer: syz
[ 1079.294795][ T7801] usb 1-1: SerialNumber: syz
[ 1079.465654][ T7801] usb 6-1: USB disconnect, device number 55
[ 1079.630061][ T7791] usb 8-1: new high-speed USB device number 12 using dummy_hcd
[ 1079.780502][ T7791] usb 8-1: Using ep0 maxpacket: 16
[ 1079.781335][ T7791] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[ 1079.782606][ T7791] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1079.782634][ T7791] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[ 1079.782656][ T7791] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1079.782696][ T7791] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.785174][ T7791] usb 8-1: config 0 descriptor??
[ 1080.051423][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1080.051594][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1080.051648][ T7785] usb 9-1: USB disconnect, device number 63
[ 1080.051840][    C1] cdc_wdm 9-1:1.0: nonzero urb status received: -71
[ 1080.051859][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes
[ 1080.051877][    C1] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[ 1080.106425][ T7775] usb 1-1: USB disconnect, device number 97
[ 1080.227681][ T7791] nintendo 0003:057E:2019.0059: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.7-1/input0
[ 1080.281079][ T7801] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1080.398342][T23132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1080.398869][T23132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1080.419058][T23132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1080.419533][T23132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1080.427599][T23132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1080.431714][T23132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1080.461044][ T7801] usb 6-1: Using ep0 maxpacket: 16
[ 1080.463679][ T7801] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1080.463727][ T7801] usb 6-1: New USB device found, idVendor=043e, idProduct=310c, bcdDevice= a.c5
[ 1080.464690][ T7801] usb 6-1: config 127 has an invalid interface number: 35 but max is 0
[ 1080.464711][ T7801] usb 6-1: config 127 has no interface number 0
[ 1080.464738][ T7801] usb 6-1: config 127 interface 35 has no altsetting 0
[ 1080.466532][ T7801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1080.466546][ T7801] usb 6-1: Product: syz
[ 1080.466554][ T7801] usb 6-1: Manufacturer: syz
[ 1080.466567][ T7801] usb 6-1: SerialNumber: syz
[ 1080.530672][ T7785] usb 9-1: new high-speed USB device number 64 using dummy_hcd
[ 1080.634305][T23132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1080.636544][T23132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1080.685274][ T7785] usb 9-1: Using ep0 maxpacket: 32
[ 1080.691934][ T7785] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1080.696371][ T7785] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1080.696396][ T7785] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1080.696414][ T7785] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1080.696485][ T7785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1080.696504][ T7785] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1080.696524][ T7785] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1080.696563][ T7785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1080.705204][ T7785] usb 9-1: config 0 descriptor??
[ 1080.806142][ T7801] usb 6-1: USB disconnect, device number 56
[ 1080.840251][ T7791] nintendo 0003:057E:2019.0059: Failed to set baudrate (ret=-71), continuing anyway
[ 1080.844530][ T7791] nintendo 0003:057E:2019.0059: Failed handshake; ret=-71
[ 1080.844554][ T7791] nintendo 0003:057E:2019.0059: Failed to initialize controller; ret=-71
[ 1080.881233][ T7791] nintendo 0003:057E:2019.0059: probe - fail = -71
[ 1080.881695][ T7791] nintendo 0003:057E:2019.0059: probe with driver nintendo failed with error -71
[ 1080.895457][ T7791] usb 8-1: USB disconnect, device number 12
[ 1080.939027][ T7785] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1080.962367][ T7785] usb 9-1: USB disconnect, device number 64
[ 1080.966492][T15781] udevd[15781]: setting mode of /dev/usb/lp0 to 020660 failed: No such file or directory
[ 1080.966608][T15781] udevd[15781]: setting owner of /dev/usb/lp0 to uid=0, gid=7 failed: No such file or directory
[ 1080.968015][ T7785] usblp0: removed
[ 1081.041257][ T7775] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1081.191322][ T7775] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1081.191889][ T7775] usb 1-1: config 0 has no interfaces?
[ 1081.191910][ T7775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.193837][ T7775] usb 1-1: config 0 descriptor??
[ 1081.290621][ T7801] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1081.398144][T23141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1081.398553][T23141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1081.402749][ T7775] usb 1-1: USB disconnect, device number 98
[ 1081.441783][ T7801] usb 6-1: Using ep0 maxpacket: 16
[ 1081.444123][ T7801] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1081.444169][ T7801] usb 6-1: New USB device found, idVendor=043e, idProduct=310c, bcdDevice= a.c5
[ 1081.446092][ T7801] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1081.446115][ T7801] usb 6-1: can't read configurations, error -71
[ 1081.482664][ T7785] usb 9-1: new full-speed USB device number 65 using dummy_hcd
[ 1081.620657][ T7791] usb 8-1: new high-speed USB device number 13 using dummy_hcd
[ 1081.652371][ T7785] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1081.653389][ T7785] usb 9-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1081.653411][ T7785] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1081.653429][ T7785] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1081.653473][ T7785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1081.653493][ T7785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[ 1081.653506][ T7785] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1081.653529][ T7785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.656195][ T7785] usb 9-1: config 0 descriptor??
[ 1081.657285][T23137] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[ 1081.789999][ T7791] usb 8-1: Using ep0 maxpacket: 8
[ 1081.790862][ T7791] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1081.791808][ T7791] usb 8-1: config index 0 descriptor too short (expected 301, got 45)
[ 1081.791835][ T7791] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1081.791847][ T7791] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1081.791881][ T7791] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1081.791893][ T7791] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1081.791914][ T7791] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.841573][ T7775] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1081.887353][ T7785] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1081.991806][ T7775] usb 1-1: Using ep0 maxpacket: 8
[ 1081.993911][ T7775] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[ 1081.997232][ T7775] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3
[ 1081.997256][ T7775] usb 1-1: Product: syz
[ 1081.997269][ T7775] usb 1-1: Manufacturer: syz
[ 1081.997281][ T7775] usb 1-1: SerialNumber: syz
[ 1082.013624][ T7775] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[ 1082.051784][ T7791] usb 8-1: usb_control_msg returned -32
[ 1082.051832][ T7791] usbtmc 8-1:16.0: can't read capabilities
[ 1082.084518][    C1] usblp0: nonzero read bulk status received: -71
[ 1082.097631][T13490] usb 9-1: USB disconnect, device number 65
[ 1082.107087][T13490] usblp0: removed
[ 1082.408408][ T7775] vp7045: USB control message 'in' went wrong.
[ 1082.408421][ T7775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1082.408890][ T7775] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver)
[ 1082.408925][ T7775] usb 1-1: media controller created
[ 1082.480941][ T7801] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[ 1082.612942][ T7775] vp7045: USB control message 'in' went wrong.
[ 1082.612959][ T7775] dvb-usb: MAC address reading failed.
[ 1082.661358][ T7801] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[ 1082.662365][ T7801] usb 6-1: config 0 has no interfaces?
[ 1082.664390][ T7801] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.664412][ T7801] usb 6-1: Product: syz
[ 1082.664426][ T7801] usb 6-1: Manufacturer: syz
[ 1082.664439][ T7801] usb 6-1: SerialNumber: syz
[ 1082.666629][ T7801] usb 6-1: config 0 descriptor??
[ 1082.668370][ T7775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1082.891512][T23145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1082.892031][T23145] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1082.896487][T13490] usb 6-1: USB disconnect, device number 58
[ 1082.954404][ T7775] vp7045: USB control message 'in' went wrong.
[ 1082.972094][ T7801] usb 9-1: new full-speed USB device number 66 using dummy_hcd
[ 1083.123799][ T7801] usb 9-1: not running at top speed; connect to a high speed hub
[ 1083.123822][ T7801] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10a1, bcdDevice= a.e0
[ 1083.124738][ T7801] usb 9-1: config 8 has an invalid interface number: 44 but max is 0
[ 1083.124766][ T7801] usb 9-1: config 8 has no interface number 0
[ 1083.124783][ T7801] usb 9-1: config 8 interface 44 has no altsetting 0
[ 1083.127628][ T7801] usb 9-1: string descriptor 0 read error: -22
[ 1083.127784][ T7801] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.156543][ T7775] vp7045: USB control message 'in' went wrong.
[ 1083.341067][T13490] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1083.362518][T23141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1083.365257][T23141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1083.366566][ T7775] usb 1-1: DVB: registering adapter 2 frontend 0 (Twinhan VP7045/46 USB DVB-T)...
[ 1083.366854][ T7775] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered.
[ 1083.372463][ T7801] dvb-usb: found a 'Terratec Cinergy DT USB XS Diversity/ T5' in warm state.
[ 1083.418738][ T7801] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1083.423576][ T7801] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1083.423632][ T7801] usb 9-1: media controller created
[ 1083.442855][ T7801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1083.491918][T13490] usb 6-1: Using ep0 maxpacket: 32
[ 1083.495534][T13490] usb 6-1: New USB device found, idVendor=1618, idProduct=9113, bcdDevice= 0.00
[ 1083.517622][ T7801] DVB: Unable to find symbol dib7000p_attach()
[ 1083.517633][ T7801] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1083.517641][ T7801] dvb-usb: will use the device's hardware PID filter (table count: 32).
[ 1083.519051][ T7801] dvbdev: DVB: registering new adapter (Terratec Cinergy DT USB XS Diversity/ T5)
[ 1083.519123][ T7801] usb 9-1: media controller created
[ 1083.528381][ T7801] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1083.531680][T13490] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1083.531709][T13490] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1083.533904][T13490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1083.533925][T13490] usb 6-1: Product: syz
[ 1083.533938][T13490] usb 6-1: Manufacturer: syz
[ 1083.533952][T13490] usb 6-1: SerialNumber: syz
[ 1083.665017][ T7801] DVB: Unable to find symbol dib7000p_attach()
[ 1083.665035][ T7801] dvb-usb: no frontend was attached by 'Terratec Cinergy DT USB XS Diversity/ T5'
[ 1083.740856][ T7775] rc_core: IR keymap rc-twinhan1027 not found
[ 1083.740877][ T7775] Registered IR keymap rc-empty
[ 1083.742090][ T7775] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[ 1083.744474][ T7775] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input243
[ 1083.746092][ T7775] dvb-usb: schedule remote query interval to 400 msecs.
[ 1083.746390][ T7775] vp7045: USB control message 'out' went wrong.
[ 1083.746398][ T7775] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected.
[ 1083.749406][ T7775] usb 1-1: USB disconnect, device number 99
[ 1083.753678][ T7801] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1083.753693][ T7801] Registered IR keymap rc-empty
[ 1083.753991][ T7801] dvb-usb: could not initialize remote control.
[ 1083.754000][ T7801] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T5 successfully initialized and connected.
[ 1083.883440][ T7775] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully deinitialized and disconnected.
[ 1084.118442][T23156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.118875][T23156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.137801][T23156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.139152][T23156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.146977][T23156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.147767][T23156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.354438][T23156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.354919][T23156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.357605][T23156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1084.358497][T23156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1084.410866][ T7791] usb 8-1: USB disconnect, device number 13
[ 1084.461948][ T7775] usb 1-1: new high-speed USB device number 100 using dummy_hcd
[ 1084.611110][ T7775] usb 1-1: Using ep0 maxpacket: 32
[ 1084.613614][ T7775] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1084.613663][ T7775] usb 1-1: New USB device found, idVendor=2040, idProduct=9580, bcdDevice=2b.34
[ 1084.614601][ T7775] usb 1-1: config 8 has an invalid interface number: 87 but max is 0
[ 1084.614623][ T7775] usb 1-1: config 8 has no interface number 0
[ 1084.616577][ T7775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1084.616590][ T7775] usb 1-1: Product: syz
[ 1084.616598][ T7775] usb 1-1: Manufacturer: syz
[ 1084.616605][ T7775] usb 1-1: SerialNumber: syz
[ 1084.809979][ T7791] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[ 1084.960764][ T7791] usb 8-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[ 1084.961905][ T7791] usb 8-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[ 1084.961951][ T7791] usb 8-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1084.963786][ T7791] usb 8-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[ 1084.963810][ T7791] usb 8-1: Manufacturer: syz
[ 1084.963824][ T7791] usb 8-1: SerialNumber: syz
[ 1085.056729][T13490] usb 6-1: USB disconnect, device number 59
[ 1085.186468][ T7791] usbhid 8-1:36.0: couldn't find an input interrupt endpoint
[ 1085.188622][ T7791] usb 8-1: USB disconnect, device number 14
[ 1085.212360][T23107] udevd[23107]: setting mode of /dev/bus/usb/008/014 to 020664 failed: No such file or directory
[ 1085.212521][T23107] udevd[23107]: setting owner of /dev/bus/usb/008/014 to uid=0, gid=0 failed: No such file or directory
[ 1085.245913][ T7775] dvb-usb: found a 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity' in warm state.
[ 1085.256807][ T7775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1085.257516][ T7775] dvbdev: DVB: registering new adapter (Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity)
[ 1085.257566][ T7775] usb 1-1: media controller created
[ 1085.278893][ T7775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1085.323118][ T7775] DVB: Unable to find symbol dib7000p_attach()
[ 1085.323131][ T7775] dvb-usb: no frontend was attached by 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity'
[ 1085.323139][ T7775] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1085.323620][ T7775] dvbdev: DVB: registering new adapter (Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity)
[ 1085.323654][ T7775] usb 1-1: media controller created
[ 1085.334772][ T7775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1085.410912][ T7775] DVB: Unable to find symbol dib7000p_attach()
[ 1085.410925][ T7775] dvb-usb: no frontend was attached by 'Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity'
[ 1085.442922][T13490] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1085.493477][ T7775] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1085.493491][ T7775] Registered IR keymap rc-empty
[ 1085.493657][ T7775] dvb-usb: could not initialize remote control.
[ 1085.493663][ T7775] dvb-usb: Hauppauge Nova-TD Stick/Elgato Eye-TV Diversity successfully initialized and connected.
[ 1085.497008][ T7775] usb 1-1: USB disconnect, device number 100
[ 1085.591867][T13490] usb 6-1: Using ep0 maxpacket: 16
[ 1085.596229][ T7775] dvb-usb: Hauppauge Nova-TD Stick/Elgato Eye-TV D successfully deinitialized and disconnected.
[ 1085.597426][T13490] usb 6-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[ 1085.623463][T13490] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.623491][T13490] usb 6-1: Product: syz
[ 1085.623505][T13490] usb 6-1: Manufacturer: syz
[ 1085.623518][T13490] usb 6-1: SerialNumber: syz
[ 1085.628463][T13490] usb 6-1: config 0 descriptor??
[ 1085.638928][T13490] usb 6-1: selecting invalid altsetting 1
[ 1085.644539][T13490] technisat-usb2: could not set alternate setting to 0
[ 1085.694613][ T7801] usb 9-1: USB disconnect, device number 66
[ 1085.749434][ T7801] dvb-usb: Terratec Cinergy DT USB XS Diversity/ T successfully deinitialized and disconnected.
[ 1085.858193][T13490] technisat-usb2: firmware version: 0.0
[ 1085.858221][T13490] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[ 1086.120597][ T7801] usb 9-1: new full-speed USB device number 67 using dummy_hcd
[ 1086.181079][ T7775] usb 8-1: new high-speed USB device number 15 using dummy_hcd
[ 1086.273273][ T7801] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[ 1086.274865][ T7801] usb 9-1: config 0 has an invalid interface number: 214 but max is 0
[ 1086.274890][ T7801] usb 9-1: config 0 has no interface number 0
[ 1086.274929][ T7801] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1086.274953][ T7801] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1086.276406][T13490] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1086.278644][ T7801] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[ 1086.278670][ T7801] usb 9-1: Manufacturer: syz
[ 1086.278684][ T7801] usb 9-1: SerialNumber: syz
[ 1086.351908][T13490] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2))
[ 1086.351965][T13490] usb 6-1: media controller created
[ 1086.352018][T13490] technisat-usb2: i2c-error: out failed 53 = -22
[ 1086.352065][T13490] dvb-usb: MAC address reading failed.
[ 1086.395478][ T7801] usb 9-1: config 0 descriptor??
[ 1086.411046][ T7775] usb 8-1: Using ep0 maxpacket: 32
[ 1086.412941][ T7775] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1086.426301][ T7775] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1086.426328][ T7775] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1086.426347][ T7775] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1086.426418][ T7775] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1086.426438][ T7775] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1086.426459][ T7775] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1086.426499][ T7775] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.518628][ T7775] usb 8-1: config 0 descriptor??
[ 1086.533283][T13490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1086.636291][T13490] DVB: Unable to find symbol stv090x_attach()
[ 1086.715671][T13490] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)'
[ 1086.784066][ T7775] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1086.829011][ T7775] usb 8-1: USB disconnect, device number 15
[ 1086.857597][ T7775] usblp0: removed
[ 1086.983660][T13490] rc_core: IR keymap rc-technisat-usb2 not found
[ 1086.983680][T13490] Registered IR keymap rc-empty
[ 1087.003292][T13490] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[ 1087.011843][T13490] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input247
[ 1087.026971][T13490] dvb-usb: schedule remote query interval to 100 msecs.
[ 1087.063291][ T7801] input: syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.214/input/input246
[ 1087.277651][ T7799] usb 9-1: USB disconnect, device number 67
[ 1087.290478][ T7775] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[ 1087.441146][ T7775] usb 8-1: Using ep0 maxpacket: 32
[ 1087.442021][ T7775] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1087.443655][ T7775] usb 8-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1087.443679][ T7775] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1087.443697][ T7775] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1087.443741][ T7775] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1087.443784][ T7775] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1087.443806][ T7775] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1087.443844][ T7775] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1087.447964][ T7775] usb 8-1: config 0 descriptor??
[ 1087.531834][T13490] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected.
[ 1087.589141][ T7801] dvb-usb: error -32 while querying for an remote control event.
[ 1087.657048][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1087.657483][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1087.672149][ T7775] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1087.691422][ T7775] usb 8-1: USB disconnect, device number 16
[ 1087.713862][ T7801] dvb-usb: error -32 while querying for an remote control event.
[ 1087.722124][ T7775] usblp0: removed
[ 1087.803832][T23163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1087.806042][T23163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.201864][T23163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.202889][T23163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.239861][T23163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.240308][T23163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.405012][ T7801] dvb-usb: error -110 while querying for an remote control event.
[ 1088.457456][T23163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.459638][T23163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.500667][T13490] usb 1-1: new high-speed USB device number 101 using dummy_hcd
[ 1088.511014][ T7801] dvb-usb: error -32 while querying for an remote control event.
[ 1088.539980][ T7770] usb 8-1: new full-speed USB device number 17 using dummy_hcd
[ 1088.623626][ T7801] dvb-usb: error -32 while querying for an remote control event.
[ 1088.653100][T13490] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1088.654150][T13490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1088.654178][T13490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1088.654214][T13490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1088.657111][T13490] usb 1-1: config 0 descriptor??
[ 1088.716652][T23163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1088.717163][T23163] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1088.724320][ T7801] usb 6-1: USB disconnect, device number 60
[ 1088.737505][ T7770] usb 8-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00
[ 1088.758402][ T7770] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30
[ 1088.758445][ T7770] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1088.758469][ T7770] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1088.758505][ T7770] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1088.809630][ T7770] usb 8-1: config 0 descriptor??
[ 1088.815537][T23201] raw-gadget.6 gadget.7: fail, usb_ep_enable returned -22
[ 1088.878418][T13490] usbhid 1-1:0.0: can't add hid device: -71
[ 1088.878527][T13490] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1088.906167][T13490] usb 1-1: USB disconnect, device number 101
[ 1088.969222][ T7801] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected.
[ 1089.240552][ T7770] hid_parser_main: 3537 callbacks suppressed
[ 1089.240576][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.240604][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.240629][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.240683][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.240708][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.240733][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.240757][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.240781][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.240805][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.240829][ T7770] hid-steam 0003:28DE:1205.005A: unknown main item tag 0x0
[ 1089.241833][ T7770] hid-steam 0003:28DE:1205.005A: : USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.7-1/input0
[ 1089.301953][ T7770] hid-steam 0003:28DE:1205.005A: steam_register:steam_get_attributes failed with error -22
[ 1089.301979][ T7770] hid-steam 0003:28DE:1205.005A: Steam Deck 'XXXXXXXXXX' connected
[ 1089.375038][ T7770] input: Steam Deck as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28DE:1205.005A/input/input248
[ 1089.394539][T13490] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[ 1089.423935][ T7770] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:28DE:1205.005A/input/input249
[ 1089.551373][T13490] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[ 1089.553774][T13490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1089.553802][T13490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1089.553876][T13490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1089.557501][ T7770] hid-steam 0003:28DE:1205.005B: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.7-1/input0
[ 1089.641230][T13490] usb 1-1: config 0 descriptor??
[ 1089.713688][ T7799] usb 8-1: USB disconnect, device number 17
[ 1089.874394][ T7799] hid-steam 0003:28DE:1205.005A: Steam Deck 'XXXXXXXXXX' disconnected
[ 1090.062737][T13490] cp2112 0003:10C4:EA90.005C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 1090.256640][T13490] cp2112 0003:10C4:EA90.005C: Part Number: 0x00 Device Version: 0x00
[ 1090.554016][T23237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4729'.
[ 1091.080629][ T7770] usb 1-1: USB disconnect, device number 102
[ 1092.853603][T23300] tipc: Started in network mode
[ 1092.853628][T23300] tipc: Node identity 1, cluster identity 4711
[ 1092.853641][T23300] tipc: Node number set to 1
[ 1092.855857][T23300] tipc: New replicast peer: 127.0.0.1
[ 1092.856339][T23300] tipc: Enabled bearer <udp:syz0>, priority 10
[ 1092.866886][T23300] tipc: Disabling bearer <udp:syz0>
[ 1093.279203][T23306] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1093.296067][T23309] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4759'.
[ 1093.296090][T23309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4759'.
[ 1093.371519][T23306] ipvlan0: left allmulticast mode
[ 1093.371594][T23306] veth0_vlan: left allmulticast mode
[ 1093.392474][T23306] netdevsim netdevsim7 netdevsim0: left promiscuous mode
[ 1093.416690][T23306] geneve2: left promiscuous mode
[ 1093.416707][T23306] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[ 1093.885912][T23322] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4764'.
[ 1093.886722][T23322] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4764'.
[ 1093.886740][T23322] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4764'.
[ 1094.310496][T23338] erspan0: entered promiscuous mode
[ 1094.346729][T23338] erspan0: left promiscuous mode
[ 1094.830900][ T7791] usb 1-1: new high-speed USB device number 103 using dummy_hcd
[ 1094.999565][ T7791] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1094.999617][ T7791] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1095.018081][ T7791] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1095.018106][ T7791] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1095.040157][ T7791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.040184][ T7791] usb 1-1: Product: syz
[ 1095.040198][ T7791] usb 1-1: Manufacturer: syz
[ 1095.040212][ T7791] usb 1-1: SerialNumber: syz
[ 1095.258292][ T7791] usb 1-1: selecting invalid altsetting 1
[ 1095.271384][ T7791] usb 1-1: unit 3 not found!
[ 1095.336972][ T7791] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1095.354181][ T7791] usb 1-1: USB disconnect, device number 103
[ 1095.455979][T15781] udevd[15781]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1096.304133][T23391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4792'.
[ 1096.330477][T23391] bridge1: entered promiscuous mode
[ 1096.330498][T23391] bridge1: entered allmulticast mode
[ 1096.391110][ T7775] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[ 1096.553700][ T7775] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1096.554599][ T7775] usb 8-1: not running at top speed; connect to a high speed hub
[ 1096.554631][ T7775] usb 8-1: New USB device found, idVendor=5050, idProduct=0100, bcdDevice=ca.41
[ 1096.555575][ T7775] usb 8-1: config 192 has an invalid interface number: 60 but max is 0
[ 1096.555597][ T7775] usb 8-1: config 192 has no interface number 0
[ 1096.555638][ T7775] usb 8-1: config 192 interface 60 has no altsetting 0
[ 1096.557954][ T7775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1096.557976][ T7775] usb 8-1: Product: syz
[ 1096.557990][ T7775] usb 8-1: Manufacturer: syz
[ 1096.558005][ T7775] usb 8-1: SerialNumber: syz
[ 1096.873713][ T7775] ftdi_sio 8-1:192.60: FTDI USB Serial Device converter detected
[ 1096.877032][ T7775] ftdi_sio ttyUSB0: unknown device type: 0xca41
[ 1096.886982][ T7775] usb 8-1: USB disconnect, device number 18
[ 1096.903318][ T7775] ftdi_sio 8-1:192.60: device disconnected
[ 1097.950533][ T7775] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[ 1098.114077][ T7775] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1098.114127][ T7775] usb 8-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[ 1098.115117][ T7775] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[ 1098.117747][ T7775] usb 8-1: string descriptor 0 read error: -22
[ 1098.117861][ T7775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1098.155204][ T7775] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1098.342077][ T7775] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22)
[ 1098.543771][T23421] ip6tnl0: mtu less than device minimum
[ 1099.179134][ T7775] usb 8-1: USB disconnect, device number 19
[ 1100.541100][ T7775] usb 9-1: new full-speed USB device number 68 using dummy_hcd
[ 1100.703362][ T7775] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1100.704896][ T7775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1100.704927][ T7775] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1100.708516][ T7775] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1100.708541][ T7775] usb 9-1: Product: syz
[ 1100.708554][ T7775] usb 9-1: Manufacturer: syz
[ 1100.708568][ T7775] usb 9-1: SerialNumber: syz
[ 1100.721927][ T7775] usb 9-1: config 0 descriptor??
[ 1100.723988][ T7775] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1100.724025][ T7775] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1100.798923][ T7775] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input250
[ 1101.455333][ T7785] usb 9-1: USB disconnect, device number 68
[ 1101.630545][ T7785] usb 9-1: new high-speed USB device number 69 using dummy_hcd
[ 1101.789937][ T7785] usb 9-1: Using ep0 maxpacket: 16
[ 1101.790776][ T7785] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1101.791864][ T7785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1101.791891][ T7785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1101.793840][ T7785] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.793863][ T7785] usb 9-1: Product: syz
[ 1101.793877][ T7785] usb 9-1: Manufacturer: syz
[ 1101.793890][ T7785] usb 9-1: SerialNumber: syz
[ 1101.796916][ T7785] usb 9-1: config 0 descriptor??
[ 1101.868400][ T7785] hub 9-1:0.0: bad descriptor, ignoring hub
[ 1101.868427][ T7785] hub 9-1:0.0: probe with driver hub failed with error -5
[ 1101.887119][ T7785] input: syz syz as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input251
[ 1102.246959][ T7785] usb 9-1: USB disconnect, device number 69
[ 1103.882863][ T7791] usb 9-1: new high-speed USB device number 70 using dummy_hcd
[ 1104.069921][ T7791] usb 9-1: Using ep0 maxpacket: 16
[ 1104.070679][ T7791] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1104.071525][ T7791] usb 9-1: config 0 has no interfaces?
[ 1104.074295][ T7791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1104.074317][ T7791] usb 9-1: Product: syz
[ 1104.074331][ T7791] usb 9-1: Manufacturer: syz
[ 1104.074344][ T7791] usb 9-1: SerialNumber: syz
[ 1104.077418][ T7791] usb 9-1: config 0 descriptor??
[ 1104.293071][ T7770] usb 1-1: new high-speed USB device number 104 using dummy_hcd
[ 1104.298777][ T7791] usb 9-1: USB disconnect, device number 70
[ 1104.450107][ T7770] usb 1-1: Using ep0 maxpacket: 8
[ 1104.450894][ T7770] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[ 1104.452183][ T7770] usb 1-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1104.452211][ T7770] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1104.452243][ T7770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1104.455156][ T7770] usb 1-1: config 0 descriptor??
[ 1104.919160][ T7770] hid_parser_main: 31 callbacks suppressed
[ 1104.919185][ T7770] isku 0003:1E7D:319C.005D: unknown main item tag 0x4
[ 1104.919214][ T7770] isku 0003:1E7D:319C.005D: unknown main item tag 0x5
[ 1104.919245][ T7770] isku 0003:1E7D:319C.005D: unknown main item tag 0x2
[ 1104.919269][ T7770] isku 0003:1E7D:319C.005D: item fetching failed at offset 27/44
[ 1104.947757][ T7770] isku 0003:1E7D:319C.005D: parse failed
[ 1104.947830][ T7770] isku 0003:1E7D:319C.005D: probe with driver isku failed with error -22
[ 1105.069920][T23505] input: syz0 as /devices/virtual/input/input252
[ 1105.107992][ T7770] usb 1-1: USB disconnect, device number 104
[ 1105.455826][T23509] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4837'.
[ 1105.929591][T23515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4839'.
[ 1107.690159][ T7770] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[ 1107.881690][ T7770] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1107.882865][ T7770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1107.885858][ T7770] usb 1-1: config 0 descriptor??
[ 1108.313427][ T7770] usb 1-1: Cannot set MAC address
[ 1108.313653][ T7770] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1108.344342][ T7770] usb 1-1: USB disconnect, device number 105
[ 1109.065452][ T7770] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1109.250450][ T7770] usb 6-1: Using ep0 maxpacket: 32
[ 1109.277240][ T7770] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1109.277288][ T7770] usb 6-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0
[ 1109.279377][ T7770] usb 6-1: config 3 has an invalid interface number: 223 but max is 1
[ 1109.279401][ T7770] usb 6-1: config 3 has an invalid interface number: 25 but max is 1
[ 1109.279419][ T7770] usb 6-1: config 3 has an invalid interface number: 223 but max is 1
[ 1109.279439][ T7770] usb 6-1: config 3 has no interface number 0
[ 1109.279454][ T7770] usb 6-1: config 3 has no interface number 1
[ 1109.279498][ T7770] usb 6-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[ 1109.279517][ T7770] usb 6-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1109.279541][ T7770] usb 6-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30
[ 1109.279574][ T7770] usb 6-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1109.279599][ T7770] usb 6-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64
[ 1109.279622][ T7770] usb 6-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82
[ 1109.279646][ T7770] usb 6-1: config 3 interface 223 has no altsetting 1
[ 1109.279663][ T7770] usb 6-1: config 3 interface 25 has no altsetting 0
[ 1109.516279][ T7770] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.516305][ T7770] usb 6-1: Product: syz
[ 1109.516318][ T7770] usb 6-1: Manufacturer: syz
[ 1109.516331][ T7770] usb 6-1: SerialNumber: syz
[ 1109.994115][T23535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1109.998481][T23535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1110.288270][T23535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1110.360090][T23535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1110.973839][T23535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1111.096545][T23535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1111.188230][T23555] netlink: 'syz.0.4851': attribute type 16 has an invalid length.
[ 1111.188251][T23555] netlink: 'syz.0.4851': attribute type 17 has an invalid length.
[ 1111.317609][T23555] xfrm0: left allmulticast mode
[ 1111.382598][T23555] geneve2: left promiscuous mode
[ 1111.382621][T23555] geneve2: left allmulticast mode
[ 1111.408670][T23555] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1111.414350][T23555] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1111.416728][T23555] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1111.419600][T23555] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1111.429271][T23555] 8021q: adding VLAN 0 to HW filter on device bond14
[ 1111.442610][T23555] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1111.456672][T23555] bridge1: left promiscuous mode
[ 1111.456713][T23555] bridge1: left allmulticast mode
[ 1111.802079][ T7770] usbtv 6-1:3.223: Fushicai USBTV007 Audio-Video Grabber
[ 1111.820471][ T7770] usb 6-1: USB disconnect, device number 61
[ 1111.829963][ T7791] usb 1-1: new full-speed USB device number 106 using dummy_hcd
[ 1112.001176][ T7791] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e
[ 1112.003571][ T7791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1112.003603][ T7791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1112.043479][ T7791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1112.043504][ T7791] usb 1-1: Product: syz
[ 1112.043518][ T7791] usb 1-1: Manufacturer: syz
[ 1112.043540][ T7791] usb 1-1: SerialNumber: syz
[ 1112.077622][ T7791] usb 1-1: config 0 descriptor??
[ 1112.086545][ T7791] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1112.086571][ T7791] hub 1-1:0.0: probe with driver hub failed with error -5
[ 1112.117201][ T7791] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input253
[ 1112.152657][ T7770] 
[ 1112.155043][ T7770] =========================
[ 1112.159549][ T7770] WARNING: held lock freed!
[ 1112.164072][ T7770] syzkaller #0 Tainted: G             L     
[ 1112.170052][ T7770] -------------------------
[ 1112.174555][ T7770] kworker/0:10/7770 is freeing memory ffff8880226f7000-ffff8880226f77ff, with a lock still held there!
[ 1112.185581][ T7770] ffff8880226f71a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 1112.195702][ T7770] locks held by kworker/0:10/7770: 5, last CPU#0:
[ 1112.202202][ T7770]  #0: ffff888022ac0d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1112.213541][ T7770]  #1: ffffc90023977c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1112.225384][ T7770]  #2: ffff88802a0c21d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[ 1112.234275][ T7770]  #3: ffff88805774d1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0
[ 1112.243505][ T7770]  #4: ffff8880226f71a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880
[ 1112.254054][ T7770] 
[ 1112.254054][ T7770] stack backtrace:
[ 1112.259940][ T7770] CPU: 0 UID: 0 PID: 7770 Comm: kworker/0:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1112.270978][ T7770] Tainted: [L]=SOFTLOCKUP
[ 1112.275300][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1112.285371][ T7770] Workqueue: usb_hub_wq hub_event
[ 1112.290411][ T7770] Call Trace:
[ 1112.293706][ T7770]  <TASK>
[ 1112.296630][ T7770]  dump_stack_lvl+0xe8/0x150
[ 1112.301219][ T7770]  debug_check_no_locks_freed+0x149/0x170
[ 1112.306943][ T7770]  kfree+0x12b/0x650
[ 1112.310844][ T7770]  ? device_release+0xc4/0x1f0
[ 1112.315615][ T7770]  ? __pfx_usb_release_interface+0x10/0x10
[ 1112.321417][ T7770]  device_release+0xc4/0x1f0
[ 1112.326011][ T7770]  kobject_put+0x222/0x550
[ 1112.330425][ T7770]  v4l2_device_disconnect+0x79/0xd0
[ 1112.335630][ T7770]  usbtv_video_free+0x25/0x30
[ 1112.340304][ T7770]  usbtv_disconnect+0x5c/0xa0
[ 1112.345000][ T7770]  usb_unbind_interface+0x295/0x9f0
[ 1112.350198][ T7770]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1112.355951][ T7770]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1112.361693][ T7770]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1112.367406][ T7770]  device_release_driver_internal+0x4f5/0x880
[ 1112.373467][ T7770]  bus_remove_device+0x444/0x560
[ 1112.378406][ T7770]  ? __pfx_bus_remove_device+0x10/0x10
[ 1112.383858][ T7770]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1112.389599][ T7770]  device_del+0x524/0x8f0
[ 1112.393929][ T7770]  ? __pfx_device_del+0x10/0x10
[ 1112.398784][ T7770]  ? __pfx___mutex_lock+0x10/0x10
[ 1112.403806][ T7770]  usb_disable_device+0x3d4/0x8d0
[ 1112.408837][ T7770]  usb_disconnect+0x346/0x9a0
[ 1112.413510][ T7770]  hub_event+0x1bbb/0x4d30
[ 1112.417933][ T7770]  ? do_raw_spin_unlock+0xf5/0x200
[ 1112.423061][ T7770]  ? register_lock_class+0x31/0x2e0
[ 1112.428271][ T7770]  ? __pfx_hub_event+0x10/0x10
[ 1112.433076][ T7770]  ? rcu_is_watching+0x16/0xb0
[ 1112.437855][ T7770]  ? process_scheduled_works+0x97a/0x1630
[ 1112.443571][ T7770]  process_scheduled_works+0xc3d/0x1630
[ 1112.449127][ T7770]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1112.455105][ T7770]  ? assign_work+0x3cf/0x5d0
[ 1112.459720][ T7770]  worker_thread+0xa47/0xfb0
[ 1112.464322][ T7770]  kthread+0x38b/0x480
[ 1112.468415][ T7770]  ? __pfx_worker_thread+0x10/0x10
[ 1112.473531][ T7770]  ? __pfx_kthread+0x10/0x10
[ 1112.478119][ T7770]  ret_from_fork+0x514/0xb70
[ 1112.482729][ T7770]  ? __pfx_ret_from_fork+0x10/0x10
[ 1112.487842][ T7770]  ? __switch_to+0xc89/0x1420
[ 1112.492516][ T7770]  ? __pfx_kthread+0x10/0x10
[ 1112.497102][ T7770]  ret_from_fork_asm+0x1a/0x30
[ 1112.501882][ T7770]  </TASK>
[ 1112.535260][ T7770] ==================================================================
[ 1112.535277][ T7770] BUG: KASAN: slab-use-after-free in usb_unbind_interface+0x2c2/0x9f0
[ 1112.535307][ T7770] Read of size 8 at addr ffff8880226f7008 by task kworker/0:10/7770
[ 1112.535324][ T7770] 
[ 1112.535337][ T7770] CPU: 0 UID: 0 PID: 7770 Comm: kworker/0:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1112.535363][ T7770] Tainted: [L]=SOFTLOCKUP
[ 1112.535371][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1112.535385][ T7770] Workqueue: usb_hub_wq hub_event
[ 1112.535410][ T7770] Call Trace:
[ 1112.535418][ T7770]  <TASK>
[ 1112.535434][ T7770]  dump_stack_lvl+0xe8/0x150
[ 1112.535462][ T7770]  print_address_description+0x55/0x1e0
[ 1112.535488][ T7770]  ? usb_unbind_interface+0x2c2/0x9f0
[ 1112.535511][ T7770]  print_report+0x58/0x70
[ 1112.535533][ T7770]  kasan_report+0x117/0x150
[ 1112.535557][ T7770]  ? usb_unbind_interface+0x2c2/0x9f0
[ 1112.535584][ T7770]  usb_unbind_interface+0x2c2/0x9f0
[ 1112.535607][ T7770]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1112.535631][ T7770]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1112.535654][ T7770]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1112.535677][ T7770]  device_release_driver_internal+0x4f5/0x880
[ 1112.535703][ T7770]  bus_remove_device+0x444/0x560
[ 1112.535733][ T7770]  ? __pfx_bus_remove_device+0x10/0x10
[ 1112.535761][ T7770]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1112.535784][ T7770]  device_del+0x524/0x8f0
[ 1112.535807][ T7770]  ? __pfx_device_del+0x10/0x10
[ 1112.535826][ T7770]  ? __pfx___mutex_lock+0x10/0x10
[ 1112.535854][ T7770]  usb_disable_device+0x3d4/0x8d0
[ 1112.535879][ T7770]  usb_disconnect+0x346/0x9a0
[ 1112.535901][ T7770]  hub_event+0x1bbb/0x4d30
[ 1112.535920][ T7770]  ? do_raw_spin_unlock+0xf5/0x200
[ 1112.535950][ T7770]  ? register_lock_class+0x31/0x2e0
[ 1112.535980][ T7770]  ? __pfx_hub_event+0x10/0x10
[ 1112.536005][ T7770]  ? rcu_is_watching+0x16/0xb0
[ 1112.536027][ T7770]  ? process_scheduled_works+0x97a/0x1630
[ 1112.536051][ T7770]  process_scheduled_works+0xc3d/0x1630
[ 1112.536089][ T7770]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1112.536116][ T7770]  ? assign_work+0x3cf/0x5d0
[ 1112.536140][ T7770]  worker_thread+0xa47/0xfb0
[ 1112.536175][ T7770]  kthread+0x38b/0x480
[ 1112.536192][ T7770]  ? __pfx_worker_thread+0x10/0x10
[ 1112.536216][ T7770]  ? __pfx_kthread+0x10/0x10
[ 1112.536233][ T7770]  ret_from_fork+0x514/0xb70
[ 1112.536252][ T7770]  ? __pfx_ret_from_fork+0x10/0x10
[ 1112.536269][ T7770]  ? __switch_to+0xc89/0x1420
[ 1112.536294][ T7770]  ? __pfx_kthread+0x10/0x10
[ 1112.536313][ T7770]  ret_from_fork_asm+0x1a/0x30
[ 1112.536345][ T7770]  </TASK>
[ 1112.536353][ T7770] 
[ 1112.536358][ T7770] Allocated by task 7770:
[ 1112.536367][ T7770]  kasan_save_track+0x3e/0x80
[ 1112.536385][ T7770]  __kasan_kmalloc+0x93/0xb0
[ 1112.536402][ T7770]  __kmalloc_cache_noprof+0x321/0x600
[ 1112.536419][ T7770]  usb_set_configuration+0x3cc/0x2180
[ 1112.536446][ T7770]  usb_generic_driver_probe+0x8d/0x150
[ 1112.536467][ T7770]  usb_probe_device+0x1c3/0x3b0
[ 1112.536489][ T7770]  really_probe+0x254/0xae0
[ 1112.536508][ T7770]  __driver_probe_device+0x1e8/0x360
[ 1112.536527][ T7770]  driver_probe_device+0x4f/0x240
[ 1112.536547][ T7770]  __device_attach_driver+0x270/0x410
[ 1112.536567][ T7770]  bus_for_each_drv+0x258/0x2f0
[ 1112.536591][ T7770]  __device_attach+0x2c4/0x450
[ 1112.536610][ T7770]  device_initial_probe+0xa1/0xd0
[ 1112.536627][ T7770]  bus_probe_device+0x12a/0x220
[ 1112.536651][ T7770]  device_add+0x7d7/0xb80
[ 1112.536665][ T7770]  usb_new_device+0x9aa/0x1690
[ 1112.536681][ T7770]  hub_event+0x28e8/0x4d30
[ 1112.536700][ T7770]  process_scheduled_works+0xc3d/0x1630
[ 1112.536721][ T7770]  worker_thread+0xa47/0xfb0
[ 1112.536743][ T7770]  kthread+0x38b/0x480
[ 1112.536758][ T7770]  ret_from_fork+0x514/0xb70
[ 1112.536772][ T7770]  ret_from_fork_asm+0x1a/0x30
[ 1112.536796][ T7770] 
[ 1112.536801][ T7770] Freed by task 7770:
[ 1112.536809][ T7770]  kasan_save_track+0x3e/0x80
[ 1112.536826][ T7770]  kasan_save_free_info+0x40/0x50
[ 1112.536850][ T7770]  __kasan_slab_free+0x5c/0x80
[ 1112.536868][ T7770]  kfree+0x1c5/0x650
[ 1112.536890][ T7770]  device_release+0xc4/0x1f0
[ 1112.536912][ T7770]  kobject_put+0x222/0x550
[ 1112.536933][ T7770]  v4l2_device_disconnect+0x79/0xd0
[ 1112.536957][ T7770]  usbtv_video_free+0x25/0x30
[ 1112.536979][ T7770]  usbtv_disconnect+0x5c/0xa0
[ 1112.536999][ T7770]  usb_unbind_interface+0x295/0x9f0
[ 1112.537020][ T7770]  device_release_driver_internal+0x4f5/0x880
[ 1112.537041][ T7770]  bus_remove_device+0x444/0x560
[ 1112.537065][ T7770]  device_del+0x524/0x8f0
[ 1112.537089][ T7770]  usb_disable_device+0x3d4/0x8d0
[ 1112.537109][ T7770]  usb_disconnect+0x346/0x9a0
[ 1112.537125][ T7770]  hub_event+0x1bbb/0x4d30
[ 1112.537144][ T7770]  process_scheduled_works+0xc3d/0x1630
[ 1112.537166][ T7770]  worker_thread+0xa47/0xfb0
[ 1112.537188][ T7770]  kthread+0x38b/0x480
[ 1112.537203][ T7770]  ret_from_fork+0x514/0xb70
[ 1112.537218][ T7770]  ret_from_fork_asm+0x1a/0x30
[ 1112.537241][ T7770] 
[ 1112.537246][ T7770] The buggy address belongs to the object at ffff8880226f7000
[ 1112.537246][ T7770]  which belongs to the cache kmalloc-2k of size 2048
[ 1112.537261][ T7770] The buggy address is located 8 bytes inside of
[ 1112.537261][ T7770]  freed 2048-byte region [ffff8880226f7000, ffff8880226f7800)
[ 1112.537279][ T7770] 
[ 1112.537284][ T7770] The buggy address belongs to the physical page:
[ 1112.537294][ T7770] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x226f0
[ 1112.537312][ T7770] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1112.537328][ T7770] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 1112.537344][ T7770] page_type: f5(slab)
[ 1112.537361][ T7770] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122
[ 1112.537376][ T7770] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 1112.537393][ T7770] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122
[ 1112.537409][ T7770] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 1112.537431][ T7770] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 1112.537448][ T7770] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 1112.537458][ T7770] page dumped because: kasan: bad access detected
[ 1112.537477][ T7770] page_owner tracks the page as allocated
[ 1112.537485][ T7770] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2883955561
[ 1112.537513][ T7770]  post_alloc_hook+0x1f9/0x250
[ 1112.537539][ T7770]  get_page_from_freelist+0x2209/0x2280
[ 1112.537558][ T7770]  __alloc_frozen_pages_noprof+0x217/0x5a0
[ 1112.537576][ T7770]  allocate_slab+0x7d/0x620
[ 1112.537597][ T7770]  refill_objects+0x2d5/0x350
[ 1112.537619][ T7770]  __pcs_replace_empty_main+0x2c8/0x6c0
[ 1112.537640][ T7770]  __kmalloc_cache_noprof+0x39b/0x600
[ 1112.537656][ T7770]  acpi_ds_create_walk_state+0x96/0x270
[ 1112.537675][ T7770]  acpi_ps_execute_method+0x341/0xa70
[ 1112.537695][ T7770]  acpi_ns_evaluate+0xd05/0x1320
[ 1112.537716][ T7770]  acpi_evaluate_object+0x657/0xd70
[ 1112.537735][ T7770]  acpi_evaluate_integer+0x112/0x320
[ 1112.537757][ T7770]  acpi_bus_get_status+0x150/0x3c0
[ 1112.537780][ T7770]  acpi_add_single_object+0x3d3/0x1b60
[ 1112.537802][ T7770]  acpi_bus_check_add+0x2b7/0x8a0
[ 1112.537822][ T7770]  acpi_ns_walk_namespace+0x273/0x700
[ 1112.537847][ T7770] page_owner free stack trace missing
[ 1112.537854][ T7770] 
[ 1112.537859][ T7770] Memory state around the buggy address:
[ 1112.537869][ T7770]  ffff8880226f6f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1112.537881][ T7770]  ffff8880226f6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1112.537894][ T7770] >ffff8880226f7000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1112.537904][ T7770]                       ^
[ 1112.537913][ T7770]  ffff8880226f7080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1112.537925][ T7770]  ffff8880226f7100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1112.537933][ T7770] ==================================================================
[ 1112.537973][ T7770] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1113.315769][ T7770] CPU: 0 UID: 0 PID: 7770 Comm: kworker/0:10 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1113.326784][ T7770] Tainted: [L]=SOFTLOCKUP
[ 1113.331096][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1113.341248][ T7770] Workqueue: usb_hub_wq hub_event
[ 1113.346272][ T7770] Call Trace:
[ 1113.349540][ T7770]  <TASK>
[ 1113.352462][ T7770]  vpanic+0x56d/0xa60
[ 1113.356452][ T7770]  ? __pfx_vpanic+0x10/0x10
[ 1113.362117][ T7770]  ? __pfx___schedule+0x10/0x10
[ 1113.366992][ T7770]  panic+0xc5/0xd0
[ 1113.370727][ T7770]  ? __pfx_panic+0x10/0x10
[ 1113.375156][ T7770]  ? preempt_schedule_thunk+0x16/0x40
[ 1113.380530][ T7770]  ? usb_unbind_interface+0x2c2/0x9f0
[ 1113.385917][ T7770]  check_panic_on_warn+0x89/0xb0
[ 1113.390851][ T7770]  ? usb_unbind_interface+0x2c2/0x9f0
[ 1113.396226][ T7770]  end_report+0x73/0x170
[ 1113.400463][ T7770]  ? usb_unbind_interface+0x2c2/0x9f0
[ 1113.405836][ T7770]  kasan_report+0x128/0x150
[ 1113.410334][ T7770]  ? usb_unbind_interface+0x2c2/0x9f0
[ 1113.415714][ T7770]  usb_unbind_interface+0x2c2/0x9f0
[ 1113.420907][ T7770]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1113.426627][ T7770]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1113.432345][ T7770]  ? __pfx_usb_unbind_interface+0x10/0x10
[ 1113.438099][ T7770]  device_release_driver_internal+0x4f5/0x880
[ 1113.444166][ T7770]  bus_remove_device+0x444/0x560
[ 1113.449105][ T7770]  ? __pfx_bus_remove_device+0x10/0x10
[ 1113.454571][ T7770]  ? kernfs_remove_by_name_ns+0x101/0x140
[ 1113.460305][ T7770]  device_del+0x524/0x8f0
[ 1113.464647][ T7770]  ? __pfx_device_del+0x10/0x10
[ 1113.469493][ T7770]  ? __pfx___mutex_lock+0x10/0x10
[ 1113.474516][ T7770]  usb_disable_device+0x3d4/0x8d0
[ 1113.479586][ T7770]  usb_disconnect+0x346/0x9a0
[ 1113.484260][ T7770]  hub_event+0x1bbb/0x4d30
[ 1113.488764][ T7770]  ? do_raw_spin_unlock+0xf5/0x200
[ 1113.493884][ T7770]  ? register_lock_class+0x31/0x2e0
[ 1113.499090][ T7770]  ? __pfx_hub_event+0x10/0x10
[ 1113.503869][ T7770]  ? rcu_is_watching+0x16/0xb0
[ 1113.508633][ T7770]  ? process_scheduled_works+0x97a/0x1630
[ 1113.514353][ T7770]  process_scheduled_works+0xc3d/0x1630
[ 1113.519913][ T7770]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1113.525938][ T7770]  ? assign_work+0x3cf/0x5d0
[ 1113.530531][ T7770]  worker_thread+0xa47/0xfb0
[ 1113.535139][ T7770]  kthread+0x38b/0x480
[ 1113.539214][ T7770]  ? __pfx_worker_thread+0x10/0x10
[ 1113.544320][ T7770]  ? __pfx_kthread+0x10/0x10
[ 1113.548907][ T7770]  ret_from_fork+0x514/0xb70
[ 1113.553493][ T7770]  ? __pfx_ret_from_fork+0x10/0x10
[ 1113.558598][ T7770]  ? __switch_to+0xc89/0x1420
[ 1113.563273][ T7770]  ? __pfx_kthread+0x10/0x10
[ 1113.567856][ T7770]  ret_from_fork_asm+0x1a/0x30
[ 1113.572625][ T7770]  </TASK>
[ 1113.575912][ T7770] Kernel Offset: disabled
[ 1113.580235][ T7770] Rebooting in 86400 seconds..