last executing test programs:

9m31.690731517s ago: executing program 32 (id=406):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCRMFF(r0, 0x40044581, 0x0)

9m31.614203817s ago: executing program 33 (id=405):
io_setup(0x3ff, &(0x7f0000000500)=<r0=>0x0)
io_destroy(r0)
syz_usb_connect$uac2(0x5, 0x82, &(0x7f0000005480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4248, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x3, 0x1, 0x0, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0xc0}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1ff, 0xff, 0x10}, [@multiply_unit={0x7, 0x24, 0xc, 0x8, 0xc, 0x14, 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x6, 0x2, 0x5, {0x8, 0x25, 0x1, 0x0, 0x18, 0xe2, 0xe3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x1, 0xea, {0x8, 0x25, 0x1, 0x0, 0x3f, 0x2, 0x9}}}}}}}}]}}, 0x0)

9m13.820016471s ago: executing program 34 (id=463):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000010c0)='net/ip6_tables_targets\x00')
preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x300, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmmsg$inet(r1, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24000801)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x19}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="512df143bbb0495a9e4cba354a51891c0b78c263041d066d7b2ee930605c668a839725", @ANYRES8=r3, @ANYBLOB="9c5970e0bedf300b44235df35d4e92f6578da6c32cee2f84be9ac1b2f0f9640372f1bf3e92c21d4ecc9c9975f6e2e00f3d29a6d449e491704a99285c3b9864ffc4fad6481df286bc8f788fce82d627175fec082c40", @ANYRESDEC], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000028c0)={'batadv_slave_1\x00', <r5=>0x0})
sendmmsg$inet(r3, &(0x7f0000002e80)=[{{&(0x7f00000011c0)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000001340)=[{&(0x7f0000001200)="f9b85de21b64d27bb5662e7cf64568e6b885d401d18c2a4c8bf4ca17778c528bdebf84e557f494c8f0a6e113c3af29e6958ba5dc1544c964d7128bc720f37eb6bb1b2a49874188e29aca1572ef337281d8ec6dadba514d921c6200b15c7a0790cea01c866e5d43805e57d13281aae0e8bc8f7b4b5e6fbcba66d2cd5af88fda608c88ec211a4fbb3a74326cdb8221f3c7806de6ed37e5b690e6ee31569909", 0x9e}, {&(0x7f00000012c0)="ff43545c1722f5f155ddc585a2d23d23c1dcce3620815479a035547c1d8da3ca35d5241f6c1c1de6a103c6881946384cceaa4914a8db2831d8bbb71bcac3565ad72a14496a62c6643b6da9a9", 0x4c}], 0x2, &(0x7f0000001380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x84}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000013c0)="feeb3553d8bdc59c7612aae1ee19b8cdbcd304287d4f82a40c72d29c0a0387ecd7034816c4caf75ec4ea79de814c57bd3bb941ba637d1fa60ae48e2df418d3d20141ec04e45741758a3aab44e74fb56ef43c63482c66c371e37d2146998e0f4938506508957ce53c89d424b934c1ecba88bbfc72b97e23e00741d0f8215109f90a8a12237336be1daa5cc2b1bb018b3a56a31811f252d5f7368f4e3c860e115138ad3deefe2548e33547092a9e587f71a66c67c86b56e4de1a511dc96883cc96915fa9c50535a03d1e76f0935f25cb70a36c", 0xd2}, {&(0x7f00000014c0)="0a1c1fbf1cb71b4eed5126ef014ae9e7bad22fd1af849f6a41b3697ee8db65ad1f93e66b40b79149f4b90cf026249d974e18c298dc98c896777f63218013e266f619e6dc2fc9826087c06b5eccd0a31fc4370f3c3514af57", 0x58}, {&(0x7f0000001540)="db80427dea06df8ba228e013e6f13c7faa92ac09ded12a133266eafa7790cd6c7e380e32061dc93719fdae971383ab2c0c93361ba50f8228445f328775158555b11e09eadc964d7267d56019844c39790d139abbf79ed61775d03276d93414b822f0209dc9504b02e70e33d43d83217fb90d5e343b3bda167f19291851f8fd45c4ba862a5cabdf9a31c7646b2a50b5fa78373b07e5f2c542219aaf759a9a0476777a1b394151940ff9d8ddc360b91e5a4b03f888617a256bdaf990ea87296f7319b782b7cfd4f2b7e6619672d1c1dabd499e35daa9027baa0860310d6f0e795bdf2d49e6", 0xe4}], 0x3, &(0x7f0000001680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x30}}, {{&(0x7f00000016c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002880)=[{&(0x7f0000001700)="199e4e69d9e0eb6466ec6a0f77caa731db19a7fe4f4aed698d1b818f9b2aff1f0cf2fef48491b7081c8eb37c63cb57b38ce7f0ccba3f4ac4df9cb0cb5167ff10bbb36b27b38e9a17fc3d8afd025d58fa34cdb4d3f5115ce1b4e265dc0a74334ecefd381645e0fb03fe268fac0716fa0ff504f40bc5d53d92521a24f3f116bc1c558a9bffadbe93a160c2a66141359629c21ca742e869", 0x96}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="94715e6a51ad67d098e6c0760baa282fc01550a807e8beb040baccb5234c06ded3e4c4193e23ba7bebcb0b2c55e02633879e8b90992c7b4261f93e678d2757f0ad717ecf50b9d5d377c8e50e79f592698b2b6814f4a124ed1afb6d37c6da35572e7989a6aa97a85232942041fd679b630d0e0d310a8d3be4541c429b4b3e203b37a4c0c7116e165e34f10decfa5031e97be09afd5bba521a83a6380efe9128c3f1c236690cedd9d5", 0xa8}], 0x3, &(0x7f0000002900)=ANY=[@ANYBLOB="14000000000000000000000008000000", @ANYRES32=r5, @ANYBLOB="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"], 0x180}}, {{&(0x7f0000002a80)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002d80)=[{&(0x7f0000002ac0)='_', 0x1}, {&(0x7f0000002b00)="a94d65cb4f33f7181fcdc87daf8bf3570c1db6a515b739b7ee081cf16e765a29003ea3430401f43ff6e2ad3e2b2ed304ad9e92fe6a888b9cb3c5e129fa82e06e0992fd60c12c4252daee7ccc00f9796ebcce642b78000906d20b59137f3246dbfceab2691c1a5619c7d1b13e54344340", 0x70}, {&(0x7f0000002b80)="ab1af1fc0f3a347293a836f9e0f1c28ae1dad7d17a4a79097599abe472bdb474afa16075efe5effd5dfe4e77d1f2a92b4311aa55e4239c7050bd079a45d98899961f2dabde28f755caf3d31f29f7048f70933b99f72a1acf42a4d20edc5a8c7ff442242ff35342d9ffa6875c323e452f491cb733e3d2692f54c05265d7a53559a75116d6e60f665a873f1ad031c07cd34ec4c3585c3fc581d366bfc187af4c0c99c323fa4e01e4d45ca0c02719a45c10af2518d7679eb0e7f29f64a0dd76ee4e7da8a00268", 0xc5}, {&(0x7f0000002c80)="f4f19ee8152ac79d40bb9403a2952ef2784ac06b22b5981b7781d21dc09274f2527129c9c65fead6f4f521efa4ddf1d3f51f2d0f569e78dce192ddb1ce32bee18acf41251b4d68123c252e9a4d2ce1af2f425c188d36be1158b9db0458267f924277fcbd8aa72918230fa04ac397", 0x6e}, {&(0x7f0000002d00)="eeb5fe5ba487e18180ec4e6c1a77259967a83a14d7fd05ff02953b640f5aa54c5c469d8ac32b6de872becd3d2c28ea94189d9b30e77d0277553d68fa029744ba40b09fd00753dc50f856432701f19116ad08c4520e2f46792225b09257843dea0b1dd3", 0x63}], 0x5, &(0x7f0000002e00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x48}}], 0x4, 0x2000810)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usbip_server_init(0x4)
syz_usbip_server_init(0x1)
syz_usbip_server_init(0x3)
syz_usbip_server_init(0x4)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0)
shmget(0x3, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil)
syz_usb_control_io(r4, &(0x7f0000000180)={0x2c, &(0x7f0000000040)={0x20, 0x23, 0x2, {0x2, 0xe}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001180)={'nicvf0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}})
sendto$inet6(r0, &(0x7f0000001100)="7db761f6fd625299b86a4e1a0d6387a81f57a089be3afbd4772eeed10cbdd788e274c36ee756", 0x26, 0x4010, &(0x7f0000001140)={0xa, 0x4e20, 0xb82c, @rand_addr=' \x01\x00', 0x3}, 0x1c)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x14, 0x800, 0x70bd2b, 0x25dfdbfb, {0x3, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "ac4173a8"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000001)

7m22.176095153s ago: executing program 4 (id=983):
r0 = epoll_create1(0x80000)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) (fail_nth: 7)

7m21.781944162s ago: executing program 4 (id=985):
write$binfmt_script(0xffffffffffffffff, &(0x7f0000001d40)={'#! ', './file0', [{0x20, 'nl80211\x00'}, {0x20, '/dev/kvm\x00'}]}, 0x1e)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x2, 0x2000, 0x1})
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x4, 0x8209, 0x5, 0xe2e, r4}, &(0x7f0000000300)=0x10)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
socket$alg(0x26, 0x5, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

7m21.71477059s ago: executing program 6 (id=987):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x5, 0x3}, 0x10)
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24)
recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00')

7m21.26339046s ago: executing program 4 (id=988):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x220000, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d9bffffff000000000a"], 0x18}}, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x81)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000150000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, &(0x7f00000000c0)="f30f1b6400ec2e2edcf00fc72a0fc75bfa0f0978000f350f38093c0f01df0f08", 0x20}], 0x1, 0x10, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a1", 0x1c}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "bd5c3e2e3228f1bb3298d9e59e63795c"}]}, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x82, &(0x7f0000000480)=@string={0x82, 0x3, "67b8e5a13e481ba6d5c36a4dfc122d54c2331e4fe5ab98bba727bc4f9fc48a23bd28ec2f275f298e8c5d1225c8303ee0068bd2f68ecfb672e035e22324e0dd090c3954f0b8b6d443936538f374c4a9d42a7987a6ab5a0edb036c756820e6e130d3839ab5baa35eacaed463d7fa0191e882efea94c6132934da22f817342e3db8"}}]})
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0)

7m20.415324829s ago: executing program 6 (id=993):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x7000000, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}, @in={0x2, 0x4e20, @remote}}}, 0x118)

7m20.243090612s ago: executing program 6 (id=995):
syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd018009850202100202000009058202"], 0x0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x7f, 0x3e}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0x71, 0x70, 0x20, 0x7}, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="050f40000307100210100008291004e828180939a67f5d630fdb97f3ec33b124a6b1405217239eb044d4fbe5e87d0abcbe651b25030b100108400010022c0301"], 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x2ca2}}, {0x9d, &(0x7f0000000100)=@string={0x9d, 0x3, "49448e4144c8c19b0814f99160052417dd5652f816eb546e64ad43f800ae90d5f394d07a3810081265e67a65fc55c03f62ead3dabae868fefd3b85d1f19273ad40ea3daa3c9b074d00090821c019f3e5e71746c3390212f826abae95485d6029ffe9acb9b5b970c72e4f2997baf52b36bd3204b0cfa8e39c170f449cb4c8f872459388725e50c49a3023380a28389879d5fe09744cdb49f076fc1b"}}]})

7m19.584151537s ago: executing program 4 (id=998):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x220000, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d9bffffff000000000a"], 0x18}}, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x81)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000150000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, &(0x7f00000000c0)="f30f1b6400ec2e2edcf00fc72a0fc75bfa0f0978000f350f38093c0f01df0f08", 0x20}], 0x1, 0x10, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "bd5c3e2e3228f1bb3298d9e59e63795c"}]}, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x82, &(0x7f0000000480)=@string={0x82, 0x3, "67b8e5a13e481ba6d5c36a4dfc122d54c2331e4fe5ab98bba727bc4f9fc48a23bd28ec2f275f298e8c5d1225c8303ee0068bd2f68ecfb672e035e22324e0dd090c3954f0b8b6d443936538f374c4a9d42a7987a6ab5a0edb036c756820e6e130d3839ab5baa35eacaed463d7fa0191e882efea94c6132934da22f817342e3db8"}}]})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020", 0x39}], 0x1}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)

7m18.483062109s ago: executing program 6 (id=1004):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

7m18.423189873s ago: executing program 6 (id=1006):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

7m18.268654869s ago: executing program 6 (id=1008):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x3, 0x6, 0x1, 0x3, 0x8, 0xff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000001880)={0x2, r2, 0x85cb, 0x3ff, 0x9, 0x401, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00')
exit(0x2)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000180)={@hyper, 0x1})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r7, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r8 = socket$tipc(0x1e, 0x2, 0x0)
fremovexattr(r8, &(0x7f00000000c0)=@known='system.posix_acl_access\x00')
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')

7m17.736143764s ago: executing program 4 (id=1009):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101)
mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (fail_nth: 1)

7m17.417154275s ago: executing program 4 (id=1010):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)

7m2.926589318s ago: executing program 35 (id=1008):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000040)={0x3, 0x6, 0x1, 0x3, 0x8, 0xff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, 0x0)
openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000001880)={0x2, r2, 0x85cb, 0x3ff, 0x9, 0x401, 0x2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps\x00')
exit(0x2)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000180)={@hyper, 0x1})
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r7, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r8 = socket$tipc(0x1e, 0x2, 0x0)
fremovexattr(r8, &(0x7f00000000c0)=@known='system.posix_acl_access\x00')
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')

7m1.664041484s ago: executing program 36 (id=1010):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)

6m28.75992064s ago: executing program 0 (id=1163):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a936744", 0xd}], 0x1}, 0x8888d)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = getpgrp(0xffffffffffffffff)
r2 = gettid()
kcmp(r2, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000630000/0x1000)=nil, 0x1000}, 0x1})

6m28.675613716s ago: executing program 0 (id=1164):
r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x5, 0x3}, 0x10)
write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009001d000000", 0x24)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400})
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904"], 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
syz_open_procfs(r0, &(0x7f0000000100)='map_files\x00')

6m27.450013606s ago: executing program 0 (id=1171):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmmsg(r1, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x5865, r3, 0x26}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000003300)='C', 0x1}], 0x1}}], 0x1, 0x20000081)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000080)={'sit0\x00', 0x0})
ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0)

6m27.405611891s ago: executing program 0 (id=1172):
r0 = socket(0xa, 0x3, 0x3a)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x20, r2, 0x803, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0xa004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0xffffffff, 0xf70, 0x4000000, 0xc, 0x0, 0xfffffffc, 0x0, 0x2]}})
r4 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r4, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3d, 0x0, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, 0x0, 0x10, 0x17f)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@local}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000001c0))
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000040)={0x0, 0xe, 0x2, ')q'}, 0x0, 0x0})

6m25.619158136s ago: executing program 0 (id=1180):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
close(r0)
fchdir(r0)
r1 = socket$kcm(0x10, 0x2, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x0)
copy_file_range(r3, &(0x7f00000000c0)=0x7, 0xffffffffffffffff, 0x0, 0x9, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
socket$netlink(0x10, 0x3, 0xa)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)
r5 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
close(r5)
rseq(&(0x7f00000002c0), 0x20, 0x10000000000, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x0, r1, &(0x7f00000003c0)="64a48888aa9eb57be13153fd698a0138786de716eaabe331d544b188ac84fc418aa731c5b11fa391c90812dbabf01c62a3acac6740c1cdec82f73acd87240d447a936f9a141e6b12b12060ed2c", 0x4d}])
r6 = syz_open_dev$sndctrl(0x0, 0x7ffc, 0x4200)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req={0x9, 0x100b4f, 0x300, 0x4}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_STOP_AP(r9, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80aa0008}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc13", @ANYRES16=r7, @ANYBLOB="050a28bd700003dcdf251000000008000300", @ANYRES32=r6, @ANYBLOB="470b84c7e4a25cf8ee4a1998dd3b237c6a6bf55bb44f2f3900b494c8bf7d1e0c4e679a15042536f0403ced97ed14569b0f2efddd17da428abaaaa4e51a6f6693eae16a3833ae7bb96e2366a9bae0af19c3fb4b8e7e875cd3319b2db31a8e"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x41000)
r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$TCSETS(r10, 0x40045431, &(0x7f0000000100)={0x0, 0x90, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8)
setsockopt$packet_int(r8, 0x107, 0xc, &(0x7f0000000580), 0x4)

6m25.150987272s ago: executing program 0 (id=1182):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0)
r1 = dup(r0)
r2 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@loopback, @in6=@local, 0x4e23, 0x8000, 0x4e1d, 0x3, 0x2, 0xa0, 0x80, 0x11}, {0x80000000, 0x6, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x51, 0x3, 0x4}, 0x85, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@local, 0x4d8, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1000000}}, 0xe8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000001280), 0x6)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x111, 0xfff}], 0x10}, 0x4000009)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = fanotify_init(0x500, 0x0)
r10 = fcntl$dupfd(r8, 0x0, r9)
fanotify_mark(r9, 0x1, 0x40000019, r10, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r5, r4, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
r12 = syz_open_dev$video(&(0x7f0000000300), 0x1000000000c, 0x200c1)
ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000000)={0xa, 0x0, 0x7, {0x8000, 0x18000000, 0x42, 0x40}})

6m24.774260322s ago: executing program 37 (id=1182):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0)
r1 = dup(r0)
r2 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@loopback, @in6=@local, 0x4e23, 0x8000, 0x4e1d, 0x3, 0x2, 0xa0, 0x80, 0x11}, {0x80000000, 0x6, 0x8, 0x3, 0xc, 0x81, 0xff, 0x408}, {0xb, 0x51, 0x3, 0x4}, 0x85, 0x0, 0x1, 0x0, 0x3, 0x1}, {{@in=@local, 0x4d8, 0x3c}, 0xa, @in6=@mcast1, 0x0, 0x4, 0x0, 0x0, 0x4, 0x8, 0x1000000}}, 0xe8)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000001280), 0x6)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x3554000)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c)
sendmsg(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x111, 0xfff}], 0x10}, 0x4000009)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = fanotify_init(0x500, 0x0)
r10 = fcntl$dupfd(r8, 0x0, r9)
fanotify_mark(r9, 0x1, 0x40000019, r10, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r5, r4, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
r12 = syz_open_dev$video(&(0x7f0000000300), 0x1000000000c, 0x200c1)
ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000000)={0xa, 0x0, 0x7, {0x8000, 0x18000000, 0x42, 0x40}})

6m18.771339838s ago: executing program 7 (id=1216):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x6, 0x2, 0x26, 0x1, 0x40, 0x4, 0xfc, 0xb, 0x0, 0x0, 0x4, 0x3}, 0xe)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}}]}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000002c0)=r2, 0x4)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000240))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000004c0)={[0xa, 0x2, 0x7000000, 0x8aaf, 0x8000, 0xfffffffffffffffc, 0xb3, 0x4, 0x80000000000b1d, 0x5, 0x8, 0x81, 0x5, 0x7, 0xe5, 0x3], 0x10000, 0x3877c4})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6m18.565069554s ago: executing program 7 (id=1217):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
recvmmsg(r0, &(0x7f0000001d40), 0x5, 0x40000120, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14)
bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
unshare(0x20040600)
clock_adjtime(0x0, &(0x7f0000000500)={0x7de, 0x6b, 0x0, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0xffc99a3b00000000, 0x0, 0x7fff, 0x81, 0xfffffffffffffff9, 0x3, 0x6, 0x8000000000000001, 0x1000000004, 0x58fd, 0x3, 0x9, 0x2, 0x9, 0x6, 0xab, 0x5})
unshare(0x2a060600)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x140, 0x40000000, 0x41000000}], 0x0)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@loopback, @loopback}, 0x8)
syz_usb_connect(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090585", @ANYBLOB="f95b"], 0x0)
sendmmsg$inet(r1, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4094)

6m18.029388226s ago: executing program 7 (id=1218):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088f74803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) (fail_nth: 13)

6m17.627307414s ago: executing program 7 (id=1219):
r0 = socket(0xa, 0x3, 0x3a)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1)
sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x20, r2, 0x803, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0xa004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0)
sendfile(r3, r3, &(0x7f0000000080), 0x7f03)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4c, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0xfd, [0xffffffff, 0xf70, 0x4000000, 0xc, 0x0, 0xfffffffc, 0x0, 0x2]}})
r4 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r4, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x0, 0x17, 0x1, "ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3d, 0x0, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000000)=0x3, 0x4)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$pokeuser(0x6, 0x0, 0x10, 0x17f)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x35, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@local}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000001c0))
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000040)={0x0, 0xe, 0x2, ')q'}, 0x0, 0x0})

6m15.56194744s ago: executing program 7 (id=1228):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000240)=[@wr_crn={0x67, 0x20, {0x4, 0x9db}}], 0x20})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x0, 0x0, 0x2, 0x0, 0x10, 0x3, 0x7, 0xe4, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xff}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf801, 0x3000, [0x80000008, 0x0, 0x10000, 0xfffffffffffdffff]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xd, 0x7, 0x8})
ioctl$KVM_RUN(r2, 0xae80, 0xff000000)

6m15.247502833s ago: executing program 7 (id=1230):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x220000, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d9bffffff000000000a"], 0x18}}, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x81)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000150000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, &(0x7f00000000c0)="f30f1b6400ec2e2edcf00fc72a0fc75bfa0f0978000f350f38093c0f01df0f08", 0x20}], 0x1, 0x10, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f9"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "bd5c3e2e3228f1bb3298d9e59e63795c"}]}, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x82, &(0x7f0000000480)=@string={0x82, 0x3, "67b8e5a13e481ba6d5c36a4dfc122d54c2331e4fe5ab98bba727bc4f9fc48a23bd28ec2f275f298e8c5d1225c8303ee0068bd2f68ecfb672e035e22324e0dd090c3954f0b8b6d443936538f374c4a9d42a7987a6ab5a0edb036c756820e6e130d3839ab5baa35eacaed463d7fa0191e882efea94c6132934da22f817342e3db8"}}]})
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0)

6m14.73598148s ago: executing program 38 (id=1230):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x220000, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200016d9bffffff000000000a"], 0x18}}, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x81)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000150000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, &(0x7f00000000c0)="f30f1b6400ec2e2edcf00fc72a0fc75bfa0f0978000f350f38093c0f01df0f08", 0x20}], 0x1, 0x10, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f9"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x19, &(0x7f0000000180)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "bd5c3e2e3228f1bb3298d9e59e63795c"}]}, 0x2, [{0x2, &(0x7f0000000280)=@string={0x2}}, {0x82, &(0x7f0000000480)=@string={0x82, 0x3, "67b8e5a13e481ba6d5c36a4dfc122d54c2331e4fe5ab98bba727bc4f9fc48a23bd28ec2f275f298e8c5d1225c8303ee0068bd2f68ecfb672e035e22324e0dd090c3954f0b8b6d443936538f374c4a9d42a7987a6ab5a0edb036c756820e6e130d3839ab5baa35eacaed463d7fa0191e882efea94c6132934da22f817342e3db8"}}]})
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000165000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000100)="0f01cb0f2226baf80c66b895cd308666ef8340730cec0f8500000f01c366b9750100000f326767660f382570a5360fc76a8726f30f6fc3660f38807d00", 0x3d}], 0x1, 0x40, 0x0, 0x0)

2m42.622739571s ago: executing program 9 (id=2524):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x18, 0x1, 0x1)
getsockopt$inet_int(r1, 0x111, 0x32, 0x0, &(0x7f0000000380))
r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r3, &(0x7f00000039c0)={0x2, 0x0, {&(0x7f0000000680)=""/184, 0xfffffefd, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48)
sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r2, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040800}, 0xc010)

2m42.438522289s ago: executing program 9 (id=2525):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="f30f1ecd65f3ff9dd4a7260f01c9f3360f30670f01ca0f01fa8146051900baf80c66b8fa8ecd8c66efbafc0cb8f64aefdbe03e26660f38825f47", 0x3a}], 0x1, 0x5b, 0x0, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0xeeee0000, 0x12d7})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='exfat\x00', 0x208083, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x5, 0x8000000000000000, 0x7, 0x449c, 0x401, 0xa, 0x3, 0x1, 0x10000000000009, 0x4, 0xffffffffffffff81, 0xb218, 0xfffffffffffffff9, 0x0, 0x8000000000000000, 0x7], 0xd000, 0x200800})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m42.245200784s ago: executing program 9 (id=2526):
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x4008af83, &(0x7f00000001c0)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
prctl$PR_GET_THP_DISABLE(0x2a) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x4, 0x1, 0x704d, 0x1, 0x5, 0x1, 0x2, 0x0, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x1, 0x100, 0xfe, 0x48, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x0, 0x81, 0x40, 0x19b1, 0x8000, 0x7, 0x797, 0x4000000, 0x7, 0x3, 0xe, 0x7, 0x1, 0x1, 0x5, 0xe, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xfffffff7, 0x4, 0x7, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x3, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x6, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x8, 0xe62, 0x3, 0x3, 0x9, 0xc33, 0x3, 0x7, 0x800, 0x6c368000, 0x8, 0x1000007, 0x0, 0x10, 0x5, 0x8, 0x8001, 0x3, 0x7fff, 0x80000009, 0x0, 0x5, 0x4, 0x401, 0x8, 0x40, 0xc10, 0x80000001, 0x3, 0x3, 0x3, 0x7, 0x8, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x3, 0x0, 0x11e, 0xa4, 0x0, 0x5, 0xd69, 0x9, 0xf404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x6, 0x0, 0x6, 0x8, 0x6, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x4, 0xc, 0x7, 0xa, 0xa, 0x8, 0x7, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0x2, 0xfffffffd, 0x7, 0x5, 0x7f, 0x7ff, 0xd, 0x400, 0xf, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0x0, 0x2, 0x5d9fffa, 0x3ff, 0x40, 0x1, 0x8, 0x10000, 0xe7, 0x200, 0x7af5, 0x0, 0xb, 0x0, 0xffff, 0x7, 0xc, 0x2, 0x81, 0x9, 0x2, 0x7, 0x100, 0x7, 0x0, 0x6, 0x10], [0xffffff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x3, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x8000, 0x8, 0xffffff81, 0x80000000, 0x5, 0x3, 0x201, 0xfff, 0x3, 0xfffffffd, 0x3c63, 0x7, 0x6, 0xe6, 0xffffffff, 0x3, 0x2, 0x7, 0x1, 0x7, 0x7, 0x8, 0x1, 0xf, 0x9, 0x17cb, 0x0, 0x3, 0x6fe, 0xe, 0x7, 0x13a, 0x7, 0x0, 0xb757, 0x2, 0x11b, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x4, 0x2, 0x5, 0x10000400, 0x9, 0x5, 0x3, 0xfffffffb, 0xc, 0x6]}, 0x45c) (async)
r2 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e3, &(0x7f0000000140)={r2}) (async)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r1) (async)
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x4c, 0x0, 0x200, 0x70bd28, 0x8, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) (async)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b0000000000000200000000180000000000000029000000390000000000000000000000380000000000000029000000390000003a04027000000000ff010000000000000000000000000001ff020000000000000000000000000001"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)}, {0x0}, {0x0}], 0x6}}], 0x2, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) (async)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async)
sendmsg$NFT_BATCH(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x4c, 0xe, 0xa, 0x900, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x9c, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x24, 0xe, 0xa, 0x300, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x154}, 0x1, 0x0, 0x0, 0x4004014}, 0x10) (async)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2m41.955183193s ago: executing program 9 (id=2527):
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x4000080, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={<r4=>0x0, <r5=>0x0, <r6=>0x0}, &(0x7f00000002c0)=0xc)
mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204040, &(0x7f0000000100)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r5, @ANYBLOB="2c01a4fd4393d0ae4162df01009b86979e9415ddfd2291e60000000000000085d77a7079f3407c24bbcd4c4bfde87e040000008bab4129c640798f769a5d7c0d0000000000000026950e80ac4cd72441651b3c12e609307c6500970cfbdb6900873355b9c65b3ea34fcff6dad67688bda32fed40153a5a6e1cd1a40dcc7ba4543b060d54"])
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x800804, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x410)
r9 = syz_usb_connect(0x2, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000102030109024c0001000010000904e7000229feac000b2402010302057ff49bfd052406000105240002000d240f0105000000090007000806241a7f000109050602ff03000000090582020800"/90, @ANYRES8=<r10=>r5, @ANYRESHEX=r3, @ANYRES8=r5, @ANYRES32=r6], 0x0)
socket(0x5, 0x6, 0x4)
syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="10000000071401"], 0x10}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000)
r12 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[], 0xfe33)
syz_usb_control_io$uac1(r9, &(0x7f0000000480)={0x14, &(0x7f0000000000)={0x60, 0xf, 0x71, {0x71, 0x7, "f8e475f3e228253eb3b7c90015c3ac378aab9524ece1a177f01fc96fa1782276890e313ac2e85d32e5513e606b4aacfef6baee7d35bdc421feb22fb33ff8e87cdaa38b8372dbc70a1631646243ea9d478aed8c4df622d866beea76003a8545830122cbfbbaa26c3ee3f907dc6202d8"}}, &(0x7f0000000700)={0x0, 0x3, 0x4, @string={0x0, 0x3, "5b03e4ccb10c6d4e28f55de73c6085dd6a9c8779f4a23537705537f4acde844ebdebafdb957545ec256f478b965a7d969127dda2505503306c28e240df93432ad94c6b06d9fef33f30a343b948aedd82569abdad006c61d604ab91b7a102bbf0c7640cb71479195421f66e048d994b6cd0124212a1ca018f0ca2da73c336add0b7b8b243d2243b00df044a8fa38a1425ba1ca91f57bfe3689a72"}}}, &(0x7f0000000540)={0xe, &(0x7f0000000300)={0x20, 0xb, 0x3, "57d317"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000400)={0x20, 0x81, 0x3, "ecabf8"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "040000"}, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r4, @ANYBLOB="d8a264022dfe631577d5e2c1e10750b86ccfaabb6479077989afdafcc9350e145f19022cd49650aba2974b179126ac7cf8d852", @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB="dc2512fe119302e5629c140675c6f1997252b33a7a2de0829c4cf044055360f254692163b4f8aa9d85004db7c88cf9d628f05f9e41e8453e2026144c18837014bee1cf82c022652ff5cdf6217ce449ea06a47ff53ad824b4e0b59367bb2d3041bddc05a6e613437d497997c2e3c5", @ANYRES8=r12, @ANYRESHEX=r10, @ANYRESHEX=r4], &(0x7f00000004c0)={0x20, 0x84, 0x1, 'p'}, &(0x7f0000000440)={0x20, 0x85, 0x3, "de69e6"}})

2m40.98881591s ago: executing program 9 (id=2528):
write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04d6", 0x13)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2m40.066697558s ago: executing program 9 (id=2530):
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setuid(0xee00)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x7, 0x8, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x64, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xf, 0x32, 0xffffffffffffffff, 0x5000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r2=>0x0})
r3 = openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000180)={0x1, r4, 0x80000001, 0xffffff95, 0x3, 0x2, 0x4, 0x7, 0x800})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r2, 0x2, 0xffffffffffffffff, 0x1c, 0x80000})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r5, &(0x7f0000006800)="10", 0x20)

2m39.468760525s ago: executing program 39 (id=2530):
r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setuid(0xee00)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x7, 0x8, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x64, 0x0, 0x3, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xf, 0x32, 0xffffffffffffffff, 0x5000)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r2=>0x0})
r3 = openat$panthor(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000140)={0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_CURSOR2(r3, 0xc02464bb, &(0x7f0000000180)={0x1, r4, 0x80000001, 0xffffff95, 0x3, 0x2, 0x4, 0x7, 0x800})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r2, 0x2, 0xffffffffffffffff, 0x1c, 0x80000})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
write$char_usb(r5, &(0x7f0000006800)="10", 0x20)

2m7.180920152s ago: executing program 5 (id=2677):
r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xa)
fchdir(r1)
ioctl$DVB_DVR_DMX_QBUF(r1, 0xc0186f3f, &(0x7f0000000080)={0x0, 0x9, 0x7f, 0xa6b, 0x11, 0x8})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16=r4, @ANYBLOB="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"], 0x2040}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000013)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0)
unlinkat(r2, &(0x7f0000000040)='./bus\x00', 0x200)

2m6.965748389s ago: executing program 5 (id=2678):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7f, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x80, 0x2, 0x2, 0x2c, 0x7, 0x1, 0x5, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x19, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x1000009, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x8, 0xffffffff, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x52, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m6.707868885s ago: executing program 5 (id=2680):
socket$nl_xfrm(0x10, 0x3, 0x6)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='cubic', 0xb)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000500)=0x57fc)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0)

2m6.28688016s ago: executing program 5 (id=2683):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89801)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xf6ffffff)

2m6.194138185s ago: executing program 5 (id=2684):
syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000480)={0xa, 0x4e24, 0x7, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0xe53729bd61505fe4)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
shutdown(r1, 0x1)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x20000000, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000340)={0x2, 0x0, [{0x8000000a, 0x4, 0x2, 0x422000, 0x67, 0x2, 0x1}, {0x80000019, 0xcd, 0x0, 0xfff, 0xbdb1, 0x3fffc0, 0x80000001}]})
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = dup(r5)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = dup(r7)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043)
r9 = dup(r7)
shutdown(r9, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x5, 0x9, 0x6, '\x00', 0x8, 0x1})
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x5, 0x0, "8eef10098502988d352a70e1133459910d6a00"})
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)

2m5.869391603s ago: executing program 5 (id=2687):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x202, 0x4)
sendto$inet(r0, 0x0, 0x3c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000640)="32eec44c", 0x4}], 0x1}}], 0x2, 0x6081)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

2m5.118618489s ago: executing program 40 (id=2687):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x202, 0x4)
sendto$inet(r0, 0x0, 0x3c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000640)="32eec44c", 0x4}], 0x1}}], 0x2, 0x6081)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
getsockname$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)

6.1882125s ago: executing program 2 (id=3353):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a", 0x2, 0xfffffffffffffffe)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a00000905050200", @ANYRES64=0x0], 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000400)={0x0, 0x9, 0x5, &(0x7f00000003c0)={0xc, "c90f430c90ddb08050edec22083de7545ef8102e8744ebf4c4352553e0bf41d79c"}})
syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2e, 0xf4, 0x80, 0x10, 0xb39, 0x109, 0xc997, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x0, 0x0, 0x50, 0x4, "", [{{0x9, 0x4, 0x68, 0x5, 0x1, 0x67, 0x42, 0x2e, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0x6, 0x28}, [@processing_unit={0x9, 0x24, 0x7, 0x6, 0x3, 0x0, "81bd"}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x6, 0x4, [0x3, 0x4, 0x6, 0x8], 0x53}, @selector_unit={0x6, 0x24, 0x5, 0x6, 0xb0, 'G'}]}], [{{0x9, 0x5, 0x5, 0x0, 0x20, 0x98, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1, 0x9, 0x6, 0x20, 0x1}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "208ae713193e2998d5c79c8cdb8577a3"}]}, 0x3, [{0xbd, &(0x7f0000000100)=@string={0xbd, 0x3, "f44aa1dc882a9137ac3dcd036731face37064428bfcf5d91a84fff4de99608f8b49ff4964970093dc10ed6667221721b6cce13bf433db839f355995625646dec45940c8f937e692745e933ea165dbc100b98400c20c3d5e719e8ac5040da6b65e717ee10d3e7379d8101c803ff9f01981cc429176728e684eaf1e422bce3b3f00f4b4856261d9657a65004be9764a301d1fcd2e93a19b8c893dab03c2e557d993aabeb295928ae669fdc975c712a2e402069e906086f87bb4180a4"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x85, &(0x7f0000000200)=@string={0x85, 0x3, "f20fcae4df0ac76aa48a4439297a6d567812dbbf957cb2035631e1de615195b1fccb5cd88f3d6ecac5a7fab2d917d834030ff1adaeed70c350f496ede52efc882bf09ee069cf9233a4e1d6f70ad429fb16a62c77f8f6c2a4ad74299b5204d756fa38cfda8d423ac1a3bffa68f02bbd3bafe42937f22b6e35a07fec5c8e9fb5e6843095"}}]})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="780000005fc26f1de4de512539121523005f4e0d037664749dae3d198ffb49c2da3e8773c917c1242a2c916cfbd32c730ff88c39d345b05248ee7621e51234e9f0c4a918d4f3d7dd76295cac69dfc51df4251ef10c4d637e16c62b3cbcad2485e8e59b52cd0350ca343203bccf50bdefcd6f0b6a150d6a80e9bc0e4947d323fdd0ef445e3cf4e6a67656e4d14be3b85a04d1907896c7090920fcfe295dd86c2d66918a68d1d8b8f26ffb1aa6a8fd4aff1e8725994ee8", @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf250c00000004000780300002801c0003800800020040000000080002005a000000080001002000000008000200070000000800010000000100300005802c00028008000400060000000800040004000000080002000500000008000100120000000800040002000000"], 0x78}, 0x1, 0x0, 0x0, 0x40044}, 0x10)

5.327732206s ago: executing program 3 (id=3357):
socket(0x23, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x11, 0xc7, {0xc7, 0x10, "2be76c18f57750c1297177a2f3e32b4103e4e97739e619f46accf315d883c3f26bf8edfe24d9476d8bcbda1b98159bcce7a587d882701262047acdceaaef8cb67a473bf59e5bf873bb9dba13edc67d34f2a28783ebb24d58bc7693ba9b52dff377ef41a9cf4dc1b4c2716b2cb3988c0c6abbc684be0a2030b444d4261684062453ed4e22c968d40bc3c40f60a1b887712dd2745f6362ab24a0a4f4241bad9735e7c1f05bf55124f806b4f525ece4be6dc17cae4a01cbe6e4253ef2e336ae0c9a04f15265a7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20}}}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0x15, 0xea, "e1a3ec93b2ba8524a72501a72353ae63b7c0ede15582d4de66c8c2e8c414076ccf1ac99b7fbb1d6caca89e81c7859cf2dba7a81465c059b1a80020b1c6fc48ead1c463bccb9e326210d6729763a794096100c513d3614206acd2cf135c27dbc0aadda0f8c74e5cd61bed8cf57f322798dd88fc6c90214d45b202149ed829063a6b7c15644e50f60aabe12461b8f90ec75aa58928878c41687b54ca4084ce7917efbf2daff537bff355c2b37d612175dcc2d6f8a9b05e4e0344077f360428d48c524bebc56b98c377d88129d5284ac1c9ccfe7ce6c8c53b46e3896a63c4dee4749364dac9f98618b65031"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x72}, &(0x7f0000000380)={0x20, 0x81, 0x2, "f401"}, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x20, 0x83, 0x2, "12ea"}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "8ccef9"}, &(0x7f0000000500)={0x20, 0x85, 0x3, ' Md'}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.676060246s ago: executing program 2 (id=3360):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x14, r1, 0x403, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x4000080)

4.617165552s ago: executing program 2 (id=3361):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7ff)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000080)=0x5e}) (async)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000006c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async)
setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async)
setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e01015a7a0102030109021b00010000000009040000012e6d0a000905ff"], 0x0)

4.427594894s ago: executing program 1 (id=3362):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^\x84{\x00\x02\xb9~B\x9f\xacl\x1d3\xa6\xab\x81\x9d\x13\x89\x9b\x00\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\7\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~\x03\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x1)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
listen(r0, 0x0)

4.416553335s ago: executing program 1 (id=3363):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400)
ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f00000001c0)=[{0x3c, '\x00', @buffer={"38912e14b96acbb942644cd1944750bafecc30dc6f1f636f0e7ece59a75ceef1", 0x20}, 0x9}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.23393695s ago: executing program 2 (id=3366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x808)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x902, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
ioctl$TCSBRKP(r3, 0x5425, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

3.173932789s ago: executing program 3 (id=3367):
write(0xffffffffffffffff, &(0x7f0000000000)="3c00000058001f000307f4f9002304000a04", 0x12)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.143030196s ago: executing program 8 (id=3368):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7f, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x80, 0x2, 0x2, 0x2c, 0x7, 0x1, 0x5, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x19, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x1000009, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x8, 0xffffffff, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x52, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.65175001s ago: executing program 8 (id=3369):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_disconnect(r0) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x6, 0x4, 0xffffffff, 'syz0\x00', 0x8}, 0x105, 0x1, 0x1, 0x0, 0xffffffffffffff13, 0x1, 'syz1\x00', 0x0, 0x5d})
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3537c40ee08c2214d8191b746d85eaafe1bd513529a5dcab2729d29cb39a4c10cbec6ad71a77a4d4423c9403ed59ab9a2746c59d22949edfcbd475abddbe5a70e1c33916e308e600ba327e4ab5bc9c1818832154ffd39fcbe9569a6eb133d449efa47fdaae342f1dcf681223cd7725a07251e9ef4b4dadc8301fe172a46ad8c33839cbefc111285c83ed3a328aa6b642709ab48ee8cb7d18e229316cfbc44186bc55b7c14d22c969c4f1ccb5d3e0b07e974fb0"], 0x20}}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000040000701"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000000c0)={0x6, "1f938a7b853b3a9b0b00000000000000008900", <r3=>0xffffffffffffffff}) (async)
timer_create(0x1, &(0x7f0000000300)={0x0, 0x16, 0x2}, &(0x7f0000000340)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000380)={{}, {0x0, 0x989680}}, &(0x7f00000003c0)) (async)
r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000080)={0x1ff, "1f138a91b80f3795181800c70511603979e1ef3b3a9b0b8c7d6a34f124708900", <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000140)={"50edd24983fde74e78682dbc67d293c19050af5f39c0ce29436807917da2c17e", r6})
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffc000/0x1000)=nil)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000280)=""/90)

2.536525113s ago: executing program 1 (id=3370):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x1}, {0x3bc7, 0x0, 0x80000000}, {0x0, 0x0, 0xffffffff}, 0x70bd2d, 0x0, 0x2, 0x4, 0x0, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0)

2.486047838s ago: executing program 8 (id=3371):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f00000002c0)={0x8, [[0x9, 0x8, 0xea2, 0x7, 0x2df5, 0x8, 0x101, 0x9], [0x100, 0x47ea56e7, 0x5, 0x7, 0x32a, 0x5, 0x401, 0x7fff], [0x1c3, 0x1000, 0x100, 0x6, 0x9, 0x7, 0xb, 0x7]], '\x00', [{0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x5, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x1}, {0x400, 0x8000, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x3, 0x0, 0x0, 0x1, 0x1}, {0x800, 0x80000000}, {0x6, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x9, 0x1, 0x0, 0x1}, {0x852, 0x27, 0x0, 0x1, 0x1, 0x1}, {0x200, 0x8, 0x0, 0x1, 0x1}, {0x3, 0x1000, 0x1, 0x0, 0x1}, {0x7, 0x8, 0x1, 0x1, 0x1}], '\x00', 0x25})
fchdir(r2)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r3, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

2.052157988s ago: executing program 1 (id=3372):
sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)=ANY=[@ANYBLOB="14800000", @ANYRES16=0x0, @ANYBLOB="000228bd70000800000017000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0) (async)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)}, {0x0}, {0x0}], 0x3}}], 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be", 0x8b}, {&(0x7f00000006c0)="138b9f8300af1d793c8e", 0xa}, {0x0}, {0x0}], 0x6}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$alg(0x26, 0x5, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x6000, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) (async)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
accept4(r2, 0x0, 0x0, 0x800) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) (async)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000fc0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.959533228s ago: executing program 3 (id=3373):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7f, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x80, 0x2, 0x2, 0x2c, 0x7, 0x1, 0x5, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x19, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x1000009, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x8, 0xffffffff, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x52, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

1.845458123s ago: executing program 2 (id=3375):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000100)='^', 0x1, 0x40000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (fail_nth: 2)

1.767698079s ago: executing program 1 (id=3376):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="03000800010065000000140000004500007000680000000190780a010100ac1414aa0b009078000000004581000400660080043200af04010100ac1414aa01940401009404000001441c9b51ffffffff00000002ffffffff00000006e000000100000007861700000001060d7e21275856dd8a1565a3fe0704987d000000"], 0x7e)
r3 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf25010000000000000008410000004c00180000000662726f6164636173742d6c696e6b00"/98], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4)
r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xd9200)
syz_usb_disconnect(r4)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f0100000000000000000009058103400000"], 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r5, 0x29, 0x1d, 0x0, 0x0)
ioctl$EVIOCRMFF(r4, 0x4004550e, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x17}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x33, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22)
r9 = dup(r6)
ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000000)={0x2f, {0x0, 0x0, 0x10000007}})
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)

1.718568294s ago: executing program 2 (id=3377):
socket(0x23, 0x3, 0x0)
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0x11, 0xc7, {0xc7, 0x10, "2be76c18f57750c1297177a2f3e32b4103e4e97739e619f46accf315d883c3f26bf8edfe24d9476d8bcbda1b98159bcce7a587d882701262047acdceaaef8cb67a473bf59e5bf873bb9dba13edc67d34f2a28783ebb24d58bc7693ba9b52dff377ef41a9cf4dc1b4c2716b2cb3988c0c6abbc684be0a2030b444d4261684062453ed4e22c968d40bc3c40f60a1b887712dd2745f6362ab24a0a4f4241bad9735e7c1f05bf55124f806b4f525ece4be6dc17cae4a01cbe6e4253ef2e336ae0c9a04f15265a7"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x20}}}, &(0x7f0000000540)={0x44, &(0x7f0000000200)={0x20, 0x15, 0xea, "e1a3ec93b2ba8524a72501a72353ae63b7c0ede15582d4de66c8c2e8c414076ccf1ac99b7fbb1d6caca89e81c7859cf2dba7a81465c059b1a80020b1c6fc48ead1c463bccb9e326210d6729763a794096100c513d3614206acd2cf135c27dbc0aadda0f8c74e5cd61bed8cf57f322798dd88fc6c90214d45b202149ed829063a6b7c15644e50f60aabe12461b8f90ec75aa58928878c41687b54ca4084ce7917efbf2daff537bff355c2b37d612175dcc2d6f8a9b05e4e0344077f360428d48c524bebc56b98c377d88129d5284ac1c9ccfe7ce6c8c53b46e3896a63c4dee4749364dac9f98618b65031"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x72}, &(0x7f0000000380)={0x20, 0x81, 0x2, "f401"}, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x20, 0x83, 0x2, "12ea"}, &(0x7f00000004c0)={0x20, 0x84, 0x3, "8ccef9"}, &(0x7f0000000500)={0x20, 0x85, 0x3, ' Md'}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0xe, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.509605735s ago: executing program 3 (id=3378):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)

1.367181988s ago: executing program 3 (id=3379):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x7f, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x80, 0x2, 0x2, 0x2c, 0x7, 0x1, 0x5, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x19, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x1000009, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x8, 0xffffffff, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x52, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.366777638s ago: executing program 8 (id=3380):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
rt_sigqueueinfo(0x0, 0x1d, &(0x7f00000004c0)={0x21, 0x8, 0x5})
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x20, 0xd, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000100)={0x4, 0x4ef, 0x6, 0xfffffc01, 0xd, "ea7174ddb80fc70005000000ffffffd2a2d975", 0x4, 0x7})
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000040)={0x0, 0x4})
sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000}, 0x0)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x4840)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a940100000000000a0000040900010073797a310000000008000540000700000000000000797a320000000008000a40fffffffc58010980900002000000000000000000"], 0x1bc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1.142407491s ago: executing program 3 (id=3381):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r4)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff06000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x4000010)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000340)='net_prio.prioidx\x00', 0x0, 0x0)
timerfd_create(0x7, 0xc0000)
r7 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r8=>0x0)
connect$nfc_raw(r7, &(0x7f00000002c0)={0x27, r8, 0x0, 0x1}, 0x10)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000003b0009002bbd7000fddbdf2502000000150001804db020"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000010)
ppoll(&(0x7f0000000140)=[{r0, 0x3}], 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000240)={[0x9]}, 0x8)
ioctl$sock_bt_hci(r3, 0x400448cb, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0)
sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r2], 0x108}}], 0x2, 0xc040)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000))

679.310742ms ago: executing program 8 (id=3382):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$netlink(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001800)=ANY=[@ANYBLOB="280000006600030628bd7000fedbdf251800ce800c"], 0x28}], 0x1, 0x0, 0x0, 0x4000001}, 0x40)

1.374284ms ago: executing program 1 (id=3383):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect(0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x808)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000780), 0x902, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
ioctl$TCSBRKP(r3, 0x5425, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

0s ago: executing program 8 (id=3391):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000800)={0xf7b, 0x1f, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x2, 0x2, 0x140003})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x6, 0x8161, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xf})
fcntl$dupfd(r2, 0x0, r1)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x30000, 0x1, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
close_range(r0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x8000, 0x8000, 'none\x00', 0x10, 0x2}, 0x2c)
getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68)
r5 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030000000000080001400000000108000240000000170900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r7, 0x8947, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6tnl0\x00'})
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000100)={{r5}, 0x1, &(0x7f00000000c0)=[0xe6], 0x0, 0xa, 0x5})

kernel console output (not intermixed with test programs):

terfaces, different from the descriptor's value: 1
[  671.986879][T16592] Bluetooth: hci3: Opcode 0x0401 failed: -110
[  671.994033][   T51] Bluetooth: hci3: command 0x0401 tx timeout
[  672.003046][ T5922] usb 2-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=7d.2a
[  672.012280][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.020428][ T5922] usb 2-1: Product: syz
[  672.024761][ T5922] usb 2-1: Manufacturer: syz
[  672.029402][ T5922] usb 2-1: SerialNumber: syz
[  672.173762][ T5916] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  672.268404][ T5922] usb 2-1: USB disconnect, device number 127
[  672.280396][T16632] fuse: Unknown parameter 'ýÿ'
[  672.344827][ T5916] usb 4-1: Using ep0 maxpacket: 32
[  672.353131][ T5916] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  672.362012][ T5916] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  672.371060][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  672.381304][ T5916] usb 4-1: config 1 has no interface number 0
[  672.390830][ T5916] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  672.402765][ T5916] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  672.415808][ T5916] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  672.429043][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  672.448027][ T5916] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  672.660962][ T5916] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  672.886589][T16627] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2910'.
[  672.898898][ T5916] usb 4-1: USB disconnect, device number 38
[  672.913844][ T5916] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  673.111982][   T24] usb 9-1: USB disconnect, device number 119
[  673.328479][ T5903] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[  673.491594][ T5903] usb 2-1: Invalid ep0 maxpacket: 16
[  673.544161][   T24] usb 9-1: new high-speed USB device number 120 using dummy_hcd
[  673.576734][   T29] audit: type=1326 audit(1773791795.621:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16650 comm="syz.2.2918" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb085b9c799 code=0x0
[  673.638979][ T5903] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[  673.682220][   T51] block nbd2: Receive control failed (result -32)
[  673.698390][T16651] block nbd2: shutting down sockets
[  673.715867][   T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  673.726464][   T24] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  673.736838][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  673.748560][   T24] usb 9-1: config 0 descriptor??
[  673.758834][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  673.812427][ T5903] usb 2-1: Invalid ep0 maxpacket: 16
[  673.818401][ T5903] usb usb2-port1: attempt power cycle
[  673.830802][ T5855] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  673.991100][ T5855] usb 4-1: Using ep0 maxpacket: 8
[  673.998242][ T5855] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  674.008981][ T5855] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  674.018643][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.026741][ T5855] usb 4-1: Product: syz
[  674.031162][ T5855] usb 4-1: Manufacturer: syz
[  674.035884][ T5855] usb 4-1: SerialNumber: syz
[  674.043344][ T5855] usb 4-1: config 0 descriptor??
[  674.054131][ T5855] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  674.064511][ T5855] usb 4-1: setting power ON
[  674.072316][ T5855] dvb-usb: bulk message failed: -22 (2/0)
[  674.083063][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  674.095219][ T5855] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  674.104072][ T5855] usb 4-1: media controller created
[  674.126265][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  674.153560][ T5855] usb 4-1: selecting invalid altsetting 6
[  674.159705][ T5855] usb 4-1: digital interface selection failed (-22)
[  674.166468][ T5855] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  674.177378][ T5855] usb 4-1: setting power OFF
[  674.182515][ T5855] dvb-usb: bulk message failed: -22 (2/0)
[  674.190372][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  674.194586][ T5903] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  674.206840][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  674.216459][ T5855] (NULL device *): no alternate interface
[  674.220201][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  674.238294][ T5903] usb 2-1: Invalid ep0 maxpacket: 16
[  674.242523][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  674.260398][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  674.271367][T16653] dvb-usb: bulk message failed: -22 (3/0)
[  674.277014][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  674.286653][T16653] dvb-usb: bulk message failed: -22 (3/0)
[  674.294754][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  674.299263][T16653] 9pnet_fd: Insufficient options for proto=fd
[  674.308969][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  674.319552][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  674.329178][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  674.349457][ T5855] usb 4-1: USB disconnect, device number 39
[  674.397424][ T5903] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  674.423245][ T5903] usb 2-1: Invalid ep0 maxpacket: 16
[  674.438230][ T5903] usb usb2-port1: unable to enumerate USB device
[  674.542763][   T24] pwc: recv_control_msg error -32 req 02 val 2500
[  674.550291][   T24] pwc: recv_control_msg error -32 req 02 val 2400
[  674.720040][ T5855] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  674.774374][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  674.785944][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  674.794414][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  674.801618][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  674.823383][   T24] pwc: Registered as video103.
[  674.833750][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input54
[  674.860925][   T24] usb 9-1: USB disconnect, device number 120
[  674.867825][ T5855] usb 3-1: device descriptor read/64, error -71
[  675.123740][T16664] binder: 16663:16664 ioctl c0306201 2000000003c0 returned -14
[  675.131962][ T5855] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  675.284803][ T5855] usb 3-1: device descriptor read/64, error -71
[  675.405138][ T5855] usb usb3-port1: attempt power cycle
[  675.755149][   T24] usb 9-1: new full-speed USB device number 121 using dummy_hcd
[  675.776478][ T5855] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  675.798785][ T5855] usb 3-1: device descriptor read/8, error -71
[  675.917501][   T24] usb 9-1: config 0 has an invalid interface number: 175 but max is 0
[  675.927138][   T24] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  675.937957][   T24] usb 9-1: config 0 has no interface number 0
[  675.944404][   T24] usb 9-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  675.956285][   T24] usb 9-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[  675.967790][   T24] usb 9-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  675.977877][   T24] usb 9-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16
[  675.994612][   T24] usb 9-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b
[  676.004166][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.012394][   T24] usb 9-1: Product: syz
[  676.016663][   T24] usb 9-1: Manufacturer: syz
[  676.021536][   T24] usb 9-1: SerialNumber: syz
[  676.034441][   T24] usb 9-1: config 0 descriptor??
[  676.045384][   T24] symbolserial 9-1:0.175: symbol converter detected
[  676.054462][ T5855] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  676.066391][   T24] usb 9-1: symbol converter now attached to ttyUSB0
[  676.077109][ T5855] usb 3-1: device descriptor read/8, error -71
[  676.204427][ T5855] usb usb3-port1: unable to enumerate USB device
[  676.311538][ T5855] usb 9-1: USB disconnect, device number 121
[  676.334704][ T5855] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0
[  676.368645][ T5855] symbolserial 9-1:0.175: device disconnected
[  676.428628][ T5903] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  676.600416][ T5903] usb 4-1: Using ep0 maxpacket: 32
[  676.608872][ T5903] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  676.617839][ T5903] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  676.628631][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  676.638326][ T5903] usb 4-1: config 1 has no interface number 0
[  676.644831][ T5903] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  676.656119][ T5903] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  676.669436][ T5903] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  676.678795][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.706560][ T5903] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  676.912476][ T5903] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  676.984487][ T5855] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  677.123897][ T5855] usb 2-1: device descriptor read/64, error -71
[  677.137212][T16677] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2927'.
[  677.149407][ T5903] usb 4-1: USB disconnect, device number 40
[  677.161412][ T5903] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  677.369358][ T9889] usb 9-1: new high-speed USB device number 122 using dummy_hcd
[  677.390800][ T5855] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  677.529720][ T5855] usb 2-1: device descriptor read/64, error -71
[  677.534824][ T9889] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  677.546371][ T9889] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  677.555603][ T9889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  677.569264][ T9889] usb 9-1: config 0 descriptor??
[  677.580109][ T9889] pwc: Askey VC010 type 2 USB webcam detected.
[  677.647744][ T5855] usb usb2-port1: attempt power cycle
[  678.008673][ T9889] pwc: recv_control_msg error -32 req 02 val 2b00
[  678.015254][ T5855] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  678.026725][ T9889] pwc: recv_control_msg error -32 req 02 val 2700
[  678.044710][ T9889] pwc: recv_control_msg error -32 req 02 val 2c00
[  678.052883][ T9889] pwc: recv_control_msg error -32 req 04 val 1000
[  678.061647][ T9889] pwc: recv_control_msg error -32 req 04 val 1300
[  678.066994][ T5855] usb 2-1: device descriptor read/8, error -71
[  678.080536][ T9889] pwc: recv_control_msg error -32 req 04 val 1400
[  678.093728][ T9889] pwc: recv_control_msg error -32 req 02 val 2000
[  678.108604][ T9889] pwc: recv_control_msg error -32 req 02 val 2100
[  678.332422][ T5855] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  678.341130][ T9889] pwc: recv_control_msg error -32 req 02 val 2500
[  678.354922][ T9889] pwc: recv_control_msg error -32 req 02 val 2400
[  678.364480][ T5855] usb 2-1: device descriptor read/8, error -71
[  678.499660][ T5855] usb usb2-port1: unable to enumerate USB device
[  678.585436][ T9889] pwc: recv_control_msg error -71 req 02 val 2900
[  678.601586][ T9889] pwc: recv_control_msg error -71 req 02 val 2800
[  678.610978][ T9889] pwc: recv_control_msg error -71 req 04 val 1100
[  678.618027][ T9889] pwc: recv_control_msg error -71 req 04 val 1200
[  678.639901][ T9889] pwc: Registered as video103.
[  678.665640][ T9889] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input55
[  678.695840][ T9889] usb 9-1: USB disconnect, device number 122
[  679.058455][ T5855] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  679.219358][ T5855] usb 3-1: Using ep0 maxpacket: 32
[  679.234678][ T5855] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  679.251590][ T5855] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  679.262367][ T5855] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  679.271551][ T5855] usb 3-1: config 1 has no interface number 0
[  679.278071][ T5855] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  679.289351][ T5855] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  679.303273][ T5855] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  679.312765][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  679.333976][ T5855] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  679.395819][T16733] tc_dump_action: action bad kind
[  679.544159][ T5855] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  679.772418][T16725] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2944'.
[  679.795534][ T5855] usb 3-1: USB disconnect, device number 50
[  679.811176][ T5855] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  680.078291][T16746] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2953'.
[  680.287956][ T5855] usb 9-1: new high-speed USB device number 123 using dummy_hcd
[  680.480309][ T5855] usb 9-1: Using ep0 maxpacket: 8
[  680.487389][ T5855] usb 9-1: config index 0 descriptor too short (expected 30, got 18)
[  680.499126][ T5855] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  680.508631][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.516902][ T5855] usb 9-1: Product: syz
[  680.522721][ T5855] usb 9-1: Manufacturer: syz
[  680.528415][ T5855] usb 9-1: SerialNumber: syz
[  680.542508][ T5855] usb 9-1: config 0 descriptor??
[  680.557241][ T5855] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  680.565524][ T5855] usb 9-1: setting power ON
[  680.570261][ T5855] dvb-usb: bulk message failed: -22 (2/0)
[  680.581807][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  680.592777][ T5855] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  680.603060][ T5855] usb 9-1: media controller created
[  680.625722][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  680.667184][ T5855] usb 9-1: selecting invalid altsetting 6
[  680.674344][ T5855] usb 9-1: digital interface selection failed (-22)
[  680.682917][ T5855] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  680.693027][ T5855] usb 9-1: setting power OFF
[  680.707678][ T5855] dvb-usb: bulk message failed: -22 (2/0)
[  680.715213][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  680.734747][ T5855] (NULL device *): no alternate interface
[  680.788390][T16743] dvb-usb: bulk message failed: -22 (3/0)
[  680.827047][T16743] dvb-usb: bulk message failed: -22 (3/0)
[  680.884788][T16743] 9pnet_fd: Insufficient options for proto=fd
[  680.975079][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  681.012587][ T5855] usb 9-1: USB disconnect, device number 123
[  681.846885][T16772] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2963'.
[  682.037089][T16779] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2966'.
[  682.058356][T16781] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2966'.
[  682.148041][ T9889] usb 9-1: new high-speed USB device number 124 using dummy_hcd
[  682.180178][ T5903] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  682.320289][ T9889] usb 9-1: Using ep0 maxpacket: 8
[  682.326990][ T9889] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  682.338290][ T9889] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 16384, setting to 64
[  682.349369][ T5903] usb 2-1: Using ep0 maxpacket: 32
[  682.356346][ T9889] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  682.362493][  T808] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  682.380248][ T5903] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  682.388929][ T9889] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  682.398754][ T5903] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  682.407585][ T9889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.416727][ T5903] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  682.425722][ T9889] usb 9-1: Product: syz
[  682.430032][ T9889] usb 9-1: Manufacturer: syz
[  682.434664][ T9889] usb 9-1: SerialNumber: syz
[  682.439424][ T5903] usb 2-1: config 1 has no interface number 0
[  682.445604][ T5903] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  682.459757][ T5903] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  682.472950][ T5903] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  682.484290][ T9889] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22
[  682.493791][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  682.504388][ T9889] usbtest 9-1:1.0: couldn't get endpoints, -22
[  682.510614][ T9889] usbtest 9-1:1.0: probe with driver usbtest failed with error -22
[  682.535753][ T5903] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  682.543673][ T5855] usb 3-1: new low-speed USB device number 51 using dummy_hcd
[  682.558436][  T808] usb 4-1: config 1 interface 0 has no altsetting 0
[  682.571984][  T808] usb 4-1: string descriptor 0 read error: -22
[  682.586800][  T808] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.40
[  682.603611][  T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.704064][ T5855] usb 3-1: device descriptor read/64, error -71
[  682.725816][T16772] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2963'.
[  682.746295][ T5903] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  682.792898][ T5896] usb 9-1: USB disconnect, device number 124
[  682.958880][T16774] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2964'.
[  682.970020][ T5903] usb 2-1: USB disconnect, device number 10
[  682.971558][ T5855] usb 3-1: new low-speed USB device number 52 using dummy_hcd
[  682.984810][ T5903] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  683.057210][T16784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.069319][T16784] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  683.084328][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.091918][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.098720][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.105951][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.113579][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.120525][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.127393][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.135083][ T5855] usb 3-1: device descriptor read/64, error -71
[  683.141446][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.150817][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.157712][  T808] lua 0003:1E7D:2C2E.002D: unknown main item tag 0x0
[  683.202639][  T808] lua 0003:1E7D:2C2E.002D: hidraw0: USB HID vff.7f Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0
[  683.249490][ T5855] usb usb3-port1: attempt power cycle
[  683.298876][  T808] usb 4-1: USB disconnect, device number 41
[  683.612917][ T5855] usb 3-1: new low-speed USB device number 53 using dummy_hcd
[  683.645437][ T5855] usb 3-1: device descriptor read/8, error -71
[  683.741385][  T808] usb 9-1: new high-speed USB device number 125 using dummy_hcd
[  683.901383][  T808] usb 9-1: Using ep0 maxpacket: 8
[  683.909334][ T5855] usb 3-1: new low-speed USB device number 54 using dummy_hcd
[  683.938410][  T808] usb 9-1: config index 0 descriptor too short (expected 30, got 18)
[  683.965928][  T808] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  683.975928][ T5855] usb 3-1: device descriptor read/8, error -71
[  683.985177][  T808] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.993571][  T808] usb 9-1: Product: syz
[  683.998264][  T808] usb 9-1: Manufacturer: syz
[  684.002986][  T808] usb 9-1: SerialNumber: syz
[  684.018232][  T808] usb 9-1: config 0 descriptor??
[  684.030989][  T808] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  684.039489][  T808] usb 9-1: setting power ON
[  684.044398][  T808] dvb-usb: bulk message failed: -22 (2/0)
[  684.057325][  T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  684.068267][  T808] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  684.077863][  T808] usb 9-1: media controller created
[  684.094465][ T5855] usb usb3-port1: unable to enumerate USB device
[  684.119467][  T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  684.167474][  T808] usb 9-1: selecting invalid altsetting 6
[  684.174280][  T808] usb 9-1: digital interface selection failed (-22)
[  684.181374][  T808] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  684.198939][  T808] usb 9-1: setting power OFF
[  684.208762][  T808] dvb-usb: bulk message failed: -22 (2/0)
[  684.220110][  T808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  684.230358][  T808] (NULL device *): no alternate interface
[  684.243822][T16794] dvb-usb: bulk message failed: -22 (3/0)
[  684.256806][T16794] dvb-usb: bulk message failed: -22 (3/0)
[  684.315358][  T808] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  684.360594][  T808] usb 9-1: USB disconnect, device number 125
[  684.767290][ T5855] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  684.887465][T16813] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  684.896382][T16813] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  684.906432][ T5855] usb 4-1: device descriptor read/64, error -71
[  684.914888][T16813] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  684.921450][T16813] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  684.930298][T16813] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  684.936760][T16813] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  684.943637][T16813] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  684.950252][T16813] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  684.956957][T16813] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  684.963479][T16813] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  685.166608][ T5855] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  685.312491][ T5855] usb 4-1: device descriptor read/64, error -71
[  685.430485][ T5855] usb usb4-port1: attempt power cycle
[  685.818559][ T5855] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  685.848671][ T5855] usb 4-1: device descriptor read/8, error -71
[  686.050084][T16842] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  686.125480][ T5855] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  686.160044][ T5855] usb 4-1: device descriptor read/8, error -71
[  686.188146][T16845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'.
[  686.252840][T16847] FAULT_INJECTION: forcing a failure.
[  686.252840][T16847] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  686.266464][T16847] CPU: 0 UID: 0 PID: 16847 Comm: syz.1.2988 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  686.266500][T16847] Tainted: [L]=SOFTLOCKUP
[  686.266509][T16847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  686.266523][T16847] Call Trace:
[  686.266532][T16847]  <TASK>
[  686.266541][T16847]  dump_stack_lvl+0xe8/0x150
[  686.266580][T16847]  should_fail_ex+0x412/0x560
[  686.266611][T16847]  _copy_from_user+0x2d/0xb0
[  686.266640][T16847]  __copy_msghdr+0x3c5/0x5b0
[  686.266668][T16847]  ___sys_sendmsg+0x213/0x360
[  686.266698][T16847]  ? __pfx____sys_sendmsg+0x10/0x10
[  686.266757][T16847]  ? __fget_files+0x2a/0x420
[  686.266787][T16847]  ? __fget_files+0x3a0/0x420
[  686.266826][T16847]  __x64_sys_sendmsg+0x1bd/0x2a0
[  686.266854][T16847]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  686.266888][T16847]  ? __pfx_ksys_write+0x10/0x10
[  686.266930][T16847]  do_syscall_64+0x14d/0xf80
[  686.266952][T16847]  ? trace_irq_disable+0x3b/0x150
[  686.266978][T16847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.267001][T16847]  ? clear_bhb_loop+0x40/0x90
[  686.267029][T16847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.267052][T16847] RIP: 0033:0x7f23f399c799
[  686.267073][T16847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  686.267093][T16847] RSP: 002b:00007f23f1bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  686.267118][T16847] RAX: ffffffffffffffda RBX: 00007f23f3c15fa0 RCX: 00007f23f399c799
[  686.267135][T16847] RDX: 00000000040000c0 RSI: 0000200000000180 RDI: 0000000000000003
[  686.267149][T16847] RBP: 00007f23f1bf6090 R08: 0000000000000000 R09: 0000000000000000
[  686.267164][T16847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.267178][T16847] R13: 00007f23f3c16038 R14: 00007f23f3c15fa0 R15: 00007ffc5a49da78
[  686.267212][T16847]  </TASK>
[  686.291259][ T5855] usb usb4-port1: unable to enumerate USB device
[  686.978468][T10947] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  687.162297][ T5903] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  687.232137][T16868] program syz.8.2997 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  687.244894][T16868] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  687.335003][ T5903] usb 2-1: Using ep0 maxpacket: 16
[  687.342666][ T5903] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  687.367772][ T5903] usb 2-1: config 0 has no interface number 0
[  687.376461][ T5903] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  687.391249][ T5903] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  687.404479][ T5903] usb 2-1: config 0 interface 41 has no altsetting 0
[  687.419343][ T5903] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  687.433956][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.451034][ T5903] usb 2-1: Product: syz
[  687.460297][ T5903] usb 2-1: Manufacturer: syz
[  687.470400][ T5903] usb 2-1: SerialNumber: syz
[  687.481486][ T5903] usb 2-1: config 0 descriptor??
[  687.492864][T16859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  687.501741][T16859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  687.732692][T16859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  687.759103][T16859] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  687.947787][T16891] batadv_slave_0: entered promiscuous mode
[  687.955966][T16891] netlink: 'syz.3.3003': attribute type 10 has an invalid length.
[  687.966870][T16891] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3003'.
[  688.125394][ T5903] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[  688.158862][ T5903] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  688.205820][ T5903] usb 2-1: USB disconnect, device number 11
[  688.327296][ T2170] usb 9-1: new high-speed USB device number 126 using dummy_hcd
[  688.510002][ T2170] usb 9-1: Using ep0 maxpacket: 8
[  688.517986][ T2170] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[  688.526979][ T2170] usb 9-1: config 179 has no interface number 0
[  688.540547][ T2170] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  688.552758][ T2170] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  688.567519][ T2170] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  688.581595][ T2170] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  688.603412][T16889] batadv_slave_0: left promiscuous mode
[  688.609360][ T2170] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  688.632059][ T2170] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  688.642038][ T2170] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.676470][T16893] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  688.806143][T16905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3008'.
[  688.917111][T16910] sctp: [Deprecated]: syz.2.3006 (pid 16910) Use of struct sctp_assoc_value in delayed_ack socket option.
[  688.917111][T16910] Use struct sctp_sack_info instead
[  689.076025][ T2170] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input56
[  689.277315][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  689.437491][T16921] netlink: 'syz.1.3012': attribute type 2 has an invalid length.
[  689.448061][T16921] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3012'.
[  689.528600][T16916] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  689.540636][T16916] File: /dev/nullb0 PID: 16916 Comm: syz.3.3010
[  690.198279][ T5855] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  690.369372][ T5855] usb 3-1: Using ep0 maxpacket: 8
[  690.392201][ T5855] usb 3-1: config index 0 descriptor too short (expected 30, got 18)
[  690.421456][ T5855] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  690.431298][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.440021][ T5855] usb 3-1: Product: syz
[  690.444799][ T5855] usb 3-1: Manufacturer: syz
[  690.450370][ T5855] usb 3-1: SerialNumber: syz
[  690.464184][ T5855] usb 3-1: config 0 descriptor??
[  690.479198][ T5855] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  690.501983][ T5855] usb 3-1: setting power ON
[  690.513595][ T5855] dvb-usb: bulk message failed: -22 (2/0)
[  690.553126][ T5855] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  690.589536][ T5855] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  690.610620][ T5855] usb 3-1: media controller created
[  690.638248][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  690.707519][ T5855] usb 3-1: selecting invalid altsetting 6
[  690.725044][ T5855] usb 3-1: digital interface selection failed (-22)
[  690.734315][ T5855] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  690.750652][ T5855] usb 3-1: setting power OFF
[  690.755947][ T5855] dvb-usb: bulk message failed: -22 (2/0)
[  690.761922][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  690.777293][ T5855] (NULL device *): no alternate interface
[  690.870050][ T5855] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  690.895160][ T5855] usb 3-1: USB disconnect, device number 55
[  691.477564][ T5903] usb 9-1: USB disconnect, device number 126
[  691.477629][    C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  691.492291][    C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  692.165398][ T5855] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  692.340694][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  692.356852][ T5855] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  692.374379][ T5855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  692.395133][ T5855] usb 3-1: config 0 descriptor??
[  692.417934][ T5855] pwc: Askey VC010 type 2 USB webcam detected.
[  692.611556][T17003] program syz.3.3040 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  692.628518][T17003] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  692.785373][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  692.851871][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00
[  692.859194][ T5855] pwc: recv_control_msg error -32 req 02 val 2700
[  692.867024][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00
[  692.875551][ T5855] pwc: recv_control_msg error -32 req 04 val 1000
[  692.884667][ T5855] pwc: recv_control_msg error -32 req 04 val 1300
[  692.893051][ T5855] pwc: recv_control_msg error -32 req 04 val 1400
[  692.900136][ T5855] pwc: recv_control_msg error -32 req 02 val 2000
[  692.907690][ T5855] pwc: recv_control_msg error -32 req 02 val 2100
[  692.913710][ T5903] usb 9-1: new low-speed USB device number 127 using dummy_hcd
[  692.924277][   T24] usb 2-1: device descriptor read/64, error -71
[  693.084822][  T808] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  693.086023][ T5903] usb 9-1: no configurations
[  693.097339][ T5903] usb 9-1: can't read configurations, error -22
[  693.137340][ T5855] pwc: recv_control_msg error -32 req 02 val 2500
[  693.144696][ T5855] pwc: recv_control_msg error -32 req 02 val 2400
[  693.181138][   T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  693.244910][ T5903] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[  693.268033][  T808] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  693.276282][  T808] usb 4-1: config 1 has no interface number 0
[  693.282708][  T808] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  693.294444][  T808] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  693.304475][  T808] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  693.318079][  T808] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  693.329116][   T24] usb 2-1: device descriptor read/64, error -71
[  693.335629][  T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.344029][  T808] usb 4-1: Product: syz
[  693.348262][  T808] usb 4-1: Manufacturer: syz
[  693.353155][  T808] usb 4-1: SerialNumber: syz
[  693.361593][T17009] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  693.373393][ T5855] pwc: recv_control_msg error -71 req 02 val 2900
[  693.388916][ T5855] pwc: recv_control_msg error -71 req 02 val 2800
[  693.396964][ T5855] pwc: recv_control_msg error -71 req 04 val 1100
[  693.403863][ T5855] pwc: recv_control_msg error -71 req 04 val 1200
[  693.414624][ T5855] pwc: Registered as video103.
[  693.418580][ T5903] usb 9-1: no configurations
[  693.430242][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input57
[  693.434371][ T5903] usb 9-1: can't read configurations, error -22
[  693.459511][   T24] usb usb2-port1: attempt power cycle
[  693.465797][ T5903] usb usb9-port1: attempt power cycle
[  693.498833][ T5855] usb 3-1: USB disconnect, device number 56
[  693.596997][T17009] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  693.606502][T17011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  693.620378][T17011] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  693.824576][  T808] usb 4-1: Incompatible driver and firmware versions
[  693.832945][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  693.847798][  T808] usb 4-1: USB disconnect, device number 46
[  693.855828][ T5903] usb 9-1: new low-speed USB device number 3 using dummy_hcd
[  693.877159][   T24] usb 2-1: device descriptor read/8, error -71
[  693.899856][ T5903] usb 9-1: no configurations
[  693.904709][ T5903] usb 9-1: can't read configurations, error -22
[  694.057368][ T5903] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[  694.079853][ T5903] usb 9-1: no configurations
[  694.084498][ T5903] usb 9-1: can't read configurations, error -22
[  694.091610][ T5903] usb usb9-port1: unable to enumerate USB device
[  694.132865][   T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  694.154479][   T24] usb 2-1: device descriptor read/8, error -71
[  694.261165][T17017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  694.270249][T17017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  694.272815][   T24] usb usb2-port1: unable to enumerate USB device
[  694.314384][ T5896] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  694.442853][T17019] binder: 17018:17019 ioctl 4018620d 0 returned -22
[  695.390583][T17021] netlink: 'syz.3.3046': attribute type 4 has an invalid length.
[  695.418304][T17021] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  695.493566][T17021] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  695.510257][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  695.872695][T17029] program syz.1.3050 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  695.906551][T17029] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  696.006388][ T9889] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  696.033702][T17033] netlink: 'syz.1.3051': attribute type 2 has an invalid length.
[  696.046862][T17033] netlink: 'syz.1.3051': attribute type 1 has an invalid length.
[  696.175331][ T9889] usb 4-1: Using ep0 maxpacket: 32
[  696.189821][ T9889] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  696.206559][ T9889] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  696.227556][ T9889] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  696.240077][ T9889] usb 4-1: config 1 has no interface number 0
[  696.260047][ T9889] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  696.271333][ T9889] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  696.285023][ T9889] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  696.294217][ T9889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.316578][ T9889] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  696.377339][ T5855] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  696.529708][ T9889] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  696.544135][ T5855] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  696.555051][ T5855] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  696.580443][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.593680][ T5855] usb 2-1: config 0 descriptor??
[  696.606828][ T5855] pwc: Askey VC010 type 2 USB webcam detected.
[  696.749674][ T9889] usb 4-1: USB disconnect, device number 47
[  696.767680][ T9889] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  697.033229][ T5855] pwc: recv_control_msg error -32 req 02 val 2b00
[  697.045253][ T5855] pwc: recv_control_msg error -32 req 02 val 2700
[  697.054348][ T5855] pwc: recv_control_msg error -32 req 02 val 2c00
[  697.063143][ T5855] pwc: recv_control_msg error -32 req 04 val 1000
[  697.073929][ T5855] pwc: recv_control_msg error -32 req 04 val 1300
[  697.081635][ T5855] pwc: recv_control_msg error -32 req 04 val 1400
[  697.094559][ T5855] pwc: recv_control_msg error -32 req 02 val 2000
[  697.102479][ T5855] pwc: recv_control_msg error -32 req 02 val 2100
[  697.145931][T17042] binder: 17041:17042 ioctl 4018620d 0 returned -22
[  697.327329][ T5855] pwc: recv_control_msg error -32 req 02 val 2500
[  697.343944][ T5855] pwc: recv_control_msg error -32 req 02 val 2400
[  697.573168][ T5855] pwc: recv_control_msg error -71 req 02 val 2900
[  697.580473][ T5855] pwc: recv_control_msg error -71 req 02 val 2800
[  697.590297][ T5855] pwc: recv_control_msg error -71 req 04 val 1100
[  697.598468][ T5855] pwc: recv_control_msg error -71 req 04 val 1200
[  697.607328][ T5855] pwc: Registered as video103.
[  697.615022][ T5855] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input58
[  697.654393][ T5855] usb 2-1: USB disconnect, device number 16
[  697.799428][ T9889] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  697.961121][ T9889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9
[  697.972793][ T9889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.983257][ T9889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  697.996333][ T9889] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  698.005713][ T9889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  698.016814][ T9889] usb 4-1: config 0 descriptor??
[  698.069511][ T5896] usb 3-1: new full-speed USB device number 58 using dummy_hcd
[  698.104707][T17056] libceph: resolve '4' (ret=-3): failed
[  698.113999][T17056] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3059'.
[  698.213363][T17058] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  698.251024][ T5896] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  698.262640][ T5896] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  698.275782][ T5896] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  698.286230][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.297146][ T5896] usb 3-1: Product: syz
[  698.308956][ T5896] usb 3-1: Manufacturer: syz
[  698.317679][ T5896] usb 3-1: SerialNumber: syz
[  698.343241][ T5896] usb 3-1: 0:2 : does not exist
[  698.487606][ T9889] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  698.555336][ T5896] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  698.635873][ T5896] usb 3-1: USB disconnect, device number 58
[  698.674300][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  698.820365][T17072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.836059][T17072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  698.966784][T17076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  698.976075][T17076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  699.167627][ T5896] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  699.257236][T17082] binder: 17081:17082 ioctl 4018620d 0 returned -22
[  699.360025][ T5896] usb 9-1: Using ep0 maxpacket: 32
[  699.368763][ T5896] usb 9-1: config index 0 descriptor too short (expected 35577, got 27)
[  699.377830][ T5896] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  699.387159][ T5896] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92
[  699.396717][ T5896] usb 9-1: config 1 has no interface number 0
[  699.403346][ T5896] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  699.414815][ T5896] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  699.429686][ T5896] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  699.439812][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.464854][ T5896] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found
[  699.683669][ T5896] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached
[  699.876771][    C1] plantronics 0003:047F:FFFF.002E: usb_submit_urb(ctrl) failed: -1
[  699.909255][ T5896] usb 9-1: USB disconnect, device number 5
[  699.923524][ T5896] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected
[  700.045587][ T9889] usb 4-1: reset high-speed USB device number 48 using dummy_hcd
[  700.134259][T17088] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  700.235371][ T9889] usb 4-1: device descriptor read/64, error -32
[  700.525929][ T9889] usb 4-1: reset high-speed USB device number 48 using dummy_hcd
[  700.632229][ T5855] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  700.664291][ T9889] usb 4-1: device descriptor read/64, error -32
[  700.814592][ T5855] usb 2-1: Using ep0 maxpacket: 8
[  700.828516][ T5855] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  700.846540][ T5855] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  700.857365][ T5855] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  700.867580][ T5855] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  700.881428][ T5855] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  700.890823][ T5855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.928411][ T5896] Process accounting resumed
[  700.951445][T17109] batadv_slave_0: entered promiscuous mode
[  700.970461][ T9889] usb 4-1: reset high-speed USB device number 48 using dummy_hcd
[  701.017990][ T9889] usb 4-1: device descriptor read/8, error -32
[  701.041624][T17107] Process accounting resumed
[  701.160060][ T5855] usb 2-1: GET_CAPABILITIES returned 0
[  701.171609][ T5855] usbtmc 2-1:16.0: can't read capabilities
[  701.354197][T17125] binder: 17124:17125 ioctl c0306201 2000000003c0 returned -14
[  701.451546][T17129] binder: 17127:17129 ioctl c0306201 2000000003c0 returned -14
[  701.797394][ T2170] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  701.835427][T17108] batadv_slave_0: left promiscuous mode
[  701.922124][T17142] mkiss: ax0: crc mode is auto.
[  701.966340][ T2170] usb 3-1: unable to get BOS descriptor or descriptor too short
[  701.990367][ T5903] usb 4-1: USB disconnect, device number 48
[  701.999782][ T2170] usb 3-1: not running at top speed; connect to a high speed hub
[  702.029279][ T2170] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  702.047386][ T2170] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  702.061713][ T2170] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 105, using maximum allowed: 30
[  702.073681][ T2170] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 105
[  702.090579][ T2170] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  702.102573][ T2170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.115083][ T2170] usb 3-1: Product: syz
[  702.120460][ T2170] usb 3-1: Manufacturer: syz
[  702.125752][ T2170] usb 3-1: SerialNumber: syz
[  702.474831][ T2170] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  702.495947][ T2170] usb 3-1: USB disconnect, device number 59
[  702.532711][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  702.695585][ T5855] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  702.859294][ T5855] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  702.882997][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0
[  702.892625][ T5855] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  702.910696][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  702.930192][ T5855] usb 4-1: Product: syz
[  702.939522][ T5855] usb 4-1: Manufacturer: syz
[  702.945247][ T5855] usb 4-1: SerialNumber: syz
[  702.962159][ T5855] usb 4-1: config 0 descriptor??
[  702.979397][ T5855] usb 4-1: selecting invalid altsetting 0
[  703.197529][ T5855] usb 4-1: USB disconnect, device number 49
[  703.278397][T17162] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  703.418936][T17164] binder: 17163:17164 ioctl c0306201 2000000003c0 returned -14
[  703.596899][ T5855] usb 2-1: USB disconnect, device number 17
[  703.969483][T17178] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  703.986545][T17178] net_ratelimit: 2038 callbacks suppressed
[  703.986564][T17178] syzkaller0: mtu greater than device maximum
[  704.048528][T17180] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  704.181631][ T5855] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  704.354977][ T5855] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  704.371203][ T5855] usb 2-1: config 0 interface 0 has no altsetting 0
[  704.380711][ T5855] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  704.391504][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  704.404528][ T5855] usb 2-1: Product: syz
[  704.415032][ T5855] usb 2-1: Manufacturer: syz
[  704.420393][ T5855] usb 2-1: SerialNumber: syz
[  704.432946][ T5855] usb 2-1: config 0 descriptor??
[  704.447226][ T5855] usb 2-1: selecting invalid altsetting 0
[  704.487233][T17193] binder: 17192:17193 ioctl c0306201 0 returned -14
[  704.544940][ T5896] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  704.653863][   T51] Bluetooth: hci0: command 0x0406 tx timeout
[  704.703929][ T5855] usb 2-1: USB disconnect, device number 18
[  704.724438][ T5896] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  704.752406][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.796163][ T5896] usb 9-1: config 0 descriptor??
[  704.822454][ T5896] cp210x 9-1:0.0: cp210x converter detected
[  705.042153][ T9889] tipc: Node number set to 3733327445
[  705.253664][ T5896] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -71
[  705.270167][ T5896] cp210x 9-1:0.0: failed to get vendor val 0x000e size 678: -71
[  705.287217][ T5896] cp210x 9-1:0.0: GPIO initialisation failed: -71
[  705.320737][ T5896] usb 9-1: cp210x converter now attached to ttyUSB0
[  705.348729][ T5896] usb 9-1: USB disconnect, device number 6
[  705.407805][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  705.438983][ T5896] cp210x 9-1:0.0: device disconnected
[  705.523859][T17204] binder: 17203:17204 ioctl c0306201 2000000003c0 returned -14
[  705.535284][T17204] binder: BINDER_SET_CONTEXT_MGR already set
[  705.541883][T17204] binder: 17203:17204 ioctl 4018620d 200000000100 returned -16
[  705.738590][   T51] Bluetooth: hci3: unexpected event for opcode 0x201c
[  705.970207][T17226] binder: 17225:17226 ioctl c0306201 0 returned -14
[  706.299228][ T5855] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  706.480741][ T5855] usb 2-1: Using ep0 maxpacket: 16
[  706.495805][ T5855] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  706.521166][ T5855] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  706.555584][ T5855] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  706.578256][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.594494][ T5855] usb 2-1: Product: syz
[  706.599135][ T5855] usb 2-1: Manufacturer: syz
[  706.607383][ T5855] usb 2-1: SerialNumber: syz
[  706.616505][ T5855] usb 2-1: config 0 descriptor??
[  706.627521][ T5855] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  706.637212][ T5855] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  706.755947][T17234] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3124'.
[  706.765501][T17234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'.
[  706.784886][T17234] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3124'.
[  706.843539][ T9889] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  707.017503][ T9889] usb 9-1: Using ep0 maxpacket: 8
[  707.025531][ T9889] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  707.035486][ T9889] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  707.045606][ T9889] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  707.059995][ T9889] usb 9-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d
[  707.070401][ T9889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.080727][ T9889] usb 9-1: Product: syz
[  707.084981][ T9889] usb 9-1: Manufacturer: syz
[  707.090087][ T9889] usb 9-1: SerialNumber: syz
[  707.108316][ T9889] ti_usb_3410_5052 9-1:1.0: TI USB 3410 1 port adapter converter detected
[  707.138296][T17244] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  707.178715][T17245] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  707.207751][ T2170] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  707.284313][ T5855] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  707.291131][ T5855] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  707.299993][T17228] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3122'.
[  707.370304][ T2170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  707.381334][ T2170] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  707.392211][ T2170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  707.404276][ T2170] usb 4-1: config 0 descriptor??
[  707.415924][ T2170] pwc: Askey VC010 type 2 USB webcam detected.
[  707.538336][ T5855] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  707.545483][ T5855] em28xx 2-1:0.0: No AC97 audio processor
[  707.843056][ T2170] pwc: recv_control_msg error -32 req 02 val 2b00
[  707.850985][ T2170] pwc: recv_control_msg error -32 req 02 val 2700
[  707.858436][ T2170] pwc: recv_control_msg error -32 req 02 val 2c00
[  707.869015][ T2170] pwc: recv_control_msg error -32 req 04 val 1000
[  707.877685][ T2170] pwc: recv_control_msg error -32 req 04 val 1300
[  707.890189][ T2170] pwc: recv_control_msg error -32 req 04 val 1400
[  707.897803][ T2170] pwc: recv_control_msg error -32 req 02 val 2000
[  707.907255][ T2170] pwc: recv_control_msg error -32 req 02 val 2100
[  707.921578][T17252] netlink: 'syz.1.3122': attribute type 10 has an invalid length.
[  708.146431][ T2170] pwc: recv_control_msg error -32 req 02 val 2500
[  708.153733][ T2170] pwc: recv_control_msg error -32 req 02 val 2400
[  708.377638][ T2170] pwc: recv_control_msg error -71 req 02 val 2900
[  708.386294][ T2170] pwc: recv_control_msg error -71 req 02 val 2800
[  708.393917][ T2170] pwc: recv_control_msg error -71 req 04 val 1100
[  708.400876][ T2170] pwc: recv_control_msg error -71 req 04 val 1200
[  708.412692][ T2170] pwc: Registered as video103.
[  708.421023][ T2170] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input59
[  708.445080][ T2170] usb 4-1: USB disconnect, device number 50
[  709.143347][T17272] binder: 17271:17272 ioctl c0306201 0 returned -14
[  709.257588][T10307] usb 2-1: USB disconnect, device number 19
[  709.272972][T10307] em28xx 2-1:0.0: Disconnecting em28xx
[  709.287219][T10307] em28xx 2-1:0.0: Freeing device
[  709.323903][ T2170] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  709.348189][T17274] tipc: Started in network mode
[  709.353169][T17274] tipc: Node identity b2c881c68744, cluster identity 4711
[  709.362361][T17274] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  709.372710][T17274] syzkaller0: MTU too low for tipc bearer
[  709.378647][T17274] tipc: Disabling bearer <eth:syzkaller0>
[  709.505994][ T2170] usb 3-1: Using ep0 maxpacket: 32
[  709.513126][ T2170] usb 3-1: config index 0 descriptor too short (expected 35577, got 27)
[  709.522028][ T2170] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  709.534182][ T2170] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92
[  709.544265][ T2170] usb 3-1: config 1 has no interface number 0
[  709.550695][ T2170] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  709.561743][ T2170] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  709.575857][ T2170] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  709.585023][ T2170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.605173][ T2170] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found
[  709.740637][T10307] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  709.750408][T17232] overlayfs: statfs failed on './file0'
[  709.781372][ T5903] usb 9-1: USB disconnect, device number 7
[  709.817730][ T2170] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached
[  709.912975][T10307] usb 2-1: Using ep0 maxpacket: 8
[  709.928096][T10307] usb 2-1: unable to get BOS descriptor or descriptor too short
[  709.940118][T10307] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40
[  709.950090][T10307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.965014][T10307] usb 2-1: Product: syz
[  709.971562][T10307] usb 2-1: Manufacturer: syz
[  709.986415][T10307] usb 2-1: SerialNumber: syz
[  710.038494][T17270] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  710.054968][   T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  710.072146][   T51] Bluetooth: hci3: Injecting HCI hardware error event
[  710.085570][T13901] Bluetooth: hci3: hardware error 0x00
[  710.128991][ T5855] usb 3-1: USB disconnect, device number 60
[  710.173089][ T5855] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected
[  710.255761][T10307] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  710.262927][T10307] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  710.272410][T10307] usb 2-1: unit 1 not found!
[  710.277454][T10307] usb 2-1: unit 9 not found!
[  710.328985][   T29] audit: type=1326 audit(1773791829.997:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17283 comm="syz.3.3139" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc86039c799 code=0x0
[  710.389136][T10307] usb 2-1: USB disconnect, device number 20
[  710.479645][T11213] udevd[11213]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  710.740910][ T5896] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  710.909413][ T5896] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  710.922621][ T5896] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  710.932470][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.943956][ T5896] usb 9-1: config 0 descriptor??
[  710.956502][ T5896] pwc: Askey VC010 type 2 USB webcam detected.
[  711.382560][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00
[  711.393776][ T5896] pwc: recv_control_msg error -32 req 02 val 2700
[  711.411002][ T5896] pwc: recv_control_msg error -32 req 02 val 2c00
[  711.423575][ T5896] pwc: recv_control_msg error -32 req 04 val 1000
[  711.432193][ T5896] pwc: recv_control_msg error -32 req 04 val 1300
[  711.439391][ T5896] pwc: recv_control_msg error -32 req 04 val 1400
[  711.447096][ T5896] pwc: recv_control_msg error -32 req 02 val 2000
[  711.454573][ T5896] pwc: recv_control_msg error -32 req 02 val 2100
[  711.677606][ T5896] pwc: recv_control_msg error -32 req 02 val 2500
[  711.690140][ T5896] pwc: recv_control_msg error -32 req 02 val 2400
[  711.926812][ T5896] pwc: recv_control_msg error -71 req 02 val 2900
[  711.949834][ T5896] pwc: recv_control_msg error -71 req 02 val 2800
[  711.964724][ T5896] pwc: recv_control_msg error -71 req 04 val 1100
[  711.973880][ T5896] pwc: recv_control_msg error -71 req 04 val 1200
[  711.992150][ T5896] pwc: Registered as video103.
[  712.014518][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input60
[  712.059372][ T5896] usb 9-1: USB disconnect, device number 8
[  712.349136][T13901] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  712.723235][ T9889] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  712.883854][ T9889] usb 3-1: device descriptor read/64, error -71
[  712.947791][ T5896] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  713.092933][ T5896] usb 9-1: device descriptor read/64, error -71
[  713.161571][ T9889] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  713.232678][T17363] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  713.321896][ T9889] usb 3-1: device descriptor read/64, error -71
[  713.354294][ T5896] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  713.451015][ T9889] usb usb3-port1: attempt power cycle
[  713.514382][ T5896] usb 9-1: device descriptor read/64, error -71
[  713.589190][T10307] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  713.642629][ T2170] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  713.651139][ T5896] usb usb9-port1: attempt power cycle
[  713.762042][T10307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  713.773651][T10307] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  713.782820][T10307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.793832][T10307] usb 2-1: config 0 descriptor??
[  713.800584][T17365] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  713.814648][ T9889] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  713.829977][ T2170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  713.841708][ T2170] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  713.851623][ T2170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.862058][ T9889] usb 3-1: device descriptor read/8, error -71
[  713.871454][ T2170] usb 4-1: config 0 descriptor??
[  713.882713][ T2170] pwc: Askey VC010 type 2 USB webcam detected.
[  714.027504][ T5896] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  714.049689][ T5896] usb 9-1: device descriptor read/8, error -71
[  714.145173][ T9889] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  714.167137][ T9889] usb 3-1: device descriptor read/8, error -71
[  714.243345][T10307] hid (null): global environment stack underflow
[  714.257086][T10307] hid_parser_main: 4005 callbacks suppressed
[  714.257112][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.271597][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.280696][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.288929][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.296604][ T9889] usb usb3-port1: unable to enumerate USB device
[  714.297634][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.312974][ T5896] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  714.322928][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.331185][ T2170] pwc: recv_control_msg error -32 req 02 val 2b00
[  714.333631][ T2170] pwc: recv_control_msg error -32 req 02 val 2700
[  714.347107][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.350136][ T2170] pwc: recv_control_msg error -32 req 02 val 2c00
[  714.355396][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.367093][ T2170] pwc: recv_control_msg error -32 req 04 val 1000
[  714.375340][ T5896] usb 9-1: device descriptor read/8, error -71
[  714.380787][ T2170] pwc: recv_control_msg error -32 req 04 val 1300
[  714.386672][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.394853][ T2170] pwc: recv_control_msg error -32 req 04 val 1400
[  714.399806][T10307] logitech-djreceiver 0003:046D:C71F.002F: unknown main item tag 0x0
[  714.414127][ T2170] pwc: recv_control_msg error -32 req 02 val 2000
[  714.414846][T10307] logitech-djreceiver 0003:046D:C71F.002F: reserved main item tag 0xe
[  714.422454][ T2170] pwc: recv_control_msg error -32 req 02 val 2100
[  714.431011][T10307] logitech-djreceiver 0003:046D:C71F.002F: global environment stack underflow
[  714.445119][T10307] logitech-djreceiver 0003:046D:C71F.002F: item 0 1 1 11 parsing failed
[  714.454235][T10307] logitech-djreceiver 0003:046D:C71F.002F: logi_dj_probe: parse failed
[  714.464539][T10307] logitech-djreceiver 0003:046D:C71F.002F: probe with driver logitech-djreceiver failed with error -22
[  714.493118][ T9889] usb 2-1: USB disconnect, device number 21
[  714.498950][ T5896] usb usb9-port1: unable to enumerate USB device
[  714.656985][ T2170] pwc: recv_control_msg error -32 req 02 val 2500
[  714.665711][ T2170] pwc: recv_control_msg error -32 req 02 val 2400
[  714.888064][ T2170] pwc: recv_control_msg error -71 req 02 val 2900
[  714.895932][ T2170] pwc: recv_control_msg error -71 req 02 val 2800
[  714.905102][ T2170] pwc: recv_control_msg error -71 req 04 val 1100
[  714.912115][ T2170] pwc: recv_control_msg error -71 req 04 val 1200
[  714.920729][ T2170] pwc: Registered as video103.
[  714.928138][ T2170] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input61
[  714.962023][ T2170] usb 4-1: USB disconnect, device number 51
[  715.556274][ T2170] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  715.695275][ T2170] usb 2-1: device descriptor read/64, error -71
[  715.908989][ T5896] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  715.952038][ T2170] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  715.970915][T17397] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  716.096732][T17401] PKCS8: Unsupported PKCS#8 version
[  716.105275][ T5896] usb 3-1: Using ep0 maxpacket: 32
[  716.120361][ T5896] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  716.123165][ T2170] usb 2-1: device descriptor read/64, error -71
[  716.140127][ T5896] usb 3-1: config 0 has no interface number 0
[  716.148535][ T5896] usb 3-1: config 0 interface 184 has no altsetting 0
[  716.164515][ T5896] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  716.184189][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.201637][ T5896] usb 3-1: Product: syz
[  716.218966][ T5896] usb 3-1: Manufacturer: syz
[  716.224355][ T5896] usb 3-1: SerialNumber: syz
[  716.235583][ T5896] usb 3-1: config 0 descriptor??
[  716.273179][ T2170] usb usb2-port1: attempt power cycle
[  716.581605][T17407] netlink: 'syz.3.3179': attribute type 27 has an invalid length.
[  716.668056][ T2170] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  716.690232][ T2170] usb 2-1: device descriptor read/8, error -71
[  716.956710][ T2170] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  716.990342][ T2170] usb 2-1: device descriptor read/8, error -71
[  717.117475][ T2170] usb usb2-port1: unable to enumerate USB device
[  717.386303][T17382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  717.396090][T17382] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  718.063892][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  718.077975][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  718.101900][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  718.113789][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  718.124862][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  718.136026][ T5896] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  718.146481][ T5896] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  718.163844][ T5896] usb 3-1: USB disconnect, device number 65
[  720.038736][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  720.101235][ T2170] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  720.258009][T17484] fuse: fd is not a fuse device
[  720.299106][ T2170] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  720.312271][ T2170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.317698][T17487] vivid-000: disconnect
[  720.332670][ T2170] usb 4-1: Product: syz
[  720.336299][ T5896] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  720.343523][ T2170] usb 4-1: Manufacturer: syz
[  720.353406][ T2170] usb 4-1: SerialNumber: syz
[  720.359345][T17481] vivid-000: reconnect
[  720.368352][ T2170] usb 4-1: config 0 descriptor??
[  720.382739][ T2170] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  720.506272][ T5896] usb 2-1: Using ep0 maxpacket: 8
[  720.515472][ T5896] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  720.532446][ T5896] usb 2-1: config 179 has no interface number 0
[  720.548724][ T5896] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  720.570319][ T5896] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  720.593028][ T5896] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  720.625148][ T5896] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  720.649890][ T5896] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  720.676976][ T5896] usb 2-1: config 179 interface 65 has no altsetting 0
[  720.687755][ T5896] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  720.709911][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.818117][ T5896] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input62
[  720.926643][ T5196] input input62: unable to receive magic message: -110
[  720.981972][ T5196] input input62: unable to receive magic message: -32
[  721.033056][ T5196] input input62: unable to receive magic message: -32
[  721.109362][ T5196] input input62: unable to receive magic message: -32
[  721.142619][ T5196] input input62: unable to receive magic message: -32
[  721.215717][ T5196] input input62: unable to receive magic message: -32
[  721.240815][ T5196] input input62: unable to receive magic message: -32
[  721.363165][ T2170] gspca_sunplus: reg_r err -71
[  721.375197][ T2170] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  721.403243][ T2170] usb 4-1: USB disconnect, device number 52
[  721.966217][T17509] FAULT_INJECTION: forcing a failure.
[  721.966217][T17509] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  721.980560][T17509] CPU: 0 UID: 0 PID: 17509 Comm: syz.3.3212 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  721.980599][T17509] Tainted: [L]=SOFTLOCKUP
[  721.980605][T17509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  721.980615][T17509] Call Trace:
[  721.980622][T17509]  <TASK>
[  721.980629][T17509]  dump_stack_lvl+0xe8/0x150
[  721.980675][T17509]  should_fail_ex+0x412/0x560
[  721.980705][T17509]  _copy_to_user+0x31/0xb0
[  721.980735][T17509]  simple_read_from_buffer+0xe1/0x170
[  721.980771][T17509]  proc_fail_nth_read+0x1bb/0x230
[  721.980804][T17509]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  721.980842][T17509]  ? rw_verify_area+0x2a6/0x4d0
[  721.980875][T17509]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  721.980906][T17509]  vfs_read+0x20c/0xa70
[  721.980936][T17509]  ? fdget_pos+0x246/0x320
[  721.980979][T17509]  ? __pfx___mutex_lock+0x10/0x10
[  721.981004][T17509]  ? __pfx_vfs_read+0x10/0x10
[  721.981038][T17509]  ? __fget_files+0x2a/0x420
[  721.981072][T17509]  ? __fget_files+0x3a0/0x420
[  721.981093][T17509]  ? __fget_files+0x2a/0x420
[  721.981119][T17509]  ksys_read+0x150/0x270
[  721.981150][T17509]  ? __pfx_ksys_read+0x10/0x10
[  721.981182][T17509]  do_syscall_64+0x14d/0xf80
[  721.981202][T17509]  ? trace_irq_disable+0x3b/0x150
[  721.981227][T17509]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.981250][T17509]  ? clear_bhb_loop+0x40/0x90
[  721.981276][T17509]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  721.981298][T17509] RIP: 0033:0x7fc86035cfce
[  721.981318][T17509] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  721.981338][T17509] RSP: 002b:00007fc86124bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  721.981362][T17509] RAX: ffffffffffffffda RBX: 00007fc86124c6c0 RCX: 00007fc86035cfce
[  721.981387][T17509] RDX: 000000000000000f RSI: 00007fc86124c0a0 RDI: 0000000000000004
[  721.981401][T17509] RBP: 00007fc86124c090 R08: 0000000000000000 R09: 0000000000000000
[  721.981416][T17509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  721.981430][T17509] R13: 00007fc860616038 R14: 00007fc860615fa0 R15: 00007ffda1e89118
[  721.981465][T17509]  </TASK>
[  722.447528][T10949] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  722.569252][ T2170] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  722.731412][ T2170] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  722.740872][ T2170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.752077][ T2170] usb 4-1: config 0 descriptor??
[  722.763106][ T2170] gspca_main: cpia1-2.14.0 probing 0813:0001
[  722.992382][T17526] binder: 17523:17526 ioctl aece 0 returned -22
[  723.128002][T17528] IPVS: length: 70 != 8
[  723.332637][T10307] usb 2-1: USB disconnect, device number 26
[  723.338699][    C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  723.458987][T17532] overlayfs: failed to resolve './file1': -2
[  723.905635][ T5855] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  723.926955][T10307] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  724.066093][ T2170] gspca_cpia1: usb_control_msg 03, error -110
[  724.072982][ T2170] gspca_cpia1: usb_control_msg 01, error -32
[  724.075781][ T5855] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  724.079892][ T2170] gspca_cpia1: usb_control_msg 01, error -32
[  724.096588][ T2170] gspca_cpia1: usb_control_msg 01, error -32
[  724.103453][ T2170] gspca_cpia1: usb_control_msg 01, error -32
[  724.109958][T10307] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  724.109983][ T2170] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  724.130515][ T5855] usb 3-1: config 0 interface 0 has no altsetting 0
[  724.137575][T10307] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  724.147499][T10307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.159531][ T5855] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  724.169750][ T5855] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  724.179099][T10307] usb 2-1: config 0 descriptor??
[  724.184546][ T5855] usb 3-1: Product: syz
[  724.188854][ T5855] usb 3-1: Manufacturer: syz
[  724.193517][ T5855] usb 3-1: SerialNumber: syz
[  724.202678][T10307] pwc: Askey VC010 type 2 USB webcam detected.
[  724.214348][ T5855] usb 3-1: config 0 descriptor??
[  724.229703][ T5855] usb 3-1: selecting invalid altsetting 0
[  724.463149][ T2170] usb 3-1: USB disconnect, device number 66
[  724.628773][T10307] pwc: recv_control_msg error -32 req 02 val 2b00
[  724.637449][T10307] pwc: recv_control_msg error -32 req 02 val 2700
[  724.644793][T10307] pwc: recv_control_msg error -32 req 02 val 2c00
[  724.652121][T10307] pwc: recv_control_msg error -32 req 04 val 1000
[  724.659589][T10307] pwc: recv_control_msg error -32 req 04 val 1300
[  724.667881][T10307] pwc: recv_control_msg error -32 req 04 val 1400
[  724.675512][T10307] pwc: recv_control_msg error -32 req 02 val 2000
[  724.683122][T10307] pwc: recv_control_msg error -32 req 02 val 2100
[  724.797901][T17545] netlink: 65051 bytes leftover after parsing attributes in process `syz.8.3225'.
[  724.905951][T10307] pwc: recv_control_msg error -32 req 02 val 2500
[  724.913296][T10307] pwc: recv_control_msg error -32 req 02 val 2400
[  725.135977][T10307] pwc: recv_control_msg error -71 req 02 val 2900
[  725.147185][T10307] pwc: recv_control_msg error -71 req 02 val 2800
[  725.154402][T10307] pwc: recv_control_msg error -71 req 04 val 1100
[  725.161824][T10307] pwc: recv_control_msg error -71 req 04 val 1200
[  725.171928][T10307] pwc: Registered as video103.
[  725.193760][T10307] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input63
[  725.225079][T10307] usb 2-1: USB disconnect, device number 27
[  725.461318][T17558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3229'.
[  725.534831][ T2170] usb 4-1: USB disconnect, device number 53
[  726.041648][T17575] fuse: fd is not a fuse device
[  726.204028][ T2170] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  726.395266][ T2170] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  726.405619][ T2170] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  726.419787][ T2170] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  726.430307][ T2170] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  726.438690][ T2170] usb 4-1: Manufacturer: syz
[  726.459062][ T2170] usb 4-1: config 0 descriptor??
[  726.559920][ T2170] rc_core: IR keymap rc-hauppauge not found
[  726.578186][ T2170] Registered IR keymap rc-empty
[  726.584821][ T2170] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  726.619784][ T2170] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input64
[  726.911483][ T2170] usb 4-1: USB disconnect, device number 54
[  727.080764][T10307] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  727.241055][T10307] usb 3-1: Using ep0 maxpacket: 8
[  727.248691][T10307] usb 3-1: unable to get BOS descriptor or descriptor too short
[  727.257920][T10307] usb 3-1: config 6 has an invalid interface number: 236 but max is 0
[  727.266770][T10307] usb 3-1: config 6 has no interface number 0
[  727.272933][T10307] usb 3-1: config 6 interface 236 has no altsetting 0
[  727.282279][T10307] usb 3-1: New USB device found, idVendor=0af0, idProduct=d157, bcdDevice=e4.e9
[  727.291617][T10307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  727.300728][T10307] usb 3-1: Product: syz
[  727.304962][T10307] usb 3-1: Manufacturer: syz
[  727.309835][T10307] usb 3-1: SerialNumber: syz
[  727.783817][T17609] FAULT_INJECTION: forcing a failure.
[  727.783817][T17609] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  727.800114][T17609] CPU: 0 UID: 0 PID: 17609 Comm: syz.1.3247 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  727.800141][T17609] Tainted: [L]=SOFTLOCKUP
[  727.800147][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  727.800157][T17609] Call Trace:
[  727.800163][T17609]  <TASK>
[  727.800187][T17609]  dump_stack_lvl+0xe8/0x150
[  727.800225][T17609]  should_fail_ex+0x412/0x560
[  727.800255][T17609]  _copy_from_user+0x2d/0xb0
[  727.800286][T17609]  ___sys_sendmsg+0x1c6/0x360
[  727.800307][T17609]  ? __pfx____sys_sendmsg+0x10/0x10
[  727.800373][T17609]  ? __fget_files+0x2a/0x420
[  727.800403][T17609]  ? __fget_files+0x3a0/0x420
[  727.800443][T17609]  __x64_sys_sendmsg+0x1bd/0x2a0
[  727.800469][T17609]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  727.800513][T17609]  ? __pfx_ksys_write+0x10/0x10
[  727.800546][T17609]  do_syscall_64+0x14d/0xf80
[  727.800566][T17609]  ? trace_irq_disable+0x3b/0x150
[  727.800590][T17609]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.800613][T17609]  ? clear_bhb_loop+0x40/0x90
[  727.800632][T17609]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  727.800648][T17609] RIP: 0033:0x7f23f399c799
[  727.800683][T17609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  727.800703][T17609] RSP: 002b:00007f23f1bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  727.800726][T17609] RAX: ffffffffffffffda RBX: 00007f23f3c15fa0 RCX: 00007f23f399c799
[  727.800741][T17609] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000003
[  727.800760][T17609] RBP: 00007f23f1bf6090 R08: 0000000000000000 R09: 0000000000000000
[  727.800770][T17609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  727.800779][T17609] R13: 00007f23f3c16038 R14: 00007f23f3c15fa0 R15: 00007ffc5a49da78
[  727.800803][T17609]  </TASK>
[  728.278969][ T2170] usb 2-1: new low-speed USB device number 28 using dummy_hcd
[  728.466729][ T2170] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 8
[  728.478533][ T2170] usb 2-1: config 1 interface 0 has no altsetting 0
[  728.488711][ T2170] usb 2-1: string descriptor 0 read error: -22
[  728.495373][ T2170] usb 2-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 0.40
[  728.504624][ T2170] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.518405][T17611] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  728.581681][   T24] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  728.748411][   T24] usb 4-1: Using ep0 maxpacket: 16
[  728.755714][   T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  728.765515][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.777536][   T24] usb 4-1: config 0 descriptor??
[  728.783976][ T2170] usbhid 2-1:1.0: can't add hid device: -71
[  728.791534][ T2170] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  728.814577][ T2170] usb 2-1: USB disconnect, device number 28
[  728.821987][   T24] gspca_main: sonixj-2.14.0 probing 0471:0327
[  729.228457][T17615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.242419][T17615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.483330][T17615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.499953][T17615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.689382][  T808] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  729.731323][   T24] gspca_sonixj: reg_r err -71
[  729.743418][   T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  729.758583][   T24] usb 4-1: USB disconnect, device number 55
[  729.849573][  T808] usb 2-1: Using ep0 maxpacket: 8
[  729.863429][  T808] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  729.874174][  T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  729.885011][  T808] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  729.896396][  T808] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  729.915200][  T808] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  729.926007][  T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.061004][T10307] usb 3-1: USB disconnect, device number 67
[  730.165136][T17631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.174345][T17631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.184756][T17631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  730.195857][T17631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  730.232969][  T808] usb 2-1: GET_CAPABILITIES returned 0
[  730.238804][  T808] usbtmc 2-1:16.0: can't read capabilities
[  730.516337][   T10] usb 2-1: USB disconnect, device number 29
[  730.608626][ T9889] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  730.662076][   T24] usb 3-1: new full-speed USB device number 68 using dummy_hcd
[  730.781554][ T9889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  730.791903][ T9889] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  730.801045][ T9889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  730.812387][ T9889] usb 4-1: config 0 descriptor??
[  730.822091][ T9889] pwc: Askey VC010 type 2 USB webcam detected.
[  730.834904][   T24] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  730.843309][   T24] usb 3-1: config 0 has no interface number 0
[  730.850004][   T24] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  730.862008][   T24] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  730.871943][   T24] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  730.883053][   T24] usb 3-1: Manufacturer: syz
[  730.887812][   T24] usb 3-1: SerialNumber: syz
[  730.895708][   T24] usb 3-1: config 0 descriptor??
[  731.256500][ T9889] pwc: recv_control_msg error -32 req 02 val 2b00
[  731.266191][ T9889] pwc: recv_control_msg error -32 req 02 val 2700
[  731.274948][ T9889] pwc: recv_control_msg error -32 req 02 val 2c00
[  731.282713][ T9889] pwc: recv_control_msg error -32 req 04 val 1000
[  731.290748][ T9889] pwc: recv_control_msg error -32 req 04 val 1300
[  731.298957][ T9889] pwc: recv_control_msg error -32 req 04 val 1400
[  731.306690][ T9889] pwc: recv_control_msg error -32 req 02 val 2000
[  731.316354][ T9889] pwc: recv_control_msg error -32 req 02 val 2100
[  731.399699][   T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  731.538084][ T9889] pwc: recv_control_msg error -32 req 02 val 2500
[  731.546643][ T9889] pwc: recv_control_msg error -32 req 02 val 2400
[  731.562605][   T24] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71
[  731.577058][   T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  731.585912][   T24] usb 3-1: USB disconnect, device number 68
[  731.593281][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  731.614446][   T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  731.623815][   T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  731.633393][   T10] usb 2-1: Product: syz
[  731.638052][   T10] usb 2-1: Manufacturer: syz
[  731.643072][   T10] usb 2-1: SerialNumber: syz
[  731.653134][   T10] usb 2-1: config 0 descriptor??
[  731.668109][   T10] usb 2-1: selecting invalid altsetting 0
[  731.769154][ T9889] pwc: recv_control_msg error -71 req 02 val 2900
[  731.784131][ T9889] pwc: recv_control_msg error -71 req 02 val 2800
[  731.793582][ T9889] pwc: recv_control_msg error -71 req 04 val 1100
[  731.800970][ T9889] pwc: recv_control_msg error -71 req 04 val 1200
[  731.817721][ T9889] pwc: Registered as video103.
[  731.831170][ T9889] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input66
[  731.864883][ T9889] usb 4-1: USB disconnect, device number 56
[  731.941023][   T10] usb 2-1: USB disconnect, device number 30
[  732.178377][T17657] FAULT_INJECTION: forcing a failure.
[  732.178377][T17657] name failslab, interval 1, probability 0, space 0, times 0
[  732.214868][T17657] CPU: 0 UID: 0 PID: 17657 Comm: syz.2.3267 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  732.214905][T17657] Tainted: [L]=SOFTLOCKUP
[  732.214914][T17657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  732.214928][T17657] Call Trace:
[  732.214938][T17657]  <TASK>
[  732.214948][T17657]  dump_stack_lvl+0xe8/0x150
[  732.214987][T17657]  should_fail_ex+0x412/0x560
[  732.215018][T17657]  should_failslab+0xa8/0x100
[  732.215045][T17657]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  732.215079][T17657]  ? __alloc_skb+0x186/0x7d0
[  732.215112][T17657]  ? __alloc_skb+0x1d0/0x7d0
[  732.215144][T17657]  ? __local_bh_enable_ip+0xd0/0x130
[  732.215182][T17657]  __alloc_skb+0x1d0/0x7d0
[  732.215215][T17657]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  732.215253][T17657]  netlink_sendmsg+0x5d4/0xb40
[  732.215296][T17657]  ? __pfx_netlink_sendmsg+0x10/0x10
[  732.215332][T17657]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  732.215377][T17657]  ? __pfx_netlink_sendmsg+0x10/0x10
[  732.215409][T17657]  sock_sendmsg_nosec+0x112/0x150
[  732.215442][T17657]  ____sys_sendmsg+0x589/0x8c0
[  732.215479][T17657]  ? __pfx_____sys_sendmsg+0x10/0x10
[  732.215514][T17657]  ? import_iovec+0x73/0xa0
[  732.215552][T17657]  ___sys_sendmsg+0x2a5/0x360
[  732.215582][T17657]  ? __pfx____sys_sendmsg+0x10/0x10
[  732.215643][T17657]  ? __fget_files+0x2a/0x420
[  732.215672][T17657]  ? __fget_files+0x3a0/0x420
[  732.215711][T17657]  __x64_sys_sendmsg+0x1bd/0x2a0
[  732.215740][T17657]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  732.215774][T17657]  ? __pfx_ksys_write+0x10/0x10
[  732.215808][T17657]  do_syscall_64+0x14d/0xf80
[  732.215830][T17657]  ? trace_irq_disable+0x3b/0x150
[  732.215856][T17657]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.215879][T17657]  ? clear_bhb_loop+0x40/0x90
[  732.215906][T17657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.215929][T17657] RIP: 0033:0x7fb085b9c799
[  732.215951][T17657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  732.215970][T17657] RSP: 002b:00007fb086973028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  732.215994][T17657] RAX: ffffffffffffffda RBX: 00007fb085e15fa0 RCX: 00007fb085b9c799
[  732.216011][T17657] RDX: 0000000024000000 RSI: 0000200000000040 RDI: 0000000000000003
[  732.216026][T17657] RBP: 00007fb086973090 R08: 0000000000000000 R09: 0000000000000000
[  732.216041][T17657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  732.216054][T17657] R13: 00007fb085e16038 R14: 00007fb085e15fa0 R15: 00007ffc4a8f43f8
[  732.216089][T17657]  </TASK>
[  732.821955][   T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  732.982001][   T24] usb 3-1: Using ep0 maxpacket: 16
[  732.989127][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  733.000994][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  733.012849][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  733.022178][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.030253][   T24] usb 3-1: Product: syz
[  733.034438][   T24] usb 3-1: Manufacturer: syz
[  733.039130][   T24] usb 3-1: SerialNumber: syz
[  733.046516][   T24] usb 3-1: config 0 descriptor??
[  733.049544][ T9889] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  733.063346][   T24] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  733.217295][ T9889] usb 2-1: Using ep0 maxpacket: 8
[  733.224524][ T9889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  733.236310][ T9889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  733.246621][ T9889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  733.257274][ T9889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  733.267263][ T9889] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  733.280448][ T9889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  733.289976][ T9889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.308840][ T9889] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22
[  733.320137][   T24] usb 3-1: USB disconnect, device number 69
[  733.455450][T17672] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3274'.
[  734.264905][   T24] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  734.427094][   T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  734.437082][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  734.446132][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  734.455676][   T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  734.464206][   T24] usb 3-1: Product: syz
[  734.468568][   T24] usb 3-1: Manufacturer: syz
[  734.473311][   T24] usb 3-1: SerialNumber: syz
[  734.480908][   T24] usb 3-1: config 0 descriptor??
[  734.494503][   T24] usb 3-1: selecting invalid altsetting 0
[  734.720616][   T24] usb 3-1: USB disconnect, device number 70
[  735.353418][T17698] loop5: detected capacity change from 0 to 7
[  735.380745][ T5846] Dev loop5: unable to read RDB block 7
[  735.387794][ T5846]  loop5: unable to read partition table
[  735.394747][ T5846] loop5: partition table beyond EOD, truncated
[  735.408966][T17701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3290'.
[  735.414602][T17698] Dev loop5: unable to read RDB block 7
[  735.430185][T17698]  loop5: unable to read partition table
[  735.436687][T17698] loop5: partition table beyond EOD, truncated
[  735.447156][T17698] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  735.601792][ T9889] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  735.784042][ T9889] usb 3-1: Using ep0 maxpacket: 16
[  735.798097][ T9889] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  735.816519][ T9889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.838659][ T9889] usb 3-1: config 0 descriptor??
[  735.861110][ T9889] gspca_main: sonixj-2.14.0 probing 0471:0327
[  735.870433][   T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  735.918333][T17715] overlayfs: failed to clone upperpath
[  736.013651][ T5855] usb 2-1: USB disconnect, device number 31
[  736.051951][   T24] usb 4-1: Using ep0 maxpacket: 8
[  736.069640][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  736.087307][   T24] usb 4-1: no configurations
[  736.092166][   T24] usb 4-1: can't read configurations, error -22
[  736.232057][   T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  736.317112][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.327396][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.392239][   T24] usb 4-1: Using ep0 maxpacket: 8
[  736.401015][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  736.409386][   T24] usb 4-1: no configurations
[  736.415565][   T24] usb 4-1: can't read configurations, error -22
[  736.422417][   T24] usb usb4-port1: attempt power cycle
[  736.456409][ T5855] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  736.560060][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.571252][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.629988][ T5855] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  736.639998][ T5855] usb 2-1: config 0 interface 0 has no altsetting 0
[  736.651993][ T5855] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  736.663091][ T5855] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  736.671605][ T5855] usb 2-1: Product: syz
[  736.675834][ T5855] usb 2-1: Manufacturer: syz
[  736.681603][ T5855] usb 2-1: SerialNumber: syz
[  736.689241][ T5855] usb 2-1: config 0 descriptor??
[  736.702002][ T5855] usb 2-1: selecting invalid altsetting 0
[  736.787904][   T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  736.798482][ T9889] gspca_sonixj: reg_r err -71
[  736.809931][ T9889] sonixj 3-1:0.0: probe with driver sonixj failed with error -71
[  736.822359][   T24] usb 4-1: Using ep0 maxpacket: 8
[  736.832378][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  736.840924][ T9889] usb 3-1: USB disconnect, device number 71
[  736.849305][   T24] usb 4-1: no configurations
[  736.857091][   T24] usb 4-1: can't read configurations, error -22
[  736.930276][ T2170] usb 2-1: USB disconnect, device number 32
[  737.001695][   T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  737.024779][   T24] usb 4-1: Using ep0 maxpacket: 8
[  737.032672][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  737.041272][   T24] usb 4-1: no configurations
[  737.046333][   T24] usb 4-1: can't read configurations, error -22
[  737.053098][   T24] usb usb4-port1: unable to enumerate USB device
[  737.153359][T17723] fuse: fd is not a fuse device
[  737.538866][T17734] loop5: detected capacity change from 0 to 7
[  737.548637][T17734] Dev loop5: unable to read RDB block 7
[  737.555132][T17734]  loop5: unable to read partition table
[  737.561496][T17734] loop5: partition table beyond EOD, truncated
[  737.567772][T17734] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  737.590474][T17734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3297'.
[  738.115450][T13901] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  738.637315][   T10] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  738.822286][   T10] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  738.847135][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[  738.866233][   T10] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  738.876510][   T10] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  738.885710][   T10] usb 3-1: Product: syz
[  738.890073][   T10] usb 3-1: Manufacturer: syz
[  738.895234][   T10] usb 3-1: SerialNumber: syz
[  738.911623][   T10] usb 3-1: config 0 descriptor??
[  738.929322][   T10] usb 3-1: selecting invalid altsetting 0
[  739.167611][T10307] usb 3-1: USB disconnect, device number 72
[  739.335074][T17769] FAULT_INJECTION: forcing a failure.
[  739.335074][T17769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  739.348683][T17769] CPU: 1 UID: 0 PID: 17769 Comm: syz.3.3310 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  739.348718][T17769] Tainted: [L]=SOFTLOCKUP
[  739.348727][T17769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  739.348741][T17769] Call Trace:
[  739.348750][T17769]  <TASK>
[  739.348760][T17769]  dump_stack_lvl+0xe8/0x150
[  739.348800][T17769]  should_fail_ex+0x412/0x560
[  739.348830][T17769]  _copy_from_user+0x2d/0xb0
[  739.348859][T17769]  sctp_setsockopt+0x1c4/0x12c0
[  739.348890][T17769]  ? sock_common_setsockopt+0x36/0xc0
[  739.348922][T17769]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  739.348967][T17769]  do_sock_setsockopt+0x17c/0x1b0
[  739.348995][T17769]  __x64_sys_setsockopt+0x13d/0x1b0
[  739.349023][T17769]  do_syscall_64+0x14d/0xf80
[  739.349044][T17769]  ? trace_irq_disable+0x3b/0x150
[  739.349070][T17769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.349094][T17769]  ? clear_bhb_loop+0x40/0x90
[  739.349121][T17769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.349143][T17769] RIP: 0033:0x7fc86039c799
[  739.349165][T17769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.349185][T17769] RSP: 002b:00007fc86124c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  739.349209][T17769] RAX: ffffffffffffffda RBX: 00007fc860615fa0 RCX: 00007fc86039c799
[  739.349226][T17769] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000005
[  739.349240][T17769] RBP: 00007fc86124c090 R08: 000000000000009c R09: 0000000000000000
[  739.349255][T17769] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001
[  739.349270][T17769] R13: 00007fc860616038 R14: 00007fc860615fa0 R15: 00007ffda1e89118
[  739.349304][T17769]  </TASK>
[  739.925893][T17784] FAULT_INJECTION: forcing a failure.
[  739.925893][T17784] name failslab, interval 1, probability 0, space 0, times 0
[  739.938737][T17784] CPU: 1 UID: 0 PID: 17784 Comm: syz.2.3316 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  739.938772][T17784] Tainted: [L]=SOFTLOCKUP
[  739.938781][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  739.938796][T17784] Call Trace:
[  739.938805][T17784]  <TASK>
[  739.938814][T17784]  dump_stack_lvl+0xe8/0x150
[  739.938853][T17784]  should_fail_ex+0x412/0x560
[  739.938884][T17784]  should_failslab+0xa8/0x100
[  739.938910][T17784]  __kmalloc_cache_noprof+0x88/0x660
[  739.938946][T17784]  ? l2tp_tunnel_create+0x92/0x3e0
[  739.938976][T17784]  ? __pfx_l2tp_tunnel_get+0x10/0x10
[  739.939009][T17784]  l2tp_tunnel_create+0x92/0x3e0
[  739.939044][T17784]  pppol2tp_connect+0x826/0x17c0
[  739.939087][T17784]  ? __pfx_pppol2tp_connect+0x10/0x10
[  739.939127][T17784]  ? __pfx_aa_sk_perm+0x10/0x10
[  739.939163][T17784]  ? hook_socket_connect+0x107/0x190
[  739.939197][T17784]  ? bpf_lsm_socket_connect+0x9/0x20
[  739.939228][T17784]  __sys_connect+0x312/0x450
[  739.939259][T17784]  ? __pfx___sys_connect+0x10/0x10
[  739.939295][T17784]  ? __pfx_ksys_write+0x10/0x10
[  739.939318][T17784]  __x64_sys_connect+0x7a/0x90
[  739.939346][T17784]  do_syscall_64+0x14d/0xf80
[  739.939363][T17784]  ? trace_irq_disable+0x3b/0x150
[  739.939384][T17784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.939403][T17784]  ? clear_bhb_loop+0x40/0x90
[  739.939424][T17784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.939443][T17784] RIP: 0033:0x7fb085b9c799
[  739.939462][T17784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.939486][T17784] RSP: 002b:00007fb086973028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  739.939507][T17784] RAX: ffffffffffffffda RBX: 00007fb085e15fa0 RCX: 00007fb085b9c799
[  739.939524][T17784] RDX: 000000000000002e RSI: 0000200000000000 RDI: 0000000000000003
[  739.939535][T17784] RBP: 00007fb086973090 R08: 0000000000000000 R09: 0000000000000000
[  739.939547][T17784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  739.939558][T17784] R13: 00007fb085e16038 R14: 00007fb085e15fa0 R15: 00007ffc4a8f43f8
[  739.939584][T17784]  </TASK>
[  740.486762][T10307] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  740.671596][T10307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  740.682944][T10307] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  740.698383][T10307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.726096][T10307] usb 3-1: config 0 descriptor??
[  740.768503][T10307] pwc: Askey VC010 type 2 USB webcam detected.
[  741.106754][ T9889] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  741.195167][T10307] pwc: recv_control_msg error -32 req 02 val 2b00
[  741.202409][T10307] pwc: recv_control_msg error -32 req 02 val 2700
[  741.209938][T10307] pwc: recv_control_msg error -32 req 02 val 2c00
[  741.219779][T10307] pwc: recv_control_msg error -32 req 04 val 1000
[  741.230434][T10307] pwc: recv_control_msg error -32 req 04 val 1300
[  741.239392][T10307] pwc: recv_control_msg error -32 req 04 val 1400
[  741.246649][T10307] pwc: recv_control_msg error -32 req 02 val 2000
[  741.253850][T10307] pwc: recv_control_msg error -32 req 02 val 2100
[  741.280052][ T9889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  741.290437][ T9889] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  741.300006][ T9889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  741.311333][ T9889] usb 4-1: config 0 descriptor??
[  741.326732][ T9889] pwc: Askey VC010 type 2 USB webcam detected.
[  741.478987][T10307] pwc: recv_control_msg error -32 req 02 val 2500
[  741.486380][T10307] pwc: recv_control_msg error -32 req 02 val 2400
[  741.702387][T17816] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  741.711622][T10307] pwc: recv_control_msg error -71 req 02 val 2900
[  741.732806][T10307] pwc: recv_control_msg error -71 req 02 val 2800
[  741.740140][T10307] pwc: recv_control_msg error -71 req 04 val 1100
[  741.749613][T10307] pwc: recv_control_msg error -71 req 04 val 1200
[  741.757658][ T9889] pwc: recv_control_msg error -32 req 02 val 2b00
[  741.764348][T10307] pwc: Registered as video103.
[  741.770857][T10307] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input67
[  741.793807][ T9889] pwc: recv_control_msg error -32 req 02 val 2700
[  741.811840][ T9889] pwc: recv_control_msg error -32 req 02 val 2c00
[  741.821321][T10307] usb 3-1: USB disconnect, device number 73
[  741.835662][ T9889] pwc: recv_control_msg error -32 req 04 val 1000
[  741.835684][T13901] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  741.870683][ T9889] pwc: recv_control_msg error -32 req 04 val 1300
[  742.148999][ T9889] pwc: recv_control_msg error -71 req 02 val 2000
[  742.162638][T13901] Bluetooth: hci0: unexpected event for opcode 0x0c47
[  742.169728][ T9889] pwc: recv_control_msg error -71 req 02 val 2100
[  742.177601][ T9889] pwc: recv_control_msg error -71 req 04 val 1500
[  742.186590][   T24] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  742.188726][ T9889] pwc: recv_control_msg error -71 req 02 val 2500
[  742.216016][ T9889] pwc: recv_control_msg error -71 req 02 val 2400
[  742.231347][ T9889] pwc: recv_control_msg error -71 req 02 val 2600
[  742.244252][ T9889] pwc: recv_control_msg error -71 req 02 val 2900
[  742.252377][ T9889] pwc: recv_control_msg error -71 req 02 val 2800
[  742.259465][ T9889] pwc: recv_control_msg error -71 req 04 val 1100
[  742.267292][ T9889] pwc: recv_control_msg error -71 req 04 val 1200
[  742.275556][ T9889] pwc: Registered as video103.
[  742.283407][ T9889] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input68
[  742.323659][ T9889] usb 4-1: USB disconnect, device number 61
[  742.381075][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  742.404554][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  742.432423][   T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  742.449278][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  742.463816][   T24] usb 2-1: config 0 descriptor??
[  742.669010][T17838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3334'.
[  742.766574][T17842] FAULT_INJECTION: forcing a failure.
[  742.766574][T17842] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  742.779855][   T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  742.793906][T17842] CPU: 0 UID: 0 PID: 17842 Comm: syz.3.3335 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  742.793940][T17842] Tainted: [L]=SOFTLOCKUP
[  742.793949][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  742.793964][T17842] Call Trace:
[  742.793973][T17842]  <TASK>
[  742.793983][T17842]  dump_stack_lvl+0xe8/0x150
[  742.794021][T17842]  should_fail_ex+0x412/0x560
[  742.794054][T17842]  _copy_to_user+0x31/0xb0
[  742.794085][T17842]  simple_read_from_buffer+0xe1/0x170
[  742.794121][T17842]  proc_fail_nth_read+0x1bb/0x230
[  742.794156][T17842]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  742.794190][T17842]  ? rw_verify_area+0x2a6/0x4d0
[  742.794224][T17842]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  742.794263][T17842]  vfs_read+0x20c/0xa70
[  742.794294][T17842]  ? fdget_pos+0x246/0x320
[  742.794328][T17842]  ? __pfx___mutex_lock+0x10/0x10
[  742.794355][T17842]  ? __pfx_vfs_read+0x10/0x10
[  742.794391][T17842]  ? __fget_files+0x2a/0x420
[  742.794425][T17842]  ? __fget_files+0x3a0/0x420
[  742.794452][T17842]  ? __fget_files+0x2a/0x420
[  742.794490][T17842]  ksys_read+0x150/0x270
[  742.794513][T17842]  ? __pfx_ksys_read+0x10/0x10
[  742.794546][T17842]  do_syscall_64+0x14d/0xf80
[  742.794566][T17842]  ? trace_irq_disable+0x3b/0x150
[  742.794593][T17842]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.794616][T17842]  ? clear_bhb_loop+0x40/0x90
[  742.794644][T17842]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.794667][T17842] RIP: 0033:0x7fc86035cfce
[  742.794687][T17842] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  742.794707][T17842] RSP: 002b:00007fc86124bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  742.794731][T17842] RAX: ffffffffffffffda RBX: 00007fc86124c6c0 RCX: 00007fc86035cfce
[  742.794747][T17842] RDX: 000000000000000f RSI: 00007fc86124c0a0 RDI: 0000000000000004
[  742.794762][T17842] RBP: 00007fc86124c090 R08: 0000000000000000 R09: 0000000000000000
[  742.794775][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  742.794789][T17842] R13: 00007fc860616038 R14: 00007fc860615fa0 R15: 00007ffda1e89118
[  742.794824][T17842]  </TASK>
[  742.815586][   T24] usb 2-1: USB disconnect, device number 33
[  743.549941][T17858] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3341'.
[  743.563820][T17858] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3341'.
[  743.633648][T17860] unsupported nlmsg_type 40
[  743.641281][T17862] FAULT_INJECTION: forcing a failure.
[  743.641281][T17862] name failslab, interval 1, probability 0, space 0, times 0
[  743.661469][T17862] CPU: 1 UID: 0 PID: 17862 Comm: syz.1.3344 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  743.661507][T17862] Tainted: [L]=SOFTLOCKUP
[  743.661517][T17862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  743.661530][T17862] Call Trace:
[  743.661539][T17862]  <TASK>
[  743.661549][T17862]  dump_stack_lvl+0xe8/0x150
[  743.661588][T17862]  should_fail_ex+0x412/0x560
[  743.661619][T17862]  should_failslab+0xa8/0x100
[  743.661650][T17862]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  743.661686][T17862]  ? __alloc_skb+0x186/0x7d0
[  743.661719][T17862]  ? __alloc_skb+0x1d0/0x7d0
[  743.661751][T17862]  ? __local_bh_enable_ip+0xd0/0x130
[  743.661790][T17862]  __alloc_skb+0x1d0/0x7d0
[  743.661829][T17862]  netlink_sendmsg+0x5d4/0xb40
[  743.661875][T17862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  743.661912][T17862]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  743.661956][T17862]  ? __pfx_netlink_sendmsg+0x10/0x10
[  743.661990][T17862]  sock_sendmsg_nosec+0x112/0x150
[  743.662023][T17862]  ____sys_sendmsg+0x589/0x8c0
[  743.662059][T17862]  ? __pfx_____sys_sendmsg+0x10/0x10
[  743.662093][T17862]  ? import_iovec+0x73/0xa0
[  743.662127][T17862]  ___sys_sendmsg+0x2a5/0x360
[  743.662167][T17862]  ? __pfx____sys_sendmsg+0x10/0x10
[  743.662228][T17862]  ? __fget_files+0x2a/0x420
[  743.662257][T17862]  ? __fget_files+0x3a0/0x420
[  743.662297][T17862]  __x64_sys_sendmsg+0x1bd/0x2a0
[  743.662325][T17862]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  743.662358][T17862]  ? __pfx_ksys_write+0x10/0x10
[  743.662392][T17862]  do_syscall_64+0x14d/0xf80
[  743.662413][T17862]  ? trace_irq_disable+0x3b/0x150
[  743.662440][T17862]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.662462][T17862]  ? clear_bhb_loop+0x40/0x90
[  743.662489][T17862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.662513][T17862] RIP: 0033:0x7f23f399c799
[  743.662534][T17862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  743.662554][T17862] RSP: 002b:00007f23f1bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  743.662579][T17862] RAX: ffffffffffffffda RBX: 00007f23f3c15fa0 RCX: 00007f23f399c799
[  743.662595][T17862] RDX: 0000000004000080 RSI: 0000200000000b00 RDI: 0000000000000003
[  743.662610][T17862] RBP: 00007f23f1bf6090 R08: 0000000000000000 R09: 0000000000000000
[  743.662624][T17862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  743.662638][T17862] R13: 00007f23f3c16038 R14: 00007f23f3c15fa0 R15: 00007ffc5a49da78
[  743.662673][T17862]  </TASK>
[  744.420944][ T9889] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  744.581502][ T9889] usb 4-1: Using ep0 maxpacket: 16
[  744.599508][ T9889] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  744.624058][ T9889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.633723][ T9889] usb 4-1: Product: syz
[  744.638766][ T9889] usb 4-1: Manufacturer: syz
[  744.643935][ T9889] usb 4-1: SerialNumber: syz
[  744.671132][ T9889] usb 4-1: config 0 descriptor??
[  744.690732][ T9889] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  744.848511][T17838] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  745.465862][T17876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3351'.
[  745.552358][T17870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.582935][T17870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  745.896241][ T5922] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  745.992482][   T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  746.039383][ T9889] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0
[  746.067236][ T5922] usb 3-1: Using ep0 maxpacket: 8
[  746.075407][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  746.086389][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  746.099708][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  746.111174][ T5922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  746.121220][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  746.137183][ T5922] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  746.146789][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.155053][   T10] usb 2-1: Using ep0 maxpacket: 8
[  746.162043][   T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  746.172430][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.181560][ T5922] usb 3-1: config 0 descriptor??
[  746.208041][   T10] pvrusb2: Hardware description: Terratec Grabster AV400
[  746.215290][   T10] pvrusb2: **********
[  746.220997][   T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  746.232220][   T10] pvrusb2: Important functionality might not be entirely working.
[  746.241202][   T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  746.255652][T17870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  746.264543][   T10] pvrusb2: **********
[  746.273717][T17870] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.317211][ T2170] usb 4-1: USB disconnect, device number 62
[  746.330711][ T2170] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0
[  746.369441][ T2170] ssu100 4-1:0.0: device disconnected
[  746.416886][T17884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  746.440242][ T2363] pvrusb2: Invalid write control endpoint
[  746.440735][T17884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.465382][   T10] usb 3-1: USB disconnect, device number 74
[  746.597753][ T2363] pvrusb2: Invalid write control endpoint
[  746.607417][ T2363] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  746.621462][ T2363] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  746.631513][ T2363] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  746.643018][ T2363] pvrusb2: Device being rendered inoperable
[  746.658779][ T2363] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  746.667947][T17888] pvrusb2: Attempted to execute control transfer when device not ok
[  746.679999][ T2363] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  746.690013][T10307] usb 2-1: USB disconnect, device number 34
[  746.723320][ T2363] pvrusb2: Attached sub-driver cx25840
[  746.731345][ T2363] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  746.742095][ T2363] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  746.794541][ T2170] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  746.966845][ T2170] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  746.977489][ T2170] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  746.987578][ T2170] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.004975][ T2170] usb 4-1: config 0 descriptor??
[  747.017736][ T2170] pwc: Askey VC010 type 2 USB webcam detected.
[  747.144843][T17907] kvm: user requested TSC rate below hardware speed
[  747.414509][   T24] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[  747.446061][ T2170] pwc: recv_control_msg error -32 req 02 val 2b00
[  747.454223][ T2170] pwc: recv_control_msg error -32 req 02 val 2700
[  747.462040][ T2170] pwc: recv_control_msg error -32 req 02 val 2c00
[  747.471716][ T2170] pwc: recv_control_msg error -32 req 04 val 1000
[  747.481086][ T2170] pwc: recv_control_msg error -32 req 04 val 1300
[  747.488508][ T2170] pwc: recv_control_msg error -32 req 04 val 1400
[  747.496170][ T2170] pwc: recv_control_msg error -32 req 02 val 2000
[  747.508246][ T2170] pwc: recv_control_msg error -32 req 02 val 2100
[  747.579449][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  747.591369][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  747.596184][   T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  747.608616][   T24] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  747.619085][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  747.627886][   T24] usb 3-1: Product: syz
[  747.632180][   T24] usb 3-1: Manufacturer: syz
[  747.636814][   T24] usb 3-1: SerialNumber: syz
[  747.644594][   T24] usb 3-1: config 0 descriptor??
[  747.654645][   T24] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  747.731337][ T2170] pwc: recv_control_msg error -32 req 02 val 2500
[  747.739664][ T2170] pwc: recv_control_msg error -32 req 02 val 2400
[  747.779275][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  747.792576][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  747.801742][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.812503][   T10] usb 2-1: config 0 descriptor??
[  747.823390][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  747.867723][ T5922] usb 3-1: USB disconnect, device number 75
[  747.961421][ T2170] pwc: recv_control_msg error -71 req 02 val 2900
[  747.968582][ T2170] pwc: recv_control_msg error -71 req 02 val 2800
[  747.979939][ T2170] pwc: recv_control_msg error -71 req 04 val 1100
[  747.987169][ T2170] pwc: recv_control_msg error -71 req 04 val 1200
[  747.997802][ T2170] pwc: Registered as video103.
[  748.005927][ T2170] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input70
[  748.047058][ T2170] usb 4-1: USB disconnect, device number 63
[  748.195371][T17920] fuse: fd is not a fuse device
[  748.275766][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  748.284252][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  748.294642][   T10] pwc: recv_control_msg error -32 req 02 val 2c00
[  748.302222][   T10] pwc: recv_control_msg error -32 req 04 val 1000
[  748.309302][   T10] pwc: recv_control_msg error -32 req 04 val 1300
[  748.316451][   T10] pwc: recv_control_msg error -32 req 04 val 1400
[  748.326012][   T10] pwc: recv_control_msg error -32 req 02 val 2000
[  748.557769][   T10] pwc: recv_control_msg error -71 req 04 val 1500
[  748.570795][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[  748.913605][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  748.929498][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  748.940431][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  748.951387][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  748.961947][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  748.978466][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  748.992086][   T10] pwc: Registered as video103.
[  749.014074][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71
[  749.059353][   T10] usb 2-1: USB disconnect, device number 35
[  749.375816][ T5903] libceph: connect (1)[c::]:6789 error -101
[  749.382925][ T5903] libceph: mon0 (1)[c::]:6789 connect error
[  749.660214][ T5903] libceph: connect (1)[c::]:6789 error -101
[  749.673099][ T5903] libceph: mon0 (1)[c::]:6789 connect error
[  749.986898][T17960] syzkaller1: entered promiscuous mode
[  749.993416][T17960] syzkaller1: entered allmulticast mode
[  750.195657][T17942] ceph: No mds server is up or the cluster is laggy
[  750.244798][ T5903] libceph: connect (1)[c::]:6789 error -101
[  750.256887][ T5903] libceph: mon0 (1)[c::]:6789 connect error
[  750.295511][   T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  750.309500][T17966] binder: 17965:17966 ioctl c0306201 0 returned -14
[  750.462989][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  750.475103][   T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  750.487507][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  750.499363][   T24] usb 3-1: config 0 descriptor??
[  750.518718][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  750.525235][   T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  750.629063][T17973] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3381'.
[  750.696465][   T10] usb 2-1: Using ep0 maxpacket: 16
[  750.704828][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  750.715411][   T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  750.726913][   T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  750.744142][   T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  750.753790][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  750.763012][   T10] usb 2-1: SerialNumber: syz
[  750.775716][   T10] hub 2-1:1.0: bad descriptor, ignoring hub
[  750.786882][   T10] hub 2-1:1.0: probe with driver hub failed with error -5
[  750.795634][   T10] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  750.970193][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  750.985743][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  751.002353][T17960] syzkaller1: left promiscuous mode
[  751.014597][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  751.023101][T17960] syzkaller1: left allmulticast mode
[  751.029973][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  751.043063][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  751.063321][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  751.073640][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  751.099278][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  751.114612][T17976] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3382'.
[  751.166995][   T10] usb 2-1: USB disconnect, device number 36
[  751.323113][   T24] pwc: recv_control_msg error -32 req 02 val 2500
[  751.330353][   T24] pwc: recv_control_msg error -32 req 02 val 2400
[  751.552445][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  751.559502][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  751.569728][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  751.577031][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  751.587212][   T24] pwc: Registered as video103.
[  751.604609][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input73
[  751.639711][   T24] usb 3-1: USB disconnect, device number 76
[  752.072066][    C0] ------------[ cut here ]------------
[  752.077632][    C0] !local->started
[  752.077667][    C0] WARNING: net/mac80211/rx.c:5462 at ieee80211_rx_list+0x2918/0x3710, CPU#0: kworker/u8:9/10945
[  752.092816][    C0] Modules linked in:
[  752.098394][    C0] CPU: 0 UID: 0 PID: 10945 Comm: kworker/u8:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  752.109983][    C0] Tainted: [L]=SOFTLOCKUP
[  752.114379][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  752.124592][    C0] Workqueue:  0x0 (events_unbound)
[  752.129824][    C0] RIP: 0010:ieee80211_rx_list+0x2918/0x3710
[  752.135853][    C0] Code: 90 e9 70 df ff ff e8 77 96 90 f6 e9 66 df ff ff e8 6d 96 90 f6 e9 5c df ff ff e8 63 96 90 f6 e9 52 df ff ff e8 59 96 90 f6 90 <0f> 0b 90 e9 44 df ff ff e8 4b 96 90 f6 48 c7 44 24 68 00 00 00 00
[  752.155599][    C0] RSP: 0018:ffffc90000007b20 EFLAGS: 00010246
[  752.161755][    C0] RAX: ffffffff8b365cd7 RBX: ffff888084581625 RCX: ffff8880586bdb80
[  752.169808][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000005
[  752.178932][    C0] RBP: ffffc90000007d90 R08: ffffffff8b366bb3 R09: ffffffff8eb5d6a0
[  752.187019][    C0] R10: 0000000000000002 R11: 0000000000000100 R12: ffff88807a8bc500
[  752.195096][    C0] R13: dffffc0000000000 R14: ffff888084583108 R15: ffffffff8b366bb3
[  752.203172][    C0] FS:  0000000000000000(0000) GS:ffff888124de2000(0000) knlGS:0000000000000000
[  752.212205][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  752.218875][    C0] CR2: 0000001b3001eff8 CR3: 000000008367c000 CR4: 00000000003526f0
[  752.226950][    C0] Call Trace:
[  752.230270][    C0]  <IRQ>
[  752.233179][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  752.238220][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  752.243741][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  752.248898][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  752.254019][    C0]  ? lock_acquire+0xf0/0x2e0
[  752.258735][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  752.263823][    C0]  ieee80211_rx_napi+0x1b1/0x3e0
[  752.268898][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  752.274423][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  752.279758][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  752.285627][    C0]  ? skb_dequeue+0x124/0x160
[  752.290388][    C0]  ieee80211_handle_queued_frames+0xe8/0x1e0
[  752.296443][    C0]  tasklet_action_common+0x2da/0x4b0
[  752.301833][    C0]  handle_softirqs+0x22a/0x870
[  752.306662][    C0]  ? __irq_exit_rcu+0xca/0x220
[  752.311562][    C0]  __irq_exit_rcu+0xca/0x220
[  752.316306][    C0]  irq_exit_rcu+0x9/0x30
[  752.320625][    C0]  common_interrupt+0xbb/0xe0
[  752.325597][    C0]  </IRQ>
[  752.328569][    C0]  <TASK>
[  752.331552][    C0]  asm_common_interrupt+0x26/0x40
[  752.336682][    C0] RIP: 0010:finish_task_switch+0x427/0xbe0
[  752.342588][    C0] Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 86 be 2b 0a e8 61 d7 38 00 fb 49 8d bd 68 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80
[  752.362316][    C0] RSP: 0018:ffffc900042a7a30 EFLAGS: 00000202
[  752.368476][    C0] RAX: 00000000000044a1 RBX: 1ffff1101708776c RCX: 0000000080000001
[  752.376536][    C0] RDX: 0000000000000000 RSI: ffffffff8e257836 RDI: ffff8880586bf1e8
[  752.384647][    C0] RBP: ffffc900042a7a90 R08: ffffffff905441f7 R09: 1ffffffff20a883e
[  752.392750][    C0] R10: dffffc0000000000 R11: fffffbfff20a883f R12: ffff8880b843adc8
[  752.400813][    C0] R13: ffff8880586bdb80 R14: ffff88801dec3d00 R15: dffffc0000000000
[  752.408988][    C0]  __schedule+0x166d/0x5590
[  752.413549][    C0]  ? __pfx_pwq_dec_nr_in_flight+0x10/0x10
[  752.419416][    C0]  ? __pfx___schedule+0x10/0x10
[  752.424327][    C0]  ? schedule+0x90/0x360
[  752.428678][    C0]  schedule+0x164/0x360
[  752.432906][    C0]  worker_thread+0xe08/0x11e0
[  752.437653][    C0]  kthread+0x388/0x470
[  752.441938][    C0]  ? __pfx_worker_thread+0x10/0x10
[  752.447110][    C0]  ? __pfx_kthread+0x10/0x10
[  752.451812][    C0]  ret_from_fork+0x51e/0xb90
[  752.456474][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  752.461700][    C0]  ? __switch_to+0xc7d/0x1450
[  752.466434][    C0]  ? __pfx_kthread+0x10/0x10
[  752.471135][    C0]  ret_from_fork_asm+0x1a/0x30
[  752.476267][    C0]  </TASK>
[  752.479344][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  752.486754][    C0] CPU: 0 UID: 0 PID: 10945 Comm: kworker/u8:9 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  752.497905][    C0] Tainted: [L]=SOFTLOCKUP
[  752.502262][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  752.512349][    C0] Workqueue:  0x0 (events_unbound)
[  752.517498][    C0] Call Trace:
[  752.520826][    C0]  <IRQ>
[  752.523795][    C0]  vpanic+0x56c/0xa60
[  752.527859][    C0]  ? __pfx__printk+0x10/0x10
[  752.532494][    C0]  ? __pfx_vpanic+0x10/0x10
[  752.537128][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  752.542467][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  752.547739][    C0]  panic+0xc5/0xd0
[  752.551512][    C0]  ? __pfx_panic+0x10/0x10
[  752.555979][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  752.560970][    C0]  __warn+0x315/0x4f0
[  752.565002][    C0]  ? ieee80211_rx_list+0x2918/0x3710
[  752.570348][    C0]  ? ieee80211_rx_list+0x2918/0x3710
[  752.575684][    C0]  __report_bug+0x29a/0x540
[  752.580343][    C0]  ? ieee80211_rx_list+0x2918/0x3710
[  752.585688][    C0]  ? __pfx___report_bug+0x10/0x10
[  752.590774][    C0]  ? sta_info_get_bss+0x58/0x390
[  752.596273][    C0]  ? ieee80211_rx_list+0x2918/0x3710
[  752.601586][    C0]  report_bug+0x16a/0x220
[  752.605948][    C0]  ? ieee80211_rx_list+0x2918/0x3710
[  752.611254][    C0]  ? ieee80211_rx_list+0x291a/0x3710
[  752.616563][    C0]  handle_bug+0x9c/0x200
[  752.620824][    C0]  exc_invalid_op+0x1a/0x50
[  752.625361][    C0]  asm_exc_invalid_op+0x1a/0x20
[  752.630255][    C0] RIP: 0010:ieee80211_rx_list+0x2918/0x3710
[  752.636193][    C0] Code: 90 e9 70 df ff ff e8 77 96 90 f6 e9 66 df ff ff e8 6d 96 90 f6 e9 5c df ff ff e8 63 96 90 f6 e9 52 df ff ff e8 59 96 90 f6 90 <0f> 0b 90 e9 44 df ff ff e8 4b 96 90 f6 48 c7 44 24 68 00 00 00 00
[  752.655848][    C0] RSP: 0018:ffffc90000007b20 EFLAGS: 00010246
[  752.661975][    C0] RAX: ffffffff8b365cd7 RBX: ffff888084581625 RCX: ffff8880586bdb80
[  752.670058][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000005
[  752.678051][    C0] RBP: ffffc90000007d90 R08: ffffffff8b366bb3 R09: ffffffff8eb5d6a0
[  752.686044][    C0] R10: 0000000000000002 R11: 0000000000000100 R12: ffff88807a8bc500
[  752.694033][    C0] R13: dffffc0000000000 R14: ffff888084583108 R15: ffffffff8b366bb3
[  752.702116][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  752.707176][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  752.712228][    C0]  ? ieee80211_rx_list+0x2917/0x3710
[  752.717555][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  752.722614][    C0]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  752.728104][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  752.733071][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  752.738121][    C0]  ? lock_acquire+0xf0/0x2e0
[  752.742746][    C0]  ? ieee80211_rx_napi+0xd3/0x3e0
[  752.747798][    C0]  ieee80211_rx_napi+0x1b1/0x3e0
[  752.753111][    C0]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  752.758594][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  752.763831][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  752.769660][    C0]  ? skb_dequeue+0x124/0x160
[  752.774279][    C0]  ieee80211_handle_queued_frames+0xe8/0x1e0
[  752.780285][    C0]  tasklet_action_common+0x2da/0x4b0
[  752.785594][    C0]  handle_softirqs+0x22a/0x870
[  752.790386][    C0]  ? __irq_exit_rcu+0xca/0x220
[  752.795176][    C0]  __irq_exit_rcu+0xca/0x220
[  752.799795][    C0]  irq_exit_rcu+0x9/0x30
[  752.804065][    C0]  common_interrupt+0xbb/0xe0
[  752.808774][    C0]  </IRQ>
[  752.811719][    C0]  <TASK>
[  752.814672][    C0]  asm_common_interrupt+0x26/0x40
[  752.819715][    C0] RIP: 0010:finish_task_switch+0x427/0xbe0
[  752.825545][    C0] Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 86 be 2b 0a e8 61 d7 38 00 fb 49 8d bd 68 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80
[  752.845164][    C0] RSP: 0018:ffffc900042a7a30 EFLAGS: 00000202
[  752.851252][    C0] RAX: 00000000000044a1 RBX: 1ffff1101708776c RCX: 0000000080000001
[  752.859244][    C0] RDX: 0000000000000000 RSI: ffffffff8e257836 RDI: ffff8880586bf1e8
[  752.867236][    C0] RBP: ffffc900042a7a90 R08: ffffffff905441f7 R09: 1ffffffff20a883e
[  752.875229][    C0] R10: dffffc0000000000 R11: fffffbfff20a883f R12: ffff8880b843adc8
[  752.883220][    C0] R13: ffff8880586bdb80 R14: ffff88801dec3d00 R15: dffffc0000000000
[  752.891344][    C0]  __schedule+0x166d/0x5590
[  752.895881][    C0]  ? __pfx_pwq_dec_nr_in_flight+0x10/0x10
[  752.901675][    C0]  ? __pfx___schedule+0x10/0x10
[  752.906561][    C0]  ? schedule+0x90/0x360
[  752.910834][    C0]  schedule+0x164/0x360
[  752.915034][    C0]  worker_thread+0xe08/0x11e0
[  752.919757][    C0]  kthread+0x388/0x470
[  752.923858][    C0]  ? __pfx_worker_thread+0x10/0x10
[  752.928995][    C0]  ? __pfx_kthread+0x10/0x10
[  752.933697][    C0]  ret_from_fork+0x51e/0xb90
[  752.938342][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  752.943482][    C0]  ? __switch_to+0xc7d/0x1450
[  752.948185][    C0]  ? __pfx_kthread+0x10/0x10
[  752.952802][    C0]  ret_from_fork_asm+0x1a/0x30
[  752.957630][    C0]  </TASK>
[  752.961573][    C0] Kernel Offset: disabled
[  752.965919][    C0] Rebooting in 86400 seconds..