last executing test programs:

21m33.427627921s ago: executing program 0 (id=826):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x64, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x44, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x138}}, 0x0)
r1 = socket(0x10, 0x80003, 0x0)
sendmmsg$alg(r1, &(0x7f00000006c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="bc74a7f9bc585df52762eaed2ccf5d79cd1f6f32453b452dba0face4d58c89394df18d9679c2cc6b53fedcafd0f7c709205f3950d07c6b896439fcae3fa2a112f8b846570ede66d4a48fcb09b460dd6f8a9e202beffd44e715d98e3682cac98b120e9b9f01c03104702be2fca3ee60244fee4dc5152e5e1a21fc75bb55d97b7871a6cfbbbf2acdab20704326b534", 0x8e}, {&(0x7f00000002c0)="1b08149ecfb43402c5ab31c40f0d17861b4f6ab0115628765187440945076776fe41e8cd1aee7f3fca76423fee939da30643e32d9c5e1da4c18f08329d5b83bd7b2ca140d4e9563fce50f9060702f5698eedf00e3bfeb43323bc0ce61dc0c00d79e1ac27509df836d9797e76c2ac037ee6262e748549e688b3b6ee0f398d6156adc72b11216f600f4bb504bd2958a487759bef22ae6dc6e8e1620000231c42650559ac4b4f396b0e9c05c046f275573f7600d1d1cde198c603", 0xb9}], 0x2, &(0x7f0000000540)=[@assoc={0x18}, @iv={0x58, 0x117, 0x2, 0x40, "5e84504bd4604e67e3e6976405a546ae78e1d3eaae68a4abf2c27e8902011dca908a0c4e6978d92075850b33b2741badfff0867c97b4099029183eac8e4cb294"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x90, 0x117, 0x2, 0x78, "646bceef723a16ca0e20f7be5ec2c7cff9b92dd65907a09970fda01b19aebc7b2d53b3560eac206980618afd026011a48843359fe5b22b8f83ee47b6d8619d93583d33f813cf50921c25837e3bd1755616ee3186955a11a72bf7f0300fc6f84ad6de0a31390c720f2331b6be04a2e425d83a4e0142672559"}, @assoc={0x18, 0x117, 0x4, 0xffff}, @assoc={0x18, 0x117, 0x4, 0xfffffff5}], 0x148, 0x4000000}], 0x1, 0x400c850)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
recvfrom$inet(r1, &(0x7f0000000100)=""/156, 0x9c, 0x160, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "000000000000000f000100000e00000f"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

21m33.273483999s ago: executing program 0 (id=828):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001145f16eab97e1040800000000000000474b268b7f00", @ANYRES32=0x0, @ANYBLOB="20100000000004001400030076657468315f766c616e000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r3, 0x80020002)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = accept(r3, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x44080}, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r6, <r7=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7}, 0x0, 0x0}, 0x20)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, 0x0, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="f89200000000000000000200000013000180060000000200000008000300ac1487aa"], 0x28}}, 0x0)
r11 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0)
write$uinput_user_dev(r12, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x9, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0xfe, 0x9, 0x1, 0x4, 0x8000ffe, 0x7fffffff, 0x51, 0x8, 0x800, 0xa4d, 0x3ff, 0x4000004, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0xc, 0x20089, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x6, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x5, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xfffffffc, 0x5, 0x10004, 0x9e, 0xffffff00, 0x100007ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x9, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff3, 0x8000, 0x1, 0x1, 0x5, 0x30001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x40, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1000000c, 0x0, 0x80000000, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0x5, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x0, 0x4, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0xc, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9370, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000340)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0})
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r5, @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250600000018000180140002006970766c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x28042001}, 0x4010002)
syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x404840)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r12, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r13, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x1, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

21m32.347965624s ago: executing program 0 (id=832):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
process_madvise(r2, 0x0, 0x0, 0x4, 0x0)
request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9rust\xe3c*s\xb8dn::e\x00\x00', 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3, 0x0, 0x0, 0x0, 0x4000000}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4044)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x0, 0x7, 0x80, {0x80, 0x2c, "6864e3e28470dddfb350018627bfe6dae97a89fae085930e5dd0798e98474be0312c44b6e6bbfec9aca8308d959db41e71709641b1009dd88d82fc7ea58f9c60d39e5b785d5f78ecbae51656e02566235197019a7b3c69ffb547ff19261d334a42bb389357201b9c01d0f6f0109ef6fb27e9ceac3489794b1f3d7ed53913"}}, &(0x7f0000000180)={0x0, 0x3, 0xe, @string={0xe, 0x3, "db4dcf4658bfc082effdb2d2"}}}, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x0, 0x15, 0xf1, "cce3a2918bfb8b789b203284d56fe4be04e0274a35db70bf9808663e8dee1bac11ea238db9669f6a03c44a1a57cdf4d9df19e5b08ddbc268db0a86183e11cfc1c09e5992be8b3f35497084b2dfee9524a9da85789b86f72c358b624078267ef5801f34c16d51d8cad36659b772f4a7c25777836a6b922a11e4020e1e2673ce51003d00696e154e54d55ae7ee6acab516d9a7198131d1f2e79912a4a0147e1666f8c17fbd780e684bd0008f5d84071c9658d2b9641005f9a88b04122a119b7184d02dac45d67515bc800663ae6c666b1841c9f49b82f76784b671066e6708228e2920affdb08f7254a20a0dc7bd2e97a10b"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000040)=ANY=[@ANYBLOB="1be7fb408059c8d047756f4fc7fe85502080030000001d76c4"], &(0x7f0000000440)={0x20, 0x82, 0x2, "acb3"}, &(0x7f0000000480)={0x20, 0x83, 0x3, "a638bf"}, &(0x7f0000000540)={0x20, 0x84, 0x3, '2Xx'}, &(0x7f0000000580)={0x20, 0x85, 0x3, "d1e0e5"}})
syz_usb_control_io$uac1(r0, 0x0, 0x0)

21m29.776395262s ago: executing program 0 (id=850):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0\x00') (async)
chroot(&(0x7f0000000440)='./file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) (async)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') (async)
pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000016c0)={0x1, 0x0, [{0xd100828e98ba2273, 0xe3, &(0x7f00000015c0)=""/227}]})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1})
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)

21m29.481855585s ago: executing program 0 (id=852):
open$dir(&(0x7f00000000c0)='./file0\x00', 0x101040, 0x20)
lsetxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="0501dadd0000000000"], 0x9, 0x0)
stat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = socket$rxrpc(0x21, 0x2, 0x2)
r2 = geteuid()
quotactl_fd$Q_GETINFO(r1, 0xffffffff80000502, r2, &(0x7f0000000040))
fstat(r1, &(0x7f0000003bc0)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = getuid()
r5 = getegid()
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001140)="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", 0x2000, &(0x7f0000003e80)={&(0x7f0000003140)={0x50, 0x0, 0x81, {0x7, 0x2d, 0x5, 0x400201, 0xc, 0x401, 0x948, 0x1, 0x0, 0x0, 0x10, 0x7}}, &(0x7f00000031c0)={0x18, 0x0, 0x2, {0xf}}, &(0x7f0000003200)={0x18, 0x0, 0x2000, {0xc1}}, &(0x7f0000003240)={0x18, 0x0, 0x5, {0x1}}, &(0x7f0000003280)={0x18, 0xd8433f7528dcb121, 0x5, {0x8001}}, &(0x7f0000003340)={0x28, 0x0, 0x100, {{0x8, 0x5, 0x1}}}, &(0x7f0000003380)={0x60, 0xfffffffffffffff5, 0x5, {{0x3, 0x0, 0x8, 0x3, 0x2, 0x3, 0x22dc3727, 0x4}}}, &(0x7f0000003400)={0x18, 0x0, 0xfffffffffffff800, {0x100}}, &(0x7f0000003440)={0x11, 0x0, 0x5, {'\x00'}}, &(0x7f0000003480)={0x20, 0xffffffffffffffda, 0x4ca, {0x0, 0xc}}, &(0x7f00000034c0)={0x78, 0x0, 0x8, {0x8000, 0x17, 0x0, {0x4, 0x3, 0x4, 0x10000, 0xdd80000000000000, 0x1, 0x4, 0x0, 0x81, 0x8000, 0xc33, 0xee01, 0x0, 0xfffff74e, 0x6}}}, &(0x7f0000003680)={0x90, 0x0, 0x81, {0x3, 0x2, 0xfffffffffffffffe, 0x9, 0x4, 0x3, {0x2, 0x4, 0x5, 0x9, 0xf74a, 0x10, 0x8, 0x915, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x2, 0xd}}}, &(0x7f0000003740)={0x28, 0x0, 0x8, [{0x3, 0xad2, 0x0, 0x40}]}, &(0x7f0000003900)=ANY=[@ANYBLOB="96020000000000000600000000000000040000000000000000000000ff7f000000000000e0020000fb020000000d7329dfb4464eff00000000000000060000000000000003000000000000000700000000000000fbffffffffffffff09000000000000000400000008000000b7f6ffff0060000009000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="ff0300000a000000000000000400000000000000ff7f0000000000000100000019e4000000000000000000000200000000000000000000000000000001000000000000007f00000000000000008000000000000000000000000000001edb13580000000000800000000000001477000000000000090000000000000001800000000000001cf0000000f8ffff060000000060000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000004000000000000000000000000000000000000800000000011000000080000007d2d3a2d2d5b2d265e26242d297b5b5f2500000000000000060000000000000003000000000000000700000000000000050000000000000001000000040000000300000000000000b3210000000000000300000000000000008000000000000004000000000000007f00000000000000b00c000009000000000000000020000007000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0100000006000000000000000200000000000000faffffffffffffff0300000004000000262d2e000000000004000000000000000000000000000000000000000000000008000000000000000500000004000000030000000000000089000000000000007c05000000000000030000000000000039570000000000001000000000000000030000002b0b0000090000000010000053000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100008033090000000000000300000000000000070000000000000002000000050000000b25000000000000"], &(0x7f0000003c40)={0xa0, 0xfffffffffffffffe, 0x4, {{0x4, 0x0, 0x4, 0x87, 0x5, 0x9, {0x3, 0xffffffffffff1adc, 0x6, 0x7, 0x9, 0x7, 0x7f, 0x6, 0x4, 0x4000, 0x3, r2, r3, 0x7ff, 0x4}}, {0x0, 0x2}}}, &(0x7f0000003d00)={0x20, 0xfffffffffffffff5, 0x6b6, {0xa0000000, 0x0, 0x8, 0x5}}, &(0x7f0000003d40)={0x130, 0x0, 0x100000000, {0x8000000000000001, 0x9, 0x0, '\x00', {0x20, 0x0, 0x5, 0x8, r4, r5, 0xa000, '\x00', 0x1, 0x8000000000000001, 0x4c09b306, 0x401, {0xe04, 0x1000}, {0xffffffff, 0x1}, {0xffffffff}, {0x8, 0x9379}, 0x0, 0xf2, 0x6, 0xa0}}}})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x36, [0xfffffff8, 0x1, 0x5, 0x9, 0x10004, 0x155f, 0x6, 0x4, 0x25cd, 0x4, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbd, 0x4a732f64, 0x1, 0x1000, 0x2, 0x6, 0x12a3, 0x6, 0xfffffffd, 0x2, 0x6, 0x7, 0x8, 0x9, 0x79, 0x25713dc3, 0x10000, 0x0, 0x7, 0x4, 0x4, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x7e, 0x9, 0xf9a2, 0x80000001, 0xfc, 0x0, 0x2, 0x2, 0x2, 0x1000, 0xef1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x8, 0xc66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x9, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x7, 0x2000, 0x400, 0x400000, 0x0, 0x4, 0x1c, 0x8000007, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x0, 0x7, 0xf1, 0x6, 0x1, 0xffff, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x401, 0x80000002, 0x3, 0x2, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x10000, 0xfffff801, 0x5], [0xfffffffe, 0xfffffffe, 0xffff, 0xc, 0xfff, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x5, 0x9, 0xb834, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x7, 0x8000, 0x400, 0x2, 0x5, 0xd2, 0x408, 0x3437, 0x3, 0xd, 0x7, 0x601, 0x7, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x143, 0x2, 0x2, 0x6, 0x8000, 0xe7, 0x3, 0xd500, 0x5, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afc, 0x40bfc, 0x8, 0x5, 0x7f, 0x2a29, 0x43, 0xff, 0x1005, 0x5, 0x7, 0x1e, 0x9, 0x81, 0x1, 0x19d86, 0xd, 0xfffffff7, 0x8, 0x6, 0x5396, 0x3, 0x200006, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x8, 0x7fffffff, 0x9, 0xe, 0x32d, 0x3, 0x201, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8008, 0x7fff, 0x3, 0x6, 0x9, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@x86={0xf, 0x0, 0x3, 0x0, 0x5, 0xb2, 0x2, 0xf9, 0xfd, 0x3, 0x3, 0xf, 0x0, 0x5d, 0x4bef, 0x2, 0x2, 0x80, 0x21, '\x00', 0xe3, 0xe})
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0xfffffffffffffffa, 0xfff, 0x4, 0x40000000000180, 0xb, 0x80000000, 0xf2, 0xd, 0x7fffffffffffd, 0x7, 0xbc, 0x7, 0x0, 0x5, 0x1004, 0x8], 0x80a0000, 0x304})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r11 = dup(r10)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)

21m29.4329787s ago: executing program 0 (id=853):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r2 = syz_open_dev$video4linux(0x0, 0x8, 0x4082)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "33803fbae7579b75", "558963da244db07ec464b3a7ed03322c", "066d4ddb", "b807fdcd00"}, 0x28)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x4008af25, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100636f6e6e62797465730000001c0003004cb4fc4ba7906e8f58c20508000000000000007521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x4, @SEQ_CONTROLLER=0xfe, 0x7f, 0x7, 0x2})
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040))

21m28.863781216s ago: executing program 32 (id=853):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
r2 = syz_open_dev$video4linux(0x0, 0x8, 0x4082)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "33803fbae7579b75", "558963da244db07ec464b3a7ed03322c", "066d4ddb", "b807fdcd00"}, 0x28)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x4008af25, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40000)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a78000000060a0b040000020000000000020100004c000480480001800a0001006d61746368000000380002800e000100636f6e6e62797465730000001c0003004cb4fc4ba7906e8f58c20508000000000000007521cf85ee08000240000000000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x2, 0x4, @SEQ_CONTROLLER=0xfe, 0x7f, 0x7, 0x2})
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000040))

6.958565117s ago: executing program 5 (id=5241):
r0 = inotify_init()
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r3, 0x0, 0x0) (async, rerun: 64)
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$sierra_net(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000240)={0x1c, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x5}})
syz_usb_control_io$sierra_net(r3, 0x0, 0x0) (async)
syz_usb_control_io$printer(r3, 0x0, 0x0) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x67, 0x1, @private0, @mcast2}}}}, 0x0)
syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r3, &(0x7f0000000400)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="9f2105d3eb08d275f1c4210a3a5722e3fdf75fee3683ee4d14"], 0x0}, &(0x7f0000000640)={0x44, &(0x7f0000000440)={0x20, 0xe, 0xf, "f266c52a6cdd668bc416cf7ef2bfd2"}, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="f1000000000000"], &(0x7f0000000540)={0x20, 0x82, 0x3, 'eGY'}, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$rtl8150(r3, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) (async, rerun: 32)
syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x400) (async)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000d40)={0x14, &(0x7f0000000bc0)={0x20, 0x21, 0xb6, {0xb6, 0xa, "4facd5589dbaf79c272ab116d2e807c86805f86f3bc961d50e8d28804e8e305c8f45a1a0f0a6713448b4a74e675a8648bb93436c549e9216b7cb0f503170ce00e20ce1f1c184a8d8d22cde8e70e9bcc340853d315bda12a1994b156faea2c080821cfda26f43e0b7e5d675832730938a817d2ef2f40442d072bfd91776d54f6fdae294b872b0086e6f2827c180b5c4b344609a34323cb97b13e8bf7a6d5497788569b64f4716d5fa9f539143c33836ee5fdfd564"}}, &(0x7f0000000c80)={0x0, 0x3, 0xa2, @string={0xa2, 0x3, "6df859f5d247085dcce69d36bb4a9dda3b36aed00e175ecc0bcf01e20fd99979e7ce30d9811c38d0dcaeacd5856f92f2aa326fc82ae20e50fe18a54f950948cd5db5f3e1c322355b6ddcefded9e48c608f515b8841fefb58ea35ebe41f859ddd55ca872f255d3e17969e1d084f4f5f809dd6d98837c105da274300610bde786402fe3d92c423844a1689a81f2f928b38d07499f3c2cf76b2d10bcd3a6ab2e141"}}}, &(0x7f0000000fc0)={0x34, &(0x7f0000000d80)={0x0, 0x14, 0x9b, "7db526137746ca506b52deb21d68d308e68d89c178d0cd03011355a6ae0fab79812f3bfba8a1cc770b80d5eabdcba741ccdb697c3084886e98eec806a5b9b9f8788342078bc3aac537dd051def6446e7cd360388168609e07c068a75b9ffe5003b81bf07478da6bdfee3f5b304f27927894680ce73c39d95eee0bbdc53cafa8e404600176d1509e4afa0234355bce529778336c7acb615d16bdffc"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ec0)={0x20, 0x0, 0x69, {0x67, "793a01aa8049c05d3b5512ee03328123d827592f8f07102123025f94917892ef6963b03fb30eace5e1e8a5cace7e5e7a1b107bd34271b5caa21a51941e6a5c452c52b8a7c9eed51f22872aa8873106da0bf3fb319a56e70f1c7d1ff426a139af9b5c0704d1e6f1"}}, &(0x7f0000000f40)={0x20, 0x1, 0x1}, &(0x7f0000000f80)={0x20, 0x0, 0x1, 0x57}})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async)
write$FUSE_INTERRUPT(r5, &(0x7f0000000000)={0x10}, 0x10) (async)
r6 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0x6, 0x5}, {0xffff, 0xffff}, {0x2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x7fff, 0x4, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x8000000001, 0x7, 0x2, 0x1bc, 0x4}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x5156, 0x8, 0x0, 0x8}}]}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x45}, 0x8000) (async, rerun: 64)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) (rerun: 64)
close_range(r0, 0xffffffffffffffff, 0x0)

6.835898453s ago: executing program 1 (id=5242):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipvlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0xffffff7e)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_emit_ethernet(0x1de, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd605adf000000000000020000000000000000000000000000fe8000000000000000000000000000aa2234c204"], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000340)={0x1, 0x1fd, 0x7f, 0x0, 0x11})
syz_usb_connect(0x0, 0x24, &(0x7f0000001980)={{0x12, 0x1, 0x111, 0x1, 0x26, 0x55, 0x10, 0x61d, 0xc170, 0x4522, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x4, 0x20, 0x2, "", [{{0x9, 0x4, 0x4, 0x5, 0x0, 0xa1, 0x54, 0xef, 0x1}}]}}]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$vga_arbiter(r5, &(0x7f0000000100)=@other={'lock', ' ', 'mem'}, 0x9)
syz_io_uring_setup(0x63bd, 0x0, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000000))
io_uring_setup(0x1b7b, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

6.711011214s ago: executing program 3 (id=5243):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x14, r2, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20)
r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r6=>0x0})
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r7, 0xa9525000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x17, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ff000000000000000600000085200000010000009500000000000000950000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800006e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000001218010110000000ff8620000400000018200000", @ANYRES32=r5, @ANYBLOB="0000ada1eecaffff1869000010000000000000000b00000018240000", @ANYRES32, @ANYBLOB="00000000010000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x10001, 0xcf, &(0x7f0000000280)=""/207, 0x41100, 0x2, '\x00', r6, 0x0, r7, 0x8, &(0x7f00000003c0)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000580)=[{0x2, 0x3, 0x2, 0x6}, {0x3, 0x2, 0xa, 0x8}, {0x0, 0x4, 0x6}, {0x1, 0x1, 0xa, 0x1}, {0x4, 0x2, 0x4, 0x5}, {0x0, 0x3, 0x9}, {0x1, 0x2, 0x5, 0x5}], 0x10, 0x7fff}, 0x94)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0xe0a, 0xfff, 0x0, 0x1, 0x80000007, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000000000000000000000000000000ddff00", "24431a1e77a68e174f000000000000000010e200000000f4ff00000000000200"}})
ioctl$XFS_IOC_READLINK_BY_HANDLE(r5, 0xc038586c, &(0x7f00000007c0)={r7, &(0x7f00000006c0)='syzkaller\x00', 0x102, &(0x7f0000000740)={@align=0x9, {0x4, 0x4, 0xfff, 0x9}}, 0x7, &(0x7f0000000800), &(0x7f0000000780)=0xe1000000})
ioctl$LOOP_SET_DIRECT_IO(r7, 0x4c08, 0x9)
mprotect(&(0x7f00004e1000/0x1000)=nil, 0x1000, 0x1000004)
ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0)

6.10714827s ago: executing program 3 (id=5244):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r1=>r0, {0x2}}, './file0\x00'})
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r3, 0x0, 0x0, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x3, r4, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r5, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000000000004})
ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r5, 0x0, &(0x7f0000000000)="a056dc", 0x3, 0x5})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000001300)={0x28, 0x2, r4, r5, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000300)="81c91bd9b20b5c3aaec840f95a199e624b8e6f8000255dc33719243ed4db90e3d205ac0654c4844fef74959fed0b05b2769c38ec7e37caf6dfd743bc882fc163db63bfc1b6c1d425ad920501369e27d6a4796300d685b308b4fc9d599209d30eabb3800a1890a90d7f7279971ef303e065e0f2a32ef0b272cb597450d5852fa0ea5c4a4e19ed0a8a27dad56c988e7f45592973e5b2a909c804cfa28394b4937883bc6cfa5f3a465933e57e006f3b0e8e014bb23ec230bb8c30f7db5d1835efe29120ca5f0eeaac87b0b3e748a800ad22ae1e41f04305691bfe4bd2f6a74d7b6e24ed6d80c7ba28523373f6a735bfa5ad2e7539e38d03c820d9ee3a5b2d9ce77cf4d66d8d39a043ba810c10ddd8eb661a550b4b3ab1b73f97f31d4263b31bdf14abe6669b97b1dcd6a2186eb97e148a574bb41ed4f0e9f78c2f2398d3c73b2754a7a78297f90750af2572b8948b16f1f02cee06699f705e416ebedb66d06ec7b8a290e0d3aab9bf2d25901076cbb4c10ee6e4dda55e77e2756239941d69f820fbf3ff54b51338d132859a5f64ccdb6a2de8023cca45a96ab8a1a8e92c35a297c638805cace3330adfb1c244e8d37da8d0ecff065e72e34985687a85a99235a740938ba115363c4f09fa2900a42134a1a6e6132758aae5a5a6405f60571a8cb7dc52bc5041a64eab6f2848cbe27e5a06e5799b822d2ead40dff0798149fd71999020a9aef5d181f0d7694021a80b0f421c5274b429d2187a87ad2a1be34014cc23ce67a9f5c1a686dfc5c5f440baf0e1ea84979eaee40083a8da0ad9d521adb565e00d2b3201d3c4df9b7f00275c1ca257fd6ee327bb1f79e744e1bef3e8a95973b947c7b975fcaa0d09afb836806ed013471211e0f8077df7464acee4515b98941492eb316ae2c7d2eaf8d882296fab97972cecd2ecdd2eb00ac956e7938d3e4691a7c3f28b19cf184aa7a920ca5c783b3f9c803332973cbedb4e1cd7f2a78b53836c091eee1bf1c8f7e211a49c96150c20862fd006e8af1a626e7ad62951d48c0231624045b570cc8016cbf8e599d11006c5a102eab017af3ecbcb609612d38aa1e696e168750774c56f79f0850b009adcd2e870268d0d21cf459e39ddfbf2d33d1dd4c3137ea02b3a9472c3e4ed377a420f58ecfa2ac2842b98bc9b8d365e05d7f21765690c52b61bd1b10e95c65be3db1af1b936c9f49dcdd6db2ec34498972d6bfc1dc7fed9faf355bf97df4ec4ae7e05827970b4949e2b4b136c515f827cf9adada892d5dd200fb4034cf9dbb3e3483267db1b626ef6f583cc9fbe50c3523e1ac3e6da3d8d5323c35ee1fe857e6a3597116363ea5b3dd7260e798e91151bcc1f702aedf1c4624eecc4e78cb3b5713860116896d19154018cff7b9cbc91090c753b4208d71b35b4c1d347b1947ebd8e3efba8eab06d12746a42019b7d5f0a9063728535f590c87283b49fdd3fe2bf89a84408c5b1fa6fee4a180c252d4b93257de81ead7596084bd0e9c06e7fa1d9e664757ea9b825e08b9bec8d509bca89369251ff3aa69aebccf67b3af5941bd8a05a1f4612aaeb422f9d1aae802e567b8d890fc23a26a15ddeee7ee63d0560eb0be294ce36428587240f39ffacab72921627fb431ff7945a641f8ccd5c33490713975c92a9157db82ae88a25faae4194f0746468afdf410a76f6aa28bc60a8c0c122417e055324d235e2b6468b57f837b2fd5087600df764ed905c8ee85fa55c2ede0068326ae80aac1dd016422447c90423917c4a5da37b4cda0e28ea47532935f8482720368826fe0ba966d5efdb1065523187c2bac9b8b91e8a0c5e13b99fa71196a41c71b36b178e5ba6466993652b93c73224b679f25200eeb5a33b396c19554dee065c8ff977c6a61311430ba40a49a5bb331985a5f75793d12722abd04fd8953cb05256d8b79857124cc81ebdbe363b88bb1a1eb0b2a98da0ba80c8324e75fa354f484770a37d285ce130d89d09e0a5a74dd66dc01b97d31dede325b5a26f13f66ee27bc0f220ba1904bb3821f92bfcc69efbcc9989dcf71feb55921daee22d9a32a37d0fe051246d6d55f7d62cbd40087ddf4e1827f47996954f06763d3476c13bf4ac23b000fcaeed6bdb9e0adb87923d0f8bf8bfb069caf1f50890fc6bffaddeb85499fe197acd79ad9a9243f9de2264ad8aace95ceca7eb535a10a777b694721df8a0dfc798199e732f85be173c8396e1d30258dc76e85afcdaccc63dfb5d03b50b7b7e527b8a71344545e2549756c6229244ba4a0d57a890009ae306f1906ca12bf91039582e4f872c3c34c25dcb31401ac95c6b3834512f88a765023f003ab58a0dfbcab6b3cd0514eeb03693a8abe65092418c3d96db8309bf027f5f4e6072b7f85b072523b9b76d5b47f46e4e9c08cd48b76d5bb0ae1f93d97b19710f708a3efc36a48b774d42d120a6bea467c1d3015bfd5f386273cd4003b8c08b764a0366732761f3254107e21d9d387896b8d04e10423ccd59e23673ef36666d30a8bbc8b6e149d564783389f90460d4ae8d1fc3ca8fa942362d216e5bb58478e476897fc08ea0a377fee48b0d0df8fe16a26982e5303c56807844cf5d64be806eee7fec801f28f2b90ca1c6dfef58b945bba73158568c7a65d2c55d7a3e2a7cb78d4e48904f64b0e24783a066ed148eb34a355ae5189a46b7420826d34eca677a3ce5ac3158b8117e9de595b43a2d3563b7b3a7dc0de97f59ef07722d43fe259a053adfc759e7a04fdae7271309a73a9368e518ae4fefd94c456588bd33dd301fa0f3e184e10e80a879ccdc510fb6a22c298f3bf0a6c44445f816741f95a1f4f4af0944a4d826bb1a924c6b49e45e68d84db7c4820bfa7fe00966bc858cb12ee67834904131fd56d1141a586d1b332c0c2c74555192d969c1b90b5038db32fb07510a2ea31cb417af8b25f89a18f58df5c4c4a1a7b4073638c7055ac84283ba3a0b4e8c32e52deb43ec54e2d939eb51be7e7a78ac3189f3e4af1532c24aee0598fe10403071d05af4136d58a1741d4de06517fa31ed3c0b9c36a29348dda3a900d143d539adb0b3e52a728ee5eb8a4efe5c10e7040ecea06c7b78b15bf2358b3818c22f252e8874f18e344c5582db54ebbd977e9a11663f49e0da820b19fa37a73494df28e8a71e29d472a2bc7f91a8625fbbbc3ef01943d2d8027342544fb7dce2b39c36bb5c78114b0c052556294a9fda009c853116bd979d9c0c6ec843acc84b04b01f8a301e389876c20479fb00cbef467d47af8dad04f1a7f3d3878c429d966a708bf61d51b6038a2bf7f68099bddb52662c0254178a7dcc29b05ba46bd7f92b37c808a82c773fa922f801ba19720a595fcf6fb386cd7a5f441840a71cf979463059f606ed6b17390e37231f9d92b7c1dbcfd9b307871681c80e25ec01c36ae4d788d290b30a81c1b0a041dbba4b6a5328067503312c29facff2a46bf83d7d4891072d0087ad0d4157a1b3ac7b47e0491a85b2a9ee47b7ecaf8b7ffe92e1390528cefec24987cc81416f1fa7ae82dc8f79f7c22e5f6131fa46f087e70be5480bed14f60298e0b76db6ae6f89b26f908a90aa1f3bb66718be3a49237bc44fd9b9c7f56dd166977ec5b0151503d615ae63b3ff0f647d649d2033f5e1aa1aa0bfd0cb5e552f3627d1cef9038a29b96c2cd15b17503b6349cd78aac199ea7449c71ff73f52be6eaad7e8160d0ec37db88fbdad42c3878936ddfc2eaeaa30a192a79a9a91ccc5859ae7d2cc5f4c6db3486ece98c2325fc8a7776871e9691f26ee9de665f784f06292ad0e1ce103b2e2c6880b8c8c9008c87a0fdb8af224fb15c59af6850e3360461d800cd409def52976b7f5f4c29020e436c24003a28fb9447957207a8c560c9e01b4108d23a8cddff8f93437150a0a5f7f2a60ca1e13c9a87fc5b2c827a8761489d3bfe0317ad5e567f62f0ffbe3966e135968c9a8e4fac2ca31c0b0bf33942d459c6513bc24776781e75854d95cac1a477200d0ca104daa0baa8d8b9ba72d8d51d63fddb3878a0d795c7c0ebc7898010e2945104d5242059b20c9081773c84dae56d29d01ebe3894f4963a528550f550c46e457df50bb8cc8bd40dd3873e1bf21aca001a8a9aafc90d824e2491e7aca7642dba653eb8f0a4ab3df5a8ee08315cb32a35f686902dc01410312684c9b7be05fd6bf77856f8adbf1c0d39434bd7f082431d48cac3d6e201ffac6f5c1ba2dc17cc42514b0fbefa3bde74feac97e8cfc6fd07727c22c4cfc3b32f0533f5d94b4827d1eb30faa9149dcd0bd09a6be14e041da010bface1412d3eeb83e2ad9a23d84a3b2849c731362b087373dfb6a437c55b1097d545f41a2144c45626921dbe5314bf193bbb759a1870f26529ca534e7c9b370f072bed0879a24854eca068ebe4c1d30649a936f5585499105be1179b87be0f380d705b19526b17327522a30666c901cc17daf336309115912fabca6d4d2f6f96ce327d13a2b713fec9cf0455d42e095e352c34bbb60a483387855a29b443bdf307ca5fb371c0ff6abc943cde343dd64f953de4ca42138426526bb4553c875e3ce3b02281a999e02971cbdf35d0553e07ebc4ed015bbb98b92ba465415944923718164435e7155aa824991250364e1b9e046e81be9e2a12a7444a2f041c29e5e2265f2701a55685d4d126f3924bccccc25071093af0958fcec9e71f6234958ac907ac6eaca58a44ac75de0a106bc5954993699d999c38ed99c6f072390f5bf6f99609baf52d5bf25315cfc255e4793d283b91a3e9639634b2dc5de90627d2c4faa3a80fa65849545749b2c25d3214489d77b99cfe355d670a6bc806fcdcb804d4038e4311bbc5debb5bf140418d5a2c00aba8d327bc8b70de71a29421c9d1f941d6d603da7386f60fcd17a63cce05589327282411c0024266a7416f223b6e1de50dcdd2d9608c66098757cc78c3720553489c7cae65a76d67578dcdf9ffd06fb8928b8dea83a9d03aa0d84bd97f13a9c0f008caef73dcce48a065f5d57a7c34923e323ea5dedf5097610bf8250188216e492f0cd62da28fd910a92775d56915879637530b3a9cf4ebda6cc3273e76e6c5d8b6969a7b2a88f1346e9dc11d6338016c6839515cbb3e218fa04bba60d14727f44f2e48c2392c9ccef71dc6738489fcc51ce2c1184f2a17506681b140630b1ec1e4de3abedbcd241dfdfa97a852ac1de37bc3be42f9b39d9c89865a119bd1309f89285b92ae3af875bf3fccdcc459232c88b15cd9f4d06d7eda9e88f3acd842eb0ddb5c2f1c9741e0d4a32dfacd3d56037241867cd744c7995a47c5fb4d2a25bff104036a761d95a551b509983318c385b5a02f6579a637366be39218093e94e4d73743f4dbdd57cffaf2001d3d16b19b5fbc4ca063477adced343a0340cbd9c0130c70b95305b303156124bc6fc5051e6ba0b6701dcc0194efdef7db0360f15c7338beb6d35610804fbe1c6bc0bdfeec1cfc7dbfc5c2ad9a56bed40f29014c6ffe16d78b6f52826bbea467e456b37d871b50c39f480dfdb3b28969934056ea6dce57d356a80de3fe6fd8b656cb2c02bb208183b5037842f2180e565d3d9c4f8771056fe730838a8e0eb285b60885773a4a7e45a7850140c84815243609ec84c4d07214e30ea7acbb67e0b66bc8978beafaa423957373d104b331e542435ab50f907076e3d3e1a08f9047248df0213db40312bfc949317996f5934253c443b47c68dd6caae64817d9da9dbd74114b057ae8a1bacafadbaa7f6637b00575c03de9cf618c4ef2d9febc4c0f7f981135c99"})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xdec, 0x4)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0xc22, @remote}, 0x10)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r0, r6, 0x0, 0x20000023896)

5.771852633s ago: executing program 5 (id=5246):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e000101"], 0x1c}], 0x1}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0)
syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414001824d007241301"], 0x0)

5.744027078s ago: executing program 3 (id=5247):
r0 = socket$inet6(0xa, 0x3, 0x88)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x10000000004e20, 0xcc, @mcast1, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
syz_emit_ethernet(0x83, &(0x7f0000000840)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff020000f4000000000000000000000104"], 0x0)

5.542458371s ago: executing program 3 (id=5248):
unshare(0x28000600) (async, rerun: 32)
r0 = fanotify_init(0x200, 0x0) (rerun: 32)
fanotify_mark(r0, 0x132, 0x40001002, 0xffffffffffffffff, 0x0) (async, rerun: 32)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680)=0xfe) (rerun: 32)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fgetxattr(r1, &(0x7f0000000080)=@known='system.posix_acl_default\x00', &(0x7f0000000740)=""/4093, 0xffd) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4000010, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00007a2000/0x1000)=nil, 0x1000, 0x9)
statx(0xffffffffffffffff, 0x0, 0x400, 0x400, 0x0) (async)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x6b)
close(r2)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x82940, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000d0c332f07700060a0b04000000000000000002000006040004800900010073797a30000000000300020073797a3200000000140000001100010000000000000000000300000a"], 0x58}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60040004}, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async, rerun: 64)
r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000))
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000140)}, 0x10)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x800, @empty, 0x7}, 0xfffffffffffffe32)
mprotect(&(0x7f0000007000/0x1000)=nil, 0x1000, 0xa)

5.163899206s ago: executing program 4 (id=5250):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', 0x0})

5.113253829s ago: executing program 4 (id=5251):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1)
lgetxattr(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)=@known='security.apparmor\x00', 0x0, 0x0)
r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x7fff, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x0, 0x4})
close(r0)
r3 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="3200000008e805000000beb6fcb200050123812000f6d81e2c00", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572301d8f"], 0x38}}, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

5.005282592s ago: executing program 1 (id=5252):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"})
r1 = syz_open_pts(r0, 0x8182)
ioctl$TIOCSSOFTCAR(r1, 0x5434, 0x0)

4.895822738s ago: executing program 4 (id=5253):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x202, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r4, r3, &(0x7f00000000c0)=0x58, 0x5)
socket$unix(0x1, 0x2, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x20044000)
socket(0x2, 0x80805, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r5 = io_uring_setup(0x5c9e, &(0x7f0000000100)={0x0, 0x1000aeba, 0x200, 0x20000a, 0x2000277})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xe}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
close(0x3)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0)
r7 = fsopen(&(0x7f00000029c0)='vfat\x00', 0x0)
fsopen(&(0x7f0000000180)='hfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0)

4.830069877s ago: executing program 1 (id=5254):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000)
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_buf(r1, 0x0, 0x2b, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000140)={0x2d1d, 0x2}, 0x10, 0x0)
landlock_restrict_self(r0, 0x6)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x41, 0x0)
write$P9_RCREATE(r0, &(0x7f0000000000)={0x18, 0x73, 0x1, {{0x4, 0x3, 0x7}, 0x8}}, 0x18)
write$binfmt_misc(r0, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x100000000, 0x7]}})

3.940884237s ago: executing program 1 (id=5255):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7ffff, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
truncate(0x0, 0x26c)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
writev(r0, &(0x7f0000001680)=[{&(0x7f0000000240)="12", 0x1}], 0x1)

3.876350609s ago: executing program 4 (id=5256):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$inet(0xa, 0x801, 0x84)
socket(0x10, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_open_dev$video4linux(&(0x7f0000000300), 0xd4, 0x101a82)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa8, 0x4, 0x7, 0xb61, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x1, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x8d, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x188000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x5, 0x4, 0x6, 0x4009, 0x0, 0x4, 0x9, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x9, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x1, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cc, 0x8, 0x8, 0x1, 0x1fc, 0x2000c5c, 0xffffffff]}})
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4})
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[], 0x14}, 0xc044)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20000000000000d8, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040)={0xc268, 0x0, 0xff, 0x2, 0x200, 0x1c, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.837037116s ago: executing program 5 (id=5257):
syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x9, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@private=0xa010101}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x4, &(0x7f0000006680))
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)

3.76207997s ago: executing program 4 (id=5258):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1f, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x25dfdb7c, {0x0, 0x0, 0x0, 0x0, 0x1607, 0x800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb81000000080045000064000000000001907805000000ac1414aa05009078e00000e0422000000e00000000773263061414aa0c1a0000443400137f000001110000000000000000000000ffffffff00000000ac1414000000000025000000000080000000000000000000"], 0x0) (async, rerun: 32)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (rerun: 32)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x90)
fchdir(r5) (async)
open(&(0x7f0000000100)='./bus\x00', 0x1031c2, 0x20) (async)
set_mempolicy(0x1, &(0x7f0000001880)=0x8, 0xff) (async)
r6 = syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[], 0x0) (async)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) (async, rerun: 32)
r7 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async)
sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)}, 0x880) (async)
syz_clone3(0x0, 0x0)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15)
bpf$MAP_CREATE(0x0, 0x0, 0x0) (async)
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"})
syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000c0000000800000040"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r9}, 0x38) (async)
syz_usb_control_io$sierra_net(r6, 0x0, 0x0)

3.643777555s ago: executing program 5 (id=5259):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ppoll(&(0x7f0000000340)=[{r1, 0x80}], 0x1, &(0x7f0000000480), 0x0, 0x0)
writev(r0, &(0x7f00000028c0)=[{&(0x7f0000002600)='u', 0x4000}, {0x0, 0x2}], 0x2)

3.403152932s ago: executing program 5 (id=5260):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_ifreq(r3, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'})
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2005, &(0x7f0000000600)=0x20002d34, 0x7d, 0x6)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0)
preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0)
socket$inet(0x2, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r4)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000840)={0x70, r7, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa20352ef1dd0a447}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x40090)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r8 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0xa2040, 0x0)
read$FUSE(r9, &(0x7f00000024c0)={0x2020}, 0xfffffec1)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a0, 0x400, 0x400, 0x240, 0x240, 0x0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x128, 0x150, 0x0, {0x7a00000010000000}, [@common=@srh={{0x30}, {0x2b, 0x0, 0x2, 0xa, 0xda, 0x2880, 0x4000}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'dvmrp0\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)

3.177483993s ago: executing program 2 (id=5262):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x6}}]}, 0x1c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipvlan0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0xffffff7e)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_emit_ethernet(0x1de, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd605adf000000000000020000000000000000000000000000fe8000000000000000000000000000aa2234c204"], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000340)={0x1, 0x1fd, 0x7f, 0x0, 0x11})
syz_usb_connect(0x0, 0x24, &(0x7f0000001980)={{0x12, 0x1, 0x111, 0x1, 0x26, 0x55, 0x10, 0x61d, 0xc170, 0x4522, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x4, 0x20, 0x2, "", [{{0x9, 0x4, 0x4, 0x5, 0x0, 0xa1, 0x54, 0xef, 0x1}}]}}]}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
write$vga_arbiter(r5, &(0x7f0000000100)=@other={'lock', ' ', 'mem'}, 0x9)
syz_io_uring_setup(0x63bd, 0x0, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000000))
io_uring_setup(0x1b7b, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

2.971868195s ago: executing program 3 (id=5263):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x6, 0x10}, 0xc)
close(r0)
r4 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={<r6=>0x0, @loopback, @initdev}, &(0x7f0000000680)=0xc)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000007c0)={'sit0\x00', &(0x7f00000006c0)={'syztnl0\x00', <r7=>0x0, 0x700, 0x1, 0x9, 0x80000000, {{0x29, 0x4, 0x1, 0x6, 0xa4, 0x65, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010101, {[@generic={0x83, 0x7, "a89e226939"}, @rr={0x7, 0x23, 0x6f, [@private=0xa010100, @remote, @local, @multicast1, @local, @local, @multicast1, @multicast2]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x7f, [@local, @remote, @multicast1]}, @lsrr={0x83, 0x23, 0x18, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @remote, @local, @remote, @local, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0xa1, 0x1, 0x9, [{@multicast2, 0x9}, {@empty, 0x166}, {@private=0xa010100, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@local, 0x8}]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000800)={'tunl0\x00', <r8=>0x0, 0x8, 0x8000, 0x0, 0x1000, {{0xa, 0x4, 0x1, 0x3c, 0x28, 0x67, 0x0, 0x9, 0x4, 0x0, @loopback, @remote, {[@rr={0x7, 0x13, 0x95, [@multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x2, 0x0}, @multicast2]}]}}}}})
sendmsg$inet(r5, &(0x7f0000000940)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000580)="68fae6638ffc60ecb4f938833af59039fa75f839644897b2b1834c7cdeeebaa479ad8af7a96e3d55348155d4254e142097bce514677c633a4a9cc14c6c011b9943db472d0cf36c5b8b4d2f0b0d997f37", 0x50}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x24}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x24}, @private=0xa010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010102, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2ad}}], 0x78}, 0x4)
ioctl$XFS_IOC_FSINUMBERS(r5, 0xc0205867, &(0x7f0000000540)={&(0x7f0000000000)=0x9, 0x10001, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000500)})

2.485455084s ago: executing program 4 (id=5264):
syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaa5a00000000000000dd604dd318001c0600fc010000000000000000000000000002fe800000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="700200029078fffcfe04f98902040000"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x4000)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[], 0xf0}}, 0x844)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = syz_open_dev$audion(&(0x7f0000000080), 0x3, 0x404840)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0xe0)

2.094763742s ago: executing program 3 (id=5265):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x80, 0xfffffffe, 0xc})
r2 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000880)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b02000105200809c04e143900000000092401fdff0811004708240a0000097f00090401000001022000090401010101022000090501"], 0x0)
syz_usb_control_io$uac2(r2, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="baec231380e8ddbb468d1c9c04f071bea585c77825b3ec882f933d2e77ac3efa3dd9a4d437cd9adcd2b127e9d3cba2b4e0aea5c57f44f9a06b7da9a5d2ceae628c0b27ba02449136f0ce7c22e193baf6eda353ab55058f949f4a35ddcdd7d05b084309086a9c9cdf06460975dc77ec10cd752baf871d4c0f87de"]}, 0x0)
syz_usb_control_io$uac2(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0)
keyctl$session_to_parent(0x12)
keyctl$session_to_parent(0x12)
r6 = fcntl$dupfd(r5, 0x406, r3)
connect$tipc(r6, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x0, 0x3}, 0x1}}, 0x10)
close_range(r4, 0xffffffffffffffff, 0x0)
r7 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x80480, 0x0)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e24, 0x7, @mcast1, 0x6}}}, 0x38)
close_range(r1, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1)
getsockname$packet(r6, &(0x7f0000000280)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14)
bind$packet(r7, &(0x7f0000000340)={0x11, 0xf5, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x48e, 0x0, 0xfff9fffe04006172}]})

1.334819472s ago: executing program 2 (id=5266):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000010000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001"], 0xe4}}, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000010000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001"], 0xe4}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000fcffff0707000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040)
r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe)
r4 = socket(0x15, 0x5, 0x0)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r4)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x24000810)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000006c0), 0x2)
ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000003000002"]) (async)
ioctl$UDMABUF_CREATE_LIST(r6, 0x40087543, &(0x7f0000000780)=ANY=[@ANYBLOB="0000000003000002"])
modify_ldt$write2(0x11, &(0x7f0000000000)={0xb1, 0xffffffffffffffff, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) (async)
modify_ldt$write2(0x11, &(0x7f0000000000)={0xb1, 0xffffffffffffffff, 0x4000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xfffd, 0xf, 0x4000000000000004, 0xa0, 0xfffffffffffffffb, 0xfffffffffffffffd, 0x6, 0xc59}, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async)
ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r7, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78})
r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r8, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}}) (async)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r8, r8}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'streebog512-generic\x00'}})

1.043336932s ago: executing program 2 (id=5267):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @mcast1, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0)
ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000003c0)={<r1=>0xffffffffffffffff})
ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0xfffffffffffffff8)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
r2 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000004580)=[{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000240)="126f364d3558f1096de63bb3d7e13e50f014", 0x12}], 0x1, &(0x7f00000027c0)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18, 0x8000}], 0x1, 0x40)
io_setup(0xff, &(0x7f0000000380)=<r3=>0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x17, 0xd, 0x1, 0x0, "5d4b07e055ef0de38a6377f9e2799589eae4ab"}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELSETELEM={0x80, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x44040}, 0x8841)
io_submit(r3, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r2, &(0x7f0000000340), 0x41}])
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91", 0x100000}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
listns(&(0x7f0000000580)={0x20, 0x0, 0x2, 0x40000000, 0x0, 0xffffffffffffffff}, &(0x7f0000001fc0)=[0x0], 0x1, 0x0)

1.042385056s ago: executing program 5 (id=5268):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0)
r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2)
ftruncate(r2, 0x80079a0)
lseek(r2, 0xfffffffffffffffd, 0x4)
fallocate(0xffffffffffffffff, 0x11, 0x8, 0x2)
readv(r1, &(0x7f000000ad80), 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="0017080000004d5ac8b12b2f3cf2d7681b60eedcc6bfa578027989285936ec52473fd9d3e898f7bf1e1b8c080635298c6fc7e42bb32fdad93bda1d6ec30d8ea91e4d35a6bb6d3503c30edf1a79706f20a21200"/104], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00')
r4 = epoll_create1(0x0)
syz_open_dev$sndctrl(&(0x7f0000000080), 0x7dfb, 0x123c00)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040))
geteuid()
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'})
write$sndseq(r6, &(0x7f00000002c0)=[{0x84, 0xd, 0x20, 0x9, @tick=0x2, {0x0, 0x2}, {0x20}, @control={0x8, 0x3, 0xffff}}], 0x1c)
poll(&(0x7f0000000240)=[{r6, 0x20}], 0x1, 0xfbe)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000480)={0x2, @time={0x1, 0x10000}, 0x7, {0x3, 0xbb}, 0x41, 0x1, 0x9})
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r5, &(0x7f0000009140)={0x2020}, 0x2020)
fgetxattr(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="62747228243dc4"], &(0x7f0000000380)=""/156, 0x9c)
r7 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94)
sendmsg$nl_generic(r3, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x5)

804.44302ms ago: executing program 1 (id=5269):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r3, 0x1)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x1, 0x8}, 0xc)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3b, 0x0, &(0x7f0000000240))
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5})
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @empty, 0x80ad}, 0x1c)
syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x141102)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'hsr0\x00'})
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5) (async)
ptrace(0x10, r5)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='illinois', 0x8)
ptrace$pokeuser(0x6, r5, 0x388, 0x7ffe)

799.271313ms ago: executing program 2 (id=5270):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000140)={@private1, @loopback, 0xe, 0x13}}) (async, rerun: 32)
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async, rerun: 32)
r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000540)={0x4, 0x7, 0x1, {0x3, @pix={0x0, 0x0, 0x34324142, 0x5, 0x2, 0x2, 0x8, 0x6, 0x0, 0x6, 0x0, 0x1}}, 0xfffffe00}) (async)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x33565348, 0x0, 0x0, 0x0, 0x0, 0xfeedcafe, 0x3}}) (async, rerun: 32)
r4 = socket$igmp(0x2, 0x3, 0x2) (rerun: 32)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000100), 0x4) (async)
r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000940)={0x0, &(0x7f0000000540)=[@nested_vmresume={0x130, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0xfc44, 0x6, 0x8}}, @wr_crn={0x67, 0x20, {0x4, 0x5}}, @nested_amd_clgi={0x17f, 0x10}, @out_dx={0x6a, 0x28, {0xc5e8}}, @wr_drn={0x68, 0x20, {0x4, 0x5}}, @wr_crn={0x67, 0x20, {0x2, 0x9}}, @rdmsr={0x66, 0x0, {0x63b}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @uexit={0x0, 0x12, 0x9}, @rdmsr={0x66, 0x18, {0x382}}, @nested_amd_inject_event={0x180, 0x7, {0x0, 0x33, 0x3, 0x5, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0xbd8c}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x1, 0xc}}, @nested_load_code={0x12e, 0x6c, {0x0, "66baf80cb8da26638eef66bafc0c66ed0f0f2d0c0000008ec4e2ed014c300866b873008ee066baf80cb8d4b34f89ef66bafc0ced0f0766b869008ee866b8d8008ec0360f2158b9800000c00f3235000400000f30"}}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @cpuid={0x64, 0x18, {0x7, 0xffff}}, @in_dx={0x69, 0x20, {0xa1d5, 0x7}}, @nested_load_code={0x12e, 0x54, {0x3, "f2440f40d4f247d91866b810018ee026430f205966baf80cb84f792b8aef66bafc0cecf247c0d70066450f78c00a000f78cc0f78ba005000000f01c4"}}, @nested_load_code={0x12e, 0x88, {0x3, "e0a8460fc75f00660f3880630a48b875ad0000000000000f23d00f21f835300000070f23f8c744240000000100c74424020a000000c7442406000000000f011424440f32477ee3c74424002c985b44c744240209000000c7442406000000000f011c24430f219dc4817810a824b20000"}}], 0x370})
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202)

514.232143ms ago: executing program 1 (id=5271):
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$netlink(0x10, 0x3, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket(0x400000000010, 0x2, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402)
socket$inet_sctp(0x2, 0x3, 0x84)
socket$unix(0x1, 0x1, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
inotify_init() (async)
inotify_init()
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000080)=ANY=[])
inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x500016e)
lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00')
socket$unix(0x1, 0x1, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.stat\x00', 0x26e1, 0x0) (async)
r4 = openat$cgroup_ro(r2, &(0x7f0000000280)='cpuacct.stat\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
sendmsg$inet(r5, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20000000000000000000000007000000071006"], 0x20}, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x4) (async)
ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x4)
write$evdev(r1, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES32=r7, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x240400e1}, 0x4000) (async)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRES64=r3, @ANYRES32=r7, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x240400e1}, 0x4000)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={<r9=>0x0, 0xbc, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e22, 0x20000d, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffb}, @in6={0xa, 0x4e23, 0x5, @loopback, 0xf}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x9c, @empty, 0x2}, @in6={0xa, 0x4e20, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}, @in={0x2, 0x4e23, @empty}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={<r10=>r9, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84)
write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0', [{0x20, '@'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '/[%\x15'}, {0x20, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x20, 'bonQ0\x00\x92or\x91\xed\xe6\xca\xde\xffa\x80?@\x13\xf8\xc9\xa6\x8fdWek\a\x03y\xef\x1c\\M\xb9c\xe7\x8eeW\xae\x15\x1e\x9e\x1bUZU\v\xa5\x87\xb8O\n\x008\x92\xaa\x98\xf2&\xf8j\x87?\x80(\xdfnW\xfdi\x1f\xe8\x9a\xd6V\xb3\xe9\xef,?\xa4\xa4\xc4\xed=\t\xf9\xc1]\x9c\xde\x97k\x81o\xd2\xe2\x18\x0e\xb4Ga\x92\x1b\xa3Ac\x18\xff\xb2:\x14!\x18\xabBFO\xc1\xe3\x87z\xdc\x94\xd7\xb6\x9dh\xc7h\xc3\xafn3}\x82\x89?\xb8\xcf\b&s\xac@\f\xfa\x8e\xe8\x1b=\f|\xdd\x93\x1e\x96\x98\xd2\x0fRg\xb4\xef'}, {0x20, 'bond0\x00'}], 0xa, "2127e80a18e39c11e2db18e39e247ed2f93fe500c88c0c1fa127299ba3cc0885"}, 0x106)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r10, @in6={{0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x84)

481.733665ms ago: executing program 2 (id=5272):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xe, 0x9, 0x0, 0x0, @remote, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x700, 0x3c0f, 0x3, 0x77f87505}}) (fail_nth: 2)

0s ago: executing program 2 (id=5273):
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_inet_SIOCGARP(r0, 0x89a3, &(0x7f0000000340)={{0x3a, 0x0, @private}, {0x0, @multicast}, 0x0, {0x2, 0x0, @remote}})
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) (async)
r1 = socket(0x10, 0x3, 0x1000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x20004800) (async, rerun: 32)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) (rerun: 32)

kernel console output (not intermixed with test programs):

 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1494.030972][T20319] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1494.041282][T20319] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1494.050648][T20319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1494.063656][T26158] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1494.075252][T20319] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1494.136750][    T9] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1494.256696][ T5725] usb 5-1: new low-speed USB device number 123 using dummy_hcd
[ 1494.282777][T26158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1494.300134][T26158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1494.321288][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1494.352580][    T9] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1494.391912][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1494.396992][ T5725] usb 5-1: device descriptor read/64, error -71
[ 1494.411911][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.425326][T20319] usb 4-1: USB disconnect, device number 41
[ 1494.448018][    T9] usb 3-1: Product: syz
[ 1494.459836][    T9] usb 3-1: Manufacturer: syz
[ 1494.474247][    T9] usb 3-1: SerialNumber: syz
[ 1494.502766][T26169] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1494.520722][ T5725] usb usb5-port1: attempt power cycle
[ 1494.606767][ T5718] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1494.734276][T26169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1494.748018][T26169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1494.757893][ T5718] usb 6-1: Using ep0 maxpacket: 16
[ 1494.781555][ T5718] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1494.807523][ T5718] usb 6-1: config 0 has an invalid interface descriptor of length 8, skipping
[ 1494.817307][ T5718] usb 6-1: config 0 descriptor has 1 excess byte, ignoring
[ 1494.829766][ T5718] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1494.842623][ T5718] usb 6-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90
[ 1494.852882][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1494.863831][ T5718] usb 6-1: Product: syz
[ 1494.876748][ T5718] usb 6-1: Manufacturer: syz
[ 1494.883764][ T5725] usb 5-1: new low-speed USB device number 124 using dummy_hcd
[ 1494.886131][ T5718] usb 6-1: SerialNumber: syz
[ 1494.911421][ T5718] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1494.919958][ T5725] usb 5-1: device descriptor read/8, error -71
[ 1494.929588][ T5718] r8152-cfgselector 6-1: config 0 descriptor??
[ 1495.163408][ T5718] r8152-cfgselector 6-1: USB disconnect, device number 56
[ 1495.176962][ T5725] usb 5-1: new low-speed USB device number 125 using dummy_hcd
[ 1495.220590][ T5725] usb 5-1: device descriptor read/8, error -71
[ 1495.337219][ T5725] usb usb5-port1: unable to enumerate USB device
[ 1495.434301][ T5718] IPVS: starting estimator thread 0...
[ 1495.530274][T26194] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1496.036810][ T5725] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[ 1496.096697][T10771] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1496.199083][ T5725] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[ 1496.207509][ T5725] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[ 1496.216238][ T5725] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[ 1496.226655][ T5725] usb 6-1: config 8 has no interface number 0
[ 1496.233435][ T5725] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1496.246731][T10771] usb 4-1: Using ep0 maxpacket: 32
[ 1496.254680][T10771] usb 4-1: config 0 has an invalid descriptor of length 94, skipping remainder of the config
[ 1496.266857][T10771] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1496.276443][ T5725] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[ 1496.285885][ T5725] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1496.294260][ T5725] usb 6-1: Product: syz
[ 1496.300633][ T5725] usb 6-1: Manufacturer: syz
[ 1496.305489][ T5725] usb 6-1: SerialNumber: syz
[ 1496.311869][T10771] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[ 1496.323011][T10771] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[ 1496.337922][T10771] usb 4-1: Product: syz
[ 1496.344239][T10771] usb 4-1: Manufacturer: syz
[ 1496.351058][T10771] usb 4-1: SerialNumber: syz
[ 1496.359653][T10771] usb 4-1: config 0 descriptor??
[ 1496.555177][ T5725] usb 6-1: USB disconnect, device number 57
[ 1496.640188][T26204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1496.656534][T26204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1496.911371][    T9] cdc_ether 3-1:1.0: Descriptor too short
[ 1496.917386][T26169] vivid-004: reconnect
[ 1496.941703][    T9] usb 3-1: USB disconnect, device number 119
[ 1497.103164][T26215] netlink: 'syz.2.5089': attribute type 2 has an invalid length.
[ 1497.892034][ T5718] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1498.066699][ T5718] usb 3-1: Using ep0 maxpacket: 16
[ 1498.078564][ T5718] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 1498.097539][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1498.119599][ T5718] usb 3-1: config 0 descriptor??
[ 1498.135351][ T5718] gspca_main: sonixj-2.14.0 probing 0471:0327
[ 1498.157051][    T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 1498.297187][ T5725] usb 5-1: new high-speed USB device number 126 using dummy_hcd
[ 1498.311411][T26235] tipc: Started in network mode
[ 1498.316998][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1498.318639][T26235] tipc: Node identity 62737303764b, cluster identity 4711
[ 1498.332188][    T9] usb 2-1: config 0 has an invalid interface number: 119 but max is 0
[ 1498.340551][T26235] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1498.347652][T26235] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1498.357264][    T9] usb 2-1: config 0 has no interface number 0
[ 1498.363764][    T9] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1498.375244][    T9] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83
[ 1498.387260][    T9] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1498.398726][    T9] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1498.439796][T26234] tipc: Disabling bearer <eth:syzkaller0>
[ 1498.453157][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[ 1498.462611][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.471092][    T9] usb 2-1: Product: syz
[ 1498.475368][    T9] usb 2-1: Manufacturer: syz
[ 1498.480093][    T9] usb 2-1: SerialNumber: syz
[ 1498.487102][ T5725] usb 5-1: Using ep0 maxpacket: 32
[ 1498.494581][ T5725] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1498.501255][    T9] usb 2-1: config 0 descriptor??
[ 1498.522156][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1498.543292][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1498.565751][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1498.597935][ T5725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1498.616135][ T5725] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1498.632265][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1498.641015][ T5725] usb 5-1: Product: syz
[ 1498.645342][ T5725] usb 5-1: Manufacturer: syz
[ 1498.652696][ T5725] usb 5-1: SerialNumber: syz
[ 1498.666925][ T5725] usb 5-1: config 0 descriptor??
[ 1498.673685][    T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input150
[ 1498.845478][    T9] usb 4-1: USB disconnect, device number 42
[ 1498.897345][T21975] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1498.931357][T21954] usb 2-1: USB disconnect, device number 123
[ 1498.963058][T26229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5094'.
[ 1499.061097][T21975] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1499.062370][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5100'.
[ 1499.082506][T26243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5100'.
[ 1499.095423][ T5725] input input151: Device does not respond to id packet M
[ 1499.112534][T21975] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1499.115934][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5100'.
[ 1499.137654][T26243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5100'.
[ 1499.146699][T21975] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 255, using maximum allowed: 30
[ 1499.146835][T21975] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1499.193542][T21975] usb 6-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40
[ 1499.215611][T21975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1499.227814][T21975] usb 6-1: Product: syz
[ 1499.232053][T21975] usb 6-1: Manufacturer: syz
[ 1499.239337][T21975] usb 6-1: SerialNumber: syz
[ 1499.284760][ T5725] input input151: Device does not respond to id packet P
[ 1499.465220][T26238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1499.476895][T26238] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1499.496831][ T5725] iforce 5-1:0.0: usb_submit_urb failed: -71
[ 1499.500929][T26252] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5103'.
[ 1499.512516][T26252] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5103'.
[ 1499.523575][ T5725] input input151: Device does not respond to id packet B
[ 1499.547078][ T5725] iforce 5-1:0.0: usb_submit_urb failed: -71
[ 1499.557004][ T5725] input input151: Device does not respond to id packet N
[ 1499.583321][ T5725] iforce 5-1:0.0: usb_submit_urb failed: -71
[ 1499.596169][T21975] usb 6-1: 0:2 : does not exist
[ 1499.607539][ T5725] iforce 5-1:0.0: usb_submit_urb failed: -71
[ 1499.628248][ T5725] iforce 5-1:0.0: usb_submit_urb failed: -71
[ 1499.648983][ T5725] iforce 5-1:0.0: usb_submit_urb failed: -71
[ 1499.667076][ T5725] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input151
[ 1499.741037][ T5725] usb 5-1: USB disconnect, device number 126
[ 1499.765753][T21975] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71
[ 1499.776407][T21975] usb 6-1: USB disconnect, device number 58
[ 1499.814912][T20923] udevd[20923]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1499.817884][T21164] udevd[21164]: setting mode of /dev/bus/usb/005/126 to 020664 failed: No such file or directory
[ 1499.817988][T21164] udevd[21164]: setting owner of /dev/bus/usb/005/126 to uid=0, gid=0 failed: No such file or directory
[ 1499.966815][ T5718] gspca_sonixj: i2c_w8 err -110
[ 1500.006761][ T5718] sonixj 3-1:0.0: probe with driver sonixj failed with error -110
[ 1500.231351][T26267] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1500.239866][T26267] syzkaller0: entered promiscuous mode
[ 1500.248913][T26267] syzkaller0: entered allmulticast mode
[ 1500.261384][T26267] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[ 1500.311620][T26267] tipc: Resetting bearer <eth:syzkaller0>
[ 1500.343362][T26266] tipc: Resetting bearer <eth:syzkaller0>
[ 1500.411210][T26272] FAULT_INJECTION: forcing a failure.
[ 1500.411210][T26272] name failslab, interval 1, probability 0, space 0, times 0
[ 1500.446711][T26272] CPU: 0 UID: 0 PID: 26272 Comm: syz.3.5109 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1500.446744][T26272] Tainted: [L]=SOFTLOCKUP
[ 1500.446753][T26272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1500.446765][T26272] Call Trace:
[ 1500.446774][T26272]  <TASK>
[ 1500.446784][T26272]  dump_stack_lvl+0xe8/0x150
[ 1500.446815][T26272]  should_fail_ex+0x412/0x560
[ 1500.446845][T26272]  should_failslab+0xa8/0x100
[ 1500.446869][T26272]  __kmalloc_cache_noprof+0x88/0x660
[ 1500.446897][T26272]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[ 1500.446922][T26272]  ? sctp_add_bind_addr+0x8c/0x370
[ 1500.446949][T26272]  sctp_add_bind_addr+0x8c/0x370
[ 1500.446975][T26272]  sctp_copy_local_addr_list+0x314/0x4f0
[ 1500.447001][T26272]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[ 1500.447023][T26272]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1500.447048][T26272]  ? sctp_v6_is_any+0x64/0x80
[ 1500.447072][T26272]  ? sctp_copy_one_addr+0x93/0x360
[ 1500.447097][T26272]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1500.447120][T26272]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1500.447163][T26272]  sctp_connect_new_asoc+0x2ff/0x6b0
[ 1500.447194][T26272]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1500.447229][T26272]  ? __local_bh_enable_ip+0xd0/0x130
[ 1500.447249][T26272]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1500.447282][T26272]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1500.447314][T26272]  sctp_sendmsg+0x1576/0x2c50
[ 1500.447338][T26272]  ? unwind_next_frame+0xa6/0x2550
[ 1500.447379][T26272]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1500.447421][T26272]  ? aa_sk_perm+0x6d5/0x900
[ 1500.447457][T26272]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1500.447500][T26272]  ? sock_rps_record_flow+0x19/0x350
[ 1500.447525][T26272]  ? inet_sendmsg+0x2f4/0x370
[ 1500.447551][T26272]  ____sys_sendmsg+0x80a/0x9f0
[ 1500.447579][T26272]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1500.447608][T26272]  ? import_iovec+0x73/0xa0
[ 1500.447635][T26272]  ___sys_sendmsg+0x2a5/0x360
[ 1500.447652][T26272]  ? __lock_acquire+0x6b5/0x2cf0
[ 1500.447677][T26272]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1500.447731][T26272]  ? __fget_files+0x2a/0x420
[ 1500.447754][T26272]  ? __fget_files+0x3a0/0x420
[ 1500.447787][T26272]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1500.447809][T26272]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1500.447836][T26272]  ? __pfx_ksys_write+0x10/0x10
[ 1500.447869][T26272]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1500.447888][T26272]  do_syscall_64+0x174/0x580
[ 1500.447908][T26272]  ? trace_irq_disable+0x3b/0x140
[ 1500.447935][T26272]  ? clear_bhb_loop+0x40/0x90
[ 1500.447958][T26272]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1500.447977][T26272] RIP: 0033:0x7f6aa279ce59
[ 1500.447994][T26272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1500.448011][T26272] RSP: 002b:00007f6aa3717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1500.448030][T26272] RAX: ffffffffffffffda RBX: 00007f6aa2a15fa0 RCX: 00007f6aa279ce59
[ 1500.448044][T26272] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003
[ 1500.448055][T26272] RBP: 00007f6aa3717090 R08: 0000000000000000 R09: 0000000000000000
[ 1500.448067][T26272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1500.448078][T26272] R13: 00007f6aa2a16038 R14: 00007f6aa2a15fa0 R15: 00007f6aa2b3fa48
[ 1500.448109][T26272]  </TASK>
[ 1500.451827][T26266] tipc: Disabling bearer <eth:syzkaller0>
[ 1500.912033][T21954] usb 3-1: USB disconnect, device number 120
[ 1500.918517][ T5718] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1501.136664][ T5718] usb 5-1: Using ep0 maxpacket: 32
[ 1501.157724][ T5718] usb 5-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1501.176696][ T5718] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1501.188380][ T5718] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1501.197801][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1501.206349][ T5718] usb 5-1: Product: syz
[ 1501.218395][ T5718] usb 5-1: Manufacturer: ⿯盬�橋匍ﳗ鑾赾�伭鵴艻ও곋
[ 1501.269178][ T5718] usb 5-1: SerialNumber: syz
[ 1501.310273][T26270] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 1501.322184][T21954] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1501.327404][T21975] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1501.492903][T21954] usb 3-1: Using ep0 maxpacket: 32
[ 1501.517602][T21975] usb 4-1: too many configurations: 65, using maximum allowed: 8
[ 1501.525484][T21954] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[ 1501.528954][T21975] usb 4-1: config 0 has no interfaces?
[ 1501.542382][T21975] usb 4-1: config 0 has no interfaces?
[ 1501.544330][T21954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1501.550647][T21975] usb 4-1: config 0 has no interfaces?
[ 1501.589426][T21975] usb 4-1: config 0 has no interfaces?
[ 1501.599109][T21975] usb 4-1: config 0 has no interfaces?
[ 1501.604854][T21954] usb 3-1: Product: syz
[ 1501.613474][T21975] usb 4-1: config 0 has no interfaces?
[ 1501.625439][T21975] usb 4-1: config 0 has no interfaces?
[ 1501.634397][T21975] usb 4-1: config 0 has no interfaces?
[ 1501.644343][T21975] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[ 1501.644610][T21954] usb 3-1: Manufacturer: syz
[ 1501.667023][T21975] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1501.705787][T21975] usb 4-1: config 0 descriptor??
[ 1501.715771][T21548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1501.734195][T21954] usb 3-1: SerialNumber: syz
[ 1501.756988][T21954] usb 3-1: config 0 descriptor??
[ 1501.801958][T21954] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[ 1501.934786][T21975] usb 4-1: USB disconnect, device number 43
[ 1502.028563][T21548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1502.257125][T21548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1502.432038][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1502.453728][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1502.463900][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1502.479149][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1502.493532][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1502.574037][T21548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1502.976911][T20319] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 1503.146775][T20319] usb 6-1: Using ep0 maxpacket: 8
[ 1503.163725][T20319] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1503.191858][T20319] usb 6-1: config 6 has an invalid interface number: 172 but max is 0
[ 1503.209939][T20319] usb 6-1: config 6 has no interface number 0
[ 1503.226522][T20319] usb 6-1: config 6 interface 172 has no altsetting 0
[ 1503.262934][T20319] usb 6-1: language id specifier not provided by device, defaulting to English
[ 1503.299432][T20319] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=76.1a
[ 1503.334141][T20319] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.364832][T20319] usb 6-1: Product: п“ї
[ 1503.375571][T20319] usb 6-1: Manufacturer: а Ѓ
[ 1503.377315][T21954] gspca_ov534_9: reg_w failed -110
[ 1503.397641][T20319] usb 6-1: SerialNumber: 緓ʙ⾭씖烟ᔙ륙钔യ柝迒᫳职规ӊ貱苷G눣䵡笒ບ쾶잽玆￳
[ 1503.446085][T21548] bridge_slave_1: left allmulticast mode
[ 1503.459189][T21548] bridge_slave_1: left promiscuous mode
[ 1503.478305][T21548] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1503.513695][T21548] bridge_slave_0: left allmulticast mode
[ 1503.533944][T21548] bridge_slave_0: left promiscuous mode
[ 1503.548524][T21548] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1503.696893][T21954] gspca_ov534_9: Unknown sensor 0000
[ 1503.696986][T21954] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22
[ 1504.098613][ T5718] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 127 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 1504.148359][ T5718] usb 5-1: USB disconnect, device number 127
[ 1504.175858][T21954] usb 3-1: USB disconnect, device number 121
[ 1504.198783][ T5718] usblp0: removed
[ 1504.334070][T23134] IPVS: starting estimator thread 0...
[ 1504.352228][T21548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1504.400961][T21548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1504.437471][T26328] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1504.452323][T21548] bond0 (unregistering): Released all slaves
[ 1504.576705][ T5649] Bluetooth: hci2: command tx timeout
[ 1504.601775][T20319] usb_8dev 6-1:6.172 can0: sending command message failed
[ 1504.613915][T21954] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1504.618251][T20319] usb_8dev 6-1:6.172 can0: can't get firmware version
[ 1504.798632][T20319] usb_8dev 6-1:6.172: probe with driver usb_8dev failed with error -22
[ 1504.836161][T20319] usb 6-1: USB disconnect, device number 59
[ 1504.849042][T21954] usb 3-1: Using ep0 maxpacket: 32
[ 1504.915936][T21954] usb 3-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[ 1504.963599][T21954] usb 3-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1505.006430][T21954] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1505.013521][T21954] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00
[ 1505.022891][T21954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1505.039556][T21954] usb 3-1: config 0 descriptor??
[ 1505.087680][T21954] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1505.474563][T26301] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1505.510697][T26301] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1505.539937][T26301] bridge_slave_0: entered allmulticast mode
[ 1505.579257][T26301] bridge_slave_0: entered promiscuous mode
[ 1505.619973][T26301] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1505.636760][T26301] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1505.658458][T26301] bridge_slave_1: entered allmulticast mode
[ 1505.683424][T26301] bridge_slave_1: entered promiscuous mode
[ 1505.715288][T21548] hsr_slave_0: left promiscuous mode
[ 1505.722543][T21548] hsr_slave_1: left promiscuous mode
[ 1505.731879][T21548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1505.758887][T21548] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1505.785858][T21548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1505.806341][T21548] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1505.853417][T21548] veth1_macvtap: left promiscuous mode
[ 1505.865807][T21548] veth0_macvtap: left promiscuous mode
[ 1505.873319][T21548] veth1_vlan: left promiscuous mode
[ 1505.878701][T21548] veth0_vlan: left promiscuous mode
[ 1506.348660][ T5642] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1506.372846][ T5642] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1506.382645][ T5642] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1506.391959][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1506.399662][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1506.623881][T21548] team0 (unregistering): Port device team_slave_1 removed
[ 1506.644137][T21548] team0 (unregistering): Port device team_slave_0 removed
[ 1506.651433][ T5642] Bluetooth: hci2: command tx timeout
[ 1506.964440][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1507.131721][T26301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1507.203253][T26301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1507.276391][ T5725] usb 3-1: USB disconnect, device number 122
[ 1507.492775][T26301] team0: Port device team_slave_0 added
[ 1507.515714][T26301] team0: Port device team_slave_1 added
[ 1507.549847][T21548] IPVS: stop unused estimator thread 0...
[ 1507.694334][T26301] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1507.751320][T26301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1507.873576][T26301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1507.920003][T26301] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1507.948709][T26301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1507.986029][ T5718] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 1508.026465][T26301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1508.169957][ T5718] usb 6-1: Using ep0 maxpacket: 32
[ 1508.206136][ T5718] usb 6-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1508.258318][ T5718] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1508.282930][ T5718] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1508.320218][ T5718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1508.389409][ T5718] usb 6-1: Product: syz
[ 1508.418046][ T5718] usb 6-1: Manufacturer: ⿯盬�橋匍ﳗ鑾赾�伭鵴艻ও곋
[ 1508.427939][T26395] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5136'.
[ 1508.472599][ T5718] usb 6-1: SerialNumber: syz
[ 1508.487559][ T5642] Bluetooth: hci3: command tx timeout
[ 1508.520908][T26380] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1508.727254][ T5642] Bluetooth: hci2: command tx timeout
[ 1508.747068][T21548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1508.812471][T21548] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.089901][T26301] hsr_slave_0: entered promiscuous mode
[ 1509.122083][T26411] FAULT_INJECTION: forcing a failure.
[ 1509.122083][T26411] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1509.136542][T26301] hsr_slave_1: entered promiscuous mode
[ 1509.179082][T26411] CPU: 1 UID: 0 PID: 26411 Comm: syz.2.5135 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1509.179111][T26411] Tainted: [L]=SOFTLOCKUP
[ 1509.179119][T26411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1509.179131][T26411] Call Trace:
[ 1509.179139][T26411]  <TASK>
[ 1509.179147][T26411]  dump_stack_lvl+0xe8/0x150
[ 1509.179175][T26411]  should_fail_ex+0x412/0x560
[ 1509.179201][T26411]  _copy_from_user+0x2d/0xb0
[ 1509.179226][T26411]  sock_do_ioctl+0x195/0x320
[ 1509.179252][T26411]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1509.179274][T26411]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 1509.179311][T26411]  sock_ioctl+0x5c6/0x7f0
[ 1509.179335][T26411]  ? __pfx_sock_ioctl+0x10/0x10
[ 1509.179358][T26411]  ? __fget_files+0x2a/0x420
[ 1509.179379][T26411]  ? __fget_files+0x3a0/0x420
[ 1509.179402][T26411]  ? __fget_files+0x2a/0x420
[ 1509.179428][T26411]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1509.179460][T26411]  ? __pfx_sock_ioctl+0x10/0x10
[ 1509.179481][T26411]  __se_sys_ioctl+0xfc/0x170
[ 1509.179509][T26411]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.179529][T26411]  do_syscall_64+0x174/0x580
[ 1509.179549][T26411]  ? trace_irq_disable+0x3b/0x140
[ 1509.179577][T26411]  ? clear_bhb_loop+0x40/0x90
[ 1509.179600][T26411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1509.179619][T26411] RIP: 0033:0x7f6b0a59ce59
[ 1509.179637][T26411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1509.179661][T26411] RSP: 002b:00007f6b0b490028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1509.179681][T26411] RAX: ffffffffffffffda RBX: 00007f6b0a816180 RCX: 00007f6b0a59ce59
[ 1509.179695][T26411] RDX: 0000200000000180 RSI: 0000000000008946 RDI: 0000000000000003
[ 1509.179708][T26411] RBP: 00007f6b0b490090 R08: 0000000000000000 R09: 0000000000000000
[ 1509.179720][T26411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1509.179731][T26411] R13: 00007f6b0a816218 R14: 00007f6b0a816180 R15: 00007f6b0a93fa48
[ 1509.179757][T26411]  </TASK>
[ 1509.179841][T26301] debugfs: 'hsr0' already exists in 'hsr'
[ 1509.446954][T26301] Cannot create hsr debugfs directory
[ 1509.480953][   T30] kauditd_printk_skb: 72 callbacks suppressed
[ 1509.480972][   T30] audit: type=1326 audit(1781032921.491:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1509.551438][   T30] audit: type=1326 audit(1781032921.531:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1509.656323][   T30] audit: type=1326 audit(1781032921.531:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1509.703448][   T30] audit: type=1326 audit(1781032921.531:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1509.743418][   T30] audit: type=1326 audit(1781032921.531:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1509.771286][   T30] audit: type=1326 audit(1781032921.531:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1509.800905][T21548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1509.811298][T21548] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.830526][   T30] audit: type=1326 audit(1781032921.531:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1509.855637][   T30] audit: type=1326 audit(1781032921.531:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1509.859708][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1509.937732][   T30] audit: type=1326 audit(1781032921.531:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1509.963397][   T30] audit: type=1326 audit(1781032921.651:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26394 comm="syz.3.5136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aa279ce59 code=0x7ffc0000
[ 1510.068695][T26418] sctp: [Deprecated]: syz.2.5137 (pid 26418) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1510.068695][T26418] Use struct sctp_sack_info instead
[ 1510.311908][T21548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1510.355994][T21548] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1510.397319][T23134] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1510.556354][T23134] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[ 1510.556378][T23134] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1510.556392][T23134] usb 3-1: config 0 has no interface number 0
[ 1510.556798][T23134] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[ 1510.556840][T23134] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1510.556858][T23134] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1510.559213][T23134] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1510.559258][T23134] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1510.559273][T23134] usb 3-1: Product: syz
[ 1510.559284][T23134] usb 3-1: Manufacturer: syz
[ 1510.559308][T23134] usb 3-1: SerialNumber: syz
[ 1510.561687][T23134] usb 3-1: config 0 descriptor??
[ 1510.578114][ T5642] Bluetooth: hci3: command tx timeout
[ 1510.600288][T21548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1510.603048][T21548] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1510.794413][T26366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1510.794606][T26366] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1510.794763][T26366] bridge_slave_0: entered allmulticast mode
[ 1510.800325][T26366] bridge_slave_0: entered promiscuous mode
[ 1510.807119][ T5642] Bluetooth: hci2: command tx timeout
[ 1510.833902][T26366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1510.834055][T26366] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1510.838982][T26366] bridge_slave_1: entered allmulticast mode
[ 1510.848430][T26366] bridge_slave_1: entered promiscuous mode
[ 1511.061741][ T5718] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 1511.079913][ T5718] usb 6-1: USB disconnect, device number 60
[ 1511.089333][ T5718] usblp0: removed
[ 1511.228598][T26366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1511.242658][T26366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1511.636271][T26366] team0: Port device team_slave_0 added
[ 1511.667387][T26366] team0: Port device team_slave_1 added
[ 1511.966882][    T9] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[ 1512.042102][T26366] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1512.042118][T26366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1512.042139][T26366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1512.044757][T26366] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1512.044768][T26366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1512.044786][T26366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1512.117154][    T9] usb 6-1: Using ep0 maxpacket: 32
[ 1512.189996][    T9] usb 6-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1512.190023][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[ 1512.197213][T26366] hsr_slave_0: entered promiscuous mode
[ 1512.199447][T26366] hsr_slave_1: entered promiscuous mode
[ 1512.201894][T26366] debugfs: 'hsr0' already exists in 'hsr'
[ 1512.201910][T26366] Cannot create hsr debugfs directory
[ 1512.358353][T21548] bridge_slave_1: left allmulticast mode
[ 1512.358372][T21548] bridge_slave_1: left promiscuous mode
[ 1512.358566][T21548] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1512.361456][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1512.361474][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1512.361505][    T9] usb 6-1: Product: syz
[ 1512.361515][    T9] usb 6-1: Manufacturer: ⿯盬�橋匍ﳗ鑾赾�伭鵴艻ও곋
[ 1512.361547][    T9] usb 6-1: SerialNumber: syz
[ 1512.374581][T26439] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1512.384437][T21548] bridge_slave_0: left allmulticast mode
[ 1512.384456][T21548] bridge_slave_0: left promiscuous mode
[ 1512.384666][T21548] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1512.662523][ T5642] Bluetooth: hci3: command tx timeout
[ 1513.011966][T23134] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1513.018199][T23134] usb 3-1: USB disconnect, device number 123
[ 1513.071627][T21548] team0: Port device bond0 removed
[ 1513.094188][T21548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1513.097881][T21548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1513.108663][T21548] bond0 (unregistering): Released all slaves
[ 1513.115889][T21548] bond1 (unregistering): Released all slaves
[ 1513.385580][T21548] tipc: Left network mode
[ 1513.920038][T21548] hsr_slave_0: left promiscuous mode
[ 1513.922335][T21548] hsr_slave_1: left promiscuous mode
[ 1513.923602][T21548] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1513.923648][T21548] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1513.928746][T21548] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1513.928767][T21548] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1513.965393][T21548] veth1_macvtap: left promiscuous mode
[ 1513.965463][T21548] veth0_macvtap: left promiscuous mode
[ 1513.965574][T21548] veth1_vlan: left promiscuous mode
[ 1513.965617][T21548] veth0_vlan: left promiscuous mode
[ 1514.527634][ T5718] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1514.698821][ T5718] usb 3-1: Using ep0 maxpacket: 32
[ 1514.727380][ T5642] Bluetooth: hci3: command tx timeout
[ 1514.746447][ T5718] usb 3-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1514.746496][ T5718] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1514.756595][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[ 1514.766547][ T5718] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1514.766680][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1514.766704][ T5718] usb 3-1: Product: syz
[ 1514.766714][ T5718] usb 3-1: Manufacturer: ⿯盬�橋匍ﳗ鑾赾�伭鵴艻ও곋
[ 1514.766727][ T5718] usb 3-1: SerialNumber: syz
[ 1514.811090][T26464] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1515.272453][T21548] team0 (unregistering): Port device team_slave_1 removed
[ 1515.381590][    T9] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 1515.395836][T21548] team0 (unregistering): Port device team_slave_0 removed
[ 1515.444495][    T9] usb 6-1: USB disconnect, device number 61
[ 1515.483483][    T9] usblp0: removed
[ 1515.967579][    T9] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[ 1516.159829][    T9] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1516.197091][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1516.230726][    T9] usb 6-1: Product: syz
[ 1516.251541][    T9] usb 6-1: Manufacturer: syz
[ 1516.268838][    T9] usb 6-1: SerialNumber: syz
[ 1516.277694][ T5294] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1516.304487][    T9] usb 6-1: config 0 descriptor??
[ 1516.351356][    T9] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1517.047943][    T9] gspca_sunplus: reg_w_riv err -110
[ 1517.063826][    T9] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[ 1517.246044][T26301] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1517.275254][T26301] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1517.309396][T23134] usb 6-1: USB disconnect, device number 62
[ 1517.330363][T26301] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1517.348830][T26301] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1517.404139][T26301] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1517.440417][T26301] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1517.456983][T20319] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1517.499242][T26301] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1517.533884][T26301] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1517.630377][T20319] usb 4-1: Using ep0 maxpacket: 16
[ 1517.666000][T20319] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1517.698891][T20319] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1517.727074][T20319] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1517.759289][T20319] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1517.794269][T20319] usb 4-1: config 7 interface 0 has no altsetting 0
[ 1517.812747][T20319] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[ 1517.837946][T20319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1518.192652][ T5718] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 124 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[ 1518.235370][ T5718] usb 3-1: USB disconnect, device number 124
[ 1518.299928][ T5718] usblp0: removed
[ 1518.503869][T26484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1518.505542][T26484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1518.531119][T20319] hid (null): unknown global tag 0xd
[ 1518.603426][T20319] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.007D/input/input153
[ 1518.733799][T20319] kye 0003:0458:5010.007D: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0
[ 1518.817476][ T5718] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1518.955482][T26301] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1518.984379][ T5718] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1518.984411][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1518.984433][ T5718] usb 3-1: Product: syz
[ 1518.984449][ T5718] usb 3-1: Manufacturer: syz
[ 1518.984528][ T5718] usb 3-1: SerialNumber: syz
[ 1518.988457][ T5718] usb 3-1: config 0 descriptor??
[ 1519.152431][T26301] 8021q: adding VLAN 0 to HW filter on device team0
[ 1519.199286][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1519.199434][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1519.302053][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1519.302165][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1519.639751][ T5718] usb 3-1: Firmware version (0.0) predates our first public release.
[ 1519.665428][ T5718] usb 3-1: Please update to version 0.2 or newer
[ 1519.784580][ T5726] usb 4-1: USB disconnect, device number 44
[ 1519.810613][ T5718] usb 3-1: USB disconnect, device number 125
[ 1519.888583][T26301] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1520.101229][T26366] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1520.129100][T26366] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1520.137828][T26366] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1520.165576][T26366] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1520.227063][T26366] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1520.282185][T26366] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1520.315419][T26366] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1520.349724][T26366] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1520.402485][T26539] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5150'.
[ 1520.679248][T26301] veth0_vlan: entered promiscuous mode
[ 1520.903045][T10157] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1520.975428][T26301] veth1_vlan: entered promiscuous mode
[ 1521.212372][T10157] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1521.433633][T26301] veth0_macvtap: entered promiscuous mode
[ 1521.522964][ T5649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1521.550625][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1521.559899][ T5649] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1521.584509][ T5649] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1521.594444][ T5649] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1521.697167][    T9] usb 3-1: new full-speed USB device number 126 using dummy_hcd
[ 1521.718329][T10157] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1521.761842][T26301] veth1_macvtap: entered promiscuous mode
[ 1521.822460][T26366] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1521.860207][    T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[ 1521.876430][    T9] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[ 1521.897053][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1521.903758][    T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[ 1521.927077][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1521.937851][    T9] usb 3-1: config 0 descriptor??
[ 1521.975822][T10157] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1522.065718][T26366] 8021q: adding VLAN 0 to HW filter on device team0
[ 1522.085859][T26571] xt_connbytes: Forcing CT accounting to be enabled
[ 1522.109392][T26571] set match dimension is over the limit!
[ 1522.153662][T26301] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1522.200353][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1522.207536][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1522.266806][T26301] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1522.299224][T10160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1522.306432][T10160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1522.356145][T10160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.385159][    T9] usbhid 3-1:0.0: can't add hid device: -71
[ 1522.398387][T10160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.409912][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1522.462853][    T9] usb 3-1: USB disconnect, device number 126
[ 1522.562976][T10160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.616312][T10160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.965155][T10157] bridge_slave_1: left allmulticast mode
[ 1522.980548][T10157] bridge_slave_1: left promiscuous mode
[ 1522.990481][T26588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5154'.
[ 1523.009782][T10157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1523.027894][T10157] bridge_slave_0: left allmulticast mode
[ 1523.046739][T10157] bridge_slave_0: left promiscuous mode
[ 1523.052664][T10157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1523.437035][T10157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1523.460258][T10157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1523.475773][T10157] bond0 (unregistering): Released all slaves
[ 1523.687035][ T5642] Bluetooth: hci0: command tx timeout
[ 1523.776755][T10157] tipc: Left network mode
[ 1523.842481][T22732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1523.870747][T22732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1524.132969][T22732] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1524.140924][T22732] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1524.206648][ T5726] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1524.317726][T26366] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1524.356680][ T5726] usb 4-1: device descriptor read/64, error -71
[ 1524.523658][T10157] hsr_slave_0: left promiscuous mode
[ 1524.534577][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1524.534593][   T30] audit: type=1326 audit(1781032936.541:4152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26620 comm="syz.1.5116" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78c639ce59 code=0x0
[ 1524.594918][T10157] hsr_slave_1: left promiscuous mode
[ 1524.605004][T10157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1524.626695][ T5726] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1524.640518][T10157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1524.661470][T10157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1524.672529][T10157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1524.687753][T10157] veth1_macvtap: left promiscuous mode
[ 1524.693466][T10157] veth0_macvtap: left promiscuous mode
[ 1524.699164][T10157] veth1_vlan: left promiscuous mode
[ 1524.704615][T10157] veth0_vlan: left promiscuous mode
[ 1524.756687][ T5726] usb 4-1: device descriptor read/64, error -71
[ 1524.868331][ T5726] usb usb4-port1: attempt power cycle
[ 1525.226847][ T5726] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1525.267493][T10157] team0 (unregistering): Port device team_slave_1 removed
[ 1525.286354][ T5726] usb 4-1: device descriptor read/8, error -71
[ 1525.321665][T10157] team0 (unregistering): Port device team_slave_0 removed
[ 1525.557504][ T5726] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1525.598200][ T5726] usb 4-1: device descriptor read/8, error -71
[ 1525.700772][T26564] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1525.713058][T26564] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1525.719322][ T5726] usb usb4-port1: unable to enumerate USB device
[ 1525.726521][T26564] bridge_slave_0: entered allmulticast mode
[ 1525.741524][T26564] bridge_slave_0: entered promiscuous mode
[ 1525.767394][ T5642] Bluetooth: hci0: command tx timeout
[ 1525.789367][T26640] syzkaller1: entered promiscuous mode
[ 1525.803438][T26640] syzkaller1: entered allmulticast mode
[ 1525.819213][T26564] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1525.837703][T26564] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1525.844977][T26564] bridge_slave_1: entered allmulticast mode
[ 1525.856279][T26564] bridge_slave_1: entered promiscuous mode
[ 1525.964373][T26564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1526.055071][T26564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1526.272763][T26564] team0: Port device team_slave_0 added
[ 1526.285235][T26564] team0: Port device team_slave_1 added
[ 1526.365745][T10157] IPVS: stop unused estimator thread 0...
[ 1526.374950][T26564] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1526.392326][T26564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1526.422365][T26564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1526.438988][T26564] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1526.455555][T26564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1526.519590][T26564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1526.780932][T26366] veth0_vlan: entered promiscuous mode
[ 1526.861259][T26564] hsr_slave_0: entered promiscuous mode
[ 1526.877914][T26564] hsr_slave_1: entered promiscuous mode
[ 1526.894546][T26366] veth1_vlan: entered promiscuous mode
[ 1526.916653][ T5726] usb 3-1: new full-speed USB device number 127 using dummy_hcd
[ 1527.086516][ T5726] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1527.114297][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1527.158423][ T5726] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1527.191822][T26366] veth0_macvtap: entered promiscuous mode
[ 1527.211157][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1527.256719][ T5726] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[ 1527.278516][ T5726] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1527.308142][T26366] veth1_macvtap: entered promiscuous mode
[ 1527.318802][ T5726] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1527.346868][ T5726] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1527.376635][ T5726] usb 3-1: Manufacturer: syz
[ 1527.392552][ T5726] usb 3-1: config 0 descriptor??
[ 1527.595102][T10157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1527.779411][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1527.796144][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1527.810912][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1527.832680][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1527.844642][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1527.848623][T21011] Bluetooth: hci0: command tx timeout
[ 1527.887277][T10768] usb 3-1: USB disconnect, device number 127
[ 1527.980378][T10157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1528.163467][T10157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1528.208021][T26366] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1528.285140][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1528.345167][T10157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1528.365774][T26366] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1528.461579][ T7006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1528.485903][ T7006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1528.519031][ T7006] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1528.594197][ T7006] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1528.670085][T26710] FAULT_INJECTION: forcing a failure.
[ 1528.670085][T26710] name failslab, interval 1, probability 0, space 0, times 0
[ 1528.705487][T26710] CPU: 1 UID: 0 PID: 26710 Comm: syz.2.5165 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1528.705516][T26710] Tainted: [L]=SOFTLOCKUP
[ 1528.705522][T26710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1528.705533][T26710] Call Trace:
[ 1528.705541][T26710]  <TASK>
[ 1528.705549][T26710]  dump_stack_lvl+0xe8/0x150
[ 1528.705574][T26710]  should_fail_ex+0x412/0x560
[ 1528.705596][T26710]  should_failslab+0xa8/0x100
[ 1528.705614][T26710]  __kmalloc_cache_noprof+0x88/0x660
[ 1528.705639][T26710]  ? sctp_v6_cmp_addr+0x15/0xd0
[ 1528.705658][T26710]  ? sctp_add_bind_addr+0x8c/0x370
[ 1528.705680][T26710]  sctp_add_bind_addr+0x8c/0x370
[ 1528.705702][T26710]  sctp_copy_local_addr_list+0x314/0x4f0
[ 1528.705724][T26710]  ? sctp_copy_local_addr_list+0xa4/0x4f0
[ 1528.705742][T26710]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1528.705763][T26710]  ? sctp_v6_is_any+0x64/0x80
[ 1528.705785][T26710]  ? sctp_copy_one_addr+0x93/0x360
[ 1528.705805][T26710]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1528.705824][T26710]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1528.705862][T26710]  sctp_connect_new_asoc+0x2ff/0x6b0
[ 1528.705888][T26710]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1528.705916][T26710]  ? __local_bh_enable_ip+0xd0/0x130
[ 1528.705933][T26710]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1528.705959][T26710]  ? security_sctp_bind_connect+0x7e/0x2c0
[ 1528.705985][T26710]  sctp_sendmsg+0x1576/0x2c50
[ 1528.706009][T26710]  ? unwind_next_frame+0xa6/0x2550
[ 1528.706045][T26710]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1528.706069][T26710]  ? aa_sk_perm+0x6d5/0x900
[ 1528.706098][T26710]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1528.706123][T26710]  ? sock_rps_record_flow+0x19/0x350
[ 1528.706146][T26710]  ? inet_sendmsg+0x2f4/0x370
[ 1528.706168][T26710]  ____sys_sendmsg+0x80a/0x9f0
[ 1528.706195][T26710]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1528.706221][T26710]  ? import_iovec+0x73/0xa0
[ 1528.706244][T26710]  ___sys_sendmsg+0x2a5/0x360
[ 1528.706260][T26710]  ? __lock_acquire+0x6b5/0x2cf0
[ 1528.706282][T26710]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1528.706334][T26710]  ? __fget_files+0x2a/0x420
[ 1528.706358][T26710]  ? __fget_files+0x3a0/0x420
[ 1528.706390][T26710]  __x64_sys_sendmsg+0x1bd/0x2a0
[ 1528.706409][T26710]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1528.706434][T26710]  ? __pfx_ksys_write+0x10/0x10
[ 1528.706467][T26710]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1528.706485][T26710]  do_syscall_64+0x174/0x580
[ 1528.706507][T26710]  ? clear_bhb_loop+0x40/0x90
[ 1528.706529][T26710]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1528.706546][T26710] RIP: 0033:0x7f6b0a59ce59
[ 1528.706563][T26710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1528.706577][T26710] RSP: 002b:00007f6b0b4d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1528.706597][T26710] RAX: ffffffffffffffda RBX: 00007f6b0a815fa0 RCX: 00007f6b0a59ce59
[ 1528.706610][T26710] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003
[ 1528.706622][T26710] RBP: 00007f6b0b4d2090 R08: 0000000000000000 R09: 0000000000000000
[ 1528.706634][T26710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1528.706645][T26710] R13: 00007f6b0a816038 R14: 00007f6b0a815fa0 R15: 00007f6b0a93fa48
[ 1528.706675][T26710]  </TASK>
[ 1529.157639][T20319] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[ 1529.318604][T15976] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1529.327483][T20319] usb 4-1: device descriptor read/64, error -71
[ 1529.353301][ T6586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1529.398303][ T6586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1529.480284][T15976] usb 3-1: Using ep0 maxpacket: 32
[ 1529.489632][ T6586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1529.507410][ T6586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1529.516156][T15976] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1529.534732][T15976] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[ 1529.554322][T15976] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[ 1529.564764][T15976] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[ 1529.574165][T15976] usb 3-1: config 128 has no interface number 0
[ 1529.581103][T15976] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 1529.593580][T15976] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1529.598651][T20319] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[ 1529.610290][T15976] usb 3-1: config 128 interface 127 has no altsetting 0
[ 1529.627716][T15976] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[ 1529.637042][T15976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1529.645117][T15976] usb 3-1: Product: syz
[ 1529.651970][T10157] bridge_slave_1: left allmulticast mode
[ 1529.653536][T15976] usb 3-1: Manufacturer: syz
[ 1529.658890][T10157] bridge_slave_1: left promiscuous mode
[ 1529.662829][T15976] usb 3-1: SerialNumber: syz
[ 1529.679117][T10157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1529.700763][T10157] bridge_slave_0: left allmulticast mode
[ 1529.706457][T10157] bridge_slave_0: left promiscuous mode
[ 1529.715564][T10157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1529.757100][T20319] usb 4-1: device descriptor read/64, error -71
[ 1529.886095][T20319] usb usb4-port1: attempt power cycle
[ 1529.929968][ T5642] Bluetooth: hci2: command tx timeout
[ 1529.936657][T21011] Bluetooth: hci0: command tx timeout
[ 1530.001144][T15976] usb 3-1: USB disconnect, device number 2
[ 1530.048206][T20923] udevd[20923]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1530.075200][T10157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1530.088149][T10157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1530.114452][T10157] bond0 (unregistering): Released all slaves
[ 1530.259222][T20319] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[ 1530.287522][T20319] usb 4-1: device descriptor read/8, error -71
[ 1530.407982][T26698] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1530.428105][T26698] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1530.447449][T26698] bridge_slave_0: entered allmulticast mode
[ 1530.461277][T26698] bridge_slave_0: entered promiscuous mode
[ 1530.478523][T26698] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1530.486298][T26698] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1530.497469][T26698] bridge_slave_1: entered allmulticast mode
[ 1530.508895][T26698] bridge_slave_1: entered promiscuous mode
[ 1530.556781][T20319] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[ 1530.607537][T20319] usb 4-1: device descriptor read/8, error -71
[ 1530.645329][ T5294] 8021q: adding VLAN 0 to HW filter on device eth6
[ 1530.717354][T20319] usb usb4-port1: unable to enumerate USB device
[ 1530.795989][T26751] netlink: 164 bytes leftover after parsing attributes in process `syz.4.5129'.
[ 1530.935652][   T30] audit: type=1804 audit(1781032942.941:4153): pid=26747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5169" name="/newroot/77/file0" dev="fuse" ino=1 res=1 errno=0
[ 1531.008787][T26752] bridge1: entered promiscuous mode
[ 1531.016350][T26752] bridge1: entered allmulticast mode
[ 1531.087338][T26698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1531.117416][T26698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1531.147254][T10157] hsr_slave_0: left promiscuous mode
[ 1531.160202][T10157] hsr_slave_1: left promiscuous mode
[ 1531.178810][T10157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1531.196759][T10157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1531.226045][T10157] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1531.253018][T10157] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1531.315924][T10157] veth1_macvtap: left promiscuous mode
[ 1531.327347][T10157] veth0_macvtap: left promiscuous mode
[ 1531.348608][T10157] veth1_vlan: left promiscuous mode
[ 1531.359890][T10157] veth0_vlan: left promiscuous mode
[ 1531.859450][T26769] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1531.890289][T26769] netlink: 'syz.3.5172': attribute type 10 has an invalid length.
[ 1532.006750][ T5642] Bluetooth: hci2: command tx timeout
[ 1532.024885][T10157] team0 (unregistering): Port device team_slave_1 removed
[ 1532.050700][T10157] team0 (unregistering): Port device team_slave_0 removed
[ 1532.261141][T26564] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1532.275210][T26564] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1532.426277][T26769] team0 (unregistering): Port device team_slave_0 removed
[ 1532.455238][T26769] team0 (unregistering): Port device team_slave_1 removed
[ 1532.489269][T26564] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1532.503877][T26564] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1532.527022][T26698] team0: Port device team_slave_0 added
[ 1532.551629][T26698] team0: Port device team_slave_1 added
[ 1532.642845][T26564] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1532.682487][T26564] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1532.710257][T26564] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1532.749172][T26564] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1532.768029][T26773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1532.788144][T26773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1532.946251][T26698] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1532.993641][T26698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1533.006093][ T5718] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1533.088416][T26698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1533.195397][T26698] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1533.239169][T26698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1533.306603][T26698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1533.448514][T26698] hsr_slave_0: entered promiscuous mode
[ 1533.455050][T26698] hsr_slave_1: entered promiscuous mode
[ 1533.461321][T26698] debugfs: 'hsr0' already exists in 'hsr'
[ 1533.496906][T26698] Cannot create hsr debugfs directory
[ 1533.801899][T21011] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1533.828813][T21011] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1533.843625][T21011] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1533.863156][T21011] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1533.872972][T21011] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1533.975130][T10157] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.017887][T10771] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1534.082051][ T5294] 8021q: adding VLAN 0 to HW filter on device eth5
[ 1534.088843][T21011] Bluetooth: hci2: command tx timeout
[ 1534.165335][T10157] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.179636][T10771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1534.190896][T10771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1534.200893][T10771] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1534.214395][T10771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1534.238049][T10771] usb 5-1: config 0 descriptor??
[ 1534.336752][T26810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5178'.
[ 1534.346295][T26810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5178'.
[ 1534.359699][T26810] netlink: 'syz.3.5178': attribute type 18 has an invalid length.
[ 1534.388291][T10157] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.604235][T10157] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1534.681379][T10771] hid-thrustmaster 0003:044F:B65D.007E: unknown main item tag 0x0
[ 1534.693665][T26564] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1534.704946][T10771] hid-thrustmaster 0003:044F:B65D.007E: unknown main item tag 0x0
[ 1534.720534][T10771] hid-thrustmaster 0003:044F:B65D.007E: unknown main item tag 0x0
[ 1534.746259][T10771] hid-thrustmaster 0003:044F:B65D.007E: unknown main item tag 0x0
[ 1534.756796][T10771] hid-thrustmaster 0003:044F:B65D.007E: unknown main item tag 0x0
[ 1534.770943][T10771] hid-thrustmaster 0003:044F:B65D.007E: unknown main item tag 0x0
[ 1534.781198][T10771] hid-thrustmaster 0003:044F:B65D.007E: unknown main item tag 0x0
[ 1534.797532][T10771] hid-thrustmaster 0003:044F:B65D.007E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[ 1534.809935][T10771] hid-thrustmaster 0003:044F:B65D.007E: Wrong number of endpoints?
[ 1534.912899][    C1] hid-thrustmaster 0003:044F:B65D.007E: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[ 1535.004856][T26824] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1535.144978][T26802] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5177'.
[ 1535.234967][T26828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1535.265805][T26828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1535.296271][T26564] 8021q: adding VLAN 0 to HW filter on device team0
[ 1535.623518][T26828] can: request_module (can-proto-4) failed.
[ 1535.740883][T20319] usb 5-1: USB disconnect, device number 2
[ 1535.761566][ T5977] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1535.768726][ T5977] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1536.009223][T21011] Bluetooth: hci4: command tx timeout
[ 1536.048492][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1536.055667][ T7006] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1536.177014][T21011] Bluetooth: hci2: command tx timeout
[ 1536.379994][T10157] bridge_slave_1: left allmulticast mode
[ 1536.401827][T10157] bridge_slave_1: left promiscuous mode
[ 1536.428584][T10157] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1536.456236][T10157] bridge_slave_0: left allmulticast mode
[ 1536.468071][T10157] bridge_slave_0: left promiscuous mode
[ 1536.477981][T10157] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1536.925030][T10157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1536.949777][T10157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1536.961090][T10157] bond0 (unregistering): Released all slaves
[ 1536.977163][T10157] bond1 (unregistering): Released all slaves
[ 1538.087890][T21011] Bluetooth: hci4: command tx timeout
[ 1538.140359][T26698] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1538.154211][T26698] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1538.182505][T26698] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1538.204996][T26698] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1538.223294][T26698] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1538.264140][T26698] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1538.312812][T10157] hsr_slave_0: left promiscuous mode
[ 1538.460270][T10157] hsr_slave_1: left promiscuous mode
[ 1538.466462][T10157] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1538.474636][T10157] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1538.524654][T10157] veth1_macvtap: left promiscuous mode
[ 1538.530378][T10157] veth0_macvtap: left promiscuous mode
[ 1538.538287][T10157] veth1_vlan: left promiscuous mode
[ 1538.547559][T10157] veth0_vlan: left promiscuous mode
[ 1538.636868][ T5725] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1538.860196][ T5725] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1538.886116][ T5725] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1538.911105][ T5725] usb 5-1: Product: syz
[ 1538.926892][ T5725] usb 5-1: SerialNumber: syz
[ 1538.946627][ T5725] usb 5-1: config 0 descriptor??
[ 1539.229585][T10157] team0 (unregistering): Port device team_slave_1 removed
[ 1539.265997][T10157] team0 (unregistering): Port device team_slave_0 removed
[ 1539.546631][T26806] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1539.565009][T26806] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1539.581846][T26806] bridge_slave_0: entered allmulticast mode
[ 1539.606026][T26806] bridge_slave_0: entered promiscuous mode
[ 1539.633254][T26806] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1539.654517][T26806] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1539.674147][T26806] bridge_slave_1: entered allmulticast mode
[ 1539.694756][T26806] bridge_slave_1: entered promiscuous mode
[ 1539.710884][T26698] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1539.729997][T26698] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1539.748097][ T5294] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1539.755337][T26875] syzkaller1: entered promiscuous mode
[ 1539.765387][T26875] syzkaller1: entered allmulticast mode
[ 1539.955191][T26564] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1539.997515][T26806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1540.055369][T26806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1540.170153][T21011] Bluetooth: hci4: command tx timeout
[ 1540.229037][T26806] team0: Port device team_slave_0 added
[ 1540.269985][T26806] team0: Port device team_slave_1 added
[ 1540.405784][T26806] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1540.423793][T26806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1540.502992][T26806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1540.555416][T26806] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1540.576642][T26806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1540.642109][T26806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1540.859708][T26806] hsr_slave_0: entered promiscuous mode
[ 1540.876859][T26806] hsr_slave_1: entered promiscuous mode
[ 1540.888113][T26806] debugfs: 'hsr0' already exists in 'hsr'
[ 1540.916638][T26806] Cannot create hsr debugfs directory
[ 1540.980306][T26564] veth0_vlan: entered promiscuous mode
[ 1541.033075][ T5725] usb 5-1: USB disconnect, device number 3
[ 1541.200676][T26564] veth1_vlan: entered promiscuous mode
[ 1541.291588][T26912] m>e5nи‹Т: entered promiscuous mode
[ 1541.537664][T20319] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1541.569845][T26698] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1541.706901][T20319] usb 4-1: device descriptor read/64, error -71
[ 1541.733304][T26564] veth0_macvtap: entered promiscuous mode
[ 1541.745874][T23134] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1541.828022][T26564] veth1_macvtap: entered promiscuous mode
[ 1541.863858][T26698] 8021q: adding VLAN 0 to HW filter on device team0
[ 1541.911230][T23134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1541.942728][T23134] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1541.957230][T20319] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1541.967119][T23134] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1541.988578][T23134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1542.003902][T23134] usb 5-1: config 0 descriptor??
[ 1542.018799][T10157] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1542.026000][T10157] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1542.054785][T26564] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1542.080361][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1542.087577][ T6586] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1542.107192][T20319] usb 4-1: device descriptor read/64, error -71
[ 1542.141090][T26564] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1542.190234][ T6586] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.218164][T20319] usb usb4-port1: attempt power cycle
[ 1542.221277][ T6586] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.246852][T21011] Bluetooth: hci4: command tx timeout
[ 1542.280166][ T6586] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.310210][ T6586] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.423632][T23134] hid-thrustmaster 0003:044F:B65D.007F: unknown main item tag 0x0
[ 1542.478492][T23134] hid-thrustmaster 0003:044F:B65D.007F: unknown main item tag 0x0
[ 1542.510930][T23134] hid-thrustmaster 0003:044F:B65D.007F: unknown main item tag 0x0
[ 1542.607774][T23134] hid-thrustmaster 0003:044F:B65D.007F: unknown main item tag 0x0
[ 1542.612299][T20319] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1542.634601][T23134] hid-thrustmaster 0003:044F:B65D.007F: unknown main item tag 0x0
[ 1542.695234][T23134] hid-thrustmaster 0003:044F:B65D.007F: unknown main item tag 0x0
[ 1542.715755][T23134] hid-thrustmaster 0003:044F:B65D.007F: unknown main item tag 0x0
[ 1542.729875][T20319] usb 4-1: device descriptor read/8, error -71
[ 1542.755818][T23134] hid-thrustmaster 0003:044F:B65D.007F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[ 1542.782103][T23134] hid-thrustmaster 0003:044F:B65D.007F: Wrong number of endpoints?
[ 1542.802666][    C0] hid-thrustmaster 0003:044F:B65D.007F: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[ 1542.943572][T10157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1542.988489][T10157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1542.996815][T20319] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1543.040175][T26698] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1543.048393][T26920] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5189'.
[ 1543.063733][T20319] usb 4-1: device descriptor read/8, error -71
[ 1543.104778][T26938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1543.147244][T21548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1543.158702][T26938] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1543.166347][T21548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1543.211634][T20319] usb usb4-port1: unable to enumerate USB device
[ 1543.245764][T26806] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1543.279380][T26806] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1543.323216][T26806] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1543.350235][T26806] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1543.387882][T26806] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1543.407530][T26806] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1543.415495][T26806] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1543.441878][T26806] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1543.451402][T26936] Set syz1 is full, maxelem 0 reached
[ 1543.466530][    T9] usb 5-1: USB disconnect, device number 4
[ 1543.549467][T26698] veth0_vlan: entered promiscuous mode
[ 1543.577998][T26698] veth1_vlan: entered promiscuous mode
[ 1543.656956][T23134] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[ 1543.701187][T26698] veth0_macvtap: entered promiscuous mode
[ 1543.720475][T26698] veth1_macvtap: entered promiscuous mode
[ 1543.754200][T26698] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1543.784059][T26698] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1543.797842][T23134] usb 6-1: device descriptor read/64, error -71
[ 1543.825358][ T7006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1543.841829][ T7006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1543.862287][T26806] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1543.875204][ T7006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1543.948202][ T7006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1544.056679][T23134] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[ 1544.075576][T26806] 8021q: adding VLAN 0 to HW filter on device team0
[ 1544.155952][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1544.163163][ T7006] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1544.224851][T10157] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1544.231443][T23134] usb 6-1: device descriptor read/64, error -71
[ 1544.232299][T10157] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1544.288607][T10157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1544.325477][T10157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1544.361404][T23134] usb usb6-port1: attempt power cycle
[ 1544.442580][T21548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1544.472572][T21548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1544.666791][T10771] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1544.714302][T26806] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1544.725155][T23134] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[ 1544.780904][T23134] usb 6-1: device descriptor read/8, error -71
[ 1544.827562][T10771] usb 4-1: Using ep0 maxpacket: 32
[ 1544.861991][T10771] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1544.901623][T10771] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1544.929878][T26806] veth0_vlan: entered promiscuous mode
[ 1544.943011][T10771] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1544.974268][T26806] veth1_vlan: entered promiscuous mode
[ 1544.993315][T10771] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 1545.025586][T10771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1545.037243][T23134] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[ 1545.054392][T10771] usb 4-1: Product: syz
[ 1545.070682][T10771] usb 4-1: Manufacturer: syz
[ 1545.087053][T10771] usb 4-1: SerialNumber: syz
[ 1545.092087][T23134] usb 6-1: device descriptor read/8, error -71
[ 1545.119275][T10771] usb 4-1: config 0 descriptor??
[ 1545.132457][T26806] veth0_macvtap: entered promiscuous mode
[ 1545.167043][T26806] veth1_macvtap: entered promiscuous mode
[ 1545.224025][T26806] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1545.236163][T23134] usb usb6-port1: unable to enumerate USB device
[ 1545.282697][T26806] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1545.324103][ T7006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1545.348861][ T7006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1545.382815][ T7006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1545.402472][ T7006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1545.502807][T26962] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5191'.
[ 1545.713163][T10157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1545.759512][T10157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1545.770268][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[ 1545.783566][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[ 1545.931662][T10771] gs_usb 4-1:0.0: Configuring for 154 interfaces
[ 1545.950120][T10157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1545.981347][T10157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1546.567001][T15976] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1546.606736][ T5718] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1546.692931][T10771] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[ 1546.727396][T15976] usb 3-1: Using ep0 maxpacket: 16
[ 1546.745817][T15976] usb 3-1: config 2 has an invalid interface number: 4 but max is 0
[ 1546.756073][T15976] usb 3-1: config 2 has no interface number 0
[ 1546.763352][T15976] usb 3-1: config 2 interface 4 has no altsetting 0
[ 1546.770798][ T5718] usb 2-1: Using ep0 maxpacket: 8
[ 1546.778973][T10771] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[ 1546.788865][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1546.802674][T10771] usb 4-1: USB disconnect, device number 58
[ 1546.808883][ T5718] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1546.808913][ T5718] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1546.808939][ T5718] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1546.818595][ T5718] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.40
[ 1546.862155][T15976] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=45.22
[ 1546.872315][T15976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1546.881427][T15976] usb 3-1: Product: syz
[ 1546.889971][T15976] usb 3-1: Manufacturer: syz
[ 1546.895052][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1546.911009][T15976] usb 3-1: SerialNumber: syz
[ 1546.916341][ T5718] usb 2-1: Product: syz
[ 1546.916945][T15978] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 1546.930357][ T5718] usb 2-1: Manufacturer: syz
[ 1546.949826][ T5718] usb 2-1: SerialNumber: syz
[ 1547.086812][T15978] usb 5-1: device descriptor read/64, error -71
[ 1547.230738][ T5718] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input154
[ 1547.258983][ T4983] bcm5974 2-1:1.0: could not read from device
[ 1547.286229][ T4983] bcm5974 2-1:1.0: could not read from device
[ 1547.293045][ T5718] usb 2-1: USB disconnect, device number 124
[ 1547.303480][ T4983] bcm5974 2-1:1.0: could not read from device
[ 1547.328440][T15978] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1547.381276][T15976] quatech2 3-1:2.4: Quatech 2nd gen USB to Serial Driver converter detected
[ 1547.409043][T15976] usb 3-1: qt2_attach - failed to power on unit: -71
[ 1547.416160][T15976] quatech2 3-1:2.4: probe with driver quatech2 failed with error -71
[ 1547.439822][T15976] usb 3-1: USB disconnect, device number 3
[ 1547.498945][T15978] usb 5-1: device descriptor read/64, error -71
[ 1547.581586][T26991] syzkaller0: entered promiscuous mode
[ 1547.587469][T26991] syzkaller0: entered allmulticast mode
[ 1547.627288][T15978] usb usb5-port1: attempt power cycle
[ 1547.996934][T15978] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 1548.058447][T15978] usb 5-1: device descriptor read/8, error -71
[ 1548.067638][ T5718] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1548.136920][T15976] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1548.184016][T27009] loop9: detected capacity change from 0 to 7
[ 1548.193345][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.202602][    C0] buffer_io_error: 4 callbacks suppressed
[ 1548.202619][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.216993][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.226220][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.234501][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.243772][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.254546][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.263754][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.263857][ T5718] usb 2-1: Using ep0 maxpacket: 32
[ 1548.277617][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.286835][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.295650][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.304845][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.315110][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.324384][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.332380][T15976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1548.345772][T27009] ldm_validate_partition_table(): Disk read failed.
[ 1548.371523][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.380723][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.388812][T15976] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1548.399053][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.407027][T15978] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1548.408242][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.429099][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1548.438309][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[ 1548.450961][T27009] Dev loop9: unable to read RDB block 0
[ 1548.458361][T15976] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1548.467848][T27009]  loop9: unable to read partition table
[ 1548.473961][T15976] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1548.483636][T27009] loop9: partition table beyond EOD, truncated
[ 1548.495019][T15976] usb 4-1: config 0 descriptor??
[ 1548.510218][T27009] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5)
[ 1548.523710][T15978] usb 5-1: device descriptor read/8, error -71
[ 1548.648005][T15978] usb usb5-port1: unable to enumerate USB device
[ 1548.913993][T15976] hid-thrustmaster 0003:044F:B65D.0080: unknown main item tag 0x0
[ 1548.943123][T15976] hid-thrustmaster 0003:044F:B65D.0080: unknown main item tag 0x0
[ 1548.962917][T15976] hid-thrustmaster 0003:044F:B65D.0080: unknown main item tag 0x0
[ 1548.985813][T15976] hid-thrustmaster 0003:044F:B65D.0080: unknown main item tag 0x0
[ 1548.999461][T15976] hid-thrustmaster 0003:044F:B65D.0080: unknown main item tag 0x0
[ 1549.010390][T15976] hid-thrustmaster 0003:044F:B65D.0080: unknown main item tag 0x0
[ 1549.024600][T15976] hid-thrustmaster 0003:044F:B65D.0080: unknown main item tag 0x0
[ 1549.043157][T15976] hid-thrustmaster 0003:044F:B65D.0080: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0
[ 1549.070125][T15976] hid-thrustmaster 0003:044F:B65D.0080: Wrong number of endpoints?
[ 1549.082003][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1549.092374][T15978] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[ 1549.103655][ T5718] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1549.122133][    C0] hid-thrustmaster 0003:044F:B65D.0080: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[ 1549.145887][ T5718] usb 2-1: can't read configurations, error -71
[ 1549.256653][T15978] usb 6-1: Using ep0 maxpacket: 8
[ 1549.263366][T15978] usb 6-1: config 218 has too many interfaces: 244, using maximum allowed: 32
[ 1549.272934][T15978] usb 6-1: config 218 has 1 interface, different from the descriptor's value: 244
[ 1549.283156][T15978] usb 6-1: config 218 has no interface number 0
[ 1549.290344][T15978] usb 6-1: config 218 interface 95 altsetting 64 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1549.302633][T15978] usb 6-1: config 218 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1549.314660][T15978] usb 6-1: config 218 interface 95 has no altsetting 0
[ 1549.332466][T15978] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[ 1549.344422][T27002] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5200'.
[ 1549.353842][T15978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1549.364308][T27002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1549.374001][T15978] usb 6-1: Product: syz
[ 1549.380354][T15978] usb 6-1: Manufacturer: syz
[ 1549.387079][T27002] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1549.395296][T15978] usb 6-1: SerialNumber: syz
[ 1549.653643][T15976] usb 4-1: USB disconnect, device number 59
[ 1549.710469][T27036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1549.724567][T27031] 0: reclassify loop, rule prio 0, protocol 700
[ 1549.733318][T27036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1549.925568][T15978] usb 6-1: USB disconnect, device number 67
[ 1550.168517][T20298] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1550.187673][ T5718] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1550.219255][T15976] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1550.234142][T27045] bond0: Error: Cannot enslave bond to itself.
[ 1550.306723][T15978] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1550.327024][ T5718] usb 2-1: device descriptor read/64, error -71
[ 1550.346661][T20298] usb 5-1: Using ep0 maxpacket: 16
[ 1550.354134][T20298] usb 5-1: config index 0 descriptor too short (expected 51443, got 18)
[ 1550.367576][T20298] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1550.377612][T20298] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1550.385667][T20298] usb 5-1: Product: syz
[ 1550.386999][T15976] usb 3-1: Using ep0 maxpacket: 16
[ 1550.394104][T20298] usb 5-1: Manufacturer: syz
[ 1550.400897][T20298] usb 5-1: SerialNumber: syz
[ 1550.413090][T15976] usb 3-1: config 2 has an invalid interface number: 4 but max is 0
[ 1550.435665][T15976] usb 3-1: config 2 has no interface number 0
[ 1550.441855][T20298] r8152-cfgselector 5-1: Unknown version 0x0000
[ 1550.441880][T20298] r8152-cfgselector 5-1: config 0 descriptor??
[ 1550.458836][T15978] usb 6-1: Using ep0 maxpacket: 16
[ 1550.460169][ T5718] usb usb2-port1: attempt power cycle
[ 1550.476524][T15978] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1550.489952][T15978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1550.491228][T15976] usb 3-1: config 2 interface 4 has no altsetting 0
[ 1550.506776][T15978] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1550.516288][T15978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1550.521918][T15976] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=45.22
[ 1550.531111][T15978] usb 6-1: Product: syz
[ 1550.534191][T15976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1550.544296][T15978] usb 6-1: Manufacturer: syz
[ 1550.550545][T15978] usb 6-1: SerialNumber: syz
[ 1550.554757][T15976] usb 3-1: Product: syz
[ 1550.575212][T15976] usb 3-1: Manufacturer: syz
[ 1550.583117][T15976] usb 3-1: SerialNumber: syz
[ 1550.591496][T15978] usb 6-1: 0:2 : does not exist
[ 1550.658653][T27039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1550.670414][T27039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1550.786625][T15978] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1550.803754][T27055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1550.816661][ T5718] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 1550.827745][T27055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1550.860217][ T5718] usb 2-1: device descriptor read/8, error -71
[ 1550.881098][T27055] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5210'.
[ 1550.908371][T15978] usb 6-1: USB disconnect, device number 68
[ 1550.931967][T27055] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5210'.
[ 1550.985061][T20923] udevd[20923]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1551.010608][ T5725] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1551.066438][T27052] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1551.074247][T27052] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1551.156717][ T5718] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1551.176639][ T5725] usb 4-1: Using ep0 maxpacket: 16
[ 1551.179529][ T5718] usb 2-1: device descriptor read/8, error -71
[ 1551.193077][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1551.240070][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1551.273287][T15976] quatech2 3-1:2.4: Quatech 2nd gen USB to Serial Driver converter detected
[ 1551.280889][ T5725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1551.284799][T15976] usb 3-1: qt2_attach - failed to power on unit: -71
[ 1551.304487][T27052] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1551.312590][ T5718] usb usb2-port1: unable to enumerate USB device
[ 1551.322033][T15976] quatech2 3-1:2.4: probe with driver quatech2 failed with error -71
[ 1551.338564][T15976] usb 3-1: USB disconnect, device number 4
[ 1551.352209][ T5725] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1551.373676][T27052] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1551.388537][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1551.424041][ T5725] usb 4-1: config 0 descriptor??
[ 1551.522356][   T30] audit: type=1800 audit(1781032963.531:4154): pid=27067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5216" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[ 1551.703787][ T7006] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1551.736037][ T7006] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1551.778344][ T7006] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1551.821390][ T7006] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1551.956527][ T5725] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0081/input/input156
[ 1552.047111][ T5725] microsoft 0003:045E:07DA.0081: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[ 1552.095051][T27071] r8152-cfgselector 5-1: USB disconnect, device number 9
[ 1552.200296][ T5725] usb 4-1: USB disconnect, device number 60
[ 1552.256961][T27062] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1552.429029][T27062] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1552.446095][T27062] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1552.458990][T27062] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[ 1552.471964][T27062] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1552.481916][T27062] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1552.491042][T27062] usb 3-1: Product: syz
[ 1552.495374][T27062] usb 3-1: Manufacturer: syz
[ 1552.500533][T27062] usb 3-1: SerialNumber: syz
[ 1552.508660][T27062] usb 3-1: config 0 descriptor??
[ 1552.514668][T27076] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1552.522538][T27076] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1552.535087][T27062] usb 3-1: ucan: probing device on interface #0
[ 1552.862847][T27076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5218'.
[ 1552.874485][T27062] usb 3-1: ucan: could not read protocol version, ret=128
[ 1552.882148][T27062] usb 3-1: ucan: probe failed; try to update the device firmware
[ 1552.926667][T27061] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[ 1553.016350][T27093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5222'.
[ 1553.086228][T27098] xt_hashlimit: max too large, truncated to 1048576
[ 1553.092913][T27061] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1553.092941][T27061] usb 5-1: config 0 has no interface number 0
[ 1553.092981][T27061] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1553.093009][T27061] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1553.093031][T27061] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1553.093065][T27061] usb 5-1: config 0 interface 1 has no altsetting 0
[ 1553.093099][T27061] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[ 1553.093123][T27061] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.109631][T27061] usb 5-1: config 0 descriptor??
[ 1553.356692][T27071] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1553.518468][T27071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1553.530493][T27071] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1553.540964][T27071] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1553.550404][T27071] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1553.562275][T27071] usb 2-1: config 0 descriptor??
[ 1553.637647][ T5725] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1553.806673][ T5725] usb 4-1: Using ep0 maxpacket: 16
[ 1553.819636][ T5725] usb 4-1: config 2 has an invalid interface number: 4 but max is 0
[ 1553.830636][ T5725] usb 4-1: config 2 has no interface number 0
[ 1553.839034][ T5725] usb 4-1: config 2 interface 4 has no altsetting 0
[ 1553.850605][ T5725] usb 4-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=45.22
[ 1553.860895][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1553.869633][ T5725] usb 4-1: Product: syz
[ 1553.874263][ T5725] usb 4-1: Manufacturer: syz
[ 1553.880520][ T5725] usb 4-1: SerialNumber: syz
[ 1553.982775][T27071] hid-thrustmaster 0003:044F:B65D.0083: unknown main item tag 0x0
[ 1553.997659][T27071] hid-thrustmaster 0003:044F:B65D.0083: unknown main item tag 0x0
[ 1554.005766][T27071] hid-thrustmaster 0003:044F:B65D.0083: unknown main item tag 0x0
[ 1554.018877][T27071] hid-thrustmaster 0003:044F:B65D.0083: unknown main item tag 0x0
[ 1554.033254][T27071] hid-thrustmaster 0003:044F:B65D.0083: unknown main item tag 0x0
[ 1554.042018][T27071] hid-thrustmaster 0003:044F:B65D.0083: unknown main item tag 0x0
[ 1554.055058][T27071] hid-thrustmaster 0003:044F:B65D.0083: unknown main item tag 0x0
[ 1554.071346][T27071] hid-thrustmaster 0003:044F:B65D.0083: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0
[ 1554.115939][T27071] hid-thrustmaster 0003:044F:B65D.0083: Wrong number of endpoints?
[ 1554.182346][    C1] hid-thrustmaster 0003:044F:B65D.0083: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[ 1554.347355][ T5725] quatech2 4-1:2.4: Quatech 2nd gen USB to Serial Driver converter detected
[ 1554.367992][ T5725] usb 4-1: qt2_attach - failed to power on unit: -71
[ 1554.375155][ T5725] quatech2 4-1:2.4: probe with driver quatech2 failed with error -71
[ 1554.389735][ T5725] usb 4-1: USB disconnect, device number 61
[ 1554.405298][T27097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5223'.
[ 1554.428699][T27097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1554.439336][T27097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1554.663114][ T5725] usb 2-1: USB disconnect, device number 3
[ 1554.776700][T27062] usb 6-1: new full-speed USB device number 69 using dummy_hcd
[ 1554.925524][T27118] input: syz0 as /devices/virtual/input/input157
[ 1554.935569][T27062] usb 6-1: config 150 has an invalid interface number: 204 but max is 2
[ 1554.950865][T27062] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[ 1554.961223][T27062] usb 6-1: config 150 has no interface number 0
[ 1554.976861][T27062] usb 6-1: config 150 interface 204 has no altsetting 0
[ 1554.996429][T27062] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 1555.005677][T27062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1555.013817][T27062] usb 6-1: Product: syz
[ 1555.019807][T27062] usb 6-1: Manufacturer: syz
[ 1555.024534][T27062] usb 6-1: SerialNumber: syz
[ 1555.119590][T21954] usb 3-1: USB disconnect, device number 5
[ 1555.269392][T27062] xr_serial 6-1:150.204: skipping garbage
[ 1555.290009][T27062] xr_serial 6-1:150.204: xr_serial converter detected
[ 1555.313333][T27062] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[ 1555.332285][T27062] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[ 1555.352490][T27123] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1555.374866][T27062] usb 6-1: USB disconnect, device number 69
[ 1555.401216][T27062] xr_serial 6-1:150.204: device disconnected
[ 1555.429391][T27123] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1555.691027][T27123] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1555.722519][T27061] uclogic 0003:145F:0212.0082: failed retrieving string descriptor #100: -71
[ 1555.754400][T27061] uclogic 0003:145F:0212.0082: failed retrieving pen parameters: -71
[ 1555.779616][T27123] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1555.795522][T27061] uclogic 0003:145F:0212.0082: pen probing failed: -71
[ 1555.822941][T27061] uclogic 0003:145F:0212.0082: failed probing parameters: -71
[ 1555.833776][T27061] uclogic 0003:145F:0212.0082: probe with driver uclogic failed with error -71
[ 1555.864275][T27123] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1555.892552][T27061] usb 5-1: USB disconnect, device number 10
[ 1555.920359][T27123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1555.966509][T27123] veth1_vlan: left promiscuous mode
[ 1555.976078][T27123] veth0_vlan: left promiscuous mode
[ 1555.983756][T27123] veth0_vlan: entered promiscuous mode
[ 1555.987297][T27123] veth1_vlan: entered promiscuous mode
[ 1555.992381][T27123] veth1_macvtap: left promiscuous mode
[ 1555.993503][T27123] veth0_macvtap: left promiscuous mode
[ 1555.994518][T27123] veth0_macvtap: entered promiscuous mode
[ 1555.995982][T27123] veth1_macvtap: entered promiscuous mode
[ 1556.001967][T27123] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1556.003193][T27123] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1556.004469][T27123] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1556.009955][T27123] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1556.062999][T27123] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1556.083236][ T7006] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1556.083357][ T7006] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1556.095487][ T7006] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1556.095608][ T7006] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1556.219375][T27129] vcan1: entered promiscuous mode
[ 1556.219396][T27129] vcan1: entered allmulticast mode
[ 1556.282763][T22732] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1556.282802][T22732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1556.282864][T22732] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1556.282890][T22732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1556.321977][T22732] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1556.322014][T22732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1556.322070][T22732] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1556.322098][T22732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1556.736771][T27068] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1556.756696][T21954] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1556.837409][T27061] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 1556.898890][T27068] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1556.918622][T27068] usb 5-1: config index 0 descriptor too short (expected 2182, got 134)
[ 1556.922225][T21954] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.936649][T27068] usb 5-1: config 0 has an invalid interface number: 0 but max is -1
[ 1556.955545][T27068] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1556.963222][T21954] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1556.975059][T27068] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1556.985679][T21954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1557.004649][T21954] usb 6-1: config 0 descriptor??
[ 1557.011840][T27068] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[ 1557.017860][T27061] usb 2-1: Using ep0 maxpacket: 16
[ 1557.031892][T21954] pwc: Askey VC010 type 2 USB webcam detected.
[ 1557.038090][T27068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.038117][T27068] usb 5-1: Product: syz
[ 1557.038134][T27068] usb 5-1: Manufacturer: syz
[ 1557.038149][T27068] usb 5-1: SerialNumber: syz
[ 1557.060570][T27068] usb 5-1: config 0 descriptor??
[ 1557.075020][T27061] usb 2-1: config 2 has an invalid interface number: 4 but max is 0
[ 1557.083641][T27061] usb 2-1: config 2 has no interface number 0
[ 1557.092386][T27061] usb 2-1: config 2 interface 4 has no altsetting 0
[ 1557.103222][T27061] usb 2-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=45.22
[ 1557.113931][T27061] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1557.122713][T27061] usb 2-1: Product: syz
[ 1557.130790][T27061] usb 2-1: Manufacturer: syz
[ 1557.135450][T27061] usb 2-1: SerialNumber: syz
[ 1557.233936][T21954] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1557.245093][T21954] pwc: recv_control_msg error -32 req 02 val 2700
[ 1557.262761][T21954] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1557.274877][T21954] pwc: recv_control_msg error -32 req 04 val 1000
[ 1557.282850][T21954] pwc: recv_control_msg error -32 req 04 val 1300
[ 1557.302275][T27068] usb 5-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8201); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[ 1557.322976][T21954] pwc: recv_control_msg error -32 req 04 val 1400
[ 1557.356733][T27068] usb 5-1: Error initialising Scarlett Gen 2 Mixer Driver: -22
[ 1557.400334][T21954] pwc: recv_control_msg error -71 req 02 val 2000
[ 1557.416698][T27158] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1557.429056][T21954] pwc: recv_control_msg error -71 req 02 val 2100
[ 1557.462151][T21954] pwc: recv_control_msg error -71 req 04 val 1500
[ 1557.486242][T21954] pwc: recv_control_msg error -71 req 02 val 2500
[ 1557.494565][T21954] pwc: recv_control_msg error -71 req 02 val 2400
[ 1557.503431][T21954] pwc: recv_control_msg error -71 req 02 val 2600
[ 1557.522932][T21954] pwc: recv_control_msg error -71 req 02 val 2900
[ 1557.537579][T27068] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1557.561877][T21954] pwc: recv_control_msg error -71 req 02 val 2800
[ 1557.577188][T27068] usb 5-1: USB disconnect, device number 11
[ 1557.592619][T21954] pwc: recv_control_msg error -71 req 04 val 1100
[ 1557.610353][T21954] pwc: recv_control_msg error -71 req 04 val 1200
[ 1557.645274][T21954] pwc: Registered as video103.
[ 1557.658272][ T5725] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1557.677062][T21954] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input158
[ 1557.735092][T21161] udevd[21161]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1557.778772][T21954] usb 6-1: USB disconnect, device number 70
[ 1557.799320][T27061] quatech2 2-1:2.4: Quatech 2nd gen USB to Serial Driver converter detected
[ 1557.837960][T27061] usb 2-1: qt2_attach - failed to power on unit: -71
[ 1557.854731][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1557.859429][T27061] quatech2 2-1:2.4: probe with driver quatech2 failed with error -71
[ 1557.914217][T27061] usb 2-1: USB disconnect, device number 4
[ 1557.922276][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1557.983059][ T5725] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[ 1558.010749][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1558.024736][T27170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5249'.
[ 1558.040550][ T5725] usb 3-1: config 0 descriptor??
[ 1558.048023][T27170] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5249'.
[ 1558.286649][T21954] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1558.448956][T21954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1558.470522][T21954] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7
[ 1558.481049][ T5725] hid-thrustmaster 0003:044F:B65D.0084: unknown main item tag 0x0
[ 1558.512086][ T5725] hid-thrustmaster 0003:044F:B65D.0084: unknown main item tag 0x0
[ 1558.520458][T21954] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1558.537023][T21954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1558.551765][T21954] usb 6-1: Product: syz
[ 1558.558057][ T5725] hid-thrustmaster 0003:044F:B65D.0084: unknown main item tag 0x0
[ 1558.566019][T21954] usb 6-1: Manufacturer: syz
[ 1558.594327][T21954] usb 6-1: SerialNumber: syz
[ 1558.602038][ T5725] hid-thrustmaster 0003:044F:B65D.0084: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[ 1558.624079][T21954] usb 6-1: config 0 descriptor??
[ 1558.630667][ T5725] hid-thrustmaster 0003:044F:B65D.0084: Wrong number of endpoints?
[ 1558.689175][    C1] hid-thrustmaster 0003:044F:B65D.0084: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[ 1558.868170][T27161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1558.878445][T27161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1558.954656][T27157] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5245'.
[ 1558.992407][T27157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1559.004173][T21954] usb 6-1: USB disconnect, device number 71
[ 1559.029104][T27157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1559.108197][T21164] udevd[21164]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1559.340768][T27062] usb 3-1: USB disconnect, device number 6
[ 1559.597704][   T30] audit: type=1326 audit(1781032971.611:4155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81939ce59 code=0x7ffc0000
[ 1559.639675][   T30] audit: type=1326 audit(1781032971.611:4156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81939ce59 code=0x7ffc0000
[ 1559.695445][   T30] audit: type=1326 audit(1781032971.611:4157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81939ce59 code=0x7ffc0000
[ 1559.729745][T21954] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1559.749483][   T30] audit: type=1326 audit(1781032971.611:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81939ce59 code=0x7ffc0000
[ 1559.805227][   T30] audit: type=1326 audit(1781032971.641:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd81939ce59 code=0x7ffc0000
[ 1559.835910][T27194] ALSA: mixer_oss: invalid OSS volume 'u'
[ 1559.857629][   T30] audit: type=1326 audit(1781032971.641:4160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81939ce59 code=0x7ffc0000
[ 1559.886792][T21954] usb 2-1: device descriptor read/64, error -71
[ 1559.956154][   T30] audit: type=1326 audit(1781032971.651:4161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81939ce59 code=0x7ffc0000
[ 1560.011181][   T30] audit: type=1326 audit(1781032971.651:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81939ce59 code=0x7ffc0000
[ 1560.061453][   T30] audit: type=1326 audit(1781032971.651:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81939ce59 code=0x7ffc0000
[ 1560.119386][   T30] audit: type=1326 audit(1781032971.651:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27190 comm="syz.4.5258" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd81939cbc2 code=0x7ffc0000
[ 1560.166741][T21954] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1560.227249][T27202] bond0: (slave bond_slave_1): Releasing backup interface
[ 1560.296669][T21954] usb 2-1: device descriptor read/64, error -71
[ 1560.417370][T21954] usb usb2-port1: attempt power cycle
[ 1560.506956][ T5725] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1560.520039][T27205] ip6t_srh: unknown srh invflags 4000
[ 1560.716836][ T5725] usb 3-1: Using ep0 maxpacket: 16
[ 1560.726836][ T5725] usb 3-1: config 2 has an invalid interface number: 4 but max is 0
[ 1560.744010][ T5725] usb 3-1: config 2 has no interface number 0
[ 1560.759179][ T5725] usb 3-1: config 2 interface 4 has no altsetting 0
[ 1560.766922][T21954] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1560.782099][ T5725] usb 3-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=45.22
[ 1560.803071][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1560.817537][T21954] usb 2-1: device descriptor read/8, error -71
[ 1560.829138][ T5725] usb 3-1: Product: syz
[ 1560.838313][ T5725] usb 3-1: Manufacturer: syz
[ 1560.858316][ T5725] usb 3-1: SerialNumber: syz
[ 1561.086766][T21954] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1561.178906][T21954] usb 2-1: device descriptor read/8, error -71
[ 1561.299824][T21954] usb usb2-port1: unable to enumerate USB device
[ 1561.354117][ T5725] quatech2 3-1:2.4: Quatech 2nd gen USB to Serial Driver converter detected
[ 1561.395256][ T5725] usb 3-1: qt2_attach - failed to power on unit: -71
[ 1561.420731][ T5725] quatech2 3-1:2.4: probe with driver quatech2 failed with error -71
[ 1561.466306][ T5725] usb 3-1: USB disconnect, device number 7
[ 1561.637156][T27071] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1561.808093][T27071] usb 4-1: Using ep0 maxpacket: 8
[ 1561.819754][T27071] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1561.856067][T27071] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1561.901882][T27071] usb 4-1: config 1 has no interface number 0
[ 1561.936524][T27071] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1561.983484][T27071] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 1562.006370][T27071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.054375][T27071] usb 4-1: Product: syz
[ 1562.068747][T27071] usb 4-1: Manufacturer: syz
[ 1562.096849][T27071] usb 4-1: SerialNumber: syz
[ 1562.571079][T27071] usb 4-1: USB disconnect, device number 62
[ 1562.617632][T27061] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1562.796788][T27061] usb 6-1: Using ep0 maxpacket: 32
[ 1562.813535][T27061] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1562.826010][T27061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1562.838629][T27061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1562.848838][T27061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[ 1562.863299][T27061] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[ 1562.889730][T27061] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 1562.910580][T27061] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1562.928716][T27061] usb 6-1: Product: syz
[ 1562.950399][T27061] usb 6-1: Manufacturer: syz
[ 1562.965524][T27061] usb 6-1: SerialNumber: syz
[ 1562.976215][T27235] FAULT_INJECTION: forcing a failure.
[ 1562.976215][T27235] name failslab, interval 1, probability 0, space 0, times 0
[ 1562.996254][T27061] usb 6-1: config 0 descriptor??
[ 1563.018557][T27235] CPU: 0 UID: 0 PID: 27235 Comm: syz.2.5272 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1563.018586][T27235] Tainted: [L]=SOFTLOCKUP
[ 1563.018593][T27235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1563.018606][T27235] Call Trace:
[ 1563.018614][T27235]  <TASK>
[ 1563.018623][T27235]  dump_stack_lvl+0xe8/0x150
[ 1563.018651][T27235]  should_fail_ex+0x412/0x560
[ 1563.018686][T27235]  should_failslab+0xa8/0x100
[ 1563.018709][T27235]  __kmalloc_noprof+0xe8/0x760
[ 1563.018737][T27235]  ? tomoyo_encode+0x28b/0x550
[ 1563.018761][T27235]  tomoyo_encode+0x28b/0x550
[ 1563.018784][T27235]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1563.018805][T27235]  ? tomoyo_domain+0xd7/0x130
[ 1563.018828][T27235]  ? tomoyo_path_number_perm+0x219/0x630
[ 1563.018853][T27235]  tomoyo_path_number_perm+0x246/0x630
[ 1563.018882][T27235]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1563.018906][T27235]  ? __lock_acquire+0x6b5/0x2cf0
[ 1563.018940][T27235]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[ 1563.018980][T27235]  ? __fget_files+0x2a/0x420
[ 1563.019006][T27235]  ? __fget_files+0x2a/0x420
[ 1563.019028][T27235]  ? __fget_files+0x3a0/0x420
[ 1563.019049][T27235]  ? __fget_files+0x2a/0x420
[ 1563.019076][T27235]  security_file_ioctl+0xc3/0x2a0
[ 1563.019102][T27235]  __se_sys_ioctl+0x47/0x170
[ 1563.019130][T27235]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1563.019152][T27235]  do_syscall_64+0x174/0x580
[ 1563.019170][T27235]  ? trace_irq_disable+0x3b/0x140
[ 1563.019198][T27235]  ? clear_bhb_loop+0x40/0x90
[ 1563.019221][T27235]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1563.019239][T27235] RIP: 0033:0x7fa27c39ce59
[ 1563.019256][T27235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1563.019273][T27235] RSP: 002b:00007fa27d25d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1563.019293][T27235] RAX: ffffffffffffffda RBX: 00007fa27c615fa0 RCX: 00007fa27c39ce59
[ 1563.019307][T27235] RDX: 0000200000000140 RSI: 00000000000089f1 RDI: 0000000000000003
[ 1563.019319][T27235] RBP: 00007fa27d25d090 R08: 0000000000000000 R09: 0000000000000000
[ 1563.019331][T27235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1563.019342][T27235] R13: 00007fa27c616038 R14: 00007fa27c615fa0 R15: 00007fa27c73fa48
[ 1563.019373][T27235]  </TASK>
[ 1563.019522][T27235] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1563.303878][T27238] fuse: Unknown parameter 'fuse'
[ 1563.350720][T27237] 
[ 1563.353115][T27237] =====================================================
[ 1563.360056][T27237] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1563.367648][T27237] syzkaller #0 Tainted: G             L     
[ 1563.373618][T27237] -----------------------------------------------------
[ 1563.380573][T27237] syz.1.5271/27237 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1563.388296][T27237] ffff888076069f30 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1563.397004][T27237] 
[ 1563.397004][T27237] and this task is already holding:
[ 1563.404371][T27237] ffff888053dda028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1563.414165][T27237] which would create a new lock dependency:
[ 1563.420063][T27237]  (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 1563.428199][T27237] 
[ 1563.428199][T27237] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1563.437657][T27237]  (&client->buffer_lock){..-.}-{3:3}
[ 1563.437680][T27237] 
[ 1563.437680][T27237] ... which became SOFTIRQ-irq-safe at:
[ 1563.450775][T27237]   lock_acquire+0x106/0x350
[ 1563.455394][T27237]   _raw_spin_lock+0x2e/0x40
[ 1563.459978][T27237]   evdev_pass_values+0xb9/0xbd0
[ 1563.464910][T27237]   evdev_events+0x1e6/0x340
[ 1563.469498][T27237]   input_pass_values+0x288/0x890
[ 1563.474584][T27237]   input_event_dispose+0x3e5/0x6b0
[ 1563.479794][T27237]   input_inject_event+0x1dc/0x330
[ 1563.484927][T27237]   kd_sound_helper+0x101/0x210
[ 1563.489829][T27237]   input_handler_for_each_handle+0x101/0x1c0
[ 1563.495899][T27237]   call_timer_fn+0x192/0x5e0
[ 1563.500575][T27237]   __run_timer_base+0x652/0x8b0
[ 1563.505510][T27237]   run_timer_softirq+0xb7/0x170
[ 1563.510438][T27237]   handle_softirqs+0x22a/0x840
[ 1563.515302][T27237]   __irq_exit_rcu+0xca/0x220
[ 1563.519991][T27237]   irq_exit_rcu+0x9/0x30
[ 1563.524316][T27237]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1563.530032][T27237]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1563.536197][T27237]   pv_native_safe_halt+0xf/0x20
[ 1563.541150][T27237]   default_idle+0x9/0x20
[ 1563.545493][T27237]   default_idle_call+0x72/0xb0
[ 1563.550369][T27237]   do_idle+0x36a/0x5f0
[ 1563.554537][T27237]   cpu_startup_entry+0x43/0x60
[ 1563.559401][T27237]   rest_init+0x2de/0x300
[ 1563.563745][T27237]   start_kernel+0x38a/0x3e0
[ 1563.568468][T27237]   x86_64_start_reservations+0x24/0x30
[ 1563.574060][T27237]   x86_64_start_kernel+0x143/0x1c0
[ 1563.579264][T27237]   common_startup_64+0x13e/0x147
[ 1563.584296][T27237] 
[ 1563.584296][T27237] to a SOFTIRQ-irq-unsafe lock:
[ 1563.591345][T27237]  (tasklist_lock){.+.+}-{3:3}
[ 1563.591371][T27237] 
[ 1563.591371][T27237] ... which became SOFTIRQ-irq-unsafe at:
[ 1563.604008][T27237] ...
[ 1563.604048][T27237]   lock_acquire+0x106/0x350
[ 1563.611252][T27237]   _raw_read_lock+0x36/0x50
[ 1563.615884][T27237]   __do_wait+0xde/0x740
[ 1563.620135][T27237]   do_wait+0x1e7/0x510
[ 1563.624301][T27237]   kernel_wait+0xd6/0x1c0
[ 1563.628730][T27237]   call_usermodehelper_exec_work+0xbe/0x230
[ 1563.634727][T27237]   process_scheduled_works+0xb5d/0x1860
[ 1563.640367][T27237]   worker_thread+0xa53/0xfc0
[ 1563.645052][T27237]   kthread+0x389/0x470
[ 1563.649226][T27237]   ret_from_fork+0x514/0xb70
[ 1563.653908][T27237]   ret_from_fork_asm+0x1a/0x30
[ 1563.658775][T27237] 
[ 1563.658775][T27237] other info that might help us debug this:
[ 1563.658775][T27237] 
[ 1563.669004][T27237] Chain exists of:
[ 1563.669004][T27237]   &client->buffer_lock --> &new->fa_lock --> tasklist_lock
[ 1563.669004][T27237] 
[ 1563.682133][T27237]  Possible interrupt unsafe locking scenario:
[ 1563.682133][T27237] 
[ 1563.690540][T27237]        CPU0                    CPU1
[ 1563.695915][T27237]        ----                    ----
[ 1563.701348][T27237]   lock(tasklist_lock);
[ 1563.705609][T27237]                                local_irq_disable();
[ 1563.712365][T27237]                                lock(&client->buffer_lock);
[ 1563.719747][T27237]                                lock(&new->fa_lock);
[ 1563.726516][T27237]   <Interrupt>
[ 1563.730031][T27237]     lock(&client->buffer_lock);
[ 1563.735070][T27237] 
[ 1563.735070][T27237]  *** DEADLOCK ***
[ 1563.735070][T27237] 
[ 1563.743218][T27237] 7 locks held by syz.1.5271/27237:
[ 1563.748424][T27237]  #0: ffff88802cfe3110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0
[ 1563.757607][T27237]  #1: ffff888020368230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330
[ 1563.767719][T27237]  #2: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330
[ 1563.777396][T27237]  #3: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1563.786973][T27237]  #4: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 1563.796115][T27237]  #5: ffff888053dda028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1563.806302][T27237]  #6: ffffffff8e95cd20 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1563.815370][T27237] 
[ 1563.815370][T27237] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1563.825782][T27237] -> (&client->buffer_lock){..-.}-{3:3} {
[ 1563.831554][T27237]    IN-SOFTIRQ-W at:
[ 1563.835653][T27237]                     lock_acquire+0x106/0x350
[ 1563.841818][T27237]                     _raw_spin_lock+0x2e/0x40
[ 1563.847989][T27237]                     evdev_pass_values+0xb9/0xbd0
[ 1563.854517][T27237]                     evdev_events+0x1e6/0x340
[ 1563.860679][T27237]                     input_pass_values+0x288/0x890
[ 1563.867281][T27237]                     input_event_dispose+0x3e5/0x6b0
[ 1563.874076][T27237]                     input_inject_event+0x1dc/0x330
[ 1563.880845][T27237]                     kd_sound_helper+0x101/0x210
[ 1563.887276][T27237]                     input_handler_for_each_handle+0x101/0x1c0
[ 1563.894936][T27237]                     call_timer_fn+0x192/0x5e0
[ 1563.901187][T27237]                     __run_timer_base+0x652/0x8b0
[ 1563.907693][T27237]                     run_timer_softirq+0xb7/0x170
[ 1563.914201][T27237]                     handle_softirqs+0x22a/0x840
[ 1563.920617][T27237]                     __irq_exit_rcu+0xca/0x220
[ 1563.926867][T27237]                     irq_exit_rcu+0x9/0x30
[ 1563.932765][T27237]                     sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1563.940051][T27237]                     asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1563.947694][T27237]                     pv_native_safe_halt+0xf/0x20
[ 1563.954211][T27237]                     default_idle+0x9/0x20
[ 1563.960112][T27237]                     default_idle_call+0x72/0xb0
[ 1563.966535][T27237]                     do_idle+0x36a/0x5f0
[ 1563.972277][T27237]                     cpu_startup_entry+0x43/0x60
[ 1563.978700][T27237]                     rest_init+0x2de/0x300
[ 1563.984643][T27237]                     start_kernel+0x38a/0x3e0
[ 1563.990805][T27237]                     x86_64_start_reservations+0x24/0x30
[ 1563.997989][T27237]                     x86_64_start_kernel+0x143/0x1c0
[ 1564.004783][T27237]                     common_startup_64+0x13e/0x147
[ 1564.011391][T27237]    INITIAL USE at:
[ 1564.015342][T27237]                    lock_acquire+0x106/0x350
[ 1564.021419][T27237]                    _raw_spin_lock+0x2e/0x40
[ 1564.027510][T27237]                    evdev_pass_values+0xb9/0xbd0
[ 1564.033946][T27237]                    evdev_events+0x1e6/0x340
[ 1564.040025][T27237]                    input_pass_values+0x288/0x890
[ 1564.046537][T27237]                    input_event_dispose+0x330/0x6b0
[ 1564.053231][T27237]                    input_inject_event+0x1dc/0x330
[ 1564.059844][T27237]                    evdev_write+0x325/0x4c0
[ 1564.065837][T27237]                    vfs_write+0x29a/0xb90
[ 1564.071673][T27237]                    ksys_write+0x150/0x270
[ 1564.077577][T27237]                    do_syscall_64+0x174/0x580
[ 1564.083736][T27237]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.091195][T27237]  }
[ 1564.093695][T27237]  ... key      at: [<ffffffff9a7ca840>] evdev_open.__key.27+0x0/0x20
[ 1564.102001][T27237] 
[ 1564.102001][T27237] the dependencies between the lock to be acquired
[ 1564.102011][T27237]  and SOFTIRQ-irq-unsafe lock:
[ 1564.115570][T27237]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1564.120881][T27237]      HARDIRQ-ON-R at:
[ 1564.125039][T27237]                         lock_acquire+0x106/0x350
[ 1564.131580][T27237]                         _raw_read_lock+0x36/0x50
[ 1564.138100][T27237]                         __do_wait+0xde/0x740
[ 1564.144259][T27237]                         do_wait+0x1e7/0x510
[ 1564.150342][T27237]                         kernel_wait+0xd6/0x1c0
[ 1564.156686][T27237]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1564.164602][T27237]                         process_scheduled_works+0xb5d/0x1860
[ 1564.172161][T27237]                         worker_thread+0xa53/0xfc0
[ 1564.178765][T27237]                         kthread+0x389/0x470
[ 1564.184849][T27237]                         ret_from_fork+0x514/0xb70
[ 1564.191441][T27237]                         ret_from_fork_asm+0x1a/0x30
[ 1564.198213][T27237]      SOFTIRQ-ON-R at:
[ 1564.202380][T27237]                         lock_acquire+0x106/0x350
[ 1564.208891][T27237]                         _raw_read_lock+0x36/0x50
[ 1564.215402][T27237]                         __do_wait+0xde/0x740
[ 1564.221585][T27237]                         do_wait+0x1e7/0x510
[ 1564.227665][T27237]                         kernel_wait+0xd6/0x1c0
[ 1564.234008][T27237]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1564.241920][T27237]                         process_scheduled_works+0xb5d/0x1860
[ 1564.249474][T27237]                         worker_thread+0xa53/0xfc0
[ 1564.256084][T27237]                         kthread+0x389/0x470
[ 1564.262176][T27237]                         ret_from_fork+0x514/0xb70
[ 1564.268784][T27237]                         ret_from_fork_asm+0x1a/0x30
[ 1564.275569][T27237]      INITIAL USE at:
[ 1564.279652][T27237]                        lock_acquire+0x106/0x350
[ 1564.286078][T27237]                        _raw_write_lock_irq+0x3d/0x50
[ 1564.292941][T27237]                        copy_process+0x2b4c/0x4440
[ 1564.299548][T27237]                        kernel_clone+0x2d7/0x940
[ 1564.305971][T27237]                        user_mode_thread+0x110/0x180
[ 1564.312759][T27237]                        rest_init+0x23/0x300
[ 1564.318840][T27237]                        start_kernel+0x38a/0x3e0
[ 1564.325266][T27237]                        x86_64_start_reservations+0x24/0x30
[ 1564.332655][T27237]                        x86_64_start_kernel+0x143/0x1c0
[ 1564.339698][T27237]                        common_startup_64+0x13e/0x147
[ 1564.346565][T27237]      INITIAL READ USE at:
[ 1564.351089][T27237]                             lock_acquire+0x106/0x350
[ 1564.357978][T27237]                             _raw_read_lock+0x36/0x50
[ 1564.364854][T27237]                             __do_wait+0xde/0x740
[ 1564.371473][T27237]                             do_wait+0x1e7/0x510
[ 1564.377919][T27237]                             kernel_wait+0xd6/0x1c0
[ 1564.384608][T27237]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1564.392886][T27237]                             process_scheduled_works+0xb5d/0x1860
[ 1564.400782][T27237]                             worker_thread+0xa53/0xfc0
[ 1564.407741][T27237]                             kthread+0x389/0x470
[ 1564.414176][T27237]                             ret_from_fork+0x514/0xb70
[ 1564.421214][T27237]                             ret_from_fork_asm+0x1a/0x30
[ 1564.428340][T27237]    }
[ 1564.431022][T27237]    ... key      at: [<ffffffff8e60a058>] tasklist_lock+0x18/0x40
[ 1564.439117][T27237]    ... acquired at:
[ 1564.443130][T27237]    _raw_read_lock+0x36/0x50
[ 1564.447835][T27237]    send_sigurg+0x12b/0x420
[ 1564.452439][T27237]    sk_send_sigurg+0x6c/0x2e0
[ 1564.457219][T27237]    queue_oob+0x42c/0x4f0
[ 1564.461692][T27237]    unix_stream_sendmsg+0xcb1/0xe80
[ 1564.467016][T27237]    ____sys_sendmsg+0x972/0x9f0
[ 1564.471984][T27237]    ___sys_sendmsg+0x2a5/0x360
[ 1564.476847][T27237]    __x64_sys_sendmsg+0x1bd/0x2a0
[ 1564.481972][T27237]    do_syscall_64+0x174/0x580
[ 1564.486757][T27237]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.492837][T27237] 
[ 1564.495168][T27237]  -> (&f_owner->lock){....}-{3:3} {
[ 1564.500481][T27237]     INITIAL USE at:
[ 1564.504470][T27237]                      lock_acquire+0x106/0x350
[ 1564.510713][T27237]                      _raw_write_lock_irq+0x3d/0x50
[ 1564.517402][T27237]                      __f_setown+0x67/0x370
[ 1564.523398][T27237]                      generic_setlease+0xacf/0xfd0
[ 1564.530001][T27237]                      do_fcntl_add_lease+0x35e/0x470
[ 1564.536819][T27237]                      fcntl_setdeleg+0x14c/0x1e0
[ 1564.543270][T27237]                      do_fcntl+0xe6d/0x1a20
[ 1564.549260][T27237]                      __se_sys_fcntl+0xc8/0x150
[ 1564.555598][T27237]                      do_syscall_64+0x174/0x580
[ 1564.561931][T27237]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.569577][T27237]     INITIAL READ USE at:
[ 1564.574087][T27237]                           lock_acquire+0x106/0x350
[ 1564.580780][T27237]                           _raw_read_lock_irqsave+0x48/0x60
[ 1564.588174][T27237]                           send_sigio+0x38/0x370
[ 1564.594607][T27237]                           kill_fasync+0x24d/0x4d0
[ 1564.601207][T27237]                           lease_break_callback+0x26/0x30
[ 1564.608428][T27237]                           __break_lease+0x81f/0x1ea0
[ 1564.615304][T27237]                           vfs_mkdir+0x513/0x630
[ 1564.621734][T27237]                           filename_mkdirat+0x285/0x510
[ 1564.628775][T27237]                           __se_sys_mkdirat+0x35/0x150
[ 1564.635813][T27237]                           do_syscall_64+0x174/0x580
[ 1564.642598][T27237]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.650686][T27237]   }
[ 1564.653286][T27237]   ... key      at: [<ffffffff9a4ac880>] file_f_owner_allocate.__key+0x0/0x20
[ 1564.662354][T27237]   ... acquired at:
[ 1564.666249][T27237]    _raw_read_lock_irqsave+0x48/0x60
[ 1564.671642][T27237]    send_sigio+0x38/0x370
[ 1564.676071][T27237]    kill_fasync+0x24d/0x4d0
[ 1564.680670][T27237]    lease_break_callback+0x26/0x30
[ 1564.685892][T27237]    __break_lease+0x81f/0x1ea0
[ 1564.690757][T27237]    vfs_mkdir+0x513/0x630
[ 1564.695184][T27237]    filename_mkdirat+0x285/0x510
[ 1564.700211][T27237]    __se_sys_mkdirat+0x35/0x150
[ 1564.705163][T27237]    do_syscall_64+0x174/0x580
[ 1564.709929][T27237]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.716008][T27237] 
[ 1564.718343][T27237] -> (&new->fa_lock){....}-{3:3} {
[ 1564.723475][T27237]    INITIAL USE at:
[ 1564.727377][T27237]                    lock_acquire+0x106/0x350
[ 1564.733446][T27237]                    _raw_write_lock_irq+0x3d/0x50
[ 1564.739952][T27237]                    fasync_remove_entry+0xf1/0x1c0
[ 1564.746552][T27237]                    lease_modify+0x4f7/0x6c0
[ 1564.752636][T27237]                    locks_remove_file+0x5f0/0xf70
[ 1564.759153][T27237]                    __fput+0x3ae/0xa60
[ 1564.764798][T27237]                    task_work_run+0x1d9/0x270
[ 1564.770975][T27237]                    exit_to_user_mode_loop+0x193/0x680
[ 1564.777928][T27237]                    do_syscall_64+0x353/0x580
[ 1564.784102][T27237]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.791586][T27237]    INITIAL READ USE at:
[ 1564.795958][T27237]                         lock_acquire+0x106/0x350
[ 1564.802476][T27237]                         _raw_read_lock_irqsave+0x48/0x60
[ 1564.809701][T27237]                         kill_fasync+0x199/0x4d0
[ 1564.816135][T27237]                         lease_break_callback+0x26/0x30
[ 1564.823175][T27237]                         __break_lease+0x81f/0x1ea0
[ 1564.829863][T27237]                         vfs_mkdir+0x513/0x630
[ 1564.836116][T27237]                         filename_mkdirat+0x285/0x510
[ 1564.842978][T27237]                         __se_sys_mkdirat+0x35/0x150
[ 1564.849747][T27237]                         do_syscall_64+0x174/0x580
[ 1564.856353][T27237]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.864257][T27237]  }
[ 1564.866761][T27237]  ... key      at: [<ffffffff9a4ac8a0>] fasync_insert_entry.__key+0x0/0x20
[ 1564.875447][T27237]  ... acquired at:
[ 1564.879257][T27237]    _raw_read_lock_irqsave+0x48/0x60
[ 1564.884735][T27237]    kill_fasync+0x199/0x4d0
[ 1564.889348][T27237]    evdev_pass_values+0x627/0xbd0
[ 1564.894480][T27237]    evdev_events+0x1e6/0x340
[ 1564.899190][T27237]    input_pass_values+0x288/0x890
[ 1564.904317][T27237]    input_event_dispose+0x330/0x6b0
[ 1564.909625][T27237]    input_inject_event+0x1dc/0x330
[ 1564.914851][T27237]    evdev_write+0x325/0x4c0
[ 1564.919454][T27237]    vfs_write+0x29a/0xb90
[ 1564.923890][T27237]    ksys_write+0x150/0x270
[ 1564.928405][T27237]    do_syscall_64+0x174/0x580
[ 1564.933185][T27237]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.939270][T27237] 
[ 1564.941603][T27237] 
[ 1564.941603][T27237] stack backtrace:
[ 1564.947503][T27237] CPU: 0 UID: 0 PID: 27237 Comm: syz.1.5271 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1564.947533][T27237] Tainted: [L]=SOFTLOCKUP
[ 1564.947539][T27237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1564.947551][T27237] Call Trace:
[ 1564.947559][T27237]  <TASK>
[ 1564.947568][T27237]  dump_stack_lvl+0xe8/0x150
[ 1564.947589][T27237]  __lock_acquire+0x2a94/0x2cf0
[ 1564.947615][T27237]  ? kill_fasync+0x199/0x4d0
[ 1564.947638][T27237]  lock_acquire+0x106/0x350
[ 1564.947654][T27237]  ? kill_fasync+0x199/0x4d0
[ 1564.947679][T27237]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1564.947703][T27237]  _raw_read_lock_irqsave+0x48/0x60
[ 1564.947729][T27237]  ? kill_fasync+0x199/0x4d0
[ 1564.947751][T27237]  kill_fasync+0x199/0x4d0
[ 1564.947774][T27237]  ? kill_fasync+0x53/0x4d0
[ 1564.947797][T27237]  evdev_pass_values+0x627/0xbd0
[ 1564.947816][T27237]  ? evdev_pass_values+0x5f1/0xbd0
[ 1564.947835][T27237]  evdev_events+0x1e6/0x340
[ 1564.947850][T27237]  ? evdev_events+0x79/0x340
[ 1564.947866][T27237]  ? input_pass_values+0x8d/0x890
[ 1564.947880][T27237]  input_pass_values+0x288/0x890
[ 1564.947898][T27237]  ? input_handle_event+0x70c/0xf30
[ 1564.947921][T27237]  input_event_dispose+0x330/0x6b0
[ 1564.947944][T27237]  input_inject_event+0x1dc/0x330
[ 1564.947966][T27237]  ? input_inject_event+0xb5/0x330
[ 1564.947988][T27237]  evdev_write+0x325/0x4c0
[ 1564.948004][T27237]  ? __lock_acquire+0x6b5/0x2cf0
[ 1564.948022][T27237]  ? __pfx_evdev_write+0x10/0x10
[ 1564.948039][T27237]  ? bpf_lsm_file_permission+0x9/0x20
[ 1564.948063][T27237]  ? security_file_permission+0x75/0x260
[ 1564.948085][T27237]  ? rw_verify_area+0x255/0x4d0
[ 1564.948106][T27237]  ? __pfx_evdev_write+0x10/0x10
[ 1564.948123][T27237]  vfs_write+0x29a/0xb90
[ 1564.948149][T27237]  ? __pfx_vfs_write+0x10/0x10
[ 1564.948172][T27237]  ? __fget_files+0x2a/0x420
[ 1564.948192][T27237]  ? __fget_files+0x2a/0x420
[ 1564.948211][T27237]  ? __fget_files+0x3a0/0x420
[ 1564.948229][T27237]  ? __fget_files+0x2a/0x420
[ 1564.948251][T27237]  ksys_write+0x150/0x270
[ 1564.948275][T27237]  ? __pfx_ksys_write+0x10/0x10
[ 1564.948301][T27237]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.948318][T27237]  do_syscall_64+0x174/0x580
[ 1564.948334][T27237]  ? trace_irq_disable+0x3b/0x140
[ 1564.948358][T27237]  ? clear_bhb_loop+0x40/0x90
[ 1564.948375][T27237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1564.948392][T27237] RIP: 0033:0x7fb6f459ce59
[ 1564.948407][T27237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1564.948421][T27237] RSP: 002b:00007fb6f54a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1564.948439][T27237] RAX: ffffffffffffffda RBX: 00007fb6f4815fa0 RCX: 00007fb6f459ce59
[ 1564.948451][T27237] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000009
[ 1564.948462][T27237] RBP: 00007fb6f4632d6f R08: 0000000000000000 R09: 0000000000000000
[ 1564.948472][T27237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1564.948482][T27237] R13: 00007fb6f4816038 R14: 00007fb6f4815fa0 R15: 00007fb6f493fa48
[ 1564.948500][T27237]  </TASK>
[ 1564.977306][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[ 1565.126647][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[ 1565.293710][T27061] iforce 6-1:0.0: usb_submit_urb failed: -110
[ 1565.323044][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.341668][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.350440][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.366942][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.374186][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.399029][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.407668][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.413988][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.420408][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.429300][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.435595][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.442014][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.449042][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.455341][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.461788][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.468105][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.474327][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.480756][T27061] iforce 6-1:0.0: usb_submit_urb failed: -32
[ 1565.489377][T27061] input input159: Timeout waiting for response from device.
[ 1566.411363][T27071] usb 6-1: USB disconnect, device number 72