last executing test programs:

11m21.640904908s ago: executing program 0 (id=1642):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x189e42)
syz_usb_disconnect(r0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, 0xffffffffffffffff, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x110b}, @flat=@binder={0x73622a85, 0x100, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xc}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x200040c1)
r6 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0)
io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0)

11m20.734065323s ago: executing program 0 (id=1649):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x22883, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66)
syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
syz_open_procfs$pagemap(0x0, &(0x7f0000000000))
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000200))
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r2, r2, &(0x7f0000000000)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x5, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x3, 0x4, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x4, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

11m19.8624237s ago: executing program 0 (id=1658):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000300)="b9e0e7c56300698c0ba00a0d339c", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11m19.825033735s ago: executing program 0 (id=1659):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000006a00a911ffffffff000000000000097d"], 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0)
write$cgroup_int(r1, &(0x7f00000001c0)=0xfe, 0x12)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r6 = socket(0x40000000015, 0x805, 0x0)
getsockopt(r6, 0x1, 0x9, &(0x7f0000019100)=""/102400, &(0x7f00000000c0)=0x19000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c)
ioctl$XFS_IOC_INUMBERS(r5, 0x80405880, &(0x7f0000000100)={{0x6, 0x4, 0x4, 0x8000, 0x1000}, [{0x8000, 0x7ff, 0x3, 0x3}, {0x8, 0x5, 0x6, 0xe}, {0xd, 0xc, 0x1, 0x9}, {0xfffffffffffffffd, 0x5c, 0x2, 0x8}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mremap(&(0x7f0000751000/0x4000)=nil, 0x4000, 0x2000, 0x2, &(0x7f000000f000/0x2000)=nil)
membarrier(0x40, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

11m19.700239857s ago: executing program 0 (id=1660):
r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920000e00030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f"], 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]})
syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x801a)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x4, 0x4, 0x0, 0x0, @sint={0x7, 0xc29a}}]})
r5 = eventfd2(0x8, 0x1)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r5, 0x4})
write$eventfd(r5, &(0x7f0000000080)=0x430f, 0x8)
socket$pppl2tp(0x18, 0x1, 0x1)
sendto$inet6(r2, 0x0, 0x0, 0x2000, 0x0, 0x0)
syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0)

11m19.620895848s ago: executing program 0 (id=1661):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f2"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c)

11m19.301481337s ago: executing program 32 (id=1661):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0x4c)

2m5.634516187s ago: executing program 4 (id=4739):
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000600", @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

2m5.42821661s ago: executing program 4 (id=4742):
timer_create(0x0, 0x0, 0x0)
semget(0x1, 0x4, 0x39c)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000166000/0x3000)=nil, 0x3000, 0x5)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
writev(r0, &(0x7f0000000700)=[{&(0x7f0000000300)}], 0x1)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x200000000000011, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={<r3=>0xffffffffffffffff})
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x78, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2000000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
bind$packet(r2, &(0x7f0000000180)={0x11, 0x2, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m5.354280126s ago: executing program 4 (id=4743):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002000010027fd7000000000000a0020400000000300000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)

2m5.238524931s ago: executing program 4 (id=4745):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x2004c000)
sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x87}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040)
r0 = socket$netlink(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00')
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1}, {0x6, 0x80, 0xfd}]}, 0x10)
madvise(&(0x7f0000ffd000/0x1000)=nil, 0x7fe4d2ddf000, 0x11)
syz_emit_ethernet(0x3a, &(0x7f0000000700)={@local, @random="b82cf1eaf94a", @val={@void, {0x8100, 0x7, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0xb, 0x6, 0x0, @remote, @rand_addr=0x64010100}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2, 0x0, 0xe7}}}}}}, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000080)={0x0, 0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x400d1}, 0x8000)

2m5.091836345s ago: executing program 4 (id=4747):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x164, r1, 0xacf5e67dd0b583a1, 0xffffffff, 0xfffffffc, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xffe, 0x455}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x11d, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x13}, 0x8, 0xf7, @broadcast, 0x2, 0xd8, 0x6}}, @fast_bss_trans={0x37, 0xfd, {0x1, 0x8, "416245a5a608f5ff668dc9e4fa8b9ba7", "912becf314223d6a34283a2aaa03162661d370549ba9112a8b9cb443c06dcb30", "316503f3905fe5856cde0c98cdbe44299625fb59c7bb52c30ba78a87fd3dd475", [{0x3, 0x25, "4b0db76bc5d9c72b87d796f20ded68eb1073342f018aa2be0c522b08eb853ce7d759b5dbc1"}, {0x2, 0x6, "dc904bf13747"}, {0x3, 0xf, "5ab00068164aa83b2b3383807a6441"}, {0x3, 0x1e, "0a49664a36efd10a7718d568cec35e953a139716a2e182b6162fb96c4cb1"}, {0x1, 0x1c, "72d3be4cbda0d6e6be46d727a379a373d2d6575cf05e4cf3e4f586c3"}, {0x2, 0xf, "f9d8fb25c387c2e3a5e40cf1f1395a"}, {0x1, 0x18, "2e9b1a182e20620d44763de13cbcf6c52f10a3a2856b8a63"}, {0x3}]}}]}]]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800)

2m4.860249502s ago: executing program 4 (id=4751):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
syz_open_dev$dri(0x0, 0x1, 0x2100)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040011, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil})
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x2}, &(0x7f0000000480)=0x90)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
readv(0xffffffffffffffff, 0x0, 0x0)

2m4.611236958s ago: executing program 33 (id=4751):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
syz_open_dev$dri(0x0, 0x1, 0x2100)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040011, 0x0, 0x0)
landlock_create_ruleset(&(0x7f0000000040)={0x1801a, 0x2, 0x3}, 0x18, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f00000000c0)={0x0, 0x0, &(0x7f000000f000/0x2000)=nil})
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e24, @remote}}, 0x0, 0x2}, &(0x7f0000000480)=0x90)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
readv(0xffffffffffffffff, 0x0, 0x0)

9.638015873s ago: executing program 6 (id=5367):
r0 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x66, 0x0, 0x33, 0x8, 0x1b80, 0xe302, 0x8c2b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfa, 0x1, 0x10, 0x66, "", [{{0x9, 0x4, 0x3b, 0xff, 0x0, 0xfd, 0x49, 0x4a, 0x5}}]}}]}}, 0x0)
syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ac8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x6, 0xd, "85de"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8080)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000280)="05403d376a3a23915d41b70ea0463a3f41edfb12986cbbb211a98e58d6656564494bbb03f505ef8cd51513b7d02c24e8de37724b10be8941a3285391ad320580c481f8f228ffaa8f1650013ddb1ed144d61d3b3218179e114312bfb442c9e9fbdfb3418311b94a773f327804c9289e63bd09aa26178a9e68abaa26a30d8475e07f035bc50a7f80817811c08c3a1174ac89ae69ba7096b4ec14e4b00a97cda70fa101a99a7867209a238632e339ee060931062612de0f97db6a34")
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r6, 0x0, 0x26, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @loopback}, 0xc)
setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4)
bind$inet(r6, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r9=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xffffffff, @empty, 0xa09b}, {0xa, 0x4e21, 0x8000009, @empty, 0xd}, r9, 0x4}}, 0x48)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r7, &(0x7f0000000500)={0x10, 0x30, 0xfa00, {&(0x7f00000004c0), 0x4, {0xa, 0x4e23, 0xd, @mcast1, 0xc24}, r9}}, 0x38)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3)
sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r10, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8015}, 0x40004)

6.419894778s ago: executing program 6 (id=5381):
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
semget(0x1, 0x4, 0x39c)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000166000/0x3000)=nil, 0x3000, 0x5)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={<r4=>0xffffffffffffffff})
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x6c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2000000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
bind$packet(r3, &(0x7f0000000180)={0x11, 0x2, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.363849213s ago: executing program 6 (id=5382):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0)
getpeername(r0, 0x0, &(0x7f0000000240))

6.24459062s ago: executing program 6 (id=5383):
unshare(0x6a040000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000014)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x4)

5.971244695s ago: executing program 6 (id=5385):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'nr0\x00', 0xb356841f36698ca6})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0x7fffdffff000, 0x0, 0x4031, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c020905a1", @ANYRES32], 0x0)

5.243958785s ago: executing program 3 (id=5390):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4)
listen(r0, 0x2)
getpeername(r0, 0x0, &(0x7f0000000240))

5.141891888s ago: executing program 3 (id=5392):
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
semget(0x1, 0x4, 0x39c)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000166000/0x3000)=nil, 0x3000, 0x5)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={<r4=>0xffffffffffffffff})
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x6c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2000000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
bind$packet(r3, &(0x7f0000000180)={0x11, 0x2, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.078727895s ago: executing program 3 (id=5394):
openat$iommufd(0xffffffffffffff9c, 0x0, 0x8001, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
close(r0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket(0x1e, 0x802, 0x0)
r4 = epoll_create1(0x80000)
unshare(0x2c020400)
close(r3)
socket$kcm(0x10, 0x2, 0x0)
epoll_pwait(r4, &(0x7f00000004c0)=[{}], 0x1, 0xffffeed5, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0x60002005})
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000000)={0x1c0002009})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r2, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}, 0xfffffffffffffff0}], 0x0, 0x0, 0x0})
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

4.861524747s ago: executing program 1 (id=5397):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x164, r1, 0xacf5e67dd0b583a1, 0xffffffff, 0xfffffffc, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xffe, 0x455}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x11e, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x13}, 0x8, 0xf7, @broadcast, 0x2, 0xd8, 0x6}}, @fast_bss_trans={0x37, 0xfe, {0x1, 0x8, "416245a5a608f5ff668dc9e4fa8b9ba7", "912becf314223d6a34283a2aaa03162661d370549ba9112a8b9cb443c06dcb30", "316503f3905fe5856cde0c98cdbe44299625fb59c7bb52c30ba78a87fd3dd475", [{0x3, 0x23, "4b0db76bc5d9c72b87d796f20ded68eb1073342f018aa2be0c522b08eb853ce7d759b5"}, {0x2, 0x6, "dc904bf13747"}, {0x3, 0xf, "5ab00068164aa83b2b3383807a6441"}, {0x3, 0x1e, "0a49664a36efd10a7718d568cec35e953a139716a2e182b6162fb96c4cb1"}, {0x1, 0x1f, "72d3be4cbda0d6e6be46d727a379a373d2d6575cf05e4cf3e4f586c34f2d1e"}, {0x2, 0xf, "f9d8fb25c387c2e3a5e40cf1f1395a"}, {0x1, 0x18, "2e9b1a182e20620d44763de13cbcf6c52f10a3a2856b8a63"}, {0x3}]}}]}]]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800)

4.789651728s ago: executing program 1 (id=5398):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
recvfrom(r3, &(0x7f0000000280)=""/65, 0x41, 0x101, 0x0, 0x3b)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
splice(r5, &(0x7f0000000040)=0xfffffffffffffff9, r0, 0x0, 0xa, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300))
socket(0x28, 0x802, 0x100001)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="170000008000d99204000000ff0000cd0000000000", @ANYRES32, @ANYBLOB="8700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)

3.843258017s ago: executing program 1 (id=5405):
timer_create(0x0, 0x0, &(0x7f0000000300)=<r0=>0x0)
semget(0x1, 0x4, 0x39c)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000166000/0x3000)=nil, 0x3000, 0x5)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
writev(r1, &(0x7f0000000700)=[{&(0x7f0000000300)}], 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x200000000000011, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={<r4=>0xffffffffffffffff})
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x6c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2000000}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
bind$packet(r3, &(0x7f0000000180)={0x11, 0x2, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r3, &(0x7f00000015c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

3.814051977s ago: executing program 1 (id=5406):
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0)
r1 = socket(0x10, 0x2, 0x0)
write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x814)
recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0x8a01}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x20000000)
statx(0xffffffffffffffff, 0x0, 0x7100, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x1, 0xffffffff}}, 0x2e)
getsockopt(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x0)

3.764139735s ago: executing program 1 (id=5407):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12)
socket$netlink(0x10, 0x3, 0xc)
unshare(0x6e000000)
getgroups(0x400000000000005c, &(0x7f0000000040))
unshare(0x28000600)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, 0x0, &(0x7f0000000080))
socket$netlink(0x10, 0x3, 0x0)
gettid()
r1 = open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22)
fcntl$setlease(r1, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x1)
unshare(0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32, @ANYBLOB="0000000000000100b7080000b2e900007b8af8ff00"], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=<r2=>0x0)
ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f00000001c0)={0x74})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x3, 0x40000003, 0x3800, 0x5, 0x11, 0xffffffffffffffff, 0x80000000}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0)

3.595955979s ago: executing program 3 (id=5408):
syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400})
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000340))
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000001180)={0x28, 0x4, r3, 0x0, &(0x7f0000000180)="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", 0x800, 0xb5f6})
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56461, 0x4002, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x7, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x5, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xf7f5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x4088)
r10 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r10, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r9, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14)

2.925406418s ago: executing program 6 (id=5413):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x9})
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000200)=[{0x40, 0x3, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xffdff00c}, {0x6, 0x0, 0x7f, 0x8}]}, 0x10)
sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r4, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
clock_gettime(0xfffffffffffffffb, 0x0)
pipe(&(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB=';\x00'/11, @ANYRESOCT=r5], 0x20)
write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc)
sendfile(r6, r7, 0x0, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68)
splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0)

2.815905365s ago: executing program 5 (id=5414):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x508, r1, 0xacf5e67dd0b583a1, 0xffffffff, 0xfffffffc, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xffe, 0x455}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x296, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x13}, 0x8, 0xf7, @broadcast, 0x2, 0xd8, 0x6}}, @measure_req={0x26, 0xf1, {0x7, 0x3, 0x7f, "cfa73ef27c3687398ab34d861bc067c2903ba1a1ab1d6f6711453f4e0534ba264b07f787f816af4b4af6a8fa61c498368a1b6c33e3d2121a468a4ef859aa9e084c33ba1971300c419fc02a7f323a0687944ed1630adba81c03a8c545e5fa88af44cc48693e79e24f9733dc81593ff95004f5a97b8ad6b1b26726635cf41b4733b0d54b5cf803210c9b8e725253ca22cf83b3e7e0e85b6b95781f483e9120466b37dd2edef20cb0f539f342277f44100f7bacf14561103ec9176d669275426ed769e013a131551f09772ab9cbbcea4bb7f9316e0a0cc241673954c70e5cab23c4d32bd8172a83faa0d87ec687cf8f"}}, @fast_bss_trans={0x37, 0x105, {0x1, 0x8, "416245a5a608f5ff668dc9e4fa8b9ba7", "912becf314223d6a34283a2aaa03162661d370549ba9112a8b9cb443c06dcb30", "316503f3905fe5856cde0c98cdbe44299625fb59c7bb52c30ba78a87fd3dd475", [{0x3, 0x25, "4b0db76bc5d9c72b87d796f20ded68eb1073342f018aa2be0c522b08eb853ce7d759b5dbc1"}, {0x2, 0x6, "dc904bf13747"}, {0x3, 0xf, "5ab00068164aa83b2b3383807a6441"}, {0x3}, {0x1, 0x1f, "72d3be4cbda0d6e6be46d727a379a373d2d6575cf05e4cf3e4f586c34f2d1e"}, {0x2, 0xf, "f9d8fb25c387c2e3a5e40cf1f1395a"}, {0x1, 0x18, "2e9b1a182e20620d44763de13cbcf6c52f10a3a2856b8a63"}, {0x3, 0x23, "b215417a3d02329b7df71bb34c3c1e3f27174e8840dcf4780265888cc0c81e955cbe14"}]}}, @challenge={0x10, 0x1, 0xec}, @link_id={0x65, 0x12, {@random="2e561569cc32"}}, @dsss={0x3, 0x1, 0x4}, @random_vendor={0xdd, 0x58, "4c919a450468db53367be4e1381e4e114b9a1738b0e9dae6f0122a89a59bd64f1940017b17176310d15a8cd9e33a6f9ddef70d8f3d5e289768ea7e2bbd1e6c27f618f97387df2d858705e6f87114621ec8543eb69e6ec754"}, @supported_rates, @supported_rates={0x1, 0x6, [{0x5}, {0x48, 0x1}, {0x1b}, {0x9d388f935d851f92, 0x1}, {0x5}, {0xe5}]}]}], @beacon=[@NL80211_ATTR_BEACON_HEAD={0x1f3, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_b, @initial, {0x1, 0x9}, @value=@ver_80211n={0x0, 0xe, 0x2, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1}}, 0x6, @default, 0x2004, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x3}, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x4, 0x34, 0x5}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x59, "e69f21863b656026b67675196e4bdd3ca69a914e0048650a7ee425306c16ff53fbf160ed1ff6cab4254b9f8fcbb2c16edc40ae4dd6e1c9cd21557e6b184e30daf40baa6ba2c1c7c421c2b48aa9911deeabe48e286188ab85ce"}, {0xdd, 0x8b, "e750c8026b3ef86030827b8e1a791eafc0d12dcf176d218fe277e8b67d8235ff178407ef80c6e3cfe404a0c4fc93f4848ba838e382342477d96096a215da24c347f1f60571530f5f9a9c135316ef051904a971e287d18fe7416664656d532bf4a01b23dcfed4186e80d8e8cfc9139cd043dcc2296c0d39aad3ee96b1e140c6e69375c672e71110af8cdb83"}, {0xdd, 0x26, "c18a6b2a008ba79e13acf5e8e61948f416ce97c2af3f34e726c7e75983cd7ff040cce4342a02"}, {0xdd, 0x9c, "3656aa9cb026a923f65551e7f82d0d67b07d565dced7b0d92b8b8b4aa78d11984f436c8864fa29b47ae3012ea650155efc5e217be106d23e585108605a6499a680bbbb01c84039d9189b7beba9c78e1efdc6407fb8140c87d0d0503a462d295d6588269b7502a1584b3547d614c8898284adaacb276c1cf0fc53612d2162a49b9750467f7b21b80aeb3f1fa21c08944b05e632fa3bc8d55d33d26385"}]}}, @NL80211_ATTR_BEACON_TAIL={0x25, 0xf, [@ibss={0x6, 0x2, 0xb352}, @mic={0x8c, 0x18, {0x56c, "4f84ca892e45", @long="819653a1aa90000000000000009b00"}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}], @NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xa}]}]}, 0x508}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800)

2.746685197s ago: executing program 5 (id=5415):
unshare(0x6a040000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000014)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4)

2.576025384s ago: executing program 5 (id=5416):
r0 = socket$inet(0x2, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (fail_nth: 95)

2.366978958s ago: executing program 2 (id=5417):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000600)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd, 0x0, 0x3], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1, 0x2]], '\x00', [{0x4000000, 0x4000001, 0x1}, {0x7, 0x4}, {}, {0x0, 0x2}, {0x400000}, {}, {0x0, 0x400}, {0x0, 0xe98}, {0x0, 0x9}, {0x7ff}, {0x8, 0xfffffffc}]})
syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), <r3=>0x0, 0xce, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)

2.152434797s ago: executing program 5 (id=5418):
r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="401420d3426a5b878a8539633f3e4447f9f8d5b36a456fbed20b00af3759ccfccf8200000000"], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001214010028bd7000fcdbdf250800150000000000080001000000000008004b0013fffb000800030004"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x20000000)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r5, 0x81044804, &(0x7f0000000400)={0x1, 0x2})
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(0x0, 0x1, 0x0, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000ac0))
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x50, 0xffffffffffffffff, 0xec772000)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r6, &(0x7f0000000080)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0x8}, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
r8 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0)
process_vm_writev(r8, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0)
write$6lowpan_enable(r7, &(0x7f0000000040)='0', 0x1)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

1.989871187s ago: executing program 3 (id=5419):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802)
select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0)
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCFLSH(r0, 0x5608, 0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
userfaultfd(0x801)
unshare(0x2020600)
socket$tipc(0x1e, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r6, r5})
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r3})
sendmsg$nl_route(r2, 0x0, 0x20048040)

1.356315237s ago: executing program 2 (id=5420):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x164, r1, 0xacf5e67dd0b583a1, 0xffffffff, 0xfffffffc, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0xffe, 0x455}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x11f, 0xf, [@sec_chan_ofs={0x3e, 0x1, 0x1}, @rann={0x7e, 0x15, {{0x1, 0x13}, 0x8, 0xf7, @broadcast, 0x2, 0xd8, 0x6}}, @fast_bss_trans={0x37, 0xff, {0x1, 0x8, "416245a5a608f5ff668dc9e4fa8b9ba7", "912becf314223d6a34283a2aaa03162661d370549ba9112a8b9cb443c06dcb30", "316503f3905fe5856cde0c98cdbe44299625fb59c7bb52c30ba78a87fd3dd475", [{0x3, 0x24, "4b0db76bc5d9c72b87d796f20ded68eb1073342f018aa2be0c522b08eb853ce7d759b5db"}, {0x2, 0x6, "dc904bf13747"}, {0x3, 0xf, "5ab00068164aa83b2b3383807a6441"}, {0x3, 0x1e, "0a49664a36efd10a7718d568cec35e953a139716a2e182b6162fb96c4cb1"}, {0x1, 0x1f, "72d3be4cbda0d6e6be46d727a379a373d2d6575cf05e4cf3e4f586c34f2d1e"}, {0x2, 0xf, "f9d8fb25c387c2e3a5e40cf1f1395a"}, {0x1, 0x18, "2e9b1a182e20620d44763de13cbcf6c52f10a3a2856b8a63"}, {0x3}]}}]}]]}, 0x164}, 0x1, 0x0, 0x0, 0x8000}, 0x24008800)

1.228534003s ago: executing program 2 (id=5421):
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000166000/0x3000)=nil, 0x3000, 0x5)
timer_settime(0x0, 0x1, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80)
bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.16698104s ago: executing program 2 (id=5422):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x0)

1.089373082s ago: executing program 2 (id=5423):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000200)={0xa, 0x4e22, 0x47, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000d40)=ANY=[], 0xb0}}], 0x2, 0x44)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = io_uring_setup(0x1b56, 0x0)
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r3, 0x0)
utime(&(0x7f0000000200)='.\x00', 0x0)
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x10001, 0xffffffffffffff09})
mkdir(0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x5)
accept$inet6(r5, 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x5c, 0x1d, 0x1, 0x70bd28, 0x0, {}, [{0x48, 0x1, [@m_csum={0x44, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x15, 0x6, "4a426fc466fe5f34137478d2d5d5939ace"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x244a00, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
chmod(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x22)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x5, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x5, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0xffffffff, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
socket$netlink(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'})

1.047313444s ago: executing program 3 (id=5424):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000600)={0x0, [[0x7ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2], [0x0, 0x40000000, 0xfffffffd, 0x0, 0x3], [0x0, 0x20000232, 0x200006, 0x0, 0x0, 0x0, 0x1, 0x2]], '\x00', [{0x4000000, 0x4000001, 0x1}, {0x7, 0x4}, {}, {0x0, 0x2}, {0x400000}, {}, {0x0, 0x400}, {0x0, 0xe98}, {0x0, 0x9}, {0x7ff}, {0x8, 0xfffffffc}]})
syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0)
write$sysctl(0xffffffffffffffff, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000009c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600), <r3=>0x0, 0xce, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x72, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc)

705.240614ms ago: executing program 1 (id=5425):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
write$dsp(r0, &(0x7f0000000040)='F', 0x1)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)=0x10004)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x200000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5fd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xef}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000080))
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf7, {0x20}, [@nested={0x5, 0x15f, 0x0, 0x1, [@generic="a7"]}]}, 0x1c}}, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r7})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115)
getdents64(r9, &(0x7f0000000f80)=""/4075, 0xffffff2b)
setsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\fJR', 0x3}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94)

413.629554ms ago: executing program 5 (id=5426):
unshare(0x6a040000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x4000014)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4)

92.003337ms ago: executing program 2 (id=5427):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x3ea71bb2212c0549, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000240)=0x6a, 0x4)
r4 = open_tree(0xffffffffffffff9c, &(0x7f00000008c0)='\x00', 0x89901)
fchdir(r4)
close(r4)
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000200)=""/58)
io_uring_enter(r4, 0x259a, 0x6, 0x31, &(0x7f0000000200)={[0xde6]}, 0x8)
bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000180)=0x803, 0x4)
connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff"], 0x0)
sendmmsg(r3, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000400)="f2a3caf1952c87a38acd5773d122cb755867e6eb5188ea264a07a2f38b58c6338ec4f67c78fcd77e9f7d11fd8d50fb354b4d31782546bc2b3be2c5fbca0f7f7b57063937aff9c2d3f560c35c4303000000000000004d93d33bd26ec072165a8902b734f282d876c68369ee54253937a3db4200ecc2f177d174aa966e1ba47e88a8ed0e71dc51d3c7bee77a186d1e5a70c47a61455f269ee53bdfdc46dd854afbba774bac401cacb3c8c411724906a2d0761634e14d092dfdb6d91167d3076870743ad908e681", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f00000001c0)="27a1288636", 0x5}], 0x1}}], 0x2, 0x4000)
sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0)
syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100030000002035120280400001020301090269000301040001080b0101010a20020904000000010120000924010700060900b209040100000102200009040101010102200009050109100006998008718cfb250101181e00000904020000010220000904020101010220000905820900000e0452082501850f"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})

0s ago: executing program 5 (id=5428):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[@ANYBLOB="18000000010000000000000008000000180500002020702500000000002020207b1af8ff00000000bfa100000000000005010000f8ffffffb702000008000020b703000001000000850000000c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x2}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000500)={r0, &(0x7f0000000240)='\\\xf3p\x19\xaa^', 0x2000, &(0x7f0000000280)={@align=0x9, {0x2, 0xf4, 0x3, 0xf0f5}}, 0xac14, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000600)=0x3})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n', @ANYRES32], 0x40}}, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000200)={0x1, 0x7, 0x5, &(0x7f0000000040)={0xb, "810556c721393f4084c89ea7f77d040b00"}})
keyctl$set_reqkey_keyring(0xe, 0x5)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000840), &(0x7f0000000340)=r4}, 0x20)
syz_open_dev$hidraw(&(0x7f0000000640), 0xfffffffffffffffe, 0x448040)
close(r3)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000900)}, 0x20)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="270f28bd7000fbdbdf254c0000746a940a620ddf3f0038fda8427b000000000000000c0058022100000000837099480058007f000000000000000c00580062000000000000000c5f9a6a64a8ed3e30068c702c00580028000000000000000c005800"], 0x5c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40ff"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xffff, 0xffff}, {0x5, 0x7ff9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x841)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)

kernel console output (not intermixed with test programs):

ad config index 0 descriptor/start: -71
[ 1009.212545][T20209] usb 4-1: can't read configurations, error -71
[ 1009.582771][ T4995] Dev loop5: unable to read RDB block 7
[ 1009.594639][ T4995]  loop5: unable to read partition table
[ 1009.608882][ T4995] loop5: partition table beyond EOD, truncated
[ 1010.306672][T20231] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[ 1010.476108][T20230] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1010.579341][T22764] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4982'.
[ 1010.588285][T22765] FAULT_INJECTION: forcing a failure.
[ 1010.588285][T22765] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1010.588377][T22765] CPU: 1 UID: 0 PID: 22765 Comm: syz.1.4983 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1010.588425][T22765] Tainted: [L]=SOFTLOCKUP
[ 1010.588455][T22765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1010.588510][T22765] Call Trace:
[ 1010.588532][T22765]  <TASK>
[ 1010.588556][T22765]  dump_stack_lvl+0xe8/0x150
[ 1010.588655][T22765]  should_fail_ex+0x40c/0x560
[ 1010.588724][T22765]  _copy_to_user+0x31/0xb0
[ 1010.588786][T22765]  simple_read_from_buffer+0xe1/0x170
[ 1010.588897][T22765]  proc_fail_nth_read+0x1bb/0x230
[ 1010.588955][T22765]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1010.589020][T22765]  ? rw_verify_area+0x24a/0x4c0
[ 1010.589083][T22765]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1010.589148][T22765]  vfs_read+0x213/0xa80
[ 1010.589213][T22765]  ? __pfx___mutex_lock+0x10/0x10
[ 1010.589295][T22765]  ? __pfx_vfs_read+0x10/0x10
[ 1010.589368][T22765]  ? __fget_files+0x3a2/0x420
[ 1010.589419][T22765]  ? __fget_files+0x2a/0x420
[ 1010.589481][T22765]  ksys_read+0x150/0x270
[ 1010.589545][T22765]  ? __pfx_ksys_read+0x10/0x10
[ 1010.589616][T22765]  ? rcu_is_watching+0x15/0xb0
[ 1010.589698][T22765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1010.589753][T22765]  do_syscall_64+0x174/0x580
[ 1010.589825][T22765]  ? clear_bhb_loop+0x40/0x90
[ 1010.589912][T22765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1010.589986][T22765] RIP: 0033:0x7f3a0ef5d68e
[ 1010.590046][T22765] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1010.590099][T22765] RSP: 002b:00007f3a0d1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1010.590150][T22765] RAX: ffffffffffffffda RBX: 00007f3a0d1f66c0 RCX: 00007f3a0ef5d68e
[ 1010.590199][T22765] RDX: 000000000000000f RSI: 00007f3a0d1f60a0 RDI: 0000000000000004
[ 1010.590233][T22765] RBP: 00007f3a0d1f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1010.590274][T22765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1010.590310][T22765] R13: 00007f3a0f216038 R14: 00007f3a0f215fa0 R15: 00007f3a0f33fa48
[ 1010.590375][T22765]  </TASK>
[ 1010.654664][T20230] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9
[ 1010.858526][T20230] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1010.877851][T20230] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1010.887244][T20230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1010.895449][T20230] usb 4-1: Product: syz
[ 1010.900083][T20231] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1010.907715][   T30] kauditd_printk_skb: 124 callbacks suppressed
[ 1010.907754][   T30] audit: type=1326 audit(1782229739.021:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22767 comm="syz.1.4984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a0ef9ce59 code=0x0
[ 1010.939061][T20230] usb 4-1: Manufacturer: syz
[ 1010.943742][T20230] usb 4-1: SerialNumber: syz
[ 1010.951461][T20230] usb 4-1: config 0 descriptor??
[ 1010.956843][T20231] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1010.964544][T20231] usb 3-1: can't read configurations, error -71
[ 1011.011155][T22770] syzkaller1: entered allmulticast mode
[ 1012.016019][T20209] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1012.016030][T20231] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1012.166018][T20209] usb 2-1: Using ep0 maxpacket: 16
[ 1012.175570][T20209] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1012.176202][T20231] usb 3-1: Using ep0 maxpacket: 16
[ 1012.190758][T20209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1012.199072][T20209] usb 2-1: Product: syz
[ 1012.203826][T20209] usb 2-1: Manufacturer: syz
[ 1012.209126][T20209] usb 2-1: SerialNumber: syz
[ 1012.214775][T20231] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1012.230160][T20231] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1012.239545][T20231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.260280][T20231] usb 3-1: config 0 descriptor??
[ 1012.435426][T22781] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1012.448741][T22781] syzkaller0: entered promiscuous mode
[ 1012.454322][T22781] syzkaller0: entered allmulticast mode
[ 1012.474587][T20209] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1012.485750][T20209] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1012.496518][T20209] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1012.506867][T20209] usb 2-1: media controller created
[ 1012.519946][T20209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1012.646122][ T5715] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1012.719850][T20209] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1012.748981][T20209] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1012.760779][T20209] usb 2-1: USB disconnect, device number 44
[ 1012.797514][ T5715] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1012.808953][ T5715] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1012.826113][ T5715] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1012.847501][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1012.865450][T22785] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[ 1012.885326][T20231] usbhid 3-1:0.0: can't add hid device: -71
[ 1012.892161][T20231] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1012.909328][T20231] usb 3-1: USB disconnect, device number 56
[ 1013.165033][ T5715] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1013.179092][T20230] usb 4-1: USB disconnect, device number 60
[ 1013.317707][ T5715] usb 6-1: USB disconnect, device number 80
[ 1013.463730][T22798] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4995'.
[ 1013.826303][T20230] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[ 1013.850421][T22810] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5000'.
[ 1014.332299][T20230] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1014.355579][T20230] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1014.369760][T20230] usb 2-1: can't read configurations, error -71
[ 1014.686054][T20231] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1014.854689][T20231] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1014.884037][T20231] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1014.911504][T20231] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1014.939147][T20231] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1014.974638][T20231] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1015.005388][T20231] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1015.015194][T22825] netlink: 'syz.2.5007': attribute type 13 has an invalid length.
[ 1015.036380][T20231] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1015.049414][T20231] usb 4-1: Product: syz
[ 1015.059916][T20231] usb 4-1: Manufacturer: syz
[ 1015.083182][T20231] cdc_wdm 4-1:1.0: skipping garbage
[ 1015.089033][T20231] cdc_wdm 4-1:1.0: skipping garbage
[ 1015.107307][T20231] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1015.123648][T22831] sg_read: process 1271 (syz.1.5009) changed security contexts after opening file descriptor, this is not allowed.
[ 1015.258771][T22837] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5011'.
[ 1015.316690][T22839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5012'.
[ 1015.360568][T22839] bridge4: port 1(veth3) entered blocking state
[ 1015.368024][T22839] bridge4: port 1(veth3) entered disabled state
[ 1015.375015][T22839] veth3: entered allmulticast mode
[ 1015.404448][T22839] veth3: entered promiscuous mode
[ 1015.626428][T22815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1015.657385][T22815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1015.694247][T20230] usb 4-1: USB disconnect, device number 61
[ 1015.758167][T22842] bridge4: port 2(veth0_to_bond) entered blocking state
[ 1015.786117][T22842] bridge4: port 2(veth0_to_bond) entered disabled state
[ 1015.804325][T22842] veth0_to_bond: entered allmulticast mode
[ 1015.827302][T22842] veth0_to_bond: entered promiscuous mode
[ 1015.846776][T22842] bridge4: port 2(veth0_to_bond) entered blocking state
[ 1015.854028][T22842] bridge4: port 2(veth0_to_bond) entered forwarding state
[ 1015.899050][T22846] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5014'.
[ 1016.542431][T22862] syzkaller0: entered promiscuous mode
[ 1016.556674][T22862] syzkaller0: entered allmulticast mode
[ 1016.577644][   T30] audit: type=1326 audit(1782229744.691:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22859 comm="syz.3.5018" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b4d39ce59 code=0x0
[ 1016.616025][T20222] usb 6-1: new low-speed USB device number 81 using dummy_hcd
[ 1017.449899][T22876] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5024'.
[ 1017.479777][T22876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5024'.
[ 1017.504388][T22876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5024'.
[ 1018.346123][T20222] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1018.517355][T20222] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1018.544112][T20222] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1018.568530][T20222] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1018.585615][T20222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1018.620372][T20222] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1018.656780][T20222] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1018.671316][T20222] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1018.691159][T20222] usb 4-1: Product: syz
[ 1018.697440][T20222] usb 4-1: Manufacturer: syz
[ 1018.724135][T20222] cdc_wdm 4-1:1.0: skipping garbage
[ 1018.744469][T20222] cdc_wdm 4-1:1.0: skipping garbage
[ 1018.765717][T20222] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1018.796064][ T5715] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1018.957318][ T5715] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1018.977601][ T5715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1018.996386][T20230] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1019.004660][ T5715] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1019.019766][ T5715] usb 6-1: config 1 has no interface number 1
[ 1019.034462][ T5715] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1019.067026][ T5715] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1019.090503][ T5715] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1019.103448][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1019.121581][ T5715] usb 6-1: Product: syz
[ 1019.127767][ T5715] usb 6-1: Manufacturer: syz
[ 1019.133539][ T5715] usb 6-1: SerialNumber: syz
[ 1019.147927][T22892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1019.166322][T22892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1019.176044][T20230] usb 2-1: Using ep0 maxpacket: 8
[ 1019.189657][T20231] usb 4-1: USB disconnect, device number 62
[ 1019.200223][T20230] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 1019.220313][T20230] usb 2-1: config 0 has no interface number 0
[ 1019.229387][T20230] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1019.247601][T20230] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1019.267958][T20230] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1019.284662][T20230] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1019.306359][T20230] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1019.323950][T20230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1019.335141][T20230] usb 2-1: config 0 descriptor??
[ 1019.359958][T20230] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1019.597158][T20230] usb 2-1: USB disconnect, device number 47
[ 1019.612681][T20230] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 1019.806042][T20231] usb 3-1: new low-speed USB device number 57 using dummy_hcd
[ 1019.918485][ T5715] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 1019.926788][ T5715] usb 6-1: MIDIStreaming interface descriptor not found
[ 1019.998886][ T5715] usb 6-1: USB disconnect, device number 82
[ 1020.089620][ T7339] udevd[7339]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1020.207795][T22924] xt_policy: output policy not valid in PREROUTING and INPUT
[ 1020.333533][T20231] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1020.346857][T20231] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1020.356878][T20231] usb 3-1: can't read configurations, error -71
[ 1020.387235][T20209] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1020.416061][ T5715] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1020.516077][T20234] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1020.536041][T20209] usb 4-1: Using ep0 maxpacket: 32
[ 1020.544560][T20209] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1020.554867][T20209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.563007][T20209] usb 4-1: Product: syz
[ 1020.567367][ T5715] usb 6-1: Using ep0 maxpacket: 8
[ 1020.572437][T20209] usb 4-1: Manufacturer: syz
[ 1020.577206][T20209] usb 4-1: SerialNumber: syz
[ 1020.583127][ T5715] usb 6-1: config 2 has an invalid interface number: 72 but max is 0
[ 1020.591626][ T5715] usb 6-1: config 2 has no interface number 0
[ 1020.601722][ T5715] usb 6-1: config 2 interface 72 has no altsetting 0
[ 1020.610234][ T5715] usb 6-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=cf.6f
[ 1020.619516][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1020.627648][ T5715] usb 6-1: Product: syz
[ 1020.632063][ T5715] usb 6-1: Manufacturer: syz
[ 1020.636759][ T5715] usb 6-1: SerialNumber: syz
[ 1020.666045][T20234] usb 2-1: Using ep0 maxpacket: 32
[ 1020.672953][T20234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1020.683428][T20234] usb 2-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1020.698804][T20234] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1020.705478][T20234] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[ 1020.716794][T20234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1020.727490][T20234] usb 2-1: config 0 descriptor??
[ 1020.736868][T20234] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[ 1020.874411][T22919] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5037'.
[ 1020.874440][T22919] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5037'.
[ 1020.874459][T22919] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5037'.
[ 1021.022848][T20209] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1021.034937][T20209] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1021.049554][T20209] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1021.058617][T20209] usb 4-1: media controller created
[ 1021.068856][ T5715] usb 6-1: No union descriptors
[ 1021.080640][ T5715] usb 6-1: USB disconnect, device number 83
[ 1021.098835][T20209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1021.130424][T20209] usb 4-1: selecting invalid altsetting 2
[ 1021.136309][T20209] set interface failed
[ 1021.136334][T20209] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1021.147679][T20209] error writing reg: 0xff, val: 0x00
[ 1021.175603][T20209] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1021.197418][T20209] usb 4-1: USB disconnect, device number 63
[ 1021.796059][T20231] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1021.946019][T20231] usb 4-1: Using ep0 maxpacket: 32
[ 1021.952376][T20231] usb 4-1: config 123 interface 0 has no altsetting 0
[ 1021.961148][T20231] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1021.970577][T20231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1021.978907][T20231] usb 4-1: Product: syz
[ 1021.983230][T20231] usb 4-1: Manufacturer: syz
[ 1021.988616][T20231] usb 4-1: SerialNumber: syz
[ 1022.139191][T22946] mac80211_hwsim hwsim22 syzkaller0: Caught tx_queue_len zero misconfig
[ 1022.157104][T22946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5047'.
[ 1022.167799][T22946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5047'.
[ 1022.410544][T20231] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1022.419742][T20231] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1022.431038][T20231] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1022.438334][T20231] usb 4-1: media controller created
[ 1022.449506][T20231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1022.464088][T20231] set interface failed
[ 1022.464113][T20231] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1022.475136][T20231] error writing reg: 0xff, val: 0x00
[ 1022.493088][T20231] dvb_usb_mxl111sf 4-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1022.514484][T20231] usb 4-1: USB disconnect, device number 64
[ 1022.536504][T20230] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1022.708170][T20230] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1022.717269][T20230] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1022.727601][T20230] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1022.739257][T20230] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1022.748925][T20230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1022.757039][T20230] usb 3-1: Product: syz
[ 1022.761406][T20230] usb 3-1: Manufacturer: syz
[ 1022.766084][T20230] usb 3-1: SerialNumber: syz
[ 1022.776617][T20230] usb 3-1: selecting invalid altsetting 1
[ 1022.783093][T20230] usb 3-1: unit 6 not found!
[ 1022.876142][T20234] usb 6-1: new high-speed USB device number 84 using dummy_hcd
[ 1022.990678][T22959] FAULT_INJECTION: forcing a failure.
[ 1022.990678][T22959] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1023.004428][T22959] CPU: 1 UID: 0 PID: 22959 Comm: syz.3.5052 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1023.004453][T22959] Tainted: [L]=SOFTLOCKUP
[ 1023.004459][T22959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1023.004469][T22959] Call Trace:
[ 1023.004475][T22959]  <TASK>
[ 1023.004481][T22959]  dump_stack_lvl+0xe8/0x150
[ 1023.004503][T22959]  should_fail_ex+0x40c/0x560
[ 1023.004527][T22959]  _copy_from_user+0x2d/0xb0
[ 1023.004552][T22959]  userio_char_write+0xc6/0x4b0
[ 1023.004642][T22959]  ? apparmor_file_permission+0x1f4/0x300
[ 1023.004667][T22959]  ? __pfx_userio_char_write+0x10/0x10
[ 1023.004688][T22959]  ? bpf_lsm_fs_context_dup+0x10/0x20
[ 1023.004705][T22959]  ? security_file_permission+0x75/0x260
[ 1023.004728][T22959]  ? rw_verify_area+0x203/0x4c0
[ 1023.004746][T22959]  ? __pfx_userio_char_write+0x10/0x10
[ 1023.004767][T22959]  vfs_write+0x296/0xba0
[ 1023.004786][T22959]  ? __pfx_vfs_write+0x10/0x10
[ 1023.004802][T22959]  ? lock_release+0x4b/0x3c0
[ 1023.004819][T22959]  ? __fget_files+0x2a/0x420
[ 1023.004833][T22959]  ? __fget_files+0x3a2/0x420
[ 1023.004846][T22959]  ? __fget_files+0x2a/0x420
[ 1023.004862][T22959]  ksys_write+0x150/0x270
[ 1023.004879][T22959]  ? __pfx_ksys_write+0x10/0x10
[ 1023.004904][T22959]  ? rcu_is_watching+0x15/0xb0
[ 1023.004923][T22959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1023.004939][T22959]  do_syscall_64+0x174/0x580
[ 1023.004959][T22959]  ? clear_bhb_loop+0x40/0x90
[ 1023.004975][T22959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1023.004990][T22959] RIP: 0033:0x7f4b4d39ce59
[ 1023.005004][T22959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1023.005018][T22959] RSP: 002b:00007f4b4e2b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1023.005035][T22959] RAX: ffffffffffffffda RBX: 00007f4b4d615fa0 RCX: 00007f4b4d39ce59
[ 1023.005048][T22959] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000004
[ 1023.005059][T22959] RBP: 00007f4b4e2b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1023.005069][T22959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1023.005077][T22959] R13: 00007f4b4d616038 R14: 00007f4b4d615fa0 R15: 00007f4b4d73fa48
[ 1023.005095][T22959]  </TASK>
[ 1023.246358][T20234] usb 6-1: Using ep0 maxpacket: 8
[ 1023.255227][T20234] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1023.264504][T20234] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1023.273148][T20234] usb 6-1: Product: syz
[ 1023.277492][T20234] usb 6-1: Manufacturer: syz
[ 1023.282148][T20234] usb 6-1: SerialNumber: syz
[ 1023.289083][T20234] usb 6-1: config 0 descriptor??
[ 1023.329715][ T5715] usb 2-1: USB disconnect, device number 48
[ 1023.364605][T20234] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1023.809787][T20230] usb 3-1: 2:0: failed to get current value for ch 0 (-71)
[ 1023.929738][T20230] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1023.977317][T20230] usb 3-1: USB disconnect, device number 59
[ 1023.980650][T22955] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present
[ 1024.006950][T20234] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[ 1024.028615][T17356] udevd[17356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1024.053139][T20234] sq905 6-1:0.0: probe with driver sq905 failed with error -71
[ 1024.072019][T20234] usb 6-1: USB disconnect, device number 84
[ 1024.678284][T22988] FAULT_INJECTION: forcing a failure.
[ 1024.678284][T22988] name failslab, interval 1, probability 0, space 0, times 0
[ 1024.719903][T22988] CPU: 1 UID: 0 PID: 22988 Comm: syz.1.5062 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1024.719939][T22988] Tainted: [L]=SOFTLOCKUP
[ 1024.719945][T22988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1024.719955][T22988] Call Trace:
[ 1024.719961][T22988]  <TASK>
[ 1024.719968][T22988]  dump_stack_lvl+0xe8/0x150
[ 1024.719991][T22988]  should_fail_ex+0x40c/0x560
[ 1024.720012][T22988]  should_failslab+0xa8/0x100
[ 1024.720029][T22988]  kmem_cache_alloc_noprof+0xa6/0x5f0
[ 1024.720052][T22988]  ? xfrm_state_alloc+0x24/0x2f0
[ 1024.720067][T22988]  ? xfrm_state_alloc+0x24/0x2f0
[ 1024.720083][T22988]  xfrm_state_alloc+0x24/0x2f0
[ 1024.720098][T22988]  xfrm_add_sa+0x15a9/0x40d0
[ 1024.720121][T22988]  ? __pfx_xfrm_add_sa+0x10/0x10
[ 1024.720139][T22988]  ? apparmor_capable+0x126/0x170
[ 1024.720168][T22988]  ? __nla_parse+0x40/0x60
[ 1024.720190][T22988]  xfrm_user_rcv_msg+0x7a8/0xf30
[ 1024.720211][T22988]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1024.720246][T22988]  ? __mutex_trylock_common+0x15f/0x270
[ 1024.720268][T22988]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1024.720289][T22988]  ? rcu_is_watching+0x15/0xb0
[ 1024.720307][T22988]  ? trace_contention_end+0x3d/0x140
[ 1024.720329][T22988]  netlink_rcv_skb+0x226/0x4a0
[ 1024.720352][T22988]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1024.720373][T22988]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1024.720398][T22988]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1024.720420][T22988]  ? lock_release+0x4b/0x3c0
[ 1024.720435][T22988]  ? net_generic+0x1e/0x240
[ 1024.720475][T22988]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1024.720505][T22988]  xfrm_netlink_rcv+0x79/0x90
[ 1024.720525][T22988]  netlink_unicast+0x7bb/0x940
[ 1024.720548][T22988]  netlink_sendmsg+0x813/0xb40
[ 1024.720575][T22988]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1024.720597][T22988]  ? rcu_is_watching+0x15/0xb0
[ 1024.720615][T22988]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1024.720635][T22988]  ? lock_release+0x4b/0x3c0
[ 1024.720651][T22988]  ? arch_stack_walk+0xfb/0x150
[ 1024.720672][T22988]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1024.720694][T22988]  sock_sendmsg_nosec+0x13a/0x180
[ 1024.720712][T22988]  ____sys_sendmsg+0x54e/0x850
[ 1024.720736][T22988]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1024.720760][T22988]  ? lock_release+0x4b/0x3c0
[ 1024.720781][T22988]  ? import_iovec+0x73/0xa0
[ 1024.720806][T22988]  ___sys_sendmsg+0x2a5/0x360
[ 1024.720827][T22988]  ? rcu_is_watching+0x15/0xb0
[ 1024.720845][T22988]  ? get_pid_task+0x20/0x1f0
[ 1024.720862][T22988]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1024.720885][T22988]  ? rcu_is_watching+0x15/0xb0
[ 1024.720912][T22988]  ? __fget_files+0x2a/0x420
[ 1024.720926][T22988]  ? __fget_files+0x3a2/0x420
[ 1024.720943][T22988]  __x64_sys_sendmsg+0x1b1/0x290
[ 1024.720966][T22988]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1024.720993][T22988]  ? rcu_is_watching+0x15/0xb0
[ 1024.721012][T22988]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.721027][T22988]  do_syscall_64+0x174/0x580
[ 1024.721047][T22988]  ? trace_irq_disable+0x3b/0x140
[ 1024.721069][T22988]  ? clear_bhb_loop+0x40/0x90
[ 1024.721086][T22988]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1024.721101][T22988] RIP: 0033:0x7f3a0ef9ce59
[ 1024.721115][T22988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1024.721129][T22988] RSP: 002b:00007f3a0d1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1024.721151][T22988] RAX: ffffffffffffffda RBX: 00007f3a0f215fa0 RCX: 00007f3a0ef9ce59
[ 1024.721163][T22988] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000004
[ 1024.721174][T22988] RBP: 00007f3a0d1f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1024.721184][T22988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1024.721193][T22988] R13: 00007f3a0f216038 R14: 00007f3a0f215fa0 R15: 00007f3a0f33fa48
[ 1024.721210][T22988]  </TASK>
[ 1025.166170][ T5715] usb 6-1: new high-speed USB device number 85 using dummy_hcd
[ 1025.368821][ T5715] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1025.397479][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.427051][ T5715] usb 6-1: Product: syz
[ 1025.448982][ T5715] usb 6-1: Manufacturer: syz
[ 1025.469751][ T5715] usb 6-1: SerialNumber: syz
[ 1025.776265][T23003] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5061'.
[ 1026.000954][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1026.036150][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1026.197958][T20230] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1026.368278][T20230] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1026.392902][T20230] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1026.453824][T20230] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1026.520160][T20230] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1026.532171][T20230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.582005][T20230] usb 3-1: Product: syz
[ 1026.615035][T20230] usb 3-1: Manufacturer: syz
[ 1026.635268][T20230] usb 3-1: SerialNumber: syz
[ 1026.678991][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO
[ 1026.703940][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1026.733872][ T5715] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1026.790177][T20230] usb 3-1: selecting invalid altsetting 1
[ 1026.801621][ T5715] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[ 1026.839467][T20230] usb 3-1: unit 6 not found!
[ 1026.881432][ T5715] usb 6-1: USB disconnect, device number 85
[ 1027.387869][ T5715] IPVS: starting estimator thread 0...
[ 1027.496832][T23019] IPVS: using max 53 ests per chain, 127200 per kthread
[ 1027.662404][T23025] FAULT_INJECTION: forcing a failure.
[ 1027.662404][T23025] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1027.710393][T23025] CPU: 0 UID: 0 PID: 23025 Comm: syz.5.5072 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1027.710430][T23025] Tainted: [L]=SOFTLOCKUP
[ 1027.710440][T23025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1027.710460][T23025] Call Trace:
[ 1027.710469][T23025]  <TASK>
[ 1027.710478][T23025]  dump_stack_lvl+0xe8/0x150
[ 1027.710509][T23025]  should_fail_ex+0x40c/0x560
[ 1027.710539][T23025]  _copy_to_user+0x31/0xb0
[ 1027.710560][T23025]  simple_read_from_buffer+0xe1/0x170
[ 1027.710597][T23025]  proc_fail_nth_read+0x1bb/0x230
[ 1027.710621][T23025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1027.710645][T23025]  ? rw_verify_area+0x24a/0x4c0
[ 1027.710670][T23025]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1027.710691][T23025]  vfs_read+0x213/0xa80
[ 1027.710716][T23025]  ? __pfx___mutex_lock+0x10/0x10
[ 1027.710745][T23025]  ? __pfx_vfs_read+0x10/0x10
[ 1027.710773][T23025]  ? __fget_files+0x3a2/0x420
[ 1027.710793][T23025]  ? __fget_files+0x2a/0x420
[ 1027.710827][T23025]  ksys_read+0x150/0x270
[ 1027.710852][T23025]  ? __pfx_ksys_read+0x10/0x10
[ 1027.710878][T23025]  ? rcu_is_watching+0x15/0xb0
[ 1027.710913][T23025]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1027.710936][T23025]  do_syscall_64+0x174/0x580
[ 1027.710963][T23025]  ? trace_irq_disable+0x3b/0x140
[ 1027.710997][T23025]  ? clear_bhb_loop+0x40/0x90
[ 1027.711021][T23025]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1027.711043][T23025] RIP: 0033:0x7f769395d68e
[ 1027.711063][T23025] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1027.711083][T23025] RSP: 002b:00007f76948e6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1027.711107][T23025] RAX: ffffffffffffffda RBX: 00007f76948e76c0 RCX: 00007f769395d68e
[ 1027.711123][T23025] RDX: 000000000000000f RSI: 00007f76948e70a0 RDI: 0000000000000004
[ 1027.711138][T23025] RBP: 00007f76948e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1027.711152][T23025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1027.711166][T23025] R13: 00007f7693c16038 R14: 00007f7693c15fa0 R15: 00007f7693d3fa48
[ 1027.711192][T23025]  </TASK>
[ 1027.730876][T23027] sctp: [Deprecated]: syz.6.5073 (pid 23027) Use of int in max_burst socket option.
[ 1027.730876][T23027] Use struct sctp_assoc_value instead
[ 1027.967452][T23029] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5073'.
[ 1028.063859][T20230] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2)
[ 1028.076261][   T30] audit: type=1804 audit(1782229756.171:3614): pid=23023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5071" name="/newroot/398/file1" dev="tmpfs" ino=2110 res=1 errno=0
[ 1028.104713][T23029] 8021q: VLANs not supported on ip_vti0
[ 1028.228373][T20230] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1028.272833][T20230] usb 3-1: USB disconnect, device number 60
[ 1028.327907][T17356] udevd[17356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1028.802363][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5078'.
[ 1028.843542][T23044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5078'.
[ 1028.990770][T23044] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1029.037732][T23050] misc userio: No port type given on /dev/userio
[ 1029.676041][ T5715] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1029.836013][ T5715] usb 2-1: Using ep0 maxpacket: 8
[ 1029.846156][T20222] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1029.860140][ T5715] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1029.873103][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1029.893979][ T5715] usb 2-1: Product: syz
[ 1029.898658][ T5715] usb 2-1: Manufacturer: syz
[ 1029.903403][ T5715] usb 2-1: SerialNumber: syz
[ 1029.912654][ T5715] usb 2-1: config 0 descriptor??
[ 1029.928365][ T5715] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1030.026018][T20222] usb 3-1: Using ep0 maxpacket: 32
[ 1030.033327][T20222] usb 3-1: config 123 interface 0 has no altsetting 0
[ 1030.043470][T20222] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1030.052910][T20222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1030.062438][T20222] usb 3-1: Product: syz
[ 1030.067058][T20222] usb 3-1: Manufacturer: syz
[ 1030.072943][T20222] usb 3-1: SerialNumber: syz
[ 1030.528738][T23054] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present
[ 1030.533709][ T5715] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[ 1030.566408][ T5715] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[ 1030.570051][ T5715] usb 2-1: USB disconnect, device number 49
[ 1030.581962][T17356] udevd[17356]: setting mode of /dev/bus/usb/002/049 to 020664 failed: No such file or directory
[ 1030.582060][T17356] udevd[17356]: setting owner of /dev/bus/usb/002/049 to uid=0, gid=0 failed: No such file or directory
[ 1030.779879][T20222] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1030.806948][T20222] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1030.836328][T20222] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1030.845151][T20222] usb 3-1: media controller created
[ 1030.865009][T20222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1030.896630][T20222] set interface failed
[ 1030.896659][T20222] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1030.916123][T20222] error writing reg: 0xff, val: 0x00
[ 1030.942657][T20222] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1030.961505][T20222] usb 3-1: USB disconnect, device number 61
[ 1031.129791][T20230] usb 6-1: new high-speed USB device number 86 using dummy_hcd
[ 1031.256038][T20231] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1031.266111][T20230] usb 6-1: device descriptor read/64, error -71
[ 1031.406093][T20233] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1031.414783][T20231] usb 4-1: Using ep0 maxpacket: 8
[ 1031.422932][T20231] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1031.433228][T20231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1031.442294][T20231] usb 4-1: Product: syz
[ 1031.446823][T20231] usb 4-1: Manufacturer: syz
[ 1031.452057][T20231] usb 4-1: SerialNumber: syz
[ 1031.458611][T20231] usb 4-1: config 0 descriptor??
[ 1031.466597][T20231] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1031.506175][T20230] usb 6-1: new high-speed USB device number 87 using dummy_hcd
[ 1031.566044][T20233] usb 2-1: Using ep0 maxpacket: 8
[ 1031.574891][T20233] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1031.584352][T20233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1031.593728][T20233] usb 2-1: Product: syz
[ 1031.598757][T20233] usb 2-1: Manufacturer: syz
[ 1031.603429][T20233] usb 2-1: SerialNumber: syz
[ 1031.609807][T20233] usb 2-1: config 0 descriptor??
[ 1031.621132][T20233] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1031.646089][T20230] usb 6-1: device descriptor read/64, error -71
[ 1031.756423][T20230] usb usb6-port1: attempt power cycle
[ 1032.072904][T23074] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present
[ 1032.083825][T20231] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[ 1032.094269][T20231] sq905 4-1:0.0: probe with driver sq905 failed with error -71
[ 1032.102024][T20230] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[ 1032.111501][T20231] usb 4-1: USB disconnect, device number 65
[ 1032.136534][T20230] usb 6-1: device descriptor read/8, error -71
[ 1032.228939][T23079] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present
[ 1032.245262][T20233] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[ 1032.257494][T20233] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[ 1032.270776][T20233] usb 2-1: USB disconnect, device number 50
[ 1032.376064][T20230] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[ 1032.407817][T20230] usb 6-1: device descriptor read/8, error -71
[ 1032.526643][T20230] usb usb6-port1: unable to enumerate USB device
[ 1033.025589][T23101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5098'.
[ 1033.146475][T23106] bridge6: port 1(veth3) entered blocking state
[ 1033.167221][T23106] bridge6: port 1(veth3) entered disabled state
[ 1033.183053][T23106] veth3: entered allmulticast mode
[ 1033.198808][T23106] veth3: entered promiscuous mode
[ 1034.316061][T20222] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1034.467936][T20222] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1034.477603][T20222] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1034.488782][T20222] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1034.498286][T20222] usb 3-1: config 1 has no interface number 1
[ 1034.504566][T20222] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1034.518105][T20222] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1034.533470][T20222] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1034.543758][T20222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1034.551957][T20222] usb 3-1: Product: syz
[ 1034.563668][T20222] usb 3-1: Manufacturer: syz
[ 1034.570556][T20222] usb 3-1: SerialNumber: syz
[ 1034.906379][T20230] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[ 1034.947861][T23139] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5111'.
[ 1035.067640][T20230] usb 6-1: Using ep0 maxpacket: 32
[ 1035.095210][T20230] usb 6-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1035.106922][T20230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1035.119610][T20230] usb 6-1: Product: syz
[ 1035.123834][T20230] usb 6-1: Manufacturer: syz
[ 1035.129447][T20230] usb 6-1: SerialNumber: syz
[ 1035.328790][T20222] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 1035.355388][T20222] usb 3-1: MIDIStreaming interface descriptor not found
[ 1035.482846][T20222] usb 3-1: USB disconnect, device number 62
[ 1035.679549][T20230] usb 6-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1035.694645][T20230] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1035.708654][T20230] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1035.716306][T20230] usb 6-1: media controller created
[ 1035.735875][T20230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1035.755809][T20230] usb 6-1: selecting invalid altsetting 2
[ 1035.762443][T20230] set interface failed
[ 1035.762499][T20230] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1035.773789][T20230] error writing reg: 0xff, val: 0x00
[ 1035.796598][T20230] dvb_usb_mxl111sf 6-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1035.816652][T20230] usb 6-1: USB disconnect, device number 90
[ 1036.496078][T20230] usb 6-1: new full-speed USB device number 91 using dummy_hcd
[ 1036.648109][T20230] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1036.658550][T20230] usb 6-1: not running at top speed; connect to a high speed hub
[ 1036.668721][T20230] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.679457][T20230] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1036.691810][T20230] usb 6-1: string descriptor 0 read error: -22
[ 1036.699101][T20230] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1036.708900][T20230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.727920][T20230] usb 6-1: 0:2 : does not exist
[ 1036.796033][T20222] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1036.948354][T20222] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1036.957831][T20222] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.968238][T20222] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1036.978938][T20222] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1036.988666][T20222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.996770][T20222] usb 3-1: Product: syz
[ 1037.001274][T20222] usb 3-1: Manufacturer: syz
[ 1037.005909][T20222] usb 3-1: SerialNumber: syz
[ 1037.016780][T20222] usb 3-1: selecting invalid altsetting 1
[ 1037.376098][T20233] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1037.530872][T20233] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1037.543057][T20233] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1037.554066][T20230] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[ 1037.561925][T20233] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1037.571635][T20233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1037.584350][T20230] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1037.593185][T23171] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1037.605365][T20230] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[ 1037.642426][T20230] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1037.678156][T20222] usb 3-1: unit 6 not found!
[ 1037.686248][T20230] usb 6-1: USB disconnect, device number 91
[ 1037.873244][T20222] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2)
[ 1037.904718][T20222] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1037.905871][T20233] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1037.918529][T20222] usb 3-1: USB disconnect, device number 63
[ 1037.950928][T17356] udevd[17356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1038.038183][T20233] usb 2-1: USB disconnect, device number 51
[ 1038.536043][T20233] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1038.646896][T20230] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1038.686030][T20233] usb 3-1: Using ep0 maxpacket: 8
[ 1038.692424][T20233] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1038.703532][T20233] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1038.719923][T20233] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1038.729530][T20233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1038.737787][T20233] usb 3-1: Product: syz
[ 1038.742251][T20233] usb 3-1: Manufacturer: syz
[ 1038.746966][T20233] usb 3-1: SerialNumber: syz
[ 1038.753117][T20233] usb 3-1: config 0 descriptor??
[ 1038.797774][T20230] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1038.808295][T20230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1038.818497][T20230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1038.829428][T20230] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1038.839072][T20230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1038.847467][T20230] usb 4-1: Product: syz
[ 1038.851649][T20230] usb 4-1: Manufacturer: syz
[ 1038.856309][T20230] usb 4-1: SerialNumber: syz
[ 1038.865800][T20230] usb 4-1: selecting invalid altsetting 1
[ 1038.873105][T20230] usb 4-1: unit 6 not found!
[ 1038.877824][T20234] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1039.020207][T23204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1039.029577][T23204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1039.037463][T20234] usb 2-1: Using ep0 maxpacket: 16
[ 1039.045574][T20234] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1039.054979][T20234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1039.063175][T20234] usb 2-1: Product: syz
[ 1039.067577][T20234] usb 2-1: Manufacturer: syz
[ 1039.072277][T20234] usb 2-1: SerialNumber: syz
[ 1039.294397][T23201] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1039.304272][T23201] syzkaller0: entered promiscuous mode
[ 1039.310191][T23201] syzkaller0: entered allmulticast mode
[ 1039.386221][T20234] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1039.402225][T20234] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1039.413074][T20234] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1039.423717][T20234] usb 2-1: media controller created
[ 1039.439064][T20234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1039.458694][T20234] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1039.491491][T20234] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1039.504708][T20234] usb 2-1: USB disconnect, device number 52
[ 1040.226061][T20209] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1040.386199][T20209] usb 2-1: Using ep0 maxpacket: 32
[ 1040.395204][T20209] usb 2-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1040.404840][T20209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1040.413264][T20209] usb 2-1: Product: syz
[ 1040.418344][T20209] usb 2-1: Manufacturer: syz
[ 1040.423071][T20209] usb 2-1: SerialNumber: syz
[ 1040.867753][T20209] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1040.881873][T20209] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1040.894984][T20209] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1040.902556][T20209] usb 2-1: media controller created
[ 1040.916631][T20209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1040.951407][T20209] usb 2-1: selecting invalid altsetting 2
[ 1040.962814][T20209] set interface failed
[ 1040.962842][T20209] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1040.977915][T20209] error writing reg: 0xff, val: 0x00
[ 1041.019357][T20209] dvb_usb_mxl111sf 2-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1041.040658][T20209] usb 2-1: USB disconnect, device number 53
[ 1041.196012][ T5627] Bluetooth: hci2: command 0x0406 tx timeout
[ 1041.197396][T20233] usb 3-1: USB disconnect, device number 64
[ 1041.433357][T20230] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2)
[ 1041.490977][T20230] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1041.506997][T20230] usb 4-1: USB disconnect, device number 66
[ 1041.532151][T17356] udevd[17356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1041.569919][T23219] FAULT_INJECTION: forcing a failure.
[ 1041.569919][T23219] name failslab, interval 1, probability 0, space 0, times 0
[ 1041.583791][T23219] CPU: 1 UID: 0 PID: 23219 Comm: syz.3.5140 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1041.583823][T23219] Tainted: [L]=SOFTLOCKUP
[ 1041.583832][T23219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1041.583844][T23219] Call Trace:
[ 1041.583852][T23219]  <TASK>
[ 1041.583860][T23219]  dump_stack_lvl+0xe8/0x150
[ 1041.583888][T23219]  should_fail_ex+0x40c/0x560
[ 1041.583914][T23219]  should_failslab+0xa8/0x100
[ 1041.583938][T23219]  __kmalloc_noprof+0xfe/0x720
[ 1041.583967][T23219]  ? inet_sendmsg+0x10d/0x320
[ 1041.583992][T23219]  ? sock_kmalloc+0xd6/0x160
[ 1041.584021][T23219]  ? sock_kmalloc+0xd6/0x160
[ 1041.584056][T23219]  sock_kmalloc+0xd6/0x160
[ 1041.584091][T23219]  ____sys_sendmsg+0x1be/0x850
[ 1041.584125][T23219]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1041.584161][T23219]  ? import_iovec+0x73/0xa0
[ 1041.584195][T23219]  ___sys_sendmsg+0x2a5/0x360
[ 1041.584224][T23219]  ? _parse_integer_limit+0x192/0x1e0
[ 1041.584251][T23219]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1041.584284][T23219]  ? kstrtouint+0x6e/0xe0
[ 1041.584322][T23219]  ? rcu_is_watching+0x15/0xb0
[ 1041.584348][T23219]  ? lock_release+0x4b/0x3c0
[ 1041.584369][T23219]  ? __might_fault+0xcb/0x130
[ 1041.584400][T23219]  __sys_sendmmsg+0x273/0x4d0
[ 1041.584433][T23219]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1041.584468][T23219]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1041.584505][T23219]  ? rcu_is_watching+0x15/0xb0
[ 1041.584543][T23219]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1041.584574][T23219]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1041.584596][T23219]  do_syscall_64+0x174/0x580
[ 1041.584623][T23219]  ? trace_irq_disable+0x3b/0x140
[ 1041.584656][T23219]  ? clear_bhb_loop+0x40/0x90
[ 1041.584681][T23219]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1041.584703][T23219] RIP: 0033:0x7f4b4d39ce59
[ 1041.584722][T23219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1041.584741][T23219] RSP: 002b:00007f4b4e2b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1041.584765][T23219] RAX: ffffffffffffffda RBX: 00007f4b4d615fa0 RCX: 00007f4b4d39ce59
[ 1041.584781][T23219] RDX: 0000000000000002 RSI: 0000200000002780 RDI: 0000000000000003
[ 1041.584795][T23219] RBP: 00007f4b4e2b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1041.584809][T23219] R10: 0000000024000800 R11: 0000000000000246 R12: 0000000000000001
[ 1041.584823][T23219] R13: 00007f4b4d616038 R14: 00007f4b4d615fa0 R15: 00007f4b4d73fa48
[ 1041.584848][T23219]  </TASK>
[ 1041.833497][T20233] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1041.896708][ T5715] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1041.919077][T23223] sctp: [Deprecated]: syz.3.5141 (pid 23223) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1041.919077][T23223] Use struct sctp_sack_info instead
[ 1042.000184][T20233] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1042.011298][T20233] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1042.021281][T20233] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1042.030381][T20233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1042.040577][T23214] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1042.070723][ T5715] usb 2-1: Using ep0 maxpacket: 8
[ 1042.085125][T20233] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1042.098891][ T5715] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1042.137835][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1042.164014][T23230] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1042.165033][ T5715] usb 2-1: Product: syz
[ 1042.187679][ T5715] usb 2-1: Manufacturer: syz
[ 1042.193892][ T5715] usb 2-1: SerialNumber: syz
[ 1042.198585][T23230] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1042.218930][ T5715] usb 2-1: config 0 descriptor??
[ 1042.228811][ T5715] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1042.341469][T20234] usb 3-1: USB disconnect, device number 65
[ 1042.446009][T20233] usb 4-1: new low-speed USB device number 67 using dummy_hcd
[ 1042.627653][T20233] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1042.640017][T20233] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1042.647790][T20233] usb 4-1: can't read configurations, error -71
[ 1042.696156][T20222] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1042.839810][T23216] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present
[ 1042.848590][T20222] usb 6-1: Using ep0 maxpacket: 16
[ 1042.857750][ T5715] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[ 1042.868925][ T5715] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[ 1042.878702][T20222] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1042.889611][ T5715] usb 2-1: USB disconnect, device number 54
[ 1042.895585][T20222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1042.914008][T20222] usb 6-1: Product: syz
[ 1042.919928][T20222] usb 6-1: Manufacturer: syz
[ 1042.924642][T20222] usb 6-1: SerialNumber: syz
[ 1043.155557][T23237] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1043.174015][T23237] syzkaller0: entered promiscuous mode
[ 1043.180642][T23237] syzkaller0: entered allmulticast mode
[ 1043.187220][T20209] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1043.271985][T20222] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1043.282933][T20222] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1043.294240][T20222] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1043.303401][T20222] usb 6-1: media controller created
[ 1043.315615][T20222] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1043.331019][T20222] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1043.347340][T20209] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1043.363029][T20222] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1043.372224][T20209] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1043.384396][T20222] usb 6-1: USB disconnect, device number 92
[ 1043.391133][T20209] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1043.403436][T20209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.418345][T23243] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1043.445269][T20209] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1043.656832][T20222] usb 3-1: USB disconnect, device number 66
[ 1043.850257][T23258] misc userio: No port type given on /dev/userio
[ 1043.919686][T23243] syz.2.5150 (23243): drop_caches: 2
[ 1044.796145][T20209] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1044.956001][T20209] usb 3-1: Using ep0 maxpacket: 32
[ 1044.968961][T20209] usb 3-1: config 123 interface 0 has no altsetting 0
[ 1044.981086][T20209] usb 3-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1044.992812][T20209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.003950][T20209] usb 3-1: Product: syz
[ 1045.011986][T20209] usb 3-1: Manufacturer: syz
[ 1045.020809][T20209] usb 3-1: SerialNumber: syz
[ 1045.455036][T23278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5163'.
[ 1045.589260][T20209] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1045.619419][T20209] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1045.640783][T20209] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1045.648402][T20209] usb 3-1: media controller created
[ 1045.682523][T20209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1045.721896][T20209] set interface failed
[ 1045.721925][T20209] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1045.733134][T20209] error writing reg: 0xff, val: 0x00
[ 1045.767675][T20209] dvb_usb_mxl111sf 3-1:123.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1045.820771][T20209] usb 3-1: USB disconnect, device number 67
[ 1047.416017][T20233] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1047.566051][T20233] usb 3-1: Using ep0 maxpacket: 16
[ 1047.575530][T20233] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1047.585026][T20233] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1047.598198][T20233] usb 3-1: Product: syz
[ 1047.602428][T20233] usb 3-1: Manufacturer: syz
[ 1047.608346][T20233] usb 3-1: SerialNumber: syz
[ 1047.832307][T23312] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1047.854310][T20233] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1047.879057][T20233] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1047.891136][T20233] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1047.903516][T20233] usb 3-1: media controller created
[ 1047.918269][T20233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1047.939828][T20233] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1047.972007][T20233] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1047.984759][T20233] usb 3-1: USB disconnect, device number 68
[ 1048.485429][T23337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5182'.
[ 1048.776373][T20234] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1048.928864][T20234] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1048.942431][T20234] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1048.955330][T20234] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1048.974205][T23344] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5185'.
[ 1048.991805][T20234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.004245][T23339] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1049.017780][T20234] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1049.143661][T23348] loop6: detected capacity change from 0 to 2640
[ 1049.152829][T23348] buffer_io_error: 11 callbacks suppressed
[ 1049.152849][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.167156][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.175297][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.184581][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.192771][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.201024][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.210091][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.234732][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.244376][T23348] ldm_validate_partition_table(): Disk read failed.
[ 1049.251563][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.263352][T23348] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1049.272468][T23349] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[ 1049.284642][T20209] usb 3-1: USB disconnect, device number 69
[ 1049.297054][T23349] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[ 1049.325410][T23348] Dev loop6: unable to read RDB block 0
[ 1049.351313][T23349] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[ 1049.363195][T23349] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[ 1049.374922][ T6346] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2
[ 1049.386964][ T6346] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2
[ 1049.391505][T23348]  loop6: unable to read partition table
[ 1049.411147][T23349] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2
[ 1049.440849][T23348] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1049.453450][T23349] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2
[ 1049.574206][T23355] FAULT_INJECTION: forcing a failure.
[ 1049.574206][T23355] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1049.587776][T23355] CPU: 1 UID: 0 PID: 23355 Comm: syz.1.5189 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1049.587812][T23355] Tainted: [L]=SOFTLOCKUP
[ 1049.587822][T23355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1049.587837][T23355] Call Trace:
[ 1049.587846][T23355]  <TASK>
[ 1049.587856][T23355]  dump_stack_lvl+0xe8/0x150
[ 1049.587888][T23355]  should_fail_ex+0x40c/0x560
[ 1049.587919][T23355]  _copy_to_user+0x31/0xb0
[ 1049.587942][T23355]  simple_read_from_buffer+0xe1/0x170
[ 1049.587982][T23355]  proc_fail_nth_read+0x1bb/0x230
[ 1049.588007][T23355]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1049.588031][T23355]  ? rw_verify_area+0x24a/0x4c0
[ 1049.588058][T23355]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1049.588080][T23355]  vfs_read+0x213/0xa80
[ 1049.588109][T23355]  ? __pfx_vfs_read+0x10/0x10
[ 1049.588135][T23355]  ? __pfx_rtc_dev_ioctl+0x10/0x10
[ 1049.588271][T23355]  ksys_read+0x150/0x270
[ 1049.588299][T23355]  ? __pfx_ksys_read+0x10/0x10
[ 1049.588326][T23355]  ? rcu_is_watching+0x15/0xb0
[ 1049.588355][T23355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1049.588380][T23355]  do_syscall_64+0x174/0x580
[ 1049.588409][T23355]  ? trace_irq_disable+0x3b/0x140
[ 1049.588446][T23355]  ? clear_bhb_loop+0x40/0x90
[ 1049.588472][T23355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1049.588496][T23355] RIP: 0033:0x7f3a0ef5d68e
[ 1049.588518][T23355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1049.588540][T23355] RSP: 002b:00007f3a0d1f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1049.588567][T23355] RAX: ffffffffffffffda RBX: 00007f3a0d1f66c0 RCX: 00007f3a0ef5d68e
[ 1049.588585][T23355] RDX: 000000000000000f RSI: 00007f3a0d1f60a0 RDI: 0000000000000004
[ 1049.588602][T23355] RBP: 00007f3a0d1f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1049.588617][T23355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1049.588632][T23355] R13: 00007f3a0f216038 R14: 00007f3a0f215fa0 R15: 00007f3a0f33fa48
[ 1049.588681][T23355]  </TASK>
[ 1051.084537][T23392] syzkaller0: entered promiscuous mode
[ 1051.090362][T23392] syzkaller0: entered allmulticast mode
[ 1051.296025][T20209] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[ 1051.456011][T20209] usb 6-1: Using ep0 maxpacket: 16
[ 1051.471841][T20209] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1051.483406][T20209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.493497][T20209] usb 6-1: Product: syz
[ 1051.500635][T20209] usb 6-1: Manufacturer: syz
[ 1051.506936][T20209] usb 6-1: SerialNumber: syz
[ 1051.606657][T20230] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1051.770106][T20230] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[ 1051.778719][T23391] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1051.792532][T20230] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1051.809274][T23391] syzkaller0: entered promiscuous mode
[ 1051.818158][T23391] syzkaller0: entered allmulticast mode
[ 1051.822686][T20230] usb 2-1: config 220 has no interface number 2
[ 1051.848284][T20230] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1051.863087][T20230] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1051.872632][T20230] usb 2-1: config 220 interface 76 has no altsetting 0
[ 1051.881460][T20230] usb 2-1: config 220 interface 1 has no altsetting 0
[ 1051.900460][T20230] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1051.911500][T20230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1051.927794][T20230] usb 2-1: Product: syz
[ 1051.932408][T20230] usb 2-1: Manufacturer: syz
[ 1051.939097][T20230] usb 2-1: SerialNumber: syz
[ 1051.949342][T20209] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1051.985826][T20209] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1052.015887][T20209] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1052.028519][T20209] usb 6-1: media controller created
[ 1052.074086][T20209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1052.111564][T20209] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1052.188212][T20230] usb 2-1: selecting invalid altsetting 0
[ 1052.210944][T20230] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[ 1052.232545][T20230] uvcvideo 2-1:220.0: No valid video chain found.
[ 1052.254351][T20209] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1052.269342][T20209] usb 6-1: USB disconnect, device number 93
[ 1052.295084][T20230] usb 2-1: selecting invalid altsetting 0
[ 1052.314751][T20230] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[ 1052.349537][T20230] usb 2-1: USB disconnect, device number 55
[ 1052.453307][T23411] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[ 1052.646439][T20234] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1052.801036][T23421] veth0_vlan: entered allmulticast mode
[ 1052.810202][T20234] usb 3-1: Using ep0 maxpacket: 8
[ 1052.834609][T20234] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1052.863357][T20234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1052.891120][T20234] usb 3-1: Product: syz
[ 1052.912068][T20234] usb 3-1: Manufacturer: syz
[ 1052.929434][T20234] usb 3-1: SerialNumber: syz
[ 1052.951017][T20234] usb 3-1: config 0 descriptor??
[ 1052.976894][T20234] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1052.988360][T23417] veth0_vlan: left allmulticast mode
[ 1053.298526][T23439] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5217'.
[ 1053.496034][T20230] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1053.546024][ T5715] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1053.577422][T23407] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present
[ 1053.588180][T20234] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[ 1053.597599][T20234] sq905 3-1:0.0: probe with driver sq905 failed with error -71
[ 1053.607338][T20234] usb 3-1: USB disconnect, device number 70
[ 1053.647491][T20230] usb 4-1: Using ep0 maxpacket: 8
[ 1053.656453][T20230] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1053.665708][T20230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1053.673953][T20230] usb 4-1: Product: syz
[ 1053.678711][T20230] usb 4-1: Manufacturer: syz
[ 1053.683378][T20230] usb 4-1: SerialNumber: syz
[ 1053.689897][T20230] usb 4-1: config 0 descriptor??
[ 1053.699857][T20230] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1053.706035][ T5715] usb 6-1: Using ep0 maxpacket: 32
[ 1053.713889][ T5715] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1053.724057][ T5715] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.734737][ T5715] usb 6-1: config 0 descriptor??
[ 1053.942757][ T5715] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1053.951660][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1053.963736][ T5715] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1053.971036][ T5715] usb 6-1: media controller created
[ 1053.984934][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1054.158187][T23439] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5217'.
[ 1054.184981][T23443] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5219'.
[ 1054.310809][T23432] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present
[ 1054.322320][T20230] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[ 1054.331725][T20230] sq905 4-1:0.0: probe with driver sq905 failed with error -71
[ 1054.346403][T20230] usb 4-1: USB disconnect, device number 69
[ 1054.436221][T20234] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1054.468770][ T1320] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.477037][ T1320] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.586039][T20234] usb 3-1: Using ep0 maxpacket: 32
[ 1054.593027][T20234] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1054.602510][T20234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1054.612777][T20234] usb 3-1: config 0 descriptor??
[ 1054.691233][ T5715] az6027: usb out operation failed. (-71)
[ 1054.700793][ T5715] az6027: usb out operation failed. (-71)
[ 1054.707530][ T5715] stb0899_attach: Driver disabled by Kconfig
[ 1054.713704][ T5715] az6027: no front-end attached
[ 1054.713704][ T5715] 
[ 1054.721336][ T5715] az6027: usb out operation failed. (-71)
[ 1054.729799][ T5715] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1054.738600][ T5715] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input122
[ 1054.751639][ T5715] dvb-usb: schedule remote query interval to 400 msecs.
[ 1054.775149][ T5715] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1054.809688][ T5715] usb 6-1: USB disconnect, device number 94
[ 1054.822440][T20234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1054.838858][T20234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1054.860118][T20234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1054.874582][T20234] usb 3-1: media controller created
[ 1054.884933][ T5715] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1054.921499][T20234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1054.970635][T23448] syzkaller0: entered promiscuous mode
[ 1054.976429][T23448] syzkaller0: entered allmulticast mode
[ 1055.029529][T23443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5219'.
[ 1055.106880][T19212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.115707][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.127099][T20233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.146606][T20209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.155087][T20209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1055.564832][T20234] az6027: usb out operation failed. (-71)
[ 1055.587910][T20234] az6027: usb out operation failed. (-71)
[ 1055.612443][T20234] stb0899_attach: Driver disabled by Kconfig
[ 1055.624891][T20234] az6027: no front-end attached
[ 1055.624891][T20234] 
[ 1055.637538][T20234] az6027: usb out operation failed. (-71)
[ 1055.644117][T20234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1055.657034][T20234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input123
[ 1055.692250][T20234] dvb-usb: schedule remote query interval to 400 msecs.
[ 1055.707626][T20234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1055.723745][T20234] usb 3-1: USB disconnect, device number 71
[ 1055.764792][T20234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1055.829031][T23463] netlink: 'syz.5.5225': attribute type 1 has an invalid length.
[ 1055.850881][T23463] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1055.858793][T23463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5225'.
[ 1055.877645][T23464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1055.920506][T23464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1056.105997][T20233] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1056.276044][T20233] usb 6-1: Using ep0 maxpacket: 8
[ 1056.290456][T20233] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1056.310203][T20233] usb 6-1: New USB device found, idVendor=0421, idProduct=033e, bcdDevice=5f.0e
[ 1056.329605][T20233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1056.354688][T20233] usb 6-1: config 0 descriptor??
[ 1056.373270][T20233] rndis_host 6-1:0.0: rndis: master #0/ffff88807b873000 slave #1/0000000000000000
[ 1056.387328][ T9074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.397588][T20222] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.410372][T20209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.419009][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.574773][T20234] usb 6-1: USB disconnect, device number 95
[ 1056.612846][T23475] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1056.945132][T23479] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5230'.
[ 1057.016164][T20234] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1057.166011][T20234] usb 3-1: Using ep0 maxpacket: 8
[ 1057.179610][T20234] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1057.206014][T20234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1057.214477][T20233] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1057.222426][T20234] usb 3-1: Product: syz
[ 1057.230182][T20234] usb 3-1: Manufacturer: syz
[ 1057.241195][T20234] usb 3-1: SerialNumber: syz
[ 1057.249927][T20234] usb 3-1: config 0 descriptor??
[ 1057.261335][T20234] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1057.386405][T20233] usb 2-1: Using ep0 maxpacket: 32
[ 1057.405914][T20233] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1057.425579][T20233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1057.436804][T20233] usb 2-1: config 0 descriptor??
[ 1057.644233][T20233] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1057.653499][T20233] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1057.667055][T20233] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1057.674302][T20233] usb 2-1: media controller created
[ 1057.691642][T20233] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1057.706249][T20230] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1057.855523][T23479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5230'.
[ 1057.876092][T20230] usb 4-1: Using ep0 maxpacket: 16
[ 1057.884330][T20230] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1057.888378][T23477] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present
[ 1057.895331][T20230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1057.910416][T20230] usb 4-1: Product: syz
[ 1057.914678][T20230] usb 4-1: Manufacturer: syz
[ 1057.920548][T20230] usb 4-1: SerialNumber: syz
[ 1057.926555][T20234] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[ 1057.939112][T20234] sq905 3-1:0.0: probe with driver sq905 failed with error -71
[ 1057.951125][T20234] usb 3-1: USB disconnect, device number 72
[ 1058.150121][T23488] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1058.161372][T23488] syzkaller0: entered promiscuous mode
[ 1058.166995][T23488] syzkaller0: entered allmulticast mode
[ 1058.242270][T20230] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1058.254909][T20230] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1058.266181][T20230] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1058.274747][T20230] usb 4-1: media controller created
[ 1058.290072][T20230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1058.322009][T20230] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1058.360195][T20230] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1058.385321][T20230] usb 4-1: USB disconnect, device number 70
[ 1058.399581][T20233] az6027: usb out operation failed. (-71)
[ 1058.416590][T20233] az6027: usb out operation failed. (-71)
[ 1058.426649][T20233] stb0899_attach: Driver disabled by Kconfig
[ 1058.442369][T20233] az6027: no front-end attached
[ 1058.442369][T20233] 
[ 1058.450540][T20233] az6027: usb out operation failed. (-71)
[ 1058.456682][T20233] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1058.473683][T20233] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input124
[ 1058.495913][T20233] dvb-usb: schedule remote query interval to 400 msecs.
[ 1058.509514][T20233] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1058.548239][T20233] usb 2-1: USB disconnect, device number 56
[ 1058.620531][T20233] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1058.917916][T23502] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5239'.
[ 1058.970172][T23502] bridge5: port 1(veth5) entered blocking state
[ 1058.978138][T23502] bridge5: port 1(veth5) entered disabled state
[ 1058.984735][T23502] veth5: entered allmulticast mode
[ 1058.993771][T23502] veth5: entered promiscuous mode
[ 1060.092279][T23522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5246'.
[ 1060.336044][T20209] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1060.495999][T20209] usb 3-1: Using ep0 maxpacket: 32
[ 1060.503757][T20209] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1060.513960][T20209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1060.524318][T20209] usb 3-1: config 0 descriptor??
[ 1060.732875][T20209] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1060.751086][T20209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1060.769662][T20209] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1060.784628][T20209] usb 3-1: media controller created
[ 1060.814513][T20209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1060.936215][T23522] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5246'.
[ 1061.085343][T23535] net_ratelimit: 8 callbacks suppressed
[ 1061.085364][T23535] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.099351][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.117860][T20234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.266268][ T5715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1061.276891][T20233] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1061.428410][T20233] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[ 1061.438385][T20233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1061.449717][T20233] usb 6-1: config 0 descriptor??
[ 1061.455767][T20209] az6027: usb out operation failed. (-71)
[ 1061.475424][T20209] az6027: usb out operation failed. (-71)
[ 1061.482408][T20209] stb0899_attach: Driver disabled by Kconfig
[ 1061.500226][T20209] az6027: no front-end attached
[ 1061.500226][T20209] 
[ 1061.528019][T20209] az6027: usb out operation failed. (-71)
[ 1061.553013][T20209] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1061.583906][T20209] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input125
[ 1061.608881][T20209] dvb-usb: schedule remote query interval to 400 msecs.
[ 1061.625304][T20209] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1061.648150][T20209] usb 3-1: USB disconnect, device number 73
[ 1061.702632][T20209] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1061.878915][ T5715] usb 2-1: new low-speed USB device number 57 using dummy_hcd
[ 1061.891643][T20233] hackrf 6-1:0.0: Board ID: 00
[ 1061.898462][T20233] hackrf 6-1:0.0: Firmware version: 
[ 1061.909822][T20233] hackrf 6-1:0.0: Registered as swradio24
[ 1061.917585][T20233] videodev: could not get a free minor
[ 1061.924513][T20233] hackrf 6-1:0.0: Failed to register as video device (-23)
[ 1061.934936][T20233] hackrf 6-1:0.0: probe with driver hackrf failed with error -23
[ 1062.103975][T20233] usb 6-1: USB disconnect, device number 96
[ 1062.146359][T20230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.155374][ T9078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.164325][ T1228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.176039][T20209] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1062.183757][   T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1062.233936][ T5715] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1062.243522][ T5715] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1062.251241][ T5715] usb 2-1: can't read configurations, error -71
[ 1062.347552][T20209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1062.357685][T20209] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1062.367446][T20222] usb 4-1: new low-speed USB device number 71 using dummy_hcd
[ 1062.375142][T20209] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[ 1062.385048][T20209] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[ 1062.395122][T20209] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1062.404741][T20209] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.414459][T20209] usb 3-1: config 0 descriptor??
[ 1062.562736][T20222] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1062.572691][T20222] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1062.580392][T20222] usb 4-1: can't read configurations, error -71
[ 1062.659291][T20209] hdpvr 3-1:0.0: unexpected answer of status request, len -32
[ 1062.674363][T20209] hdpvr 3-1:0.0: device init failed
[ 1062.680996][T20209] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[ 1062.721947][T20209] usb 3-1: USB disconnect, device number 74
[ 1063.192756][T23564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5262'.
[ 1063.284554][T23567] bridge6: port 1(veth7) entered blocking state
[ 1063.292052][T23567] bridge6: port 1(veth7) entered disabled state
[ 1063.309026][T23567] veth7: entered allmulticast mode
[ 1063.351407][T23567] veth7: entered promiscuous mode
[ 1063.368918][T23570] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5263'.
[ 1063.736159][T20233] usb 3-1: new low-speed USB device number 75 using dummy_hcd
[ 1063.810442][T23578] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5266'.
[ 1063.848246][T23578] bridge5: port 1(veth5) entered blocking state
[ 1063.856135][T23578] bridge5: port 1(veth5) entered disabled state
[ 1063.862792][T23578] veth5: entered allmulticast mode
[ 1063.871843][T23578] veth5: entered promiscuous mode
[ 1064.435679][T20233] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1064.458308][T20233] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1064.477457][T20233] usb 3-1: can't read configurations, error -71
[ 1065.336025][T20233] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1065.507120][T20233] usb 3-1: Using ep0 maxpacket: 8
[ 1065.523120][T20233] usb 3-1: config 0 has an invalid interface number: 55 but max is 0
[ 1065.532605][T20233] usb 3-1: config 0 has no interface number 0
[ 1065.539226][T20233] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1065.550731][T20233] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1065.564388][T20233] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1065.584298][T20233] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1065.600128][T20233] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1065.611966][T20233] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.623248][T20233] usb 3-1: config 0 descriptor??
[ 1065.648836][T20233] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1065.676854][T20209] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1065.846008][T20209] usb 4-1: Using ep0 maxpacket: 8
[ 1065.881420][T20209] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[ 1065.902022][T20209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239
[ 1065.935657][T20209] usb 4-1: Product: syz
[ 1065.953609][T20209] usb 4-1: Manufacturer: syz
[ 1065.968251][T20209] usb 4-1: SerialNumber: syz
[ 1065.991637][T20209] usb 4-1: config 0 descriptor??
[ 1066.022279][T20209] gspca_main: sq905-2.14.0 probing 2770:9120
[ 1066.380522][T20230] usb 3-1: USB disconnect, device number 76
[ 1066.386700][    C1] ldusb 3-1:0.55: usb_submit_urb failed (-19)
[ 1066.433905][T23595] ldusb: No device or device unplugged -19
[ 1066.444728][T20230] ldusb 3-1:0.55: LD USB Device #0 now disconnected
[ 1066.568749][T23617] misc userio: No port type given on /dev/userio
[ 1066.630289][T23600] snd_virmidi snd_virmidi.0: control 0:57412:0:syz0:0 is already present
[ 1066.678315][T20209] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[ 1066.691845][T20209] sq905 4-1:0.0: probe with driver sq905 failed with error -71
[ 1066.701965][T20209] usb 4-1: USB disconnect, device number 73
[ 1067.251845][T23627] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1067.800685][T23642] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5286'.
[ 1068.056124][T20234] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1068.226335][T20234] usb 6-1: Using ep0 maxpacket: 32
[ 1068.248449][T20234] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1068.279341][T20234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.300447][T20234] usb 6-1: config 0 descriptor??
[ 1068.513429][T20234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1068.542715][T20234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1068.569793][T23654] FAULT_INJECTION: forcing a failure.
[ 1068.569793][T23654] name failslab, interval 1, probability 0, space 0, times 0
[ 1068.575838][T20234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1068.603562][T20234] usb 6-1: media controller created
[ 1068.640093][T20234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1068.671554][T23654] CPU: 1 UID: 0 PID: 23654 Comm: syz.1.5289 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1068.671589][T23654] Tainted: [L]=SOFTLOCKUP
[ 1068.671598][T23654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1068.671616][T23654] Call Trace:
[ 1068.671625][T23654]  <TASK>
[ 1068.671635][T23654]  dump_stack_lvl+0xe8/0x150
[ 1068.671668][T23654]  should_fail_ex+0x40c/0x560
[ 1068.671699][T23654]  should_failslab+0xa8/0x100
[ 1068.671725][T23654]  __kmalloc_node_track_caller_noprof+0x100/0x730
[ 1068.671761][T23654]  ? landlock_restrict_sibling_threads+0x295/0x1240
[ 1068.671789][T23654]  ? rcu_is_watching+0x15/0xb0
[ 1068.671815][T23654]  ? landlock_restrict_sibling_threads+0x624/0x1240
[ 1068.671838][T23654]  ? landlock_restrict_sibling_threads+0x624/0x1240
[ 1068.671865][T23654]  ? landlock_restrict_sibling_threads+0x624/0x1240
[ 1068.671890][T23654]  krealloc_node_align_noprof+0x19a/0x390
[ 1068.671916][T23654]  landlock_restrict_sibling_threads+0x624/0x1240
[ 1068.671943][T23654]  ? rcu_is_watching+0x15/0xb0
[ 1068.671969][T23654]  ? landlock_restrict_sibling_threads+0x295/0x1240
[ 1068.671995][T23654]  ? __pfx_landlock_restrict_sibling_threads+0x10/0x10
[ 1068.672035][T23654]  ? landlock_init_hierarchy_log+0x511/0x5f0
[ 1068.672064][T23654]  ? landlock_put_ruleset+0x10/0xb0
[ 1068.672099][T23654]  __se_sys_landlock_restrict_self+0x555/0x840
[ 1068.672134][T23654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1068.672158][T23654]  do_syscall_64+0x174/0x580
[ 1068.672190][T23654]  ? clear_bhb_loop+0x40/0x90
[ 1068.672215][T23654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1068.672237][T23654] RIP: 0033:0x7f3a0ef9ce59
[ 1068.672255][T23654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1068.672274][T23654] RSP: 002b:00007f3a0d1b4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[ 1068.672306][T23654] RAX: ffffffffffffffda RBX: 00007f3a0f216180 RCX: 00007f3a0ef9ce59
[ 1068.672323][T23654] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000007
[ 1068.672337][T23654] RBP: 00007f3a0d1b4090 R08: 0000000000000000 R09: 0000000000000000
[ 1068.672351][T23654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1068.672365][T23654] R13: 00007f3a0f216218 R14: 00007f3a0f216180 R15: 00007f3a0f33fa48
[ 1068.672389][T23654]  </TASK>
[ 1069.011482][T23642] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5286'.
[ 1069.406891][T23668] misc userio: No port type given on /dev/userio
[ 1069.534881][T23660] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5290'.
[ 1069.562749][T20234] az6027: usb out operation failed. (-71)
[ 1069.574305][T20234] az6027: usb out operation failed. (-71)
[ 1069.581554][T23660] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.589083][T23660] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1069.597752][T20234] stb0899_attach: Driver disabled by Kconfig
[ 1069.604870][T20234] az6027: no front-end attached
[ 1069.604870][T20234] 
[ 1069.615018][T20234] az6027: usb out operation failed. (-71)
[ 1069.629842][T20234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1069.672225][T20234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input128
[ 1069.715702][T20234] dvb-usb: schedule remote query interval to 400 msecs.
[ 1069.739558][T20234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1069.772784][T20234] usb 6-1: USB disconnect, device number 97
[ 1069.834287][T20234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1070.131510][   T30] audit: type=1400 audit(1782229798.241:3615): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=23679 comm="syz.5.5297"
[ 1070.786049][T20222] usb 4-1: new low-speed USB device number 74 using dummy_hcd
[ 1070.796046][T20230] usb 6-1: new low-speed USB device number 98 using dummy_hcd
[ 1070.935998][T20230] usb 6-1: device descriptor read/64, error -71
[ 1070.978489][T20222] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1070.992868][T20222] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1071.001880][T23688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5299'.
[ 1071.016678][T20222] usb 4-1: can't read configurations, error -71
[ 1071.206158][T20230] usb 6-1: new low-speed USB device number 99 using dummy_hcd
[ 1071.296003][ T5715] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1071.346085][T20230] usb 6-1: device descriptor read/64, error -71
[ 1071.447820][ T5715] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1071.478140][T20230] usb usb6-port1: attempt power cycle
[ 1071.489572][ T5715] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1071.509635][ T5715] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1071.543882][ T5715] usb 2-1: config 0 descriptor??
[ 1071.573507][ T5715] pwc: Askey VC010 type 2 USB webcam detected.
[ 1071.727782][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5301'.
[ 1071.836524][T20230] usb 6-1: new low-speed USB device number 100 using dummy_hcd
[ 1071.876590][T20230] usb 6-1: device descriptor read/8, error -71
[ 1071.909998][T23698] bridge7: port 1(veth9) entered blocking state
[ 1071.936764][T23698] bridge7: port 1(veth9) entered disabled state
[ 1071.972328][ T5715] pwc: recv_control_msg error -71 req 02 val 2b00
[ 1071.981510][T23698] veth9: entered allmulticast mode
[ 1072.001689][ T5715] pwc: recv_control_msg error -71 req 02 val 2700
[ 1072.009403][T23698] veth9: entered promiscuous mode
[ 1072.025220][ T5715] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1072.056646][ T5715] pwc: recv_control_msg error -71 req 04 val 1000
[ 1072.089089][ T5715] pwc: recv_control_msg error -71 req 04 val 1300
[ 1072.126065][T20230] usb 6-1: new low-speed USB device number 101 using dummy_hcd
[ 1072.153746][ T5715] pwc: recv_control_msg error -71 req 04 val 1400
[ 1072.167563][T20230] usb 6-1: device descriptor read/8, error -71
[ 1072.180733][ T5715] pwc: recv_control_msg error -71 req 02 val 2000
[ 1072.201258][ T5715] pwc: recv_control_msg error -71 req 02 val 2100
[ 1072.228356][ T5715] pwc: recv_control_msg error -71 req 04 val 1500
[ 1072.257497][ T5715] pwc: recv_control_msg error -71 req 02 val 2500
[ 1072.277664][ T5715] pwc: recv_control_msg error -71 req 02 val 2400
[ 1072.286624][T20230] usb usb6-port1: unable to enumerate USB device
[ 1072.310683][ T5715] pwc: recv_control_msg error -71 req 02 val 2600
[ 1072.346185][ T5715] pwc: recv_control_msg error -71 req 02 val 2900
[ 1072.379312][ T5715] pwc: recv_control_msg error -71 req 02 val 2800
[ 1072.412879][ T5715] pwc: recv_control_msg error -71 req 04 val 1100
[ 1072.446756][ T5715] pwc: recv_control_msg error -71 req 04 val 1200
[ 1072.486184][ T5715] pwc: Registered as video103.
[ 1072.523131][ T5715] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input129
[ 1072.572881][ T5715] usb 2-1: USB disconnect, device number 59
[ 1072.794401][T23710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5306'.
[ 1072.843557][T23712] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[ 1073.066103][T20234] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1073.226018][T20234] usb 3-1: Using ep0 maxpacket: 32
[ 1073.240450][T20234] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1073.252132][T20234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1073.264936][T20234] usb 3-1: config 0 descriptor??
[ 1073.476587][T20234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1073.510714][T20234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1073.544423][T20234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1073.558999][T20234] usb 3-1: media controller created
[ 1073.581497][T20234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1074.253668][T20234] az6027: usb out operation failed. (-71)
[ 1074.274226][T20234] az6027: usb out operation failed. (-71)
[ 1074.299640][T20234] stb0899_attach: Driver disabled by Kconfig
[ 1074.312492][T20234] az6027: no front-end attached
[ 1074.312492][T20234] 
[ 1074.327690][T20234] az6027: usb out operation failed. (-71)
[ 1074.341850][T20234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1074.365243][T20234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input130
[ 1074.395913][T20234] dvb-usb: schedule remote query interval to 400 msecs.
[ 1074.405284][T20234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1074.432982][T20234] usb 3-1: USB disconnect, device number 77
[ 1074.522072][T20234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1074.681972][T23764] macvlan0: entered promiscuous mode
[ 1074.696592][T23764] netlink: 'syz.5.5323': attribute type 1 has an invalid length.
[ 1074.717351][T23764] netlink: 'syz.5.5323': attribute type 2 has an invalid length.
[ 1074.739182][T23764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5323'.
[ 1075.269491][T20230] usb 6-1: new low-speed USB device number 102 using dummy_hcd
[ 1075.656188][T20233] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[ 1075.784366][T20230] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1075.803770][T20230] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1075.814146][T20230] usb 6-1: can't read configurations, error -71
[ 1075.821629][T20233] usb 3-1: device descriptor read/64, error -71
[ 1076.066668][T20233] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[ 1076.083066][T23797] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5337'.
[ 1076.196047][T20233] usb 3-1: device descriptor read/64, error -71
[ 1076.307319][T20233] usb usb3-port1: attempt power cycle
[ 1076.326026][ T5715] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1076.356016][   T11] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[ 1076.396271][T23801] FAULT_INJECTION: forcing a failure.
[ 1076.396271][T23801] name failslab, interval 1, probability 0, space 0, times 0
[ 1076.409853][T23801] CPU: 1 UID: 0 PID: 23801 Comm: syz.5.5339 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1076.409879][T23801] Tainted: [L]=SOFTLOCKUP
[ 1076.409886][T23801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1076.409897][T23801] Call Trace:
[ 1076.409903][T23801]  <TASK>
[ 1076.409910][T23801]  dump_stack_lvl+0xe8/0x150
[ 1076.409933][T23801]  should_fail_ex+0x40c/0x560
[ 1076.409953][T23801]  should_failslab+0xa8/0x100
[ 1076.409971][T23801]  kmem_cache_alloc_node_noprof+0xb3/0x610
[ 1076.409994][T23801]  ? __alloc_skb+0x1d7/0x7a0
[ 1076.410016][T23801]  ? __alloc_skb+0x1d7/0x7a0
[ 1076.410036][T23801]  __alloc_skb+0x1d7/0x7a0
[ 1076.410056][T23801]  netlink_sendmsg+0x5d4/0xb40
[ 1076.410083][T23801]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1076.410104][T23801]  ? rcu_is_watching+0x15/0xb0
[ 1076.410123][T23801]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1076.410144][T23801]  ? lock_release+0x4b/0x3c0
[ 1076.410158][T23801]  ? arch_stack_walk+0xfb/0x150
[ 1076.410179][T23801]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1076.410200][T23801]  sock_sendmsg_nosec+0x13a/0x180
[ 1076.410218][T23801]  ____sys_sendmsg+0x54e/0x850
[ 1076.410241][T23801]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1076.410264][T23801]  ? lock_release+0x4b/0x3c0
[ 1076.410279][T23801]  ? import_iovec+0x73/0xa0
[ 1076.410303][T23801]  ___sys_sendmsg+0x2a5/0x360
[ 1076.410324][T23801]  ? rcu_is_watching+0x15/0xb0
[ 1076.410340][T23801]  ? get_pid_task+0x20/0x1f0
[ 1076.410356][T23801]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1076.410379][T23801]  ? rcu_is_watching+0x15/0xb0
[ 1076.410406][T23801]  ? __fget_files+0x2a/0x420
[ 1076.410420][T23801]  ? __fget_files+0x3a2/0x420
[ 1076.410437][T23801]  __x64_sys_sendmsg+0x1b1/0x290
[ 1076.410459][T23801]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1076.410485][T23801]  ? rcu_is_watching+0x15/0xb0
[ 1076.410508][T23801]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.410524][T23801]  do_syscall_64+0x174/0x580
[ 1076.410543][T23801]  ? trace_irq_disable+0x3b/0x140
[ 1076.410566][T23801]  ? clear_bhb_loop+0x40/0x90
[ 1076.410583][T23801]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1076.410598][T23801] RIP: 0033:0x7f769399ce59
[ 1076.410612][T23801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1076.410626][T23801] RSP: 002b:00007f76948e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1076.410644][T23801] RAX: ffffffffffffffda RBX: 00007f7693c15fa0 RCX: 00007f769399ce59
[ 1076.410656][T23801] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[ 1076.410666][T23801] RBP: 00007f76948e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1076.410676][T23801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1076.410686][T23801] R13: 00007f7693c16038 R14: 00007f7693c15fa0 R15: 00007f7693d3fa48
[ 1076.410709][T23801]  </TASK>
[ 1076.518769][ T5715] usb 4-1: Using ep0 maxpacket: 32
[ 1076.650621][T20233] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[ 1076.680035][ T5715] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1076.717999][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.718874][T20233] usb 3-1: device descriptor read/8, error -71
[ 1076.732677][ T5715] usb 4-1: config 0 descriptor??
[ 1076.745243][   T11] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[ 1076.754472][   T11] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1076.762800][   T11] usb 2-1: Product: syz
[ 1076.767377][   T11] usb 2-1: Manufacturer: syz
[ 1076.773266][   T11] usb 2-1: SerialNumber: syz
[ 1076.782432][   T11] usb 2-1: config 0 descriptor??
[ 1076.792817][T23802] usb usb7: usbfs: process 23802 (syz.5.5339) did not claim interface 0 before use
[ 1076.811117][T23801] bond2 (unregistering): Released all slaves
[ 1076.941134][ T5715] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1076.950045][ T5715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1076.960247][ T5715] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1076.967500][ T5715] usb 4-1: media controller created
[ 1076.980327][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1076.991450][   T11] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels)
[ 1077.026053][T20233] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[ 1077.046653][T20233] usb 3-1: device descriptor read/8, error -71
[ 1077.056200][T20209] usb 6-1: new full-speed USB device number 104 using dummy_hcd
[ 1077.156218][T20233] usb usb3-port1: unable to enumerate USB device
[ 1077.208067][T20209] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1077.216825][T20209] usb 6-1: not running at top speed; connect to a high speed hub
[ 1077.225454][T20209] usb 6-1: config 128 has an invalid interface number: 220 but max is 0
[ 1077.234162][T20209] usb 6-1: config 128 has no interface number 0
[ 1077.240562][T20209] usb 6-1: config 128 interface 220 has no altsetting 0
[ 1077.250969][   T11] peak_usb 2-1:0.0 can0: unable to request usb[type=2 value=5] err=-71
[ 1077.262362][T20209] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=2a.ad
[ 1077.271677][   T11] peak_usb 2-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71)
[ 1077.280525][T20209] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.289313][T20209] usb 6-1: Product: syz
[ 1077.293563][T20209] usb 6-1: Manufacturer: syz
[ 1077.303176][T20209] usb 6-1: SerialNumber: syz
[ 1077.337053][   T11] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71
[ 1077.351876][   T11] usb 2-1: USB disconnect, device number 60
[ 1077.672967][ T5715] az6027: usb out operation failed. (-71)
[ 1077.696053][ T5715] az6027: usb out operation failed. (-71)
[ 1077.719292][ T5715] stb0899_attach: Driver disabled by Kconfig
[ 1077.733868][ T5715] az6027: no front-end attached
[ 1077.733868][ T5715] 
[ 1077.744116][ T5715] az6027: usb out operation failed. (-71)
[ 1077.751590][ T5715] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1077.763491][ T5715] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input131
[ 1077.774334][T23808] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[ 1077.784462][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5341'.
[ 1077.800043][ T5715] dvb-usb: schedule remote query interval to 400 msecs.
[ 1077.814695][ T5715] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1077.837243][ T5715] usb 4-1: USB disconnect, device number 76
[ 1077.859549][ T5644] udevd[5644]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory
[ 1077.905818][ T5715] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1077.942929][T20209] RobotFuzz Open Source InterFace, OSIF 6-1:128.220: version 2a.ad found at bus 006 address 104
[ 1078.116065][T20233] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1078.143665][ T5715] usb 6-1: USB disconnect, device number 104
[ 1078.277945][T20233] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1078.286913][T20233] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1078.301040][T20233] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1078.316351][T20233] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[ 1078.325659][T20233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1078.334381][T20233] usb 2-1: Product: syz
[ 1078.338982][T20233] usb 2-1: Manufacturer: syz
[ 1078.343719][T20233] usb 2-1: SerialNumber: syz
[ 1078.365016][T20233] usb 2-1: selecting invalid altsetting 1
[ 1078.373263][T20233] usb 2-1: unit 6 not found!
[ 1078.816064][T20231] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[ 1078.878744][T23829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5350'.
[ 1078.987856][T20231] usb 3-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice=ca.8e
[ 1078.997704][T20231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.008305][T20230] usb 6-1: new low-speed USB device number 105 using dummy_hcd
[ 1079.043159][T20231] pwc: Logitech QuickCam Zoom (new model) USB webcam detected.
[ 1079.166042][T20234] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1079.179879][T20233] usb 2-1: 2:0: failed to get current value for ch 0 (-71)
[ 1079.293111][T20233] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1079.322806][T20233] usb 2-1: USB disconnect, device number 61
[ 1079.337149][T20234] usb 4-1: Using ep0 maxpacket: 32
[ 1079.361265][T20234] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1079.380108][T17356] udevd[17356]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1079.399478][T20234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1079.425011][T20234] usb 4-1: config 0 descriptor??
[ 1079.649596][T20234] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1079.682370][T20234] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1079.696250][T23836] FAULT_INJECTION: forcing a failure.
[ 1079.696250][T23836] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1079.714151][T20234] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1079.728164][T20234] usb 4-1: media controller created
[ 1079.734293][T23836] CPU: 1 UID: 0 PID: 23836 Comm: syz.1.5351 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1079.734328][T23836] Tainted: [L]=SOFTLOCKUP
[ 1079.734337][T23836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1079.734351][T23836] Call Trace:
[ 1079.734359][T23836]  <TASK>
[ 1079.734368][T23836]  dump_stack_lvl+0xe8/0x150
[ 1079.734398][T23836]  should_fail_ex+0x40c/0x560
[ 1079.734426][T23836]  _copy_from_user+0x2d/0xb0
[ 1079.734461][T23836]  ___sys_sendmsg+0x1c6/0x360
[ 1079.734492][T23836]  ? _parse_integer_limit+0x192/0x1e0
[ 1079.734519][T23836]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1079.734552][T23836]  ? kstrtouint+0x6e/0xe0
[ 1079.734588][T23836]  ? __fget_files+0x2a/0x420
[ 1079.734607][T23836]  ? __fget_files+0x3a2/0x420
[ 1079.734631][T23836]  __sys_sendmmsg+0x273/0x4d0
[ 1079.734665][T23836]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1079.734700][T23836]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1079.734735][T23836]  ? ksys_write+0x242/0x270
[ 1079.734761][T23836]  ? __pfx_ksys_write+0x10/0x10
[ 1079.734788][T23836]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1079.734819][T23836]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.734842][T23836]  do_syscall_64+0x174/0x580
[ 1079.734878][T23836]  ? trace_irq_disable+0x3b/0x140
[ 1079.734912][T23836]  ? clear_bhb_loop+0x40/0x90
[ 1079.734937][T23836]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.734959][T23836] RIP: 0033:0x7f3a0ef9ce59
[ 1079.734979][T23836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1079.734998][T23836] RSP: 002b:00007f3a0d1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1079.735022][T23836] RAX: ffffffffffffffda RBX: 00007f3a0f215fa0 RCX: 00007f3a0ef9ce59
[ 1079.735039][T23836] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004
[ 1079.735055][T23836] RBP: 00007f3a0d1f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1079.735069][T23836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1079.735083][T23836] R13: 00007f3a0f216038 R14: 00007f3a0f215fa0 R15: 00007f3a0f33fa48
[ 1079.735107][T23836]  </TASK>
[ 1079.953382][T20234] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1080.029079][T20230] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1080.037547][T20230] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1080.045153][T20230] usb 6-1: can't read configurations, error -71
[ 1080.500926][T20234] az6027: usb out operation failed. (-71)
[ 1080.507234][T20234] az6027: usb out operation failed. (-71)
[ 1080.523200][T20234] stb0899_attach: Driver disabled by Kconfig
[ 1080.544617][T20234] az6027: no front-end attached
[ 1080.544617][T20234] 
[ 1080.583742][T20234] az6027: usb out operation failed. (-71)
[ 1080.593277][T20234] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1080.631341][T20234] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input132
[ 1080.653688][T23849] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[ 1080.682247][T20234] dvb-usb: schedule remote query interval to 400 msecs.
[ 1080.721737][T20234] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1080.771656][T20234] usb 4-1: USB disconnect, device number 77
[ 1080.878456][T20234] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1080.908642][T23858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1080.950642][T23858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1081.082321][T23864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1081.122875][T23864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1081.877083][T23889] syzkaller0: entered promiscuous mode
[ 1081.907333][T23889] syzkaller0: entered allmulticast mode
[ 1084.066306][T20231] pwc: Failed to set LED on/off time (-110)
[ 1084.083921][T20231] pwc: send_video_command error -32
[ 1084.098312][T23909] FAULT_INJECTION: forcing a failure.
[ 1084.098312][T23909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1084.123326][T20231] pwc: Failed to set video mode VGA@30 fps; return code = -32
[ 1084.127114][T23909] CPU: 0 UID: 0 PID: 23909 Comm: syz.2.5376 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1084.127203][T23909] Tainted: [L]=SOFTLOCKUP
[ 1084.127224][T23909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1084.127272][T23909] Call Trace:
[ 1084.127294][T23909]  <TASK>
[ 1084.127316][T23909]  dump_stack_lvl+0xe8/0x150
[ 1084.127401][T23909]  should_fail_ex+0x40c/0x560
[ 1084.127477][T23909]  _copy_from_user+0x2d/0xb0
[ 1084.127574][T23909]  bpf_test_init+0xd8/0x150
[ 1084.127670][T23909]  bpf_prog_test_run_skb+0x31e/0x2230
[ 1084.127747][T23909]  ? __fget_files+0x2a/0x420
[ 1084.127820][T23909]  ? __might_fault+0xaf/0x130
[ 1084.127896][T23909]  ? rcu_is_watching+0x15/0xb0
[ 1084.127977][T23909]  ? __fget_files+0x3a2/0x420
[ 1084.128051][T23909]  ? __fget_files+0x2a/0x420
[ 1084.128120][T23909]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1084.128206][T23909]  bpf_prog_test_run+0x2c5/0x340
[ 1084.128265][T23909]  __sys_bpf+0xa22/0xd90
[ 1084.128324][T23909]  ? __pfx___sys_bpf+0x10/0x10
[ 1084.128419][T23909]  ? ksys_write+0x242/0x270
[ 1084.128485][T23909]  ? __pfx_ksys_write+0x10/0x10
[ 1084.128560][T23909]  __x64_sys_bpf+0xba/0xd0
[ 1084.128637][T23909]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1084.128700][T23909]  do_syscall_64+0x174/0x580
[ 1084.128774][T23909]  ? trace_irq_disable+0x3b/0x140
[ 1084.128866][T23909]  ? clear_bhb_loop+0x40/0x90
[ 1084.128930][T23909]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1084.128991][T23909] RIP: 0033:0x7fea0119ce59
[ 1084.129043][T23909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1084.129095][T23909] RSP: 002b:00007fea01ffb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1084.129159][T23909] RAX: ffffffffffffffda RBX: 00007fea01415fa0 RCX: 00007fea0119ce59
[ 1084.129209][T23909] RDX: 000000000000004c RSI: 0000200000000380 RDI: 000000000000000a
[ 1084.129242][T23909] RBP: 00007fea01ffb090 R08: 0000000000000000 R09: 0000000000000000
[ 1084.129270][T23909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1084.129310][T23909] R13: 00007fea01416038 R14: 00007fea01415fa0 R15: 00007fea0153fa48
[ 1084.129395][T23909]  </TASK>
[ 1084.392903][T20231] Philips webcam 3-1:127.0: probe with driver Philips webcam failed with error -32
[ 1084.604846][T23915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5379'.
[ 1084.708994][T23917] input: syz0 as /devices/virtual/input/input133
[ 1084.736133][T20231] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1084.899011][T20231] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1084.973388][T20231] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[ 1085.010670][T20231] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1085.046327][T20231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[ 1085.060447][T20231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[ 1085.086697][T20231] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1085.098304][T20231] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1085.117311][T20231] usb 2-1: Product: syz
[ 1085.124994][T20231] usb 2-1: Manufacturer: syz
[ 1085.144427][T20231] cdc_wdm 2-1:1.0: skipping garbage
[ 1085.155346][T20231] cdc_wdm 2-1:1.0: skipping garbage
[ 1085.169660][T20231] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1085.566065][T23933] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[ 1085.661150][T23913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1085.698028][T23913] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1085.726419][ T1228] usb 2-1: USB disconnect, device number 62
[ 1085.941483][T23944] fuse: Unknown parameter 'grou00000000000000000000'
[ 1086.300158][T23958] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5396'.
[ 1086.408837][ T1228] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1086.579429][ T1228] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1086.615842][ T1228] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1086.636208][ T1228] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1086.657664][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1086.678622][T23954] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1086.712105][ T1228] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1087.230032][T23982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1087.251592][T23982] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1087.293484][T23982] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1087.550940][ T1228] usb 4-1: USB disconnect, device number 78
[ 1087.891062][T20234] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1087.906086][ T1228] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1087.995407][   T30] audit: type=1326 audit(1782229816.101:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23996 comm="syz.2.5411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea0119ce59 code=0x0
[ 1088.091738][T20234] usb 2-1: device descriptor read/64, error -71
[ 1088.106014][ T1228] usb 4-1: Using ep0 maxpacket: 16
[ 1088.114389][ T1228] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1088.128456][ T1228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1088.148641][ T1228] usb 4-1: Product: syz
[ 1088.157528][ T1228] usb 4-1: Manufacturer: syz
[ 1088.165016][ T1228] usb 4-1: SerialNumber: syz
[ 1088.336808][T20234] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1088.400721][T23992] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1088.433007][T23992] syzkaller0: entered promiscuous mode
[ 1088.442601][T23992] syzkaller0: entered allmulticast mode
[ 1088.496698][T20234] usb 2-1: device descriptor read/64, error -71
[ 1088.531950][ T1228] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1088.552801][ T1228] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1088.568449][ T1228] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1088.586266][ T1228] usb 4-1: media controller created
[ 1088.602076][ T1228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1088.617812][T20234] usb usb2-port1: attempt power cycle
[ 1088.631878][ T1228] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1088.678219][ T1228] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1088.698713][ T1228] usb 4-1: USB disconnect, device number 79
[ 1088.749429][T24018] FAULT_INJECTION: forcing a failure.
[ 1088.749429][T24018] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1088.788547][T24018] CPU: 0 UID: 0 PID: 24018 Comm: syz.5.5416 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1088.788584][T24018] Tainted: [L]=SOFTLOCKUP
[ 1088.788594][T24018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1088.788608][T24018] Call Trace:
[ 1088.788617][T24018]  <TASK>
[ 1088.788628][T24018]  dump_stack_lvl+0xe8/0x150
[ 1088.788660][T24018]  should_fail_ex+0x40c/0x560
[ 1088.788691][T24018]  _copy_from_user+0x2d/0xb0
[ 1088.788724][T24018]  ___sys_recvmsg+0x173/0x5a0
[ 1088.788759][T24018]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1088.788794][T24018]  ? __fget_files+0x2a/0x420
[ 1088.788822][T24018]  ? rcu_is_watching+0x15/0xb0
[ 1088.788856][T24018]  ? rcu_is_watching+0x15/0xb0
[ 1088.788880][T24018]  ? lock_release+0x4b/0x3c0
[ 1088.788902][T24018]  ? __might_fault+0xcb/0x130
[ 1088.788933][T24018]  do_recvmmsg+0x31a/0x7f0
[ 1088.788968][T24018]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1088.789006][T24018]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1088.789035][T24018]  ? __fget_files+0x3a2/0x420
[ 1088.789060][T24018]  __x64_sys_recvmmsg+0x198/0x250
[ 1088.789094][T24018]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1088.789129][T24018]  ? rcu_is_watching+0x15/0xb0
[ 1088.789154][T24018]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1088.789176][T24018]  do_syscall_64+0x174/0x580
[ 1088.789200][T24018]  ? trace_irq_disable+0x3b/0x140
[ 1088.789230][T24018]  ? clear_bhb_loop+0x40/0x90
[ 1088.789252][T24018]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1088.789271][T24018] RIP: 0033:0x7f769399ce59
[ 1088.789290][T24018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1088.789309][T24018] RSP: 002b:00007f76948e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1088.789331][T24018] RAX: ffffffffffffffda RBX: 00007f7693c15fa0 RCX: 00007f769399ce59
[ 1088.789347][T24018] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003
[ 1088.789360][T24018] RBP: 00007f76948e7090 R08: 0000000000000000 R09: 0000000000000000
[ 1088.789373][T24018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1088.789385][T24018] R13: 00007f7693c16038 R14: 00007f7693c15fa0 R15: 00007f7693d3fa48
[ 1088.789407][T24018]  </TASK>
[ 1089.025557][T24020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1089.035403][T24020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1089.076496][T20234] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[ 1089.107486][T20234] usb 2-1: device descriptor read/8, error -71
[ 1089.351254][T20234] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1089.376564][T20234] usb 2-1: device descriptor read/8, error -71
[ 1089.396363][T20230] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1089.486501][T20234] usb usb2-port1: unable to enumerate USB device
[ 1089.573779][T20230] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1089.583579][T20230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1089.593320][T20230] usb 6-1: Product: syz
[ 1089.598897][T20230] usb 6-1: Manufacturer: syz
[ 1089.604679][T20230] usb 6-1: SerialNumber: syz
[ 1090.022715][T24030] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5421'.
[ 1090.034177][T24030] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5421'.
[ 1090.079748][T24023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1090.097354][T24023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1090.111808][T24023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5418'.
[ 1090.204488][T20230] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[ 1090.233301][T20230] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[ 1090.486015][ T5715] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1090.646019][ T5715] usb 4-1: Using ep0 maxpacket: 32
[ 1090.659247][ T5715] usb 4-1: config 123 interface 0 has no altsetting 0
[ 1090.678187][ T5715] usb 4-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51
[ 1090.696696][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.713719][ T5715] usb 4-1: Product: syz
[ 1090.725978][ T5715] usb 4-1: Manufacturer: syz
[ 1090.732256][ T5715] usb 4-1: SerialNumber: syz
[ 1090.741444][T24042] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1091.251244][ T5715] usb 4-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state
[ 1091.270484][ T5715] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1091.293487][T24054] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5428'.
[ 1091.296453][ T5715] dvbdev: DVB: registering new adapter (Hauppauge 126xxx)
[ 1091.311858][T24054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1091.317946][ T5715] usb 4-1: media controller created
[ 1091.328547][T24054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1091.334394][T24055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1091.348867][T24054] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI
[ 1091.360887][T24054] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7]
[ 1091.369423][T24054] CPU: 1 UID: 0 PID: 24054 Comm: syz.5.5428 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1091.380406][T24054] Tainted: [L]=SOFTLOCKUP
[ 1091.384767][T24054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1091.394844][T24054] RIP: 0010:__mutex_lock+0x149/0x1550
[ 1091.400251][T24054] Code: c0 80 85 4a 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d f5 86 96 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 fc c3 7f f6 4d 39 64 24 58 0f 85 48 11 00 00
[ 1091.419881][T24054] RSP: 0018:ffffc900061b71a0 EFLAGS: 00010206
[ 1091.426065][T24054] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a4a8503
[ 1091.434066][T24054] RDX: 0000000000000000 RSI: 000000000000026f RDI: 00000000000000c0
[ 1091.442053][T24054] RBP: ffffc900061b7338 R08: ffffc900061b72a7 R09: 0000000000000000
[ 1091.450047][T24054] R10: ffffc900061b7280 R11: fffff52000c36e55 R12: 0000000000000068
[ 1091.458055][T24054] R13: 0000000000000000 R14: 1ffff92000c36e48 R15: 0000000000000000
[ 1091.466149][T24054] FS:  00007f76948e76c0(0000) GS:ffff88812532d000(0000) knlGS:0000000000000000
[ 1091.475098][T24054] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1091.481703][T24054] CR2: 0000001b2d619ff8 CR3: 0000000040134000 CR4: 00000000003526f0
[ 1091.489697][T24054] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[ 1091.497691][T24054] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1091.505769][T24054] Call Trace:
[ 1091.509060][T24054]  <TASK>
[ 1091.512010][T24054]  ? __mutex_lock+0x30d/0x1550
[ 1091.516802][T24054]  ? is_bpf_text_address+0x26/0x2b0
[ 1091.522028][T24054]  ? rcu_is_watching+0x15/0xb0
[ 1091.526818][T24054]  ? dvb_usbv2_generic_write+0x26/0x60
[ 1091.532488][T24054]  ? __mutex_trylock_common+0x15f/0x270
[ 1091.538668][T24054]  ? __pfx___mutex_lock+0x10/0x10
[ 1091.543721][T24054]  ? __pfx___mutex_lock+0x10/0x10
[ 1091.548777][T24054]  ? trace_contention_end+0x3d/0x140
[ 1091.554087][T24054]  ? __mutex_lock+0x30d/0x1550
[ 1091.558883][T24054]  dvb_usbv2_generic_write+0x26/0x60
[ 1091.564196][T24054]  mxl111sf_ctrl_msg+0x160/0x2f0
[ 1091.569219][T24054]  mxl111sf_write_reg+0xa9/0x1b0
[ 1091.574183][T24054]  ? __pfx_mxl111sf_write_reg+0x10/0x10
[ 1091.579746][T24054]  ? pvclock_clocksource_read+0x25a/0x580
[ 1091.585487][T24054]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1091.591671][T24054]  mxl111sf_i2c_xfer+0x463/0x5060
[ 1091.596769][T24054]  ? rcu_is_watching+0x15/0xb0
[ 1091.601570][T24054]  ? hrtimer_start_range_ns_common+0x812/0xb90
[ 1091.607751][T24054]  ? __pfx_mxl111sf_i2c_xfer+0x10/0x10
[ 1091.613234][T24054]  ? trace_irq_enable+0x3b/0x140
[ 1091.618200][T24054]  ? rcu_is_watching+0x15/0xb0
[ 1091.622995][T24054]  ? trace_sched_exit_tp+0x3a/0x130
[ 1091.628221][T24054]  ? __schedule+0x17ef/0x56c0
[ 1091.632930][T24054]  ? stack_depot_save_flags+0x33/0x800
[ 1091.638416][T24054]  ? __kasan_kmalloc+0x93/0xb0
[ 1091.643196][T24054]  ? __kmalloc_cache_noprof+0x32d/0x660
[ 1091.648766][T24054]  ? __i2c_smbus_xfer+0xa75/0x27d0
[ 1091.653967][T24054]  ? i2c_smbus_xfer+0x1f4/0x310
[ 1091.658849][T24054]  ? i2cdev_ioctl_smbus+0x407/0x700
[ 1091.664074][T24054]  ? __pfx___schedule+0x10/0x10
[ 1091.668956][T24054]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1091.675068][T24054]  ? rcu_is_watching+0x15/0xb0
[ 1091.679871][T24054]  ? trace_irq_enable+0x3b/0x140
[ 1091.684875][T24054]  ? irqentry_exit+0x218/0x8f0
[ 1091.689670][T24054]  ? trace_irq_disable+0x3b/0x140
[ 1091.694733][T24054]  ? __pfx_mxl111sf_i2c_xfer+0x10/0x10
[ 1091.700221][T24054]  __i2c_transfer+0x7be/0x1fe0
[ 1091.705009][T24054]  ? __kmalloc_cache_noprof+0x32d/0x660
[ 1091.710590][T24054]  ? __kmalloc_cache_noprof+0x150/0x660
[ 1091.716168][T24054]  ? __i2c_smbus_xfer+0xa75/0x27d0
[ 1091.721312][T24054]  __i2c_smbus_xfer+0x1584/0x27d0
[ 1091.726387][T24054]  ? __pfx___i2c_smbus_xfer+0x10/0x10
[ 1091.731797][T24054]  ? 0xffffffff81000000
[ 1091.736000][T24054]  ? rcu_is_watching+0x15/0xb0
[ 1091.740793][T24054]  ? rt_mutex_lock_nested+0x156/0x1c0
[ 1091.746195][T24054]  i2c_smbus_xfer+0x1f4/0x310
[ 1091.750907][T24054]  i2cdev_ioctl_smbus+0x407/0x700
[ 1091.755956][T24054]  ? rcu_is_watching+0x15/0xb0
[ 1091.760746][T24054]  ? hook_file_ioctl+0x1f0/0x5f0
[ 1091.765699][T24054]  ? __pfx_i2cdev_ioctl_smbus+0x10/0x10
[ 1091.771451][T24054]  ? lock_release+0x4b/0x3c0
[ 1091.776310][T24054]  ? __might_fault+0xaf/0x130
[ 1091.781061][T24054]  ? __might_fault+0xcb/0x130
[ 1091.785790][T24054]  i2cdev_ioctl+0x615/0x880
[ 1091.790331][T24054]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1091.795388][T24054]  ? rcu_is_watching+0x15/0xb0
[ 1091.800207][T24054]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1091.805206][T24054]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1091.810432][T24054]  __se_sys_ioctl+0xfc/0x170
[ 1091.815056][T24054]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1091.821323][T24054]  do_syscall_64+0x174/0x580
[ 1091.825946][T24054]  ? trace_irq_disable+0x3b/0x140
[ 1091.831014][T24054]  ? clear_bhb_loop+0x40/0x90
[ 1091.835720][T24054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1091.841740][T24054] RIP: 0033:0x7f769399ce59
[ 1091.846206][T24054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1091.865835][T24054] RSP: 002b:00007f76948e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1091.874280][T24054] RAX: ffffffffffffffda RBX: 00007f7693c15fa0 RCX: 00007f769399ce59
[ 1091.882478][T24054] RDX: 0000200000000200 RSI: 0000000000000720 RDI: 0000000000000007
[ 1091.890556][T24054] RBP: 00007f7693a32e6f R08: 0000000000000000 R09: 0000000000000000
[ 1091.898550][T24054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1091.906542][T24054] R13: 00007f7693c16038 R14: 00007f7693c15fa0 R15: 00007f7693d3fa48
[ 1091.914640][T24054]  </TASK>
[ 1091.917693][T24054] Modules linked in:
[ 1091.923605][T24054] ---[ end trace 0000000000000000 ]---
[ 1091.932287][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1091.956393][T24055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1091.970726][T24054] RIP: 0010:__mutex_lock+0x149/0x1550
[ 1091.976316][T24054] Code: c0 80 85 4a 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 35 12 00 00 83 3d f5 86 96 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 fc c3 7f f6 4d 39 64 24 58 0f 85 48 11 00 00
[ 1091.996746][ T5715] set interface failed
[ 1091.996805][T24054] RSP: 0018:ffffc900061b71a0 EFLAGS: 00010206
[ 1092.054467][T24057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1092.058319][T24054] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a4a8503
[ 1092.071488][T24057] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1092.126352][T24054] RDX: 0000000000000000 RSI: 000000000000026f RDI: 00000000000000c0
[ 1092.135873][T24054] RBP: ffffc900061b7338 R08: ffffc900061b72a7 R09: 0000000000000000
[ 1092.144128][T24054] R10: ffffc900061b7280 R11: fffff52000c36e55 R12: 0000000000000068
[ 1092.170736][T24054] R13: 0000000000000000 R14: 1ffff92000c36e48 R15: 0000000000000000
[ 1092.187165][T24054] FS:  00007f76948e76c0(0000) GS:ffff88812522d000(0000) knlGS:0000000000000000
[ 1092.196460][T24054] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1092.203210][T24054] CR2: 0000001b2d5fbff8 CR3: 0000000040134000 CR4: 00000000003526f0
[ 1092.212122][T24054] Kernel panic - not syncing: Fatal exception
[ 1092.218806][T24054] Kernel Offset: disabled
[ 1092.223149][T24054] Rebooting in 86400 seconds..