last executing test programs:

6m45.909160367s ago: executing program 2 (id=331):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$dsp(r0, &(0x7f0000000440)=""/49, 0x31)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000001c40))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x20031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x50})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002192ea0845050c800a030102030109021275a8000000000904"], 0x0)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1})
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
socket$packet(0x11, 0x3, 0x300)
read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0xc0000, 0x0)
ioctl$VIDIOC_OVERLAY(r6, 0x4004560e, &(0x7f0000000240)=0x10)
write$FUSE_INIT(r3, &(0x7f00000000c0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x3100010, 0x0, 0xcfa, 0x8c9, 0xfffffff7, 0x0, 0x0, 0x117, 0x3}}, 0x50)
r7 = socket(0x2a, 0x2, 0x5)
sendto(r7, 0x0, 0x0, 0x20008004, &(0x7f0000000040)=@qipcrtr={0x2a, 0xffffffff, 0x2}, 0x80)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)

6m42.604936502s ago: executing program 2 (id=350):
openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0xffff0098)
write$dsp(r0, &(0x7f0000000000)="bf2f103aea9f63a85ace37f409fc8fa52673a134591a1a7ec41c5e43d5d05a69d126d3c2d8f5cd", 0x27)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) (async)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000})
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0)

6m41.828823605s ago: executing program 2 (id=354):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT, @ANYRES64=r0], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0)

6m41.702146219s ago: executing program 2 (id=355):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20)
mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x20)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"])

6m39.950310934s ago: executing program 2 (id=363):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x30000004}, 0x4000040)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080000000800020001000000"], 0x34}}, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000000)={0x5, 0x1, 0x0, [{0x5, 0x7f, 0x1, 0x39, 0x2e, 0xff, 0x2, '\x00', 0x100000001}]})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r6 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r6, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000001c0)=""/91, &(0x7f0000000140)=0x5b)
fadvise64(r3, 0x18, 0x0, 0x4)

6m39.677176246s ago: executing program 2 (id=364):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x9, "e241e8542bf2d9bc990fee2381754b0e08ab71e625046ac023cd92ea7b17bf8234a16f454f87298f426d3b49ef79fcdaac11ab9501697b299a2e3197c9cafeceaf3cd8bcb5295c26ae2976bb3e0e158b686b0e42ee2da7ffca37082a70c0f69ffb1adadd13537f68ce62166ec95a593683c991dbcb005890f17fbbc648169d2fb3ca6fbf68168471052a758c8c8f4a8cbde394ea31d1e560f2b929bf87aa352b16f28b9487e5c95ca2d378f3a4566c99cd1f7a33b771490a1f70f0b1af53e42cb6eb3b45e72e5bba4cde4ec5ec8ee35eac87d3542ac0d9a7a23883aff86ae9dcfc4b19e1a269a775fb9510b4fe9a7bdd3ebd2f7a3a9406db7bd46698c9f412a777d28994c498f04060c99ccb9d1d83f5aa4302d118dd8227ba5e6248305e31c85db8affc037a611f371fd205e02dac1b7d36cdf98d9b580186b9e262d7717cf8347955ea5c36c48261d196b884337521cba7bbf339f31a2a358416e079c608c0776413598ff9f5833631e60e13c0cbcf3e30f6b199f21ca71244fd27acfccd8e304c82420f5668f725b8612dfade8586a71e7d2f813000047a1da0960313ac905ee78144f1bcb0b77916c6e7278159ad8688b07161df584a30d068a64540c7b7f9a88a3332859b0c3e8fa0dedcce3fa5ea3c058f50ca5eb9ddf895e592d69743e794d4ca7c63cba76416271b81c73c578b143e7798010ffb5be0af5879c80a48"})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000580)={[{0x3c, 0xc, 0x1, 0x2, 0x5, 0x6, 0x3, 0x74, 0x1, 0x3, 0x1, 0x9a, 0x80000000}, {0x7, 0x5, 0x7, 0x4, 0x9, 0x9, 0x7, 0xa0, 0x7, 0x0, 0x94, 0x8, 0x8}, {0xca, 0x81, 0x7, 0xc, 0x26, 0x3, 0xe1, 0x81, 0x40, 0xd, 0xb, 0x1, 0x8}], 0x1})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="60b85f098ee0baf80c66b8bf1cb78966efbafc0cb09cee656726dfb1a1ccb825360f23b266b9330300000f32ba4000b0b0ee2e67260f001966b9800000c00f326635010000000f300fc76802", 0x4c}], 0x1, 0x7, &(0x7f00000003c0)=[@flags={0x3, 0x4}], 0x1)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000280)={'caif0\x00'})
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000400)=@usbdevfs_driver={0x401, 0x1, 0x0})
ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000004c0)={&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000480)=""/5, 0x5})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000540)=0x4)

6m39.425749688s ago: executing program 32 (id=364):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000000000)={0x9, "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"})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x5, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000580)={[{0x3c, 0xc, 0x1, 0x2, 0x5, 0x6, 0x3, 0x74, 0x1, 0x3, 0x1, 0x9a, 0x80000000}, {0x7, 0x5, 0x7, 0x4, 0x9, 0x9, 0x7, 0xa0, 0x7, 0x0, 0x94, 0x8, 0x8}, {0xca, 0x81, 0x7, 0xc, 0x26, 0x3, 0xe1, 0x81, 0x40, 0xd, 0xb, 0x1, 0x8}], 0x1})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@textreal={0x8, &(0x7f0000000300)="60b85f098ee0baf80c66b8bf1cb78966efbafc0cb09cee656726dfb1a1ccb825360f23b266b9330300000f32ba4000b0b0ee2e67260f001966b9800000c00f326635010000000f300fc76802", 0x4c}], 0x1, 0x7, &(0x7f00000003c0)=[@flags={0x3, 0x4}], 0x1)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000280)={'caif0\x00'})
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000400)=@usbdevfs_driver={0x401, 0x1, 0x0})
ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f00000004c0)={&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000480)=""/5, 0x5})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500))
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000240), &(0x7f0000000540)=0x4)

6m37.141344587s ago: executing program 1 (id=371):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r4, 0x84, 0x2, 0x0, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r1, 0x123, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000}, 0x4)

6m37.001089714s ago: executing program 1 (id=372):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43)
setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000000)=0x9, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004740)={0x20, 0x35, 0x107, 0xfffffffe, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x306a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', <r3=>0x0})
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socket$packet(0x11, 0x3, 0x300) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) (async)
setsockopt$packet_int(r1, 0x107, 0x10, &(0x7f0000000000)=0x9, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004740)={0x20, 0x35, 0x107, 0xfffffffe, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @u32=0x306a}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048091}, 0x8010) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00'}) (async)
sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) (async)

6m36.918491611s ago: executing program 1 (id=373):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
r2 = dup(r0)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, 0x0)

6m36.046948416s ago: executing program 1 (id=377):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000001000)={<r2=>r1, 0x8, 0x4}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000010c0)={r2, @in6={{0xa, 0x4e22, 0x400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}, 0x84)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r4=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil)
close_range(r3, 0xffffffffffffffff, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7)

6m33.685331898s ago: executing program 1 (id=386):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x0, 0xe}, 0x8)
r1 = open(&(0x7f0000000300)='.\x00', 0x800, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)

6m33.539684322s ago: executing program 1 (id=387):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000cda000/0x1000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000)
mprotect(&(0x7f000019d000/0x3000)=nil, 0x3000, 0x6)
r0 = syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0)

6m18.01732008s ago: executing program 33 (id=387):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000cda000/0x1000)=nil)
preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000)
mprotect(&(0x7f000019d000/0x3000)=nil, 0x3000, 0x6)
r0 = syz_clone(0x30000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0)

3m45.891296645s ago: executing program 4 (id=1248):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000000004020100600000000000001090224000100000008090400000103000200092104000401220700090581"], 0x0)
r1 = syz_open_procfs$pagemap(0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22300, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2080000000000000080221daeccfda5eb75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe)
close_range(r1, r1, 0x2) (async)
close_range(r1, r1, 0x2)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0}) (async)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x80045006, 0x300000000000000)

3m44.405631986s ago: executing program 4 (id=1258):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x13}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r3 = syz_io_uring_setup(0x50bd, &(0x7f0000000100)={0x0, 0x1f45, 0x40, 0x1, 0x2f0}, &(0x7f0000000000), &(0x7f0000000180))
syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e, 0x0, r3}, 0x0, 0x0) (async, rerun: 64)
r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (rerun: 64)
r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x1)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000180)={r5, 0x2, {0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x12, 0x13, 0x1, "7b5151e419ebfb24ae9df565a7ba70d92e680e910fdd7cf0fcc58a86d3fb39bfe454d5483a5a9bd494c42330ba930ff9edf5b19cf362bffd679aaa7b55b69600", "dd49df5513395a15999c269affd4c66d0ec42e235d60b0d1c4374194373102d009bdef590e61e43df0eb7cf5bfe5580f110281334617d78d9697843a82c78bda", "9d42a8cfc12d7bdde2c0d52ef2c2845a7170db2cba8c36466e038085956986a8", [0x2, 0x2]}})
syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x86, 0x5a, 0x2b, 0x40, 0x525, 0xa4a3, 0x77e6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x7, 0x8c, 0x20, 0xf, [{{0x9, 0x4, 0x14, 0x7, 0x3, 0x42, 0x0, 0xe4, 0x7, [], [{{0x9, 0x5, 0x7, 0x3, 0x40, 0x2, 0xc, 0x64}}, {{0x9, 0x5, 0x4, 0x1a, 0x400, 0xf1, 0x6, 0x1}}, {{0x9, 0x5, 0xd, 0x2, 0x200, 0x0, 0x3, 0xf8}}]}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f00000001c0)=0xc, 0x4)

3m43.333529569s ago: executing program 4 (id=1268):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, <r4=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x20000})
getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x20, 0x0, &(0x7f00000016c0))
r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d1)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1'])
chdir(&(0x7f0000000300)='./file0\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x19)
ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r6=>0x0})
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f00000005c0), 0x4)
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@canfd={{0x1}, 0x72, 0x1, 0x0, 0x0, "558eb6e8921fc44b43f094b223f295556bf5939b1966f37a14fa736a94fc60d67b30ca5752673aa52a477857a1fdb3e7bfd05ef6677bc84b37839c99b454181c"}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x44001)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=<r12=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000eae2eee649582f92d0eb170f97cb00", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r12, @ANYBLOB], 0x1c}}, 0x0)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000280), r13)
sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="01012dbd7000a6ae8e4f0100000008000100020000000800020002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)

3m42.957301125s ago: executing program 4 (id=1270):
r0 = getpid()
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
ptrace$peeksig(0x4209, r0, &(0x7f0000000080)={0x100, 0x1, 0x1}, &(0x7f0000000180)=[{}])
listen(r1, 0xfffffffc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) (async)
sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

3m42.873179076s ago: executing program 4 (id=1271):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)
r1 = socket$inet(0x2, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r1, 0x4)
listen(r1, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0xfd, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200f07"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3m40.980312093s ago: executing program 4 (id=1285):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000009c0)={'wpan0\x00', <r5=>0x0}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async, rerun: 64)
socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0xe0824704187acfd7, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async)
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="5f0921bc35e849a2de69de4da1638f3909fd8282247b11a0d695b53a74cd424581d26f", 0x23) (async)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a8972bd0b72e41082b9a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x484dbf74264d8f11}, 0x20040851)

3m24.903450418s ago: executing program 34 (id=1285):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r3) (async)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000009c0)={'wpan0\x00', <r5=>0x0}) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) (async)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async, rerun: 64)
socket$inet_sctp(0x2, 0x1, 0x84) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, r4, 0xe0824704187acfd7, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) (async)
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) (async)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000500)="5f0921bc35e849a2de69de4da1638f3909fd8282247b11a0d695b53a74cd424581d26f", 0x23) (async)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="020114004f0018000e3580009f0001140000002f0604ac14141de0000003808a8972bd0b72e41082b9a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x484dbf74264d8f11}, 0x20040851)

3m8.765038955s ago: executing program 3 (id=1440):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2481000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
recvmmsg(r2, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12002, 0x0) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r4, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000"], 0x7c}}, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x9}})
r6 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64)
ioctl$int_in(r7, 0x40000000af01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/164, &(0x7f0000000100)=""/47, 0xf000})
ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000700)) (async)
r8 = dup(r6)
ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000000)={0x1, r8}) (async)
r9 = socket(0x10, 0x803, 0x0)
recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})

3m8.385678757s ago: executing program 3 (id=1444):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) (async, rerun: 32)
socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x4009, &(0x7f0000000440)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
mount$afs(0x0, &(0x7f00000000c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1208000, 0x0) (async, rerun: 64)
umount2(&(0x7f0000000840)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (rerun: 64)
connect$inet(r1, 0x0, 0xfffffe34)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, '|P3', 0x1}}}, 0xd) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, <r3=>0x0], 0x2}) (rerun: 64)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3m8.291671847s ago: executing program 3 (id=1445):
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x4c, r3, 0x1, 0x70bd29, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x22}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20064}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0)
sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x204, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe}]}, 0x1c}}, 0xc0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000003c0)={0x0, 0xfffffffffffffd97, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r5, 0x20, 0x0, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}]}, 0x3c}}, 0x20000010)

3m7.362838652s ago: executing program 3 (id=1448):
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) (async)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x0)
read$fb(r1, &(0x7f00000005c0)=""/66, 0x42) (async)
read$fb(r1, &(0x7f00000005c0)=""/66, 0x42)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="829dce42e25e2854bd5f6f86aad172eb238ed8db784df30c3576b68dae5f82d075becab72d32c4acdebbdc1883c2c5f19a2e1744f968ff45c1509bd8e23262a28d62259b6e60471fe0f4cfe81377da4d58b796307338e18aab4162f5388b436da8a03e4259a6d76aa71ba3d6c7a093c19d0ebedac53cdf1b2fdb254edd8e82385663679cdb12a75320b88d667e67d18eb9417cf6af421da33f800df56a6712c91a988c42eb53a3102dcda2f7a5d538b8d3611348027ff6788f4e7a1aa2a93b852248133b0bfad72ce8f4f33486ed9d71ba29689778e2aee02dcb37c875"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x8001, 0x4, 0x1, 0x5, 0x67, 0xcc7, 0x8, 0x7, 0xa, 0x4, 0xfffffffe, 0x1, 0x820, 0x1, 0x6, 0xfffffeff, 0x979d, 0x1a44d, 0xf7ffffe3, 0x40000003, 0x89, 0x2, 0xf27, 0x20001e58, 0xfffffbff, 0x8, 0x3c, 0x8, 0x9, 0x10000, 0xfffffff8]})
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r2, 0x52342000)
r3 = socket(0x10, 0x3, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) (async)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20)
r5 = socket$kcm(0x10, 0x2, 0x0)
prctl$PR_SET_ENDIAN(0x14, 0x2) (async)
prctl$PR_SET_ENDIAN(0x14, 0x2)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0xffffffffffffffff)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x311, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'ccm_base(cbc-aes-ce,wp384-generic)\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x311, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'ccm_base(cbc-aes-ce,wp384-generic)\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0) (async)
sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00140000000280", 0x2a}, {&(0x7f0000000400)="6a718e5e", 0x4}], 0x2}, 0x0)
mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, <r7=>0x0}, &(0x7f0000000bc0)=0xc)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (async)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex+\x88\xfe\xf7\x01') (async)
keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex+\x88\xfe\xf7\x01')
r9 = syz_open_dev$mouse(&(0x7f0000000540), 0xf2, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7a, 0x95, 0x35, 0x8, 0x16ca, 0x1502, 0x1eb5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0x47, 0xa0, 0x7e}}]}}]}}, 0x0)
ioctl$HIDIOCGPHYS(r9, 0x80404812, &(0x7f0000000580))
symlinkat(&(0x7f0000000740)='./file0\x00', r9, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async)
symlinkat(&(0x7f0000000740)='./file0\x00', r9, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r10, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80)
sendto(r10, &(0x7f0000000140)="050000007a19b90c9daaeca1b1ec5719af0abbb83b0514127c8b417386b5c7cc0f676b6dac18222d5bf3b8b98708a136ddca61719a13016d", 0x38, 0x0, &(0x7f0000000080)=@phonet={0x1d, 0x0, 0xff, 0x80}, 0x80)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0xfffffffffffffd59, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

3m7.228818726s ago: executing program 3 (id=1449):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c)
sendto$inet6(r2, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
recvmsg(r2, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/52, 0x34}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/121, 0x79}, {&(0x7f0000000400)=""/183, 0xb7}], 0x6}, 0x40000110)
fchdir(r1)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x132)
ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000080)={0x1060, 0x0, 0x0, 0x20000})
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0)
ioctl$SNDCTL_DSP_GETBLKSIZE(r4, 0xc0045004, &(0x7f0000000000))
ioctl$SNDCTL_DSP_STEREO(r4, 0xc0045003, &(0x7f00000000c0)=0x1)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000007, 0x12, r4, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

3m6.977247314s ago: executing program 3 (id=1450):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x2}}, 0x18)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x140000, 0x0, 0x0, 0x1e, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600", [0x0, 0x1000]}})
r4 = dup(r1)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)

3m6.852171052s ago: executing program 35 (id=1450):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000080), 0x40000047ffffe, 0x1a2c42)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x2, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x10, 0xfa00, {&(0x7f00000000c0), r3, 0x2}}, 0x18)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x140000, 0x0, 0x0, 0x1e, 0xc, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03748a50ceaac594b1b300000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e770a00000000000000930606f9000000000f000000000600", [0x0, 0x1000]}})
r4 = dup(r1)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)

1m0.363210867s ago: executing program 5 (id=2157):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6c64}, &(0x7f0000000040)=0x8)

1m0.175619223s ago: executing program 5 (id=2159):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r1, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x400000, @rand_addr=' \x01\x00'}}}, 0x108)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f00006f4000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x2)
remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x100)
r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000459000/0x3000)=nil, &(0x7f00004a1000/0x1000)=nil, 0x3000, 0x3})
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000280)={0x40000}, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_init_net_socket$rose(0xb, 0x5, 0x0) (async)
connect$rose(r1, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x8, @empty, 0x2}}}, 0x108) (async)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x400000, @rand_addr=' \x01\x00'}}}, 0x108) (async)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) (async)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) (async)
mbind(&(0x7f00006f4000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x6, 0x6, 0x2) (async)
remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x100) (async)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) (async)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000459000/0x3000)=nil, &(0x7f00004a1000/0x1000)=nil, 0x3000, 0x3}) (async)
setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000280)={0x40000}, 0x4) (async)

59.409137491s ago: executing program 5 (id=2164):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x12c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_TUPLE_REPLY={0x4}, @CTA_NAT_SRC={0xb8, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0x54, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}]}, @CTA_NAT_SRC={0x54, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback={0xfffffffffffffff5}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast2}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4005010}, 0x0)
r2 = socket$kcm(0x10, 0x5, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = dup(r3)
write$FUSE_BMAP(r5, 0x0, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x8300, 0x0)
r7 = syz_open_dev$loop(&(0x7f00000006c0), 0x87, 0x101000)
ioctl$BLKIOOPT(r7, 0x1279, &(0x7f0000000700))
connect$x25(r6, &(0x7f00000001c0), 0x12)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)="f3f16554ddd8af7738f90dd96a3eba877c46c2a887f577c8207252dbd3bcddb956c9d8a7b531f408e136ea7881d6d7ff92e42382a4", 0x35}, {&(0x7f0000000080)="e4bd358c73ef43c49bf1720910264d5864d7ea2bd63f805a93b70a9bed97ae4663", 0x21}, {&(0x7f00000000c0)="1327bace92296bc3661291", 0xb}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f0000000200)="5baff1d5c6601cb947f01a913cd1e468d8f1465f6a16778150cd7d509419edf1f2568fce1c113b0df8cea465ed2712025a774187345647991895fd681f3e7ebfeeaca30affaf882012e6902f8993ea74a49e2350", 0x54}, {&(0x7f0000000140)="4d4a6daaeaaa63c56d4a166e2ec49ed914e435bce6dc3a3d17cbd4810d7553480661427a650a60d80e8592", 0x2b}, {&(0x7f0000000280)="6ea45b4ca7ea1676d9ec738a9872c8e44dd28e12f0475b171021ef400b668d6498df60075284519b50c13eaf82ebea9004f3953eccec1f79170e550d1381a4ae3f762a757bc7a360579cf06f9d27f8e22ea349f4133d5f2d8db63a709d6127e71da834e7f74a7150498fa646c7c23cc77361cfcd9f1f31f09b1ab841b1f920b9a029695bc6b6a8d0fe88dd9470788485cb2d6d3d555a399c5106cd3ff057d7c66e0421ff8c6eaef3fa9f801d503b51d593896171", 0xb4}, {&(0x7f0000000040)="4f06ffcf4dfe5d4bf20b", 0xa}], 0x8}, 0x54)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
syz_usb_connect(0x5, 0x6f5, &(0x7f0000000740)=ANY=[@ANYBLOB="120100005f4da220fd0b02008ae9010203010902e3060300001000090486000caba7e580090502"], 0x0)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="9400000001060103000000000000000001000008"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000800)

58.727816451s ago: executing program 5 (id=2170):
r0 = socket(0x23, 0x5, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0xa1b, "c7080000000000000009a0721972dd40cb00000000000800", <r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000380000001c0a050000000000000000000200000a0c00034000000000a8283fcc0900020073797a32000000000900010073797a30"], 0x8c}, 0x1, 0x0, 0x0, 0x24000810}, 0x0)
close(r0)
set_mempolicy(0x2, &(0x7f0000000140)=0x6, 0x6)
socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d)
ioctl$sock_netdev_private(r5, 0x8914, 0x0)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCADDRT(r6, 0x890b, 0x0)
r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
socket(0x5, 0x2, 0x81)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001380)={&(0x7f00004b4000/0x1000)=nil, &(0x7f000063e000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00004b2000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000992000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000616000/0x1000)=nil, &(0x7f0000eaa000/0x1000)=nil, &(0x7f00005b8000/0x3000)=nil, &(0x7f0000614000/0x4000)=nil, &(0x7f0000001340), 0x0, r5}, 0x68)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'vlan0\x00', @remote})
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c0001800600060088480000643802"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2911891, 0x0)
mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x100001, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001340), 0x400000, 0x0)
setsockopt$RDS_RECVERR(r9, 0x114, 0x5, &(0x7f0000000240)=0x1, 0x4)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)

58.58787719s ago: executing program 5 (id=2171):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0xa, 0xfffff1b7, 0x4, @remote, @empty, 0x10, 0x8, 0x40, 0xd66}})
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r2], 0x0)
openat2(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x1}, 0x18)
r3 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x402, @loopback}], 0x1c)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00910c07a551559a257aac81"], 0xfe33)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0x4038a09, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2={0xff, 0x5}, 0x0, 0x40, 0xb3}})

58.226207025s ago: executing program 5 (id=2173):
openat$kvm(0x0, &(0x7f0000000100), 0x40a40, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x40a40, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$inet6(0xa, 0x3, 0x9) (async)
r1 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_mreq(r1, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = memfd_create(&(0x7f0000001200)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x4000005) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf2503e4000005000200020000002a98d067baaa732c775fec93b1612182192620778dfc3d5de6554eb0000000000000006baf747f63ab6b04bcaac82d178a41daee4f5af1955d226871e3909feb01e444787aafbede863d1c84f569681a6ce6da7b49d0a82566f2278923fa751141c3e03a323ae8710469c444aed011a4e7f170b3999c828ece3d5eb7f30eb76ba99a2ecef3c40c2cf3f022b0aacb047eeb67fa66266034cba5d8f4c371c545afce912e1e5f6314a8d104d0b5217f2c02fabca7656f35491bc7b06846e81307d84f4f12c950b386596b77d93c9931daacf0d9a9423cf4730440bf5fa2d89aea8b4028307a2ad851790a19a767a6b306"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x4000005)
ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f00000000c0)={0x1, 0xc, 0x3, 0xfffffffffffffff8, 0x8000000000000000})

57.736264889s ago: executing program 36 (id=2173):
openat$kvm(0x0, &(0x7f0000000100), 0x40a40, 0x0) (async)
r0 = openat$kvm(0x0, &(0x7f0000000100), 0x40a40, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
socket$inet6(0xa, 0x3, 0x9) (async)
r1 = socket$inet6(0xa, 0x3, 0x9)
setsockopt$inet6_mreq(r1, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) (async)
setsockopt$inet6_mreq(r1, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = memfd_create(&(0x7f0000001200)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
write$binfmt_script(r6, &(0x7f00000001c0)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async)
execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x4000005) (async)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000012c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x4000005)
ioctl$KVM_SET_CLOCK(r7, 0x4030ae7b, &(0x7f00000000c0)={0x1, 0xc, 0x3, 0xfffffffffffffff8, 0x8000000000000000})

9.471330614s ago: executing program 7 (id=2361):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x5, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

7.488189292s ago: executing program 8 (id=2374):
r0 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00)
cachestat(r1, &(0x7f0000000000)={0x6, 0x2}, &(0x7f0000000080), 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\x18\xd5C(k\xf0\xf8\x02\x00\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D\xe9\t\xbd\x17\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6\x05\x00\x00\x00\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00'/186, &(0x7f0000000240)='sockfs ', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='\x06\x00{O', &(0x7f0000000080)='\x1e\x00', 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
linkat(r2, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, 0x0, 0x1000)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000500)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\x03\x00\x00\x00\x00\x00\x00\x00\xc5\xad\t\f\xdeg\x8d\x16iW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00k:d\x8f\x0e', &(0x7f00000000c0)='dU|\xcbM\xe6\x91q\xe0\x05\xbes\xc0\xd2\xdb0}\xa6\xc4tly\xe0+\xb8~\xd9ymx\xa1\x06\xb4F\xf3Q:\xfem\xea\xed\xfc\x04\xf88\xe0\xa1&\xa8\xff\x10\xb3\xb2\x92N\f\x00!\xdbV\xc3\xca\r\x8c\xfb\x8esJ\xb3\x1bf\xce\v\x0e\xe3\xd5', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1<e\a\xa5\x8f\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\xd3K\xfa\xc8\x8d#\xce)\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^\x97\b\x14\xc5\xad\t\f\xdeg\x8d\x16wW\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B4/#W\xc5\x05\x9d\xd6\x02\x8cU!a\xdc|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3\x93\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^', &(0x7f0000000040)='/+\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='\x00', &(0x7f00000001c0)='dE\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000380)='\xbd\x10\xe2\n\xc4\xa8\xa8?\a\x9e@O<\xf4s\x85~X\x85\xdc\x11\x04a\xf8\xa6f\x96nB\x02\x10+C$\f\xb3\xcc\xed\"M\xb6 V\xc5\x9a\x11o^\xda\xc8', 0x0)
r3 = fspick(r1, &(0x7f0000000180)='./file0\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a40)='\xcfD\xbc\xbf\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\xec\xe6\x04T\xcbn\xa5\xc3\x04[\x02\xa9[=\xf9\x8b\xf7\xc1\x9c\x83@\x1e\x99\xca\xc3\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby:\xd8\xc5\xccrun4\xe0\xca\xc1\x0f\xc3\x03D\xe1\f\xb3O\xa4\x1c\x04]8)}\x83:\x9e\xc0X\xdb\xd9\x89\x94\x9b(\x19\\\xf5!w\xbafo\xea\xe4\xb5Xe\x84\xbc\xcdw\x802\xb4\xb8\x1f\xc2\x97\xbfi\xe8\xf8\xbd\x1d,\xffUX\xbeA\x00{\"\xdbya#I\x03\xec\xed\x8b\x97\xff\x1eiq\xd1n\xf99\xc6\a\a\xed\x0f\x15x\x91\xdc\x05P\xf7\xf3\xad\xa3\xbc\xe4[\xa2\xc7\xfa\x9e\xad\xa2\xad\x86\xc4\aD\xc9\xdf\xf8\xf7\xc1\xc5\xc5.\x8a&:\x90\xb2\x8c\x86\xb2\\\xa8%!\x98TQ\x91\x00\x00\x00\x00$\x99\xbf', &(0x7f00000006c0)='\x01\x8dik\xc2\xed\xf9\x8a\xae\x86\xae)Dn<(\x02:cU\xa0d\xd4\x1f\xd4\x95\x93\xb7\xc1\xcc\x84\x8c\xdd\xbf^]~\xcf\xcb6w\xb3\xfa0b\x88\x04\x10\x9d_\x97\x9f\x89\xb7\xe35C\xf3\x1b\xafV\\wGU\xaf\xa4\f&\xe7m\xf0\xaa{\xb2\xe5\xe2\xeb\x9bN#\x99\xdc\x9f\"\xab&\x8f\x01\x17Y\xaf\xb7\xdc`r\x9c6\\\x0e\x94\xd5a\xf7\xd4u\xdf\xf0\x9b\xa0p\v\xa1\x8a\x145\x9b\xd95\xc8U\xe4V\x81-1\xb0K\x9a\xa3+\x03\xc1\xf0\xeb\xafYI&\x9e\xd0\xe1\x148\xfe\x10\x0f\xbd\xa2\xed}\xe6\x1asT\x1f\x92\xdb\xa1&\'\xc7\xe9\xa5\xd0\x89\x8d\xf1$\"\xdc\xe5\xfcT\xad\fj\xfe\'t', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000200)='\x00', 0x0, r0)
close(r0)

7.365128823s ago: executing program 8 (id=2375):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@loopback, @multicast2, <r1=>0x0}, &(0x7f0000000040)=0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000680)={0x6, @pix={0x7ff, 0xd9a4, 0x42303159, 0x3, 0x3, 0x40, 0x8, 0x3ff, 0x0, 0x2, 0x2, 0x7}})
set_mempolicy(0x8000, &(0x7f0000000100)=0x3, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041)
write$sndseq(r4, &(0x7f0000000040)=[{0x41, 0x0, 0x0, 0xfd, @tick, {}, {0xf}, @addr={0x0, 0xf}}], 0x1c)
fstat(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x0, 0x0)
openat$cgroup_procs(r8, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$snddsp(r8, &(0x7f00000002c0)="cf97df43db600023f9eda93790a4ec70a87fbe382a2647888f8b299c1b70b4339e478010dc91f071cfe5afb6b0fe1b4a687d7b87dfb6ff768390fe88f43a09ef9f3639b2192015dddc0ccf532ce06317b0dcd9a81d21d188e9", 0x59)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0)
keyctl$get_persistent(0x16, 0x0, r6)
write$cgroup_subtree(r8, &(0x7f0000000240)={[{0x2b, 'net_cls'}, {0x2b, 'net_prio'}]}, 0x13)
setreuid(0x0, r5)
keyctl$get_persistent(0x16, r5, r6)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x0, 0x4e22, 0x7, 0x2, 0x0, 0x80, 0x33, r1, r5}, {0x8, 0x4, 0x0, 0x7ff, 0xfaf1, 0x7f, 0x3, 0x8}, {0x7cc3, 0xffffffff7fffffff, 0x9, 0x100}, 0x3, 0x6e6bba, 0x0, 0x0, 0x1, 0x1}, {{@in=@multicast2, 0x4d6, 0x32}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x1, 0x1, 0xb9, 0xe66e, 0x6, 0x1}}, 0xe8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x7, 0x7840, 0x4, 0x400, {{0x6, 0x4, 0x0, 0x2, 0x18, 0x4, 0x0, 0x1, 0x29, 0x0, @private=0xa010102, @private=0xa010101, {[@generic={0x83, 0x2}]}}}}})

7.328570815s ago: executing program 8 (id=2376):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
fanotify_init(0xf00, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc)
sendmmsg$unix(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x40044}}], 0x1, 0x5)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x0, 0x21, 0x17, {0x17, 0x30, "12f154d875a89284033c8f1b8e83c503d0683a8b34"}}, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="87e5ce4a1f5f4b43050000"], 0x0, 0x0}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff}, 0x6)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r8})
sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)

6.141057995s ago: executing program 7 (id=2378):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@wrmsr={0x1e, 0x20, {0x8f3, 0xfffffffffffffffb}}, @rdmsr={0x32, 0x18, {0x3ad}}, @wrmsr={0x1e, 0x20, {0x2fe, 0x8}}, @cpuid={0x14, 0x18, {0x5, 0x48000000}}, @code={0xa, 0x6e, {"c4c27d18c33e470f01c50f20c035000000800f22c00f20c035000001000f22c066410fc73066baf80cb8d0dbd388ef66bafc0ced660f748e35a4363766baf80cb8fa83f68eef66bafc0c66b8277466ef2e660f565ae4b90e0900000f32"}}, @code={0xa, 0x69, {"460f4b0e66baf80cb840075e8def66bafc0ced0f0da02c00000066baf80cb8071ec080ef66bafc0cb001ee450f01c866baf80cb8cb786380ef66bafc0cb043ee0f01cf0ff393bb9100002e0f01f86566450f56ab01000000"}}, @code={0xa, 0x6c, {"660f388232f30fe69a00000100b9fc090000b8e9a30000ba000000000f308fa9509bce0fc7b500000000c74424001f810000c7442402ac240000c7442406000000000f011424040766ba610066b853de66ef0f95f666650f005100"}}, @rdmsr={0x32, 0x18, {0xc001001f}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x8, 0x4}}, @rdmsr={0x32, 0x18, {0x305}}, @wrmsr={0x1e, 0x20, {0x8b5, 0x800}}, @cpuid={0x14, 0x18, {0x5, 0xa}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x14, 0x18, {0x2, 0x89}}], 0x283})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000040)={[0x2, 0xc8f, 0xffffffff, 0x1, 0xfffffffffffffffa, 0xfff, 0x3ff, 0x21, 0x8, 0x8, 0x1000, 0x33d0, 0x1, 0x9e5, 0x1, 0x50], 0xd000, 0x208290})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async)
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xb6b}) (async)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0x287})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, 0xffffffffffffffff, 0x5708e000) (async)
r3 = socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b5000040"]) (async)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f0000000200)={0xc7, 0x0, 0x1}) (async)
getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x9, 0x0, &(0x7f0000000740))
syz_usb_connect(0x5, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="aa1258b7770e195ecf76fcdcd0d4f911fbfe0795964502c6e783bada91998e157d036cbb7ae8e9dee103193a8777612d71ef70efa022bf9120", @ANYRESOCT=r3, @ANYRES8=r0, @ANYRESDEC=r3, @ANYBLOB="b0d199ba6512bb11f885cf1ffc22c5f1d86525bd4e1d8fe071b755382d6f198b9079ddc9ef6d0353b731cec6f2cbb261d8b9eb5ac9888ef555da33e09cb3fbfaf5a5d145d69961cbce44af83cd7b60c7e8fee1840a25a1e086e0429061053e4e42f4078e9f7d5bda9e9806d0fb6de74d9d819f7939f8ff72027572dbf1e49bec250a4f5e9256a28387ffb6dbb4883bfdd8f2b1e674a9dd3b44f36c73d25ba581fad656888f098969e320"], 0x0)

5.209012784s ago: executing program 7 (id=2380):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20, 0xffffffffffffffda}, 0x0}) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
setitimer(0x0, &(0x7f00000000c0), 0x0) (async)
setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) (async)
getitimer(0x1, &(0x7f0000000080)) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64)
getsockopt(r6, 0x111, 0x3, 0x0, &(0x7f0000000080)) (async, rerun: 64)
r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
preadv(r7, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x11}, {0x0, 0x2}], 0x2, 0x0, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f000100080031000000000000000000", @ANYRES32=0x0, @ANYBLOB="0404"], 0x20}], 0x1}, 0x0) (async)
r8 = syz_usb_connect$hid(0x7, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201b5df7dec630003000109022400011b00a0000904000501030001000955a12c7101220500090581037f2a3de1f72560d0e42e6e3b8d5f50f8f111c6f457929e2b798a37f817c9576df46927d3f4a2af79731e684f6d92d39612283642f2f6091d930000000000000009828cc198ccf58774dc24575d0d72edb9b8d476ec8eaefc8599b83f28d9f3297bdb79e8c82f3d5f7eb321fe0c70b962239e6526e384af57b08c5f0891ddbd6d453e15c62f7a542eef"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0) (async)
syz_usb_control_io$hid(r8, &(0x7f0000000040)={0x24, &(0x7f0000000000)={0x0, 0x23, 0x5, {0x5, 0xa, '@\x00\x00'}}, 0x0, 0x0, 0x0}, 0x0)

5.020956574s ago: executing program 7 (id=2381):
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000140)={{0x1, 0x0, 0x80, {0xffffffffffffffff, 0xffff1000, 0x2}}, "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", "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"})
write$tun(0xffffffffffffffff, 0x0, 0x2e)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
fanotify_init(0xf00, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f00000003c0)={0x0, 0x21, 0x2, {0x2, 0x30}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_usb_connect$uac1(0x4, 0x126, &(0x7f00000021c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x114, 0x3, 0x1, 0x5, 0x80, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x0, "649f34"}, @processing_unit={0xd, 0x24, 0x7, 0x1, 0x0, 0xfa, "9db068d6e475"}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x80, "f98e31be"}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xaa, "0cc5bb"}, @processing_unit={0xa, 0x24, 0x7, 0x5, 0x4, 0x8a, "5e328c"}, @selector_unit={0x7, 0x24, 0x5, 0x3, 0x1, "c7d8"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x1, 0x3, "3c0991"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xfc6a, 0x5, 0x7, "5dc8af8d730349ca6e"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7, 0x1, "df7e2a", "06d95f"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x3, 0x8, 0x40, "9854450d2e38d9a8a9"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x81, 0x0, {0x7, 0x25, 0x1, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x5, 0x1, "2983", "1769"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1, 0x6, 0x9, "ac53adc55c4a8f6157"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x4, 0x8d, 0x3, "766c5b620b186ef779"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xf, 0x1, 0x7, 0x0, '9$'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe3, 0x3, 0x0, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xa3, 0x7, 0x6, {0x7, 0x25, 0x1, 0x3, 0xb2, 0x3}}}}}}}]}}, &(0x7f00000023c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0xa7, 0x9, 0x10, 0x40, 0x6}, 0x5d, &(0x7f0000000080)={0x5, 0xf, 0x5d, 0x3, [@ptm_cap={0x3}, @generic={0x52, 0x10, 0x4, "f3f417f17ca4655a37b8abf3f2b4e32560ce54e1eeb17ddc3d4cbe31ed7aafa34db1d2a13efaf0ec00048c11ea10e98fe7e781aef9eca0740f679939e4a8f8555484cfddd55f41d1e49bce8a122cdd"}, @ptm_cap={0x3}]}, 0x2, [{0x95, &(0x7f0000002300)=@string={0x95, 0x3, "4968c84a3e19d1548d3ecdb7f3bf4cded20353b53e6b627c005abcc307055ce4668c738e55f13cd7d6f418839fdbfe954dfbb2896965cbed7bf3f407a275aa2e88a7f13d43e295637c3f2802824411426f3f41f449a70f6d3c069bd15892756f138caf71bfed6d01b719c0c8b24433fab3b329d18ba3015f2cdc01ecc8fa5e53eba284d2566a8b1613cdd4f4a9346e784b475c"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x44e}}]})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/kexec_crash_loaded', 0x0, 0x0)
read$char_usb(r2, &(0x7f0000000100)=""/169, 0xa9)
syz_usb_control_io$uac1(r1, &(0x7f00000025c0)={0x14, &(0x7f0000002400)={0x20, 0x23, 0x95, {0x95, 0x22, "39a57993f8027268a207fea7ac0221f8f84d7bd03d04b94ebca21636d517ce74eafebfb81436902f7fd21abbddc3b5786ae0af15004ceae5ffb491955a7015d271283c2c8fdd31c5481d3aa5ac2d38672877098f1f1f0c45befbff876bd237f4f7acf0d3e217c275858e0dd0da5c3c1c2b917d3df59f8e4df95fd5d092f7f66936ba504652fd7a880367457fab4b0059d1e7a1"}}, &(0x7f00000024c0)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "32e0df6c76575846c5e29d7b9a5681356c4e87d244ede22a9537e68b32a06868a22fc34a14f7490fafd76a38d650e67fe8127cd75b657b15cf0083c90247b2424d50df78fbe98d78ef39e18ecfca86304dbef72f2d5ba3572fba7f5bae1aa9f7ebeb48973fd677681c0abaf949770860f7ec4a666cfd4a4da2a5f986b2d00f2908348f5531ca7f1d74747fc1df58a5f61041d5640e995a92428f8857c9694b59da1680a9bb2cf03e6a40617528690ede7eb73919e7c9df4cb950c4bce1fe78fab5a678f41327cdba5b1c8efa0bc484677c76a6f37920b55c54c5"}}}, &(0x7f0000002840)={0x44, &(0x7f0000002600)={0x0, 0x10, 0x5e, "e7bba2e086511d3bfe3f3e9dee986a007e64544456ae56b77f8ca55a73e8ceaf6a7fa23575fd7d901a13e3bf4980ab675927d22bafe288f7336a05a3bc1de09b26c7155205d2b7ddc61c3cdc590e3e03b9ae325993996fdc815e4f4365cc"}, &(0x7f0000002680)={0x0, 0xa, 0x1}, &(0x7f00000026c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000002700)={0x20, 0x81, 0x2, "91a0"}, &(0x7f0000002740)={0x20, 0x82, 0x1, "cb"}, &(0x7f0000002780)={0x20, 0x83, 0x3, "9d1e59"}, &(0x7f00000027c0)={0x20, 0x84, 0x4, "57047bdc"}, &(0x7f0000002800)={0x20, 0x85, 0x3, '/i\\'}})
syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)

4.260062264s ago: executing program 6 (id=2382):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x200)
write$sndseq(r0, &(0x7f0000000040)=[{0x5a, 0x2, 0x3, 0x4, @time={0x1, 0x9}, {0x2, 0x6}, {0x6, 0x8}, @note={0x81, 0x2, 0x3, 0x28, 0xfffffffb}}, {0x40, 0x8, 0xf6, 0x0, @time={0x0, 0x1e}, {0x1, 0xfe}, {0x0, 0x8}, @control={0x8, 0x0, 0x9}}, {0x9, 0x8, 0x14, 0x7, @tick=0x5, {0x2, 0x8d}, {0x4, 0x40}, @raw32={[0x80, 0x6, 0x80000001]}}], 0x54)
r1 = syz_open_dev$sg(&(0x7f00000000c0), 0xb, 0x140400)
ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000100))
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0x400000000000000, 0x5000, 0x571, 0x7, 0xc}) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000180)={0x2, 0x0, {0x1, 0x0, 0x5, 0x2, 0x6}, 0x40})
ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000000200)={{r2}, "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"})
r3 = socket$rxrpc(0x21, 0x2, 0x2)
recvfrom$rxrpc(r3, &(0x7f0000001200)=""/43, 0x2b, 0x40012000, &(0x7f0000001240)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x24) (async)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000001280)={0x30001, 0x0, [0x6, 0x0, 0xe, 0x2, 0x1, 0xfffffffffffffffb, 0x1, 0x7]}) (async)
ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000001300)={{r2}, "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"}) (async)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000002340)={{0x5, 0x4, 0x3, 0x4}, 'syz1\x00', 0x10})
r5 = signalfd4(r2, &(0x7f00000023c0)={[0xaa58]}, 0x8, 0x80800)
setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000002400)=[0x1, 0x2], 0x2)
ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) (async)
connect$inet(r5, &(0x7f0000002440)={0x2, 0x4e21, @multicast1}, 0x10)
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000002480)={0x1, 0x9, 0x2}) (async)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f00000024c0)={0xc00, r2}, 0x0) (async)
ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000002500))
ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) (async)
ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000002540)={0x6, 0x1})
ioctl$USBDEVFS_DROP_PRIVILEGES(r5, 0x4004551e, &(0x7f0000002580)=0x1) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f00000025c0)={0x0, @aes256, 0x0, @desc2}) (async)
r6 = syz_open_dev$sg(&(0x7f0000002600), 0x4, 0x2000)
ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000002640)) (async)
ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x0) (async)
r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002980)={0x0, &(0x7f0000002680)=[@cpuid={0x14, 0x18, {0x7fff, 0xfffffffd}}, @uexit={0x0, 0x18, 0xffffffffffff8000}, @cpuid={0x14, 0x18, {0x101, 0x1}}, @cpuid={0x14, 0x18, {0x3dc5, 0xf}}, @cpuid={0x14, 0x18, {0x7, 0x7}}, @cpuid={0x14, 0x18, {0x9, 0x200}}, @wrmsr={0x1e, 0x20, {0x82e, 0x944e}}, @uexit={0x0, 0x18, 0xffffffff}, @cpuid={0x14, 0x18, {0x8, 0x2}}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x14, 0x18, {0x0, 0x1}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0xa8d}}, @code={0xa, 0x76, {"48b802000000000000000f23d00f21f835300000040f23f848b8ce380000000000000f23c00f21f83500000a000f23f8c4a29d9aed26672e42f6a504000000c7442400a0000000c7442402df810000ff2c24c4c14a5351700f070fc759012e0fbb3b0f01ca"}}, @uexit={0x0, 0x18}, @wrmsr={0x1e, 0x20, {0xc0011409, 0xc}}, @wr_crn={0x46, 0x20, {0x0, 0x8}}, @cpuid={0x14, 0x18, {0xffff368f, 0x7}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x14, 0x18, {0x800, 0x5}}, @wr_crn={0x46, 0x20}, @wrmsr={0x1e, 0x20, {0xbd0, 0x2}}, @cpuid={0x14, 0x18, {0xdf0f, 0xf}}], 0x2ce})
ioctl$KVM_SET_XSAVE(r7, 0x5000aea5, &(0x7f00000029c0)={[0xfffffffe, 0x8, 0x8, 0x3, 0xff, 0x3, 0x7, 0xd3f, 0x0, 0x72, 0x8, 0x2, 0x7fffffff, 0x2, 0x3, 0x8, 0xff, 0x5, 0x3, 0x3, 0xff, 0x8000, 0xb, 0x2, 0x1, 0x65, 0xcf, 0x7d36, 0x7a4, 0x80000000, 0xff, 0x6, 0x3, 0x9, 0xfffffff3, 0x1, 0x80000001, 0x9f, 0x5, 0x0, 0x7, 0x8, 0x8, 0x4, 0x4, 0x8, 0x4, 0x4, 0xffffffff, 0x9, 0xff, 0x6, 0xffff, 0x401, 0x3, 0x1, 0x7, 0xe, 0x3, 0xfff, 0x8001, 0x9, 0x8001, 0x192, 0x30, 0x8, 0x734f, 0x6, 0x8, 0xd, 0x3, 0x3, 0x401, 0x2, 0x5, 0x7, 0x0, 0x3, 0x8, 0x87ce, 0x3, 0x9, 0x6, 0x3, 0x0, 0x3, 0x689, 0x6, 0x9, 0x2, 0x40, 0xd3, 0x2, 0x2, 0xb, 0x7fffffff, 0x2, 0x881, 0xffffffff, 0x4c, 0x8, 0x1, 0x6d2, 0x80000, 0x2, 0x1, 0x9f7, 0x9, 0x0, 0x3, 0x2107, 0x7, 0x3, 0x3368, 0x7, 0x1, 0x46dd, 0x1000, 0x7, 0xe7, 0x4, 0x9, 0x2, 0x4, 0x800, 0x162, 0x8, 0x7, 0x9, 0x3, 0x7fff, 0x7fffffff, 0x8001, 0x8, 0x7, 0x8, 0x0, 0x6, 0x966, 0x4, 0x3, 0x5, 0x40, 0x0, 0x2, 0xb, 0x7, 0x17e00000, 0x800, 0x0, 0x6, 0x5, 0x7ff, 0x8, 0x7, 0xe, 0x10000, 0x1, 0x9, 0x7, 0x7, 0x5, 0xff, 0x1, 0x4, 0x9, 0x9, 0xdd, 0x7fffffff, 0x8, 0x3, 0x6, 0x4, 0xf5c, 0x7fff, 0x7, 0x4, 0x7, 0x2, 0x9, 0x80, 0x8, 0xc2b8, 0x5, 0x2, 0x7, 0x1, 0x8, 0xcea, 0x55f, 0x40, 0x1, 0x7ff, 0x6, 0x8, 0x10001, 0x9, 0x3ff, 0x40, 0x3, 0x404, 0x5, 0xe0, 0x2, 0x9, 0x1, 0x5, 0x1654c4, 0x4, 0x9, 0x3, 0x400, 0x65, 0x1cb, 0x81, 0x0, 0x200, 0x7, 0x1, 0x9d, 0x84, 0x1, 0x3, 0x4, 0x101, 0x4, 0x9, 0x0, 0x2, 0x7f, 0xfff, 0xffffffff, 0x3, 0xfe12, 0x5, 0xe, 0x2, 0x2, 0x8, 0x8, 0x3, 0x6, 0xffffff78, 0x6, 0x8, 0x4, 0x1de6, 0x3, 0x4, 0x3ff, 0x7, 0x1, 0x4, 0x6, 0x2, 0x5, 0x0, 0x3, 0x0, 0x2, 0x7, 0xfffffffd, 0x4, 0x4, 0x100, 0x9, 0x8, 0x8001, 0x5, 0xb6f, 0x7fffffff, 0x7, 0x8, 0x68, 0x6, 0x3, 0x101, 0x8000, 0x6, 0x80, 0x1, 0x6, 0x9, 0x7, 0x5, 0x5, 0x3, 0x101, 0x80, 0xfffff3d8, 0x9, 0xfffffffa, 0xffffff29, 0x7fff, 0x3, 0x4, 0x1, 0x7, 0x8, 0x521cd5ec, 0x4, 0x4, 0xa, 0x24, 0xfffffffa, 0x84, 0x2, 0x0, 0x0, 0x9, 0x400, 0xe, 0x81, 0x8001, 0xfffff001, 0x8c49f425, 0x2, 0x7c, 0x666, 0x9073, 0x400, 0x1, 0x750, 0x2, 0x4, 0x6, 0x1, 0x7, 0x0, 0x80, 0x6, 0x3, 0x6, 0x173d, 0xda51, 0xffff1640, 0x0, 0xff5, 0x2f0a, 0x81, 0x4, 0x7, 0x3, 0x1ff, 0x7fff, 0xb, 0x9, 0xffffff79, 0xf6f, 0xf8ba, 0x1, 0x28, 0x4, 0x1, 0x5, 0xc, 0x8, 0x80000000, 0x0, 0x81, 0x43, 0x0, 0xf1a, 0x9, 0x6, 0x6, 0x1, 0x2, 0x8, 0x0, 0x9, 0x4, 0x8, 0x5, 0x0, 0x147d, 0x4, 0xfffffff9, 0x9, 0x1, 0x80, 0x100, 0x7, 0x3, 0x7, 0xffffff26, 0x94c0, 0x3, 0x5, 0x7, 0x18000, 0xffff, 0x2, 0x0, 0x1fc, 0x800, 0xfffffffe, 0x0, 0x7, 0x9, 0x3, 0x4, 0xf, 0x0, 0x4, 0x2, 0x80000001, 0x7, 0x1, 0x9b, 0x4, 0xff, 0x8, 0x1ee, 0x40843bef, 0x26, 0x7, 0x9, 0x3, 0x1, 0xc, 0x80000000, 0x7, 0x84c, 0x3, 0x9, 0x3, 0x8, 0xd, 0x7fff, 0x5, 0x3, 0xffffffff, 0x3, 0x9, 0x11, 0x5, 0x8001, 0xff, 0xf1cf, 0x9, 0x6, 0x2, 0x7, 0x1, 0xf3ca, 0x8, 0x3261fee6, 0xfffffffa, 0x6, 0x7, 0x1, 0x6, 0x100, 0x3, 0x10001, 0x7fffffff, 0xe, 0x0, 0x80, 0xffff42e4, 0x81, 0x6, 0x4, 0xfffffff9, 0x7, 0x34d8, 0x7, 0x3, 0x6, 0x6, 0x4, 0x100, 0x9, 0x6, 0x6, 0x9, 0x1, 0xa, 0xfffffff8, 0x0, 0x0, 0xffff0bec, 0x9, 0x5, 0x8, 0x3adf, 0x8, 0xab1f, 0x800, 0x6, 0x10001, 0x4, 0x7, 0x2, 0xd, 0x1, 0x4, 0x7f, 0x101, 0x8000, 0x0, 0xe, 0x6, 0x7a, 0xf6, 0x8, 0x1, 0x47, 0x9, 0xc26, 0xfffffff8, 0x6, 0x5, 0x3, 0x7, 0xd915, 0xd, 0x8, 0x4, 0x0, 0x7, 0x9, 0x4a6, 0xad8, 0x1, 0x15f, 0x2, 0x1, 0x96, 0xf, 0xff, 0xaf9, 0xc55c, 0x800, 0x400000, 0x55, 0x100, 0xa22, 0x1, 0x8, 0x6, 0x2, 0x7, 0x4, 0x5, 0x10000, 0x6, 0x0, 0xc, 0x10001, 0x1a0e, 0x9, 0xa501, 0x3, 0x604b, 0xffff, 0x8, 0x8, 0x2, 0x6, 0x0, 0xa00000, 0x400, 0x7ff, 0x4f4, 0x9, 0x9, 0x9, 0xd, 0x2, 0x1, 0xf, 0x2, 0x0, 0x8, 0x7, 0x400, 0x0, 0x9, 0xfffffffa, 0x600000, 0x0, 0x7, 0x9, 0x2, 0xffff8174, 0x1ff, 0x8, 0x8, 0x9, 0x1, 0x163, 0x3, 0x4, 0x3, 0x63, 0x1, 0xfffffffc, 0x2, 0x40, 0xfffffffa, 0xf79, 0xb4, 0x2, 0xc7, 0x2, 0x1, 0xa, 0x1, 0x8, 0xc, 0x7fffffff, 0x35f, 0x50cd4196, 0x3bc, 0x9, 0x9, 0x8, 0x0, 0x9, 0x7, 0x244, 0x7, 0x5, 0x6, 0x3, 0x7, 0x4, 0x7f, 0x10001, 0x4d7, 0x4, 0x81, 0x6, 0x95bc, 0x5, 0x5, 0x114, 0x1ff, 0x8, 0x0, 0x10001, 0x0, 0xfffffff8, 0x2, 0x1, 0x7, 0x1, 0x7fffffff, 0x3, 0x65a00890, 0x3, 0x7, 0x4, 0x7f80, 0x7, 0xd691, 0x8, 0x1, 0x8, 0x3, 0x2, 0x3, 0x6, 0x80, 0x4, 0x6, 0x2, 0x400, 0xa, 0x8, 0x3, 0x80000000, 0xfffff8e3, 0x0, 0x10, 0x7, 0xcc, 0x9, 0x5, 0x5, 0xfffffffe, 0x360, 0x41, 0x3, 0x2, 0x75f, 0x3ff, 0x7, 0x7, 0x101, 0x2dc8000, 0x0, 0x3, 0xf45, 0x3, 0xfffeffff, 0x2, 0x4, 0x81, 0xa, 0x475b, 0x78ad0cdc, 0x6, 0x9, 0x4, 0x9, 0x0, 0x6, 0x2, 0xf, 0x8, 0xa201, 0x4, 0x2, 0xff, 0x8, 0x4, 0x2, 0x7, 0x7, 0xffffffff, 0x4568, 0x3ff, 0x4, 0x0, 0x1, 0xffff72bf, 0x7, 0xfff, 0x6, 0xc9, 0xc, 0x6, 0x2, 0xffffaaf6, 0xa, 0xfffffffd, 0x8, 0x2, 0x10001, 0x2, 0x7, 0x40, 0xd0b, 0xffff, 0x1000, 0xc6f5, 0x3, 0x6, 0x400, 0x6, 0x6, 0x6, 0x10001, 0x2, 0xfffffffa, 0x37ac8db3, 0x1000, 0x0, 0x1, 0x8b01, 0x7a0b, 0x4, 0x7622000, 0x7, 0x0, 0xff, 0xda, 0xc1, 0x3, 0x3, 0x4, 0xa0, 0xa608, 0xfffffffe, 0x6983, 0x6, 0x9, 0x1, 0x7, 0xff, 0x2, 0x2, 0x8, 0x3, 0x6, 0xc0, 0x0, 0x0, 0x4, 0x2, 0x7, 0xffffffff, 0x6, 0x5, 0xf, 0x755c, 0xffffffff, 0x3, 0xd21, 0x0, 0x2, 0x5, 0x80, 0x100, 0x3, 0x8, 0x9, 0x6, 0xd, 0x753d, 0x401, 0x20000000, 0xffff8001, 0x1, 0x4, 0x80, 0x800, 0x10000, 0x4, 0x1, 0x2fa, 0x2, 0x6a5b80e, 0x0, 0x2, 0x10000, 0x1, 0x3199, 0x7, 0x4, 0x5, 0x3, 0x7, 0x1, 0xffffffff, 0x4, 0x2, 0x10, 0x5, 0x4, 0x2, 0x0, 0x1, 0x9c0, 0xb, 0x8, 0x0, 0x3, 0xe, 0x7, 0x6, 0x9, 0x8, 0x6, 0x6, 0x9, 0xae, 0x80000000, 0x3, 0x9, 0x8, 0x7, 0x7fffffff, 0x2, 0x44, 0x6, 0x2, 0x80000001, 0x7, 0x10000, 0x2, 0x1, 0x4, 0x7fff, 0x71, 0x5, 0x0, 0xffff, 0x8, 0xfffffff9, 0x3, 0x3, 0x0, 0x7, 0x5, 0x3, 0x2, 0x2, 0x7fffffff, 0x2, 0x8, 0x7, 0x8, 0x7, 0x0, 0xd, 0x8d, 0x4, 0xc0cf, 0xfff, 0x3, 0x8, 0x6, 0x6, 0x200, 0x7, 0x400, 0x1, 0xfffffffe, 0x0, 0x10001, 0x5, 0x3, 0xe, 0x80000001, 0x5, 0xdfd0, 0xa1e2, 0x1, 0x0, 0x9, 0x1, 0x9, 0x7, 0x7, 0x2, 0xc, 0x2, 0x5, 0x5, 0x4, 0x5, 0x6, 0xf, 0x9, 0x401, 0x81, 0x6f4, 0x0, 0x3, 0x3b, 0xae, 0x1ff, 0x7, 0x3, 0x711b, 0x1, 0x91e, 0x1000, 0xfffffc00, 0x9, 0x7, 0x3, 0x81, 0x4, 0x400, 0x9, 0x10, 0x8, 0x4, 0x240, 0x5, 0x5, 0x0, 0xfffffff8, 0x0, 0x200, 0x0, 0x7621, 0x4, 0x9, 0x6, 0xd6e4, 0x804, 0x420, 0x4, 0x10, 0x7fffffff, 0x40, 0x1, 0x8, 0x400, 0x9, 0x0, 0x10000, 0xffe000, 0x14, 0xd, 0x0, 0x1, 0x1, 0x556, 0xffffff81, 0x0, 0xb, 0x10001, 0x80000000, 0x220, 0x7, 0x5, 0x2, 0x7f, 0x6, 0x3ebe, 0x9, 0x4, 0x174, 0x8, 0x52, 0x101, 0x7f, 0x4, 0x0, 0x0, 0x8, 0x6, 0xfffffff8, 0x6, 0xfffffffc, 0x5, 0x4]})

4.179931144s ago: executing program 6 (id=2383):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8fc5bd8c13129b69753c6492bc99db4768d524ccc576fc519992c8500bae0d78010d2898c31eca0109b03c3b750585d8af89c3f7a04d8563467587f791e3aede768dac0e554cc66f23917954eb4d3ca4ac58de275c7fec5cf7559f566ff84f30ca2ce0dbd52bf786cec663066373acfb3d9cd3ebedb"], 0x108}, 0x1, 0x7}, 0x20040800)

4.020929669s ago: executing program 6 (id=2384):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2008800}, 0x40000c4) (async)
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x202040}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) (async)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000280)={0x1, 0x200, "eb5520", 0x1, 0x6}) (async)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008010}, 0x8885) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10845}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000540)={[0x2, 0x10000, 0x2, 0x4, 0x8000000000000000, 0x1ff, 0x9, 0x100, 0x7, 0x7, 0x9, 0x8, 0x81, 0x26, 0x4, 0x4], 0xeeee8000, 0x80000}) (async)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), r0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) (async)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000740), 0x6a3, 0x52100)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r6, 0xc0884123, &(0x7f0000000780)={0x4, "fa97321f455b226adfb4e687c1402c552e6a7e213052342ca9c6db2962aae689767f608011eeb5348f916e054bdfe0454aa51ab516a760f338e011ea77b81a75", {0x8, 0x3}})
r7 = syz_open_dev$dri(&(0x7f0000000840), 0x6, 0x100)
ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000880)={0x3}) (async)
lsetxattr$trusted_overlay_opaque(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), &(0x7f0000000940), 0x2, 0x3) (async)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r8, &(0x7f0000000980)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f00000009c0)={0x8001, [0x3, 0x2, 0x4], [{0x401, 0xdb, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x10000, 0x1, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1}, {0x8, 0xfffffffc, 0x1}, {0x3, 0x9, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7, 0x6, 0x1, 0x1, 0x0, 0x1}, {0x8, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x9e15, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x1, 0x1, 0x0, 0x1}, {0x99, 0x5, 0x1}, {0x0, 0x2, 0x1}], 0xabe}) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000ac0)={0x0, <r9=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000b00)={r9})
io_setup(0x3b14, &(0x7f0000000b40)) (async)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x4040)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x8, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000061}, 0x1) (async)
r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000dc0)='./file0\x00', 0xe000, 0x7) (async)
r12 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)={0x68001, 0x2, 0x10}, 0x18)
renameat2(r11, &(0x7f0000000e00)='./file0\x00', r12, &(0x7f0000000ec0)='./file0\x00', 0x4)

3.894805506s ago: executing program 6 (id=2385):
mknod(0x0, 0x10, 0x101)
mount$afs(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1}, 0x2}], 0x1, 0x10021, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="6d42e515f133536433e939b2a8a54357f74425d6aa75161ddc99f1bf747fe16d468d2d96f22a9e7dc59b81661f0c840ceecd53bf50394ca571f0ccf73ec18a87836488636775c2acb1d9040af78a41a651a59e1b77e15c8784ce3f5e261f9ddeebeff2a4b0e191581bb25236d35f490da7e19beb00bd33ff49b9cd65bcf4469bc1490479281ded365b92ac81e86a20246e276f56c7257b600242b1ce3d9cd41ab28477314d657633eaa55f88a31ddd9892bdbd3ae041688d86d2439fb0e15c29eaf83768dcae0043e8477bbcf73331975737a8c4aea2125526be54545bf210027188574c2a6a156ae58f5f43166a7f56f5c98385b84f5b9c", 0xf8}, {&(0x7f00000004c0)="6d602d7f00cdb80a22879855843a9f6e93f5a8dc932ac1a5555a4685a5c1d6db25df6be54f9d32743e665143d4d3e324d39c6d94dafff784ce7c44b01b52721df8059f158545a6abd3a6ee5c69246bd599ab99f20629dea95d0bead3e2932d1882b1e677969a966b50eb1a89712b05c270e9ab4d0bc9a9e8893b870e36bac5d996936f732c40297dbe49f9d4110e3b3e150b7c610efdfdfc711b2535f4087fa0794255e8a2e71515006cfa5597f595f99c0fa7f50698a99216bec08a26bad3030be6fe78898c", 0xc6}, {&(0x7f00000005c0)="cfa96554ac4fb8508a4af8fe62264c3975f053579688984fac88d9711d815e8489d21f66054bd0d7a75e8cfe8ed6d0d8199f5eab1a16192427ffa07b3c3c9b8169fa9cc7371841f2432a3e60d1e21a1bcf967c611cd0fa289d51249ac74b4bd460aecb7ac83c42c1622c4af9e2a69b96acddbf40bfc8b13f7d12d28860cc837dfb4688cda024366b164e7e3e73", 0x8d}], 0x3, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010102}}}], 0x20}}], 0x1, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000e40)=ANY=[@ANYBLOB="201005fbd53b8ed599dc353a464928a412f9f20b0000050ff0662c"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3.77583838s ago: executing program 8 (id=2386):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x9, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x38}}, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xf, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0)
ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000011c0)={'wlan0\x00', <r5=>0x0})
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x4}, 0x4b7}, 0x1c)
shutdown(r6, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x8206, 0x58800000, 0x5c}, &(0x7f0000000040)=0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r7, 0x8b32, &(0x7f0000000040))
getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000080), 0x2)
sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRES32=r7, @ANYRES8=r5, @ANYRESDEC=r5, @ANYRES64=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000080)
ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000440))

3.448189207s ago: executing program 0 (id=2389):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20008054, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x0, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000001c0)={0x0, {{0x2, 0x4e22, @broadcast}}}, 0x88)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r2, 0x560a, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0x41, 0x8c}, {0x0, 0x7}, 0x9, 0x2, 0x5})
preadv(r1, &(0x7f0000001680)=[{&(0x7f00000002c0)=""/114, 0x72}], 0x1, 0x402, 0xffffffff)
shutdown(r0, 0x1)
recvfrom(r0, 0x0, 0xfffffffffffffd1e, 0x40000002, 0x0, 0x19)

3.402173936s ago: executing program 0 (id=2390):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="100000001a000100fdffff4e162a1025"], 0x10}], 0x1, 0x0, 0x0, 0x4080}, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x10000, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYBLOB="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", @ANYRESOCT])

3.309259722s ago: executing program 0 (id=2391):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x104, 0x2, {0x2, 0x3, 0x4, 0x0, 0xffffffff}, 0x4}) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000)
ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) (async)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000)=0x400001, 0x4)

3.281158922s ago: executing program 6 (id=2392):
r0 = gettid()
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) (async)
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=<r1=>0x0)
r2 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "d6"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532000000a530cf0a20d0838c8b27dd0436706f20d34bb870153db214ed735bdf407f4b1ce91dd04f4cb34abfae185a7d1b6f7f7b571d16d2005f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0xc}, 0x0}) (async)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async)
timer_gettime(r1, 0x0) (async)
rt_sigprocmask(0x2, &(0x7f0000001140)={[0x2]}, 0x0, 0x8)

3.217655351s ago: executing program 0 (id=2393):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r1, 0x80)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402ecffffffff08058102"], 0x0)

1.768492028s ago: executing program 8 (id=2394):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000040))
read$dsp(r0, &(0x7f0000000080)=""/132, 0x84)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x900, 0x0)
ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000180))
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'team_slave_1\x00', 0x4000})
close(r0)
r2 = syz_usb_connect(0x5, 0x614, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x43, 0xf6, 0xca, 0x10, 0x4dd, 0x9032, 0xb035, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x602, 0x3, 0x3, 0x4, 0x10, 0x2, [{{0x9, 0x4, 0xa3, 0x0, 0x3, 0x2, 0x6, 0x0, 0x7, [], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x40, 0xf, 0x5e}}, {{0x9, 0x5, 0x0, 0x4, 0x0, 0x2, 0x4, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x9}]}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x9d, 0x5, 0x1}}]}}, {{0x9, 0x4, 0x18, 0x0, 0x0, 0x9, 0xa7, 0x41, 0xfd, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7fff}, {0xd, 0x24, 0xf, 0x1, 0xee7, 0x6, 0x9, 0x1}, {0x6, 0x24, 0x1a, 0x11f, 0x2}}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "e5da9a4a2e"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7fff, 0x3, 0x8, 0xb7}, [@mbim={0xc, 0x24, 0x1b, 0x3c, 0xae9, 0x2, 0x14, 0x400, 0x5}, @dmm={0x7, 0x24, 0x14, 0x2, 0x65}, @country_functional={0xc, 0x24, 0x7, 0x7, 0x9, [0x7, 0x7f, 0x9]}, @country_functional={0xa, 0x24, 0x7, 0xe4, 0x1, [0x7, 0x6]}, @dmm={0x7, 0x24, 0x14, 0x6, 0x7}, @mdlm={0x15}]}]}}, {{0x9, 0x4, 0x81, 0x1, 0x5, 0x30, 0xe8, 0x6a, 0x43, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "cf0adf8f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8}}], [{{0x9, 0x5, 0x7, 0x2, 0x200, 0x5, 0x8, 0x7, [@generic={0x102, 0x30, "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"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0xd2, 0x3, 0x4, [@generic={0xee, 0x14, "2c8bc88c46fdf929b566fe2ed46b71055d12379b8469fae9c7a5e4ac6fb3d27329addcbc266a235a3789f466a365bde608679f64839ad76d779e8826d2dce7a0492840f8dfbda0ecfc8dd404c5797f33dd1a39f9995885610d937c0111cfd875b47aef7e78588374c32efad9a5769039bfdb0232022ab96e4b882fabe1cc829923613b2bc54dfd683620589495cde32fd521d8c1fdf7bcbe36ba6de4738dfe263b34d0a06e8fbc00c93172c9d93490d07c8579a8f59126d8c448377dd9f62275d2acab9a164623bf6b19cd15a200bf284e12c7187c4df5cff96df6fa9ee39fac2df2bbc3f024ac2447057dae"}, @generic={0x90, 0x23, "e8609c5f1ac1dd0e3fef79e67ca535b626728f61306efa187a8a0d872f1859c11ca615cece662bc2c96e759b3a4c83de7dc69b5b6cc6627d8cb6b7083d445b9e9b1f7160390a3beaa67a7b0472910c008d27ea5026390e2f7011f2576b308f94dc122a3eb24e6d59bdcff5c3d3aab4b2301b420a7d2f41682e849ddfcdc95bc7aed33c56615d50bee0214ee87e70"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x40, 0x9, 0x10, 0x3, [@generic={0xc0, 0x21, "d81ce160593e2d0c6c6c09d59b27a8818413c2241de95c6fefa0e4b68a2ae9e7e6161e14a3170add38a10ec11910572bc636229e1e4fa05b11715d4113c3e505e55acd490ef4d6c8e53dff5301e442823ed2bb5933ead5440c249f9235533df0ac79d88da02b1021a426fbc1ec679ff87e3f4a934a80c42755ac9105ace5037fde3687f35e186b522502fb8acfe1702a5d5a6e7483f57bc2df435ffb43a7030b9aef01862169544a4fbd6b3e09dce415a61ee234bdd691d63ce0a4b17d41"}, @generic={0xd8, 0x3, "1b2b050aaf61dcb11b01f7c68da9868132d22e74df56c4f4239e08564f1ed5da1245a6fa14ae88359459d88bafd4ea27d19104fde96e822d60d15784173ed43079ff3a418a5a99204a7a618d96d1ded296b180309b03af409d38bb44eec557201315dd3a2914616bf66b8009775a3f686507466ec16656aedd3b5a9c57fb601b465d1a482ccb258750e32c208e9eea7d8493c8af6f711dda18d252bb583501287cfc1cd06cd7100f4960657f268328b67234e10f40c9d78f685e20cc5212abc6cdb9f74e1987ff4bc9a22c0c2842b64f3c18776c0878"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0xed, 0x4d, 0x4, [@generic={0xde, 0x4, "f6d97ca7a50a46cf7446af3aca0f9f5ae9c200b78671d111df6867d30a350be84822a1a433677e1a406a6f9ea27be75b1f6201fd95cc3422ddf94687b044bc3f68c73afbcfb74b57c840fc55952b2eccf0054cbc09b770ccc3c8a4e7592f57f1988da5d307e28debc18f62ec213ab5463dc559968b039c8bcbd3a338f214fbbf6d30806563e0ec294da8d284395e77ee1cdaf47a54f9e13b46c77329000e80e8dc178af0ffd2840a99c65c9de615e0751e5d986b9d0087f701f9f62f768393c99b3294aad5efd159d92eba2e95436b70614b22df2b558f2d4be450af"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x3a, 0xfc}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x201, 0x0, 0x0, 0xfd, 0xff, 0x24}, 0x23, &(0x7f0000000880)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0xf, 0x10, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "4c7ddfca9caee6d9dd73cb5fd447e638"}]}, 0x1, [{0x7b, &(0x7f00000008c0)=@string={0x7b, 0x3, "70588b20500aff91a0b225c1602c7bc4a2e9e6e63ec285634d4e6f56ad792a08519d4b1f95d92ebbde537b5b9041d5b696df5fba72c80a219bd5344b37fe17e1d5da3796327376a5c614e862f8657739edddd332013adb1997562708b76a15caec3ecc8ca8a83d275720b5b59bc87dcf8b983fb5bb1fe0d1c6"}}]})
syz_usb_ep_read(r2, 0x5, 0xcc, &(0x7f0000000980)=""/204)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc)
set_mempolicy(0x2, &(0x7f0000000a80)=0x2, 0x365)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000ac0), 0x8001, 0x8883)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f0000000b00)=0x4)
read$FUSE(r1, &(0x7f0000000b40)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
ioctl$TUNSETGROUP(r1, 0x400454ce, r6)
syz_usb_control_io(r2, &(0x7f0000002d40)={0x2c, &(0x7f0000002b80)={0x20, 0x22, 0x43, {0x43, 0x23, "923cc60178bd4f83d0e62acc77ed214da0ccc5c2901e07e7ddbf80e252ae203a923caea416af52020e55371d8d506b51e2e52cab164300789a040d8878ed6045cf"}}, &(0x7f0000002c00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4001}}, &(0x7f0000002c40)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x3, [@ssp_cap={0x1c, 0x10, 0xa, 0xff, 0x4, 0x7fff, 0xf, 0x3, [0x3f00, 0x0, 0xff0f, 0x1fea0ff]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "573a62a449476263eae01df35c616a6a"}, @ss_container_id={0x14, 0x10, 0x4, 0x17, "d0cb4664d2c40252cc58affdf2a527e0"}]}}, &(0x7f0000002cc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x73, 0x2, 0x95, 0x40, "5e8d2b54", "9117f854"}}, &(0x7f0000002d00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x0, 0xa, 0x7, 0x0, 0x3, 0x5}}}, &(0x7f00000031c0)={0x84, &(0x7f0000002d80)={0x40, 0x7, 0x58, "c1522ef48d7038f9f74c4c971606a5773da31f24aa7a8cab239a81bd189bfe7928f60e9c2681ddebfb434c348db62501677df1196590aa223b6808ef5a9e2c671340e881f4fa751b938ac638caeb0a751651490644f4118d"}, &(0x7f0000002e00)={0x0, 0xa, 0x1, 0x4a}, &(0x7f0000002e40)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002e80)={0x20, 0x0, 0x4, {0x2, 0x2}}, &(0x7f0000002ec0)={0x20, 0x0, 0x4, {0x0, 0x20}}, &(0x7f0000002f00)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000002f40)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000002f80)={0x40, 0xb, 0x2, "ee91"}, &(0x7f0000002fc0)={0x40, 0xf, 0x2, 0xfffb}, &(0x7f0000003000)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000003040)={0x40, 0x17, 0x6, @local}, &(0x7f0000003080)={0x40, 0x19, 0x2, "be0d"}, &(0x7f00000030c0)={0x40, 0x1a, 0x2, 0x49}, &(0x7f0000003100)={0x40, 0x1c, 0x1, 0x1c}, &(0x7f0000003140)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000003180)={0x40, 0x21, 0x1, 0x2}})
mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200001d, 0x2010, r1, 0x271)
write$FUSE_ENTRY(r1, &(0x7f0000003280)={0x90, 0x0, r4, {0x2, 0x2, 0x3, 0x6, 0x5f0b6c07, 0xfffffffa, {0x4, 0x12ef0286, 0x2, 0x7fff, 0x4, 0xa670, 0x5, 0x0, 0xfffffffa, 0xa000, 0x9, r5, r6, 0x401, 0x400}}}, 0x90)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003380)={'veth0_macvtap\x00', &(0x7f0000003340)=@ethtool_ringparam={0x11, 0x2, 0x6, 0x200, 0x800, 0xa, 0x4, 0x8, 0x9cc}})
r7 = syz_open_dev$sg(&(0x7f00000033c0), 0x5, 0x100)
ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f0000003400)={0xa1, 0xbdf, 0x4, "ece4f6baa8da100b8da2c303fdefb1d385b3ec78dab0176853c28aba35cd3c918db33f55a3f458ee39910275e972e6c8ced3a0efe209aa5142d65c5ca2e5ea3678232d55da723ee9233e76b98a31eb28fee4cea6080410dd7a5af10f1336e8c3ee0daad1bd499223230eb40fb435786ed413164bdc5f1aefcdc4458dfed1e82736385f235bfd9183b097d58c96dadf73e326e9c4bba65c7da89d3fe4415355ac61"})
fcntl$addseals(r3, 0x409, 0x5)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000034c0)={r1, 0x1, 0xfffffffffffff000, 0x100000000})
syz_usb_connect$cdc_ecm(0x3, 0x6d, &(0x7f0000003500)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0x4, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x9, 0x24, 0x6, 0x0, 0x0, "41bc5ba0"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0x4, 0xe}, [@mbim={0xc, 0x24, 0x1b, 0x4, 0x0, 0x1, 0x2, 0x756}, @dmm={0x7, 0x24, 0x14, 0xcc4e, 0x8000}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0xe3, 0xd1}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xdd, 0xca, 0x4}}}}}]}}]}}, &(0x7f00000037c0)={0xa, &(0x7f0000003580)={0xa, 0x6, 0x200, 0x2, 0x1, 0x1b, 0x10, 0x81}, 0x72, &(0x7f00000035c0)={0x5, 0xf, 0x72, 0x1, [@generic={0x6d, 0x10, 0x4, "14ac7141106b07e5693dfa796dcfe59bd51097467b82a2d342ff3bf55d621568d428d0c7829ae888704d89adfa41b20da0a69c3bcc0306f884f77b6e6a225396da1ab894aec8df7fc450dc8cf341381deca5d135598f3016af3ad21bd682f60429673aa6c9ff08f489cd"}]}, 0x4, [{0xba, &(0x7f0000003640)=@string={0xba, 0x3, "9f3326861e9d1ff7a06dd69890abf1cf7e6ab888ad4183e28e61cadd3214f26dbf1bb0e0232634d47237942e3b8d471f57597f68cfb24ddf37520e5ac4dc13c38776f2936f998a5deac1fd02afe746f45a4fe4af0e67ec72d2afd2847f278ab837b47109e2f586c62977caeae7a029c22d9be0ce45ecd8552c6fb238cd959e846791a56a2696b0fd2520df42449bff95724db2ad94841f0780bcd8ccd32593d43b38076fd3941b9ebbf5d4d459e1b30c859acb3da2f92b40"}}, {0x4, &(0x7f0000003700)=@lang_id={0x4, 0x3, 0x801}}, {0x4, &(0x7f0000003740)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000003780)=@lang_id={0x4, 0x3, 0x80c}}]})
r8 = openat(r1, &(0x7f0000003840)='./file0\x00', 0x751200, 0x4)
sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003940)={&(0x7f00000038c0)={0x6c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}, {0x6, 0x11, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x6097}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
r9 = socket$kcm(0x29, 0x2, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f00000039c0)=0x1)
writev(r9, &(0x7f0000003f00)=[{&(0x7f0000003a00)="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", 0xfe}, {&(0x7f0000003b00)="d29f6536c69a16ea454e69be0fb997e6ff5ab0ae7cc7c03044a4cd2109a4cff0672165a8dbdcbe0958226f51a95ed8ec29fa6d43c41d14c773f261fb924ed8a7dd472e14d66c658439e603c0f61e0acd027e5adc4dfcb4dbcfa89eb33e61d19bb8db801c72869cc424a26da2bff00d85468112f8f79be51ac099c570945a3b7634c518efca14ab551d9f4ad2e68a07d7f3b2bfe174195d0e47eb4f324b5efc3b3882d2e71fd4c6fbfe1deb8df0d79deabe6eaa23af9be9b2792a0a8cd855772c143fd694bd5f2c578313a708f8bea1ef796b07184726ac5a78f4", 0xda}, {&(0x7f0000003c00)}, {&(0x7f0000003c40)="7edc290a171661bcf9de741e0d77f17894e22eac8154c35094765d0b7913b9c692e3a31eff04c5ab68ee40263055bc4c8e862432b607940a1a71ea31f45dbf713b2dc4f873a6b91a3feb5cc69f4e2fd7e053e2a370678ed3ad137fd8", 0x5c}, {&(0x7f0000003cc0)="2bf734635396efe57660e4", 0xb}, {&(0x7f0000003d00)="8f0cb5849c1b35bc2728570336f8baa8f5d86f236115728e1654e6d641e0be04073e3acaab4653f88658f80afe81e1930af045c5ee6561c7d136824f4c79db7ba799fd3eb8f61a2eb89c9432bdb62699198df0bf834d0f01cbc9fd2c3f52e430c282047f1cede9b04fddc9adab080641946a12771c9a0766d1304364c37ed57c44c6f364578eef46a6ece0d25af45aa843248fadb41dc31774a50b0f96c79f83d3219788dddb61d545d2d2864b98872c06ad455dbcecb8df55c699cb2640a51cd7b9d3543c3b0f7e6521452a7e96db8c6f341c35e36dcf8654e6adf4ea0a5d92ba55b71a10c6e7c8e5112d57ddf3de9d50a7ac", 0xf3}, {&(0x7f0000003e00)="52c15b1874bcc305706e8f40fe9d5b974ba1b8cdfab831a85c2faf6ade54ead3e2d0d3126da66cf4077340dbd8cad40f913a4f47988ba462ea63d3f7a65c30542230b78fb11a7a502b406bf61a4033322a7edb99aa74b1470b29", 0x5a}, {&(0x7f0000003e80)="446dcdcc87933dd67b367eac45a4e7906e195f9a0bb5a798a6cbf29046025d3ae000395f704d13016c1b4dc7f64f1ab1938a1491a34bebf1dc2933132fb7bbfbb97d465903f2fb0a7f1d2ddbe5b01a17426d9592dd7482ecf75fc812fd800e5a1a5ac4fa359b40d1ef71d8895fc9f06bb407df9c54c807", 0x77}], 0x8)
getsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000003f80)={{{@in=@empty, @in=@multicast1}}, {{}, 0x0, @in6=@private2}}, &(0x7f0000004080)=0xe8)

1.767955502s ago: executing program 7 (id=2395):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x8001, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x24}, 0x2004c081) (async)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) (async)
recvmmsg(r0, &(0x7f0000006a40)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x10120, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg(r4, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0)

1.723541487s ago: executing program 0 (id=2396):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101442, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x5c}], 0x1, 0xc, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x98)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.661124516s ago: executing program 7 (id=2397):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x120)
mkdir(&(0x7f0000000300)='./bus\x00', 0x46)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x120) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x46) (async)
mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)

1.317365403s ago: executing program 0 (id=2398):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = socket$kcm(0x10, 0x2, 0x0)
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e05fe0000000000000109022400010000b00009040000080300000009210000000122460009058103"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x0, 0xa8, @name2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME, @handle=@pci, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x0, 0xa9, @name2}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)

57.463145ms ago: executing program 8 (id=2399):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x106, 0x9}}, 0x20) (async, rerun: 32)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x106, 0x4}}, 0x20) (async, rerun: 32)
syz_usb_connect(0x2, 0x48, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x4c, 0xb, 0xae, 0x10, 0x8e9, 0xbdb3, 0x7cff, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x8, 0x1, 0xa0, 0x1, [{{0x9, 0x4, 0xb, 0x1, 0x0, 0x2, 0x9, 0x82, 0xc0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0xe63, 0x9, 0x3}, {0x6, 0x24, 0x1a, 0x9, 0x8}, [@dmm={0x7, 0x24, 0x14, 0x400, 0x4}]}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x6, &(0x7f0000000100)=@string={0x6, 0x3, "cb1bb787"}}]}) (async)
close(r0)

0s ago: executing program 6 (id=2400):
mknod(0x0, 0x10, 0x101)
mount$afs(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1}, 0x2}], 0x1, 0x10021, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4)
openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r1, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)="6d42e515f133536433e939b2a8a54357f74425d6aa75161ddc99f1bf747fe16d468d2d96f22a9e7dc59b81661f0c840ceecd53bf50394ca571f0ccf73ec18a87836488636775c2acb1d9040af78a41a651a59e1b77e15c8784ce3f5e261f9ddeebeff2a4b0e191581bb25236d35f490da7e19beb00bd33ff49b9cd65bcf4469bc1490479281ded365b92ac81e86a20246e276f56c7257b600242b1ce3d9cd41ab28477314d657633eaa55f88a31ddd9892bdbd3ae041688d86d2439fb0e15c29eaf83768dcae0043e8477bbcf73331975737a8c4aea2125526be54545bf210027188574c2a6a156ae58f5f43166a7f56f5c98385b84f5b9c", 0xf8}, {&(0x7f00000004c0)="6d602d7f00cdb80a22879855843a9f6e93f5a8dc932ac1a5555a4685a5c1d6db25df6be54f9d32743e665143d4d3e324d39c6d94dafff784ce7c44b01b52721df8059f158545a6abd3a6ee5c69246bd599ab99f20629dea95d0bead3e2932d1882b1e677969a966b50eb1a89712b05c270e9ab4d0bc9a9e8893b870e36bac5d996936f732c40297dbe49f9d4110e3b3e150b7c610efdfdfc711b2535f4087fa0794255e8a2e71515006cfa5597f595f99c0fa7f50698a99216bec08a26bad3030be6fe78898c", 0xc6}, {&(0x7f00000005c0)="cfa96554ac4fb8508a4af8fe62264c3975f053579688984fac88d9711d815e8489d21f66054bd0d7a75e8cfe8ed6d0d8199f5eab1a16192427ffa07b3c3c9b8169fa9cc7371841f2432a3e60d1e21a1bcf967c611cd0fa289d51249ac74b4bd460aecb7ac83c42c1622c4af9e2a69b96acddbf40bfc8b13f7d12d28860cc837dfb4688cda024366b164e7e3e73", 0x8d}], 0x3, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @private=0xa010102}}}], 0x20}}], 0x1, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000e40)=ANY=[@ANYBLOB="201005fbd53b8ed599dc353a464928a412f9f20b0000050ff0662c"], 0x0, 0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 0 (id=2401):
socket$inet6(0xa, 0x1, 0x100) (async, rerun: 64)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async, rerun: 64)
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f7", 0x1d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x3}], 0x1, 0x40800) (async)
recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8001}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2800}, 0x800) (async)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff002)

kernel console output (not intermixed with test programs):

r -71
[  452.529557][   T44] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  452.542702][   T44] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  452.563728][   T44] usb 1-1: USB disconnect, device number 44
[  452.620118][ T5943] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  452.759006][ T5943] usb 7-1: device descriptor read/64, error -71
[  452.841256][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.861606][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.877324][ T5943] usb usb7-port1: attempt power cycle
[  453.250910][ T5943] usb 7-1: new high-speed USB device number 44 using dummy_hcd
[  453.284983][ T5943] usb 7-1: device descriptor read/8, error -71
[  453.497037][ T5928] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  453.561390][ T5943] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  453.585201][ T5943] usb 7-1: device descriptor read/8, error -71
[  453.667991][ T5928] usb 1-1: Using ep0 maxpacket: 32
[  453.674900][ T5928] usb 1-1: config 3 has an invalid interface number: 136 but max is 0
[  453.683385][ T5928] usb 1-1: config 3 has no interface number 0
[  453.689771][ T5928] usb 1-1: config 3 interface 136 has no altsetting 0
[  453.699215][ T5928] usb 1-1: New USB device found, idVendor=0bda, idProduct=0158, bcdDevice=d6.8f
[  453.708805][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.713290][ T5943] usb usb7-port1: unable to enumerate USB device
[  453.717056][ T5928] usb 1-1: Product: syz
[  453.727490][ T5928] usb 1-1: Manufacturer: syz
[  453.732204][ T5928] usb 1-1: SerialNumber: syz
[  453.965453][ T5928] usb-storage 1-1:3.136: USB Mass Storage device detected
[  454.027381][ T5928] usb 1-1: USB disconnect, device number 45
[  454.170702][T15050] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1853'.
[  455.259132][T15069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  455.276285][T15069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  455.290112][T15076] tipc: Started in network mode
[  455.295294][T15076] tipc: Node identity , cluster identity 4711
[  455.301401][T15076] tipc: Failed to obtain node identity
[  455.308139][T15076] tipc: Enabling of bearer <eth:ip6gre0> rejected, failed to enable media
[  455.595499][ T5928] usb 7-1: new high-speed USB device number 46 using dummy_hcd
[  455.635603][ T5943] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  455.763961][ T5928] usb 7-1: Using ep0 maxpacket: 16
[  455.770943][ T5928] usb 7-1: config 53 has an invalid interface number: 240 but max is 0
[  455.779459][ T5928] usb 7-1: config 53 has no interface number 0
[  455.785884][ T5928] usb 7-1: config 53 interface 240 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82
[  455.798867][ T5928] usb 7-1: config 53 interface 240 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024
[  455.810986][ T5928] usb 7-1: config 53 interface 240 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  455.820382][ T5943] usb 1-1: config 0 has an invalid interface number: 20 but max is 0
[  455.822170][ T5928] usb 7-1: config 53 interface 240 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  455.836220][ T5943] usb 1-1: config 0 has no interface number 0
[  455.848703][ T5928] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0106, bcdDevice=ec.89
[  455.849922][ T5943] usb 1-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  455.879395][ T5943] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  455.888980][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.890264][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.903432][ T5928] usb 7-1: Product: syz
[  455.911269][ T5943] usb 1-1: Product: syz
[  455.916497][ T5928] usb 7-1: Manufacturer: syz
[  455.917781][ T5943] usb 1-1: Manufacturer: syz
[  455.924385][ T5928] usb 7-1: SerialNumber: syz
[  455.926912][ T5943] usb 1-1: SerialNumber: syz
[  455.942466][T15068] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  455.951258][ T5943] usb 1-1: config 0 descriptor??
[  455.968210][T15078] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  455.979174][ T5943] usb-storage 1-1:0.20: USB Mass Storage device detected
[  455.993954][ T5943] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  456.306720][ T5943] scsi host1: usb-storage 1-1:0.20
[  456.342332][ T5943] usb 1-1: USB disconnect, device number 46
[  456.489146][T15128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.519763][T15128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.543607][T15128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  456.553836][T15128] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  456.742805][ T5928] kvaser_usb 7-1:53.240: error -ENODEV: Cannot get usb endpoint(s)
[  456.764419][ T5928] usb 7-1: USB disconnect, device number 46
[  457.186277][ T5928] usb 7-1: new high-speed USB device number 47 using dummy_hcd
[  457.203750][T12327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  457.218917][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  457.225304][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  457.346789][ T5928] usb 7-1: Using ep0 maxpacket: 32
[  457.358577][ T5928] usb 7-1: unable to get BOS descriptor or descriptor too short
[  457.375593][ T5928] usb 7-1: config 8 has an invalid interface number: 59 but max is 0
[  457.386043][ T5928] usb 7-1: config 8 has no interface number 0
[  457.397331][ T5928] usb 7-1: config 8 interface 59 has no altsetting 0
[  457.410011][ T5928] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  457.423814][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.434008][ T5928] usb 7-1: Product: syz
[  457.438438][ T5928] usb 7-1: Manufacturer: syz
[  457.445538][ T5928] usb 7-1: SerialNumber: syz
[  457.634455][T15164] ALSA: seq fatal error: cannot create timer (-22)
[  457.661441][T15164] syzkaller1: entered promiscuous mode
[  457.667083][T15164] syzkaller1: entered allmulticast mode
[  457.893706][T12327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  457.932522][ T5928] usb 7-1: USB disconnect, device number 47
[  458.083509][T15183] netlink: 'syz.0.1874': attribute type 2 has an invalid length.
[  458.094374][T15183] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1874'.
[  458.177369][T15186] affs: No valid root block on device nullb0
[  458.196879][T15186] affs: No valid root block on device nullb0
[  458.576648][ T5943] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  458.604591][ T5183] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  458.607235][T15204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  458.628384][T15204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  458.750199][ T5943] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  458.758778][ T5943] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  458.767701][ T5943] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  458.779334][ T5943] usb 1-1: config 220 has no interface number 2
[  458.785832][ T5943] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  458.799129][ T5943] usb 1-1: config 220 interface 0 has no altsetting 0
[  458.806005][ T5943] usb 1-1: config 220 interface 76 has no altsetting 0
[  458.813274][ T5943] usb 1-1: config 220 interface 1 has no altsetting 0
[  458.822639][ T5943] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  458.831804][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.840766][ T5943] usb 1-1: Product: syz
[  458.845331][ T5943] usb 1-1: Manufacturer: syz
[  458.849953][ T5943] usb 1-1: SerialNumber: syz
[  459.084972][ T5943] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  459.091570][ T5943] usb 1-1: No valid video chain found.
[  459.097112][ T5943] usb 1-1: selecting invalid altsetting 0
[  459.121312][ T5943] usb 1-1: selecting invalid altsetting 0
[  459.127614][ T5943] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  459.142741][ T5943] usb 1-1: USB disconnect, device number 47
[  459.278586][T15240] loop5: detected capacity change from 0 to 2560
[  459.288429][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.301482][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.309937][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.322740][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.331853][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.343936][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.359894][T15243] netlink: 'syz.5.1882': attribute type 10 has an invalid length.
[  459.360521][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.376418][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.379747][T15243] veth1_vlan: entered allmulticast mode
[  459.393050][T15240] ldm_validate_partition_table(): Disk read failed.
[  459.401284][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.409425][T15240] Buffer I/O error on dev loop5, logical block 0, async page read
[  459.419134][T15240] Dev loop5: unable to read RDB block 0
[  459.426754][T15240]  loop5: unable to read partition table
[  459.430133][T15243] team0: Device veth1_vlan failed to register rx_handler
[  459.438484][T15240] loop_reread_partitions: partition scan of loop5 (3�����) failed (rc=-5)
[  459.703421][T15260] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1884'.
[  459.858936][T15260] team0: Port device team_slave_0 removed
[  459.961902][T15281] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1888'.
[  459.973889][T15283] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1888'.
[  460.681075][T15308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.702673][T15308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.730950][T15308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  460.747919][T15308] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  460.763278][T15308] binder: 15307:15308 ioctl c00c620f 0 returned -14
[  461.371801][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.399364][T15325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.421696][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.438045][T15324] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1897'.
[  461.449706][T15325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.560045][    T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  461.702706][T15337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  461.727998][    T9] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  461.740261][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.768790][    T9] usb 1-1: config 0 descriptor??
[  462.033376][T15348] sp0: Synchronizing with TNC
[  462.078217][T15348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.091015][T15348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  463.358688][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  463.359419][T12329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  463.395993][    T9] usb 1-1: Cannot set autoneg
[  463.409073][    T9] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  463.426055][    T9] usb 1-1: USB disconnect, device number 48
[  463.490921][T15405] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1907'.
[  463.836358][T15428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  463.847261][T15428] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  464.041416][   T10] usb 7-1: new high-speed USB device number 48 using dummy_hcd
[  464.201348][   T10] usb 7-1: Using ep0 maxpacket: 16
[  464.208677][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  464.221915][   T10] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  464.231162][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.239328][   T10] usb 7-1: Product: syz
[  464.243565][   T10] usb 7-1: Manufacturer: syz
[  464.248738][   T10] usb 7-1: SerialNumber: syz
[  464.256068][   T10] usb 7-1: config 0 descriptor??
[  464.271721][   T10] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  464.281367][   T10] em28xx 7-1:0.0: DVB interface 0 found: bulk
[  464.528701][T15443] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1914'.
[  464.930294][   T10] em28xx 7-1:0.0: unknown em28xx chip ID (0)
[  465.051076][T15458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.060988][T15458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.391891][   T10] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  465.401422][   T10] em28xx 7-1:0.0: board has no eeprom
[  465.412830][T15422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.428610][T15422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.439554][T15422] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1910'.
[  465.506020][   T10] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  465.513915][   T10] em28xx 7-1:0.0: dvb set to bulk mode.
[  465.520503][ T5952] em28xx 7-1:0.0: Binding DVB extension
[  465.559897][   T10] usb 7-1: USB disconnect, device number 48
[  465.631208][   T10] em28xx 7-1:0.0: Disconnecting em28xx
[  465.655263][ T5952] em28xx 7-1:0.0: Registering input extension
[  465.675424][   T10] em28xx 7-1:0.0: Closing input extension
[  465.733922][   T10] em28xx 7-1:0.0: Freeing device
[  465.847890][T15499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  465.872988][T15499] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  465.986437][T15500] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1920'.
[  466.046815][T15500] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1920'.
[  466.088251][T15511] netlink: 'syz.0.1922': attribute type 28 has an invalid length.
[  466.126470][T15511] IPv4: Oversized IP packet from 172.20.20.24
[  466.136965][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  466.143856][    C1] IPv4: Oversized IP packet from 172.20.20.24
[  466.359906][T15529] input: syz1 as /devices/virtual/input/input44
[  466.374805][T15529] input: failed to attach handler leds to device input44, error: -6
[  466.532979][ T5952] usb 7-1: new high-speed USB device number 49 using dummy_hcd
[  466.639757][ T5947] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  466.694868][ T5952] usb 7-1: Using ep0 maxpacket: 32
[  466.712323][ T5952] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  466.732305][ T5952] usb 7-1: config 0 has no interface number 0
[  466.753411][ T5952] usb 7-1: config 0 interface 12 has no altsetting 0
[  466.770358][ T5952] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  466.783788][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  466.794084][ T5952] usb 7-1: Product: syz
[  466.801660][ T5947] usb 1-1: device descriptor read/64, error -71
[  466.816352][ T5952] usb 7-1: Manufacturer: syz
[  466.821036][ T5952] usb 7-1: SerialNumber: syz
[  466.845576][ T5952] usb 7-1: config 0 descriptor??
[  466.937301][T15556] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1931'.
[  467.078142][ T5947] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  467.134037][T15558] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  467.242250][ T5947] usb 1-1: device descriptor read/64, error -71
[  467.364967][ T5947] usb usb1-port1: attempt power cycle
[  467.647376][T15587] autofs4:pid:15587:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e)
[  467.731077][ T5947] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  467.754847][ T5947] usb 1-1: device descriptor read/8, error -71
[  467.757579][ T5952] f81534 7-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -71
[  467.771230][ T5952] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  467.782127][ T5952] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  467.792488][ T5952] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  467.812210][ T5952] usb 7-1: USB disconnect, device number 49
[  468.009660][ T5947] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  468.030389][ T5947] usb 1-1: device descriptor read/8, error -71
[  468.151500][ T5947] usb usb1-port1: unable to enumerate USB device
[  468.179447][ T5952] usb 7-1: new low-speed USB device number 50 using dummy_hcd
[  468.318623][ T5952] usb 7-1: device descriptor read/64, error -71
[  468.581918][ T5952] usb 7-1: new low-speed USB device number 51 using dummy_hcd
[  468.589985][T15607] netlink: 'syz.5.1941': attribute type 11 has an invalid length.
[  468.602062][T15608] netlink: 'syz.5.1941': attribute type 11 has an invalid length.
[  468.612685][T15607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  468.622071][T15607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  468.746475][ T5952] usb 7-1: device descriptor read/64, error -71
[  468.866690][ T5952] usb usb7-port1: attempt power cycle
[  469.206902][T15612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.215845][T15612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.226854][T15612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.236327][ T5952] usb 7-1: new low-speed USB device number 52 using dummy_hcd
[  469.243452][T15612] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.261318][ T5952] usb 7-1: device descriptor read/8, error -71
[  469.516930][T12329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  469.516930][T12327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  469.538775][ T5952] usb 7-1: new low-speed USB device number 53 using dummy_hcd
[  469.570413][ T5952] usb 7-1: device descriptor read/8, error -71
[  469.688023][ T5952] usb usb7-port1: unable to enumerate USB device
[  470.008442][ T5928] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  470.168692][ T5928] usb 1-1: Using ep0 maxpacket: 16
[  470.175762][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  470.187019][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  470.196895][ T5928] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  470.206123][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.217935][ T5928] usb 1-1: config 0 descriptor??
[  470.475173][T15632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.485095][T15632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.602699][T15640] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  470.616058][T15641] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  470.672248][ T5928] hid-multitouch 0003:1FD2:6007.002B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0
[  470.872638][T15621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.881973][T15621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.891868][ T5947] usb 1-1: USB disconnect, device number 53
[  471.129040][T15676] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1951'.
[  471.157079][T15676] bond0: (slave ): Releasing backup interface
[  471.269629][   T30] audit: type=1326 audit(1757871788.542:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.5.1950" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0510d8eba9 code=0x0
[  471.603539][T15699] netlink: 'syz.0.1955': attribute type 27 has an invalid length.
[  472.126312][T15710] misc userio: No port type given on /dev/userio
[  472.161549][T15705] sctp: [Deprecated]: syz.0.1958 (pid 15705) Use of struct sctp_assoc_value in delayed_ack socket option.
[  472.161549][T15705] Use struct sctp_sack_info instead
[  472.208893][T15717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  472.234588][T15717] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  472.277158][T15705] netlink: 'syz.0.1958': attribute type 16 has an invalid length.
[  472.306981][T15705] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1958'.
[  472.777929][ T5928] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  472.895661][ T5947] usb 7-1: new full-speed USB device number 54 using dummy_hcd
[  472.949436][ T5928] usb 1-1: Using ep0 maxpacket: 16
[  472.956545][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  472.968801][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  472.984456][ T5928] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  472.993735][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  473.001754][ T5928] usb 1-1: Product: syz
[  473.006364][ T5928] usb 1-1: Manufacturer: syz
[  473.011369][ T5928] usb 1-1: SerialNumber: syz
[  473.023586][ T5928] usb 1-1: config 0 descriptor??
[  473.036431][ T5928] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  473.045775][ T5928] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  473.080760][ T5947] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  473.091405][ T5947] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  473.102393][ T5947] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  473.111672][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  473.120283][ T5947] usb 7-1: SerialNumber: syz
[  473.137510][ T5947] usb 7-1: 0:2 : does not exist
[  473.352186][T15744] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1966'.
[  473.401635][ T5947] usb 7-1: USB disconnect, device number 54
[  473.447705][ T8350] udevd[8350]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  473.621304][T15774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.631670][T15774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.685072][ T5928] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  473.692722][ T5928] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  473.918635][T15736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  473.940332][T15736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  473.949983][ T5928] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  473.963936][ T5928] em28xx 1-1:0.0: No AC97 audio processor
[  473.988759][ T5928] usb 1-1: USB disconnect, device number 54
[  474.028340][ T5928] em28xx 1-1:0.0: Disconnecting em28xx
[  474.041198][ T5928] em28xx 1-1:0.0: Freeing device
[  474.404060][T15824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.422723][T15819] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1977'.
[  474.433078][T15824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.462132][T15824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  474.473990][T15824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  474.878456][T15856] overlayfs: failed to resolve './file1': -2
[  474.993551][T12327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  475.006037][ T7794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  475.355774][ T5947] usb 7-1: new high-speed USB device number 55 using dummy_hcd
[  475.547977][ T5947] usb 7-1: Using ep0 maxpacket: 8
[  475.564081][ T5947] usb 7-1: config 0 has an invalid interface number: 152 but max is 0
[  475.586514][ T5947] usb 7-1: config 0 has no interface number 0
[  475.594466][ T5947] usb 7-1: config 0 interface 152 altsetting 1 bulk endpoint 0x4 has invalid maxpacket 528
[  475.606617][ T5947] usb 7-1: config 0 interface 152 has no altsetting 0
[  475.616457][ T5947] usb 7-1: New USB device found, idVendor=1199, idProduct=0026, bcdDevice=13.0b
[  475.625758][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  475.642184][ T5947] usb 7-1: Product: syz
[  475.647432][ T5947] usb 7-1: Manufacturer: syz
[  475.652155][ T5947] usb 7-1: SerialNumber: syz
[  475.660256][ T5947] usb 7-1: config 0 descriptor??
[  475.667098][T15868] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  475.906411][ T5947] sierra 7-1:0.152: Sierra USB modem converter detected
[  475.941407][ T5947] usb 7-1: Sierra USB modem converter now attached to ttyUSB0
[  476.113142][T16023] dvmrp0: entered allmulticast mode
[  476.184929][T16032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.196841][T16032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  476.405786][   T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  476.574393][   T10] usb 1-1: Using ep0 maxpacket: 16
[  476.583904][   T10] usb 1-1: config 1 interface 0 altsetting 191 bulk endpoint 0x1 has invalid maxpacket 1024
[  476.594202][   T10] usb 1-1: config 1 interface 0 altsetting 191 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  476.607515][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  476.616179][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  476.626563][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.636294][   T10] usb 1-1: Product: В
[  476.640482][   T10] usb 1-1: Manufacturer: 㭖᷶辏ﳮ둃᛺ጪ証꧗趪鏖褔⁍
[  476.648548][   T10] usb 1-1: SerialNumber: syz
[  476.655902][   T10] usb 1-1: rejected 1 configuration due to insufficient available bus power
[  476.664740][   T10] usb 1-1: no configuration chosen from 1 choice
[  476.830288][T16042] IPVS: sync thread started: state = MASTER, mcast_ifn = wg2, syncid = 0, id = 0
[  476.984866][T16056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  476.993984][T16056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  477.635288][T16066] block nbd7: Attempted send on invalid socket
[  477.641724][T16066] blk_print_req_error: 2 callbacks suppressed
[  477.641741][T16066] I/O error, dev nbd7, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  477.658701][T16066] isofs_fill_super: bread failed, dev=nbd7, iso_blknum=16, block=32
[  478.227490][T16077] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.1998'.
[  478.354689][ T5874] usb 7-1: USB disconnect, device number 55
[  478.426586][ T5874] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  478.478345][ T5874] sierra 7-1:0.152: device disconnected
[  478.600653][T16107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  478.611342][T16107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.220252][T16111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.231994][T16111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.378699][   T10] usb 1-1: USB disconnect, device number 55
[  479.514474][   T30] audit: type=1326 audit(1757871796.257:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16130 comm="syz.0.2007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efca778eba9 code=0x0
[  479.835773][   T10] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  479.899013][T16138] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2008'.
[  479.910082][T16139] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2008'.
[  479.920577][T16138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  479.931995][T16138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  479.996364][   T10] usb 1-1: Using ep0 maxpacket: 16
[  480.004069][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  480.014880][   T10] usb 1-1: config 255 has an invalid interface number: 48 but max is 0
[  480.024091][   T10] usb 1-1: config 255 has no interface number 0
[  480.030929][   T10] usb 1-1: config 255 interface 48 has no altsetting 0
[  480.043510][   T10] usb 1-1: New USB device found, idVendor=2013, idProduct=024f, bcdDevice=e8.70
[  480.061976][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.079960][   T10] usb 1-1: Product: syz
[  480.084816][   T10] usb 1-1: Manufacturer: syz
[  480.089457][   T10] usb 1-1: SerialNumber: syz
[  480.423912][ T5874] usb 7-1: new high-speed USB device number 56 using dummy_hcd
[  480.602137][ T5874] usb 7-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  480.611597][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.619801][ T5874] usb 7-1: Product: syz
[  480.624001][ T5874] usb 7-1: Manufacturer: syz
[  480.628729][ T5874] usb 7-1: SerialNumber: syz
[  480.636460][ T5874] usb 7-1: config 0 descriptor??
[  480.652365][ T5874] gm12u320 7-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[  480.661227][ T5874] gm12u320 7-1:0.0: probe with driver gm12u320 failed with error -5
[  480.673619][ T5874] usb-storage 7-1:0.0: USB Mass Storage device detected
[  480.688609][ T5874] usb-storage 7-1:0.0: device ignored
[  480.868758][T16152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.878037][T16152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.889190][ T5874] usb 7-1: USB disconnect, device number 56
[  481.162883][T12327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  481.166816][T12329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  481.496659][T16179] sctp: [Deprecated]: syz.6.2012 (pid 16179) Use of int in max_burst socket option.
[  481.496659][T16179] Use struct sctp_assoc_value instead
[  481.511908][T16179] sctp: [Deprecated]: syz.6.2012 (pid 16179) Use of int in max_burst socket option.
[  481.511908][T16179] Use struct sctp_assoc_value instead
[  481.835164][T16192] veth1_macvtap: left promiscuous mode
[  481.844636][T16192] macsec0: entered promiscuous mode
[  481.847583][ T5952] usb 7-1: new high-speed USB device number 57 using dummy_hcd
[  481.850789][T16192] macsec0: entered allmulticast mode
[  481.869384][T16192] veth1_macvtap: entered promiscuous mode
[  481.875202][T16192] veth1_macvtap: entered allmulticast mode
[  481.883771][T16192] macsec0: left promiscuous mode
[  481.889785][T16192] macsec0: left allmulticast mode
[  481.895051][T16192] veth1_macvtap: left allmulticast mode
[  481.909517][T16192] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  482.017853][ T5952] usb 7-1: Using ep0 maxpacket: 8
[  482.026658][ T5952] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  482.044262][ T5952] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  482.053736][ T5952] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  482.063071][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  482.091876][ T5952] hub 7-1:1.0: bad descriptor, ignoring hub
[  482.098726][ T5952] hub 7-1:1.0: probe with driver hub failed with error -5
[  482.304234][T16183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  482.318569][T16183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.535077][ T5874] usb 7-1: USB disconnect, device number 57
[  482.759633][   T10] em28xx 1-1:255.48: audio device (2013:024f): interface 48, class 1
[  482.771892][   T10] usb 1-1: USB disconnect, device number 56
[  482.823959][T16246] 9pnet: p9_errstr2errno: server reported unknown error �@c��������
[  483.228532][   T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  483.271430][T16257] 9pnet_fd: p9_fd_create_tcp (16257): problem connecting socket to 127.0.0.1
[  483.396827][   T10] usb 1-1: Using ep0 maxpacket: 16
[  483.419113][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  483.432812][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  483.442977][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255
[  483.465972][   T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  483.479975][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  483.488368][   T10] usb 1-1: Product: syz
[  483.492785][   T10] usb 1-1: Manufacturer: syz
[  483.504970][   T10] usb 1-1: SerialNumber: syz
[  483.519921][   T10] usb 1-1: config 0 descriptor??
[  483.533616][T16247] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  483.574713][   T10] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  483.583333][   T10] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  483.590388][   T10] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  483.596468][   T10] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  483.603120][   T10] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  483.765657][ T5947] usb 1-1: USB disconnect, device number 57
[  483.783639][ T5947] mcba_usb 1-1:0.0 can0: device disconnected
[  483.905060][T16287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.917013][T16287] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.196453][T16306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  484.247899][T16306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.660085][ T5952] usb 7-1: new high-speed USB device number 58 using dummy_hcd
[  484.851167][ T5952] usb 7-1: Using ep0 maxpacket: 32
[  484.865845][ T5952] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  484.884529][ T5952] usb 7-1: config 0 has no interface number 0
[  484.899060][ T5952] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  484.915504][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.933833][ T5952] usb 7-1: Product: syz
[  484.941616][ T5952] usb 7-1: Manufacturer: syz
[  484.946863][ T5952] usb 7-1: SerialNumber: syz
[  484.966675][ T5952] usb 7-1: config 0 descriptor??
[  484.982672][ T5952] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  485.210418][ T5952] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  485.271998][ T5952] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  485.581265][T16367] mac80211_hwsim hwsim3 ������: renamed from wlan1
[  485.635912][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  485.637636][ T5874] usb 7-1: USB disconnect, device number 58
[  485.691415][ T5874] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  485.742792][ T5874] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  485.771975][ T5874] quatech2 7-1:0.51: device disconnected
[  485.892857][T16402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  485.914162][T16402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.143724][T16407] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  487.150886][T16407] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  487.162770][T16407] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  487.312297][T12330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  487.324011][ T7794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  487.549027][T16433] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request
[  487.568158][   T10] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  487.578869][T16433] genirq: Flags mismatch irq 7. 00200000 (das16m1) vs. 00200080 (ttyS3)
[  487.733052][   T10] usb 1-1: Using ep0 maxpacket: 8
[  487.745358][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  487.765689][   T10] usb 1-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[  487.785540][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.803844][   T10] usb 1-1: config 0 descriptor??
[  488.031950][    T9] usb 1-1: USB disconnect, device number 58
[  488.155869][   T10] usb 7-1: new high-speed USB device number 59 using dummy_hcd
[  488.339891][   T10] usb 7-1: Using ep0 maxpacket: 32
[  488.356050][   T10] usb 7-1: config 0 has an invalid interface number: 247 but max is 0
[  488.395499][   T10] usb 7-1: config 0 has no interface number 0
[  488.412984][   T10] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  488.433129][   T10] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  488.442215][   T10] usb 7-1: Product: syz
[  488.446791][   T10] usb 7-1: Manufacturer: syz
[  488.459946][   T10] usb 7-1: config 0 descriptor??
[  488.508702][ T5183] Bluetooth: hci1: command 0x0406 tx timeout
[  488.583369][T16473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  488.600795][T16473] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  488.924254][T16490] tipc: Started in network mode
[  488.929808][T16490] tipc: Node identity aad6c6173fee, cluster identity 4711
[  488.960378][T16490] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  489.040754][T16488] tipc: Disabling bearer <eth:syzkaller0>
[  489.363021][T16510] 9pnet_fd: p9_fd_create_unix (16510): problem connecting socket: ./file0: -111
[  489.373667][ T5864] Bluetooth: hci4: command 0x0c1a tx timeout
[  489.379914][ T5183] Bluetooth: hci2: command 0x0406 tx timeout
[  490.102300][ T5874] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  490.241058][ T5874] usb 1-1: device descriptor read/64, error -71
[  490.497663][ T5874] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  490.636641][ T5874] usb 1-1: device descriptor read/64, error -71
[  490.755508][ T5874] usb usb1-port1: attempt power cycle
[  491.106136][ T5943] usb 7-1: USB disconnect, device number 59
[  491.120693][ T5874] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  491.158234][ T5874] usb 1-1: device descriptor read/8, error -71
[  491.442130][ T5874] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  491.457082][T16535] affs: No valid root block on device nbd6
[  491.474629][ T5874] usb 1-1: device descriptor read/8, error -71
[  491.599362][ T5874] usb usb1-port1: unable to enumerate USB device
[  491.727342][   T10] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[  491.797161][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.807078][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.889348][   T10] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  491.898634][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.909140][   T10] usb 7-1: config 0 descriptor??
[  491.922360][   T10] gspca_main: cpia1-2.14.0 probing 0813:0001
[  492.367093][   T10] gspca_cpia1: usb_control_msg 05, error -71
[  492.392529][   T10] gspca_cpia1: usb_control_msg 01, error -71
[  492.398839][   T10] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0)
[  492.425454][   T10] usb 7-1: USB disconnect, device number 60
[  492.619540][T16563] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  492.717450][T16575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2063'.
[  492.774431][T16578] netlink: 'syz.7.2064': attribute type 20 has an invalid length.
[  492.788422][ T7794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  492.801577][T12330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  492.818169][T16578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  492.886639][T16580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  492.954406][T16578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.162984][T16590] netlink: 'syz.0.2066': attribute type 10 has an invalid length.
[  493.174823][T16590] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2066'.
[  493.347750][T16597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  493.357532][T16597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.163347][T16648] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  494.278018][T16658] netlink: 'syz.0.2079': attribute type 10 has an invalid length.
[  494.288568][T16658] veth1_vlan: entered allmulticast mode
[  494.302382][T16658] team0: Device veth1_vlan failed to register rx_handler
[  494.390213][   T10] usb 7-1: new full-speed USB device number 61 using dummy_hcd
[  494.414822][T16672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.426564][T16672] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.553949][   T10] usb 7-1: config 0 has an invalid interface number: 6 but max is 0
[  494.562185][   T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  494.572429][   T10] usb 7-1: config 0 has no interface number 0
[  494.578563][   T10] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  494.589827][   T10] usb 7-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  494.602641][   T10] usb 7-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12
[  494.611850][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.620268][   T10] usb 7-1: Product: syz
[  494.624482][   T10] usb 7-1: Manufacturer: syz
[  494.629523][   T10] usb 7-1: SerialNumber: syz
[  494.638096][   T10] usb 7-1: config 0 descriptor??
[  494.644033][T16615] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  494.663066][   T10] vmk80xx 7-1:0.6: driver 'vmk80xx' failed to auto-configure device.
[  494.676134][   T10] vmk80xx 7-1:0.6: probe with driver vmk80xx failed with error -22
[  494.835373][T16683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.847712][T16683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.873532][   T10] usb 7-1: USB disconnect, device number 61
[  497.523049][T16662] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  497.700147][T16718] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2087'.
[  497.704747][T16719] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6)
[  497.715695][T16719] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  497.730917][T16719] vhci_hcd vhci_hcd.0: Device attached
[  497.738051][T16720] usbip_core: unknown command
[  497.742800][T16720] vhci_hcd: unknown pdu 0
[  497.747523][T16720] usbip_core: unknown command
[  497.755036][   T37] vhci_hcd: stop threads
[  497.761328][   T37] vhci_hcd: release socket
[  497.765784][   T37] vhci_hcd: disconnect device
[  497.899419][T16727] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2088'.
[  497.961992][ T5943] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  498.122333][ T5943] usb 1-1: Using ep0 maxpacket: 8
[  498.131636][ T5943] usb 1-1: unable to get BOS descriptor or descriptor too short
[  498.140792][ T5943] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[  498.148996][ T5943] usb 1-1: config 0 has no interface number 0
[  498.157787][ T5943] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  498.169005][ T5943] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  498.180029][ T5943] usb 1-1: config 0 interface 88 has no altsetting 0
[  498.187237][ T7794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  498.201542][ T5943] usb 1-1: string descriptor 0 read error: -22
[  498.208046][ T5943] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  498.217108][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  498.228169][ T5943] usb 1-1: config 0 descriptor??
[  498.246914][ T5943] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input45
[  498.347944][ T8350] udevd[8350]: Error opening device "/dev/input/event4": Input/output error
[  498.367013][ T8350] udevd[8350]: Unable to EVIOCGABS device "/dev/input/event4"
[  498.370244][   T30] audit: type=1326 audit(1757871813.884:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16741 comm="syz.6.2091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88b8b8eba9 code=0x0
[  498.376862][ T8350] udevd[8350]: Unable to EVIOCGABS device "/dev/input/event4"
[  498.451699][   T10] usb 1-1: USB disconnect, device number 63
[  498.754767][    T9] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[  498.924963][    T9] usb 7-1: Using ep0 maxpacket: 16
[  498.935680][    T9] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  498.944587][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  498.955250][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  498.969182][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  498.980735][    T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  498.989959][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.998242][    T9] usb 7-1: Product: syz
[  499.002690][    T9] usb 7-1: Manufacturer: syz
[  499.007324][    T9] usb 7-1: SerialNumber: syz
[  499.136153][T16793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  499.155492][T16793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  499.342387][ T5943] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  499.458441][T16751] binder: 16741:16751 unknown command 0
[  499.464270][T16751] binder: 16741:16751 ioctl c0306201 200000000080 returned -22
[  499.476015][    T9] usb 7-1: 0:2 : does not exist
[  499.501780][ T5943] usb 1-1: Using ep0 maxpacket: 8
[  499.509850][ T5943] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  499.518529][ T5943] usb 1-1: config 0 has no interface number 0
[  499.527243][ T5943] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  499.536512][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.544891][ T5943] usb 1-1: Product: syz
[  499.549102][ T5943] usb 1-1: Manufacturer: syz
[  499.553733][ T5943] usb 1-1: SerialNumber: syz
[  499.562853][ T5943] usb 1-1: config 0 descriptor??
[  499.784953][ T5943] usb 1-1: Found UVC 0.04 device syz (046d:08c3)
[  499.799626][ T5943] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized!
[  499.818984][ T5943] usb 1-1: USB disconnect, device number 64
[  500.396825][T16823] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  500.411909][T16823] overlayfs: overlapping lowerdir path
[  500.420689][T16823] futex_wake_op: syz.0.2101 tries to shift op by -1; fix this program
[  500.719993][T16846] syz.0.2106(16846): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  500.772142][T16840] kvm: pic: non byte write
[  500.782997][T16840] kvm: vcpu 0: requested 3328 ns lapic timer period limited to 200000 ns
[  500.795371][T16846] sp0: Synchronizing with TNC
[  500.896353][T16856] sp0: Synchronizing with TNC
[  501.437475][ T5928] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  501.446147][T16885] netlink: 'syz.5.2111': attribute type 10 has an invalid length.
[  501.455988][T16885] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2111'.
[  501.514631][T16886] overlayfs: failed to resolve '/E	ŻZ': -2
[  501.515505][T16885] team0: Port device geneve0 added
[  501.563709][T16885] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  501.587152][ T5928] usb 1-1: device descriptor read/64, error -71
[  501.662126][    T9] usb 7-1: 1:0: failed to get current value for ch 0 (-22)
[  501.745441][T16896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.761249][T16896] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  501.769798][    T9] usb 7-1: USB disconnect, device number 62
[  501.820156][T11729] udevd[11729]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  501.845035][ T5928] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  502.004302][ T5928] usb 1-1: device descriptor read/64, error -71
[  502.124025][ T5928] usb usb1-port1: attempt power cycle
[  502.481694][T16931] netlink: 'syz.5.2117': attribute type 2 has an invalid length.
[  502.500251][T16931] netlink: 244 bytes leftover after parsing attributes in process `syz.5.2117'.
[  502.506794][ T5928] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  502.546256][ T5928] usb 1-1: device descriptor read/8, error -71
[  502.555676][T16935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2118'.
[  502.604334][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2117'.
[  502.647252][T16931] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2117'.
[  502.776242][   T30] audit: type=1326 audit(1757871818.008:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16947 comm="syz.6.2119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88b8b8eba9 code=0x7fc00000
[  502.824983][ T5928] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  502.871071][ T5928] usb 1-1: device descriptor read/8, error -71
[  502.988434][ T5928] usb usb1-port1: unable to enumerate USB device
[  503.044240][T16962] loop2: detected capacity change from 0 to 7
[  503.067600][T16962] Dev loop2: unable to read RDB block 7
[  503.095184][T16962]  loop2: unable to read partition table
[  503.101223][T16962] loop2: partition table beyond EOD, truncated
[  503.152323][T16962] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  503.415432][T16980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.440715][T16980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.684470][T16980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.711195][T16980] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.727750][T16980] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  503.738736][T12330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  503.760886][T16980] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  504.336392][T12329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  504.491057][T17011] overlayfs: missing 'lowerdir'
[  504.526564][T17013] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  504.629515][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2132'.
[  504.639994][T17023] netlink: 'syz.5.2132': attribute type 21 has an invalid length.
[  504.653887][T17023] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2132'.
[  504.671026][T17023] netlink: 'syz.5.2132': attribute type 4 has an invalid length.
[  504.679807][T17023] netlink: 'syz.5.2132': attribute type 3 has an invalid length.
[  504.687981][T17023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2132'.
[  504.704437][T17025] ucma_write: process 518 (syz.6.2133) changed security contexts after opening file descriptor, this is not allowed.
[  504.813567][T17035] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2135'.
[  504.955687][ T5952] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  505.126752][ T5952] usb 1-1: Using ep0 maxpacket: 8
[  505.134158][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.144617][ T5952] usb 1-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00
[  505.153769][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.164757][ T5952] usb 1-1: config 0 descriptor??
[  505.393245][ T5952] hid_parser_main: 29 callbacks suppressed
[  505.393272][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.408673][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.416605][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.424138][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.432648][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.439718][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.446721][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.453789][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.460834][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.467809][ T5952] a4tech 0003:09DA:000A.002C: unknown main item tag 0x0
[  505.478385][ T5952] a4tech 0003:09DA:000A.002C: hidraw0: USB HID v0.00 Device [HID 09da:000a] on usb-dummy_hcd.0-1/input0
[  505.701694][T17071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2143'.
[  507.924585][ T5952] usb 1-1: USB disconnect, device number 69
[  508.202233][T17111] fuse: Bad value for 'fd'
[  508.340883][T17120] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  508.349328][T17120] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  508.355954][T17120] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  508.363925][T17120] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  508.372627][T17120] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  508.379627][T17120] comedi comedi3: 8255: I/O port conflict (0x12,4)
[  508.386244][T17120] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  508.392798][T17120] comedi comedi3: 8255: I/O port conflict (0x81,4)
[  508.399548][T17120] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  508.407370][T17120] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  508.413950][T17120] comedi comedi3: 8255: I/O port conflict (0xc4,4)
[  508.422204][T17120] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  508.428712][T17120] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  508.463271][ T5952] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  508.656097][ T5952] usb 1-1: Using ep0 maxpacket: 16
[  508.663149][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.674238][ T5952] usb 1-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[  508.683386][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  508.694252][ T5952] usb 1-1: config 0 descriptor??
[  509.026343][T17133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.037794][T17133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.165301][ T5952] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.002D/input/input46
[  509.287505][ T5952] input: HID 0458:5012 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5012.002D/input/input47
[  509.348967][T17150] netlink: 'syz.6.2154': attribute type 29 has an invalid length.
[  509.405764][ T5952] kye 0003:0458:5012.002D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.0-1/input0
[  509.643342][T17111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  509.655162][T17111] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  509.820990][ T5952] usb 1-1: USB disconnect, device number 70
[  509.901272][T12330] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  510.070949][T17228] hub 9-0:1.0: USB hub found
[  510.078143][T17228] hub 9-0:1.0: 1 port detected
[  510.338936][T17239] can: request_module (can-proto-0) failed.
[  510.581469][T12328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  510.879553][T17266] 9pnet_fd: Insufficient options for proto=fd
[  510.899630][T17266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  510.911846][T17266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  511.036184][T17274] sp0: Synchronizing with TNC
[  511.055585][T17274] netlink: 'syz.0.2166': attribute type 29 has an invalid length.
[  511.079292][T17274] netlink: 'syz.0.2166': attribute type 29 has an invalid length.
[  511.099530][T17274] loop2: detected capacity change from 0 to 8
[  511.112852][T11729] Dev loop2: unable to read RDB block 8
[  511.123748][T11729]  loop2: unable to read partition table
[  511.130252][T11729] loop2: partition table beyond EOD, truncated
[  511.153633][T17274] Dev loop2: unable to read RDB block 8
[  511.185487][T17282] netlink: 580 bytes leftover after parsing attributes in process `syz.0.2166'.
[  511.203426][T17274]  loop2: unable to read partition table
[  511.217063][T17274] loop2: partition table beyond EOD, truncated
[  511.224650][T17274] loop_reread_partitions: partition scan of loop2 (�被x�^>��� ) failed (rc=-5)
[  511.601148][T17299] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  511.828542][   T44] usb 6-1: USB disconnect, device number 46
[  512.018316][T17310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2172'.
[  512.848818][ T5952] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  513.008480][ T5952] usb 1-1: device descriptor read/64, error -71
[  513.176950][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  513.187728][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  513.202919][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  513.223707][ T5864] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  513.231555][ T5864] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  513.286266][ T5952] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[  513.435829][ T5952] usb 1-1: device descriptor read/64, error -71
[  513.554502][ T5952] usb usb1-port1: attempt power cycle
[  513.797012][T17364] chnl_net:caif_netlink_parms(): no params data found
[  513.928074][ T5952] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  513.961564][ T5952] usb 1-1: device descriptor read/8, error -71
[  514.000779][T17364] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.021487][T17364] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.030682][T17364] bridge_slave_0: entered allmulticast mode
[  514.047163][T17364] bridge_slave_0: entered promiscuous mode
[  514.059196][T17364] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.066580][T17364] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.075475][T17364] bridge_slave_1: entered allmulticast mode
[  514.084984][T17364] bridge_slave_1: entered promiscuous mode
[  514.157007][T17364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  514.173084][T17364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  514.225943][T17364] team0: Port device team_slave_0 added
[  514.227380][ T5952] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  514.235807][T17364] team0: Port device team_slave_1 added
[  514.260825][ T5952] usb 1-1: device descriptor read/8, error -71
[  514.292580][T17364] batman_adv: batadv0: Adding interface: batadv_slave_0
[  514.299613][T17364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.328752][T17364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  514.341360][T17364] batman_adv: batadv0: Adding interface: batadv_slave_1
[  514.348744][T17364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  514.375002][T17364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  514.378049][ T5952] usb usb1-port1: unable to enumerate USB device
[  514.444222][T17364] hsr_slave_0: entered promiscuous mode
[  514.450745][T17364] hsr_slave_1: entered promiscuous mode
[  514.457715][T17364] debugfs: 'hsr0' already exists in 'hsr'
[  514.465064][T17364] Cannot create hsr debugfs directory
[  514.703511][T17364] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  514.715923][T17364] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  514.728817][T17364] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  514.740150][T17364] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  514.777087][T17364] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.784307][T17364] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.791745][T17364] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.798970][T17364] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.869853][T17364] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.888359][T12328] bridge0: port 1(bridge_slave_0) entered disabled state
[  514.897480][T12328] bridge0: port 2(bridge_slave_1) entered disabled state
[  514.918391][T17364] 8021q: adding VLAN 0 to HW filter on device team0
[  514.937020][T12328] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.944243][T12328] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.965994][T12325] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.973192][T12325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  515.187715][T17364] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.436519][T17364] veth0_vlan: entered promiscuous mode
[  515.449515][T17364] veth1_vlan: entered promiscuous mode
[  515.458601][ T5864] Bluetooth: hci1: command tx timeout
[  515.494969][T17364] veth0_macvtap: entered promiscuous mode
[  515.506576][T17364] veth1_macvtap: entered promiscuous mode
[  515.526194][T17364] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.544379][T17364] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.560088][T12325] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.569319][T12325] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.582083][T12328] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.592106][T12328] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.677146][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.695638][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.731266][T12325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.739348][T12325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.059157][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  516.227441][ T5928] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  516.418101][ T5928] usb 1-1: unable to get BOS descriptor or descriptor too short
[  516.432618][ T5928] usb 1-1: config 255 has an invalid interface number: 178 but max is 0
[  516.458615][ T5928] usb 1-1: config 255 has no interface number 0
[  516.468674][ T5928] usb 1-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=2a.bd
[  516.480620][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.493486][ T5928] usb 1-1: Product: ఄ
[  516.499183][ T5928] usb 1-1: Manufacturer: ࠁ
[  516.506347][ T5928] usb 1-1: SerialNumber: syz
[  516.743578][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  516.768724][ T5928] ums-freecom 1-1:255.178: USB Mass Storage device detected
[  516.839178][ T5928] usb 1-1: USB disconnect, device number 75
[  517.681834][ T5864] Bluetooth: hci1: command tx timeout
[  519.028824][ T5947] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  519.157136][ T5928] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  519.201731][ T5947] usb 9-1: config 160 has an invalid interface number: 200 but max is 0
[  519.210222][ T5947] usb 9-1: config 160 has no interface number 0
[  519.216584][ T5947] usb 9-1: config 160 interface 200 has no altsetting 0
[  519.227132][ T5947] usb 9-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  519.237804][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.246594][ T5947] usb 9-1: Product: syz
[  519.250779][ T5947] usb 9-1: Manufacturer: syz
[  519.255523][ T5947] usb 9-1: SerialNumber: syz
[  519.319868][ T5928] usb 1-1: config 1 has an invalid interface number: 236 but max is 1
[  519.328922][ T5928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  519.339790][ T5928] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2
[  519.348882][ T5928] usb 1-1: config 1 has no interface number 2
[  519.356121][ T5928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  519.378277][ T5928] usb 1-1: config 1 interface 1 has no altsetting 0
[  519.391935][ T5928] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  519.412204][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.421802][ T5928] usb 1-1: Product: syz
[  519.433163][ T5928] usb 1-1: Manufacturer: syz
[  519.440420][ T5928] usb 1-1: SerialNumber: syz
[  519.454711][T17809] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  519.466836][ T5928] cdc_ncm 1-1:1.0: skipping garbage
[  519.477051][ T5928] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  519.499458][ T5928] cdc_ncm 1-1:1.0: bind() failure
[  519.513692][ T5947] usb 9-1: Quirk or no altset; falling back to MIDI 1.0
[  519.516506][ T5928] cdc_ncm 1-1:1.236: CDC Union missing and no IAD found
[  519.528512][ T5947] usb 9-1: MIDIStreaming interface descriptor not found
[  519.536154][ T5928] cdc_ncm 1-1:1.236: bind() failure
[  519.612050][ T5947] usb 9-1: USB disconnect, device number 2
[  519.667398][ T8386] udevd[8386]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  519.709276][ T5928] usb 1-1: USB disconnect, device number 76
[  519.905728][ T5864] Bluetooth: hci1: command tx timeout
[  520.302948][T17878] netlink: 'syz.0.2195': attribute type 11 has an invalid length.
[  520.344628][ T5947] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  520.504884][ T5947] usb 9-1: Using ep0 maxpacket: 16
[  520.507096][T17905] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  520.545822][ T5947] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  520.557532][ T5947] usb 9-1: config 0 interface 0 has no altsetting 0
[  520.565191][ T5947] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  520.574917][ T5947] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.606693][ T5947] usb 9-1: config 0 descriptor??
[  520.779602][   T30] audit: type=1800 audit(1757871834.840:40): pid=17916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2198" name="SYSV798dd814" dev="tmpfs" ino=2 res=0 errno=0
[  521.062459][ T5947] nzxt-smart2 0003:1E71:2009.002E: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0
[  521.532267][T12329] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  521.652241][T17931] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2194'.
[  521.734299][ T5947] usb 1-1: new full-speed USB device number 77 using dummy_hcd
[  521.908907][ T5947] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  521.920201][ T5947] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  521.931283][ T5947] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  521.942326][ T5947] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  521.955551][ T5947] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  521.965888][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.974071][ T5947] usb 1-1: Product: syz
[  521.978315][ T5947] usb 1-1: Manufacturer: syz
[  521.983075][ T5947] usb 1-1: SerialNumber: syz
[  521.994236][T17927] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  522.006783][ T5947] cdc_mbim 1-1:1.0: skipping garbage
[  522.130797][ T5864] Bluetooth: hci1: command tx timeout
[  522.223383][T17927] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  522.233152][T17927] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  522.456786][T17927] vxcan0: tx address claim with different name
[  522.742418][T17940] binder: 17939:17940 ioctl c0306201 200000000480 returned -14
[  522.894141][T17927] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  522.907120][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  522.913990][T17927] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  522.920962][   T37] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  522.932396][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  522.943250][ T5947] cdc_mbim 1-1:1.0: setting rx_max = 16384
[  523.013359][T17952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2203'.
[  523.037216][T17952] netlink: 'syz.7.2203': attribute type 10 has an invalid length.
[  523.064949][T17952] veth0_vlan: left promiscuous mode
[  523.078387][T17952] veth0_vlan: entered promiscuous mode
[  523.087110][T17952] team0: Device veth0_vlan failed to register rx_handler
[  523.157001][ T5947] cdc_mbim 1-1:1.0: setting tx_max = 16384
[  523.185106][ T5947] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  523.218767][ T5947] wwan wwan0: port wwan0mbim0 attached
[  523.302910][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2204'.
[  523.318037][ T5947] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 8a:f6:50:4d:51:f0
[  523.334576][T17968] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2204'.
[  523.385911][ T5947] usb 1-1: USB disconnect, device number 77
[  523.407653][ T5928] usb 9-1: USB disconnect, device number 3
[  523.409624][ T5947] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  523.587916][ T5947] wwan wwan0: port wwan0mbim0 disconnected
[  523.894519][ T5928] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  524.055163][ T5928] usb 9-1: Using ep0 maxpacket: 16
[  524.062109][ T5928] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  524.073224][ T5928] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  524.083069][ T5928] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  524.095963][ T5928] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  524.105356][ T5928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.116431][ T5928] usb 9-1: config 0 descriptor??
[  524.578905][   T10] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  524.741362][   T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  524.752528][   T10] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  524.767984][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  524.777792][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  524.786777][ T5928] usbhid 9-1:0.0: can't add hid device: -71
[  524.792820][   T10] usb 1-1: Product: syz
[  524.797007][   T10] usb 1-1: Manufacturer: syz
[  524.801609][   T10] usb 1-1: SerialNumber: syz
[  524.806626][ T5928] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  524.819477][ T5928] usb 9-1: USB disconnect, device number 4
[  524.829496][   T10] cdc_mbim 1-1:1.0: skipping garbage
[  525.047213][T18020] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  525.407218][T18034] binder_alloc: 18033: pid 18033 spamming oneway? 1 buffers allocated for a total size of 4096
[  525.733863][ T5947] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  525.762885][T18041] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  525.775691][   T10] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  525.785255][   T10] wwan wwan0: port wwan0mbim0 attached
[  525.802727][   T10] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 32:69:96:8f:50:7d
[  525.905655][ T5947] usb 9-1: Using ep0 maxpacket: 32
[  525.917853][ T5947] usb 9-1: unable to get BOS descriptor or descriptor too short
[  525.928059][ T5947] usb 9-1: config 125 has an invalid interface number: 27 but max is 0
[  525.936391][ T5947] usb 9-1: config 125 has no interface number 0
[  525.951618][ T5947] usb 9-1: config 125 interface 27 has no altsetting 0
[  525.963585][ T5947] usb 9-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=a4.70
[  525.977244][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.989547][ T5947] usb 9-1: Product: syz
[  525.998035][ T5947] usb 9-1: Manufacturer: syz
[  526.005983][ T5947] usb 9-1: SerialNumber: syz
[  526.246762][ T5947] hub 9-1:125.27: bad descriptor, ignoring hub
[  526.261351][ T5947] hub 9-1:125.27: probe with driver hub failed with error -5
[  526.296338][ T5947] usb 9-1: USB disconnect, device number 5
[  526.343460][ T5928] usb 1-1: USB disconnect, device number 78
[  526.368476][ T5928] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  526.450635][ T5928] wwan wwan0: port wwan0mbim0 disconnected
[  527.263596][   T10] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  527.338080][ T5874] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  527.434703][   T10] usb 9-1: Using ep0 maxpacket: 32
[  527.442082][   T10] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[  527.456601][   T10] usb 9-1: config 0 has no interface number 0
[  527.462966][   T10] usb 9-1: too many endpoints for config 0 interface 184 altsetting 142: 95, using maximum allowed: 30
[  527.474910][   T10] usb 9-1: config 0 interface 184 altsetting 142 has 0 endpoint descriptors, different from the interface descriptor's value: 95
[  527.488877][   T10] usb 9-1: config 0 interface 184 has no altsetting 0
[  527.495730][   T10] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  527.505455][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.524938][ T5874] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  527.540320][   T10] usb 9-1: config 0 descriptor??
[  527.543272][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.561556][ T5874] usb 1-1: config 0 has no interface number 0
[  527.571058][ T5874] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  527.582386][ T5874] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  527.624930][ T5874] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  527.634915][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.645902][ T5874] usb 1-1: Product: syz
[  527.652300][ T5874] usb 1-1: Manufacturer: syz
[  527.657848][ T5874] usb 1-1: SerialNumber: syz
[  527.676655][ T5874] usb 1-1: config 0 descriptor??
[  527.692002][T12327] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  527.775403][   T10] usb 9-1: string descriptor 0 read error: -71
[  527.786647][   T10] gspca_main: sunplus-2.14.0 probing 041e:400b
[  527.796047][   T10] gspca_sunplus: reg_w_riv err -71
[  527.801408][   T10] sunplus 9-1:0.184: probe with driver sunplus failed with error -71
[  527.819415][   T10] usb 9-1: USB disconnect, device number 6
[  528.124299][   T10] usb 1-1: USB disconnect, device number 79
[  528.842031][T18203] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  528.848867][T18203] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  528.858335][T18203] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  528.864883][T18203] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  528.871480][T18203] comedi comedi3: 8255: I/O port conflict (0xc,4)
[  528.878421][T18203] comedi comedi3: 8255: I/O port conflict (0x12,4)
[  528.884979][T18203] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  528.894371][T18203] comedi comedi3: 8255: I/O port conflict (0xd,4)
[  528.904899][T18203] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffc,4)
[  528.921823][T18203] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  528.928569][T18203] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  528.939636][T18203] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  528.949068][T18203] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  528.956443][T18203] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  528.963135][T18203] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  528.970968][T18203] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  528.978424][T18203] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  528.985449][T18203] comedi comedi3: 8255: I/O port conflict (0x80,4)
[  528.992223][T18203] comedi comedi3: 8255: I/O port conflict (0x20001e58,4)
[  528.999802][T18203] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  529.006484][T18203] comedi comedi3: 8255: I/O port conflict (0x2000e67,4)
[  529.013553][T18203] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  529.020283][T18203] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  529.065019][T12328] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  529.448035][T18215] netlink: 5820 bytes leftover after parsing attributes in process `syz.8.2232'.
[  529.611098][T18220] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2234'.
[  529.904523][   T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  530.079993][   T10] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  530.088972][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  530.100849][   T10] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  530.111876][   T10] usb 9-1: config 1 has no interface number 1
[  530.118053][   T10] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  530.119209][ T5874] usb 1-1: new full-speed USB device number 80 using dummy_hcd
[  530.142377][   T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  530.151963][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.160100][   T10] usb 9-1: Product: syz
[  530.165024][   T10] usb 9-1: Manufacturer: syz
[  530.170173][   T10] usb 9-1: SerialNumber: syz
[  530.302976][ T5874] usb 1-1: unable to get BOS descriptor or descriptor too short
[  530.315103][ T5874] usb 1-1: not running at top speed; connect to a high speed hub
[  530.324146][ T5874] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  530.334835][ T5874] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  530.343979][ T5874] usb 1-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  530.357009][ T5874] usb 1-1: config 1 interface 0 has no altsetting 0
[  530.371496][ T5874] usb 1-1: string descriptor 0 read error: -22
[  530.377987][ T5874] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  530.387362][ T5874] usb 1-1: New USB device strings: Mfr=15, Product=2, SerialNumber=11
[  530.445651][   T10] usb 9-1: USB disconnect, device number 7
[  530.483249][T11729] udevd[11729]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  530.626223][ T5928] usb 1-1: USB disconnect, device number 80
[  530.907565][T18265] netlink: 'syz.6.2237': attribute type 4 has an invalid length.
[  530.917528][T18265] netlink: 17 bytes leftover after parsing attributes in process `syz.6.2237'.
[  532.065205][   T10] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  532.172516][T18321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.184426][T18321] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.237967][   T10] usb 9-1: Using ep0 maxpacket: 8
[  532.245270][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[  532.256746][   T10] usb 9-1: config 8 has an invalid interface number: 255 but max is 0
[  532.265367][   T10] usb 9-1: config 8 has no interface number 0
[  532.267744][ T5874] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  532.271947][   T10] usb 9-1: config 8 interface 255 has no altsetting 0
[  532.289826][   T10] usb 9-1: string descriptor 0 read error: -22
[  532.296161][   T10] usb 9-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  532.305359][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.442304][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  532.452347][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  532.465346][ T5874] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00
[  532.475924][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  532.487389][ T5874] usb 1-1: config 0 descriptor??
[  532.727451][T18314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.737521][T18314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.748379][T18314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  532.759400][T18314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  532.786630][   T10] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.8-1, 00:00:00:00:00:00.
[  532.819960][   T10] usb 9-1: USB disconnect, device number 8
[  532.993286][ T5874] usbhid 1-1:0.0: can't add hid device: -71
[  533.004059][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  533.017305][ T5874] usb 1-1: USB disconnect, device number 81
[  534.715617][T18383] netlink: 180 bytes leftover after parsing attributes in process `syz.7.2252'.
[  534.802251][ T5947] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  534.856765][ T5943] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  534.973304][ T5947] usb 1-1: Using ep0 maxpacket: 8
[  534.980495][ T5947] usb 1-1: config 162 has an invalid interface number: 97 but max is 0
[  534.990037][ T5947] usb 1-1: config 162 has no interface number 0
[  535.000363][ T5947] usb 1-1: config 162 interface 97 has no altsetting 0
[  535.010904][ T5947] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  535.020732][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.032100][ T5947] usb 1-1: Product: syz
[  535.036313][ T5947] usb 1-1: Manufacturer: syz
[  535.040991][ T5947] usb 1-1: SerialNumber: syz
[  535.048301][ T5943] usb 9-1: Using ep0 maxpacket: 32
[  535.059797][ T5943] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  535.072063][ T5943] usb 9-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  535.081804][ T5943] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.093619][ T5943] usb 9-1: config 0 descriptor??
[  535.546459][T18374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  535.558435][T18374] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  535.736958][ T5947] metro_usb 1-1:162.97: Metrologic USB to Serial converter detected
[  535.751301][ T5947] usb 1-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  535.770220][ T5947] usb 1-1: USB disconnect, device number 82
[  535.793524][ T5943] usbhid 9-1:0.0: can't add hid device: -71
[  535.802666][ T5947] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  535.812506][ T5943] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[  535.823010][ T5947] metro_usb 1-1:162.97: device disconnected
[  535.837182][ T5943] usb 9-1: USB disconnect, device number 9
[  536.775236][ T5943] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  536.941031][ T5943] usb 1-1: Using ep0 maxpacket: 32
[  536.948282][ T5943] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  536.956879][ T5943] usb 1-1: config 0 has no interface number 0
[  536.963997][ T5943] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  536.974364][ T5943] usb 1-1: config 0 interface 196 has no altsetting 0
[  536.983466][ T5943] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  536.992636][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.000747][ T5943] usb 1-1: Product: syz
[  537.004953][ T5943] usb 1-1: Manufacturer: syz
[  537.009656][ T5943] usb 1-1: SerialNumber: syz
[  537.016851][ T5943] usb 1-1: config 0 descriptor??
[  537.024220][T18449] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  537.037260][ T5947] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  537.210168][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.220189][ T5947] usb 9-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00
[  537.229323][ T5947] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.240897][ T5947] usb 9-1: config 0 descriptor??
[  537.471969][T18449] netlink: 'syz.0.2259': attribute type 10 has an invalid length.
[  537.480475][T18449] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2259'.
[  537.490359][T18449] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  537.512918][T18449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.521993][T18449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.535291][ T5943] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  537.548320][ T5943] ipheth 1-1:0.196: probe with driver ipheth failed with error -22
[  537.690196][ T5947] kye 0003:0458:0087.002F: item fetching failed at offset 6/7
[  537.699094][ T5947] kye 0003:0458:0087.002F: parse failed
[  537.705243][ T5947] kye 0003:0458:0087.002F: probe with driver kye failed with error -22
[  539.751104][ T5943] usb 1-1: USB disconnect, device number 83
[  540.037216][ T5928] usb 9-1: USB disconnect, device number 10
[  540.812260][ T5947] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  540.912589][T18533] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.2270'.
[  540.944346][T18533] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  540.983390][ T5947] usb 9-1: Using ep0 maxpacket: 32
[  541.002560][ T5947] usb 9-1: config 0 has an invalid interface number: 133 but max is 0
[  541.016367][ T5947] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.027190][ T5947] usb 9-1: config 0 has no interface number 0
[  541.033339][ T5947] usb 9-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  541.046819][ T5947] usb 9-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88
[  541.058858][ T5947] usb 9-1: config 0 interface 133 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  541.070476][ T5947] usb 9-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  541.097817][ T5947] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  541.109257][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.119173][ T5947] usb 9-1: Product: syz
[  541.125187][ T5947] usb 9-1: Manufacturer: syz
[  541.129836][ T5947] usb 9-1: SerialNumber: syz
[  541.144968][ T5947] usb 9-1: config 0 descriptor??
[  541.160125][T18528] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22
[  541.367385][T18548] batadv_slave_1: entered promiscuous mode
[  541.400366][ T5928] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  541.400432][ T5947] usb 9-1: probing VID:PID(0424:012C)   
[  541.418055][ T5947] usb 9-1: vub300 testing BULK OUT EndPoint(0) 0B
[  541.425565][ T5947] usb 9-1: vub300 testing UNKNOWN EndPoint(1) 88
[  541.431934][ T5947] usb 9-1: vub300 ignoring EndPoint(1) 88
[  541.439735][ T5947] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs
[  541.450065][ T5947] vub300 9-1:0.133: probe with driver vub300 failed with error -22
[  541.466515][ T5947] usb 9-1: USB disconnect, device number 11
[  541.567969][ T5928] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  541.578368][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  541.586572][ T5928] usb 1-1: Product: syz
[  541.590889][ T5928] usb 1-1: Manufacturer: syz
[  541.596642][ T5928] usb 1-1: SerialNumber: syz
[  541.604101][ T5928] usb 1-1: config 0 descriptor??
[  541.829707][ T5928] usb 1-1: ignoring: probably an ADSL modem
[  541.998373][T18568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  542.051986][T18540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.071170][T18540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.303790][T18540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  542.313049][T18540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  542.322579][ T5928] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  542.448413][ T5947] usb 9-1: new full-speed USB device number 12 using dummy_hcd
[  542.542220][ T5874] usb 1-1: USB disconnect, device number 84
[  542.623664][ T5947] usb 9-1: config 1 has an invalid interface number: 105 but max is 0
[  542.634969][ T5947] usb 9-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config
[  542.645739][ T5947] usb 9-1: config 1 has no interface number 0
[  542.652248][ T5947] usb 9-1: config 1 interface 105 altsetting 2 endpoint 0x4 has an invalid bInterval 45, changing to 4
[  542.671475][ T5947] usb 9-1: config 1 interface 105 altsetting 2 endpoint 0x4 has invalid maxpacket 5350, setting to 1023
[  542.685391][ T5947] usb 9-1: config 1 interface 105 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  542.699019][ T5947] usb 9-1: config 1 interface 105 has no altsetting 0
[  542.710092][ T5947] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  542.719552][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.729143][ T5947] usb 9-1: Product: syz
[  542.733379][ T5947] usb 9-1: Manufacturer: syz
[  542.756751][ T5947] usb 9-1: SerialNumber: syz
[  543.004370][ T5947] aqc111 9-1:1.105: probe with driver aqc111 failed with error -22
[  543.421447][ T5947] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  543.624702][ T5947] usb 1-1: config 0 has an invalid interface number: 151 but max is 0
[  543.659294][ T5947] usb 1-1: config 0 has no interface number 0
[  543.683124][ T5947] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=ad.73
[  543.728457][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.809721][ T5947] usb 1-1: config 0 descriptor??
[  543.842590][ T5947] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state.
[  543.879694][ T5947] dvb-usb: bulk message failed: -22 (2/0)
[  543.899567][ T5947] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  543.920715][ T5947] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2))
[  543.956507][ T5947] usb 1-1: media controller created
[  544.007033][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  544.038436][T18620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.069055][ T5947] cxusb: set interface failed
[  544.074873][T18620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.078566][ T5947] dvb-usb: bulk message failed: -22 (1/0)
[  544.089581][ T5947] dvb-usb: bulk message failed: -22 (3/0)
[  544.096319][ T5947] usb 1-1: bluebird_gpio_write failed.
[  544.127841][ T5947] dvb-usb: bulk message failed: -22 (3/0)
[  544.133628][ T5947] usb 1-1: bluebird_gpio_write failed.
[  544.183295][ T5947] DVB: Unable to find symbol dib7000p_attach()
[  544.205372][ T5947] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)'
[  544.300180][ T5947] rc_core: IR keymap rc-dvico-mce not found
[  544.306156][ T5947] Registered IR keymap rc-empty
[  544.333691][ T5947] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[  544.359969][ T5947] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input50
[  544.391539][ T5947] dvb-usb: schedule remote query interval to 100 msecs.
[  544.409370][ T5947] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected.
[  544.435559][ T5947] usb 1-1: USB disconnect, device number 85
[  544.525877][ T5947] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected.
[  544.607683][T18549] batadv_slave_1: left promiscuous mode
[  545.314563][   T44] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  545.344618][ T5928] usb 9-1: USB disconnect, device number 12
[  545.501959][   T44] usb 1-1: Using ep0 maxpacket: 32
[  545.512510][   T44] usb 1-1: config 5 has an invalid interface number: 95 but max is 0
[  545.521588][   T44] usb 1-1: config 5 has no interface number 0
[  545.527743][   T44] usb 1-1: config 5 interface 95 altsetting 0 endpoint 0xF has invalid maxpacket 1023, setting to 64
[  545.544216][   T44] usb 1-1: New USB device found, idVendor=10fd, idProduct=de00, bcdDevice= 0.01
[  545.553583][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.561832][   T44] usb 1-1: Product: 舼៣⡩섖姒뙛
[  545.567394][   T44] usb 1-1: Manufacturer: ၾ哄ꕊ湹ꐔ嵌闾언走邌˚ﾩꌷŵਸ਼¦矨嵛习뇹শ드뛃ޱ(큱ﲵ䬼ﭤ跘奻竡鶚ᐭ燮ﱯ谷ﳇ⅟缣ㅏ硱뮺㮗༟덤〉糭ꥊ塻䙀ᨶ湌嘝ꑭꉸ퓜
[  545.587502][   T44] usb 1-1: SerialNumber: 
[  545.813802][T18749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  545.823896][T18749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  545.846922][   T44] go7007 1-1:5.95: The Lifeview TV Walker Ultra is not supported. Sorry!
[  545.866038][   T44] usb 1-1: USB disconnect, device number 86
[  546.288786][T18798] overlay: ./file0 is not a directory
[  546.467868][T18797] infiniband syz1: set down
[  546.475266][T18797] infiniband syz1: added ipvlan1
[  546.524838][T18797] RDS/IB: syz1: added
[  546.530599][T18797] smc: adding ib device syz1 with port count 1
[  546.537819][T18797] smc:    ib device syz1 port 1 has no pnetid
[  546.715183][ T5928] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  546.897202][ T5928] usb 1-1: Using ep0 maxpacket: 32
[  546.903233][ T5928] usb 1-1: too many configurations: 17, using maximum allowed: 8
[  546.913025][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  546.921631][ T5928] usb 1-1: config 0 has no interface number 0
[  546.930202][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  546.938499][ T5928] usb 1-1: config 0 has no interface number 0
[  546.949014][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  546.957508][ T5928] usb 1-1: config 0 has no interface number 0
[  546.965791][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  546.974374][ T5928] usb 1-1: config 0 has no interface number 0
[  546.982272][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  546.990979][ T5928] usb 1-1: config 0 has no interface number 0
[  547.002686][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  547.014054][ T5928] usb 1-1: config 0 has no interface number 0
[  547.022203][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  547.030896][ T5928] usb 1-1: config 0 has no interface number 0
[  547.043012][ T5928] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  547.054310][ T5928] usb 1-1: config 0 has no interface number 0
[  547.067129][ T5928] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  547.081573][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  547.091704][ T5928] usb 1-1: Product: syz
[  547.095913][ T5928] usb 1-1: Manufacturer: syz
[  547.104269][ T5928] usb 1-1: SerialNumber: syz
[  547.117261][ T5928] usb 1-1: config 0 descriptor??
[  547.129848][ T5928] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz)
[  547.353800][ T5928] etas_es58x 1-1:0.2: could not parse product info: ''
[  548.188845][    C0] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x015D.
[  548.200222][    C0] etas_es58x 1-1:0.2: Recovery successful! Dropped 341 bytes (urb_cmd_len: 9)
[  548.209142][    C0] etas_es58x 1-1:0.2: es58x_fd_handle_urb_cmd: Unknown command type (0x00) and command ID (0x00) combination
[  548.220736][    C0] etas_es58x 1-1:0.2: ops->handle_urb_cmd() returned error -EBADRQC
[  548.232255][ T5528] etas_es58x 1-1:0.2 can1: bit-timing not yet defined
[  548.446456][    C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  548.455746][    C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  548.464961][    C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  548.474168][    C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  548.483419][    C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged?
[  548.492651][    C0] etas_es58x 1-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO
[  548.503268][ T5528] etas_es58x 1-1:0.2 can1: es58x_open: Could not open the network device: -EINVAL
[  548.517964][   T44] usb 1-1: USB disconnect, device number 87
[  548.527333][   T44] etas_es58x 1-1:0.2: Disconnecting syz syz
[  549.870714][ T5947] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  549.908058][T18920] block nbd6: Attempted send on invalid socket
[  549.914748][T18920] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  549.924209][T18920] isofs_fill_super: bread failed, dev=nbd6, iso_blknum=16, block=32
[  550.051837][ T5947] usb 9-1: Using ep0 maxpacket: 8
[  550.058809][ T5947] usb 9-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5
[  550.069160][ T5947] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.089155][ T5947] usb 9-1: config 0 descriptor??
[  550.126077][T18937] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2305'.
[  550.244402][   T10] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  550.327912][ T5947] usb 9-1: string descriptor 0 read error: -71
[  550.334841][ T5947] usb 9-1: Found UVC 0.00 device <unnamed> (2833:0201)
[  550.342113][ T5947] usb 9-1: No valid video chain found.
[  550.350415][ T5947] usb 9-1: USB disconnect, device number 13
[  550.405590][   T10] usb 1-1: Using ep0 maxpacket: 32
[  550.412622][   T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  550.421313][   T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  550.430823][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  550.441094][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  550.453570][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  550.463984][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  550.477231][   T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  550.486470][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.497121][   T10] usb 1-1: config 0 descriptor??
[  550.732664][   T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 88 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  550.753528][   T10] usb 1-1: USB disconnect, device number 88
[  550.764175][   T10] usblp0: removed
[  550.989573][T18971] netlink: 'syz.8.2308': attribute type 29 has an invalid length.
[  550.998216][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2308'.
[  551.261038][   T10] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  551.431208][   T10] usb 1-1: Using ep0 maxpacket: 32
[  551.437958][   T10] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  551.449653][   T10] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  551.458376][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  551.467663][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  551.477410][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  551.487211][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  551.500341][   T10] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  551.509510][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.522504][   T10] usb 1-1: config 0 descriptor??
[  551.756063][   T10] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 89 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  551.868866][T18999] tap0: tun_chr_ioctl cmd 1074025675
[  551.875740][T18999] tap0: persist enabled
[  552.149333][ T5947] usb 1-1: USB disconnect, device number 89
[  552.168440][ T5947] usblp0: removed
[  552.768332][   T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  552.951408][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  552.961630][   T10] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  552.973476][   T10] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  552.986542][   T10] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  552.996187][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.004615][   T10] usb 9-1: Product: syz
[  553.008907][   T10] usb 9-1: Manufacturer: syz
[  553.013559][   T10] usb 9-1: SerialNumber: syz
[  553.022363][   T10] usb 9-1: config 0 descriptor??
[  553.028512][T19019] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  553.036369][T19019] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22
[  553.045303][   T10] usb 9-1: ucan: probing device on interface #0
[  553.259975][   T10] usb 9-1: ucan: device protocol version -2130779133 is not supported
[  553.268350][   T10] usb 9-1: ucan: probe failed; try to update the device firmware
[  553.295760][   T10] usb 9-1: USB disconnect, device number 14
[  553.666238][ T5874] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  553.698540][   T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  553.826587][ T5874] usb 1-1: Using ep0 maxpacket: 32
[  553.834145][ T5874] usb 1-1: config 0 has an invalid interface number: 196 but max is 0
[  553.842829][ T5874] usb 1-1: config 0 has no interface number 0
[  553.849064][ T5874] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  553.859265][ T5874] usb 1-1: config 0 interface 196 has no altsetting 0
[  553.868738][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  553.878048][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  553.886281][ T5874] usb 1-1: Product: syz
[  553.890504][ T5874] usb 1-1: Manufacturer: syz
[  553.895254][ T5874] usb 1-1: SerialNumber: syz
[  553.897004][   T10] usb 9-1: config 0 has an invalid interface number: 151 but max is 0
[  553.909522][   T10] usb 9-1: config 0 has no interface number 0
[  553.913515][ T5874] usb 1-1: config 0 descriptor??
[  553.920093][   T10] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=ad.73
[  553.930058][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.937978][T19040] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  553.950555][   T10] usb 9-1: config 0 descriptor??
[  553.963169][   T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state.
[  553.973250][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  553.984400][   T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  553.997627][   T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2))
[  554.007611][   T10] usb 9-1: media controller created
[  554.037731][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  554.063214][   T10] cxusb: set interface failed
[  554.068396][   T10] dvb-usb: bulk message failed: -22 (1/0)
[  554.074927][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  554.080706][   T10] usb 9-1: bluebird_gpio_write failed.
[  554.107294][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  554.113106][   T10] usb 9-1: bluebird_gpio_write failed.
[  554.164309][   T10] DVB: Unable to find symbol dib7000p_attach()
[  554.171110][   T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)'
[  554.192322][T19039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.206231][T19039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.279321][   T10] rc_core: IR keymap rc-dvico-mce not found
[  554.285316][   T10] Registered IR keymap rc-empty
[  554.292048][   T10] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0
[  554.306363][   T10] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input51
[  554.326128][   T10] dvb-usb: schedule remote query interval to 100 msecs.
[  554.334086][   T10] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected.
[  554.357318][   T10] usb 9-1: USB disconnect, device number 15
[  554.385291][ T5874] ipheth 1-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes
[  554.408795][ T5874] ipheth 1-1:0.196: probe with driver ipheth failed with error -22
[  554.453455][   T10] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected.
[  554.609375][ T5947] usb 1-1: USB disconnect, device number 90
[  555.174101][   T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  555.336751][   T10] usb 9-1: Using ep0 maxpacket: 32
[  555.367929][   T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  555.383514][   T10] usb 9-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  555.394720][   T10] usb 9-1: config 0 interface 0 has no altsetting 0
[  555.409499][   T10] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  555.420055][   T10] usb 9-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  555.441358][   T10] usb 9-1: Product: syz
[  555.454022][   T10] usb 9-1: Manufacturer: syz
[  555.467865][   T10] usb 9-1: SerialNumber: syz
[  555.488921][   T10] usb 9-1: config 0 descriptor??
[  555.768943][T19153] QAT: Device 253 not found
[  555.794339][ T5952] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  555.930286][   T10] gs_usb 9-1:0.0: Configuring for 1 interfaces
[  555.957190][ T5952] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  555.967983][ T5952] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  555.977475][ T5952] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  555.999363][ T5952] gspca_main: stv0680-2.14.0 probing 041e:4007
[  556.361072][   T10] gs_usb 9-1:0.0: Disabling termination support for channel 0 (-EPIPE)
[  556.617915][ T5874] usb 9-1: USB disconnect, device number 16
[  557.214016][ T5952] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71
[  557.245251][ T5952] stv0680 1-1:4.0: STV(e): camera ping failed!!
[  557.270414][ T5952] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  557.278651][ T5952] stv0680 1-1:4.0: last error: 0,  command = 0x0
[  557.317002][ T5952] usb 1-1: USB disconnect, device number 91
[  557.809927][ T5183] Bluetooth: hci1: command tx timeout
[  557.836765][   T44] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[  558.008027][   T44] usb 9-1: device descriptor read/64, error -71
[  558.102996][T19249] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2340'.
[  558.275316][   T44] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[  558.414375][   T44] usb 9-1: device descriptor read/64, error -71
[  558.446461][ T5947] usb 1-1: new full-speed USB device number 92 using dummy_hcd
[  558.534205][   T44] usb usb9-port1: attempt power cycle
[  558.609211][ T5947] usb 1-1: config 0 has an invalid interface number: 46 but max is 0
[  558.617619][ T5947] usb 1-1: config 0 has no interface number 0
[  558.623752][ T5947] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  558.633682][ T5947] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  558.647709][ T5947] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  558.657000][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.665274][ T5947] usb 1-1: Product: syz
[  558.669475][ T5947] usb 1-1: Manufacturer: syz
[  558.674219][ T5947] usb 1-1: SerialNumber: syz
[  558.681174][ T5947] usb 1-1: config 0 descriptor??
[  558.690701][ T5947] ums-karma 1-1:0.46: USB Mass Storage device detected
[  558.752463][ T5947] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5
[  558.898644][   T44] usb 9-1: new full-speed USB device number 19 using dummy_hcd
[  558.928461][   T44] usb 9-1: device descriptor read/8, error -71
[  559.031597][   T10] usb 1-1: USB disconnect, device number 92
[  559.195138][   T44] usb 9-1: new full-speed USB device number 20 using dummy_hcd
[  559.247505][   T44] usb 9-1: device descriptor read/8, error -71
[  559.299948][   T30] audit: type=1326 audit(1757871870.860:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19292 comm="syz.7.2346" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f823fd8eba9 code=0x0
[  559.366489][   T44] usb usb9-port1: unable to enumerate USB device
[  559.832811][T19326] overlayfs: conflicting lowerdir path
[  559.936848][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2350'.
[  560.086888][T19338] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  560.294160][T19359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2355'.
[  560.320463][T19359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2355'.
[  560.336914][T19361] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  560.344442][T19361] overlayfs: failed to set xattr on upper
[  560.349026][T19359] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2355'.
[  560.351078][T19361] overlayfs: ...falling back to redirect_dir=nofollow.
[  560.367160][T19361] overlayfs: ...falling back to index=off.
[  560.633986][T19378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2359'.
[  560.657416][T19378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'.
[  561.166932][   T44] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  561.355040][   T44] usb 1-1: Using ep0 maxpacket: 32
[  561.372113][   T44] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  561.386749][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.400160][   T44] usb 1-1: Product: syz
[  561.404543][   T44] usb 1-1: Manufacturer: syz
[  561.410653][   T44] usb 1-1: SerialNumber: syz
[  561.418856][   T44] usb 1-1: config 0 descriptor??
[  561.671498][   T44] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 093
[  561.726044][   T10] IPVS: starting estimator thread 0...
[  561.759533][ T5183] Bluetooth: hci1: unexpected Set CIG Parameters response data
[  561.847238][T19538] IPVS: using max 38 ests per chain, 91200 per kthread
[  561.866223][ T5874] usb 1-1: USB disconnect, device number 93
[  562.034559][T19558] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2367'.
[  562.045684][T19558] overlayfs: missing 'lowerdir'
[  562.140246][T19562] binder: BINDER_SET_CONTEXT_MGR already set
[  562.148019][T19562] binder: 19560:19562 ioctl 4018620d 200000000100 returned -16
[  562.178288][T19561] binder: 19560:19561 ioctl c00c620f 200000000180 returned -22
[  562.186540][T19562] binder: 19560:19562 ioctl 7f 200000000000 returned -22
[  562.193905][T19561] binder: 19560:19561 ioctl 7f 200000000000 returned -22
[  562.792482][ T5183] Bluetooth: hci4: SCO packet for unknown connection handle 201
[  563.183755][   T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[  563.361597][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  563.373945][   T10] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  563.388531][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.397935][ T5902] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  563.417861][   T10] usb 9-1: config 0 descriptor??
[  563.571689][ T5902] usb 1-1: Using ep0 maxpacket: 8
[  563.585349][ T5902] usb 1-1: unable to get BOS descriptor or descriptor too short
[  563.597433][ T5902] usb 1-1: config 8 has an invalid interface number: 255 but max is 0
[  563.607050][ T5902] usb 1-1: config 8 has no interface number 0
[  563.613792][ T5902] usb 1-1: config 8 interface 255 has no altsetting 0
[  563.625662][ T5902] usb 1-1: string descriptor 0 read error: -22
[  563.632623][ T5902] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  563.644663][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.863594][   T10] keytouch 0003:0926:3333.0030: fixing up Keytouch IEC report descriptor
[  563.882678][ T5902] catc 1-1:8.255: Can't set altsetting 1.
[  563.897649][   T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0926:3333.0030/input/input53
[  563.909823][ T5902] catc 1-1:8.255: probe with driver catc failed with error -5
[  563.932108][ T5902] usb 1-1: USB disconnect, device number 94
[  564.074672][   T10] keytouch 0003:0926:3333.0030: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.8-1/input0
[  564.103437][T19598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.141540][T19598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.194230][T19598] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  564.208176][T12329] Bluetooth: hci3: Frame reassembly failed (-84)
[  564.219799][T19598] batman_adv: batadv0: Removing interface: batadv_slave_0
[  564.239148][T19598] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  564.253408][T19598] batman_adv: batadv0: Removing interface: batadv_slave_1
[  564.787787][ T5874] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  564.976143][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.987500][ T5874] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  565.009768][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.027912][ T5874] usb 1-1: config 0 descriptor??
[  565.471524][ T5874] keytouch 0003:0926:3333.0031: fixing up Keytouch IEC report descriptor
[  565.487700][ T5874] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0031/input/input54
[  565.611259][ T5874] keytouch 0003:0926:3333.0031: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  565.692129][    C1] keyboard: can't emulate rawmode for keycode 240
[  565.699695][    C1] keyboard: can't emulate rawmode for keycode 240
[  565.707183][    C1] keyboard: can't emulate rawmode for keycode 240
[  565.714151][    C1] keyboard: can't emulate rawmode for keycode 240
[  565.720620][    C1] keyboard: can't emulate rawmode for keycode 240
[  565.727146][    C1] keyboard: can't emulate rawmode for keycode 240
[  565.733611][    C1] keyboard: can't emulate rawmode for keycode 240
[  565.742223][    C1] keyboard: can't emulate rawmode for keycode 240
[  565.748751][    C1] keyboard: can't emulate rawmode for keycode 240
[  565.756138][    C1] keyboard: can't emulate rawmode for keycode 240
[  566.105879][ T5864] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  566.116502][ T5864] Bluetooth: hci1: Injecting HCI hardware error event
[  566.126640][T14138] Bluetooth: hci1: hardware error 0x00
[  566.135831][   T44] usb 1-1: USB disconnect, device number 95
[  566.360128][ T5864] Bluetooth: hci3: command 0x1003 tx timeout
[  566.364128][ T5183] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  566.404932][   T10] usb 9-1: USB disconnect, device number 21
[  566.490908][T19731] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  566.839105][T19755] 9pnet_fd: Insufficient options for proto=fd
[  566.864369][   T10] usb 9-1: new full-speed USB device number 22 using dummy_hcd
[  567.047324][   T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  567.058525][   T10] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  567.068200][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.082390][   T10] usb 9-1: config 0 descriptor??
[  567.096253][T19731] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  567.332975][   T44] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  567.504280][   T44] usb 1-1: Using ep0 maxpacket: 16
[  567.513069][   T44] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  567.520559][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  567.531721][   T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  567.538841][   T10] hid_parser_main: 1 callbacks suppressed
[  567.538873][   T10] elan 0003:04F3:0755.0032: unknown main item tag 0x0
[  567.546975][   T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.555433][   T10] elan 0003:04F3:0755.0032: item fetching failed at offset 3/5
[  567.569103][   T44] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  567.584430][   T10] elan 0003:04F3:0755.0032: Hid Parse failed
[  567.585833][   T44] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  567.591837][   T10] elan 0003:04F3:0755.0032: probe with driver elan failed with error -22
[  567.619816][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  567.629083][   T44] usb 1-1: Product: syz
[  567.635046][   T44] usb 1-1: Manufacturer: syz
[  567.639684][   T44] usb 1-1: SerialNumber: syz
[  567.647550][   T44] usb 1-1: config 0 descriptor??
[  567.653176][T19771] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  567.671667][   T44] mcba_usb 1-1:0.0 can0: couldn't setup read URBs
[  567.678839][   T44] mcba_usb 1-1:0.0 can0: couldn't start device: -90
[  567.731822][   T44] mcba_usb 1-1:0.0: probe with driver mcba_usb failed with error -90
[  567.846003][   T10] usb 9-1: USB disconnect, device number 22
[  567.884571][   T44] usb 1-1: USB disconnect, device number 96
[  568.327581][T14138] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  568.500769][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2395'.
[  568.614199][T19817] kvm: kvm [19816]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  568.623861][T19817] kvm: kvm [19816]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  568.700728][T19817] kvm: kvm [19816]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xedd4
[  568.709794][T19817] kvm: kvm [19816]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xed8d
[  568.722590][T19817] kvm: kvm [19816]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xec2d
[  568.736171][T19817] kvm: kvm [19816]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xebe7
[  568.745176][T19817] kvm: kvm [19816]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xeba0
[  568.798100][   T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[  568.958794][   T10] usb 9-1: Using ep0 maxpacket: 16
[  568.966340][   T10] usb 9-1: config 3 has an invalid interface number: 163 but max is 2
[  568.977732][   T10] usb 9-1: config 3 has an invalid interface number: 24 but max is 2
[  568.986084][   T10] usb 9-1: config 3 has an invalid interface number: 129 but max is 2
[  568.994762][   T10] usb 9-1: config 3 has an invalid descriptor of length 251, skipping remainder of the config
[  569.005213][   T10] usb 9-1: config 3 has no interface number 0
[  569.011320][   T10] usb 9-1: config 3 has no interface number 1
[  569.017969][   T10] usb 9-1: config 3 has no interface number 2
[  569.024273][   T10] usb 9-1: config 3 interface 163 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  569.035486][   T10] usb 9-1: config 3 interface 163 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  569.047798][   T10] usb 9-1: config 3 interface 163 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  569.059707][   T10] usb 9-1: config 3 interface 129 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  569.072762][   T10] usb 9-1: config 3 interface 129 has no altsetting 0
[  569.082222][   T10] usb 9-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=b0.35
[  569.091593][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.100207][   T10] usb 9-1: Product: syz
[  569.104431][   T10] usb 9-1: Manufacturer: syz
[  569.109150][   T10] usb 9-1: SerialNumber: syz
[  569.151562][ T5947] usb 1-1: new high-speed USB device number 97 using dummy_hcd
[  569.311288][ T5947] usb 1-1: Using ep0 maxpacket: 8
[  569.318150][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.332764][ T5947] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.342890][ T5947] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  569.358554][ T5947] usb 1-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  569.367895][ T5947] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.380509][ T5947] usb 1-1: config 0 descriptor??
[  569.575808][T19810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.586018][T19810] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  569.602832][   T10] usb 9-1: bad CDC descriptors
[  569.615784][   T10] hub 9-1:3.24: Invalid hub with more than one config or interface
[  569.625144][   T10] hub 9-1:3.24: probe with driver hub failed with error -22
[  569.644122][   T10] usb 9-1: USB disconnect, device number 23
[  569.832050][T19832] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2398'.
[  569.844434][T19832] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2398'.
[  569.863002][ T5947] usbhid 1-1:0.0: can't add hid device: -71
[  569.869827][ T5947] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  569.880831][ T5947] usb 1-1: USB disconnect, device number 97
[  570.442449][T19876] Oops: general protection fault, probably for non-canonical address 0xfbd5a5d5a0000003: 0000 [#1] SMP KASAN PTI
[  570.454407][T19876] KASAN: maybe wild-memory-access in range [0xdead4ead00000018-0xdead4ead0000001f]
[  570.463720][T19876] CPU: 1 UID: 0 PID: 19876 Comm: syz.0.2401 Not tainted syzkaller #0 PREEMPT(full) 
[  570.473106][T19876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  570.483182][T19876] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0
[  570.489192][T19876] Code: 80 3c 2f 00 74 08 48 89 df e8 44 13 ea f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 19 13 ea f6 4d 8b 2c 24 49 83 c5
[  570.508820][T19876] RSP: 0018:ffffc9000460ef40 EFLAGS: 00010a06
[  570.514911][T19876] RAX: 1bd5a9d5a0000003 RBX: ffff88807f740648 RCX: ffff888025ef9e40
[  570.522907][T19876] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  570.530889][T19876] RBP: ffffc9000460f2b0 R08: ffff88807f74005f R09: 1ffff1100fee800b
[  570.538878][T19876] R10: dffffc0000000000 R11: ffffed100fee800c R12: dead4ead00000018
[  570.546865][T19876] R13: dffffc0000000000 R14: ffff88807f740000 R15: 1ffff1100fee80c9
[  570.554850][T19876] FS:  00007efca85b96c0(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000
[  570.563797][T19876] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  570.570392][T19876] CR2: 000020000000e000 CR3: 0000000065944000 CR4: 00000000003526f0
[  570.578410][T19876] Call Trace:
[  570.581698][T19876]  <TASK>
[  570.584647][T19876]  ? __pfx_smc_diag_dump_proto+0x10/0x10
[  570.590296][T19876]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[  570.595865][T19876]  ? __lruvec_stat_mod_folio+0x6f/0x2e0
[  570.601431][T19876]  ? __phys_addr+0xd3/0x180
[  570.605988][T19876]  ? __kasan_kmalloc_large+0x85/0xa0
[  570.611295][T19876]  ? rcu_is_watching+0x15/0xb0
[  570.616079][T19876]  ? rcu_is_watching+0x15/0xb0
[  570.620862][T19876]  ? trace_kmalloc+0x1f/0xd0
[  570.625465][T19876]  ? __kmalloc_node_track_caller_noprof+0x587/0x800
[  570.632065][T19876]  ? __alloc_skb+0x142/0x2d0
[  570.636669][T19876]  ? __build_skb_around+0x262/0x3f0
[  570.641886][T19876]  smc_diag_dump+0x59/0xa0
[  570.646337][T19876]  netlink_dump+0x6e4/0xe90
[  570.650860][T19876]  ? __pfx_netlink_dump+0x10/0x10
[  570.655898][T19876]  ? __netlink_lookup+0x752/0x810
[  570.660945][T19876]  ? netlink_lookup+0x30/0x200
[  570.665721][T19876]  ? netlink_lookup+0x30/0x200
[  570.670502][T19876]  ? netlink_lookup+0x30/0x200
[  570.675284][T19876]  __netlink_dump_start+0x5cb/0x7e0
[  570.680502][T19876]  smc_diag_handler_dump+0x178/0x210
[  570.685800][T19876]  ? __pfx_smc_diag_handler_dump+0x10/0x10
[  570.691642][T19876]  ? __pfx_smc_diag_dump+0x10/0x10
[  570.696765][T19876]  ? sock_diag_lock_handler+0x19/0x290
[  570.702239][T19876]  ? sock_diag_lock_handler+0x19/0x290
[  570.707715][T19876]  sock_diag_rcv_msg+0x4cc/0x600
[  570.712669][T19876]  netlink_rcv_skb+0x208/0x470
[  570.717451][T19876]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[  570.722927][T19876]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  570.728241][T19876]  ? netlink_deliver_tap+0x2e/0x1b0
[  570.733461][T19876]  netlink_unicast+0x82f/0x9e0
[  570.738250][T19876]  ? __pfx_netlink_unicast+0x10/0x10
[  570.743552][T19876]  ? netlink_sendmsg+0x642/0xb30
[  570.748502][T19876]  ? skb_put+0x11b/0x210
[  570.752766][T19876]  netlink_sendmsg+0x805/0xb30
[  570.757548][T19876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  570.762849][T19876]  ? aa_sock_msg_perm+0xf1/0x1d0
[  570.767807][T19876]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  570.773109][T19876]  ? __pfx_netlink_sendmsg+0x10/0x10
[  570.778414][T19876]  __sock_sendmsg+0x21c/0x270
[  570.783111][T19876]  ____sys_sendmsg+0x505/0x830
[  570.787892][T19876]  ? __pfx_____sys_sendmsg+0x10/0x10
[  570.793196][T19876]  ? import_iovec+0x74/0xa0
[  570.797713][T19876]  ___sys_sendmsg+0x21f/0x2a0
[  570.802410][T19876]  ? __pfx____sys_sendmsg+0x10/0x10
[  570.807644][T19876]  ? __fget_files+0x2a/0x420
[  570.812259][T19876]  ? __fget_files+0x3a0/0x420
[  570.816966][T19876]  __x64_sys_sendmsg+0x19b/0x260
[  570.821928][T19876]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  570.827415][T19876]  ? do_syscall_64+0xbe/0xfa0
[  570.832113][T19876]  do_syscall_64+0xfa/0xfa0
[  570.836630][T19876]  ? lockdep_hardirqs_on+0x9c/0x150
[  570.841844][T19876]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.847956][T19876]  ? clear_bhb_loop+0x60/0xb0
[  570.852647][T19876]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.858553][T19876] RIP: 0033:0x7efca778eba9
[  570.862993][T19876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  570.882618][T19876] RSP: 002b:00007efca85b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  570.891136][T19876] RAX: ffffffffffffffda RBX: 00007efca79d6090 RCX: 00007efca778eba9
[  570.899123][T19876] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 000000000000000a
[  570.907108][T19876] RBP: 00007efca7811e19 R08: 0000000000000000 R09: 0000000000000000
[  570.915113][T19876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  570.923093][T19876] R13: 00007efca79d6128 R14: 00007efca79d6090 R15: 00007fff19b147b8
[  570.931085][T19876]  </TASK>
[  570.934126][T19876] Modules linked in:
[  570.939066][T19876] ---[ end trace 0000000000000000 ]---
[  570.944555][T19876] RIP: 0010:smc_diag_dump_proto+0x4c8/0x1ff0
[  570.951941][T19876] Code: 80 3c 2f 00 74 08 48 89 df e8 44 13 ea f6 4c 8b 23 4d 85 e4 0f 84 26 02 00 00 48 89 5c 24 38 49 83 c4 18 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 19 13 ea f6 4d 8b 2c 24 49 83 c5
[  570.971660][T19876] RSP: 0018:ffffc9000460ef40 EFLAGS: 00010a06
[  570.977813][T19876] RAX: 1bd5a9d5a0000003 RBX: ffff88807f740648 RCX: ffff888025ef9e40
[  570.985844][T19876] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000
[  570.993855][T19876] RBP: ffffc9000460f2b0 R08: ffff88807f74005f R09: 1ffff1100fee800b
[  571.001865][T19876] R10: dffffc0000000000 R11: ffffed100fee800c R12: dead4ead00000018
[  571.009850][T19876] R13: dffffc0000000000 R14: ffff88807f740000 R15: 1ffff1100fee80c9
[  571.018244][T19876] FS:  00007efca85b96c0(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000
[  571.027494][T19876] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  571.034150][T19876] CR2: 000020000000e000 CR3: 0000000065944000 CR4: 00000000003526f0
[  571.042146][T19876] Kernel panic - not syncing: Fatal exception
[  571.048575][T19876] Kernel Offset: disabled
[  571.052908][T19876] Rebooting in 86400 seconds..