last executing test programs:

2m34.347162033s ago: executing program 0 (id=585):
socket$inet6_mptcp(0xa, 0x1, 0x106)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

2m33.72680799s ago: executing program 0 (id=587):
r0 = syz_open_dev$video(&(0x7f0000000000), 0xd, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x0, 0x1, 0x5}}) (async)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x1, [0x0]}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r4=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x3, r4}, 0xc)

2m33.531584898s ago: executing program 0 (id=589):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32)
fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) (async, rerun: 32)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)

2m30.262151046s ago: executing program 0 (id=597):
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
kexec_load(0x0, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xff}, 0x1c)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0xc}, 0x1b)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x2)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r2, &(0x7f0000000100)="11e5a68e291a6f297bca1e72499a1c0b73c1486bc5cd08a7132b5dc14cefffc62d", 0x21, 0x40, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10)
lsm_get_self_attr(0x65, 0x0, &(0x7f0000001280), 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = syz_open_dev$sg(&(0x7f0000000280), 0xfffffffffffffffa, 0x109202)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[])
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r6}}, 0x18)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1)
ioctl$TCFLSH(r4, 0x5608, 0x1)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)

2m26.312694988s ago: executing program 0 (id=612):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x64, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0xbc}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, 0x0, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x81, 0x83, 0x1, {0x22, 0x43a}}}}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
sigaltstack(0x0, &(0x7f00000002c0)={0x0})
sigaltstack(&(0x7f0000000040)={&(0x7f00000001c0)=""/77, 0x80000002, 0x4d}, &(0x7f0000000240)={&(0x7f00000000c0)=""/11, 0x0, 0xb})
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000308010200000000000000000700000714000480080005400000000608000440fffffff90500030084000052"], 0x30}}, 0xc0)

2m23.173386179s ago: executing program 0 (id=622):
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
socket$inet6(0xa, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m8.106686723s ago: executing program 32 (id=622):
open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0)
syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
socket$inet6(0xa, 0x80002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x29, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

58.138653491s ago: executing program 5 (id=909):
gettid() (async)
r0 = gettid()
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r1, &(0x7f0000000080)="99", 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
syz_open_procfs(r0, &(0x7f0000000100)='clear_refs\x00') (async)
r2 = syz_open_procfs(r0, &(0x7f0000000100)='clear_refs\x00')
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1)
socket$netlink(0x10, 0x3, 0xf)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$alg(0x26, 0x5, 0x0)
socket$unix(0x1, 0x2, 0x0)
write$snddsp(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000140)=0xfff) (async)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, &(0x7f0000000140)=0xfff)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0)
epoll_create(0x208202) (async)
epoll_create(0x208202)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r6, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0xffff43a0, 0x1, 0xfffffffe, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x9004)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) (async)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000240)) (async)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000240))

57.885479758s ago: executing program 5 (id=910):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x6)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00')

57.7191187s ago: executing program 5 (id=911):
epoll_create(0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "0097683d856f1ea0e8ae7a8600", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0ff00", "0000efffffffffffbfff00"]})
ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x63, 0xfffffffffffffff7, 0x2, 0x3, 0x2, 0x6, "0b0909d70c5a4ece54e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0xe, 0x40, 0x4})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffff000000000000000000000000000000000000000000000002000000000000000000000000000200"/110], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e00000020000000003000000000000000000000000000000000000000000000000000000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000040000000000000000000000000000000000000000000000000000000000000101000000000000000000000010000000000000b56b6e000000010000000000"], 0xb8}}, 0x10000000)

55.861543939s ago: executing program 5 (id=918):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000240)={0x20, 0x0, 0xe4, {0xe4, 0x11, "f88c4b3110646262c982abc60b11cdf456bf61af38d7a50349107f2f42dbbecf875c0b5ee4b6dfa827dc3eb8746a015dbadd58cf0c492451ad60484dd64788cd1e6c9fa93020cbea2d70235036167cfc7c88d2136cff4d1b1826c390fd5be841fd2847de373bae6af030515408813baa7267f9dbe2af79f7b3d2f22c45af8eec5a011798a89bbdb498aa3f7dbc5bc84960a2aa6e33ee9fd9dbed0a48d9ac350555781a33cf617f0b99352fb0c9198b870c8df0dfcd73b4256390cbeebd400f939ecd4652aaf258cb5a0894e06205bbac3af484103055cf542079be85de9e8049aa0b"}}, &(0x7f00000008c0)=ANY=[@ANYBLOB="00030400000004032904ff1171737bf3645de4ce10e39667a4e634c5b90a2476a460d56bca4b92400ab5dabfd6fc3b7e9528cd375f70116499065285915d2f739425f504218decafd5d462"], &(0x7f0000000140)={0x0, 0xf, 0x52, {0x5, 0xf, 0x52, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "87819ea433893c42847d0aaeebf268c7"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0xd, 0x8, 0x1a59}, @generic={0x11, 0x10, 0xa, "8cfb9b808c7310caa3ad2164fb57"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x5c, 0x7f, 0x8, 0xa8}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x8}]}}, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x2, 0x8, 0x6, "88af63d3", "2e92bb68"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x4, 0x7, 0xfb, 0x4, 0x7}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x14, 0x91, "b409f937d2afc71e163d57c493ab6afabc0059472402ddd935dbb4e69d8b5badc12b1944a831abaf083a7fa483caa6462108b6e9d3a2d002dd57dc3002934ba64a9dd81f423f56a0e3a8cf66d137531867e13f4b7054be31cf2596a0c40f407359d50e2c80ba45521a352d85f17428c92080f9b5c7b4a40a401c88bb981b3c3438bc4ad76eff98c4fa225dd7cf5a7bf791"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0xe0, 0x21, [0xff00]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0xf664}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0xf0}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "36a0"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x9}, &(0x7f0000000640)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000680)={0x40, 0x17, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "a5ff"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x1000}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x9}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0xf}})
r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x88000)
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, 0x0)

53.716551281s ago: executing program 5 (id=928):
epoll_create(0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "0097683d856f1ea0e8ae7a8600", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0ff00", "0000efffffffffffbfff00"]})
ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x63, 0xfffffffffffffff7, 0x2, 0x3, 0x2, 0x6, "0b0909d70c5a4ece54e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0xe, 0x40, 0x4})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffff000000000000000000000000000000000000000000000002000000000000000000000000000200"/110], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e00000020000000000000300000000000000000000000000000000000000000000000000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000040000000000000000000000000000000000000000000000000000000000000101000000000000000000000010000000000000b56b6e000000010000000000"], 0xb8}}, 0x10000000)

50.773983235s ago: executing program 5 (id=934):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404882, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000040))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x9000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0f005b05b805000000b9070000000f01d936673e260f01ca9a4f000000d50066baf80cb8e6628f83ef66bafc0c66b8000066ef64f3f3d043b1c4c28d0144390466b864000f00d08fc96891c10f01c8", 0x4f}], 0x1, 0x1a, &(0x7f0000000180)=[@cstype3], 0x1)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', <r5=>0x0, 0x7800, 0x7800, 0x46d, 0x3, {{0x15, 0x4, 0x2, 0x4, 0x54, 0x64, 0x0, 0x0, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}, {[@noop, @timestamp_prespec={0x44, 0x34, 0xf5, 0x3, 0x4, [{@remote, 0x400000}, {@private=0xa010102, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x570e}, {@broadcast, 0xfffffffa}, {@multicast1}, {@multicast1, 0x7}]}, @ssrr={0x89, 0xb, 0xd6, [@dev={0xac, 0x14, 0x14, 0x40}, @remote]}]}}}}})
r6 = getuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@private0, 0x4e22, 0x1, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x89, r5, r6}, {0x0, 0x8, 0x4, 0x100000001, 0x4, 0x3, 0xf2f7, 0xe3}, {0xfffffffffffffff7, 0x80000000, 0x9, 0x4}, 0xffff, 0x6e6bb5, 0x1, 0x0, 0x3}, {{@in6=@private0, 0x4d3, 0xff}, 0xa, @in=@remote, 0x34ff, 0x3, 0x0, 0x6, 0x80000001, 0x9, 0x6}}, 0xe8)
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0xb, 0x202)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000003c0)=@usbdevfs_disconnect={0xfffffff8})
r8 = socket$inet6_sctp(0xa, 0x4, 0x84)
r9 = memfd_secret(0x0)
io_uring_enter(r9, 0x1d33, 0xcd08, 0x62, &(0x7f0000000400)={[0x9]}, 0x8)
bind$l2tp6(r4, &(0x7f0000000440)={0xa, 0x0, 0x6000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3, 0x3}, 0x20)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r9)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)={0x39c, r10, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x623, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x104, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x2, 0x12, 0xc, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x810c}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5e73}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x26c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x110, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x7}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x8}, {0x2, 0x1}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0x6}, {}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x3}, {0x7, 0x6}, {0x5}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x1}, {0x7}, {0x6, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x5}, {0x3, 0x6}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x3}, {0x4}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x7}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x7}, {0x4, 0x8}, {0x0, 0x2}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x3}, {0x2, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x4}, {0x4, 0x9}, {0x5, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x7}, {}, {}, {0x1, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5ce9, 0x401, 0x1, 0xb, 0x4, 0x8001, 0xd77]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x8}, {0x0, 0x9}, {0x7, 0x3}, {0x3, 0xa}, {0x4, 0x2}, {0x6, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x5, 0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x7}, {0x5}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x2}, {0x0, 0x3}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x5, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x9}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xa, 0x60, 0x12, 0x16, 0x24, 0x18, 0x24, 0x4, 0x9, 0x12, 0x30, 0xb, 0x18, 0x4, 0x6c, 0x9, 0x3, 0x9, 0x6, 0x18, 0x36, 0x60, 0xb, 0x48, 0x3, 0x5d, 0x9, 0x60, 0x30, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x7, 0x7, 0x579, 0x2, 0xece, 0x5]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x7f, 0x0, 0x6, 0x5, 0x1, 0x5]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xce, 0xd, 0x1, 0x5, 0xb, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8, 0xf1, 0x1, 0x9, 0x50e4, 0xfffb]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x24, 0x0, 0x16, 0x0, 0x3, 0x48, 0x3, 0x7, 0xb, 0x12, 0x3, 0x12, 0x0, 0x0, 0x78, 0x60, 0x12, 0x1b, 0x1b, 0x6, 0x36]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x9, 0x5, 0x9, 0x10, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000)
read$alg(r9, &(0x7f0000000a80)=""/175, 0xaf)
syz_open_dev$loop(&(0x7f0000000b40), 0x5, 0x604000)
pipe(&(0x7f0000000b80)={<r12=>0xffffffffffffffff})
setfsuid(0xee00)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r12)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r13, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r14, 0x8, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x88c1}, 0x1)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000d40)={0xa3, 0x0, &(0x7f0000000d00)})

35.387338879s ago: executing program 33 (id=934):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x404882, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000040))
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x37)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x9000, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x32)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0f005b05b805000000b9070000000f01d936673e260f01ca9a4f000000d50066baf80cb8e6628f83ef66bafc0c66b8000066ef64f3f3d043b1c4c28d0144390466b864000f00d08fc96891c10f01c8", 0x4f}], 0x1, 0x1a, &(0x7f0000000180)=[@cstype3], 0x1)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', <r5=>0x0, 0x7800, 0x7800, 0x46d, 0x3, {{0x15, 0x4, 0x2, 0x4, 0x54, 0x64, 0x0, 0x0, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x35}, {[@noop, @timestamp_prespec={0x44, 0x34, 0xf5, 0x3, 0x4, [{@remote, 0x400000}, {@private=0xa010102, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x570e}, {@broadcast, 0xfffffffa}, {@multicast1}, {@multicast1, 0x7}]}, @ssrr={0x89, 0xb, 0xd6, [@dev={0xac, 0x14, 0x14, 0x40}, @remote]}]}}}}})
r6 = getuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@private0, 0x4e22, 0x1, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x89, r5, r6}, {0x0, 0x8, 0x4, 0x100000001, 0x4, 0x3, 0xf2f7, 0xe3}, {0xfffffffffffffff7, 0x80000000, 0x9, 0x4}, 0xffff, 0x6e6bb5, 0x1, 0x0, 0x3}, {{@in6=@private0, 0x4d3, 0xff}, 0xa, @in=@remote, 0x34ff, 0x3, 0x0, 0x6, 0x80000001, 0x9, 0x6}}, 0xe8)
mprotect(&(0x7f0000ff2000/0x4000)=nil, 0x4000, 0x0)
r7 = syz_open_dev$usbfs(&(0x7f0000000380), 0xb, 0x202)
ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000003c0)=@usbdevfs_disconnect={0xfffffff8})
r8 = socket$inet6_sctp(0xa, 0x4, 0x84)
r9 = memfd_secret(0x0)
io_uring_enter(r9, 0x1d33, 0xcd08, 0x62, &(0x7f0000000400)={[0x9]}, 0x8)
bind$l2tp6(r4, &(0x7f0000000440)={0xa, 0x0, 0x6000000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3, 0x3}, 0x20)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r9)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r10, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x73}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000a40)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)={0x39c, r10, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x623, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x104, 0x11d, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2c, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x12, 0x2, 0x12, 0xc, 0x18]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcb}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x810c}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7ff}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5e73}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x26c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x250, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x60}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x28}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x214, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x110, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3e, 0x2, [{0x1}, {0x0, 0x2}, {0x2, 0x1}, {0x5, 0x7}, {0x5}, {0x1, 0x9}, {0x0, 0x4}, {0x3, 0x1}, {0x4, 0x4}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x7}, {0x0, 0x3}, {0x5, 0xa}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x9}, {0x3, 0x8}, {0x2, 0x1}, {0x3, 0x5}, {0x7, 0x7}, {0x6, 0x5}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x5, 0x6}, {}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x9}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x7, 0xa}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x1, 0x9}, {0x3, 0xa}, {0x3, 0x2}, {0x3}, {0x7, 0x6}, {0x5}, {0x2, 0x4}, {0x4, 0x2}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x3, 0x6}, {0x0, 0x3}, {0x7, 0x1}, {0x7}, {0x6, 0x8}, {0x4, 0x3}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x9}, {0x6, 0x6}, {0x4, 0x1}, {}, {0x6, 0x2}, {0x1, 0x1}, {0x1, 0x2}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0x5}, {0x3, 0x6}, {0x7, 0x3}, {0x6, 0x7}, {0x4, 0x6}, {0x0, 0x4}, {0x6, 0xa}, {0x0, 0x9}, {0x3}, {0x4}, {0x4, 0x3}, {0x0, 0x5}, {0x4, 0x8}, {0x1, 0x4}, {0x6, 0xa}, {0x1, 0x4}, {0x5, 0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x2}, {0x2, 0x3}, {0x7}, {0x1, 0xa}, {0x0, 0x8}, {0x2, 0xa}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x0, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x7}, {0x4, 0x8}, {0x0, 0x2}, {0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x8}, {0x3}, {0x2, 0xa}, {0x4, 0x5}, {0x4, 0x7}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0x9}, {0x5, 0x4}, {0x4, 0x9}, {0x5, 0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x9}, {0x1, 0xa}, {0x0, 0x3}, {0x6, 0x2}, {0x0, 0x5}, {0x6, 0x5}, {0x6, 0x5}, {0x3, 0x9}, {0x4, 0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x0, 0x7}, {}, {}, {0x1, 0x8}, {0x5, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x5ce9, 0x401, 0x1, 0xb, 0x4, 0x8001, 0xd77]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x8}, {0x0, 0x9}, {0x7, 0x3}, {0x3, 0xa}, {0x4, 0x2}, {0x6, 0x3}, {0x5, 0x7}, {0x1, 0x9}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x7}, {0x4, 0x7}, {0x5, 0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x7}, {0x1, 0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x6, 0x4}, {0x7, 0x7}, {0x5}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x1}, {0x7, 0x9}, {0x7, 0x1}, {0x0, 0x7}, {0x1, 0x3}, {0x7, 0x1}, {0x5, 0x2}, {0x0, 0x3}, {0x4, 0x5}, {0x0, 0x7}, {0x4, 0x2}, {0x1, 0x2}, {0x1, 0x6}, {0x5, 0x2}, {0x5, 0x6}, {0x0, 0xa}, {0x3, 0x7}, {0x3, 0x1}, {0x3, 0x7}, {0x5}, {0x1, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x2, 0x2}, {0x2, 0x9}, {0x6, 0x8}, {0x7, 0x5}, {0x5, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xa, 0x60, 0x12, 0x16, 0x24, 0x18, 0x24, 0x4, 0x9, 0x12, 0x30, 0xb, 0x18, 0x4, 0x6c, 0x9, 0x3, 0x9, 0x6, 0x18, 0x36, 0x60, 0xb, 0x48, 0x3, 0x5d, 0x9, 0x60, 0x30, 0x16]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x7, 0x7, 0x579, 0x2, 0xece, 0x5]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x5, 0x7f, 0x0, 0x6, 0x5, 0x1, 0x5]}}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xce, 0xd, 0x1, 0x5, 0xb, 0x0, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x3, 0x8, 0xf1, 0x1, 0x9, 0x50e4, 0xfffb]}}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x3}, {0x5, 0x9}, {0x6}, {0x6, 0x1}]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xc, 0x24, 0x0, 0x16, 0x0, 0x3, 0x48, 0x3, 0x7, 0xb, 0x12, 0x3, 0x12, 0x0, 0x0, 0x78, 0x60, 0x12, 0x1b, 0x1b, 0x6, 0x36]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x9, 0x5, 0x9, 0x10, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0xd, 0x2, [{0x1, 0x4}, {0x6, 0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x2, 0x1}, {0x2, 0x5}, {0x1, 0x8}, {0x6, 0x9}, {0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x4}]}, 0x39c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000000)
read$alg(r9, &(0x7f0000000a80)=""/175, 0xaf)
syz_open_dev$loop(&(0x7f0000000b40), 0x5, 0x604000)
pipe(&(0x7f0000000b80)={<r12=>0xffffffffffffffff})
setfsuid(0xee00)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c00), r12)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r13, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x14, r14, 0x8, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x88c1}, 0x1)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000000d40)={0xa3, 0x0, &(0x7f0000000d00)})

13.837157628s ago: executing program 3 (id=1036):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0xffff66e5)
r1 = epoll_create1(0x0)
r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000780)={0x10000000})
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)

13.417292027s ago: executing program 2 (id=1039):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000000000000000000", @ANYRES32=r4], 0x20}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000004c0)=[{0x800000000}, {0x0, 0x0, 0x800}], 0x2, 0xbff, 0x1e, 0x0, 0xc, 0x6e})

13.017878666s ago: executing program 2 (id=1041):
syz_open_dev$loop(&(0x7f0000000100), 0xf01b, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
timer_create(0x3, 0x0, &(0x7f00000001c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x24e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x3, 0x9, 0x8003, 0x0, 0x5, 0x20000000000001, 0xfffffe0000000001, 0x0, 0xffffbfff}, 0x0)
syz_open_dev$vim2m(0x0, 0x3, 0x2)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x880)
r3 = socket(0x10, 0x3, 0xa)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'bond0\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4)
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x2, 0x4, 0xfff}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0x14, &(0x7f0000000500)=ANY=[@ANYRESHEX=r3, @ANYRES8=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018000000"], &(0x7f0000000040)='GPL\x00', 0xfffffff7, 0x1000, &(0x7f0000001b00)=""/4096, 0x41100, 0x92b2e87381ea2ffc, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000140)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x5, 0x6, 0x8}, 0x10, 0x12c03, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000000000f124000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x22004043}, 0x880)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c00000400458074450180"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
futex(0x0, 0x204, 0x2, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x604000, 0x0)
r8 = getpgid(0xffffffffffffffff)
sched_setattr(r8, &(0x7f0000000080)={0x38, 0x0, 0x20, 0x4, 0xc454, 0x0, 0x5d0, 0x323, 0xaf, 0xa}, 0x0)

12.704824529s ago: executing program 3 (id=1042):
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @hoplimit={{0x14}}, @hopopts={{0x60, 0x29, 0x36, {0x5e, 0x8, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x3, 0x6, 0x0, 0xfff, [0x2, 0x966, 0x7]}}, @generic={0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x0, 0x70, 0x0, [@mcast2]}}}], 0xe8}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

12.183161622s ago: executing program 4 (id=1043):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r0 = fanotify_init(0x200, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000015000300000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffff54efdc11a3a8531400000000000000000200000000000000000a0000000000000000000000804000fcffffffffffff07000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff0000"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000080))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
socket(0x1e, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)

10.861303659s ago: executing program 4 (id=1045):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setsockopt$packet_tx_ring(r1, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0xfffffff7, 0x80, 0x5, 0x4e5, 0x7fff, 0x7ff, 0x2}, 0x1c)
recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket(0x15, 0x5, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
getsockopt(r4, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x2400}}], 0x34000, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0x1}}, 0x10)
recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880), &(0x7f0000000280))

10.052861509s ago: executing program 2 (id=1047):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x6c0, 0x0)
recvmsg$kcm(r1, &(0x7f0000000180)={&(0x7f0000000600)=@nfc_llcp, 0x80, &(0x7f0000000e00)=[{&(0x7f00000009c0)=""/243, 0xf3}, {&(0x7f0000000800)=""/24, 0x18}, {&(0x7f00000007c0)=""/21, 0x15}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000c40)=""/220, 0xdc}, {&(0x7f0000000800)}, {&(0x7f0000000940)=""/9, 0x9}, {&(0x7f0000000d40)=""/146, 0x92}, {&(0x7f0000000b80)=""/30, 0x1e}], 0x9, &(0x7f0000000400)=""/54, 0x36}, 0x3)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(rfc7539(ctr-twofish-3way,cmac-aes-ce),sha384-arm)\x00'}, 0xfffffffe)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x2b7, &(0x7f0000000740)={0x0, 0x7614, 0x1, 0x0, 0x193, 0x0, r3}, &(0x7f0000000480)=<r5=>0x0, &(0x7f0000000540)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0x21}, 0x1})
io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0)
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYRESDEC=r5], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x42, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f00000002c0), &(0x7f0000000240)=r8}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = syz_open_dev$vim2m(&(0x7f0000000140), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000100)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r9, 0x40045612, &(0x7f0000000000)=0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040)
r10 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed88", 0x3a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r11 = open(&(0x7f00000003c0)='./bus/file0\x00', 0x15127e, 0x42)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r11, 0x0)
fallocate(r11, 0x0, 0x0, 0x1000f4)
write(r11, &(0x7f0000000440)="96", 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendfile(r11, r11, 0x0, 0x800000a1e)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x8}, {&(0x7f0000000840)=""/90, 0x5a}], 0x2}, 0x63)
socket$nl_route(0x10, 0x3, 0x0)

9.601736814s ago: executing program 1 (id=1049):
r0 = mq_open(&(0x7f0000000000)='{\x00', 0x80, 0x2, &(0x7f0000000040)={0x6, 0x6, 0xffffffff, 0x1})
cachestat(r0, &(0x7f0000000080)={0x999c, 0xa}, &(0x7f00000000c0), 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(0xffffffffffffffff, 0xc040563d, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x3, {0x0, 0x3, 0x295, 0x9}})
r1 = signalfd(r0, &(0x7f0000000140)={[0x6]}, 0x8)
file_getattr(r1, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x18, 0x1000)
r2 = dup(r0)
ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000240)={0xa3, 0x0, &(0x7f0000000200)})
ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f00000002c0))
sendmsg$kcm(r2, &(0x7f0000001b80)={&(0x7f0000000380)=@vsock={0x28, 0x0, 0x2711, @hyper}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000400)="e8445e3bf22f54469a444c1a7a3aec033cce39e093c4d2a3b169870ee12bdbe0ce9404e74cecfc08b38373b73d1ed1215de7f42dc735d601075baed69237ef22bbfcb806c76cc05ea4b138fcb146fb74da166813bc46b155819a813756577e54294cf089b6bdc2d550e2bd2a7755335587c7223057cfe8978185ad263e4975ad6a9430f8c5ec0dd4960600f48463", 0x8e}, {&(0x7f00000004c0)="f380f5407f95d90e0dde83119168bee67cf75ecab7943e185c504a8286db9867a2d38eeedcc42300e0ce2a45c57ed4bd1c4eb77dbd380ffe4b65e630c71e3f041bd17ff90c5ece9abdae8dc81be8d90a1051d56c5d47cc6a81b2a07e3114", 0x5e}, {&(0x7f0000000540)="c72ed11f83dd97d9d3c8277cdbc23b5fa27c918e498213dc8f87b82a0e19243572e7b22a798aaf4132d852bb6b8d9e93c707aef90181ce6ac285099abb08818bca0bed26eccd524a464dcae2751dcf9bae6258bc89683f56afa0ce9b11e4d290b283065da5b2c1d9059077cb4aa52909c1ae9413924c69c49bd3ae873a8d05de511a41c5b6a46f252ad40015b3b2628c21efdceee48a33971cc42474a028578e96a0f6537b9e52169864585fdcaea056b53d09b722264b31d247", 0xba}, {&(0x7f0000000600)="d85310370e6a946e0cde1ee0a9c171355c969a11b81c0f36a135f32ff67e2e15eb079ffc2719096bcadce076f9484213a1f2ef7f3d06b899589d4eddc9122715da07f9785f3f24da73fb1045a3aedbf029ddb1d85856539b2b5fa0afb5137dd658201075a2d1773502d220b490c3d8b1f1e30596dce9586bf5d6af31d072dc39a6da1bd097a1028d4bdec1d129c1f851e22e9d1643cb073993ca48394467d5b2a571f399796ef53c2b6730937264c42af92830cca4b25aa440f60ef480cb64cf877462ea547267b644b5f0d27dfe896708210ac59d07", 0xd6}, {&(0x7f0000000700)="28e2dc67f3d137119a56b9e825b3efebe5e16eaefb13965b240f945d0db6b11f508a134aaa53d4b6c408697284ba0da4c1cc69299e95760024449aeecb2c69bfef9b4858fef5c7bc23b9cb698805a6b727e31a6d3ff3db80803897c21427dd02d1dcd4fa5c4a6b719573", 0x6a}, {&(0x7f0000000780)="9c92a8657bd1ef5b7be6fb56ff584217d462f2cf4c5bc8298a7457cbb03fc6351a779b0c2dcaf47a925293756ec7f25f0986334e3706e458e117b60cb4848fe8482706b3843cfaeb5ab644b72bf13cf5e8cef7cd91624f5bd62cf29cf6cbe7624ee4d06d9e1160c14398ed04146f2b08b7775008f6b84b9d72dd4f2f9a187ece2be5548128e7473b36f26d1b3b69984e74e885ae7876db17ba91e993ec15b3c4f40b20b56e30a74968ee07ac49b811a4ae1b2f4195823c4a0df769ecd6", 0xbd}, {&(0x7f0000000840)="b36873f9561b8b15f5f9fdc085b7fd85160776685ca017b0d8227cde765fdbb481d0d8e41970496eb2a7294844a8a7576c8fd94f43a73ee2e01b320f16d98d1590c5301969412c5a38f80cc74ab1ed77e0c2ddd938c3e9113253390c8e0dc2d685e04010aff51c395fe60bf2dd695cd66bbcad8f3b244822907e5a337196e1fbcbd36313c5314f276b830aa58bf18a4782a0c454904d4f220135bd3d2f8a3160d05bca081335102b4b0009a4754e223bfd7943711c5324de979cb9", 0xbb}, {&(0x7f0000000900)="40a23dba4970bc877b234e63c054c57601d73a21bb04b3f8592375dccc89ebd30b9bdbc0c6477fa238d4699cc086aa2fe1bafd87d569eeb3987cfb0e60fa46c32607e1da835fd408e7017406209ab87b44f560f35f81eed6e6efe57d6e60aada2a643c5abd673bd99fa018e14487a414661982ebf8bbc180641aa5c3427f022cce5a475875bbbdf2a352793c3f41a374e643c7af15ba2cb4eb802fefbd1531bd35a8848484a94261617e8833777ea67dd8ef4044d0dc", 0xb6}, {&(0x7f00000009c0)="11001b09c4bd46f2617d23e390a9a8633cfe11fe93ca34aa08d9cda43fe8bf8e9992dd187d8a4bae26d92a0540267fa9ca08fd8bbc9671a105c3c22a1663db5e9ba0a3cbbae33c833db39985713c10ceb6312b1127c56c15492970088177a1df5c3b046f75d8555f4afe41d43f40ade4b4d9b993f77a28c9f36ad38d58a9cffd0f015c39b65292922f9ecef5737a4f75db15e913746971cbde7e31e27a1820a559dfc335bab2374a70dbb574876835121ce15298aac943299e4cc10935dd17f159320175309d58d85a24a2a167ec68cacc09ac708c3814d17d7676990a3efa3db049e22816d43e3099ac3aa96cd6b7c9e17a2daf", 0xf4}, {&(0x7f0000000ac0)="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", 0x1000}], 0xa}, 0x4000800)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001bc0)={<r3=>0x0, 0x6, 0xfffffffd, 0xffffff7f}, &(0x7f0000001c00)=0x10)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001c40)={r3, @in={{0x2, 0x4e22, @multicast1}}, 0x2, 0x7, 0x6, 0xc, 0xa1, 0x401, 0x6}, 0x9c)
close_range(r2, r0, 0x2)
r4 = syz_open_dev$mouse(&(0x7f0000001d00), 0x2, 0x18000)
r5 = request_key(&(0x7f0000001e80)='syzkaller\x00', &(0x7f0000001ec0)={'syz', 0x0}, &(0x7f0000001f00)='\x00', 0xfffffffffffffffb)
add_key(&(0x7f0000001d40)='.dead\x00', &(0x7f0000001d80)={'syz', 0x1}, &(0x7f0000001dc0)="580595f62e533375033cb7c0953521a4e475b84407be6d4b7a3207877c9a71cca5a9a5e24c62d4469f4aec16b0f87c4895a170406c620c808a00849fb52ffd27a1006e8e08353adef6535c8a7016ad4392fa1dd1d9b4d718e89ef9588e424a333df76db8f7b304ba31c7fa1506d3df3c423040e268d7f60affd752baa801cd9f4b9552b6966e29b1a55d8f57f55e61f80eb4d77077ab258d378d5228300f361be46c191c10", 0xa5, r5)
unshare(0x4020000)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x50, r2, 0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r6, 0x0, &(0x7f0000001f40)=@IORING_OP_FSYNC={0x3, 0x28, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r7}})
r8 = io_uring_setup(0x37f1, &(0x7f0000001f80)={0x0, 0xc58d, 0x40, 0x1, 0x3b9, 0x0, r1})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r0, 0xff000)
r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002000), 0x2002, 0x0)
close_range(r1, r9, 0x0)
r10 = add_key(&(0x7f0000002040)='cifs.spnego\x00', &(0x7f0000002080)={'syz', 0x2}, &(0x7f00000020c0)='yq', 0x2, r5)
keyctl$update(0x2, r10, &(0x7f0000002100)="5e5bbe79", 0x4)
getdents64(r2, &(0x7f0000002140)=""/195, 0xc3)
r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002240), 0x400002, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, &(0x7f0000002280)={'raw\x00', 0x6d, "31c7f1f4fde20c81f3f9b1435a99ac964df923f77e3859a746edb957bba624ff6f5395bc6e253d64a08fb1c49d2da310a5b858b02091a7172dd209eabd926b9f94b6c97df5f3d4b029b949b7e097ca4a96940389157abb48463b207ff0425b81916fe314b79eda1e28c89259a8"}, &(0x7f0000002340)=0x91)
io_uring_register$IORING_REGISTER_EVENTFD(r8, 0x4, &(0x7f0000002380)=r1, 0x1)
ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f00000023c0)=0x400000)

9.456521849s ago: executing program 3 (id=1050):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket(0x840000000002, 0x2, 0xfa)
getsockname$inet(r2, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x22)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000001c0))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd", @ANYRES32=0x0, @ANYBLOB="15880400030000fc30000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000)
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r7=>0xffffffffffffffff, 0x1})
unshare(0x2000000)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b})
ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000240)={0x18, r4})
sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f00000002c0)=0x8)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800)

9.306319809s ago: executing program 1 (id=1052):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=[@flowinfo={{0x14, 0x29, 0x43, 0x1}}], 0x18}, 0x4010)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r2 = epoll_create1(0x0)
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000780)={0x10000000})
r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x101401)
syz_usb_disconnect(r4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000000c0), 0x4)
sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000640)=r5, 0x4)
setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000000), 0x4)
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0)
ioctl$EVIOCRMFF(r4, 0x550c, 0x0)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xd8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x3}}}, [@sec_ctx={0xc, 0x8, {0x8}}, @mark={0xc}]}, 0xd8}}, 0x0)
syz_usb_connect(0x3, 0x36, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x0)
write$P9_RMKNOD(r8, &(0x7f00000001c0)={0x14, 0x13, 0x1, {0x80, 0x4, 0x8}}, 0x14)
r9 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000240)={0x40000001})
fcntl$setpipe(r8, 0x407, 0x7)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)

8.783627711s ago: executing program 2 (id=1053):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
setsockopt$packet_tx_ring(r1, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xffffffff, 0xfffe0}, 0x1c)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req3={0xfffffff7, 0x80, 0x5, 0x4e5, 0x7fff, 0x7ff, 0x2}, 0x1c)
recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket(0x15, 0x5, 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, 0x0, 0x0)
getsockopt(r4, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000))
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r3, &(0x7f0000004380)=[{{0x0, 0x6000, 0x0}}], 0x34000, 0x0)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0x1}}, 0x10)
recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0)
syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f0000000880), &(0x7f0000000280))

7.740881678s ago: executing program 4 (id=1054):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000100010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x24004005}, 0x0)
syz_emit_ethernet(0xa7, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa170800924500009900000000fd019078ac1e0001ac1414aa03009078032400004f0000000000000003010000ac1414bbac141436865c00080000000ce256b28c4cdfb7fd41fe04000000fb520009789607675ca6380006e706d30af005cfa11c0510c600000000000000000000000a65807fe97612fe86001273bc2300ad9d19a30000000000000000060ac8f46976e79e56c7860c00000202359bdea14b9b616f51c3854064b9c33d13093d13caa68c8c3759bb3881d9cda963ed5bc95c91b2b4d58310cfcadeacf58b626c925f5bdf000000000000000000"], 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064d0, &(0x7f0000000140)={0x0})
r4 = socket(0x2, 0x805, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
fstat(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = syz_usb_connect$hid(0x3, 0x76, &(0x7f0000009f00)=ANY=[@ANYBLOB="12010000000000404355450000000000000109022400010000d0b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0xd, "389300"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4001, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r7, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB])
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@private1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xf7)
creat(&(0x7f0000000c00)='./file0\x00', 0x84)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r10, &(0x7f00000042c0)="0d9ec529eb18ec94a35378619cb10ff8c913f67139447b7ee0cca809e36c363ba1d3975a7446b70c6bdd99e2cff540eda7589ea89efeb498df568916036f0848ede5f089bf502b483c67c0432c34b98b1bc085a99e2981103397e0b0eed2ec64c1075798b56a42ea532091f5326c97622a47c53fbf42e71c3ed4b954c559424b49a13598c6c63ef65b62384b038b3e6e98ebecd178289831eaecd986a01c751e8cca7a57c009f2b5310fe9dd8a63b91c4b5b13d1c44d2b874b32ae3e961b9e96a511ffaa3ed20248dfb470460d305e44ffcd287b355380319fd31f7538c6d00de06ddb8f72b3a59c4699c94d7379e1e190c6dd7786e12096f9e963a038b6b4375535047135ecc07b16035ceeb27ed09d77f52b6eae27a03071e060b05bf347b9ba44a984e5db346d230ae9c5324ecfd4e7725bc5019a9f4d20237c820359d73b82f9c668ae71f6b85d5350140a16f988bb2b8010effb52636e0b728be1b1ed37c1b8868ec67edd52951dbf65b479aa25e92667a98c755d88995e6303a48a64317bd4b201fc6dea59381abfb5e0fb1035bbd32a97a6324b08f404fe3991879a0c6362032864031737941d9cc534697da61a43c8723ecd1062906b65c504d86383cdf9631f228372b13aee64f8ea8db00dffc37fa092ab5daeb7431dab37091c44f91c9202df60876a6e06ceee3e6a095406fe5cc1f83de1a4adf36fbef5a94a622132cc85e56fb53a9cff67bc69a24d8c259ccfe19b1925061f0cad95d6b4158c1394b8acfa9a8f52a566c6cb4e0b14dd30c85b309289a5f395e01d981735f6fce6ab30994643d70b2f322b7a233a339e621ea2eb00a0082a175c231b330a58062680546c28db8ff5b7e66c0e3df0a9b74ab72abfd241fcbe1e3d27a2d1eab44cf88180dcef4482c866324133f9e4780b891a7c5000b005cab0c131c225e944fd1aab5de9e8d17b8770b4472b6e4a13b6cce90ba152e5144acf74cd8a9821ce3eae72dc7ddc81b76482226098329c3a8ecb923822610aa0b086f44329522dd8f9ae355b4666d1a10911ef8e21377578b42fe6ee0b2a77917157488d6e0bb388951f80551dcaebf212b396d1f922aec595bd340390d310f6006c4b3efdd80838f39d25470db39d6205ba8f52bac634f8145a3c10ed007acc2f25c5dbfe911f18f44a0c57cee33725eb8c5f2d9112f91787c2c323b67b67d9d1f593d26430d77189d4678fd8d7c11c1f2d744ad59a03a8cffc52ee0293c90b00d61897c80184aa63fcf43c109b06af20c808035af0a0bf9cbe544681768f92a2ebe3b4458dd020fb0550822bc2f769631e00d63bd91e7100299bbc4ce53a35e993e24028dc5c81d46f5377d21f2f38a9688ed981044346b865161b68f3390a50c2e625052396cdb6637e9434904c63d8ca45aa2325626293cdd9cd0179b1d995be10281fa8d281db16320f520e42af268ff30dc2d8885aa3d9e7f294eadb4d827d195cd5d18632928f2153261345c231efd143288b881638b61dc5dab8114c1948d83b8ac4e278f131ec3eef4e87e43a36f4b41a699a741ef3a7cd4f0bc5dbd2dffb1d223a5c5b38b98e49092631a176d15c4f3c077d639726a3482bf2fdc73c2bdb09208aaf90bc64b5fee89d231bb1679de3e5d31662db2c5824ce9941f94500e5a11b8fe79da548efed8cc44e9bc1d5175dd77fc16f8219a83b83ccca2181bf411b0945312598817e08e5277530eccffff17d198613cc8c991349141ced56e79031ab6cb98f3f39e5f20bac76017083041a1ee99ca257d0e0cf95e59617139afb08cf0c6a607d3f2ac2b5d3f4394a4a063c9769bb884ec522d46138228c7e9b5c7ea5e3a6c70815b565ce15a13fd0a5deb28e710c15fe25c744b430b4f6482532fb96566381c56e12632cab5acb5e08d6f973003c96a7d81ff76966e0f93c83c462bfcef230939e48c4983bfed78f68b0f540d1fff2196cbd1f1c1a1c310ec10f5a2745407000bc6db1fcc8540282cc7e96cf5582c4eaf874a2fe6369534176429b7505eb0aade883260806be2d86a42e76b315a76e5f686ca669f49e1f9054a77b8eaff14a43e9a9801244e8e94ff50a17b60dee0122ea70819bae3375070466c7f202c4ea0fc0c9aaae50c43cb65febea224c2b554e937f67689b3e18ed543749a7ef0997a7a7530b918c4ef935137137e1ee7e6a8919fb76a8f008ddcc2d8b2e18f3eb90f7a13cf4f49170ccf50c75de82e92a5e2d1f311e59071ff202b6cae4d6243fc3787cb9fbd401938cc18dcf5620f8b8f74e9e3b13dcde85ef896f31f5a2458118addae77206ab1506882f91873b4828950a7b91ddae74888155a9c486c7c60492813ac0e33362dc4e21e00538e5b05b78271d82486a0d156d4a5a07085bb1cd74f5d63763f18648a489352b5d05107909fe54b5d332cde2900c82c150b11071e028eeb275cc9a9614f1eda4e4830b128870e732d473100c24152aff2aa1659daa65d7e9591ebfcae5dca4e84c9a0965a01668e59843ef4a093d9b01067a0ae9d09e3d810c2cb63600ee05b10fc8685e8cb150e2d6d75baecfb8762f7a7d131417eb0721e19e1d21f5adcc1e09489f06b81d91b48608107fc7b3853e214a3c786a9812113ccbcf09907506d0e9cd72c79793584b4fe06a18a627bd969f628a5936367961f1e7d117d03a8fabc85f5ecdd0ddcfae49aa293893a2e5ae376be11031abc0e05ff250b35926345b52f8d3dc02b7497f7513e759247353db9b8e493120e73981aef4c4d9747621537a089848754c14cda1cad18084274e98ea2bf7400ca846184e0e31a571f9bd770222b1038a4ce60dcf8fe9cca4d60048cc29c37c1345de992e9dc7128ef093c1ce80232a88a3da7ae8bc87120c5b1f405d5186141288998fed9e021cd0ad6b12b51c217849390be3ea00cbd6c755958140bfb9b2a2765ad1f51ac045fdc5c28ee5886b1436015b88bd90d19328f91394110b0d891678e63b63d6cc4d35279f6f616d7692c6fe177a79d80ae8f7e4ad5078d8d7096f3ee664dcdb2f634eba98f4788de1f5e34f32ef09e2f0aee4fdc5bec4bc4aeec5721ac3a2da1bf52da017c3312095403d50dcde39671242b610f11832773796557f71455376a7741ab242a9fc94464180bf224d5e8c79b462e3a816f6c08ab0f5503386d34ddfd808b4b8d5d333548d4b873923c6c297b2fa1abe433ec9264385c50dca40316c37ed85db382e7c853ba331c727043cb3345de9f89b1c804e98205eda3d6b6e042c9c41877d456dcb8f12663e6dc1ba809229536fbcc4c58d01a137eb80af8596dfc7b5fa7a044cd141238aa82e440526e55a28c4ed2f4b26157a0eebb4a77c5ab66fcce2602e1a70aea07e5e7e7e5321d58ad128a5ea6b574730037f24a7300e0ad6fc96bd18e03763bbbf21bd3c388aff1cc5ea13728ba2f8e1eb70148d2603e55bb01cce0763c2020b5627a0ccb35ae3a9b3df380e6d9800d9506219a90971a3b8bde1dae6a43fce2aaecbc026be8f4e9bd749e10c87ed7d78f92014342fa449eef28e7175548e5a8ec4fe7d31fc86737aee63ef40b54485380b6898161676f0d82f76113b12a529fbce4482dd278a90aa416077c677aea623ddb3761bc81527ab7e3d73a3b4c8c3e4352c7c083cee8953ebd972a83caed837587e8d7cf360f28ce6ca71de75c9174e8744ba1098513bb6c7fdc6a3c7c8e5870223d6cc0b18b5d6edea926d5376aeb85488d3712e8f67128f0d3fb2b42f82363a0d4c1c806ff283f6e4ddc10ce4a0803be66a247207d6606c7dd67cd293dada159016d7fd7e88c4df53d09bdd9fd9fa3c732da45fb92bdf6f442eda15edd97bf1928a7699008f0b482240a684ff5efef0cadbf1b4f16888650d59b2bdaeae0d1112a79c5522dd0933ccc16fed7cd0ccabe929f625de8947b3b1532dc04253cca988a1584df2b31492b19410d6f681d614eaa20029592c00c948a98973a9fba87f1397f8859ba543edeb5c0b0db92f65462a1103947d780b539433332d65bd1418bc00c9e815f73e0cc0aca5fcc9f95f707c455013a55a0c4a29093b05b94edc5b5284ec7ccf3ec091002b4229036c174e2927127f40769ece890612bbeb960d9392f442765a2ca8990c52ad7d4441e975a7cf079d139945f2b2a8a34f0e85d76cbc96efbb52cf8b5ae681234e14b6648244d41cfee2d9b189cd831cc2f31ae7e5f11aaaff1629f8c2cf73494ac38e58da7010dd986f8b6134ee0dabfdcb30617d15720cffbec7651f22253aea21696d2ece4fe026543ea2f3473e4c12e65dbb3cbf764ffa0b3a396382b9b7f0c24eaaf3495554b2319b66f3cabf01a8d6cfd1382d94ab71cd11eae2a42e4dc841d4a9732c395688d3377c8ccff7e3f88a3129855a5f41a7de6b6a9ac40a87c288f4821295edfc4f5b8fe5a1fc0162e9820205c809935cc6047e8a835c651be02fb41c21de30ac770d7a7f2108c6a3f1cf2649cac444f028a6ebf4db422cbbdb7fd0cb39109a3130ffae17810bb58f5c557c99670224c2678fa07f1064911e6c665c0d1c26cd2f40f7089789208a48eb339bb8885910e035b4b8c69b1c3ad79270ac6e70b963493a6628b90501822878cdfac866268d914d8af2814612b0198f9e4c6b48e739e414d61f34e2f69ff7cdc4fc7ffe45a64c5faf191ef6c4e31cecebe09a2f6a63d60926ebaa7e925ccea5c93e403c7ec0ee55423ce4893471440006d4c09c141e489dda5577f73b57ecfc764ee5bc1bc88f7866dc6a494e3ee560c956dc12ae51842030251f1cedf2caca15549d0bb4ee3bef03702197350cd7586b5916ef6a0abcb5f30548d22ce5d8c4dbd82030b8d7b5481c51676b7d14d35c20346c74dcc7d96ea0b13f890f755a219993e88739da8246283ebbd82eb1b15956b5ec16ad523768c19ceba9199f97d7bb43b85fa11349ff7fb89a97b463b34c584ae9e2af6c8f20ab528750a22ff6c2297e400065fbd9a4660ec2c658afff6db9b67070352d2aa5e6cfe534eeb5ff271575b828dfd7f537e3627a1a6419ed0c84297fc3d362a52f3860a2eb7ae0a50f06d3c68c4a1463ec331ead7af2dba792332218b04d5b585de1a471d296df6e10316852d50f211e07643f749a1d75410e66e47db40bfcefe4b708d0b2879a50ccbd85939b89fe4b905a6a89a2d5a4e28d18c048e66108a06d8b6a64ec5737b5ae283d914484167c8ac7dde7ec007aad1999854c4d6a0e5f887f99de3662610d5e8d49bac7d41d6fb7d90b4b04939638e2151ba67e75362aded50edfb7d9919b345b5b7df6a909193ce64b20470e3480c68bd764968f4d8a5779ffd9a35e58558272a214ae26a094360b9f2ec97c5e0a7693f4b7509b962cd8537e90ce7be70b54e9531e7295f894b94566df49c50c2265842392dff50e17ed3f7beb9ba4ad0520a73db1d8d3b39759e7fffcbf26517316bc74437fef944fc915ec24affc1a53748cfc883e3ddea9e25063ea8383b06f0d5c9db13a0ff335f52699226b391543060ae5e2c25b585b9efdd5ff9495a4873cac58b5feff5f08717b04e81bfea349accc58fcc6a6505de3aa6ff4985d9c38bb83e8daa663ccb356df3ed52343ed7723687e416816f987c565eae22c7548c1d6b56a5b6819583da0ddf92739f65e604e37b3275a6cb1252d4ef7a515c4b1e9068d714be80066bf0d422f1e4d2ce6f95c9eac081d6e4596a6a8e16a57b732b575b7de16f176ff0e34e84b293d3fd77fa30a7b7cf12a1edd54170e56bf7f2d40620ad56acbc5cc615556300ff9e95ce3dda93c8333f23f0d97a5da12a0fe58f95d6b911f614563d343ac6e4f9fee1d149c94fc75a97ac839b6d8d7b27c5efb870d2bfc6dbe6b688490b23597d83982d7858215c59011042b1957a0b386842621c72f89a9b524008794ffa0c179753ab48d0f73e5ff13624b3b90287edaf6a5367dcfe4094a21ffad3e881b428b77ccac6924d5bde9c781d4189654d8f29885fbde07e6334c6406dd3ece359c6ac7c6147f5c4906e56764e9980a669bfdddd9eb780e7f9988630d1eb098b3e4fd4c795f11441fb6d0ff7cf086eb291b1ec8d90092e1eaf9722ccdcd15408617cdb8c49043bf71a6ea0ee6b7e840344fbcd377b995bfb1faf22754fcb363f6c630501b619bbd87cc13d5df0948a176771d2d69236eb50dd313817d9687967e7d71f854db6bff803f4501d999dfe3da37ccfdf894a7914c4c113fa7a18c3468a52d646a5070614a6f02b7ff21c9f6927f5de55be85ba815f4bb9e29f26a94423c58338947c804e0627d69bc5a6e93fc5fe8cae851700253f2d494622c6127b4d77bf54a1ac27957234628cbe2fea1729ec53be7d90806d510ccddfd76fab1b9bf1207db8b05c3eaa88fa4c0a5db13cec9310f4e02c1d8114705446fd6649df3829aa12786b8d10b4540d8c1f1c8208c4b41998435e3fa1ec5199cb2d3d0c5c04c5e0b3ffd69112252106bb39333ff23b38d167a9b45ad1bdabf434c8695e2676d461b34c5f048e70b67a44d824baa090c8be13a22ef0d0970cc7a94ed4b77bfc3a40427c6c11abd2b415817243f6801d535a3adc9924a1671b645100e822a0c1876a37d9c9e230e3d762f1cfbb89a8b28255ba4cc5b46cb1635cf185578fa068b68bac93991982b48e7faacc09745a7e33bb12de6b25a2342a7e03cff06dde29b4d05de84e56c78fc6d9dcd180438da3136767d5846bfe7168faeac5b9434394bd747126c5c1ecc6621d10817ce9b6540433828a3bb8f6da0cd8f2b54a47cd5473f6bc3dc1234bd115a6890aa678d1bce7840d7a4559cda556740860079e46217c20e45ee59b8b7078d9b70cb6a249eb2e5e4071d044f456fb61649f261689b8d7a532afaf88eb30041242ce491fb7e654a1f06add370e2706f75c2fe1afe8e065804414c660ec4d96f496b1ad87592de8b7d04baa7ab142f580f262c64c57fce8ef933f18904f001809cfdf94eb679c9eced5d125b4f1d0064ca2ccf5eaf61bb7841bd408ae213deeb15d860f7ee7224b9d2dd38ee9f6c3fca6590335715c218db8f8c98e6339a6944817a1ce2e115ae984699861631b9893c143f594d6dde0895a0c7edb9912fe9cd8fd0765227b3963033306d15711387044bc373ac10d7be73cd80f1a79cf1ea0989ea9ae8a0dbbd1227bc33df652792a6bd95f1d21c6497c4c35b9a1eadc0217e322285a2eb832753aae74ef42fc983e58a126b7c23e4b0bac16f0de1eff7d41477bb25052f32cc9cc956ebd209d6b945b1fa9182857e180672a6be7edeb5234830668b1ea749d0a0dd3a244684d4dd76221c3bdf98c2f1eacb7a6dcccafd249b0ba2592c88790de40895799ea4dfb045cc2392dbb623bfe420b24e5a425b84a4b24d787a68bbec9db363ac4e9453df597f0224d8b7b21629e1989e53accbae97e189cf9b59ebf8bb89591fe3fda450af548ffc46eff98b5216e238a9246e2fb95810f8f4d89504633a6d223484a765b9e6e5497159b31c51fa6cc10641bafa81b10c5ab853f3136fa1b4334bcbde99cb4689f077ca3c29c2f1aca2a05762943073d5992aac4d9b0d411ba25905c34fd02b8eb7b9db375a6f6516446cc195eb55eda1e007e26328e9e2642a9c4e90c56440cc60a1db77713860a56820901b3022d55c621e9d54f759dd17fc5b59331c63cf30e07081bf0cdee6cc94ddfe8c6179e7ed86607d4ba7d5f1e97fbc1139b43ae5fd04c1c715f4600f028d0852a421d472b1b48e591b6edfebcd86be3db2caf967b06776096e14f0deffc9bb126ec329c49ada996b963e942d9c404967dc23bdbd0eee951b2879f2ef7ae224d4ff25edac4ddeb2c0b8e579af283e87c625d3fae5286fa855930e45207af7054763937a9247dc38e37e6dee2e325b617280846012e463707b6ccfa2fc399a66e534221a45626cd18c79d46f5c77c2d359e19ea870cd230709b5e33cd52fd43388ef91dea0a1e0df6c72688d9fd32bb67f489a3618604ef1dfa0d7f569d40cc68e39994e4edab4007c988998f59485ce4723c1eeb7c72f7e833418bab47735a91c7ab24e8555d2ccf3a812b6c634c0c3a68271ec8b536aaa442e056945feca6fb4e54d2cf60a0334f494b2bdb6fbd597de0ce9d2cf03333a0c7121e086aa4c657360fbfb60f3ce0fc0d90ff12b03464e8ff0e5e546ff79735c5c800a0f9b680a478c772f60173a760e280d8287681986038444f2103e2894d5809d062cfe8380e34bca86475da3d7634131c2a8cdc98c5927bc137db61f94eaf9a74f87cc85072c201766eae17fbd5b732859fb1b1c980b36e377aa41a95bca18ccea529420e742899af7b968c1fb9c0d181da9f86358dbeea877c3e9123a9289c362fa61d96c707ac94b427318a1e5f21078aa9d1fd7a52704e0d73e527f3ca65b7b459734dd30db5335c450f1dbcc1e4259d657d13b6d6b4adddc3d0eae034d1878cd0aa1825991d75f8e6b5b4c0d6d17e8ce709b19ff794a8ef856abdfac65cd13631f1b66b20f2ebf2f3122d18e03cbfff88206a5998fc3cb2b40634fcecdb8f5bdbfe044dbf169ccd2cd60f7bf033272f38f587943fcc75d2d65d9028c02891c8415706c2b2459b7a3c5cc82b0446088d3b3bcc033ad453136afd4ac4678320fc17288dbfa1c5180ad57508a2a298ed4ebc716ede34fded574d9779be5d56517d4dd40f197312390c488f46914b0927b13901ce70c1684801f2811168fab533998a1fdabbb6e683abfa021f6b80077f19455c34cecf5dbdb2fa6e3930eb5940cb14504050cc74249424310dff81116b8f2076b8ebece84c302e758fa90af5a1888aa8a5a2bff4aeb7ebd1c7a216bdbb84bf9c021caf3c8efbfdc5d3aede46381bcda372a5398c89868ad57287736fec2a7e8ed638974fde5875eafa506a6bd7f772d2b221f4bde4920fe0c56f8e0847e2a7e8387c64ddef4203d77a526c46d7871befe0c5f9128bd67319acd963fc040185aac4e7815f728bbd7ffd8f3d125e63320182f202fa9a52505be9585556a5d1308c118ccdf01978027cbace7ab339d6f53d15e795b7f3fedae4f86c3f257ed80ee634375dc2333ceed1ccaeab1b6be7a9611ff33d79dccdec2007558c06dfc06612d56d37882e5f1de340cf05f4fffbe1a5def6d045bc5bdaf633f07360f9028cedd103bf03fec8beb9fdbf8c5fc684d12efae1859c53e2cc3e2f508a9cd0410ec036648d3760dd591f7ae04e4cdd61a2566319c943f0b63d87e422dfe5c0d1edcb2dc515778a0d7bb2c93ced3b1435adbc51d3fdca9c13679397bc4490093d64869998d6a28bb862ead0fa411585289cc00dc199eac6c607b8a84123dad3be80dd8fd86aa202113131046336352235f34c05f5ea6d5265adda98edbbfd11d6839c5b1bfe4fad4e688558d633d4a281df44d9c0a35abd464e01f8ab01a1e272cc8cd155a40b8aca4c6b1dc894c0fdc02f15a8f67ce94c7f99b6fcc0e4a3a8a71365645ad7809d47bb26f46ed8bd02f6e8f3d277224f82f3d41695f367e343ac6d507413f4bdacf9e344a49156c4de36d68c075415f8004748055b38b8a4110f869fafcc59cdae5663eda72a05be365a50e98bfd4b00e35aef687afae7bd6622cdd725326776f6fb1476c8cf8c20a0e5223e2bea494a1bbe4e79b25a5e48ba34bc66a84ecc4a0aba98e74ca2b1f61893e61a29498d855a778a2a9ce7b7fcaa44b4aedcbd0e28d6c49bdb6776975bf69161f372b964e4288ce6a3b877c3126f90c4c9749d45b8c5c840983b035993e484a945be5fc9d2d1bd3f3de4e6de7bc74a7a07b13e9e82acc11db85454f1d928fe52ad42ca783fd20dd3e94471b498c2736af40d2a45ff74f9ef874639e33306daa8a667674571e2ed93a48f49b57e9e3382fa8090774bc795609ee510b6a1ca48d9833819cbe8ac77eeebb0e3b6c59ced2d1ab355264934ff1914a3f654249bba60a692dd36368b8a866b333320e57e9c7d3646c375696ff14e303780ffd7b957d89ccdf57823d2d1e158773c2075233dd2f331eafe3802da683c293eaa24cd8b63a7582ddb202cd6f8c837c74f823727641c7eb680fe51ce7f250adb34956e4cab17b8a5f10edf144c700e376c682dd46c8fc89830fee1a44fafe0a5a2e7581d5d16ad6267d1dc2d5be8547f9352d1591b42de94f2559b44a80038360c6394541a77d95b196558a479b609882fc597b9cbe285ad7c7a41133ed85c8ab6e6dec5bf70f9e787985512d48865022705098a6703b255a6f2b05b62fc7ab32e67f06d785ccb33fb348205a76939e6c2991486c5aae8ec1556b2f8e30ca445a4a495cbf2c6013042b8cea615e58899fccbbf1fc4f17a6dc37e46b17ada0be033dc67904fbd7903086d3417e423af64338426a84ca0c2a3252db62695f9cdf10ebc09b9da5747d30e7f4adfb374e1d2bb24542b0373b1fb897690b49fe24d8575ec9800f019c9c76459421c11f002989ac82c13c04a202cf7f9f38b053f9a680d4d5012887a11d25cad201df20a4eee6d2c0474055579ac729c7514a88b1675bbf6b773448c6c1a5ccd157f44f7e032a6b848f2e734d773f029e48fd13c90d41666f9bd4e9bea91950737b6e7502f9d2677938f240e3f905d6095bb0f8bbe961b99b2d025538c3888bfff8957e3592ee5b26a75399b59c697f59fcdfbbe3bcffb8777340875611bf75486d2378e68de771800bfffe0572fb36ca855ec5fc8cb90c76455773c36ec40b101fb30c48f8a8e775f5220e024b4da9dddc2fcf4da413e7c5db9e0567cbb5fad0c91d779a0939debd9247d3f7d8107fd986f73a9c9067e6594fabde0b9e887040cfbe7d31332f41259de57b38f33275597725392efea51f290b8e1b5c243ffd9eb4c0231600f9b4b204344736849d527156c4720a463bbe88fbbdc333099d949853d5c6fda98bcd35ad3f1fb1d5a7d00541a8a202c8590e35360bb9d25d6431476649e1898f901fad37975d6dce9833956e7a78d0306f533d4aa3c9676017c7abc7e1f8f2f117774a4f5beba55d1c3cd580fb18defccc349cce24e94a4cf1f4c6f45d783ee0167a55369c9b5e1eb6d0a836f3eb2354fad3cd771a9d777ff84c63120baee86ddc52b3e6817dce339ac9c240e75f3e2f77afbffbc1d54eb5936d045370ce3b77365c5320892dc7bc36e488019461d2e552969de9f25bd8de049d693be450c43c5d22d7569fc384e8d56ddb577c5f3c3471f5ba2998bc0c697a06b6d8ba5f2f7236e78aaed69b468e761a5f07145c0326ebb94f50aaa8c5666c92006d8d139036f981003933f8e2eba106a0e251fa9f5407544e44aedbbb271a3bf1c660a9cb8c74dbd0713aaebba2dd046af8b9428709646521d6bf387a92996b35748e1e67b602309b7da0fb642e89de19f550925f4db082ef7e9821ac4b2aee93c9cf791c086751c4cb4172608a4f903dc40727858046851529205b45786e294c17abf5e5f6bc730cbfb8fd977c5501a8140ac7984a267880b53cb94157be9ac157be1cf12d8a9e5612947772b734ed6ae30e548a3b2faecf94a7e03f86317f52ac797aefb957d2a29de8f8ced414ce22c800e0dc7e49d3672fca633248f3e68c00", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x1, {0x4, 0xf2a8, 0x0, {0x5, 0x0, 0x8, 0x80000001, 0x4, 0x1, 0x2, 0x35741062, 0x0, 0x8000, 0x9e7, 0xffffffffffffffff, 0x0, 0x3b, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chmod(&(0x7f0000000000)='./file0\x00', 0x100)
r11 = geteuid()
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000680)={0x0, <r12=>0x0}, &(0x7f00000006c0)=0xc)
setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_access\x00', &(0x7f0000000700)={{}, {0x1, 0x3}, [{0x2, 0x6, r7}, {0x2, 0x2, r9}, {0x2, 0x3, r11}, {0x2, 0x1, r12}], {}, [{0x8, 0x1}], {0x10, 0x1}}, 0x4c, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

6.040497001s ago: executing program 1 (id=1057):
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$netlink(0x10, 0x3, 0x4)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x0, 0x0, 0x1}) (async, rerun: 32)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x113680, 0x0) (async, rerun: 32)
write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async, rerun: 64)
r1 = syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x800, 0x0, 0x1bd}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0) (rerun: 64)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/216, 0xd8}], 0x1}) (async)
io_uring_enter(r1, 0x3c, 0x0, 0x1, 0x0, 0x1b)

5.448669925s ago: executing program 1 (id=1058):
epoll_create(0x5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60)
ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000040)={'\x00\f\x00', 0x0, 0x5, 0x2, 0x0, 0x9, "0097683d856f1ea0e8ae7a8600", "00004702", "0300", "97ad3700", ["fdffffff84a438dfc5d5c010", "d78cb8b0ff00", "0000efffffffffffbfff00"]})
ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x63, 0xfffffffffffffff7, 0x2, 0x3, 0x2, 0x6, "0b0909d70c5a4ece54e76d48f944c89a", 0x7, 0x80, 0x0, 0x99, 0xe, 0x40, 0x4})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00200033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffff000000000000000000000000000000000000000000000002000000000000000000000000000200"/110], 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001500010029bd700000000000e00000020000000000000000000300000000000000000000000000000000000000000000000000000a00100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000080000000000000000040000000000000000000000000000000000000000000000000000000000000101000000000000000000000010000000000000b56b6e000000010000000000"], 0xb8}}, 0x10000000)

5.312448735s ago: executing program 6 (id=1059):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="e52b0004000008"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="200801000000b498d787947174b7dd711ddd1ef2e5a1567544ab7e208d354bc2e2a71d5d6d92621af2401f7175cd8c60493007b888bb3bd3617208441e5467934e436c5176e68800463edbb799bc5ee706a1414b24b8830243b07773629e99c88b6c089afdcbe3d9323716eda4538a72ff99ea0594bd05c9ba7c28fc151d38"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0xb, 0x1, '\\'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) (async)
r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000040)}) (async)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000c00)={0x80000000, 0x0, 0x0}) (async)
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000240)={0x80000000, 0x0, &(0x7f00000001c0)}) (async)
r4 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x341283)
preadv2(r4, 0x0, 0x0, 0x7, 0x2, 0x9)

4.910655759s ago: executing program 2 (id=1060):
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x5}, 0x2c)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0)
read$dsp(0xffffffffffffffff, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0)
r3 = gettid()
prctl$PR_MCE_KILL(0x29, 0x1, 0x2)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000004cc0)=[{&(0x7f00000011c0)=ANY=[@ANYBLOB="041100002100000429bd7000fcdbdf25c20030805376e456a129fe270b6302ed8ab37b437409ae175c16608d4e04004a802829ee961ee3b19721fd5501a342cd1f9aa525e49430dfcafed6e03dbc3f9f27d3dedd7fcafa6cb29cebf485d32bf955bd902202401e33e4b2aaddd2d0c467ef8f38b1b80c534c0363af609c9369b23636e4592afc4f315fe69f18982762714775ae8e81b87daf5f775a618c437019afab0505ea21a829c2f563645d0efc6e8cd57287db49ec8eb4acd9960381245fd1105c93457b0400c88008001400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r3, @ANYBLOB="0800ed00", @ANYRES32=0x0, @ANYBLOB], 0x1104}, {&(0x7f0000002300)={0xfc, 0x2b, 0x200, 0x70bd25, 0x25dfdbfd, "", [@generic="c5739c8ce7947d98111cf557716e27808c7180db82dbfb7c4f36ad54bbc1440b215fca887b69baad43c037ecd5e984d8f6e564410b89e287e508ba889d51c257eb1e7fb0c70445caa0b867c22c472b52b0facdffe6e157e071fdc7ac3d3cb06c87d511ed93f989f5a09a418afc749a650b549cced4671f8fdf1220387cfdd44cfede717dd67c4499177e949d50860f450586c798c574441ce2c868b7c3779bf9e60710167f66bc752a3b47371754ac475fe2f6523d5ae693c348a03df4", @nested={0x20, 0x7b, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @pid=r3}, @typed={0x9, 0xe1, 0x0, 0x0, @str='&$&\'\x00'}, @nested={0x4, 0xf6}, @nested={0x4, 0x46}]}, @nested={0xc, 0xf4, 0x0, 0x1, [@nested={0x4, 0xe1}, @nested={0x4, 0xb3}]}]}, 0xfc}, {&(0x7f0000002400)={0x104c, 0x19, 0x100, 0x70bd2b, 0x25dfdbfd, "", [@generic="c7cfd86eb65910c87528c79e22fd4f0bc327412b985ead479b078a7e344a91dcfd4e7d7a6926d296f96fe15bbe158ec9acde5c0ab7b70c0c68a5bd62ee7364c555f36b428b55411a0d1818ebdc41f9e61af45a1381c4dcaf3b4f76d265f458f7cb5783ad81b60f545d5847870bc13f0a3ec974f3e56cbdf60965b7467b0f42e015d4e69dd9df944ad71c1e4ee017fde64f7ffe543870400d6ad43912c28a3d0cfe51fce19f577761716b11341086037f155a2cf67ed3604533adfa70118b12f28f41cb310aab120aa7aa546a7e8786ad20c04a2c24cbfce201de68b0169b19291c87", @nested={0xf55, 0x6a, 0x0, 0x1, [@generic="19104f9a78416a1bf85b8f5156e1a018af6bc472ad7049b959b157ccec6d342d5648aa5b4ab1d55ffe237c82606709716a8db0bc95520cf008d3f36068b82387c2628f89044baeb79fb4f77fad806c79e72c8f230ffd81adc4d068e9a919c614bf23f35123e335b217d4c456278dae81bb2ce1ed0d0aba7d497cd97246ff5a634c67255714a146ef677e90c484df0e3ee8b0464a7029", @generic="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", @generic="01106573cbb0720498927aa8310552fe7c753d2ea7988aae6763e7e29fd5fa061ea122534b86b6f1afb43137c44695febcff1c2820ef2aa22d411afb6a17b2b95a489eb9fba0bc41f713eb5b9ff7c7671e7ab1cb0490073ecb6436b2b09003797ca190f93434d57f50679e06536b3a01fbd722d0f1844244a60e20c4a8998309bcd3fc896043cf57967ede99cb371d23116c355bf82e668796a8cf1508c8842c621c1a381139186a77976b8dcdeb59900ba9f8a3cb95529ee1", @generic="83d2b2024700ed22f9b9876339171febfe48871904cf376e99f2eb8b2b72182dd086e5d69a5361929fcd564474c3427b14531852", @typed={0x8, 0xfb, 0x0, 0x0, @ipv4=@multicast2}, @generic="a183096f747dc915e858d6d32d09c53a41b5bb911e415a0daba9d7373d9775967543f84d9bd814d7d7e8fed49544a2ff0074e58406a08b1a587a225d8d0a93e931c7c9181804c0cda40d0721f994aa0e3b599d4d967d986790e81bbe8356d99550802e24bb453bc851e9dfc1797164e76746dddcbbb812c08a3899ff2265aa0b5924f5eec9c7ba340e9cea21ba", @nested={0x4, 0x51}, @generic="067a05b078b58bb383d4a95e20dcba6b159a204ef9ac2d17c6f5a54122f3160b0f12cffe01d7fd460d0d2d6d0ad7f3f6b2be91f6f25c65543b9d69e2ca77ba2fd56b188b6701a5aec37b6ac2e1fdebde1ff8a7d9084b797b5dab5a90d0bb1259"]}]}, 0x104c}, {&(0x7f0000003800)=ANY=[@ANYBLOB="cc0000001f00000425bd7000fbdbdf25a80035800400378089d7007a6ac545d59b9917d6e1563759a3babe6c6f7e73cc4912ad902ff0c49edd0500212c6660dc6a6282d0fe2d3e2f5dcb61c3d5d19b2f564f57eaa1f8bbca5537b29a7c21b6f7c8c235e04a22075e3d2c2757277d47966d65cb31669e2617027abf8c045c72598dcae927eda0b1e3b79ab4e95cce51a386eca3f64a946f0400f480040049800400808004003b800842a1ea0fbdc775e7743a34b29324f9806bb1c5b0625d163e690000000000"], 0xcc}, {&(0x7f0000000100)={0x10, 0x36, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x10}, {&(0x7f0000003900)=ANY=[@ANYBLOB="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"], 0x1ec}], 0x6, &(0x7f0000004d80)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r2]}}], 0x38, 0x4008800}, 0x40c04)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
lseek(r4, 0x1000000, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08b64d400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x400c090)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8004)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000032c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f0000000040)={0x54, r9, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x973c}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004804)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="1400000016004163d25a80648c25", 0xe}], 0x1}, 0x0)

4.216620675s ago: executing program 3 (id=1061):
fsopen(&(0x7f0000000040)='afs\x00', 0x0)
socket(0x2, 0x80805, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0)
r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x40000000000000, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_unlink(&(0x7f0000000000)='eth0\x00')
close(r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000004a00010027bd7000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="ed03000014000100ff95"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000044)

4.066850723s ago: executing program 6 (id=1062):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {r3, 0x6, 0x12, 0x0, 0x0, @in6={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10001}, @in6={0xa, 0x4e22, 0x2, @local, 0x3}}}, 0x118)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522)
ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f0000000280)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xef94, 0x24, 0x0, 0x0, 0x7fff, 0xb98d, 0x13, 0xee, 0x5, 0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x5, 0x8, 0x10007ffc})
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r4, 0x1000f0000)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100))
r7 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(r7, &(0x7f00000021c0)={0x2020}, 0x2020)
syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r8 = socket$kcm(0xa, 0x2, 0x0)
r9 = socket(0x2, 0x80805, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x640100ff, 0x4e20, 0x3, 'wlc\x00', 0x1, 0xa7e, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@private=0xa010101, 0x4e20, 0x1, 0xcd, 0x1}}, 0x44)
sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r12 = dup3(r11, r6, 0x0)
ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0})
write$uinput_user_dev(r12, &(0x7f0000000a40)={'syz1\x00', {0xd, 0x0, 0x401}, 0x4b, [0x7fffffff, 0x7, 0x9, 0x3, 0xffffa0a0, 0x0, 0x4, 0x6b73, 0xfffffffb, 0x7, 0x4, 0x4, 0x6, 0x3c, 0x8, 0x3, 0x6, 0xf6d, 0xed, 0x2, 0x8d05, 0x0, 0x80, 0x0, 0xffffff, 0x3, 0x8, 0x488a, 0x1ff, 0x2, 0x1, 0x0, 0x3, 0x7fff, 0x6, 0x2, 0x80000000, 0x1, 0x3, 0xa4, 0x7, 0x7, 0xa, 0x0, 0x5, 0x1, 0xc, 0x80000000, 0xd37, 0xdb0, 0x6, 0x7, 0x40, 0xa, 0x8, 0x3, 0x9, 0x2, 0x746, 0x7, 0x13a09d20, 0xb808, 0x4, 0x29], [0x5, 0x9, 0x8001, 0x7, 0x6, 0x0, 0x8, 0x9, 0x1000, 0x5, 0x4, 0x1, 0xfffffff9, 0x0, 0x5, 0x1, 0x8, 0x3, 0xfffffffa, 0x5, 0x3, 0x7, 0x17c, 0x7068, 0x1000, 0x9, 0x62ef, 0x4078, 0x3, 0xfff, 0x5, 0x2, 0x0, 0x9, 0x10, 0xffff, 0x3, 0x3, 0xbc1, 0x7, 0xb, 0x9, 0xff, 0x0, 0x8, 0x200, 0xfffffff4, 0xcc1e, 0xc304, 0x600, 0x1, 0x6, 0x66, 0x8, 0x2c9b, 0x5, 0x2, 0xfffffe01, 0xef, 0x7, 0x60, 0x33, 0x5000000, 0x2], [0x1, 0x8, 0x40, 0xe91, 0xa5e, 0x1, 0x7fff, 0x8000, 0x0, 0xffffffff, 0x0, 0x40, 0xcc, 0x800, 0x80000001, 0x6, 0x1, 0xf9f, 0x7bf8dd66, 0x6, 0x0, 0x4, 0x5, 0xe, 0x2, 0xc, 0xfffffffc, 0x2, 0x20000000, 0x400, 0xa, 0x7, 0x9, 0x9, 0x3ff, 0x4, 0x3ff, 0x9, 0x0, 0x81, 0x6, 0xcab, 0x48, 0xffff0001, 0x497b, 0x5, 0x10002, 0x6, 0x40, 0xff8, 0x6f, 0x0, 0x3, 0x3566, 0x10001, 0x7, 0x0, 0xffff, 0x8, 0x7, 0xf7, 0x42, 0x3a, 0x7ff], [0x2f8d, 0xc8, 0x7, 0x3, 0x80, 0xfffff001, 0x31, 0xde, 0x4, 0x7ff, 0x2, 0x7, 0x9, 0x7ff, 0x6, 0x8, 0x10000000, 0x47, 0xb, 0x2, 0x4, 0x2f7d, 0x0, 0x5, 0x4ce, 0x6, 0x4, 0xb, 0x9, 0xfffffff8, 0x9, 0x100, 0x9, 0xfb, 0x6, 0xfd, 0x0, 0x1, 0x5d, 0x4, 0x66, 0x8, 0x2, 0x7, 0xac9f, 0xf, 0x5, 0x676, 0x263a3d58, 0x2, 0x7, 0x2, 0x4, 0x0, 0x3d69, 0x763aab52, 0x8, 0x7fff, 0x0, 0xfffffffc, 0x22bd, 0x5, 0x40, 0xbf]}, 0x45c)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0xb, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0xffffff00, 'veth0_vlan\x00', 'ip_vti0\x00', {}, {0xff}, 0x21, 0x0, 0x54}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {0xff}}, 0xec010000, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x4, 0x81, 'syz1\x00', 'syz1\x00', {0x7fffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)

3.715424599s ago: executing program 3 (id=1063):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {0xffffffffffffffff}, {}, 0x183639ee, 0x10001})
r4 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000380)={0x0, @reserved})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r6 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000240)=ANY=[@ANYRESOCT=r5], 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000003000128009000100766c616e00000000200002800c0002001b000000020000000600050088a80000060001"], 0x58}, 0x1, 0x0, 0x0, 0x2008801}, 0x40000)
syz_usb_control_io$hid(r6, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
futex(&(0x7f0000004000)=0x1400005, 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb301fffd)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00')
pipe2$watch_queue(&(0x7f0000000200), 0x80)
pread64(r8, 0x0, 0x0, 0x1000000000)
r9 = syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000002340)=ANY=[@ANYRES64=r9, @ANYBLOB="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", @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

3.517367991s ago: executing program 6 (id=1064):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0)

3.076408128s ago: executing program 4 (id=1065):
pipe(&(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000340)=0x800)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x8)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000480), &(0x7f00000004c0)=0x4)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"})
close(r0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=@delchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0xf}, {0x0, 0xc}, {0x4, 0x1}}}, 0x24}}, 0x0)
modify_ldt$read_default(0x2, 0xffffffffffffffff, 0x0)
r7 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8, 0xd, 0xc}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xd}]}}]}, 0x40}}, 0x0)
sendmmsg$inet(r4, &(0x7f0000002580), 0x0, 0x4000)
r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0xfffffff8, 0x93cf, 0x4f565559, 0x0, 0x8, [{0x6, 0x1}, {0x9, 0x5}, {0x8, 0x80000000}, {0x4, 0xa}, {0x956, 0xb68a}, {0x6, 0x7ff}, {0x3e, 0x2}, {0x50ad0aba}], 0x9, 0x7f, 0x2, 0x2, 0x3}})
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000c, 0x11, r8, 0x3dbca000)

2.952998693s ago: executing program 1 (id=1066):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r0 = fanotify_init(0x200, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
read(r0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac14141500000000000000000000000000000015000300000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffff54efdc11a3a8531400000000000000000200000000000000000a0000000000000000000000804000fcffffffffffff07000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff0000"], 0xfc}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[], 0xfc}}, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
connect$l2tp6(r5, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)
sendmmsg$inet6(r5, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00)
connect$unix(r2, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
socket$inet6_udp(0xa, 0x2, 0x0)

2.541726588s ago: executing program 6 (id=1067):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0xa0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@float={0xd, 0x0, 0x0, 0x10, 0xc}, @const={0x9, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x96}}, @enum64={0xf, 0x1, 0x0, 0x13, 0x1, 0x2, [{0xf, 0x6, 0xda}]}, @func={0x3, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x5f, 0x5f, 0x2e, 0x2e, 0x2e, 0x2e, 0x30]}}, &(0x7f0000000240)=""/172, 0x75, 0xac, 0x1, 0x4, 0x10000}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000de000000bbde3644", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fdffffff0100"/20, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x721400, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x400, 0x4, 0x2}, 0x18)
r4 = openat2(r3, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x2, 0x35}, 0x18)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), r4)
sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x24}}, 0x4000)
sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newsa={0x138, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x2, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0x0, 0x1}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_crypt={0x48, 0x2, {{'cbc(cast6)\x00'}}}]}, 0x138}}, 0x0)
symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00')
ioctl$KVM_RUN(r4, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000d5080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.213326461s ago: executing program 6 (id=1068):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0)
ppoll(&(0x7f0000000040)=[{r1, 0x2311}], 0x1, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x9})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x4)
bind$inet6(r6, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0)
readv(r7, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="0f08b9820400000f32b805000000b9050000000f01d966ba410066ed0fa80f01c40fc72a36f4c4e2fd40db66ba6100b83e9f0000ef", 0x35}], 0x0, 0x2c, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24)
read$dsp(r1, &(0x7f0000003200)=""/4088, 0x57d)

1.69357291s ago: executing program 1 (id=1069):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x5b9c, &(0x7f0000000080)={0x0, 0x49b6, 0x44, 0x3, 0x119}, &(0x7f0000000140), &(0x7f0000000180))
io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f00000001c0)={r0}, 0x1)
clock_settime(0xb84856c935ea9e7, &(0x7f0000000100)={0x77359400})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0x10, 0xc}, {0x8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000140)={0x0, 0x0, 0x0})
ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000040)="8793eae825bb72c40f"})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x0, 0x58, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0xd03, 0x70bc2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x203}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x1}, @IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035550932880)

1.571028663s ago: executing program 2 (id=1070):
r0 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r0], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xb, 0x4)
r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
write$dsp(r3, &(0x7f00000001c0)='B', 0x1)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840))
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000aac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000380)={0x1, 0x20, 0xfffffd0a, 0x10001, 0x0, 0x6, 0x5, 0x0, 0xfbfffffffffffffd, 0x9, 0xffffffbb, 0x1})
close(r3)
syz_usb_ep_read(r2, 0x81, 0x8, &(0x7f0000000040)=""/8)

371.645742ms ago: executing program 4 (id=1071):
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load user:'], 0x2b, 0xfffffffffffffff9)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
keyctl$reject(0x13, r0, 0x9, 0x8001, r0)
getsockopt$bt_hci(r1, 0x84, 0x10, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0xffff, 0x0)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100))
sendmmsg$unix(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="18", 0xfe37}], 0x1}}], 0x1, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
flock(r6, 0x8)
r7 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSKBENT(r8, 0x4b47, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

220.269885ms ago: executing program 3 (id=1072):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x4005, 0x0, 0x4, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0x356, 0x160, 0x10, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000004, 0x0, 0x6, 0xfffffffe, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa})
r4 = socket$kcm(0x29, 0x5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x5)
r7 = landlock_create_ruleset(&(0x7f0000000080)={0x4, 0x1}, 0x18, 0x0)
landlock_restrict_self(r7, 0x6)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x106}, 0x1c)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x10})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket(0x1e, 0x4, 0x0)
r9 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80)
r10 = dup3(r9, r8, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0)
recvmmsg$unix(r10, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000005140)=""/4106, 0x100a}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000280)=""/51, 0x33}, {&(0x7f0000000740)=""/207, 0xcf}, {&(0x7f0000000840)=""/70, 0x46}], 0x6}}, {{&(0x7f0000000140)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/241, 0xf1}], 0x1}}, {{&(0x7f0000000900), 0x6e, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1, &(0x7f00000006c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80}}, {{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}], 0x4, 0x58ca2280, 0x0)
r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r11, 0xffffffffffffffff, 0x0)

656.405µs ago: executing program 6 (id=1073):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket(0x22, 0x4, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00001c00b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94)
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0)
symlink(0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r7)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r8, 0x0)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001a0009002bbd70000000000080200002"], 0x1c}}, 0x4000010)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r11 = accept(r7, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4)
sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRESDEC=r6, @ANYRESDEC=r3, @ANYRESHEX=r8], 0xfffffdef}}, 0x10)
recvfrom(r9, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0)
ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0)

0s ago: executing program 4 (id=1074):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
accept4$inet6(r0, 0x0, &(0x7f00000001c0), 0x100000)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r1, 0xda90)
setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00')
write$tcp_mem(r3, &(0x7f0000000180)={0x6, 0x20, 0x0, 0x20, 0x1}, 0x48)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x27, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r1, @ANYRES64=r3, @ANYRES16, @ANYRES16, @ANYRES8, @ANYRESHEX=r1, @ANYRES8=r2, @ANYRES32], 0xe4}}, 0x4000)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'caif0\x00', {}, 0x8})
execve(0x0, 0x0, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@delqdisc={0xec, 0x25, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0x9, 0x3}, {0xb, 0x8}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x29}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xd}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x26cb}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x5}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xff81}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="450000000600000000000000000000000500ffdc0000002003000000000000001c"], 0x45)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x1, 0x17c1, 0x8}}}}}, 0x0)

kernel console output (not intermixed with test programs):

device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  263.329350][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.338679][ T5952] usb 3-1: Product: syz
[  263.342924][ T5952] usb 3-1: Manufacturer: syz
[  263.348145][ T5952] usb 3-1: SerialNumber: syz
[  263.362970][ T5952] usb 3-1: config 0 descriptor??
[  263.379706][ T5952] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  263.584797][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.607399][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  263.704383][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  263.710953][ T5828] Bluetooth: hci3: hardware error 0x08
[  263.717050][ T7352] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  263.822863][ T8326] bridge_slave_1: left promiscuous mode
[  263.831653][ T5952] gspca_stk1135: reg_w 0x0 err -71
[  263.840175][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.849105][ T5952] gspca_stk1135: serial bus timeout: status=0x00
[  263.856950][ T5952] gspca_stk1135: Sensor write failed
[  263.870888][ T5952] gspca_stk1135: serial bus timeout: status=0x00
[  263.877560][ T7352] usb 4-1: Using ep0 maxpacket: 16
[  263.891281][ T8326] bridge_slave_0: left promiscuous mode
[  263.900053][ T5952] gspca_stk1135: Sensor write failed
[  263.906334][ T7352] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  263.917782][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.925070][ T5952] gspca_stk1135: serial bus timeout: status=0x00
[  263.931620][ T7352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.940258][ T5952] gspca_stk1135: Sensor read failed
[  263.946240][ T5952] gspca_stk1135: serial bus timeout: status=0x00
[  263.958488][ T7352] usb 4-1: Product: syz
[  263.963972][ T7352] usb 4-1: Manufacturer: syz
[  263.971803][ T5952] gspca_stk1135: Sensor read failed
[  263.980451][ T7352] usb 4-1: SerialNumber: syz
[  263.989023][ T5952] gspca_stk1135: Detected sensor type unknown (0x0)
[  264.005922][ T5952] gspca_stk1135: serial bus timeout: status=0x00
[  264.019122][ T5952] gspca_stk1135: Sensor read failed
[  264.033837][ T5952] gspca_stk1135: serial bus timeout: status=0x00
[  264.044119][ T5952] gspca_stk1135: Sensor read failed
[  264.049375][ T5952] gspca_stk1135: serial bus timeout: status=0x00
[  264.056173][ T5952] gspca_stk1135: Sensor write failed
[  264.061611][ T5952] gspca_stk1135: serial bus timeout: status=0x00
[  264.075274][ T5952] gspca_stk1135: Sensor write failed
[  264.080668][ T5952] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71
[  264.092739][ T5952] usb 3-1: USB disconnect, device number 35
[  264.123671][ T7351] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  264.297277][ T7351] usb 5-1: config 0 has an invalid interface number: 64 but max is 0
[  264.306241][ T7351] usb 5-1: config 0 has no interface number 0
[  264.315029][ T7351] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  264.324649][ T7351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.332692][ T7351] usb 5-1: Product: syz
[  264.338605][ T7351] usb 5-1: Manufacturer: syz
[  264.343253][ T7351] usb 5-1: SerialNumber: syz
[  264.351323][ T7351] usb 5-1: config 0 descriptor??
[  264.425803][ T7352] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  264.434699][ T5952] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  264.467216][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  264.467230][   T30] audit: type=1326 audit(1771042270.764:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.2.642" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74319bf79 code=0x0
[  264.587001][ T7351] uvcvideo 5-1:0.64: Found UVC 0.08 device syz (046d:0823)
[  264.604709][ T7351] uvcvideo 5-1:0.64: No valid video chain found.
[  264.616513][ T5952] usb 2-1: Using ep0 maxpacket: 8
[  264.625177][ T7351] usb 5-1: USB disconnect, device number 39
[  264.644680][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short
[  264.675724][ T5952] usb 2-1: config 8 has an invalid interface number: 79 but max is 0
[  264.697849][ T5952] usb 2-1: config 8 has no interface number 0
[  264.717482][ T5952] usb 2-1: config 8 interface 79 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  264.739698][ T5952] usb 2-1: config 8 interface 79 has no altsetting 0
[  264.748537][ T7352] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -2
[  264.760920][ T5952] usb 2-1: New USB device found, idVendor=0499, idProduct=5002, bcdDevice=55.05
[  264.770282][ T7353] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  264.784654][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.795244][ T5952] usb 2-1: Product: syz
[  264.799426][ T5952] usb 2-1: Manufacturer: syz
[  264.804672][ T5952] usb 2-1: SerialNumber: syz
[  264.847688][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  264.914348][ T7353] usb 3-1: device descriptor read/64, error -71
[  265.175860][ T7353] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  265.245606][ T8335] fuse: Unknown parameter 'use00000000000000000000'
[  265.334650][ T7353] usb 3-1: device descriptor read/64, error -71
[  265.458821][ T7353] usb usb3-port1: attempt power cycle
[  265.773740][ T5828] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  265.813669][ T7353] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  265.846326][ T7353] usb 3-1: device descriptor read/8, error -71
[  266.103753][ T7353] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  266.135079][ T7353] usb 3-1: device descriptor read/8, error -71
[  266.244417][ T7353] usb usb3-port1: unable to enumerate USB device
[  266.408130][ T7353] usb 4-1: USB disconnect, device number 37
[  266.576963][ T7352] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  266.733741][ T7352] usb 5-1: Using ep0 maxpacket: 32
[  266.740761][ T7352] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  266.750182][ T7352] usb 5-1: config 0 has no interface number 0
[  266.760233][ T7352] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  266.769844][ T7352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.780342][ T8343] x_tables: duplicate entry at hook 3
[  266.786009][ T7352] usb 5-1: Product: syz
[  266.800503][ T7352] usb 5-1: Manufacturer: syz
[  266.816160][ T7352] usb 5-1: SerialNumber: syz
[  266.827214][ T7352] usb 5-1: config 0 descriptor??
[  266.842794][ T7352] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  267.063793][ T5912] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  267.226041][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'.
[  267.243924][ T5912] usb 4-1: Using ep0 maxpacket: 32
[  267.268399][ T5952] rndis_host 2-1:8.79: skipping garbage
[  267.280191][ T5912] usb 4-1: config 0 has an invalid interface number: 188 but max is 0
[  267.286508][ T5952] usb 2-1: bad CDC descriptors
[  267.305290][ T5912] usb 4-1: config 0 has no interface number 0
[  267.316793][ T5952] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  267.326649][ T5912] usb 4-1: New USB device found, idVendor=0007, idProduct=0000, bcdDevice=2e.36
[  267.343254][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  267.369339][ T5912] usb 4-1: Product: syz
[  267.381807][ T5912] usb 4-1: Manufacturer: syz
[  267.396789][ T5912] usb 4-1: SerialNumber: syz
[  267.422827][ T5952] snd-usb-audio 2-1:8.79: probe with driver snd-usb-audio failed with error -2
[  267.426827][ T5912] usb 4-1: config 0 descriptor??
[  267.457266][ T5952] usb 2-1: USB disconnect, device number 32
[  267.517851][ T5819] udevd[5819]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:8.79/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  267.781067][ T8353] netlink: 104 bytes leftover after parsing attributes in process `syz.2.648'.
[  268.218389][ T5912] usb 4-1: USB disconnect, device number 38
[  268.256080][ T8356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.647'.
[  269.329941][ T7352] usb 5-1: qt2_attach - failed to power on unit: -71
[  269.357437][ T7352] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[  269.419795][ T7352] usb 5-1: USB disconnect, device number 40
[  269.524364][ T8360] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  269.608619][ T8362] ptrace attach of "./syz-executor exec"[5833] was attempted by "./syz-executor exec"[8362]
[  270.851378][ T8380] fuse: Unknown parameter 'use00000000000000000000'
[  270.879067][ T8380] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  271.755982][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'.
[  271.792850][ T8386] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  272.193960][ T5912] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  272.331213][ T8393] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  272.343805][ T5912] usb 3-1: device descriptor read/64, error -71
[  272.583833][ T5912] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[  272.688114][ T5822] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  272.701673][ T5822] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  272.711753][ T5822] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  272.741294][ T5822] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  272.749204][ T5912] usb 3-1: device descriptor read/64, error -71
[  272.756524][ T5822] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  272.874140][ T5912] usb usb3-port1: attempt power cycle
[  272.976962][ T8406] vivid-007: disconnect
[  273.283725][ T5912] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  273.341350][ T5912] usb 3-1: device descriptor read/8, error -71
[  273.594089][ T8404] chnl_net:caif_netlink_parms(): no params data found
[  273.728357][ T5912] usb 3-1: new full-speed USB device number 43 using dummy_hcd
[  273.850002][ T5912] usb 3-1: device descriptor read/8, error -71
[  273.867068][ T8402] vivid-007: reconnect
[  273.994033][ T5912] usb usb3-port1: unable to enumerate USB device
[  274.148073][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.155417][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.162717][ T8404] bridge_slave_0: entered allmulticast mode
[  274.171278][ T8404] bridge_slave_0: entered promiscuous mode
[  274.185109][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.193810][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.202773][ T8404] bridge_slave_1: entered allmulticast mode
[  274.224604][ T8404] bridge_slave_1: entered promiscuous mode
[  274.305599][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  274.337253][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  274.432054][ T8404] team0: Port device team_slave_0 added
[  274.456636][ T8404] team0: Port device team_slave_1 added
[  274.541890][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  274.563710][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.643735][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.687995][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.704011][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  274.751112][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.814318][ T5822] Bluetooth: hci5: command tx timeout
[  275.120141][ T8404] hsr_slave_0: entered promiscuous mode
[  275.139498][ T8404] hsr_slave_1: entered promiscuous mode
[  275.172527][ T8404] debugfs: 'hsr0' already exists in 'hsr'
[  275.190446][ T8404] Cannot create hsr debugfs directory
[  275.513748][ T5912] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  275.684857][ T5912] usb 3-1: Using ep0 maxpacket: 8
[  275.746291][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short
[  275.756370][ T5912] usb 3-1: config 5 has an invalid interface number: 24 but max is 0
[  275.783862][ T5912] usb 3-1: config 5 has no interface number 0
[  275.834464][ T5912] usb 3-1: config 5 interface 24 has no altsetting 0
[  275.866279][ T5912] usb 3-1: New USB device found, idVendor=0979, idProduct=0280, bcdDevice=95.47
[  275.876197][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.903514][ T5912] usb 3-1: Product: syz
[  275.923258][ T5912] usb 3-1: Manufacturer: syz
[  275.943747][ T5912] usb 3-1: SerialNumber: syz
[  276.079584][ T8404] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  276.116929][ T8404] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  276.148392][ T8404] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  276.180542][ T8404] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  276.226022][ T5912] gspca_main: jeilinj-2.14.0 probing 0979:0280
[  276.286045][ T5912] usb 3-1: USB disconnect, device number 44
[  276.812786][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0
[  276.861473][ T8404] 8021q: adding VLAN 0 to HW filter on device team0
[  276.887861][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.894605][ T5822] Bluetooth: hci5: command tx timeout
[  276.895224][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.008677][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state
[  277.015858][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  277.332099][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.460952][ T8404] veth0_vlan: entered promiscuous mode
[  277.516390][ T8404] veth1_vlan: entered promiscuous mode
[  277.536024][ T8449] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  277.544149][ T5912] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  277.569370][ T8449] netlink: 428 bytes leftover after parsing attributes in process `syz.3.673'.
[  277.589405][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'.
[  277.604041][    T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  277.632453][ T8404] veth0_macvtap: entered promiscuous mode
[  277.661139][ T8404] veth1_macvtap: entered promiscuous mode
[  277.711093][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  277.725936][ T8452] syzkaller0: entered promiscuous mode
[  277.725936][ T5912] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  277.725990][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.741939][ T8452] syzkaller0: entered allmulticast mode
[  277.754041][    T9] usb 5-1: device descriptor read/64, error -71
[  277.773631][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196
[  277.823116][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  277.826001][ T5912] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  277.866168][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.901648][ T3464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  277.906589][ T5912] usb 3-1: config 0 descriptor??
[  277.947960][ T3464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  277.974627][ T3464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  278.003332][ T3464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  278.045626][    T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  278.131292][ T3532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.150372][ T3532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.193915][    T9] usb 5-1: device descriptor read/64, error -71
[  278.234901][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  278.246036][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  278.287283][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.676'.
[  278.296437][ T8463] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  278.314210][    T9] usb usb5-port1: attempt power cycle
[  278.360003][ T5912] holtek_kbd 0003:04D9:A055.0011: bogus close delimiter
[  278.382260][ T5912] holtek_kbd 0003:04D9:A055.0011: item 0 4 2 10 parsing failed
[  278.414230][ T5912] holtek_kbd 0003:04D9:A055.0011: probe with driver holtek_kbd failed with error -22
[  278.549781][ T5952] usb 3-1: USB disconnect, device number 45
[  278.562857][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.5.660'.
[  278.653938][ T8466] vlan0: entered allmulticast mode
[  278.661204][ T8466] veth0_vlan: entered allmulticast mode
[  278.673680][    T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  278.717106][    T9] usb 5-1: device descriptor read/8, error -71
[  278.963784][ T5912] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  278.980856][ T5822] Bluetooth: hci5: command tx timeout
[  278.993866][    T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  279.025909][    T9] usb 5-1: device descriptor read/8, error -71
[  279.115274][ T5912] usb 6-1: config 4 has an invalid interface number: 218 but max is 0
[  279.144442][    T9] usb usb5-port1: unable to enumerate USB device
[  279.150949][ T5912] usb 6-1: config 4 has no interface number 0
[  279.184819][ T5912] usb 6-1: config 4 interface 218 altsetting 119 has a duplicate endpoint with address 0xB, skipping
[  279.250966][ T5912] usb 6-1: config 4 interface 218 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85
[  279.292875][ T5912] usb 6-1: config 4 interface 218 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64
[  279.333759][ T5912] usb 6-1: config 4 interface 218 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  279.374741][ T5912] usb 6-1: config 4 interface 218 has no altsetting 0
[  279.396936][ T5912] usb 6-1: New USB device found, idVendor=8516, idProduct=2070, bcdDevice=af.68
[  279.424005][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.432036][ T5912] usb 6-1: Product: syz
[  279.478307][ T5912] usb 6-1: Manufacturer: syz
[  279.482947][ T5912] usb 6-1: SerialNumber: syz
[  279.515193][ T8475] netlink: 'syz.1.678': attribute type 10 has an invalid length.
[  279.525700][ T8466] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  279.536585][ T8475] veth1_vlan: left promiscuous mode
[  279.546197][ T8475] team0: Device veth1_vlan failed to register rx_handler
[  279.848855][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.679'.
[  280.763776][ T7352] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  280.929619][ T7352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.941856][ T7352] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.955870][ T7352] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  280.965411][ T7352] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  280.973564][ T7352] usb 5-1: Manufacturer: syz
[  280.984765][ T7352] usb 5-1: config 0 descriptor??
[  281.053987][ T5822] Bluetooth: hci5: command tx timeout
[  281.343819][ T7351] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  281.504171][ T7351] usb 4-1: Using ep0 maxpacket: 16
[  281.519016][ T7351] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  281.539448][ T7351] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  281.578241][ T7351] usb 4-1: config 0 interface 0 has no altsetting 0
[  281.595092][ T7351] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  281.605671][    T9] usb 6-1: USB disconnect, device number 2
[  281.626336][ T7351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.652592][ T7351] usb 4-1: Product: syz
[  281.671023][ T7351] usb 4-1: Manufacturer: syz
[  281.686589][ T7351] usb 4-1: SerialNumber: syz
[  281.695005][ T5952] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  281.713531][ T7351] usb 4-1: config 0 descriptor??
[  281.824084][ T7352] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0012/input/input24
[  281.968022][ T8490] netlink: 996 bytes leftover after parsing attributes in process `syz.3.683'.
[  281.981076][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.992329][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.029175][ T7351] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input28
[  282.047278][ T5952] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  282.063761][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.139095][   T24] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  282.167415][ T5952] usb 3-1: config 0 descriptor??
[  282.253049][ T7352] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0012/input/input25
[  282.279734][   T24] usb 2-1: device descriptor read/64, error -71
[  282.319856][ T7351] usb 4-1: USB disconnect, device number 39
[  282.325912][    C1] synaptics_usb 4-1:0.0: synusb_irq - usb_submit_urb failed with result: -19
[  282.359075][ T7352] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0012/input/input26
[  282.481383][ T7352] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0012/input/input27
[  282.519168][ T7352] uclogic 0003:256C:006D.0012: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0
[  282.557270][ T7352] usb 5-1: USB disconnect, device number 45
[  282.594910][   T24] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  282.678618][ T5952] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0
[  282.740040][ T5952] cp2112 0003:10C4:EA90.0013: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  282.817136][   T24] usb 2-1: device descriptor read/64, error -71
[  282.899988][ T5952] cp2112 0003:10C4:EA90.0013: Part Number: 0x82 Device Version: 0xFE
[  282.988223][   T24] usb usb2-port1: attempt power cycle
[  283.034028][ T8507] fido_id[8507]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  283.346278][   T24] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[  283.387550][   T24] usb 2-1: device descriptor read/8, error -71
[  283.524010][ T5952] cp2112 0003:10C4:EA90.0013: error reading lock byte: -71
[  283.539452][ T5952] usb 3-1: USB disconnect, device number 46
[  283.683771][   T24] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  283.773207][   T24] usb 2-1: device descriptor read/8, error -71
[  283.973983][   T24] usb usb2-port1: unable to enumerate USB device
[  284.586084][ T8532] netlink: 28 bytes leftover after parsing attributes in process `syz.2.694'.
[  284.976001][ T8534] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  286.013762][ T5952] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  286.186237][ T5952] usb 3-1: Using ep0 maxpacket: 32
[  286.197665][ T5952] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  286.224510][ T5952] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=2e.ae
[  286.253455][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.279794][ T5952] usb 3-1: Product: syz
[  286.312474][ T5952] usb 3-1: Manufacturer: syz
[  286.327921][ T5952] usb 3-1: SerialNumber: syz
[  286.362796][ T5952] usb 3-1: config 0 descriptor??
[  286.384319][ T5952] usbsevseg 3-1:0.0: USB 7 Segment device now attached
[  286.776977][ T8569] netlink: 28 bytes leftover after parsing attributes in process `syz.5.704'.
[  286.804180][ T5952] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  286.934204][ T5952] usb 5-1: device descriptor read/64, error -71
[  286.964699][ T8575] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  286.980593][ T8575] bond1 (unregistering): Released all slaves
[  287.173688][ T5952] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  287.206973][ T8559] xt_hashlimit: max too large, truncated to 1048576
[  287.325595][ T5952] usb 5-1: device descriptor read/64, error -71
[  287.440981][ T5952] usb usb5-port1: attempt power cycle
[  287.535286][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  287.677962][ T7351] usb 3-1: USB disconnect, device number 47
[  287.703785][   T24] usb 6-1: Using ep0 maxpacket: 16
[  287.718345][ T7351] usbsevseg 3-1:0.0: USB 7 Segment now disconnected
[  287.740686][   T24] usb 6-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  287.764980][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  287.794906][ T5952] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  287.805855][   T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  287.815697][ T5952] usb 5-1: device descriptor read/8, error -71
[  287.836765][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.875394][   T24] usb 6-1: Product: syz
[  287.879600][   T24] usb 6-1: Manufacturer: syz
[  287.899880][   T24] usb 6-1: SerialNumber: syz
[  287.966602][ T8590] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.710'.
[  288.073709][ T7351] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  288.081392][ T5952] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  288.139532][ T5952] usb 5-1: device descriptor read/8, error -71
[  288.153452][   T24] usb 6-1: 0:2 : does not exist
[  288.206914][   T24] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  288.252663][ T7351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.268973][ T8581] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  288.294179][ T5952] usb usb5-port1: unable to enumerate USB device
[  288.312510][ T7351] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.364385][ T7351] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  288.389073][ T7351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.399960][   T24] usb 6-1: USB disconnect, device number 3
[  288.412431][ T7351] usb 2-1: config 0 descriptor??
[  288.518993][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  288.861541][ T7351] hid (null): report_id 1688554005 is invalid
[  288.882730][ T7351] megaworld 0003:07B5:0312.0014: report_id 1688554005 is invalid
[  288.912011][ T7351] megaworld 0003:07B5:0312.0014: item 0 4 1 8 parsing failed
[  288.945188][ T7351] megaworld 0003:07B5:0312.0014: parse failed
[  288.951348][ T7351] megaworld 0003:07B5:0312.0014: probe with driver megaworld failed with error -22
[  289.074275][ T8587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.083027][ T8587] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.164285][ T7348] usb 2-1: USB disconnect, device number 37
[  289.257261][ T8619] netlink: 48 bytes leftover after parsing attributes in process `syz.2.715'.
[  289.861681][ T8631] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20004
[  290.443704][   T24] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  290.767544][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.721'.
[  290.778583][ T8636] netlink: 16 bytes leftover after parsing attributes in process `syz.1.721'.
[  290.905535][   T24] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  290.914356][   T24] usb 4-1: config 0 has no interface number 0
[  290.920532][   T24] usb 4-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0xE7, changing to 0x87
[  290.935453][   T24] usb 4-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  290.953858][   T24] usb 4-1: config 0 interface 113 has no altsetting 0
[  290.963361][   T24] usb 4-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  290.976257][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.984452][   T24] usb 4-1: Product: syz
[  290.988736][   T24] usb 4-1: Manufacturer: syz
[  290.993331][   T24] usb 4-1: SerialNumber: syz
[  290.999868][   T24] usb 4-1: config 0 descriptor??
[  291.055328][   T24] pn533_usb 4-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[  291.205732][ T8644] sctp: [Deprecated]: syz.2.723 (pid 8644) Use of int in max_burst socket option.
[  291.205732][ T8644] Use struct sctp_assoc_value instead
[  291.270338][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'.
[  291.328135][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  291.336889][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  291.411961][ T8648] loop5: detected capacity change from 0 to 7
[  291.421474][ T8648] Dev loop5: unable to read RDB block 7
[  291.427306][ T8648]  loop5: unable to read partition table
[  291.461683][ T8648] loop5: partition table beyond EOD, truncated
[  291.515431][ T8648] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  291.564547][ T7348] usb 4-1: USB disconnect, device number 40
[  292.278098][ T8666] all (unregistering): Released all slaves
[  292.344081][ T7348] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  292.494904][ T7348] usb 5-1: Using ep0 maxpacket: 32
[  292.503203][ T7348] usb 5-1: config 0 interface 0 has no altsetting 0
[  292.517385][ T7348] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  292.563446][ T7348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.744666][ T7348] usb 5-1: Product: syz
[  292.763763][ T7348] usb 5-1: Manufacturer: syz
[  292.768392][ T7348] usb 5-1: SerialNumber: syz
[  292.834961][ T7348] usb 5-1: config 0 descriptor??
[  293.243321][ T7348] gs_usb 5-1:0.0: Configuring for 256 interfaces
[  293.264461][ T7348] gs_usb 5-1:0.0: Driver cannot handle more that 255 CAN interfaces
[  293.307427][ T7348] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22
[  293.447135][ T8664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.458412][ T8664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.468836][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.727'.
[  293.478394][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  293.487494][ T8664] netlink: 28 bytes leftover after parsing attributes in process `syz.4.727'.
[  293.516476][ T8664] batadv0: entered promiscuous mode
[  293.534720][ T8664] dummy0: entered promiscuous mode
[  293.596087][ T8664] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network
[  293.625215][   T24] usb 6-1: device descriptor read/64, error -71
[  293.656719][ T8664] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network
[  293.679697][ T8691] kvm: user requested TSC rate below hardware speed
[  293.731184][ T7348] usb 5-1: USB disconnect, device number 50
[  293.803807][ T8694] macvtap2: entered promiscuous mode
[  293.809155][ T8694] ip6gretap0: entered promiscuous mode
[  293.839925][ T8694] ip6gretap0: left promiscuous mode
[  293.886963][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  294.038231][   T24] usb 6-1: device descriptor read/64, error -71
[  294.154228][   T24] usb usb6-port1: attempt power cycle
[  294.481815][ T8722] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  294.505381][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  294.539783][ T8725] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  294.555229][ T8722] bond1 (unregistering): Released all slaves
[  294.563484][   T24] usb 6-1: device descriptor read/8, error -71
[  294.774156][   T30] audit: type=1800 audit(1771042301.044:212): pid=8733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.747" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  294.854178][   T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  294.887117][   T24] usb 6-1: device descriptor read/8, error -71
[  294.994068][   T24] usb usb6-port1: unable to enumerate USB device
[  295.278629][   T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  295.543669][   T24] usb 5-1: Using ep0 maxpacket: 16
[  295.550154][   T24] usb 5-1: too many configurations: 129, using maximum allowed: 8
[  295.636275][   T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  295.646313][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.661717][   T24] usb 5-1: Product: syz
[  295.670123][   T24] usb 5-1: Manufacturer: syz
[  295.680241][   T24] usb 5-1: SerialNumber: syz
[  295.698914][   T24] r8152-cfgselector 5-1: Unknown version 0x0000
[  295.719896][   T24] r8152-cfgselector 5-1: config 0 descriptor??
[  295.854198][   T13] wlan0: Trigger new scan to find an IBSS to join
[  295.987070][   T24] r8152-cfgselector 5-1: Unknown version 0x0000
[  295.999756][   T24] r8152-cfgselector 5-1: bad CDC descriptors
[  296.071910][   T24] r8152-cfgselector 5-1: USB disconnect, device number 51
[  296.673678][   T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  296.935143][   T24] usb 6-1: Using ep0 maxpacket: 8
[  296.981270][   T24] usb 6-1: config 0 has an invalid interface number: 244 but max is 1
[  297.015950][   T24] usb 6-1: config 0 has an invalid descriptor of length 104, skipping remainder of the config
[  297.027362][   T24] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  297.085942][   T24] usb 6-1: config 0 has no interface number 0
[  297.092083][   T24] usb 6-1: config 0 interface 244 has no altsetting 0
[  297.164859][ T8758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.753'.
[  297.173911][   T30] audit: type=1400 audit(1771042303.444:213): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=8752 comm="syz.4.753"
[  297.193738][ T8758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.753'.
[  297.210135][   T24] usb 6-1: New USB device found, idVendor=0df6, idProduct=003d, bcdDevice=65.d5
[  297.292117][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.454557][ T8765] netlink: 72 bytes leftover after parsing attributes in process `syz.1.756'.
[  297.544318][   T24] usb 6-1: Product: syz
[  297.647573][   T24] usb 6-1: Manufacturer: М
[  297.652142][   T24] usb 6-1: SerialNumber: syz
[  297.698882][   T24] usb 6-1: config 0 descriptor??
[  297.749836][ T5912] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  297.921904][ T8751] fuse: Bad value for 'fd'
[  297.926953][ T5912] usb 2-1: Using ep0 maxpacket: 16
[  297.932946][ T5912] usb 2-1: no configurations
[  297.948870][ T5912] usb 2-1: can't read configurations, error -22
[  298.031304][   T24] usb 6-1: USB disconnect, device number 8
[  298.103864][ T5912] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  298.273705][ T5912] usb 2-1: Using ep0 maxpacket: 16
[  298.285294][ T5912] usb 2-1: no configurations
[  298.290040][ T5912] usb 2-1: can't read configurations, error -22
[  298.296848][ T5912] usb usb2-port1: attempt power cycle
[  298.597792][ T8785] netlink: 64 bytes leftover after parsing attributes in process `syz.3.761'.
[  298.713740][ T5912] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  298.745185][ T5912] usb 2-1: Using ep0 maxpacket: 16
[  298.751165][ T5912] usb 2-1: no configurations
[  298.756209][ T5912] usb 2-1: can't read configurations, error -22
[  298.813150][ T8793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.836091][ T8793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  298.854417][   T24] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[  298.913911][ T5912] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  298.934580][ T5912] usb 2-1: Using ep0 maxpacket: 16
[  298.940419][ T5912] usb 2-1: no configurations
[  298.958740][ T5912] usb 2-1: can't read configurations, error -22
[  298.986396][ T5912] usb usb2-port1: unable to enumerate USB device
[  299.006214][   T24] usb 6-1: No LPM exit latency info found, disabling LPM.
[  299.015777][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  299.028431][   T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  299.039012][   T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt
[  299.056602][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  299.066147][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.075095][   T24] usb 6-1: Product: ำﲢ嚸쎦ꗱ弬銼㣳፦钄穯ꚜ貱ꢢ盾탁猒섧沢섌❇쇚춘랭歖큾슊ꋘ኷芣玦骅៝鈽⦣믲፤쾘헵᦮㣒졪貇䢏넮ৃ፥羓৉⨱殇졥喆롳ݒ飲乘뾉蚊孌䗴⮣抋ﺽ➚曛᭒ブ
[  299.099201][   T24] usb 6-1: Manufacturer: ꤓ⸟敡஢訞滌腦≱ጘ赭ꭻ似⒯㓏괊䘡㈍硲㻗늉⃁郲怜䃹霴탈鎗⁶좼쁢蹚윁䁟딗꥙ᗦ纡자⃋麜庫먎徐
[  299.126349][ T8801] fuse: Unknown parameter 'u��]+�����>���R"�p����E���K8A��WL�/�m[�����Δ��ך'
[  299.189634][   T24] usb 6-1: SerialNumber: ᖺ揢췰풧뱡Ɠ擁◴訬絷亻營䜯㋃윖퍖弥협⃿ᕁएZ淲朦ᠺᒃ斴냷젠鸏ˎ亾똟Ԡ
[  299.221315][ T8787] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  299.440586][   T24] cdc_ncm 6-1:1.0: bind() failure
[  300.093828][ T7348] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  300.154984][   T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  300.283673][   T24] cdc_ncm 6-1:1.1: bind() failure
[  300.292855][ T7348] usb 3-1: Using ep0 maxpacket: 16
[  300.313978][   T24] usb 6-1: USB disconnect, device number 9
[  300.334991][ T7348] usb 3-1: too many configurations: 17, using maximum allowed: 8
[  300.450503][ T8812] syz.3.766 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  300.485809][ T7348] usb 3-1: config 3 has an invalid interface number: 156 but max is 0
[  300.526836][ T7348] usb 3-1: config 3 has no interface number 0
[  300.552923][ T7348] usb 3-1: config 3 interface 156 has no altsetting 0
[  300.600764][ T8812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.766'.
[  300.700296][ T7348] usb 3-1: config 3 has an invalid interface number: 156 but max is 0
[  300.717465][ T7348] usb 3-1: config 3 has no interface number 0
[  300.739712][ T7348] usb 3-1: config 3 interface 156 has no altsetting 0
[  300.804749][ T7348] usb 3-1: config 3 has an invalid interface number: 156 but max is 0
[  300.814254][   T49] wlan0: Trigger new scan to find an IBSS to join
[  300.821521][   T30] audit: type=1326 audit(1771042307.114:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8813 comm="syz.5.767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906239bf79 code=0x0
[  300.838932][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.766'.
[  300.884033][ T7348] usb 3-1: config 3 has no interface number 0
[  300.910151][ T8819] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  300.935416][ T7348] usb 3-1: config 3 interface 156 has no altsetting 0
[  300.965755][ T7348] usb 3-1: config 3 has an invalid interface number: 156 but max is 0
[  300.972015][ T8820] fuse: Unknown parameter '�:'
[  301.004906][ T8819] bond1 (unregistering): Released all slaves
[  301.012540][ T7348] usb 3-1: config 3 has no interface number 0
[  301.033288][ T7348] usb 3-1: config 3 interface 156 has no altsetting 0
[  301.070498][ T7348] usb 3-1: config 3 has an invalid interface number: 156 but max is 0
[  301.093664][ T7348] usb 3-1: config 3 has no interface number 0
[  301.119882][ T7348] usb 3-1: config 3 interface 156 has no altsetting 0
[  301.152830][ T7348] usb 3-1: config 3 has an invalid interface number: 156 but max is 0
[  301.203983][ T7348] usb 3-1: config 3 has no interface number 0
[  301.228880][ T7348] usb 3-1: config 3 interface 156 has no altsetting 0
[  301.294040][ T7348] usb 3-1: config 3 has an invalid interface number: 156 but max is 0
[  301.313990][ T7348] usb 3-1: config 3 has no interface number 0
[  301.397296][ T7348] usb 3-1: config 3 interface 156 has no altsetting 0
[  301.436692][ T7348] usb 3-1: config 3 has an invalid interface number: 156 but max is 0
[  301.445177][ T7348] usb 3-1: config 3 has no interface number 0
[  301.471542][ T7348] usb 3-1: config 3 interface 156 has no altsetting 0
[  301.538715][ T7348] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=f1.d8
[  301.619376][ T7348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.652663][ T7348] usb 3-1: Product: syz
[  301.667855][ T7348] usb 3-1: Manufacturer: syz
[  301.693981][ T7348] usb 3-1: SerialNumber: syz
[  301.798528][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.954122][ T7348] gl620a 3-1:3.156: probe with driver gl620a failed with error -22
[  301.989857][ T7348] usb 3-1: USB disconnect, device number 48
[  302.759119][ T8839] netlink: 48 bytes leftover after parsing attributes in process `syz.3.772'.
[  302.843799][ T7348] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  303.084862][ T7348] usb 6-1: Using ep0 maxpacket: 8
[  303.141145][ T7348] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  303.159660][ T7348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.191378][ T7348] usb 6-1: Product: syz
[  303.208212][ T7348] usb 6-1: Manufacturer: syz
[  303.333331][ T7348] usb 6-1: SerialNumber: syz
[  303.389701][ T7348] usb 6-1: config 0 descriptor??
[  303.634157][ T7348] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  303.713711][   T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  303.844351][ T8834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  303.864740][ T8834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  303.873821][   T24] usb 5-1: Using ep0 maxpacket: 32
[  303.888413][   T24] usb 5-1: config 0 has an invalid interface number: 188 but max is 0
[  303.917008][   T24] usb 5-1: config 0 has no interface number 0
[  303.941486][   T24] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  303.971745][   T24] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  304.001974][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.020227][   T24] usb 5-1: Product: syz
[  304.042916][   T24] usb 5-1: Manufacturer: syz
[  304.063491][   T24] usb 5-1: SerialNumber: syz
[  304.091127][   T24] usb 5-1: config 0 descriptor??
[  304.123477][ T8855] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  304.337497][ T8855] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  304.556617][ T8834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.565677][ T8834] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.753279][   T24] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  304.765502][   T24] asix 5-1:0.188: probe with driver asix failed with error -61
[  305.648026][ T7348] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  305.722594][ T7348] usb 6-1: USB disconnect, device number 10
[  306.048238][ T7348] usb 5-1: USB disconnect, device number 52
[  306.204295][   T30] audit: type=1326 audit(1771042312.494:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8877 comm="syz.5.781" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906239bf79 code=0x0
[  306.474286][ T8885] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  306.506484][ T8885] bond1 (unregistering): Released all slaves
[  308.513700][ T7348] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  308.682739][ T7348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.712586][ T7348] usb 2-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  308.740914][ T7348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.773055][ T7348] usb 2-1: config 0 descriptor??
[  309.064052][ T8901] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  309.353806][ T7348] razer 0003:1532:010D.0015: item fetching failed at offset 6/7
[  309.386291][ T7348] razer 0003:1532:010D.0015: probe with driver razer failed with error -22
[  309.581455][   T24] usb 2-1: USB disconnect, device number 43
[  309.785005][ T8918] netlink: 104 bytes leftover after parsing attributes in process `syz.5.792'.
[  309.839709][ T8922] netlink: 32 bytes leftover after parsing attributes in process `syz.5.793'.
[  309.850201][ T8922] netlink: 32 bytes leftover after parsing attributes in process `syz.5.793'.
[  310.323896][    T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  310.415163][ T8932] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  310.450392][ T8932] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  310.459404][   T30] audit: type=1326 audit(1771042316.704:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  310.554716][ T7348] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  310.572568][   T30] audit: type=1326 audit(1771042316.704:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  310.595121][    T9] usb 6-1: Using ep0 maxpacket: 16
[  310.713970][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  310.746423][    T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  310.763848][ T7348] usb 4-1: Using ep0 maxpacket: 8
[  310.771708][ T7348] usb 4-1: unable to get BOS descriptor or descriptor too short
[  310.781955][ T7348] usb 4-1: config 5 has an invalid interface number: 40 but max is 0
[  310.791395][   T30] audit: type=1326 audit(1771042316.704:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  310.823801][ T7348] usb 4-1: config 5 has no interface number 0
[  310.840278][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  310.861385][ T7348] usb 4-1: config 5 interface 40 has no altsetting 0
[  310.881076][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  310.904093][ T7348] usb 4-1: New USB device found, idVendor=0421, idProduct=3948, bcdDevice= 0.a8
[  310.922207][   T30] audit: type=1326 audit(1771042316.704:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  310.944890][ T7348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.964550][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  310.983887][ T7348] usb 4-1: Product: syz
[  310.994852][ T7348] usb 4-1: Manufacturer: syz
[  311.008864][ T7348] usb 4-1: SerialNumber: syz
[  311.024391][   T30] audit: type=1326 audit(1771042316.704:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  311.067290][    T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  311.143991][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.152048][    T9] usb 6-1: Product: syz
[  311.173845][   T30] audit: type=1326 audit(1771042316.704:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedb2d9d807 code=0x7ffc0000
[  311.207308][    T9] usb 6-1: Manufacturer: syz
[  311.212073][    T9] usb 6-1: SerialNumber: syz
[  311.252418][   T30] audit: type=1326 audit(1771042316.704:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fedb2d5c84e code=0x7ffc0000
[  311.336731][ T8926] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.795'.
[  311.351009][ T7348] cdc_phonet 4-1:5.40: probe with driver cdc_phonet failed with error -22
[  311.388310][   T30] audit: type=1326 audit(1771042316.704:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fedb2d5c84e code=0x7ffc0000
[  311.443709][   T30] audit: type=1326 audit(1771042316.704:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fedb2d5c84e code=0x7ffc0000
[  311.460918][    T9] usb 6-1: config 0 descriptor??
[  311.505200][   T30] audit: type=1326 audit(1771042316.704:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedb2d5c84e code=0x7ffc0000
[  311.512174][ T7348] usb 4-1: USB disconnect, device number 41
[  311.714461][   T30] audit: type=1326 audit(1771042316.704:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  311.813688][   T30] audit: type=1326 audit(1771042316.714:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  311.864525][    T9] appledisplay: Apple Cinema Display connected
[  311.913687][   T30] audit: type=1326 audit(1771042316.724:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  312.057856][   T30] audit: type=1326 audit(1771042316.724:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  312.094087][    T9] usb 6-1: USB disconnect, device number 11
[  312.112218][    T9] appledisplay: Apple Cinema Display disconnected
[  312.173691][   T30] audit: type=1326 audit(1771042316.724:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  312.345901][   T30] audit: type=1326 audit(1771042316.724:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8928 comm="syz.1.797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  312.744843][ T8950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.803'.
[  312.779928][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.5.804'.
[  312.832450][ T8954] netlink: 32 bytes leftover after parsing attributes in process `syz.5.804'.
[  313.004044][   T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  313.165419][   T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  313.174560][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.187592][   T24] usb 5-1: config 0 descriptor??
[  313.214246][   T24] cp210x 5-1:0.0: cp210x converter detected
[  313.327964][ T8958] 8021q: adding VLAN 0 to HW filter on device bond1
[  313.808953][   T24] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -71
[  313.820791][   T24] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  313.936304][ T8969] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  314.031332][   T24] usb 5-1: cp210x converter now attached to ttyUSB0
[  314.084118][   T24] usb 5-1: USB disconnect, device number 53
[  314.145445][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  314.199204][   T24] cp210x 5-1:0.0: device disconnected
[  314.444706][ T5911] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  314.614407][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  314.634915][ T5911] usb 2-1: New USB device found, idVendor=03d1, idProduct=2001, bcdDevice= 9.00
[  314.645440][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.671470][ T5911] usb 2-1: Product: syz
[  314.685198][ T5911] usb 2-1: Manufacturer: syz
[  314.730152][ T5911] usb 2-1: SerialNumber: syz
[  314.759741][ T5911] usb 2-1: config 0 descriptor??
[  314.821324][ T8984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.815'.
[  314.858486][ T8984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.815'.
[  315.523542][ T8974] netlink: 68 bytes leftover after parsing attributes in process `syz.2.812'.
[  316.939313][ T9034] netlink: 12 bytes leftover after parsing attributes in process `syz.2.825'.
[  317.140606][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.147181][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  317.243982][ T5911] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  317.382269][ T9046] fuse: Unknown parameter 'u��]+�����>���R"�p����E���K8A��WL�/�m[�����Δ��ך'
[  317.393809][ T5911] usb 3-1: device descriptor read/64, error -71
[  317.515323][ T5952] usb 2-1: USB disconnect, device number 44
[  317.653729][ T5911] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[  317.683660][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  317.793788][ T5911] usb 3-1: device descriptor read/64, error -71
[  317.894022][    T9] usb 6-1: Using ep0 maxpacket: 8
[  317.945800][    T9] usb 6-1: config 0 has an invalid interface number: 39 but max is 0
[  317.946411][ T5911] usb usb3-port1: attempt power cycle
[  317.972245][    T9] usb 6-1: config 0 has no interface number 0
[  318.024439][    T9] usb 6-1: New USB device found, idVendor=0547, idProduct=7303, bcdDevice=30.27
[  318.044117][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  318.052161][    T9] usb 6-1: Product: syz
[  318.078330][    T9] usb 6-1: Manufacturer: syz
[  318.093126][    T9] usb 6-1: SerialNumber: syz
[  318.116270][    T9] usb 6-1: config 0 descriptor??
[  318.140824][    T9] gspca_main: dtcs033-2.14.0 probing 0547:7303
[  318.380881][ T5952] usb 6-1: USB disconnect, device number 12
[  318.424326][ T5911] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  318.623258][ T5911] usb 3-1: device descriptor read/8, error -71
[  319.023702][ T5911] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[  319.216745][ T5911] usb 3-1: device descriptor read/8, error -71
[  319.324180][ T5911] usb usb3-port1: unable to enumerate USB device
[  320.981176][ T9086] loop5: detected capacity change from 0 to 7
[  320.992275][ T9086] Dev loop5: unable to read RDB block 7
[  321.000385][ T9086]  loop5: unable to read partition table
[  321.074078][ T9086] loop5: partition table beyond EOD, truncated
[  321.146559][ T9086] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  321.323711][ T5952] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  321.503708][ T5952] usb 5-1: Using ep0 maxpacket: 32
[  321.519262][ T5952] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  321.529448][ T5952] usb 5-1: config 0 has no interface number 0
[  321.536788][ T5952] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  321.554329][ T5952] usb 5-1: config 0 interface 1 has no altsetting 0
[  321.597317][ T5952] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  321.615902][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.640184][ T5952] usb 5-1: Product: syz
[  321.665144][ T5952] usb 5-1: Manufacturer: syz
[  321.688724][ T5952] usb 5-1: SerialNumber: syz
[  321.717346][ T5952] usb 5-1: config 0 descriptor??
[  322.021672][ T5952] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  322.270123][ T5952] cx231xx 5-1:0.1: Failed to read PCB config
[  322.299195][ T5952] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71
[  322.361288][ T5952] usb 5-1: USB disconnect, device number 54
[  322.367402][ T7351] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  323.392834][   T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  323.632904][ T7351] usb 2-1: Using ep0 maxpacket: 8
[  323.649454][ T7351] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  323.667312][ T7351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.690059][ T7351] usb 2-1: Product: syz
[  323.694935][   T24] usb 6-1: Using ep0 maxpacket: 8
[  323.720843][   T24] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  323.732283][ T7351] usb 2-1: Manufacturer: syz
[  323.741248][   T24] usb 6-1: config 6 interface 0 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[  323.759278][ T7351] usb 2-1: SerialNumber: syz
[  323.777504][ T7351] usb 2-1: config 0 descriptor??
[  323.789223][   T24] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  323.812098][   T24] usb 6-1: config 6 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0
[  323.833985][   T24] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  323.854163][ T5952] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  323.910199][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.083703][ T5952] usb 5-1: Using ep0 maxpacket: 32
[  324.089914][ T7351] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  324.111177][   T24] usb 6-1: Product: syz
[  324.128177][   T24] usb 6-1: Manufacturer: syz
[  324.143318][   T24] usb 6-1: SerialNumber: syz
[  324.148068][ T5952] usb 5-1: device descriptor read/all, error -71
[  324.158717][   T24] hso 6-1:6.0: Can't find BULK OUT endpoint
[  324.656309][   T24] usb 6-1: USB disconnect, device number 13
[  324.887216][ T7351] usb write operation failed. (-71)
[  324.918071][ T7351] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  324.946373][ T7351] dvbdev: DVB: registering new adapter (Terratec H7)
[  324.959698][ T7351] usb 2-1: media controller created
[  324.969100][ T7351] usb read operation failed. (-71)
[  324.982747][ T7351] usb write operation failed. (-71)
[  325.013633][ T7351] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  325.073111][ T7351] usb 2-1: USB disconnect, device number 45
[  325.807583][   T30] kauditd_printk_skb: 37 callbacks suppressed
[  325.807595][   T30] audit: type=1326 audit(1771042332.104:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9126 comm="syz.4.847" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd4f79bf79 code=0x0
[  325.861147][ T9129] netlink: 146 bytes leftover after parsing attributes in process `syz.4.847'.
[  325.890181][ T9132] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  325.990659][ T9132] bond2 (unregistering): Released all slaves
[  326.243799][ T7348] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  326.405863][ T7348] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  326.424943][ T7348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.537452][ T7348] usb 2-1: config 0 descriptor??
[  326.574429][ T7348] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  326.657116][ T9147] netlink: 104 bytes leftover after parsing attributes in process `syz.5.851'.
[  326.773020][ T7348] usb 2-1: USB disconnect, device number 46
[  326.926930][ T9150] netlink: 'syz.2.852': attribute type 4 has an invalid length.
[  327.030355][ T9149] block device autoloading is deprecated and will be removed.
[  327.166708][ T9149] warning: `syz.2.852' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  327.209996][ T9149] xt_CT: You must specify a L4 protocol and not use inversions on it
[  328.543384][ T9173] batadv_slave_1: entered promiscuous mode
[  328.788168][ T9177] netlink: 'syz.5.860': attribute type 32 has an invalid length.
[  328.803698][ T5952] usb 3-1: new low-speed USB device number 53 using dummy_hcd
[  328.823058][ T9177] netlink: 20 bytes leftover after parsing attributes in process `syz.5.860'.
[  328.842804][ T9177] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  328.970151][ T5952] usb 3-1: unable to get BOS descriptor or descriptor too short
[  328.993442][ T5952] usb 3-1: unable to read config index 0 descriptor/start: -71
[  329.010762][ T5952] usb 3-1: can't read configurations, error -71
[  329.058980][ T9179] netlink: 32 bytes leftover after parsing attributes in process `syz.5.861'.
[  329.077019][ T9179] netlink: 32 bytes leftover after parsing attributes in process `syz.5.861'.
[  329.225254][ T9181] fuse: Unknown parameter ''
[  329.308744][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.863'.
[  329.317843][ T9183] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  329.372669][ T9171] batadv_slave_1: left promiscuous mode
[  329.831484][   T30] audit: type=1326 audit(1771042336.124:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9190 comm="syz.2.865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff74319bf79 code=0x0
[  329.888556][ T9195] bond0: Removing last ns target with arp_interval on
[  329.911001][   T13] bond0: (slave bond_slave_0): interface is now down
[  329.911725][ T9195] bond0: left allmulticast mode
[  329.928005][ T9189] kvm: pic: level sensitive irq not supported
[  329.928221][ T9189] kvm: pic: non byte read
[  329.954099][ T9189] kvm: pic: level sensitive irq not supported
[  329.954173][ T9189] kvm: pic: non byte read
[  329.964220][   T13] bond0: (slave bond_slave_1): interface is now down
[  329.971389][   T13] bond0: (slave syz_tun): interface is now down
[  330.003620][   T13] bond0: (slave dummy0): interface is now down
[  330.051547][ T9195] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.084764][   T13] bond0: (slave bond_slave_0): interface is now down
[  330.097538][   T13] bond0: (slave bond_slave_1): interface is now down
[  330.120498][   T13] bond0: (slave syz_tun): interface is now down
[  330.147507][   T13] bond0: (slave dummy0): interface is now down
[  330.183502][   T13] bond0: now running without any active interface!
[  331.095346][ T9215] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.212575][ T9216] geneve2: entered promiscuous mode
[  331.315488][ T9216] geneve2: entered allmulticast mode
[  331.332190][   T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  331.715928][   T24] usb 4-1: Using ep0 maxpacket: 16
[  331.737865][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.767923][   T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  331.798322][ T9218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.872'.
[  331.888608][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.899073][ T9219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.872'.
[  331.945308][   T24] usb 4-1: config 0 descriptor??
[  332.741192][   T24] usbhid 4-1:0.0: can't add hid device: -71
[  332.749843][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  332.803150][   T24] usb 4-1: USB disconnect, device number 42
[  332.933615][ T9229] 8021q: adding VLAN 0 to HW filter on device bond1
[  332.973286][ T9229] bond1: entered allmulticast mode
[  332.996954][ T9229] bond0: (slave bond1): Enslaving as an active interface with an up link
[  333.023712][ T5952] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  333.234414][ T5952] usb 6-1: no configurations
[  333.239072][ T5952] usb 6-1: can't read configurations, error -22
[  333.329395][ T9233] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  333.403767][ T5952] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  333.622424][ T5952] usb 6-1: no configurations
[  333.627522][ T5952] usb 6-1: can't read configurations, error -22
[  333.654153][ T5952] usb usb6-port1: attempt power cycle
[  333.994346][   T30] audit: type=1326 audit(1771042340.284:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9241 comm="syz.3.880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8908d9bf79 code=0x0
[  334.016224][ T5952] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  334.076003][ T5952] usb 6-1: no configurations
[  334.080750][ T5952] usb 6-1: can't read configurations, error -22
[  334.233774][ T5952] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  334.294608][ T5952] usb 6-1: no configurations
[  334.301826][ T5952] usb 6-1: can't read configurations, error -22
[  334.337159][ T5952] usb usb6-port1: unable to enumerate USB device
[  334.413910][ T3464] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  334.563166][ T9250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.883'.
[  334.595192][ T9250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.883'.
[  335.355757][ T9260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.476620][ T9260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.564068][ T5952] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  335.663646][   T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  335.728019][ T5952] usb 3-1: device descriptor read/64, error -71
[  336.035647][ T5952] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  336.175568][   T30] audit: type=1800 audit(1771042342.444:272): pid=9262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.884" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=28000 res=0 errno=0
[  336.207938][ T5952] usb 3-1: device descriptor read/64, error -71
[  336.344009][ T5952] usb usb3-port1: attempt power cycle
[  336.704819][ T5952] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  336.752144][ T5952] usb 3-1: device descriptor read/8, error -71
[  337.023946][ T5952] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  337.075049][ T5952] usb 3-1: device descriptor read/8, error -71
[  337.194233][ T5952] usb usb3-port1: unable to enumerate USB device
[  337.227075][ T9286] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  337.282730][ T9286] vivid-003: disconnect
[  337.479164][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.894'.
[  337.488138][ T9290] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  337.534515][ T5952] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  337.733746][ T5952] usb 6-1: Using ep0 maxpacket: 8
[  337.745661][ T5952] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  337.755516][ T5952] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  337.912393][ T5952] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  337.953807][ T5952] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  337.971144][ T5952] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  338.028713][ T5952] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  338.053758][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.168562][ T9285] vivid-003: reconnect
[  338.176700][ T9285] tipc: Disabling bearer <eth:syzkaller0>
[  338.298215][ T5952] usb 6-1: usb_control_msg returned -32
[  338.324427][ T5952] usbtmc 6-1:16.0: can't read capabilities
[  338.524738][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'.
[  338.536635][ T9301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.896'.
[  339.168839][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.178942][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.423724][ T7348] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  339.585554][ T7348] usb 3-1: Using ep0 maxpacket: 8
[  339.601058][ T7348] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  339.624749][ T7348] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  339.669430][ T7348] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  339.683676][ T7348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.711950][ T7348] usb 3-1: Product: syz
[  339.722070][ T7348] usb 3-1: Manufacturer: 䲾痁뵈팖烡굧﬛䟗픈빡뱺-ﰬ風옗蠊ઠ⼉㹟䉵ૈ䴠䝿왿䖐1ꄊ馇ˤ紧萉쟫嘿䋈ሪ蛂➈瑎效뤝皤㢗讀苜꿘鿅⇊최⥸캭ꝲ辬쥟鼧ျ攃ﺍ죠篐ቦ㑜㘃䤷਼ⱕ䏹ᅣ釙蒒虀⒦泪敟퓱鎖ᠲ衻ᵉ뗈ᑹ输⧞Ǔ䭯阉妛陵׀韠鷰鷵纕Օ૘腯ㅾ쳬腣堹肢ᤆ瓍ễ㮫Ïꩁ쮟썱嬱Ṡ촄备܁
[  339.833594][ T7348] usb 3-1: SerialNumber: syz
[  340.102382][ T7348] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  340.129709][ T7348] cdc_ncm 3-1:1.0: bind() failure
[  340.161509][ T7348] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  340.184485][ T7348] cdc_ncm 3-1:1.1: bind() failure
[  340.332983][ T7348] usb 6-1: USB disconnect, device number 18
[  340.453867][   T24] usb 3-1: USB disconnect, device number 59
[  340.823734][   T49] wlan0: Trigger new scan to find an IBSS to join
[  340.853971][ T7348] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  341.057414][ T7348] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  341.073883][ T7348] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  341.126588][ T7348] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  341.205331][ T7348] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  341.235002][ T7348] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.265312][ T7348] usb 6-1: Product: syz
[  341.269511][ T7348] usb 6-1: Manufacturer: syz
[  341.305934][ T7348] usb 6-1: SerialNumber: syz
[  341.377480][ T7348] usb 6-1: config 0 descriptor??
[  341.395582][ T7348] uvcvideo 6-1:0.0: probe with driver uvcvideo failed with error -22
[  341.543726][    T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  341.593247][ T5952] usb 6-1: USB disconnect, device number 19
[  341.723612][    T9] usb 3-1: Using ep0 maxpacket: 16
[  341.746042][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  341.793903][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  341.832274][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  341.863783][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.871829][    T9] usb 3-1: Product: syz
[  341.903625][    T9] usb 3-1: Manufacturer: syz
[  341.914076][    T9] usb 3-1: SerialNumber: syz
[  341.934575][    T9] usb 3-1: config 0 descriptor??
[  341.962266][    T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  341.994040][    T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  342.044617][   T30] audit: type=1326 audit(1771042348.344:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.4.906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efd4f79bf79 code=0x0
[  342.393861][ T5952] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  342.418669][   T30] audit: type=1326 audit(1771042348.714:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9338 comm="syz.5.909" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f906239bf79 code=0x0
[  342.562473][    T9] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  342.572379][ T5952] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  342.599297][    T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  342.625381][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.672595][ T5952] usb 2-1: Product: syz
[  342.686496][ T5952] usb 2-1: Manufacturer: syz
[  342.691112][ T5952] usb 2-1: SerialNumber: syz
[  343.027342][ T9348] netlink: 104 bytes leftover after parsing attributes in process `syz.5.911'.
[  343.153802][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  343.238028][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  343.253782][    T9] em28xx 3-1:0.0: AC97 command still being executed: not handled properly!
[  343.272698][    T9] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  343.467516][    T9] em28xx 3-1:0.0: AC97 command still being executed: not handled properly!
[  343.481364][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  343.647670][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  343.660989][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  343.684046][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  343.743798][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  343.768579][    T9] usb 3-1: USB disconnect, device number 60
[  344.159902][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.914'.
[  344.206385][ T9355] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  344.235834][ T9358] netlink: 64 bytes leftover after parsing attributes in process `syz.3.915'.
[  344.380362][ T9360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.916'.
[  344.395529][ T9360] netlink: 32 bytes leftover after parsing attributes in process `syz.2.916'.
[  344.696731][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO
[  344.711961][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  344.764636][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  344.806122][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  344.842405][ T5952] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  344.855545][ T5952] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  344.875705][ T5952] usb 2-1: USB disconnect, device number 47
[  344.974056][   T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  345.064153][ T7343] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  345.135269][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.165393][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.214136][   T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  345.223229][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.234373][ T7343] usb 3-1: Using ep0 maxpacket: 32
[  345.246262][ T7343] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  345.265148][ T7343] usb 3-1: config 0 has no interface number 0
[  345.271323][ T7343] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  345.295573][   T24] usb 6-1: config 0 descriptor??
[  345.333910][ T7343] usb 3-1: config 0 interface 196 has no altsetting 0
[  345.345056][ T7343] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  345.364391][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.399678][ T7343] usb 3-1: Product: syz
[  345.424882][ T7343] usb 3-1: Manufacturer: syz
[  345.429532][ T7343] usb 3-1: SerialNumber: syz
[  345.454837][ T7343] usb 3-1: config 0 descriptor??
[  345.474729][ T9376] xt_NFQUEUE: number of total queues is 0
[  345.484641][ T9367] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  345.722856][   T24] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0
[  345.771272][   T24] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[  345.859060][   T49] wlan0: Trigger new scan to find an IBSS to join
[  345.965049][   T24] cp2112 0003:10C4:EA90.0016: Part Number: 0x09 Device Version: 0xF9
[  346.195488][   T24] cp2112 0003:10C4:EA90.0016: error requesting SMBus config
[  346.227454][   T24] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -71
[  346.271662][   T24] usb 6-1: USB disconnect, device number 20
[  346.463921][ T7343] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  346.524009][ T7343] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  346.833992][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  346.986279][ T9398] netlink: 104 bytes leftover after parsing attributes in process `syz.5.928'.
[  347.066459][   T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  347.227121][   T24] usb 2-1: Using ep0 maxpacket: 16
[  347.240233][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.275743][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.305458][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  347.347345][   T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  347.378664][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.411510][   T24] usb 2-1: config 0 descriptor??
[  347.819613][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  347.861351][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  347.918739][ T7348] usb 3-1: USB disconnect, device number 61
[  347.940557][   T24] usb 2-1: USB disconnect, device number 48
[  348.075105][ T7348] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  348.531235][ T9424] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  348.546645][ T9424] bond1 (unregistering): Released all slaves
[  348.617564][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.931'.
[  348.628997][ T9430] netlink: 16 bytes leftover after parsing attributes in process `syz.4.931'.
[  348.819715][ T7343] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  349.032941][ T7343] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  349.063496][ T7343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.098861][ T7343] usb 4-1: config 0 descriptor??
[  349.126110][ T7343] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  349.480027][ T7343] usb 4-1: USB disconnect, device number 44
[  349.522889][   T30] audit: type=1326 audit(1771042355.814:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.1.933" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fedb2d9bf79 code=0x0
[  350.514860][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'.
[  350.526486][ T9452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.935'.
[  351.221121][   T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  351.568294][   T24] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  351.577733][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  351.664503][   T24] usb 5-1: Product: syz
[  351.668749][   T24] usb 5-1: Manufacturer: syz
[  351.673361][   T24] usb 5-1: SerialNumber: syz
[  351.731938][   T24] usb 5-1: config 0 descriptor??
[  351.756648][   T24] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  352.563763][ T7348] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  352.731694][ T7348] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  352.743741][ T7348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  352.766205][ T9472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.941'.
[  352.775326][ T7348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  352.775710][ T9472] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  352.815912][ T7348] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  352.860584][ T7348] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  352.883745][ T7348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.918079][ T7348] usb 4-1: config 0 descriptor??
[  353.182644][ T7348] usbhid 4-1:0.0: can't add hid device: -71
[  353.214067][ T7348] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  353.273072][ T7348] usb 4-1: USB disconnect, device number 45
[  353.307650][   T24] gspca_sunplus: reg_w_riv err -71
[  353.312877][   T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  353.351560][   T24] usb 5-1: USB disconnect, device number 57
[  353.466478][ T9486] netlink: 104 bytes leftover after parsing attributes in process `syz.3.944'.
[  354.004083][ T9488] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  354.039038][   T30] audit: type=1400 audit(1771042360.334:276): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9487 comm="syz.4.945"
[  354.066604][ T9490] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  354.123932][   T30] audit: type=1400 audit(1771042360.384:277): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=9487 comm="syz.4.945"
[  354.503728][    T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  354.663845][    T9] usb 5-1: Using ep0 maxpacket: 8
[  354.670754][    T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  354.681685][    T9] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  354.713969][    T9] usb 5-1: config 179 has no interface number 0
[  354.748053][    T9] usb 5-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23
[  354.795605][    T9] usb 5-1: config 179 interface 65 has no altsetting 0
[  354.823774][    T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  354.862052][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.124633][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.152875][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.177166][   T24] usb 5-1: USB disconnect, device number 58
[  355.395396][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.949'.
[  355.408054][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.949'.
[  356.303675][ T7343] usb 5-1: new full-speed USB device number 59 using dummy_hcd
[  356.466044][ T7343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  356.476126][ T7343] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  356.485256][ T7343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.525487][ T7343] usb 5-1: config 0 descriptor??
[  356.623825][   T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  356.763839][   T24] usb 4-1: device descriptor read/64, error -71
[  356.946828][ T7343] nintendo 0003:057E:200E.0017: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0
[  357.003698][   T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  357.084495][ T7343] nintendo 0003:057E:200E.0017: Failed charging grip handshake
[  357.092213][ T7343] nintendo 0003:057E:200E.0017: Failed to initialize controller; ret=-110
[  357.133706][   T24] usb 4-1: device descriptor read/64, error -71
[  357.173537][ T7343] nintendo 0003:057E:200E.0017: probe - fail = -110
[  357.200518][ T7343] nintendo 0003:057E:200E.0017: probe with driver nintendo failed with error -110
[  357.226537][ T7352] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  357.243981][   T24] usb usb4-port1: attempt power cycle
[  357.253295][ T7343] usb 5-1: USB disconnect, device number 59
[  357.409247][ T7352] usb 3-1: config 0 has no interfaces?
[  357.421237][ T7352] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  357.431484][ T7352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.440078][ T7352] usb 3-1: Product: syz
[  357.444735][ T7352] usb 3-1: Manufacturer: syz
[  357.450893][ T7352] usb 3-1: SerialNumber: syz
[  357.458693][ T7352] usb 3-1: config 0 descriptor??
[  357.583772][   T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  357.615184][   T24] usb 4-1: device descriptor read/8, error -71
[  357.663766][ T7352] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  357.768981][ T9522] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  357.780911][ T7343] usb 3-1: USB disconnect, device number 62
[  357.854552][   T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  357.865838][ T7352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  357.879603][ T7352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  357.899444][   T24] usb 4-1: device descriptor read/8, error -71
[  357.963210][ T7352] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  357.982940][ T7352] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  358.019441][   T24] usb usb4-port1: unable to enumerate USB device
[  358.027530][ T7352] usb 2-1: Manufacturer: syz
[  358.042820][ T7352] usb 2-1: config 0 descriptor??
[  359.100503][ T7352] uclogic 0003:256C:006D.0018: failed retrieving string descriptor #200: -71
[  359.132488][ T7352] uclogic 0003:256C:006D.0018: failed retrieving pen parameters: -71
[  359.180634][ T7352] uclogic 0003:256C:006D.0018: failed probing pen v2 parameters: -71
[  359.222628][ T7352] uclogic 0003:256C:006D.0018: failed probing parameters: -71
[  359.240679][ T7352] uclogic 0003:256C:006D.0018: probe with driver uclogic failed with error -71
[  359.297054][ T7352] usb 2-1: USB disconnect, device number 49
[  359.659161][ T9560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'.
[  359.685819][    T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  359.698935][ T9560] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  359.762449][ T9568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.781078][ T9568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.928825][    T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  359.952846][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.973699][ T7352] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  359.985333][    T9] usb 5-1: Product: syz
[  359.993677][   T24] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  359.999961][    T9] usb 5-1: Manufacturer: syz
[  360.018636][    T9] usb 5-1: SerialNumber: syz
[  360.039259][    T9] usb 5-1: config 0 descriptor??
[  360.126372][ T7352] usb 2-1: Using ep0 maxpacket: 16
[  360.133721][   T24] usb 4-1: device descriptor read/64, error -71
[  360.142828][ T7352] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.168330][ T7352] usb 2-1: config 0 interface 0 has no altsetting 0
[  360.185221][ T7352] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  360.204152][ T7352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.225644][ T7352] usb 2-1: config 0 descriptor??
[  360.377387][   T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  360.514184][   T24] usb 4-1: device descriptor read/64, error -71
[  360.646229][   T24] usb usb4-port1: attempt power cycle
[  360.651941][ T9567] netlink: 7 bytes leftover after parsing attributes in process `syz.1.966'.
[  361.003655][   T24] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  361.107639][    T9] usb 5-1: non-Atmel transceiver xxxx19f5
[  361.146758][   T24] usb 4-1: device descriptor read/8, error -71
[  361.321186][    T9] usb 5-1: Firmware version (0.0) predates our first public release.
[  361.338537][    T9] usb 5-1: Please update to version 0.2 or newer
[  361.361746][    T9] usb 5-1: atusb_probe: initialization failed, error = -19
[  361.380129][ T7352] usbhid 2-1:0.0: can't add hid device: -71
[  361.388753][ T7352] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  361.396613][   T24] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  361.414290][    T9] usb 5-1: USB disconnect, device number 60
[  361.434860][   T24] usb 4-1: device descriptor read/8, error -71
[  361.441939][ T7352] usb 2-1: USB disconnect, device number 50
[  361.554136][   T24] usb usb4-port1: unable to enumerate USB device
[  362.704425][ T7352] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  362.877697][ T7352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.887821][ T7352] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  362.897842][ T7352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.962638][ T7352] usb 2-1: config 0 descriptor??
[  363.003800][ T7343] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  363.173727][ T7343] usb 3-1: Using ep0 maxpacket: 32
[  363.200232][ T7343] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  363.233739][ T7343] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64
[  363.263630][ T7343] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  363.315358][ T7343] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  363.345438][ T7343] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.376229][ T7343] usb 3-1: Product: 䛘ⵍ캥ۣ왣낹碉⎥ꩀꧢ啼馑☕驜戄痘ﳷ㰧ⓡ跅춻≃ꭻ샒笴⵱듉ᰐꞗ鯏䟆뎬徠姽⏐䁛㿭㝠泷໇⒵篐㘒෥萘翕앯䜫ꗄ離멷绺굓뎐
[  363.436130][ T7343] usb 3-1: Manufacturer: 撝
[  363.453720][ T7343] usb 3-1: SerialNumber: syz
[  363.480887][ T9588] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  363.493840][ T9588] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  363.751692][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.764205][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.817896][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.870523][ T7352] itetech 0003:258A:6A88.0019: ignoring exceeding usage max
[  363.906484][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.976152][ T7343] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  363.989551][ T7352] itetech 0003:258A:6A88.0019: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.1-1/input0
[  364.044370][ T7343] usb 3-1: USB disconnect, device number 63
[  364.132687][ T7352] usb 2-1: USB disconnect, device number 51
[  364.221354][ T9609] fido_id[9609]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  364.268280][ T9613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'.
[  364.383970][ T7348] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  364.468763][ T9615] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  364.482788][ T9615] bond2 (unregistering): Released all slaves
[  364.543925][ T7348] usb 4-1: Using ep0 maxpacket: 16
[  364.555318][ T7348] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.613595][ T7348] usb 4-1: config 0 interface 0 has no altsetting 0
[  364.620352][ T7348] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  364.665644][ T7348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.715286][ T7348] usb 4-1: config 0 descriptor??
[  364.751337][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.980'.
[  364.811866][ T9619] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  364.855423][ T9623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.981'.
[  365.071765][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'.
[  365.174154][ T9631] netlink: zone id is out of range
[  365.200098][ T9631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.983'.
[  365.225284][ T9631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.983'.
[  365.482362][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  365.492445][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  365.501053][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  365.510236][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  365.518876][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  366.214395][ T7351] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  366.414724][   T49] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  366.724395][ T9636] chnl_net:caif_netlink_parms(): no params data found
[  367.313895][ T7348] usbhid 4-1:0.0: can't add hid device: -71
[  367.319945][ T7348] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  367.410767][ T9648] netlink: 16 bytes leftover after parsing attributes in process `syz.3.985'.
[  367.451055][ T7348] usb 4-1: USB disconnect, device number 54
[  367.488973][ T9636] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.499535][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.540973][ T9636] bridge_slave_0: entered allmulticast mode
[  367.554184][ T9636] bridge_slave_0: entered promiscuous mode
[  367.563358][ T9636] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.572682][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state
[  367.580003][ T9636] bridge_slave_1: entered allmulticast mode
[  367.589617][ T9636] bridge_slave_1: entered promiscuous mode
[  367.615293][ T5822] Bluetooth: hci6: command tx timeout
[  367.632349][ T9651] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  367.658911][ T9651] kvm: pic: non byte read
[  367.676802][ T9651] kvm: pic: level sensitive irq not supported
[  367.676868][ T9651] kvm: pic: non byte read
[  367.734430][ T9651] kvm: pic: level sensitive irq not supported
[  367.734501][ T9651] kvm: pic: non byte read
[  367.746886][ T9651] kvm: pic: level sensitive irq not supported
[  367.746977][ T9651] kvm: pic: non byte read
[  367.769569][ T9636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  367.796664][ T9651] kvm: pic: level sensitive irq not supported
[  367.796791][ T9651] kvm: pic: non byte read
[  367.817272][ T9636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  367.957069][ T9636] team0: Port device team_slave_0 added
[  367.981555][ T9636] team0: Port device team_slave_1 added
[  368.054557][ T7348] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  368.230948][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.239343][ T7348] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  368.250455][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.254243][ T7348] usb 4-1: config 8 has no interface number 0
[  368.298417][ T9636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.318587][ T9636] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.326164][ T9636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  368.366848][ T9636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  368.407294][ T7348] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  368.493886][ T7348] usb 4-1: config 8 interface 177 has no altsetting 0
[  368.511773][ T7348] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  368.561941][ T9636] hsr_slave_0: entered promiscuous mode
[  368.574752][ T7348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.611831][ T9653] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  368.626404][ T9636] hsr_slave_1: entered promiscuous mode
[  368.648958][ T9636] debugfs: 'hsr0' already exists in 'hsr'
[  368.669968][ T9636] Cannot create hsr debugfs directory
[  369.056049][ T9661] xt_TCPMSS: Only works on TCP SYN packets
[  369.114302][ T9661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.160186][ T9661] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.310080][ T7348] usb 4-1: string descriptor 0 read error: -71
[  369.357320][    C0] ir_toy 4-1:8.177: out urb status: -71
[  369.655656][ T9636] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  369.694246][ T5822] Bluetooth: hci6: command tx timeout
[  369.737493][ T9636] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  369.799609][ T9636] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  369.867221][ T9636] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  369.903849][ T7348] ir_toy 4-1:8.177: could not write reset command: -110
[  369.935363][ T7348] ir_toy 4-1:8.177: probe with driver ir_toy failed with error -110
[  370.075654][ T7348] usb 4-1: USB disconnect, device number 55
[  370.348963][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0
[  370.426726][ T9676] batman_adv: batadv0: Adding interface: macsec1
[  370.442579][ T9676] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  370.505256][ T9676] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  370.536946][ T9676] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  370.583891][ T9676] batman_adv: batadv0: Interface activated: macsec1
[  370.652518][ T9679] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  370.668907][ T9679] bond1 (unregistering): Released all slaves
[  370.683915][ T9676] netlink: 'syz.2.990': attribute type 4 has an invalid length.
[  370.776678][ T9636] 8021q: adding VLAN 0 to HW filter on device team0
[  370.804732][ T7351] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  370.837696][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state
[  370.844922][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state
[  370.873652][   T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  370.888604][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state
[  370.895787][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state
[  371.005789][ T7351] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  371.019223][ T7351] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.044395][   T24] usb 5-1: Using ep0 maxpacket: 32
[  371.072320][   T24] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  371.090552][ T7351] usb 4-1: config 0 descriptor??
[  371.109751][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.139837][ T7351] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  371.157325][   T24] usb 5-1: config 0 descriptor??
[  371.176162][ T9636] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.182009][   T24] gspca_main: sunplus-2.14.0 probing 041e:400b
[  371.345925][ T7351] usb 4-1: USB disconnect, device number 56
[  371.378324][ T9636] veth0_vlan: entered promiscuous mode
[  371.435945][ T9636] veth1_vlan: entered promiscuous mode
[  371.625498][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.637025][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.652699][ T9683] netlink: 'syz.4.992': attribute type 1 has an invalid length.
[  371.658442][ T9636] veth0_macvtap: entered promiscuous mode
[  371.708323][ T9683] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  371.728457][ T9636] veth1_macvtap: entered promiscuous mode
[  371.764186][ T9691] netlink: zone id is out of range
[  371.774692][   T24] gspca_sunplus: reg_w_riv err -71
[  371.788358][ T5822] Bluetooth: hci6: command tx timeout
[  371.807325][   T24] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  371.819575][ T9691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.993'.
[  371.908479][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_0
[  371.937052][   T24] usb 5-1: USB disconnect, device number 61
[  371.949411][ T9691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.993'.
[  371.975362][ T9636] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.015185][   T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.025954][   T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.050725][   T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.081235][   T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.126911][ T9695] hsr1: entered allmulticast mode
[  372.154138][ T9695] gtp0: entered allmulticast mode
[  372.175791][ T9695] gretap1: entered allmulticast mode
[  372.205309][ T9698] fuse: Unknown parameter ''
[  372.353733][   T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  372.396487][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.404718][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.502997][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  372.511445][   T24] usb 4-1: Using ep0 maxpacket: 16
[  372.519258][   T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  372.532726][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  372.542990][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  372.555547][   T24] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  372.849148][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.895824][   T24] usb 4-1: config 0 descriptor??
[  373.508379][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'.
[  373.543936][ T9718] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  373.854606][ T5822] Bluetooth: hci6: command tx timeout
[  374.121825][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1002'.
[  374.632280][ T9729] netlink: 96 bytes leftover after parsing attributes in process `syz.4.999'.
[  374.767924][ T9729] vlan2: entered allmulticast mode
[  375.203470][ T7348] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  375.526286][ T7348] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  375.547429][ T7348] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  375.587725][ T7348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.653779][ T7348] usb 5-1: config 0 descriptor??
[  375.688411][ T9732] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  375.864365][   T24] usbhid 4-1:0.0: can't add hid device: -71
[  375.889012][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  375.929440][   T24] usb 4-1: USB disconnect, device number 57
[  376.094502][ T7351] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  376.273667][ T7351] usb 3-1: Using ep0 maxpacket: 16
[  376.297146][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'.
[  376.346346][ T7351] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  376.383754][ T7351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  376.416798][ T7351] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  376.433739][ T7351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.452589][ T7351] usb 3-1: Product: syz
[  376.462021][ T7351] usb 3-1: Manufacturer: syz
[  376.516107][ T7351] usb 3-1: SerialNumber: syz
[  376.541747][ T7351] usb 3-1: config 0 descriptor??
[  376.580373][ T7351] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  376.603656][ T7351] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  376.872707][ T7348] usbhid 5-1:0.0: can't add hid device: -71
[  376.903077][ T7348] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  376.942967][ T7348] usb 5-1: USB disconnect, device number 62
[  377.237351][ T9753] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1008'.
[  377.248252][ T7351] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  377.308465][ T7351] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  377.342042][ T7351] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  377.362821][ T7351] em28xx 3-1:0.0: No AC97 audio processor
[  377.575808][ T7351] usb 3-1: USB disconnect, device number 64
[  377.583092][ T7351] em28xx 3-1:0.0: Disconnecting em28xx
[  377.697499][ T7351] em28xx 3-1:0.0: Freeing device
[  378.193068][ T9758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1009'.
[  378.577288][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  378.583964][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  378.748598][ T9760] macsec0: entered promiscuous mode
[  378.768701][ T9760] macsec0: entered allmulticast mode
[  378.788681][ T9760] veth1_macvtap: entered allmulticast mode
[  378.821922][ T9760] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1011'.
[  379.216092][ T3464] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  379.341879][ T9766] could not allocate digest TFM handle poly1305-neon
[  379.466116][ T9781] x_tables: unsorted underflow at hook 3
[  379.494074][    T9] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  379.550250][ T9783] veth3: entered promiscuous mode
[  379.562234][ T9783] veth3: entered allmulticast mode
[  379.646106][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  379.683744][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  379.704443][    T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  379.737020][    T9] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  379.773379][    T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  379.807077][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8193, setting to 64
[  379.847462][    T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  379.867119][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.994528][    T9] usb 5-1: Product: syz
[  380.015400][    T9] usb 5-1: Manufacturer: syz
[  380.020029][    T9] usb 5-1: SerialNumber: syz
[  380.636740][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv1
[  380.647409][ T9798] batadv1: entered allmulticast mode
[  380.658443][ T9798] team0: Port device batadv1 added
[  381.450851][    T9] usb 5-1: 0:2 : does not exist
[  381.620850][ T9807] fuse: root generation should be zero
[  381.788272][    T9] usb 5-1: USB disconnect, device number 63
[  381.858093][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  381.958106][ T9815] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1022'.
[  382.817566][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1025'.
[  382.877582][ T9820] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  383.103912][ T9824] fuse: Bad value for 'fd'
[  384.067500][ T9831] could not allocate digest TFM handle md5
[  384.363652][ T5952] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  384.583778][ T5952] usb 3-1: device descriptor read/64, error -71
[  384.823874][ T5952] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  385.006447][ T5952] usb 3-1: device descriptor read/64, error -71
[  385.153876][ T5952] usb usb3-port1: attempt power cycle
[  385.503666][ T5952] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  385.543537][    C0] hrtimer: interrupt took 100922 ns
[  385.617833][ T5952] usb 3-1: device descriptor read/8, error -71
[  385.874032][ T5952] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  385.957626][ T5952] usb 3-1: device descriptor read/8, error -71
[  386.220929][ T5952] usb usb3-port1: unable to enumerate USB device
[  386.268103][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1034'.
[  386.295846][ T9855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1034'.
[  387.546361][   T30] audit: type=1326 audit(1771042393.814:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  387.593749][   T30] audit: type=1326 audit(1771042393.814:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  387.617586][   T30] audit: type=1326 audit(1771042393.814:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  387.640103][   T30] audit: type=1326 audit(1771042393.814:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  387.680624][   T30] audit: type=1326 audit(1771042393.814:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  387.744719][   T30] audit: type=1326 audit(1771042393.814:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  387.815129][ T7351] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  387.959663][ T9879] netlink: set zone limit has 4 unknown bytes
[  387.971626][   T30] audit: type=1326 audit(1771042393.824:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  388.096841][ T7351] usb 2-1: Using ep0 maxpacket: 32
[  388.217915][ T7351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  388.232718][ T7351] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  388.249647][   T30] audit: type=1326 audit(1771042393.824:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  388.333106][ T7351] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  388.371814][ T7351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  388.469916][   T30] audit: type=1326 audit(1771042393.824:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  388.501535][ T7351] usb 2-1: config 0 descriptor??
[  388.564098][   T30] audit: type=1326 audit(1771042393.824:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9872 comm="syz.1.1040" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fedb2d9bf79 code=0x7ffc0000
[  389.963680][ T5952] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  390.154472][ T5952] usb 5-1: Using ep0 maxpacket: 16
[  390.196844][ T5952] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  390.221708][ T5952] usb 5-1: config 0 interface 0 has no altsetting 0
[  390.239249][ T5952] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  390.281295][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.373172][ T5952] usb 5-1: config 0 descriptor??
[  390.815570][ T7351] usbhid 2-1:0.0: can't add hid device: -71
[  390.821585][ T7351] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  390.831854][ T7351] usb 2-1: USB disconnect, device number 53
[  391.624007][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1051'.
[  391.639924][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1051'.
[  391.657797][ T7343] IPVS: starting estimator thread 0...
[  391.756750][ T9929] IPVS: using max 33 ests per chain, 79200 per kthread
[  391.763786][ T7352] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  392.084685][ T7352] usb 4-1: Using ep0 maxpacket: 16
[  392.103688][ T7351] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  392.118062][ T7352] usb 4-1: config 0 has no interfaces?
[  392.130164][ T7352] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  392.139980][ T7352] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  392.150470][ T7352] usb 4-1: Manufacturer: syz
[  392.172928][ T7352] usb 4-1: config 0 descriptor??
[  392.229400][   T24] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  392.506745][ T7351] usb 2-1: Using ep0 maxpacket: 16
[  392.567293][ T7351] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  392.585938][ T7351] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  392.653871][   T24] usb 3-1: Using ep0 maxpacket: 16
[  392.724057][   T24] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.737677][ T5952] usbhid 5-1:0.0: can't add hid device: -71
[  392.744376][ T5952] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  392.754928][ T7351] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  392.768463][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  392.787550][   T24] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  392.835761][ T9936] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1054'.
[  392.853753][ T5952] usb 5-1: USB disconnect, device number 64
[  392.865851][ T7351] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  392.908574][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.917122][ T7351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  392.934948][ T7351] usb 2-1: SerialNumber: syz
[  392.940386][   T24] usb 3-1: config 0 descriptor??
[  392.970312][ T9922] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  393.004118][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1050'.
[  393.096036][ T9916] 8021q: adding VLAN 0 to HW filter on device bond0
[  393.118569][ T9916] 8021q: adding VLAN 0 to HW filter on device team0
[  393.223781][ T5952] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  393.247253][ T9916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  393.418688][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  393.441761][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  393.461284][ T5952] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00
[  393.473953][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.591393][ T5952] usb 5-1: config 0 descriptor??
[  394.317814][ T7351] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  394.364270][ T7351] usb 2-1: USB disconnect, device number 54
[  394.836023][ T9950] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  394.857614][ T9950] bond1 (unregistering): Released all slaves
[  395.071852][ T9955] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1058'.
[  395.568287][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  395.606462][ T5911] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  395.617561][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  395.675418][   T24] usb 3-1: USB disconnect, device number 69
[  395.843699][ T5911] usb 7-1: Using ep0 maxpacket: 32
[  395.864297][ T5911] usb 7-1: config 0 has an invalid interface number: 12 but max is 0
[  395.881802][ T5911] usb 7-1: config 0 has no interface number 0
[  395.901286][ T5911] usb 7-1: config 0 interface 12 has no altsetting 0
[  395.942629][ T5911] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  396.033354][ T5828] Bluetooth: hci5: command 0x0406 tx timeout
[  396.093776][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.102906][ T5911] usb 7-1: Product: syz
[  396.118274][ T5911] usb 7-1: Manufacturer: syz
[  396.128417][ T5911] usb 7-1: SerialNumber: syz
[  396.164236][ T5911] usb 7-1: config 0 descriptor??
[  396.196039][ T7343] usb 4-1: USB disconnect, device number 58
[  396.278048][ T9962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1060'.
[  396.290409][ T9961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1060'.
[  396.457753][ T5911] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  396.487981][ T5911] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71
[  396.515616][ T5911] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  396.685521][ T9969] usb usb8: usbfs: process 9969 (syz.6.1062) did not claim interface 0 before use
[  396.703697][ T5911] f81534 7-1:0.12: probe with driver f81534 failed with error -71
[  396.715962][ T9969] xt_CT: You must specify a L4 protocol and not use inversions on it
[  396.879477][ T5911] usb 7-1: USB disconnect, device number 2
[  397.380051][ T5952] usb 5-1: string descriptor 0 read error: -71
[  397.410498][ T5952] uclogic 0003:5543:0045.001A: failed retrieving string descriptor #200: -71
[  397.419471][ T5952] uclogic 0003:5543:0045.001A: failed retrieving pen parameters: -71
[  397.429764][ T5952] uclogic 0003:5543:0045.001A: failed probing pen v2 parameters: -71
[  397.469263][ T5952] uclogic 0003:5543:0045.001A: failed probing parameters: -71
[  397.494256][ T5952] uclogic 0003:5543:0045.001A: probe with driver uclogic failed with error -71
[  397.548819][ T5952] usb 5-1: USB disconnect, device number 65
[  397.723723][ T7343] usb 4-1: new low-speed USB device number 59 using dummy_hcd
[  397.983758][ T7343] usb 4-1: device descriptor read/64, error -71
[  398.275568][ T7343] usb 4-1: new low-speed USB device number 60 using dummy_hcd
[  398.419812][ T3532] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  398.483850][ T7343] usb 4-1: device descriptor read/64, error -71
[  398.494630][ T9989] mmap: syz.6.1068 (9989): VmData 37588992 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  398.627552][ T7343] usb usb4-port1: attempt power cycle
[  399.004614][ T7343] usb 4-1: new low-speed USB device number 61 using dummy_hcd
[  399.034819][ T7343] usb 4-1: device descriptor read/8, error -71
[  399.273660][ T7343] usb 4-1: new low-speed USB device number 62 using dummy_hcd
[  399.283969][ T7348] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  399.325044][ T7343] usb 4-1: device descriptor read/8, error -71
[  399.443767][ T7343] usb usb4-port1: unable to enumerate USB device
[  399.471158][ T7348] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  399.481450][ T7348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.519704][ T7348] usb 3-1: Product: syz
[  399.576959][ T7348] usb 3-1: Manufacturer: syz
[  399.622780][ T7348] usb 3-1: SerialNumber: syz
[  400.259526][   T30] kauditd_printk_skb: 55 callbacks suppressed
[  400.259543][   T30] audit: type=1326 audit(1771042406.544:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.307480][T10000] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  400.365217][   T30] audit: type=1326 audit(1771042406.594:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.431768][T10000] bond2 (unregistering): Released all slaves
[  400.495045][   T30] audit: type=1326 audit(1771042406.614:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.597988][   T30] audit: type=1326 audit(1771042406.614:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.727163][   T30] audit: type=1326 audit(1771042406.614:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.727198][   T30] audit: type=1326 audit(1771042406.614:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.727224][   T30] audit: type=1326 audit(1771042406.614:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.727250][   T30] audit: type=1326 audit(1771042406.614:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.727292][   T30] audit: type=1326 audit(1771042406.614:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.727321][   T30] audit: type=1326 audit(1771042406.734:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10003 comm="syz.4.1071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4f79bf79 code=0x7ffc0000
[  400.804033][ T7348] rtl8150 3-1:1.0: couldn't reset the device
[  400.804360][ T7348] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[  401.026667][   T31] INFO: task syz.0.622:8264 blocked for more than 143 seconds.
[  401.026691][   T31]       Tainted: G             L      syzkaller #0
[  401.026700][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  401.026706][   T31] task:syz.0.622       state:D stack:27960 pid:8264  tgid:8263  ppid:5836   task_flags:0x400040 flags:0x00080002
[  401.026780][   T31] Call Trace:
[  401.026786][   T31]  <TASK>
[  401.026796][   T31]  __schedule+0x157c/0x52b0
[  401.026834][   T31]  ? __pfx___schedule+0x10/0x10
[  401.026862][   T31]  ? schedule+0x90/0x360
[  401.026879][   T31]  schedule+0x164/0x360
[  401.026897][   T31]  schedule_preempt_disabled+0x13/0x30
[  401.026912][   T31]  __mutex_lock+0x7fe/0x1300
[  401.026933][   T31]  ? __mutex_lock+0x5ac/0x1300
[  401.026953][   T31]  ? usbdev_open+0x182/0x770
[  401.026972][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  401.026990][   T31]  ? bus_find_device+0x27d/0x2d0
[  401.027010][   T31]  ? __pfx_bus_find_device+0x10/0x10
[  401.027029][   T31]  ? usbdev_open+0xa7/0x770
[  401.027042][   T31]  ? __kmalloc_cache_noprof+0x15b/0x660
[  401.027066][   T31]  usbdev_open+0x182/0x770
[  401.027081][   T31]  ? kobject_get_unless_zero+0x167/0x1f0
[  401.027103][   T31]  ? __pfx_usbdev_open+0x10/0x10
[  401.027120][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[  401.027143][   T31]  chrdev_open+0x4cd/0x5e0
[  401.027159][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  401.027173][   T31]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  401.027195][   T31]  ? __pfx_chrdev_open+0x10/0x10
[  401.027208][   T31]  do_dentry_open+0x785/0x14e0
[  401.027232][   T31]  vfs_open+0x3b/0x340
[  401.027245][   T31]  ? path_openat+0x2df0/0x3860
[  401.027266][   T31]  path_openat+0x2e08/0x3860
[  401.027294][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  401.027318][   T31]  ? stack_depot_save_flags+0x33/0x810
[  401.027341][   T31]  ? __pfx_path_openat+0x10/0x10
[  401.027369][   T31]  ? __x64_sys_openat+0x138/0x170
[  401.027387][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  401.027408][   T31]  do_file_open+0x23e/0x4a0
[  401.027430][   T31]  ? __pfx_do_file_open+0x10/0x10
[  401.027461][   T31]  ? _raw_spin_unlock+0x28/0x50
[  401.027474][   T31]  ? alloc_fd+0x64b/0x6c0
[  401.027495][   T31]  do_sys_openat2+0x113/0x200
[  401.027512][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  401.027528][   T31]  ? exc_page_fault+0x6a/0xc0
[  401.027567][   T31]  ? do_user_addr_fault+0xc6f/0x1340
[  401.027586][   T31]  __x64_sys_openat+0x138/0x170
[  401.027605][   T31]  do_syscall_64+0x14d/0xf80
[  401.027621][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.027634][   T31]  ? trace_irq_disable+0x37/0x100
[  401.027650][   T31]  ? clear_bhb_loop+0x40/0x90
[  401.027667][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  401.027684][   T31] RIP: 0033:0x7fbb2bd5c84e
[  401.027696][   T31] RSP: 002b:00007fbb2cbceb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  401.027711][   T31] RAX: ffffffffffffffda RBX: 00007fbb2cbcf6c0 RCX: 00007fbb2bd5c84e
[  401.027721][   T31] RDX: 000000000000a401 RSI: 00007fbb2cbcec00 RDI: ffffffffffffff9c
[  401.027731][   T31] RBP: 00007fbb2cbcec00 R08: 0000000000000000 R09: 0000000000000000
[  401.027740][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  401.027749][   T31] R13: 00007fbb2c016038 R14: 00007fbb2c015fa0 R15: 00007fbb2c13fa48
[  401.027769][   T31]  </TASK>
[  401.027791][   T31] 
[  401.027791][   T31] Showing all locks held in the system:
[  401.027800][   T31] 3 locks held by kworker/1:0/24:
[  401.027810][   T31] 1 lock held by khungtaskd/31:
[  401.027817][   T31]  #0: ffffffff8e75e3e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  401.027865][   T31] 3 locks held by kworker/u8:4/62:
[  401.027873][   T31]  #0: ffff88813fe44148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  401.027909][   T31]  #1: ffffc9000210fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  401.027944][   T31]  #2: ffffffff8fbc4d48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  401.027999][   T31] 2 locks held by getty/5582:
[  401.028006][   T31]  #0: ffff88803634b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  401.028042][   T31]  #1: ffffc9000362b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  401.028084][   T31] 1 lock held by udevd/5831:
[  401.028091][   T31]  #0: ffff88801b6cd988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x5e0
[  401.028132][   T31] 5 locks held by kworker/0:6/5909:
[  401.028140][   T31] 3 locks held by kworker/1:5/5911:
[  401.028148][   T31]  #0: ffff88813fe07548 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  401.028182][   T31]  #1: ffffc90004e5fc40 ((work_completion)(&helper->damage_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  401.028218][   T31]  #2: ffff88801d78b280 (&helper->lock){+.+.}-{4:4}, at: drm_fb_helper_damage_work+0x125/0x750
[  401.028257][   T31] 1 lock held by syz.0.622/8264:
[  401.028264][   T31]  #0: ffff888029c65198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770
[  401.028299][   T31] 1 lock held by syz.5.934/9441:
[  401.028307][   T31]  #0: ffff888029c65198 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770
[  401.028340][   T31] 3 locks held by syz.2.1070/9992:
[  401.028348][   T31]  #0: ffffffff8fc32970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  401.028382][   T31]  #1: ffffffff8fc32788 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  401.028417][   T31]  #2: ffffffff8fbc4d48 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x3105/0x4220
[  401.028457][   T31] 2 locks held by syz.1.1069/9995:
[  401.028464][   T31] 1 lock held by syz.1.1069/9998:
[  401.028472][   T31] 3 locks held by syz.1.1069/10000:
[  401.028480][   T31] 1 lock held by syz.3.1072/10009:
[  401.028488][   T31] 7 locks held by syz.3.1072/10010:
[  401.028496][   T31] 1 lock held by syz.6.1073/10017:
[  401.028503][   T31] 1 lock held by syz.6.1073/10019:
[  401.028511][   T31]  #0: ffffffff8fbc4d48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0
[  401.028544][   T31] 
[  401.028548][   T31] =============================================
[  401.028548][   T31] 
[  401.028558][   T31] NMI backtrace for cpu 0
[  401.028570][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.028586][   T31] Tainted: [L]=SOFTLOCKUP
[  401.028590][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  401.028597][   T31] Call Trace:
[  401.028602][   T31]  <TASK>
[  401.028606][   T31]  dump_stack_lvl+0xe8/0x150
[  401.028624][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  401.028642][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  401.028658][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  401.028679][   T31]  sys_info+0x135/0x170
[  401.028695][   T31]  watchdog+0xf90/0xfe0
[  401.028714][   T31]  ? watchdog+0x209/0xfe0
[  401.028734][   T31]  kthread+0x388/0x470
[  401.028752][   T31]  ? __pfx_watchdog+0x10/0x10
[  401.028766][   T31]  ? __pfx_kthread+0x10/0x10
[  401.028783][   T31]  ret_from_fork+0x51e/0xb90
[  401.028799][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  401.028813][   T31]  ? __switch_to+0xc7d/0x1400
[  401.028827][   T31]  ? __pfx_kthread+0x10/0x10
[  401.028849][   T31]  ret_from_fork_asm+0x1a/0x30
[  401.028876][   T31]  </TASK>
[  401.028881][   T31] Sending NMI from CPU 0 to CPUs 1:
[  401.028927][    C1] NMI backtrace for cpu 1
[  401.028940][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.028959][    C1] Tainted: [L]=SOFTLOCKUP
[  401.028965][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  401.028973][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  401.028992][    C1] Code: 34 7a 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 88 29 00 fb f4 <e9> bc e8 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  401.029005][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246
[  401.029018][    C1] RAX: 000000000071236f RBX: ffffffff819970ed RCX: 0000000080000001
[  401.029028][    C1] RDX: 0000000000000001 RSI: ffffffff8deecd91 RDI: ffffffff8c279900
[  401.029055][    C1] RBP: ffffc90000197f10 R08: ffff8880b873375b R09: 1ffff110170e66eb
[  401.029067][    C1] R10: dffffc0000000000 R11: ffffed10170e66ec R12: ffffffff9010fb70
[  401.029078][    C1] R13: 1ffff11003bd2000 R14: 0000000000000001 R15: 0000000000000001
[  401.029088][    C1] FS:  0000000000000000(0000) GS:ffff8881255a0000(0000) knlGS:0000000000000000
[  401.029107][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  401.029117][    C1] CR2: 0000200000144030 CR3: 0000000092f70000 CR4: 00000000003526f0
[  401.029131][    C1] Call Trace:
[  401.029137][    C1]  <TASK>
[  401.029142][    C1]  default_idle+0x9/0x20
[  401.029162][    C1]  default_idle_call+0x72/0xb0
[  401.029182][    C1]  do_idle+0x1bd/0x500
[  401.029200][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  401.029220][    C1]  ? __pfx_do_idle+0x10/0x10
[  401.029242][    C1]  cpu_startup_entry+0x43/0x60
[  401.029260][    C1]  start_secondary+0x101/0x110
[  401.029276][    C1]  common_startup_64+0x13e/0x147
[  401.029307][    C1]  </TASK>
[  401.029905][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  401.029918][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  401.029935][   T31] Tainted: [L]=SOFTLOCKUP
[  401.029940][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  401.029947][   T31] Call Trace:
[  401.029952][   T31]  <TASK>
[  401.029958][   T31]  vpanic+0x56c/0xa60
[  401.029977][   T31]  ? __pfx_vpanic+0x10/0x10
[  401.030000][   T31]  panic+0xc5/0xd0
[  401.030016][   T31]  ? __pfx_panic+0x10/0x10
[  401.030031][   T31]  ? printk_trigger_flush+0x13d/0x180
[  401.030052][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  401.030072][   T31]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  401.030093][   T31]  watchdog+0xfda/0xfe0
[  401.030112][   T31]  ? watchdog+0x209/0xfe0
[  401.030133][   T31]  kthread+0x388/0x470
[  401.030150][   T31]  ? __pfx_watchdog+0x10/0x10
[  401.030184][   T31]  ? __pfx_kthread+0x10/0x10
[  401.030204][   T31]  ret_from_fork+0x51e/0xb90
[  401.030221][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  401.030236][   T31]  ? __switch_to+0xc7d/0x1400
[  401.030252][   T31]  ? __pfx_kthread+0x10/0x10
[  401.030272][   T31]  ret_from_fork_asm+0x1a/0x30
[  401.030301][   T31]  </TASK>
[  401.031034][   T31] Kernel Offset: disabled