last executing test programs:

18.365804954s ago: executing program 0 (id=6270):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r0 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x269, 0x0, 0x8}]})
r7 = syz_io_uring_setup(0x38fe, &(0x7f0000000300)={0x0, 0x1fffff, 0x10100}, &(0x7f0000000180)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2})
io_uring_enter(r7, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r10 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r11 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10c})
ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r10, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48)
rename(0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)

15.859935753s ago: executing program 0 (id=6264):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=<r2=>0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4)
r4 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket(0x80000000000000a, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x81)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e24, 0x5, 0x2, 0x0, 0x0, 0x67}, {0x2000000000, 0x67b0, 0x1, 0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0x7}, {0x6, 0x80000ffffffffe, 0x4053e5, 0x20}, 0x20004, 0x0, 0x1, 0x0, 0x1, 0x3}, {{@in=@broadcast, 0x40000002, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x4, 0xfffffffd, 0x2}}, 0xe8)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108)
socket$netlink(0x10, 0x3, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="27050200340f140f3600002fb96dbcf706060000170000005f45f491", 0x1c}, {&(0x7f0000001340)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a668a1800bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a191d91f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05889b045696721c79bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb0d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78877a072d12d0429b9b9957a695c3289b4a59469691115e6ba204181708b9d1ae47418ed594b8128f20c100f5485a84e60d73ab818da73fab78caf42afd1f89cdb29dfdd6676c55ea00d35321bc4878170c62b056b4e03ae556ac804026cabcbc8e79e7a18f2f56442cd650aa2bc88f62ebb65bfafd3e5b4c62ac2e720ff0fdf03c46889df55ff91058319c953f90cd6e7f7b15d56a58ff6128357510c4c618aa25434881d58c39092969ba1f7c444465f16d1f2561991e357bda928f2a50422f774f318fb41169a0d0324a8efd19b940a17c28cda06b750cd02155dbdbd1dc695e190a997ae8f4bb8766983d8db8678a78ae8f044b868549e9c60f7ce25a36300ce07f304e75d285e914b3aec703969df969b2736dd99fcab1944c751f8ef4c34cbb86d5f27ef9982be245949d5579b540750d1eac428b0cd2541295b577573b27e9ecac3934987e85b44bc85e6e307cf6f5683bf1c817369d556a368bc5560a1737aa2bec3cac4689e04fbe851ed4b6c1a355950522f8918af3855fe97ec285da15a20e8119483e7419fa2b0639d5add10b396a8033ec2b98d9a9fca3fc4202d0a6bcfa55798eacafa4c8efafb73a2ab89bb58b0c20364a6ad9c233dfb1bdbb87b8f91e3ab9790e876f906107183419aa7480e327388c01dc5f2d5bcb8a7565cddc4e1275741116416b66bf3adf9e7e31c3fc518740446ed2a394e7699baf9408c62b4c0e7a11dec8f4a67e78a3f00bedae9f55f36c52a1fd4ee3a8be7285f9ca898ee63d3718a7c4603bcb9a24537b34a41a6c0eee4cc609b014d3f4fb928aa7e3fa7a4f97dcef5c0e526b650284ffeda82f603ed9ea1eb6627d29d8bcd6c7e6fe128b1c4463b2cfe50c0ff9a46090635dde4b4d4a984e5a91f7486856cd2bf85088fa4d27b219628be8cdba7004d00985a73fb5b0b4b0f96844e73a8ff7884bdee1a0d6e62decfeebfb56351c135e6580fd61ea806ee5592fe4ffba5c73b8a4a04d44aa52645320cb73fe0c5f14a971d3b3f64c85f5ebaab5e1a061f5186050230286331048e43368e45cfc88e8f4d0d3b1b86b64d5394bc68c2b754389b3c18a45c1edb0496dd88cb3113bbdf1a0f127eb8cd52caf8da95b83d0decad3775b2f2e43776d0d32d447cdd0b267b32775e3473f51a233f8c91a4c07ad669da1844f3d9554f399d43ca1eda29c5c761b3936f845f0c4d1c090000004b5ab3291e06cd86de6116fc3236a11343d6f4ad02199717054ac15b0d0000000000007bd4bea33c0ca36e2c4209026849de21c1da1057f353cc824947d75119e4501b98cb9e621d0644e3f4a75353093557afcee7da41ad368fe1cbb426922772b9b262a861fbce9ae86d6e8c5a8de6a1e8f03456c0a354277a2f3ff46a62b6d6cdee4febf23e2350f94b47a05a4d0e7da37a2e97b899d92ca1f3bd1cded5588593e8bb99b9dce0731fa1174de14b63be2bf7e424f870551f213fab437aac092c2e9798959fa3616465e2b36fd49cc9af902d47debec02558c036ed991f1a3895b37cd70f3c405cca362c885542fd976e73be4cf7580a0c4d5a9527c77c189573e3be07ed15472f6b012939abb5be9f3e8a5b720307fb2dbca48b35d121702cfb6b3690559b08fbeb77d53d37582d7f44fe269ac51665632bf070cfc7445741b70306cb3f19b7fbecd19a78092dfd086a0da019734d95660ba4e5ce5bcf25f09403c32e3ec902f3717cca0eca25e791c2b8c2b8988645afa2446d5218abce136c0dbbafb95e4f4727a29cc567b3f73d5dbc1aeee746653a7f5c445add24a9c1b67d1bfeec85d2a6478e80c3acdb9439aa46c8cf14a98ffa89790ef7a94b3146088566812e28ccbafb466772b7fbb98dcf1e792eb6d0de0829c3c49c5ecdeea3e80017324a0fe724565c4e7a242764e9012442cae44b57c7121889c044be05b5eca70efb649bb528e751f072af93ae2c5053fdce196cce158136f904cf64f2cb8becc2d024f5ec32a38d78b87a4dfe7c53769dadef890efd160eb662cedb18a756aed83edfb9efbbb3648eb399e61f80077e64b95eae9d17083aed05cfc2e148621e36be1f41d373c721a11804fce269c688b0c647d6e1083e336d1f7f90a7a080a83397773cc351531070af5c1a1418f28dce95c01052a314a9ebe39cb9cddb8e7855e58c4a636b7f6250ecad312ede18664c03d92e330935295a35ea3e0306f25ca971300f782ae2f6e79a513732d22ef9b9bc41d17df3352a855cdd19b18f5abd6e6420f4f42f01750a64f6acdb6b46622fafebe3e913c64a1a6a59f980e97deae0dc83c12ccae6b430d7a28f21c3e0e38b32f3d5f1d44927fc34ed5c9ddb5be8eb936dbdcd327b63ea69d86c2da15cb834a18ee51a44f2da7b11d79486942fd04eade92fe5d93342970ca4cc73861b15facf97e9c53c15488c5630b17b9364c58652cfa6de0918327498ba8d6120d3be9139c51a6e9017525772397529ddd4fd1905614fd1cc7f1370a577ad10ec9ea742f9aedc9fee42c3df38f4b35ccb1cf8590eaf770b3f74af21f5119ac238e82e92c83321b06f106530abbbd321c3e1dc948accdc21a586ff37253ad1d0c5bfb51541f876be1b6e4f490046204b9edfe9a9721b9019a495d1efed10d4570f4c75ac56aa862f738b46cfe8899f6d92e862611b35be8931a2460dc646ed332b3046baf48613bbb543f4abda22d3d62a484665ba5bbf8fec1bb199b430a6e96cfad417a1644cc5f7f640004836c60f15a174eb7eb1750a71a141549f393c7d88b8729a33f841f7f8f2bd03dccaaa825f2e29105f6b4c11ac8e06bb3be9dfdecce66294a0be9dbc5f40123644fcac59ed0c968eb62fb14d111e900ad1c038f17d5471ab088f704de7db35753f818f55669a76e621b29d975253d177791e1434644a81b2b8bc4c8e147961b4f1b7f3e225571fecb10906957791b27d35a89e3ce84c91a2dc60aee460d8f41eb7b5e171516ef34d8c7dbbc8122cdeffa51b5a393d2cae7f69826d342d4d81b58ca7ddb0e688a15b39a00ef1aed5db337d1ab87e86f835663a4968c8bf5afd7cf80549f42588d9b8ea04ff3d9eac2b8ffd1155a504230103a68bd8b3c416a10d76cee236442a68393896587bc66c01a5f7f411325578d023d7619a89d0bcbbacae99b925fb72994e1ef4240cddad2294a56bec6d6243b95b04345c215bd48a3aa89786ba39b4d2f5015d8bd038c32a7b0eb02a4eb5a640371d9b4af540eb99a1e26547cc214da21e9538754a802972411a0bf416707b95457d0b77daac9bdf27a82b9aa7992ad1d3815f9a56a746eefa6f7e1913b6e3e859b2cc7797adcae825b7aad17c11e66597042c327a6473489a9664c5ce0ff8b1ecfb691daa0bd50c17f4597826553686bc2ee08eaca8dd6f77c626691699141a698e5b517e02130587ee503c7b5f638cbf32166b0d4ebe9222b6c9d50fb3db9d1ab060c31aabeef52cd51e5cf485eecc741e37a47c4996068f1d4b25f182b9d7bee4bec5cb070d3cea2f9762a41bb8d9ec5896ebcb2b17ca82f29bcce456412d8ed531afda50d259fcb7794216b6a9a873b6c3c4493c0c6d3e6a4f81f3b40dcc745a4e2383c678c472b1d5bf3ff02992bfe893a5bc96824039da1ee3cf8593e7d616d62f6e3c3e2c4e0cc58d5445998cf5b1c91c2468b2571b118709668efbbe72911f1bfa96b97c32f71cd7071f4c729e88631a89b53dd4bae6ef9c4ed082916e267479195599e9871b26b92c6885ded29f990070fddc4d8535088ddc70d6e83f797b6fa2260a92602eb90800000001cb7394f0c90fb5913b2f8d8d24c8f1056920e1facbe643dd49d8983b277da7282a986c28d5468aed9a4730579a20346d35f78b6bd2cacb4b9237fbfb0b7a2314105ff3b074a0e340b904e715e99c501e1435c15eaa262893c2883c90f26d2ff91792d46e4d867b62570e0c1e4739b8ac4fff8f778960de1ae40d4c85c51e1c47040bb2caeaf0c71dbb67c30715b8c14d6921831d7678522eeed29444df421ee206ca3be20d1b5fd2d2baf832f097fef590290eea77f8f3ed00b39841421b61f1c0d01def54bec0348be2216a8dad60838f3ad3595a744edeb6202dbcbd9c73a126a79cbefa43c7db0493103c2aa8fecb5cde1773ad0cdd03f5b0cfb0270642a96a9e14d116e9140501df48cdbf725611b398eb2b9e93f8da49e601099e0b2e880a95525b5f3f2edd74ae9d664a1f2e932493b61634ab53a1e2f3bf56add0a7f09c16853814b03a4212b9a0119420948da26bb171b288a66a2f0a4063754c2910512aa1cead69b94b498b5d4c44ce0a4aaa7855ee1a3b7ca738756a00a435062ccb86a40cc01f666d372f323e087ef5db2bc2d17ed1f72db14c52ca6723", 0xe1d}, {&(0x7f0000000180)}], 0x3}, 0x9cdc2384056b48b8)
sched_setattr(r2, &(0x7f00000001c0)={0x38, 0x0, 0x20, 0x6000, 0x2, 0x80000000, 0x4, 0x2, 0x6, 0x1310}, 0x0)

13.599601457s ago: executing program 4 (id=6267):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xe8}}, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
pipe2(0x0, 0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000240)={0x3, 'bond0\x00', {0x6}, 0x2f56})
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
write$tcp_mem(r3, &(0x7f00000001c0)={0x9, 0x20, 0xec, 0x20, 0xe0}, 0x48)
lstat(0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)=0x3)
ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'syztnl0\x00', 0x0, 0x29, 0xc, 0xa2, 0x6, 0x20, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x10, 0x71, 0x27b6}})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f0000000b80)={0x29c, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{{0x8}, {0x98, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x44c1}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x4ee1, 0x7, 0x3, 0x10001}, {0x3, 0x1, 0x80, 0x2}, {0xe571, 0xff, 0x6, 0x5}, {0x1, 0xfa}, {0x7, 0xa, 0x3a, 0xb}]}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0)
r6 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4, 0x3fb, @empty, 0x1}, 0x1c)
pselect6(0x40, &(0x7f00000007c0)={0x9, 0x0, 0x7f, 0x101, 0x5, 0x9, 0x800, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0)

12.004027765s ago: executing program 0 (id=6269):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100feffffff0000000000000000000000000000ffffac1e0001000004d200000000e0000002000000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000ac14141d00000000000000000000000000000000000000000200", @ANYBLOB], 0x16c}}, 0x0)
fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000001c0)=0x3)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000380))
mkdir(&(0x7f00000002c0)='./file0\x00', 0x112)
syz_usb_connect$uac1(0x2, 0x9c, &(0x7f00000024c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x2, 0x80, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1d7, 0xe}, [@selector_unit={0x8, 0x24, 0x5, 0x5, 0x9, "509449"}, @processing_unit={0x8, 0x24, 0x7, 0x5, 0x1, 0x0, 'j'}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x4, 0x3, [0x3, 0x4, 0x9], 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x3, 0x4}, @as_header={0x7, 0x24, 0x1, 0xac, 0x5, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x4, 0x6, 0xeb, {0x7, 0x25, 0x1, 0x1, 0x2, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x8, 0x6, 0x7, {0x7, 0x25, 0x1, 0x0, 0x6, 0x7}}}}}}}]}}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00')
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10)
r6 = fsopen(&(0x7f0000000000)='erofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\'Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\/\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9H\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\xe5\xa8Q\xc9\xe75Q\xea\xd8\xa2=F\x9b\x8f\x8d\xfc\' {e\x949X\xda\xe8H\x1a\x85\xd7%\x93?w}\xfb\xd9t\xea\xbb\xbe\x9b\\\xd7\xd7\xd4\xe2\xd6c(`(r\xd2\xb1G\xe3\xda&\xca\xaa\xba\v\xc5\xa3H\xb1\x11G\xab\xa2\x1f\xa0\xc3\xd9\xcd\xfb\x1a,\x13S\xf1\xfe\xe5F\xf4\xfb\xc8|\x89\x0fNq\x97J\xb9J\x88S\xc5\xb8\x12\x93\xbe\xb9b\xc7\xbc\x03\x03.E\xab\x82\x1c\xbc1\x9d\x14\xfa\x1f\xdd\x1e*\x03`\x91\xe8x\x0f\x05\x1e\xf5\xbfNo\xd4\x0f]S\x85\x89@\xa9f\x05\xfe\x9fkM\xa5\xf6\xc2\x04\xbf\xc7', 0x0)
move_mount(r5, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
getsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000140)=0x4)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
rmdir(&(0x7f0000000300)='./file0\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

10.935540197s ago: executing program 2 (id=6271):
unshare(0x6a040000)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4, 0x20000000})
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000003c0)="e4ae53c8097a4d0e46bce256c620e5d7edc2d49e0600004bc2d7e30a831676e2f094184de73a379fff1d70ca128b660f25ac1af52c4102000000000000005f7cd0a02fcbf97b198162d95b46edf0c5d473a4fc409287b7ffbe6269d7cc2b3d42652d7a14c7f3bb4877076ecd69872ccc3266284a7ab2e7b6949ef113d46100dc61cc3b04ea0b4b9b45b59627718ac6e9f56e15e4ecd11d6f89ac39590ec9e78a1ea72134ea5804d1e9e6bc6367695223de75751f4c5832", 0xb7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x800, 0x3ff)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0], 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000300)={r5})
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
io_setup(0xa, 0x0)
socket$netlink(0x10, 0x3, 0x0)
io_setup(0xff, &(0x7f0000002c40))
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, 0x0, 0x0, 0x8910, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
modify_ldt$write(0x1, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0)

10.244225386s ago: executing program 3 (id=6273):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0))
write$dsp(r2, &(0x7f0000000000)="81", 0x1)
close(r2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r7 = syz_open_pts(r6, 0x141601)
write(r7, &(0x7f0000000000), 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080)

9.846027569s ago: executing program 1 (id=6274):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$vim2m(0x0, 0x800, 0x2)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x5)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24014040)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x101ff, 0x1, 0x5000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fanotify_mark(0xffffffffffffffff, 0x21a, 0x40000032, r4, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

9.640434911s ago: executing program 2 (id=6275):
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050880)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000000)={0x0, 0x300, 0x3c0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
r4 = openat$bsg(0xffffff9c, 0x0, 0x135400, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r4, 0x0, 0x20000004)
r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r6 = dup(r5)
write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28)
sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

9.368055633s ago: executing program 4 (id=6277):
unshare(0x6a040000)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4, 0x20000000})
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000003c0)="e4ae53c8097a4d0e46bce256c620e5d7edc2d49e0600004bc2d7e30a831676e2f094184de73a379fff1d70ca128b660f25ac1af52c4102000000000000005f7cd0a02fcbf97b198162d95b46edf0c5d473a4fc409287b7ffbe6269d7cc2b3d42652d7a14c7f3bb4877076ecd69872ccc3266284a7ab2e7b6949ef113d46100dc61cc3b04ea0b4b9b45b59627718ac6e9f56e15e4ecd11d6f89ac39590ec9e78a1ea72134ea5804d1e9e6bc6367695223de75751f4c5832", 0xb7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x800, 0x3ff)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0], 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000300)={r5})
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
io_setup(0xa, 0x0)
socket$netlink(0x10, 0x3, 0x0)
io_setup(0xff, &(0x7f0000002c40))
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, 0x0, 0x0, 0x8910, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
modify_ldt$write(0x1, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0)

8.610796933s ago: executing program 1 (id=6278):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r4 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x641352225ed612c7, 0x1000, &(0x7f0000cb0000/0x1000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

8.581894455s ago: executing program 2 (id=6279):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000280)={0x7ff, 0x0, 0x4, r2, 0x7})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xf7fa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7b, 0x20000006, 0x5, 0x5, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x4, 0x9, 0x1, 0x4, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0x10001, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x10001, 0x4006, 0x6, 0x3, 0x0, 0x4, 0x8, 0x400, 0x280, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x3f], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0xfffffffa, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a78, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x2, 0xd, 0x4e0, 0x2, 0x84, 0xb, 0x4, 0x9, 0x8, 0x9, 0x0, 0x47, 0x8000, 0x1, 0xfe000000, 0x8, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6bc, 0xbc45, 0x48c93690, 0x10042, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x10000000, 0x7, 0xb, 0x4, 0x9, 0x6, 0x0, 0x1ed, 0x5, 0x7, 0x6, 0x3, 0x9, 0x3e7, 0xb, 0x6, 0x4, 0x2, 0xffffffff, 0x28000008, 0x4, 0x6d02, 0x6, 0x1, 0x800003, 0x1ff, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0xa, 0xac6, 0xbf, 0x2, 0x3, 0xc3, 0x12b, 0x4, 0x1, 0x10000, 0x0, 0x5, 0x1c, 0x7fff, 0x3, 0x2006, 0x80a2e9, 0x4, 0x25], [0x9, 0xbb33, 0x80007, 0xb, 0x5, 0x934, 0x2, 0x2, 0x0, 0x9, 0xce7, 0x9, 0x2, 0x57, 0x45, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0xfffffff7, 0x1, 0x2, 0x5, 0xe6, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x7, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d68f, 0x5, 0xf3d, 0x7, 0x1, 0x6c1b, 0x1, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1001, 0x1004]}, 0x45c)
socket$inet6(0xa, 0x2, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x4, &(0x7f0000000240)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x7, 0x0})
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffff", 0x42}], 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000200)={0x100000011, @remote, 0x0, 0x0, 'none\x00', 0x5}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c0000001c0a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30"], 0x364}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1})
r7 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}})
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x40585414)
syz_emit_ethernet(0x1e, &(0x7f0000000000)={@broadcast, @random="00f3df54e7ff", @void, {@can={0xc, {{0x3, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "14a639934811cccb"}}}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0)
r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x511905)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94)
ioctl$USBDEVFS_FREE_STREAMS(r9, 0x802c550a, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)

8.484679731s ago: executing program 0 (id=6280):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904"], 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
r3 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1)
r4 = socket$kcm(0x2, 0x3, 0x2)
r5 = syz_io_uring_setup(0x2446, &(0x7f0000000340)={0x0, 0x47b9, 0x40, 0x3, 0x1e0}, &(0x7f00000003c0), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000000580)={&(0x7f0000000540)={&(0x7f0000000440)="ac1c4485b4", 0x5, 0x1, 0x6}}, 0x1)
sendmsg$inet(r4, 0x0, 0x4008804)
sendmsg$kcm(r4, 0x0, 0x8400)
sendmsg$inet(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000400)}, 0x0)
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000040))
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=<r7=>0xffffffffffffffff)
r8 = getpgrp(0xffffffffffffffff)
syz_open_procfs(r8, &(0x7f0000000180)='setgroups\x00')
clock_gettime(0x0, &(0x7f0000000140)={<r9=>0x0, <r10=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f00000000c0)=@overlay={0x5, 0xfdc26d2a62cdaf9e, 0x4, 0x40, 0x6, {r9, r10/1000+10000}, {0x1, 0x2, 0x2, 0xd, 0x85, 0x3, "b6950eeb"}, 0x10001, 0x3, {}, 0x9, 0x0, r7})

8.220256014s ago: executing program 3 (id=6281):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x4000})
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmmsg$inet6(r4, 0x0, 0x0, 0x11)
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x12000, 0x0)
socket$unix(0x1, 0x1, 0x0)
openat$iommufd(0xffffff9c, &(0x7f0000000100), 0x410000, 0x0)

7.538810073s ago: executing program 2 (id=6282):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fsopen(&(0x7f0000000040)='autofs\x00', 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4)
syz_clone(0xa9080, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800)
r4 = syz_io_uring_setup(0x1e20, &(0x7f0000000200)={0x0, 0x86f4, 0x10100}, &(0x7f00000005c0)=<r5=>0x0, &(0x7f0000000580)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22})
io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x54080, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x1e81488c03a8ba1)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', <r8=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r8, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}})

7.376434358s ago: executing program 4 (id=6283):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000008711e0e17400001020301090224000101000000000000000203010303092104003901223e0d090581030002ce04ff"], &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x7, 0x5, 0xfa, 0x10, 0x2}, 0x97, &(0x7f00000005c0)=ANY=[@ANYBLOB="050d97000403100b14100403ac3bf2bbbdfb49d57eb8e20cfc3cddeb8bfa32f34929c3a38f08112d44671004de38e19b25819b07d18aa1fc6545e0c0d233c9bacb05e38ee2028c7979853acea79c15f477573e8a9816856fdb12de0e8b674571be031633edfb1eb0c94bb1cfacbbe7556f309bb852ae574c757eb1a4b4e7c417fff3d958905ff1a225efe909bfc447e32e2dc6c2955fc04055990dbeb42e410c1bf58710e61408ad277149fd5c8b5c0a8b6700"/192], 0x6, [{0x96, &(0x7f0000000380)=@string={0x96, 0x3, "2d3c04191e503e11f049fff1d3892090f2fc5bbc7685fe26acd6d17c14db275991aee1d125e92de1765580853be3d17ab789e46db8482aa5a8377c8264331496fa449067834e96208c6f80e4fe2517a0ca5354a464c3787ec0ee40c8568fb1685e7d7b8b68e29a4986a1dc72db63de9c38cba3acf7fa639dc8a8569fb377d1ba398ac518fc3124327cdd5e753e5cd38efa61299b"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x280a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}]})
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
syz_usb_connect(0x2, 0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef", @ANYRESHEX], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129142, 0x1fa)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000006, 0x10012, r3, 0x0)
close(r2)
execveat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', &(0x7f0000001440), 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "0dd36a9fd9d95914", "7e314b1ae16f188480811df0a54dfebc", "6e16d07f", "24e9fc5733e5dae9"}, 0x28)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000001c0)=ANY=[@ANYBLOB="9c690001010000000a"])
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405668, &(0x7f0000000100)={0x2, 0xfffffffb, 0x2, 0x84880, <r5=>0xffffffffffffffff})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000ea3000000000000000000000009400010010000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_tables_matches\x00')
read$hiddev(r6, &(0x7f0000000100)=""/100, 0x64)
syz_usb_control_io$hid(r0, 0x0, 0x0)
readv(r5, &(0x7f0000000280)=[{&(0x7f0000000780)=""/215, 0xd7}, {&(0x7f0000000880)=""/120, 0x78}], 0x2)
r7 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0x3, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x19f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
ioctl$HIDIOCGUSAGE(r7, 0xc018480b, 0x0)

5.8465706s ago: executing program 2 (id=6284):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r2, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_usb_connect(0x0, 0x3f, 0x0, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r5, 0x2007ffb)
close(r5)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0)

5.846109471s ago: executing program 3 (id=6285):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x56906)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
r1 = socket(0x26, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000000)=@ethtool_cmd={0x4a, 0x3, 0x487, 0x9, 0x0, 0x1, 0x2, 0x7, 0x3a, 0x9, 0x80000000, 0xfffffffe, 0x97be, 0x8, 0xfa, 0x8, [0x1154, 0x7]}})
listen(r0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
close(r5)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x10001, @empty}, 0x1c)
r6 = socket$inet_dccp(0x2, 0x6, 0x0)
listen(r4, 0x400005)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
sendmmsg(r6, &(0x7f0000002980), 0x400000000000239, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000040)={0x9, 0x5, 0xfffffffd}, 0xc)

5.843754915s ago: executing program 1 (id=6294):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0)
capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r2 = openat$cgroup_root(0xffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x85, 0x0, &(0x7f00000000c0))
connect$vsock_stream(r3, &(0x7f0000000000), 0x10)
io_setup(0xb, &(0x7f0000000240)=<r5=>0x0)
io_getevents(r5, 0x1fffe, 0x0, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x47de, 0x4)
openat$cgroup_ro(r2, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000000))

4.350473617s ago: executing program 0 (id=6286):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getuid()
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1d, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x6, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x9, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x9, 0x1, 0x3, 0x1, 0x0, 0x9, 0x6, 0x7, 0x5, 0x4, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x3ff, 0x586, 0x6, 0xf667, 0xfffffffc, 0x7, 0x8, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x9, 0x1, 0x1, 0x83, 0xe39, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x6, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x4e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x7f, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x4da8e6f3, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r3 = fcntl$dupfd(r2, 0x0, r2)
write$sndseq(r3, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38)
readv(r3, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)
ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x1, 0x3800, 0x0, 0x0}, {0x9, 0x1, 0x7f8, &(0x7f0000001280)="bb997e2cf91d4d7be286ac4e608de325d9613b762e6c9dd5160a912986f63d7f0dfb90b81ee3b42adfddb2260b1b466be5662a8a4e2e1ab4f3d573b578312d764b1255faadc8eacdbd7c5eb0025af03af41301e2ff9a8f7075bf8eda32f2339140893ef5b316f04db696f34dcc059f0b2b59167c5675ec9e96df5431173b6cc7623b556d64e4951e70a6f64005df6f7dda1b9bafe195651c1e976922a5276288b6013ffa46e02471bb83cb27fd806354d0b0f2d0386d40e6e8c1723a5f5e8313772a4af957de639feaf69d7248cd22e3d5b6f2b215fdf82c16f95600102eb5b43cd656041300e04a24da0e5f7ec09dd9b81de1d8c7ede215746c072c6d7eab1d6f52c062f74c24846f3b1d58d915b6988a0bfae4e60301981f891344820de75fce937c76d6e258f15c2942c8092370064e78a58e598e37bf6a3862959ee083afbb4f649ea0e3961528877e89142392fd94b17141514fe672a0851771cecdaf0dfbe6a90932f4a5f4e37c49d55dea3d9053a20335341c1298e611f01b1de58a649106ed4029784d86ce8f1b2fe7a93ee55198342c0784d851ceb0cd3716f2cca8e81a618f6f65102e3bb735e4acbb226c18b1da6fbe528d25e9148fb43d7c17ab63377f2644341edd7790b8144c4af8a08205759ef949b250246a476d48d07d20fbd7d973031c827346c38aa181e94dc08f6ee2715ca766d255e3aa5236617007a449bd0d03691daaca748f7f25b969f075c2cf3257ec196d958f672a2e4c01aa2c3e865a50d18a1efb28c846b9be5d2dbe74b398d896e789e6117c0e527f3997caca53694fe70a5c5e84cca9313d5bb4cf9bec4468756f7f48acd7b4ae68d64e9613dd6a5f9fcac9f94dd377feb1f2896e375dd776d0c9bcfe74a6cfcc9a694b8ce45a2119e947f1759837fc37645070cbbc913b6e442d405b41449360141f8af8a693e1f4f15195cd2c60cf92072dc0bceafc612afed585eec99168d6df4d62f657a78e86afa044bcdd625bbadc88420479b4d59b31d3b4bcccc1d050b8125adbd773da828f6723f71aab4c4db74d583c9786bb086839a10bb0e630c8e37204c1ce69285181182155210aa7d399b640b7961af67a4350066c3daeeedea8cde01bbfbb2711ba8b04633302aff85130d7611ef19b5849fda1175229d9756f7299041479c799b9e10b64f571fbcfef59f2b4aba21b5731fc7ec965b13a27dc5bcb068ffee4918cf9debb6605b0c96400605991f7c46d6037e9520d925684e610c11cebad34bacfc125e5413daff33ca1b8c33272b4b051a9b12ad82ed6ddba130bbf305a311e055956c7daca58b7f312b43b69e8e431da64f21ae59d2e9c411528a765f42e55d0f2b802389fee521470a105f98ddbaa98478755acf9804045411949f1bade4ee8b7a143d7fba9798e9e63f30f047a5e5ae035d3c451c13f196036729d27f62119977458409492ecea508bb59c3e277bdfa70236e5d64724eb45197737bd5e2b9821c7962451fa39d6484fe6915db571c40baf6faba14a8075712caf3b92f4b8dabd4465a2f3abc2c32f0208e685d56eff8b37ee0e47a75d3ff7fe3c72b9a68475dcc7f259e5d6f390cdd08dd6c255d0aafa8f6e229134fdcb0e2d9fdfec4895f87f32121b544c15e214ce35d08486caa158a73762508f2e2dd36b82179bc19bbaae0835f7826014396ee2a6ac74c3a68e85a2029e8f78c08e42a8c718d34784fca35e40ee5d9ce08fca835f053d6bfe1f8df12ca8086b89bc5ffd85601ba6c5f18abd1f8da930e490b50dd6da2d29237b2913e3886b5cbe9918960a87f0f96cb0efae613493e3c86cda1c216efe52f5f69f863eeaa86b71394c46e25c2ac5d61c2363df99409024ac2e49922c0c588ffe4ddd9358f4a2b24b312427596be044d8e702c91af7ee02ceceaec335f79b5df17cc8f44bd3bb8e34c7f1d0710fd7578721e158f8b51b41137faf94566833ead57b4804a048c37fc071e99049fed4105caf5ec271d289852da2704c917b4491939a97843cf4c9bb877c18e3ae981d3fabacbc9ca85e1f7f881f88162532f3f39839776de731aa3d70047572a491054fa06d4109084f59ddc1ee9b3abfdd41a7bbe6f66bd245e182f150e76f0d39f73ac04573326a57fba82a75232ff814cbf86ea3b4954e6486eaf79b743d310c4b2e7dd1f0eeaee12250d04d53fff26c22d3d1a30a93ff633025dd958182159d5422e7aea1beddd9fb7fe2da52406f38d55d1ea37910d81980d566c6773b4c0a5b4147a090b58f016d3051af24332cd3ca3a250ebbc71bdb37086304404bea2c18b4f565d50989ddbfa6dfbf7d8e0f998ab6fe8958c62e40da06862cf7e652b593cc0b9c126d569b8199c710577aeefe6f981b0b1e0963bc53fef75951abde85331f4ed7ff3a78e7b68ceb8984ff6884061dcbe29bcae450bb5e76865bfacfcbb768d0602cd053bd243a0b40914c35fa62b04a30dc649a3c4c24ebee8e7b2607733a27eef812bf1e5ac496c086b8f393039893687cd583f986287c96f83acabab086a676d9ab17ae78bf59d94221b2f4b3dab41fd48f7e27a2b09279146cd339f01e772fe3f9f09b44c0f061f587bf809c73b0d9db4ac64863b8dedf60b25b16fdc7e7dbc306b909fd108a749c5268752ed66a5b841920ecc00748e7b9ac2425407b2ad370f05bffa4a4e38025af4a3c210e547ba3bfb1f44ff8f325a1dab9d46fa7da6269f106be658634d0bf23f3ab459219e8306a61f84ecdcaeb37b1e6ce42487f1ed5380052bf21cca51c87a27ae3249b17cc4a0d3475eb54dc5af60e40db8e3ead3b93800092cedd261bb26303b58ce31965cd18163ce5acf4d1da4b090abe60a8f24d3723c27ac75b3b1ff66b9906d4be73"}], 0x2})
setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.184100083s ago: executing program 3 (id=6287):
unshare(0x6a040000)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000280)={0x0, 0x4, 0x20000000})
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000003c0)="e4ae53c8097a4d0e46bce256c620e5d7edc2d49e0600004bc2d7e30a831676e2f094184de73a379fff1d70ca128b660f25ac1af52c4102000000000000005f7cd0a02fcbf97b198162d95b46edf0c5d473a4fc409287b7ffbe6269d7cc2b3d42652d7a14c7f3bb4877076ecd69872ccc3266284a7ab2e7b6949ef113d46100dc61cc3b04ea0b4b9b45b59627718ac6e9f56e15e4ecd11d6f89ac39590ec9e78a1ea72134ea5804d1e9e6bc6367695223de75751f4c5832", 0xb7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x800, 0x3ff)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0], 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x2, 0x6})
ioctl$DRM_IOCTL_MODE_GETFB(r4, 0xc01c64ad, &(0x7f0000000300)={r5})
ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0)
io_setup(0xa, 0x0)
socket$netlink(0x10, 0x3, 0x0)
io_setup(0xff, &(0x7f0000002c40))
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r6, 0x0, 0x0, 0x8910, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
modify_ldt$write(0x1, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c5100, 0x0)

3.167990117s ago: executing program 3 (id=6288):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
io_uring_setup(0x3e45, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0xcb})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00'})
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x40000, 0x0, 'queue0\x00'})
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402)
ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000600))
socket$inet_smc(0x2b, 0x1, 0x0)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0xe0)
write$sndseq(r4, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, 'z?\x00', 0x10, 0x21, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close_range(r2, 0xffffffffffffffff, 0x0)

3.167584795s ago: executing program 4 (id=6289):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$vim2m(0x0, 0x800, 0x2)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
flock(0xffffffffffffffff, 0x5)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440))
sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24014040)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x101ff, 0x1, 0x5000, 0x1000, &(0x7f0000fff000/0x1000)=nil})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
fanotify_mark(0xffffffffffffffff, 0x21a, 0x40000032, r4, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)

2.668129402s ago: executing program 2 (id=6290):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4008032, 0xffffffffffffffff, 0xffffe000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, <r4=>0x0})
recvmsg$unix(r4, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)}, 0x40)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r5, 0x40045431, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000001980)={0xb, {"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", 0x1000}}, 0x1006)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
r11 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', <r12=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000000000001c00128009000100766c616e000000000c000280060001000000000008000500a9a0638c8194271c5813b7f274c030d5a8acd061379c4aa0517f4b8e25b507a557ec1d3be06ff6b66f54c6155eed3f9cf9675e8be8671299990721ab281f96c0376d3e98dcfc227e6ef9f60ea2d617d87951ad7036735bc050dc634e74a7e73185478e9ec610a3964a4983080790b87e9fef78660734a7d9ee12cf702c1cdcd71d6d2d5b6155f3", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0xba01}, 0x0)
ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600})
munlockall()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

2.453179369s ago: executing program 1 (id=6291):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800, 0x0, 0x8001, 0x8000000, 0xfffffffffffffffe, 0x0, 0x4}, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
r3 = syz_open_dev$media(&(0x7f0000000000), 0x2ec4, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000000c0))
write$dsp(r2, &(0x7f0000000000)="81", 0x1)
close(r2)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x6, 0x44a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x180d, 0x80000000, 0x9, 0x0, 0x0, 0xffff82ee, 0x2, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0)
readv(r5, &(0x7f0000001900)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r7 = syz_open_pts(r6, 0x141601)
write(r7, &(0x7f0000000000), 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r8, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendmsg$inet(r8, &(0x7f00000001c0)={0x0, 0x62, &(0x7f0000000680)=[{&(0x7f00000006c0)="c72e5e81d243ce4577fc96744f9952ebf6b1a2568391a429da5d76852a69457b832ab4e06adb1475c56671942a738e3763abd5086a6951f0fd52d26655a69328af65084e57b5cf0af353b8965a1fd4cfe8680d88d8d6c01aa70ac252bb4f1ac8fc99222b01e4117b810eb20d751c8b4863f74ca525d74f4351fe", 0x7a}, {&(0x7f00000005c0)="69d08a31962be11fafbb02ada76fafbd64afce32c81d45b5ca979e0ee3ad203934db54b8d64845ae59f1efd915c82a92a6f1063def6f895eaae9113e843d58b6a6b7dcc2fd5133ad9f90ca1dd24d75a4178ad0c67f6cb4ab8af08b3e5b907d5b7688cff5af0490c2b709e2e3ddc839cb4507a054e029d03726", 0x79}], 0x2}, 0x8080)

1.898491199s ago: executing program 4 (id=6292):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
listen(r5, 0x9)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
sendmmsg(r7, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x800)
socket$packet(0x11, 0x2, 0x300)
r10 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0)

1.416157747s ago: executing program 4 (id=6293):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\a\x00\x00'], 0xfe33)
recvmsg(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(r9, 0x29, 0x41, &(0x7f0000001300)={'mangle\x00'}, 0x0)
eventfd(0x9)
r10 = socket(0x2b, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x1004)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r8, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0xe, 0x40, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000)
r12 = dup2(r2, r2)
sendmmsg$unix(r12, &(0x7f0000008380), 0x400000000000174, 0x4008890)

809.257843ms ago: executing program 1 (id=6295):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$kcm(0x10, 0x2, 0x4)
r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_PAUSE(r0, 0x40044145, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$igmp(0x2, 0x3, 0x2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r3, r1)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
fchdir(r5)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x513883, 0x488)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x10000, 0xa)
getdents(r6, &(0x7f0000000080)=""/87, 0x57)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r7 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r7, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r7, 0x20000005)
r8 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)

799.193053ms ago: executing program 0 (id=6296):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
r4 = openat$dlm_monitor(0xffffff9c, &(0x7f0000000bc0), 0x8000, 0x0)
openat$cgroup_procs(r4, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000001540), 0x2)
syz_usb_connect(0x3, 0x2d, &(0x7f0000004840)={{0x12, 0x1, 0x300, 0x3, 0x42, 0xea, 0x20, 0x3275, 0x85, 0x5ef0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x7, 0xa4, 0x60, 0x3, [{{0x9, 0x4, 0x1d, 0xe, 0x0, 0xc8, 0x41, 0x87, 0x81}}, {{0x9, 0x4, 0x1d, 0xa, 0x0, 0x2, 0x2, 0x1, 0x80}}]}}]}}, &(0x7f00000050c0)={0x0, 0x0, 0x0, 0x0})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000b80))
r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r5, 0x40044160, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0x1001, 0x5)
lstat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000940))
socket$packet(0x11, 0x3, 0x300)
r6 = mq_open(&(0x7f00000009c0)='/dev/snd/seq\x00', 0x40, 0x80, &(0x7f0000000a00)={0x1, 0x2, 0x9, 0x18fe})
mq_timedreceive(r6, &(0x7f0000000a40)=""/243, 0xf3, 0x2, &(0x7f0000000b40)={0x77359400})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000280)={'veth0_to_hsr\x00', &(0x7f0000000240)=@ethtool_eeprom={0x4f}})
io_setup(0x1, &(0x7f00000012c0)=<r8=>0x0)
r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
io_submit(r8, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r9, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}])
socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$inet(0x2, 0xa, 0x0)
r11 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4ec, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x44c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_STAB={0x104, 0x2, "550f5e7a494313062828c9b631e9d1d46357885260ae55d534eda230121f9d8513c2511ed0868805afb900e63354effaf34c9e7ea694dc2f7a4bae7abeca5fb37034188486b7e8b3f91aeeee1bef19bd56a875ff19d40a4e45d93152df5d0b904f83216a74b5ea39a5da78bb31ffeafb4659f566840f68c2d10cb833eee59fb96128a4142510d2d3a40c9bf1054e81be2a3179dea7db708d2f1626c8b0fb66b6057b0322eaeb72579e191229db3b8b3f5ec47a7f2f01a7f725ecdfa749dd2416889f2f7dfa11dd9dbe4a08189f47596bb6a41afe80fc79b20afc683c9dafa8671ee8d906a0cbbec9c5f096a2c42d5ddc5938fa96a093fdfea63f6e4c97d32171"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3ff, 0x7fffffff, 0xffff8000, 0x7, 0xfc, 0x19, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xbb8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x8000, 0xfffffff7, 0x3, 0x1b, 0x2, 0x1c, 0x7}}]}}, @TCA_STAB={0x70, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}, {{0x1c, 0x1, {0x9, 0xd6, 0x1, 0x40000, 0x1, 0x401, 0x0, 0x4}}, {0xc, 0x2, [0xfffe, 0xfffe, 0x2, 0x0]}}, {{0x1c, 0x1, {0x5, 0x7f, 0x7, 0xfffffff8, 0x2, 0x6, 0x4, 0x2}}, {0x8, 0x2, [0x3, 0x92b8]}}]}]}, 0x4ec}}, 0x0)

105.295883ms ago: executing program 3 (id=6297):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b0000000904"], 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
r3 = io_uring_setup(0x931, &(0x7f0000000000)={0x0, 0x0, 0x80, 0x1, 0x328})
io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, 0x0, 0x1)
r4 = socket$kcm(0x2, 0x3, 0x2)
r5 = syz_io_uring_setup(0x2446, &(0x7f0000000340)={0x0, 0x47b9, 0x40, 0x3, 0x1e0}, &(0x7f00000003c0), &(0x7f0000000400))
io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000000580)={&(0x7f0000000540)={&(0x7f0000000440)="ac1c4485b4", 0x5, 0x1, 0x6}}, 0x1)
sendmsg$inet(r4, 0x0, 0x4008804)
sendmsg$kcm(r4, 0x0, 0x8400)
sendmsg$inet(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000400)}, 0x0)
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000040))
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=<r7=>0xffffffffffffffff)
r8 = getpgrp(0xffffffffffffffff)
syz_open_procfs(r8, &(0x7f0000000180)='setgroups\x00')
clock_gettime(0x0, &(0x7f0000000140)={<r9=>0x0, <r10=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f00000000c0)=@overlay={0x5, 0xfdc26d2a62cdaf9e, 0x4, 0x40, 0x6, {r9, r10/1000+10000}, {0x1, 0x2, 0x2, 0xd, 0x85, 0x3, "b6950eeb"}, 0x10001, 0x3, {}, 0x9, 0x0, r7})

0s ago: executing program 1 (id=6298):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x6, 0xb}, {0xe, 0xa}, {0x10, 0xa}}, [{0x8, 0xb, 0xfffffffd}, {0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000)
syz_emit_ethernet(0x32, &(0x7f0000001040)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2002ed7e33ab807d2acbda15cbee700000800450200240067ffffff4e234e2004619078d4a8ca9509c2439a9271e479763c5b3d5c269ede9d85627e90d3c2d753ce4b8d420be9674b0adc3f24ef6a4999ec9d3d56377fb9bea682dcd511249b4678052b4abda4518eaa9a8c97816d6667478f229b569b82b846304f34b1238675d5e5442bc2cbec53833ec5e7fbede6593229106a3ab713d7f2a843959cf13fe3a8de8ba2a7d3ac1811e52fb240772ad4f2268b20f609ea00000000000000000000000ac9185d9f880f331588739ac549"], 0x0)
statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7100, 0x7ff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'})
r5 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000006d02"])
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
io_uring_setup(0x2ace, &(0x7f0000000200)={0x0, 0x2, 0x1, 0x2})
r6 = socket(0x2b, 0x1, 0x1)
setsockopt$MRT_DEL_MFC_PROXY(r6, 0x0, 0xd3, &(0x7f0000000000)={@multicast2, @multicast1, 0x0, "a74889901ba57680f0441c733dc06f7c1bd6c93592d841aa06c82e819e840683", 0x9, 0x4, 0x581}, 0x3c)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = open(&(0x7f0000000180)='./bus\x00', 0x30737f, 0xa0)
flock(r7, 0x5)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r9, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x7a}, {}, {}, {0x10}, {0x20}, {0x2}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}})
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40400, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r12, 0x4048aecb, &(0x7f0000000080))

kernel console output (not intermixed with test programs):

.925389][ T5890] usb 4-1: config 0 has no interfaces?
[ 1593.932836][ T5890] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1593.950454][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1593.958690][ T5890] usb 4-1: Product: syz
[ 1593.962854][ T5890] usb 4-1: Manufacturer: syz
[ 1593.967490][ T5890] usb 4-1: SerialNumber: syz
[ 1593.976871][ T5890] usb 4-1: config 0 descriptor??
[ 1594.354284][ T5953] usb 5-1: USB disconnect, device number 84
[ 1594.625308][T28428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5715'.
[ 1594.736151][ T5953] usb 3-1: USB disconnect, device number 102
[ 1595.023616][ T5892] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 1595.380256][ T5892] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1595.393957][ T5892] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1595.406775][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1595.430995][ T5892] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1595.475790][ T5892] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1595.589265][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1596.190270][ T5892] usb 4-1: USB disconnect, device number 113
[ 1596.220520][T28477] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5736'.
[ 1596.463931][T28486] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1596.481003][T28486] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address
[ 1596.512058][T28486] bond0: (slave ip6gre1): Error -95 calling set_mac_address
[ 1596.513572][ T5953] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[ 1596.563989][T24328] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 1596.693592][ T5953] usb 5-1: Using ep0 maxpacket: 32
[ 1596.705308][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1596.717990][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1596.733539][T24328] usb 3-1: Using ep0 maxpacket: 32
[ 1596.734680][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1596.753589][T24328] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 1596.762007][T24328] usb 3-1: config 0 has no interface number 0
[ 1596.769630][T24328] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1596.791408][T24328] usb 3-1: config 0 interface 85 has no altsetting 0
[ 1596.802282][ T5953] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1596.806722][T24328] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1596.830367][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1596.839043][T24328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.854918][ T5953] usb 5-1: config 0 descriptor??
[ 1596.857657][T24328] usb 3-1: Product: syz
[ 1596.902535][T24328] usb 3-1: Manufacturer: syz
[ 1596.912729][T24328] usb 3-1: SerialNumber: syz
[ 1596.961108][T24328] usb 3-1: config 0 descriptor??
[ 1597.271381][T28479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1597.280370][T28479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1597.312320][ T5953] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00B9/input/input288
[ 1597.395140][T24328] appletouch 3-1:0.85: Geyser mode initialized.
[ 1597.401072][ T5953] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00B9/input/input289
[ 1597.405504][T24328] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input287
[ 1597.450140][ T5953] kye 0003:0458:5011.00B9: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[ 1597.545833][T28479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1597.692829][T28479] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1598.067952][ T5953] usb 2-1: USB disconnect, device number 87
[ 1598.147837][ T5890] usb 3-1: USB disconnect, device number 103
[ 1598.173169][ T5890] appletouch 3-1:0.85: input: appletouch disconnected
[ 1598.374004][    C0] kye 0003:0458:5011.00B9: usb_submit_urb(ctrl) failed: -1
[ 1598.723793][ T5892] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 1598.883672][ T5892] usb 2-1: Using ep0 maxpacket: 16
[ 1598.893645][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1598.902443][ T5892] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[ 1598.911734][ T5892] usb 2-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[ 1598.923863][ T5892] usb 2-1: Product: syz
[ 1598.930846][ T5892] usb 2-1: Manufacturer: syz
[ 1598.938653][ T5892] usb 2-1: SerialNumber: syz
[ 1598.953817][ T5892] usb 2-1: config 0 descriptor??
[ 1598.973555][   T24] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1599.155382][ T5953] usb 5-1: USB disconnect, device number 85
[ 1599.190684][   T24] usb 4-1: config 0 has no interfaces?
[ 1599.349497][   T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1599.358944][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1599.368146][   T24] usb 4-1: Product: syz
[ 1599.372479][   T24] usb 4-1: Manufacturer: syz
[ 1599.382721][   T24] usb 4-1: SerialNumber: syz
[ 1599.391346][   T24] usb 4-1: config 0 descriptor??
[ 1599.473337][ T5892] usb 2-1: selecting invalid altsetting 1
[ 1599.517442][ T5892] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 1599.589613][ T5892] usb 2-1: USB disconnect, device number 88
[ 1599.658771][T28520] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1599.804664][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1600.873654][ T5892] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[ 1601.064639][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1601.095046][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1601.120598][ T5892] usb 2-1: can't read configurations, error -71
[ 1601.634100][ T5953] usb 4-1: USB disconnect, device number 114
[ 1602.153556][ T5953] usb 4-1: new high-speed USB device number 115 using dummy_hcd
[ 1602.203787][ T5892] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1602.317297][ T5953] usb 4-1: config 0 has no interfaces?
[ 1602.327494][ T5953] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1602.336953][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1602.345211][ T5953] usb 4-1: Product: syz
[ 1602.353075][ T5953] usb 4-1: Manufacturer: syz
[ 1602.359743][ T5953] usb 4-1: SerialNumber: syz
[ 1602.385359][ T5953] usb 4-1: config 0 descriptor??
[ 1602.408693][ T5892] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1602.428043][ T5892] usb 2-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1602.454436][ T5892] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1602.471283][ T5892] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1602.493605][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1602.515362][ T5892] usb 2-1: config 0 descriptor??
[ 1602.612986][T28561] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1602.801935][ T5892] usbhid 2-1:0.0: can't add hid device: -71
[ 1602.809066][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1602.838596][ T5892] usb 2-1: USB disconnect, device number 90
[ 1603.486158][ T5890] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1603.613722][ T5892] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 1603.648930][ T5890] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1603.666794][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1603.680891][ T5890] usb 5-1: Product: syz
[ 1603.689500][ T5890] usb 5-1: Manufacturer: syz
[ 1603.698867][ T5890] usb 5-1: SerialNumber: syz
[ 1603.714058][ T5890] usb 5-1: config 0 descriptor??
[ 1603.727979][ T5890] ch341 5-1:0.0: ch341-uart converter detected
[ 1603.775727][ T5892] usb 3-1: config 0 has no interfaces?
[ 1603.789014][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1603.812545][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1603.825193][ T5892] usb 3-1: Product: syz
[ 1603.829488][ T5892] usb 3-1: Manufacturer: syz
[ 1603.843636][ T5892] usb 3-1: SerialNumber: syz
[ 1603.857493][ T5892] usb 3-1: config 0 descriptor??
[ 1604.082379][T28579] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5786'.
[ 1604.533389][ T5890] usb 5-1: failed to send control message: -71
[ 1604.540010][ T5890] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1604.552565][ T5890] usb 5-1: USB disconnect, device number 86
[ 1604.560968][ T5890] ch341 5-1:0.0: device disconnected
[ 1604.718766][ T5953] usb 4-1: USB disconnect, device number 115
[ 1605.334273][ T5892] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1605.403845][   T24] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1605.498152][ T5892] usb 2-1: config 0 has no interfaces?
[ 1605.513075][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1605.522428][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1605.544401][ T5892] usb 2-1: Product: syz
[ 1605.560788][   T24] usb 4-1: Using ep0 maxpacket: 32
[ 1605.569565][ T5892] usb 2-1: Manufacturer: syz
[ 1605.574792][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1605.589636][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1605.601310][ T5892] usb 2-1: SerialNumber: syz
[ 1605.623798][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1605.635853][ T5892] usb 2-1: config 0 descriptor??
[ 1605.640996][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1605.656042][   T24] usb 4-1: config 0 descriptor??
[ 1605.672644][   T24] hub 4-1:0.0: USB hub found
[ 1605.894671][   T24] hub 4-1:0.0: 1 port detected
[ 1605.930412][T28592] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1606.296857][ T5953] usb 3-1: USB disconnect, device number 104
[ 1606.550821][   T24] hub 4-1:0.0: activate --> -90
[ 1606.783679][ T5953] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 1606.957185][ T5892] usb 4-1: USB disconnect, device number 116
[ 1607.009228][ T5953] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1607.020714][ T5953] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1607.030291][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1607.095166][ T5953] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1607.132581][ T5953] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1607.180975][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1607.447393][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.456024][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1607.521423][   T30] kauditd_printk_skb: 535 callbacks suppressed
[ 1607.521442][   T30] audit: type=1326 audit(1744434353.691:8910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000
[ 1607.550364][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1607.562449][   T30] audit: type=1326 audit(1744434353.691:8911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000
[ 1607.584562][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1607.597658][   T30] audit: type=1326 audit(1744434353.731:8912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf748d579 code=0x7ffc0000
[ 1607.619721][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1607.633098][   T30] audit: type=1326 audit(1744434353.731:8913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000
[ 1607.659082][   T30] audit: type=1326 audit(1744434353.731:8914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x7ffc0000
[ 1607.686666][   T30] audit: type=1326 audit(1744434353.731:8915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf748d579 code=0x7ffc0000
[ 1607.711763][   T30] audit: type=1326 audit(1744434353.731:8916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf748d598 code=0x7ffc0000
[ 1607.733899][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1607.742217][   T30] audit: type=1326 audit(1744434353.731:8917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf748d598 code=0x7ffc0000
[ 1607.769028][   T30] audit: type=1326 audit(1744434353.731:8918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf748d598 code=0x7ffc0000
[ 1607.850548][   T30] audit: type=1326 audit(1744434353.731:8919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28616 comm="syz.3.5790" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf748d598 code=0x7ffc0000
[ 1607.963573][ T5953] usb 2-1: USB disconnect, device number 91
[ 1608.135108][T28624] input: syz0 as /devices/virtual/input/input290
[ 1609.311735][T28633] input: syz0 as /devices/virtual/input/input291
[ 1609.390974][ T5953] usb 3-1: USB disconnect, device number 105
[ 1610.431286][T28653] input: syz0 as /devices/virtual/input/input292
[ 1611.164503][T28670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1611.495405][T28676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1611.573847][ T5953] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1611.795892][ T5953] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1611.810150][ T5953] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1611.980600][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1612.044402][ T5953] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1612.184506][ T5953] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1612.240745][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1612.831950][T28699] input: syz0 as /devices/virtual/input/input294
[ 1613.348917][T28710] input: syz0 as /devices/virtual/input/input295
[ 1614.432158][T28723] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5824'.
[ 1614.528487][T28724] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5824'.
[ 1614.598002][   T24] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1614.613628][ T5953] usb 4-1: USB disconnect, device number 117
[ 1614.786241][   T24] usb 5-1: config 0 has no interfaces?
[ 1614.797169][   T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1614.807077][ T5892] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 1614.836858][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1614.861146][   T24] usb 5-1: Product: syz
[ 1614.873334][   T24] usb 5-1: Manufacturer: syz
[ 1614.892020][   T24] usb 5-1: SerialNumber: syz
[ 1614.909048][   T24] usb 5-1: config 0 descriptor??
[ 1614.988379][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1614.998884][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1615.013195][ T5892] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1615.023649][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1615.031696][ T5892] usb 3-1: Product: syz
[ 1615.046204][ T5892] usb 3-1: Manufacturer: syz
[ 1615.055425][ T5892] usb 3-1: SerialNumber: syz
[ 1615.082566][ T5892] usb 3-1: config 0 descriptor??
[ 1615.174927][T28726] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1615.182384][T28726] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1615.196741][T28721] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5823'.
[ 1615.413017][T28726] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1615.435312][T28726] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1616.056061][ T5892] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[ 1616.070068][ T5892] usb 3-1: USB disconnect, device number 106
[ 1616.283646][   T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1616.445394][   T24] usb 2-1: config 0 has no interfaces?
[ 1616.452717][   T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1616.462459][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1616.470835][   T24] usb 2-1: Product: syz
[ 1616.475152][   T24] usb 2-1: Manufacturer: syz
[ 1616.479755][   T24] usb 2-1: SerialNumber: syz
[ 1616.486946][   T24] usb 2-1: config 0 descriptor??
[ 1616.697094][T28743] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1617.207903][   T24] usb 5-1: USB disconnect, device number 87
[ 1617.584281][T28769] input: syz0 as /devices/virtual/input/input297
[ 1618.317501][T28764] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1618.323843][T28764] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1618.995542][ T5890] usb 2-1: USB disconnect, device number 92
[ 1619.142314][T28786] netlink: 'syz.2.5840': attribute type 5 has an invalid length.
[ 1619.913683][   T24] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1619.923653][T22382] Bluetooth: hci2: command 0x0406 tx timeout
[ 1620.206734][   T24] usb 4-1: config 0 has no interfaces?
[ 1620.337710][   T24] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1620.401226][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1620.403546][T22382] Bluetooth: hci1: command 0x0406 tx timeout
[ 1620.468889][   T24] usb 4-1: Product: syz
[ 1620.517799][   T24] usb 4-1: Manufacturer: syz
[ 1620.522442][   T24] usb 4-1: SerialNumber: syz
[ 1620.552327][   T24] usb 4-1: config 0 descriptor??
[ 1620.822111][T28802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5845'.
[ 1621.751586][T28811] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1621.814459][T28811] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1622.136216][T28823] ip6gre0: left promiscuous mode
[ 1622.270276][T28823] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check.
[ 1622.373724][   T24] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 1622.550770][   T24] usb 3-1: config 0 has no interfaces?
[ 1622.558843][   T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1622.581865][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1622.610961][   T24] usb 3-1: Product: syz
[ 1622.627856][   T24] usb 3-1: Manufacturer: syz
[ 1622.650799][   T24] usb 3-1: SerialNumber: syz
[ 1622.700841][ T5953] usb 4-1: USB disconnect, device number 118
[ 1622.703534][   T24] usb 3-1: config 0 descriptor??
[ 1622.926469][T28825] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1623.283978][T22382] Bluetooth: hci2: command 0x0406 tx timeout
[ 1623.390667][T28851] netlink: 1768 bytes leftover after parsing attributes in process `syz.4.5862'.
[ 1623.473717][T28851] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5862'.
[ 1623.843731][T22382] Bluetooth: hci1: command 0x0406 tx timeout
[ 1624.983648][ T5953] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1625.022394][   T24] usb 3-1: USB disconnect, device number 107
[ 1625.197719][ T5953] usb 2-1: config 0 has no interfaces?
[ 1625.213187][ T5953] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1625.226224][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1625.234960][ T5953] usb 2-1: Product: syz
[ 1625.239112][ T5953] usb 2-1: Manufacturer: syz
[ 1625.245691][ T5953] usb 2-1: SerialNumber: syz
[ 1625.252996][ T5953] usb 2-1: config 0 descriptor??
[ 1625.528732][T28871] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1625.794016][   T24] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1625.953578][   T24] usb 5-1: Using ep0 maxpacket: 32
[ 1625.960909][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1625.974627][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1625.986297][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1625.999849][   T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1626.020217][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1626.040177][   T24] usb 5-1: config 0 descriptor??
[ 1626.460407][T28892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1626.480006][T28892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1626.520217][   T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00BA/input/input298
[ 1626.599128][   T24] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00BA/input/input299
[ 1626.701379][T28892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1626.712383][T28892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1626.728912][   T24] kye 0003:0458:5011.00BA: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[ 1627.654166][    C1] kye 0003:0458:5011.00BA: usb_submit_urb(ctrl) failed: -1
[ 1627.677981][ T5892] usb 2-1: USB disconnect, device number 93
[ 1627.786363][T28918] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1628.403619][ T5892] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 1628.455248][ T5953] usb 5-1: USB disconnect, device number 88
[ 1628.630704][ T5892] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1628.645825][ T5892] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1628.665294][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1628.717185][ T5892] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1628.785087][ T5892] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1628.878546][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1629.139096][T28946] input: syz0 as /devices/virtual/input/input300
[ 1630.193575][ T5892] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1630.357981][ T5892] usb 2-1: Using ep0 maxpacket: 32
[ 1630.381710][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1630.412667][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1630.438212][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1630.511664][ T5892] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1630.511694][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1630.553260][ T5892] usb 2-1: config 0 descriptor??
[ 1630.960055][T28961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1630.960410][T28961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1631.051196][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00BB/input/input301
[ 1631.132255][   T24] usb 3-1: USB disconnect, device number 108
[ 1631.157671][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00BB/input/input302
[ 1631.163185][T28961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1631.185030][T28961] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1631.271474][ T5892] kye 0003:0458:5011.00BB: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[ 1632.073789][    C1] kye 0003:0458:5011.00BB: usb_submit_urb(ctrl) failed: -1
[ 1632.083422][   T24] usb 2-1: USB disconnect, device number 94
[ 1632.153063][T28984] netlink: 'syz.4.5911': attribute type 1 has an invalid length.
[ 1632.275934][T28984] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1632.317504][T28984] bond10: (slave ip6gretap1): making interface the new active one
[ 1632.329302][T28984] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1633.164643][ T5953] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 1633.424840][ T5953] usb 3-1: config 0 has no interfaces?
[ 1633.496701][ T5953] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1633.515272][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1633.530088][ T5953] usb 3-1: Product: syz
[ 1633.540394][ T5953] usb 3-1: Manufacturer: syz
[ 1633.552903][ T5953] usb 3-1: SerialNumber: syz
[ 1633.634172][ T5953] usb 3-1: config 0 descriptor??
[ 1633.846483][T29002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5915'.
[ 1633.980928][T29017] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5921'.
[ 1633.990254][T29017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5921'.
[ 1633.999326][T29017] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5921'.
[ 1634.010467][T29017] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5921'.
[ 1634.019576][ T5953] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1634.228445][ T5953] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1634.251231][ T5953] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1634.276842][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1634.496175][ T5953] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1634.634529][   T24] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1634.678475][ T5953] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1634.789038][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1634.899024][   T24] usb 5-1: config 0 has no interfaces?
[ 1634.928818][   T24] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1634.984788][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1635.009005][   T24] usb 5-1: Product: syz
[ 1635.029885][   T24] usb 5-1: Manufacturer: syz
[ 1635.046889][   T24] usb 5-1: SerialNumber: syz
[ 1635.213399][   T24] usb 5-1: config 0 descriptor??
[ 1635.504059][T29023] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1635.976192][ T5953] usb 3-1: USB disconnect, device number 109
[ 1636.058916][T29032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5924'.
[ 1636.733740][ T5953] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1636.963718][ T5953] usb 4-1: Using ep0 maxpacket: 32
[ 1636.979897][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1636.994799][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1637.006903][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1637.021797][ T5953] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1637.035060][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1637.052449][ T5953] usb 4-1: config 0 descriptor??
[ 1637.392106][ T5890] usb 5-1: USB disconnect, device number 89
[ 1637.601976][T29054] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5929'.
[ 1637.696192][ T5890] usb 2-1: USB disconnect, device number 95
[ 1637.849707][T29040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1637.883924][T29040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1637.970116][ T5953] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00BC/input/input303
[ 1638.101625][ T5953] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00BC/input/input304
[ 1638.132093][T29040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1638.154767][T29040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1638.239341][ T5953] kye 0003:0458:5011.00BC: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[ 1639.136352][    C1] kye 0003:0458:5011.00BC: usb_submit_urb(ctrl) failed: -1
[ 1639.393591][ T5953] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1639.562368][ T5953] usb 5-1: config 0 has no interfaces?
[ 1639.583488][ T5953] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1639.609344][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1639.628154][ T5953] usb 5-1: Product: syz
[ 1639.639332][ T5953] usb 5-1: Manufacturer: syz
[ 1639.651427][ T5953] usb 5-1: SerialNumber: syz
[ 1639.682659][ T5953] usb 5-1: config 0 descriptor??
[ 1639.915092][ T5892] usb 4-1: USB disconnect, device number 119
[ 1639.971124][T29097] vlan0: entered allmulticast mode
[ 1640.125894][T24328] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1640.126096][T29097] bridge_slave_0: entered allmulticast mode
[ 1640.166165][T29088] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1640.379858][T24328] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1640.560202][T24328] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1640.618477][T24328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1640.858442][T24328] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1641.045968][ T5953] usb 3-1: new full-speed USB device number 110 using dummy_hcd
[ 1641.070507][T24328] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1641.208445][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1641.221026][ T5953] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1641.240571][ T5953] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1641.267261][ T5953] usb 3-1: can't read configurations, error -71
[ 1641.497696][T29122] input: syz0 as /devices/virtual/input/input305
[ 1642.308197][T24328] usb 5-1: USB disconnect, device number 90
[ 1642.594288][T26994] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1642.636554][T29137] input: syz0 as /devices/virtual/input/input306
[ 1642.754445][T24328] usb 2-1: USB disconnect, device number 96
[ 1642.804025][T26994] usb 4-1: Using ep0 maxpacket: 32
[ 1642.813200][T26994] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1642.830673][T26994] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1642.887962][T26994] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1642.908670][T26994] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[ 1642.935019][T26994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1643.059497][T26994] usb 4-1: config 0 descriptor??
[ 1643.061220][T29144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5957'.
[ 1643.299528][T29132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1643.357758][T29132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1643.703177][T26994] usbhid 4-1:0.0: can't add hid device: -71
[ 1643.713206][T26994] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1643.784945][T26994] usb 4-1: USB disconnect, device number 120
[ 1644.533594][T24328] usb 4-1: new full-speed USB device number 121 using dummy_hcd
[ 1644.563643][T26994] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1644.732148][T26994] usb 5-1: Using ep0 maxpacket: 32
[ 1644.739889][T24328] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1644.759098][T24328] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1644.760645][T26994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1644.766750][T24328] usb 4-1: can't read configurations, error -71
[ 1644.841701][T26994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1644.857842][T26994] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1644.872051][T26994] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1644.899297][T26994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1644.929661][T26994] usb 5-1: config 0 descriptor??
[ 1645.341532][T29160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1645.350301][T29160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1645.370024][ T5953] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1645.381548][T26994] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00BD/input/input307
[ 1645.441931][T29174] input: syz0 as /devices/virtual/input/input309
[ 1645.468255][T26994] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00BD/input/input308
[ 1645.556864][ T5953] usb 2-1: config 0 has no interfaces?
[ 1645.565269][ T5953] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1645.576394][T29160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1645.588839][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1645.594754][T29160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1645.598539][ T5953] usb 2-1: Product: syz
[ 1645.621447][T26994] kye 0003:0458:5011.00BD: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[ 1645.657802][ T5953] usb 2-1: Manufacturer: syz
[ 1645.681867][ T5953] usb 2-1: SerialNumber: syz
[ 1645.821052][ T5953] usb 2-1: config 0 descriptor??
[ 1646.076362][T29170] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1646.192866][ T5953] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 1646.403854][    C1] kye 0003:0458:5011.00BD: usb_submit_urb(ctrl) failed: -1
[ 1646.477837][ T5953] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.488848][ T5953] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1646.498370][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1646.526238][ T5953] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1646.610647][ T5953] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1646.692756][T23895] udevd[23895]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1647.218057][T24328] usb 5-1: USB disconnect, device number 91
[ 1648.073547][T24328] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1648.128163][ T5892] usb 2-1: USB disconnect, device number 97
[ 1648.275765][T24328] usb 5-1: config 0 has no interfaces?
[ 1648.320092][T24328] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1648.349809][T24328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1648.425119][   T30] kauditd_printk_skb: 2644 callbacks suppressed
[ 1648.425132][   T30] audit: type=1326 audit(1744434394.601:11564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29197 comm="syz.3.5972" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748d579 code=0x0
[ 1648.483560][T24328] usb 5-1: Product: syz
[ 1648.487780][T24328] usb 5-1: Manufacturer: syz
[ 1648.494757][T24328] usb 5-1: SerialNumber: syz
[ 1648.502176][T24328] usb 5-1: config 0 descriptor??
[ 1648.792898][ T5953] usb 3-1: USB disconnect, device number 112
[ 1648.823302][T29212] netlink: 'syz.2.5976': attribute type 1 has an invalid length.
[ 1648.843315][T29212] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1648.889652][T29193] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5969'.
[ 1648.928154][T29210] input: syz0 as /devices/virtual/input/input310
[ 1648.992816][T29212] bond7: (slave gretap1): making interface the new active one
[ 1649.079612][T29212] bond7: (slave gretap1): Enslaving as an active interface with an up link
[ 1649.864154][ T5953] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1649.948530][T29231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5983'.
[ 1650.026042][ T5953] usb 4-1: Using ep0 maxpacket: 32
[ 1650.037244][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1650.054382][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1650.075344][ T5892] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1650.093415][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1650.110068][ T5953] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1650.119733][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1650.135333][ T5953] usb 4-1: config 0 descriptor??
[ 1650.156079][T24328] usb 5-1: USB disconnect, device number 92
[ 1650.241640][T29236] pimreg: entered allmulticast mode
[ 1650.258725][ T5892] usb 3-1: config 0 has no interfaces?
[ 1650.285625][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1650.299549][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1650.315304][ T5892] usb 3-1: Product: syz
[ 1650.320073][ T5892] usb 3-1: Manufacturer: syz
[ 1650.331781][ T5892] usb 3-1: SerialNumber: syz
[ 1650.357062][ T5892] usb 3-1: config 0 descriptor??
[ 1650.551235][T29224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1650.561084][T29224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1650.587834][ T5953] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00BE/input/input311
[ 1650.602398][T29227] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1650.666825][ T5953] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00BE/input/input312
[ 1650.706997][ T5953] kye 0003:0458:5011.00BE: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[ 1650.806436][T29224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1650.862234][T29224] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1651.014514][T29247] netlink: 'syz.1.5987': attribute type 1 has an invalid length.
[ 1651.055181][T29247] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1651.102284][T29247] bond10: (slave veth9): Enslaving as an active interface with a down link
[ 1651.135760][T29247] bond10: (slave ip6gretap1): making interface the new active one
[ 1651.154403][T29247] ip6gretap1: entered promiscuous mode
[ 1651.166915][T29247] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1651.573812][ T5892] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1651.706092][    C0] kye 0003:0458:5011.00BE: usb_submit_urb(ctrl) failed: -1
[ 1651.739730][ T5892] usb 5-1: config 0 has no interfaces?
[ 1651.754505][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1651.776151][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1651.796198][ T5892] usb 5-1: Product: syz
[ 1651.805763][ T5892] usb 5-1: Manufacturer: syz
[ 1651.814423][ T5892] usb 5-1: SerialNumber: syz
[ 1651.963584][T29267] input: syz0 as /devices/virtual/input/input313
[ 1652.022730][ T5892] usb 5-1: config 0 descriptor??
[ 1652.294383][T29258] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5989'.
[ 1652.366072][T29269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5993'.
[ 1652.609737][T24328] usb 4-1: USB disconnect, device number 123
[ 1652.790195][T26994] usb 3-1: USB disconnect, device number 113
[ 1653.079012][T29275] netlink: 'syz.0.5996': attribute type 10 has an invalid length.
[ 1653.324556][T29282] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1653.691274][T29291] input: syz0 as /devices/virtual/input/input314
[ 1654.001820][T29303] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1654.373690][T26994] usb 5-1: USB disconnect, device number 93
[ 1654.613990][ T5892] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1654.716289][T29325] input: syz0 as /devices/virtual/input/input315
[ 1654.773731][ T5892] usb 4-1: Using ep0 maxpacket: 32
[ 1654.785552][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1654.814057][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1654.828153][ T5892] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1654.875085][ T5892] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1654.878922][T26994] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1654.901767][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1654.943873][ T5892] usb 4-1: config 0 descriptor??
[ 1655.104276][T26994] usb 5-1: config 0 has no interfaces?
[ 1655.113305][T26994] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1655.127342][T26994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1655.268015][T26994] usb 5-1: Product: syz
[ 1655.277217][T26994] usb 5-1: Manufacturer: syz
[ 1655.290014][T26994] usb 5-1: SerialNumber: syz
[ 1655.315165][T26994] usb 5-1: config 0 descriptor??
[ 1655.377656][T29312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1655.395616][T29312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1655.522071][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00BF/input/input316
[ 1655.549738][T29317] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1655.628771][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00BF/input/input317
[ 1655.689995][T29312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1655.698920][T29312] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1655.766935][ T5892] kye 0003:0458:5011.00BF: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[ 1656.583764][    C0] kye 0003:0458:5011.00BF: usb_submit_urb(ctrl) failed: -1
[ 1657.069565][T29349] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1657.444017][ T5892] usb 4-1: reset high-speed USB device number 124 using dummy_hcd
[ 1657.455353][ T5892] usb 4-1: device reset changed ep0 maxpacket size!
[ 1657.463941][T26994] usb 4-1: USB disconnect, device number 124
[ 1657.487324][ T5953] usb 5-1: USB disconnect, device number 94
[ 1657.721903][T29357] input: syz0 as /devices/virtual/input/input318
[ 1657.734048][T26994] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1658.004242][T26994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1658.027424][T26994] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1658.373541][T26994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1658.395475][T26994] usb 4-1: config 0 descriptor??
[ 1658.429978][T26994] pwc: Askey VC010 type 2 USB webcam detected.
[ 1658.834437][T26994] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1658.841720][T26994] pwc: recv_control_msg error -32 req 02 val 2700
[ 1658.875685][T26994] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1658.898123][T26994] pwc: recv_control_msg error -32 req 04 val 1000
[ 1658.906760][T26994] pwc: recv_control_msg error -32 req 04 val 1300
[ 1658.973915][T29375] input: syz0 as /devices/virtual/input/input319
[ 1658.988275][T26994] pwc: recv_control_msg error -32 req 04 val 1400
[ 1659.018226][T26994] pwc: recv_control_msg error -32 req 02 val 2000
[ 1659.051768][T26994] pwc: recv_control_msg error -32 req 02 val 2100
[ 1659.079410][T26994] pwc: recv_control_msg error -32 req 04 val 1500
[ 1659.314324][T26994] pwc: recv_control_msg error -71 req 02 val 2400
[ 1659.441582][T26994] pwc: recv_control_msg error -71 req 02 val 2600
[ 1659.453279][T26994] pwc: recv_control_msg error -71 req 02 val 2900
[ 1659.467246][T26994] pwc: recv_control_msg error -71 req 02 val 2800
[ 1659.508717][T26994] pwc: recv_control_msg error -71 req 04 val 1100
[ 1659.684759][T26994] pwc: recv_control_msg error -71 req 04 val 1200
[ 1659.697745][T26994] pwc: Registered as video103.
[ 1659.725502][T26994] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input320
[ 1659.834526][T26994] usb 4-1: USB disconnect, device number 125
[ 1660.266922][T24328] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1660.424082][T24328] usb 5-1: Using ep0 maxpacket: 32
[ 1660.437315][T24328] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1660.453916][T24328] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1660.476179][T24328] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1660.493508][T24328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1660.517925][T24328] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1660.545288][T24328] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1660.588835][T24328] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1660.631279][T24328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1660.699434][T24328] usb 5-1: config 0 descriptor??
[ 1660.945085][T24328] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1661.003849][ T5892] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1661.209202][ T5892] usb 3-1: config 0 has no interfaces?
[ 1661.262387][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1661.362621][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1661.399249][ T5892] usb 3-1: Product: syz
[ 1661.482816][ T5892] usb 3-1: Manufacturer: syz
[ 1661.489198][ T5892] usb 3-1: SerialNumber: syz
[ 1661.508933][ T5892] usb 3-1: config 0 descriptor??
[ 1661.803859][T26994] usb 2-1: new full-speed USB device number 98 using dummy_hcd
[ 1661.815425][T29397] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1661.933650][T29411] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1661.953813][T29411] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1662.029852][T26994] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1662.044324][T26994] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1662.051931][T26994] usb 2-1: can't read configurations, error -71
[ 1662.333585][ T5953] usb 5-1: USB disconnect, device number 95
[ 1662.363106][ T5953] usblp0: removed
[ 1662.797441][T29422] input: syz0 as /devices/virtual/input/input321
[ 1662.838414][T29424] input: syz0 as /devices/virtual/input/input322
[ 1663.253850][ T6117] ip6gretap1: left promiscuous mode
[ 1663.332367][T29432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1663.342192][T29432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1663.399514][T29432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1663.415998][T29434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1663.430886][T29434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1663.472383][T29434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1663.625824][ T5953] usb 3-1: USB disconnect, device number 114
[ 1663.670456][T29432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1663.682416][T29432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1663.691607][T22382] Bluetooth: hci2: command 0x0406 tx timeout
[ 1663.703813][T29432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1663.735592][T29434] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6036'.
[ 1664.003804][T22382] Bluetooth: hci1: command 0x0406 tx timeout
[ 1664.051668][T29446] syzkaller0: entered promiscuous mode
[ 1664.084306][T29446] syzkaller0: entered allmulticast mode
[ 1664.977881][ T5892] usb 2-1: new full-speed USB device number 100 using dummy_hcd
[ 1665.162729][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1665.199636][ T5892] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1665.207581][ T5892] usb 2-1: can't read configurations, error -71
[ 1667.085278][T29469] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1667.097942][T29469] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1667.434406][ T5892] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1667.563613][T24328] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1667.620690][ T5892] usb 2-1: config 0 has no interfaces?
[ 1667.632911][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1667.684256][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1667.707786][ T5892] usb 2-1: Product: syz
[ 1667.711992][ T5892] usb 2-1: Manufacturer: syz
[ 1667.719214][ T5892] usb 2-1: SerialNumber: syz
[ 1667.730094][ T5892] usb 2-1: config 0 descriptor??
[ 1667.766575][T24328] usb 3-1: config 0 has no interfaces?
[ 1667.799082][T24328] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1667.809101][T24328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1667.820746][T24328] usb 3-1: Product: syz
[ 1667.825024][T24328] usb 3-1: Manufacturer: syz
[ 1667.830727][T24328] usb 3-1: SerialNumber: syz
[ 1667.860585][T24328] usb 3-1: config 0 descriptor??
[ 1667.907391][T29494] input: syz0 as /devices/virtual/input/input323
[ 1667.944601][T29476] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1668.172418][T29482] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1668.608644][ T5892] usb 2-1: USB disconnect, device number 102
[ 1668.887422][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.894520][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.127544][T22382] Bluetooth: hci1: command 0x0406 tx timeout
[ 1669.127553][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1669.806619][T29511] __nla_validate_parse: 8 callbacks suppressed
[ 1669.806639][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6054'.
[ 1669.990871][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6054'.
[ 1670.047881][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6054'.
[ 1670.058133][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6054'.
[ 1670.067509][T29511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6054'.
[ 1670.154940][ T5892] usb 3-1: USB disconnect, device number 115
[ 1670.559404][T29526] kvm: kvm [29525]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x9e08e0000
[ 1670.623725][ T5892] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1670.783542][ T5892] usb 3-1: Using ep0 maxpacket: 32
[ 1670.971515][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1671.335875][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1671.447588][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1671.787776][T29539] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1671.828284][ T5892] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1671.848713][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1671.874163][ T5892] usb 3-1: config 0 descriptor??
[ 1671.993787][T29536] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1672.000536][T29536] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1672.184658][T29545] input: syz0 as /devices/virtual/input/input324
[ 1672.338062][T29518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1672.358826][T29518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1672.374357][ T5953] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[ 1672.429718][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C0/input/input325
[ 1672.563575][ T5953] usb 2-1: Using ep0 maxpacket: 32
[ 1672.571841][ T5953] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[ 1672.582626][ T5953] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1672.599745][T29518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1672.617642][ T5953] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1672.629381][T29518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1672.670928][ T5953] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1672.691697][ T5953] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1672.707332][ T5953] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1672.719596][ T5953] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1672.733265][ T5953] usb 2-1: Product: syz
[ 1672.742897][ T5953] usb 2-1: Manufacturer: syz
[ 1672.751550][ T5953] usb 2-1: SerialNumber: syz
[ 1672.771827][ T5953] usb 2-1: config 0 descriptor??
[ 1672.784755][ T5953] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1672.815903][ T5953] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1672.837740][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C0/input/input326
[ 1673.141558][ T5892] kye 0003:0458:5011.00C0: input,hiddev1,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1673.453361][ T5953] usb 3-1: USB disconnect, device number 116
[ 1673.613976][T26994] usb 2-1: USB disconnect, device number 103
[ 1673.647066][T26994] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[ 1673.746720][ T5892] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1674.004173][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1674.009529][T22382] Bluetooth: hci2: command 0x0406 tx timeout
[ 1674.227178][ T5892] usb 5-1: config 0 has no interfaces?
[ 1674.259970][ T5892] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1674.332546][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1674.364250][ T5892] usb 5-1: Product: syz
[ 1674.371021][ T5892] usb 5-1: Manufacturer: syz
[ 1674.400455][ T5892] usb 5-1: SerialNumber: syz
[ 1674.419070][ T5892] usb 5-1: config 0 descriptor??
[ 1674.439307][T29567] input: syz0 as /devices/virtual/input/input327
[ 1675.053635][T26994] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1675.061973][T29556] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1675.268978][T29570] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1675.315270][T26994] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1675.333651][T26994] usb 3-1: config 0 has no interfaces?
[ 1675.347242][T26994] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1675.382367][T26994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1675.392827][T29570] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1675.403246][T26994] usb 3-1: config 0 descriptor??
[ 1675.671259][T24328] usb 3-1: USB disconnect, device number 117
[ 1675.881162][T29580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6071'.
[ 1676.044451][ T5892] usb 4-1: new full-speed USB device number 126 using dummy_hcd
[ 1676.230815][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1676.249257][ T5892] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1676.258086][ T5892] usb 4-1: can't read configurations, error -71
[ 1676.698586][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6074'.
[ 1676.730843][T29588] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6074'.
[ 1676.931705][ T5953] usb 5-1: USB disconnect, device number 96
[ 1677.043893][T22382] Bluetooth: hci2: command 0x0406 tx timeout
[ 1677.476353][T22382] Bluetooth: hci1: command 0x0406 tx timeout
[ 1677.604271][ T5892] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1677.810588][T29598] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1677.817080][T29598] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1677.844101][ T5892] usb 2-1: config 0 has no interfaces?
[ 1677.858021][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1677.867610][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.875924][ T5892] usb 2-1: Product: syz
[ 1677.880308][ T5892] usb 2-1: Manufacturer: syz
[ 1677.885181][ T5892] usb 2-1: SerialNumber: syz
[ 1677.905311][ T5892] usb 2-1: config 0 descriptor??
[ 1678.063579][T24328] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1678.237523][T24328] usb 3-1: Using ep0 maxpacket: 32
[ 1678.293673][T24328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1678.313643][T24328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1678.323576][T24328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1678.336650][T24328] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1678.356887][T24328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1678.380775][T24328] usb 3-1: config 0 descriptor??
[ 1678.814512][T29606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1678.833916][T29606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1678.907129][T24328] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C1/input/input328
[ 1679.011935][T24328] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C1/input/input329
[ 1679.055037][T29606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1679.103975][T29606] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1679.232385][T24328] kye 0003:0458:5011.00C1: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1679.853841][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1679.895972][T29620] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1679.902157][T29620] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1680.034224][    C1] kye 0003:0458:5011.00C1: usb_submit_urb(ctrl) failed: -1
[ 1680.864544][T29627] input: syz0 as /devices/virtual/input/input330
[ 1680.884290][T24328] usb 3-1: USB disconnect, device number 118
[ 1680.932441][T29634] program syz.0.6085 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1681.041496][ T5892] usb 2-1: USB disconnect, device number 104
[ 1681.338335][T29640] sit0: left allmulticast mode
[ 1681.444620][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1681.684613][ T5892] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1682.057804][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1682.108895][ T5892] usb 2-1: config 0 has no interfaces?
[ 1682.145402][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1682.154681][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1682.162673][ T5892] usb 2-1: Product: syz
[ 1682.167180][ T5892] usb 2-1: Manufacturer: syz
[ 1682.171782][ T5892] usb 2-1: SerialNumber: syz
[ 1682.183390][ T5892] usb 2-1: config 0 descriptor??
[ 1682.354425][T29654] netlink: 'syz.3.6090': attribute type 10 has an invalid length.
[ 1682.372794][T29654] wlan1: mtu less than device minimum
[ 1682.381631][T29654] : (slave wlan1): Error -22 calling dev_set_mtu
[ 1682.452805][T29655] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1682.911034][ T5953] usb 2-1: USB disconnect, device number 105
[ 1683.205072][T29667] input: syz0 as /devices/virtual/input/input331
[ 1683.293248][T26994] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1683.399865][ T5890] hid-generic 0000:0003:0000.00C2: unknown main item tag 0x0
[ 1683.407408][ T5890] hid-generic 0000:0003:0000.00C2: unknown main item tag 0x0
[ 1683.420844][ T5890] hid-generic 0000:0003:0000.00C2: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1683.554985][T26994] usb 4-1: Using ep0 maxpacket: 32
[ 1683.576624][T26994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1683.614183][T26994] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1683.858571][T26994] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1684.075180][T26994] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1684.234627][T26994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1684.254243][T26994] usb 4-1: config 0 descriptor??
[ 1684.266692][T29680] netlink: 'syz.0.6097': attribute type 10 has an invalid length.
[ 1684.282457][T29680] mac80211_hwsim hwsim8 wlan1: left allmulticast mode
[ 1684.300385][T29680] bond0: (slave wlan1): Opening slave failed
[ 1684.805476][T29663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1684.817721][T29663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1684.899103][T26994] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00C3/input/input332
[ 1685.026060][T26994] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.00C3/input/input333
[ 1685.034803][T29663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1685.054273][T29696] input: syz0 as /devices/virtual/input/input334
[ 1685.367463][T26994] kye 0003:0458:5011.00C3: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[ 1685.453964][T29663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1686.023746][    C1] kye 0003:0458:5011.00C3: usb_submit_urb(ctrl) failed: -1
[ 1686.734502][T26994] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1686.851040][T29720] input: syz0 as /devices/virtual/input/input335
[ 1686.900871][ T5892] usb 4-1: USB disconnect, device number 2
[ 1686.913245][T26994] usb 5-1: config 0 has no interfaces?
[ 1686.927250][T26994] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1686.936986][T26994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1687.016853][T26994] usb 5-1: Product: syz
[ 1687.050650][T26994] usb 5-1: Manufacturer: syz
[ 1687.067509][T26994] usb 5-1: SerialNumber: syz
[ 1687.109447][T26994] usb 5-1: config 0 descriptor??
[ 1687.369059][T29713] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1687.448871][T29723] xt_cluster: node mask cannot exceed total number of nodes
[ 1687.897197][T26994] usb 5-1: USB disconnect, device number 97
[ 1688.373376][T29733] netlink: 'syz.3.6113': attribute type 10 has an invalid length.
[ 1688.381453][T29733] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6113'.
[ 1688.402935][T29733] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1688.765604][T29745] input: syz0 as /devices/virtual/input/input336
[ 1689.026738][T26994] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[ 1689.361607][T26994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1689.413530][T26994] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1689.423910][T26994] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1689.434412][T26994] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1689.476277][T26994] usb 2-1: config 0 descriptor??
[ 1689.753594][ T5892] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1689.914459][ T5892] usb 3-1: Using ep0 maxpacket: 32
[ 1689.994769][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1690.016096][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1690.036517][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1690.067555][T26994] cp2112 0003:10C4:EA90.00C4: unknown main item tag 0x0
[ 1690.100139][T26994] cp2112 0003:10C4:EA90.00C4: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[ 1690.142884][ T5892] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1690.164034][T26994] cp2112 0003:10C4:EA90.00C4: error requesting version
[ 1690.172145][T26994] cp2112 0003:10C4:EA90.00C4: probe with driver cp2112 failed with error -71
[ 1690.219977][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1690.242397][T26994] usb 2-1: USB disconnect, device number 106
[ 1690.269937][ T5892] usb 3-1: config 0 descriptor??
[ 1690.516645][T29757] input: syz0 as /devices/virtual/input/input337
[ 1690.705401][T29749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1690.746341][T29749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1690.911041][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C5/input/input338
[ 1691.039950][T29749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1691.058864][T29749] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1691.205401][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C5/input/input339
[ 1691.333774][T26994] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[ 1691.736589][ T5892] kye 0003:0458:5011.00C5: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1691.908819][T26994] usb 2-1: config 0 has no interfaces?
[ 1691.921968][T26994] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1691.961798][T26994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1691.970325][ T5892] usb 3-1: USB disconnect, device number 119
[ 1692.014013][T26994] usb 2-1: Product: syz
[ 1692.023532][T26994] usb 2-1: Manufacturer: syz
[ 1692.101669][T26994] usb 2-1: SerialNumber: syz
[ 1692.160223][T26994] usb 2-1: config 0 descriptor??
[ 1692.330180][T29772] netlink: 'syz.0.6123': attribute type 10 has an invalid length.
[ 1692.392117][T29772] bond0: (slave wlan1): Opening slave failed
[ 1692.663520][   T24] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[ 1692.847737][   T24] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1692.889847][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1692.920401][   T24] usb 4-1: Product: syz
[ 1692.923878][T26994] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1692.938082][   T24] usb 4-1: Manufacturer: syz
[ 1692.942934][   T24] usb 4-1: SerialNumber: syz
[ 1693.011157][   T24] usb 4-1: config 0 descriptor??
[ 1693.025879][   T24] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1693.048648][   T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1693.070075][   T24] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[ 1693.080156][ T5892] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1693.153527][T26994] usb 5-1: Using ep0 maxpacket: 32
[ 1693.180714][T26994] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1693.206102][T26994] usb 5-1: config 0 has no interfaces?
[ 1693.323067][ T5892] usb 3-1: config 0 has no interfaces?
[ 1693.333643][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1693.347965][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1693.373259][ T5892] usb 3-1: Product: syz
[ 1693.388822][T26994] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[ 1693.390421][ T5892] usb 3-1: Manufacturer: syz
[ 1693.412180][T26994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1693.415462][ T5892] usb 3-1: SerialNumber: syz
[ 1693.449130][ T5892] usb 3-1: config 0 descriptor??
[ 1693.643287][ T5892] usb 4-1: USB disconnect, device number 3
[ 1693.649769][T26994] usb 5-1: Product: syz
[ 1693.654276][T26994] usb 5-1: Manufacturer: syz
[ 1693.702418][T26994] usb 5-1: SerialNumber: syz
[ 1693.728093][T29779] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1693.900252][T29786] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[ 1693.954339][T26994] usb 5-1: config 0 descriptor??
[ 1693.957529][ T5892] usb 3-1: USB disconnect, device number 120
[ 1694.102444][T29788] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[ 1694.173803][T26994] usb 2-1: USB disconnect, device number 107
[ 1695.344972][ T5892] usb 5-1: USB disconnect, device number 98
[ 1695.475106][T29803] veth1_macvtap: left promiscuous mode
[ 1695.486382][T29803] macsec0: entered promiscuous mode
[ 1696.273511][ T5892] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1696.453700][T29816] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1696.605612][T29816] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1696.707478][ T5892] usb 3-1: Using ep0 maxpacket: 32
[ 1696.752796][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1696.781453][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1696.902854][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1696.933553][ T5892] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1696.952969][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1697.020980][ T5892] usb 3-1: config 0 descriptor??
[ 1697.540145][T29814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1697.552655][T29814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1697.633926][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C6/input/input340
[ 1697.833943][T29814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1697.845812][T29814] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1697.931324][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C6/input/input341
[ 1698.110396][ T5892] kye 0003:0458:5011.00C6: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1698.179016][T29833] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1698.186358][T29833] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1698.885008][    C0] kye 0003:0458:5011.00C6: usb_submit_urb(ctrl) failed: -1
[ 1699.035861][T29850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6140'.
[ 1699.593356][T29853] fuse: Unknown parameter 'ro/tmode'
[ 1699.674897][T26994] usb 3-1: USB disconnect, device number 121
[ 1700.123611][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1700.262354][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1700.414254][T29869] random: crng reseeded on system resumption
[ 1701.136142][T29871] netlink: 'syz.1.6145': attribute type 1 has an invalid length.
[ 1701.147146][T29871] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6145'.
[ 1701.583541][T26994] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1701.777024][T26994] usb 4-1: config 0 has no interfaces?
[ 1701.789730][T26994] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1701.799797][T26994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1701.811681][T26994] usb 4-1: Product: syz
[ 1701.816251][T26994] usb 4-1: Manufacturer: syz
[ 1701.821340][T26994] usb 4-1: SerialNumber: syz
[ 1701.839313][T26994] usb 4-1: config 0 descriptor??
[ 1702.523845][ T5892] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1702.701680][ T5892] usb 2-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice= d.df
[ 1702.805716][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1703.317361][ T5892] usb 2-1: config 0 descriptor??
[ 1703.354819][ T5892] gspca_main: benq-2.14.0 probing 04a5:3035
[ 1703.722243][T29884] syz.2.6150: attempt to access beyond end of device
[ 1703.722243][T29884] md2: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1703.738706][T29884] random: crng reseeded on system resumption
[ 1703.753545][T26994] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1703.924671][T26994] usb 5-1: Using ep0 maxpacket: 32
[ 1703.941482][T26994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1703.955244][T26994] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1703.967229][T26994] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1703.982253][T26994] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1703.999281][T26994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1704.023202][T26994] usb 5-1: config 0 descriptor??
[ 1704.439607][T29890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1704.449795][T29890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1704.477144][T26994] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00C7/input/input342
[ 1704.587109][ T5892] usb 4-1: USB disconnect, device number 4
[ 1704.670632][T29890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1704.682144][T29890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1704.682569][T26994] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00C7/input/input343
[ 1704.859995][T26994] kye 0003:0458:5011.00C7: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[ 1704.877738][   T24] usb 2-1: USB disconnect, device number 108
[ 1705.001644][T29896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6153'.
[ 1705.313585][T24328] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1705.545581][    C1] kye 0003:0458:5011.00C7: usb_submit_urb(ctrl) failed: -1
[ 1706.093645][T24328] usb 4-1: Using ep0 maxpacket: 8
[ 1706.126351][T24328] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[ 1706.282089][T24328] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[ 1706.389805][T24328] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[ 1706.477506][ T5892] usb 5-1: USB disconnect, device number 99
[ 1707.141707][T29925] netlink: 'syz.2.6158': attribute type 10 has an invalid length.
[ 1707.152775][T29925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6158'.
[ 1707.162908][T29925] geneve0: left allmulticast mode
[ 1707.169339][T29925] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1707.841933][T24328] usb 4-1: string descriptor 0 read error: -71
[ 1707.907824][T24328] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1707.948687][T24328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1707.985728][T24328] usb 4-1: can't set config #1, error -71
[ 1707.992428][   T30] audit: type=1326 audit(1744434454.161:11565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.004415][T24328] usb 4-1: USB disconnect, device number 5
[ 1708.126998][   T30] audit: type=1326 audit(1744434454.161:11566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=445 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.180054][   T30] audit: type=1326 audit(1744434454.161:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.236043][T29933] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6162'.
[ 1708.292895][   T30] audit: type=1326 audit(1744434454.161:11568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=363 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.335936][   T30] audit: type=1326 audit(1744434454.161:11569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.390698][   T30] audit: type=1326 audit(1744434454.161:11570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.477174][   T30] audit: type=1326 audit(1744434454.161:11571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.573689][   T30] audit: type=1326 audit(1744434454.161:11572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.625155][   T30] audit: type=1326 audit(1744434454.161:11573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.661064][   T30] audit: type=1326 audit(1744434454.161:11574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29926 comm="syz.1.6159" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f07579 code=0x7ffc0000
[ 1708.703641][T26994] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1708.908630][T26994] usb 4-1: config 0 has no interfaces?
[ 1708.919915][T26994] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1708.937030][T26994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1708.962125][T26994] usb 4-1: Product: syz
[ 1709.056803][T26994] usb 4-1: Manufacturer: syz
[ 1709.071645][T26994] usb 4-1: SerialNumber: syz
[ 1709.072179][T29929] bond0: left allmulticast mode
[ 1709.133179][T24328] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1709.337255][T26994] usb 4-1: config 0 descriptor??
[ 1709.486418][T24328] usb 5-1: config 0 has no interfaces?
[ 1709.705783][T24328] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1709.715363][T24328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1709.723878][T24328] usb 5-1: Product: syz
[ 1709.728252][T24328] usb 5-1: Manufacturer: syz
[ 1709.732912][T24328] usb 5-1: SerialNumber: syz
[ 1709.740004][T24328] usb 5-1: config 0 descriptor??
[ 1709.933619][ T5892] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1709.966659][T29944] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1710.093679][ T5892] usb 3-1: Using ep0 maxpacket: 32
[ 1710.109044][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1710.120516][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1710.133329][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1710.146677][ T5892] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1710.156052][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1710.168061][ T5892] usb 3-1: config 0 descriptor??
[ 1710.580274][T29954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1710.590318][T29954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1710.907062][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C8/input/input344
[ 1710.937415][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C8/input/input345
[ 1710.937522][T29954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1711.265869][ T5892] kye 0003:0458:5011.00C8: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1711.377193][T29954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1711.647244][T26994] usb 4-1: USB disconnect, device number 6
[ 1711.686881][ T5892] usb 5-1: USB disconnect, device number 100
[ 1712.133871][    C1] kye 0003:0458:5011.00C8: usb_submit_urb(ctrl) failed: -1
[ 1712.771989][T29971] netlink: 'syz.0.6171': attribute type 10 has an invalid length.
[ 1712.781128][T29971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6171'.
[ 1712.803790][T29971] geneve0: left allmulticast mode
[ 1712.825868][T29971] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[ 1712.960872][T26994] usb 3-1: USB disconnect, device number 122
[ 1713.213633][ T5892] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1713.514058][ T5892] usb 4-1: config 0 has no interfaces?
[ 1713.581903][T26994] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1713.632554][ T5892] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1713.780759][T26994] usb 3-1: config 0 has no interfaces?
[ 1713.813766][T26994] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1713.829303][T26994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1713.829929][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1713.886704][T26994] usb 3-1: Product: syz
[ 1713.886733][ T5892] usb 4-1: Product: syz
[ 1713.890890][T26994] usb 3-1: Manufacturer: syz
[ 1713.905766][ T5892] usb 4-1: Manufacturer: syz
[ 1714.137395][ T5892] usb 4-1: SerialNumber: syz
[ 1714.149386][T26994] usb 3-1: SerialNumber: syz
[ 1714.204524][ T5892] usb 4-1: config 0 descriptor??
[ 1714.217377][T26994] usb 3-1: config 0 descriptor??
[ 1716.096404][T26994] usb 3-1: USB disconnect, device number 123
[ 1716.180140][ T5889] usb 4-1: USB disconnect, device number 7
[ 1716.813654][ T5892] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1717.110844][ T5892] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1717.469037][T30015] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1717.480789][T30015] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1717.530679][ T5892] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1717.667553][T30019] syz.0.6182: attempt to access beyond end of device
[ 1717.667553][T30019] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1717.712181][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1717.855272][ T5892] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1717.924573][ T5889] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1718.040477][ T5892] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1718.128754][ T5889] usb 5-1: config 0 has no interfaces?
[ 1718.152443][ T5889] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1718.189843][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1718.244142][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1718.340308][ T5889] usb 5-1: Product: syz
[ 1718.349917][ T5889] usb 5-1: Manufacturer: syz
[ 1718.393821][ T5892] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1718.442150][ T5889] usb 5-1: SerialNumber: syz
[ 1718.467207][ T5889] usb 5-1: config 0 descriptor??
[ 1718.543561][ T5892] usb 3-1: Using ep0 maxpacket: 32
[ 1718.553932][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1718.588400][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1718.663685][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1718.680626][ T5892] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1718.739068][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1718.757030][ T5892] usb 3-1: config 0 descriptor??
[ 1718.790835][T30017] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1718.990172][T30035] input: syz0 as /devices/virtual/input/input346
[ 1719.169014][T30027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1719.181929][T30027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1719.221240][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1719.268128][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C9/input/input347
[ 1719.349296][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00C9/input/input348
[ 1719.419800][ T5892] kye 0003:0458:5011.00C9: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1719.454061][T30027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1719.463779][T30027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1719.526425][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1719.547636][T26994] usb 4-1: USB disconnect, device number 8
[ 1720.393796][    C1] kye 0003:0458:5011.00C9: usb_submit_urb(ctrl) failed: -1
[ 1720.408950][T24328] usb 3-1: USB disconnect, device number 124
[ 1720.443212][ T5892] usb 5-1: USB disconnect, device number 101
[ 1721.303763][T26994] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[ 1721.978399][T26994] usb 2-1: config 0 has no interfaces?
[ 1722.085787][T26994] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1722.098529][T26994] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1722.116109][T24328] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1722.118493][T26994] usb 2-1: Product: syz
[ 1722.131518][T26994] usb 2-1: Manufacturer: syz
[ 1722.142476][T26994] usb 2-1: SerialNumber: syz
[ 1722.155433][T26994] usb 2-1: config 0 descriptor??
[ 1722.285716][T24328] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1722.297936][T24328] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1722.307133][T24328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1722.326188][T24328] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1722.345744][T30059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6190'.
[ 1722.364416][T24328] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1722.410560][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1723.224543][T26994] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1723.539107][T26994] usb 4-1: config 0 has no interfaces?
[ 1723.557445][T26994] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1723.566866][T26994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1723.575340][T26994] usb 4-1: Product: syz
[ 1723.605438][T26994] usb 4-1: Manufacturer: syz
[ 1723.651114][T26994] usb 4-1: SerialNumber: syz
[ 1723.741246][T24328] usb 2-1: USB disconnect, device number 109
[ 1723.750065][T26994] usb 4-1: config 0 descriptor??
[ 1723.989362][T30069] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1724.502488][ T5889] usb 3-1: USB disconnect, device number 125
[ 1724.534764][T30086] input: syz0 as /devices/virtual/input/input349
[ 1724.656613][T24328] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1724.727370][T30089] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12)
[ 1724.734007][T30089] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1724.746633][T30089] vhci_hcd vhci_hcd.0: Device attached
[ 1724.757922][T30089] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14)
[ 1724.764542][T30089] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1724.773654][T30089] vhci_hcd vhci_hcd.0: Device attached
[ 1724.815592][T24328] usb 5-1: config 0 has no interfaces?
[ 1724.824393][T24328] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1724.834221][T24328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1724.844420][T24328] usb 5-1: Product: syz
[ 1724.869460][T30089] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1724.872618][T30095] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16)
[ 1724.884150][T30095] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1724.906728][T24328] usb 5-1: Manufacturer: syz
[ 1724.912921][T30095] vhci_hcd vhci_hcd.0: Device attached
[ 1724.929268][T24328] usb 5-1: SerialNumber: syz
[ 1724.945103][T24328] usb 5-1: config 0 descriptor??
[ 1725.004411][ T5892] vhci_hcd: vhci_device speed not set
[ 1725.010410][T30098] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18)
[ 1725.017032][T30098] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1725.063583][ T5892] usb 37-1: new full-speed USB device number 3 using vhci_hcd
[ 1725.133075][T30104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1725.177632][T30089] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(23)
[ 1725.184244][T30089] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1725.262503][T30104] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1725.369517][T30095] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1725.390997][T30098] vhci_hcd vhci_hcd.0: Device attached
[ 1725.407665][T30089] vhci_hcd vhci_hcd.0: Device attached
[ 1725.486722][T30102] vhci_hcd: connection closed
[ 1725.487054][ T6117] vhci_hcd: stop threads
[ 1725.497025][T30099] vhci_hcd: connection closed
[ 1725.499447][T30096] vhci_hcd: connection closed
[ 1725.509207][T30092] vhci_hcd: connection closed
[ 1725.516917][T30090] vhci_hcd: connection reset by peer
[ 1725.534320][ T6117] vhci_hcd: release socket
[ 1725.560952][ T6117] vhci_hcd: disconnect device
[ 1725.583509][ T6117] vhci_hcd: stop threads
[ 1725.629534][ T6117] vhci_hcd: release socket
[ 1725.657882][ T6117] vhci_hcd: disconnect device
[ 1725.674467][ T6117] vhci_hcd: stop threads
[ 1725.688699][ T6117] vhci_hcd: release socket
[ 1725.715615][ T6117] vhci_hcd: disconnect device
[ 1725.732165][ T6117] vhci_hcd: stop threads
[ 1725.742468][ T6117] vhci_hcd: release socket
[ 1725.756892][ T6117] vhci_hcd: disconnect device
[ 1725.777584][ T6117] vhci_hcd: stop threads
[ 1725.791690][ T6117] vhci_hcd: release socket
[ 1725.802171][ T6117] vhci_hcd: disconnect device
[ 1725.941385][T30114] input: syz0 as /devices/virtual/input/input350
[ 1726.267132][   T24] usb 4-1: USB disconnect, device number 9
[ 1726.463771][T24328] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1726.678345][T24328] usb 3-1: Using ep0 maxpacket: 32
[ 1726.762782][T24328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1726.906352][T24328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1726.924299][T24328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1726.937286][T24328] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1726.946415][T24328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1726.961578][T24328] usb 3-1: config 0 descriptor??
[ 1727.401322][T30117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1727.420235][T30117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1727.445911][T24328] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00CA/input/input351
[ 1727.640010][T30117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1727.648779][T30117] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1727.670822][T24328] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00CA/input/input352
[ 1727.719203][T24328] kye 0003:0458:5011.00CA: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1728.162790][ T5889] usb 5-1: USB disconnect, device number 102
[ 1728.203885][T24328] usb 2-1: new full-speed USB device number 110 using dummy_hcd
[ 1728.455388][T24328] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1728.564244][    C1] kye 0003:0458:5011.00CA: usb_submit_urb(ctrl) failed: -1
[ 1728.964752][T30139] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1728.970919][T30139] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1728.997435][T24328] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1729.015089][T24328] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1729.025613][T24328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1729.035138][T24328] usb 2-1: Product: syz
[ 1729.053504][T24328] usb 2-1: Manufacturer: syz
[ 1729.068789][T24328] usb 2-1: SerialNumber: syz
[ 1729.465769][T29913] usb 3-1: USB disconnect, device number 126
[ 1730.202267][T30148] futex_wake_op: syz.2.6206 tries to shift op by -33; fix this program
[ 1730.307918][T30154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6207'.
[ 1730.458374][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.465479][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.618120][ T5892] vhci_hcd: vhci_device speed not set
[ 1730.625062][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1730.649498][T30158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1730.679196][T30148] netdevsim netdevsim2: Direct firmware load for .
[ 1730.679196][T30148]  failed with error -2
[ 1730.684949][T30158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1730.697741][T30148] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[ 1730.697741][T30148] 
[ 1731.066237][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1731.334452][T24328] cdc_ncm 2-1:1.0: bind() failure
[ 1731.419280][T24328] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[ 1731.463545][T24328] cdc_ncm 2-1:1.1: bind() failure
[ 1731.522370][T24328] usb 2-1: USB disconnect, device number 110
[ 1731.673751][ T5889] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1731.828099][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1731.939518][ T5889] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1732.001612][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1732.406212][ T5889] usb 3-1: config 0 descriptor??
[ 1732.473574][T24328] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1732.691617][ T5889] usbhid 3-1:0.0: can't add hid device: -71
[ 1732.700682][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1732.721429][ T5889] usb 3-1: USB disconnect, device number 127
[ 1732.843599][T24328] usb 2-1: Using ep0 maxpacket: 8
[ 1732.927710][T24328] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1732.959847][T30179] input: syz0 as /devices/virtual/input/input353
[ 1733.059355][T24328] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[ 1733.253760][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1733.321388][T24328] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1733.486243][T24328] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1733.493665][ T5889] usb 3-1: Using ep0 maxpacket: 32
[ 1733.519787][T24328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1733.535018][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1733.563867][T24328] usb 2-1: rejected 1 configuration due to insufficient available bus power
[ 1733.628604][T24328] usb 2-1: no configuration chosen from 1 choice
[ 1733.631337][ T5889] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[ 1733.658446][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1733.758746][ T5889] usb 3-1: config 0 descriptor??
[ 1733.835199][ T5889] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1733.979147][ T5889] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1734.544774][ T5889] usb 3-1: USB disconnect, device number 2
[ 1734.557695][ T5889] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 1734.714116][T24328] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1734.981683][T24328] usb 4-1: config 0 has no interfaces?
[ 1735.015906][T24328] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1735.059395][T24328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1735.067755][ T5892] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1735.111478][T24328] usb 4-1: Product: syz
[ 1735.123740][ T5889] usb 2-1: USB disconnect, device number 111
[ 1735.159594][T24328] usb 4-1: Manufacturer: syz
[ 1735.185980][T24328] usb 4-1: SerialNumber: syz
[ 1735.223625][ T5892] usb 5-1: Using ep0 maxpacket: 32
[ 1735.247621][T24328] usb 4-1: config 0 descriptor??
[ 1735.383552][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1735.433347][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1735.507293][ T5892] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1735.564970][T26994] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1735.571687][T24328] usb 4-1: USB disconnect, device number 10
[ 1735.591708][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1735.703015][T30206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6218'.
[ 1735.840463][T26994] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1735.851877][ T5892] usb 5-1: config 0 descriptor??
[ 1735.859313][T26994] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1735.878782][T26994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1736.191945][T26994] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1736.373374][ T5892] savu 0003:1E7D:2D5A.00CB: unknown main item tag 0x0
[ 1736.419207][T26994] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1736.439902][ T5892] savu 0003:1E7D:2D5A.00CB: unknown main item tag 0x0
[ 1736.483159][ T5892] savu 0003:1E7D:2D5A.00CB: unknown main item tag 0x0
[ 1736.501181][T23895] udevd[23895]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1736.511975][ T5892] savu 0003:1E7D:2D5A.00CB: unknown main item tag 0x0
[ 1736.683259][ T5892] savu 0003:1E7D:2D5A.00CB: unknown main item tag 0x0
[ 1736.801566][ T5892] savu 0003:1E7D:2D5A.00CB: unbalanced collection at end of report description
[ 1736.862219][ T5892] savu 0003:1E7D:2D5A.00CB: parse failed
[ 1736.893612][T26994] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1736.952092][ T5892] savu 0003:1E7D:2D5A.00CB: probe with driver savu failed with error -22
[ 1737.172282][T26994] usb 4-1: config 0 has no interfaces?
[ 1737.323218][T30215] netlink: 'syz.1.6221': attribute type 3 has an invalid length.
[ 1737.623640][T26994] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1737.647410][T26994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1737.669346][T26994] usb 4-1: Product: syz
[ 1737.694162][ T5892] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[ 1737.713762][T26994] usb 4-1: Manufacturer: syz
[ 1737.722553][T26994] usb 4-1: SerialNumber: syz
[ 1737.787643][T24328] usb 5-1: USB disconnect, device number 103
[ 1737.789446][T26994] usb 4-1: config 0 descriptor??
[ 1737.854769][ T5892] usb 2-1: Using ep0 maxpacket: 16
[ 1737.968421][ T5892] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1738.153521][ T5892] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1738.232655][ T5892] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[ 1738.259843][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1738.359480][ T5892] usb 2-1: Product: syz
[ 1738.422237][ T5892] usb 2-1: Manufacturer: syz
[ 1738.428410][ T5892] usb 2-1: SerialNumber: syz
[ 1738.563823][T26994] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1738.741539][T26994] usb 5-1: config 0 has no interfaces?
[ 1738.779652][T26994] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1738.831086][T26994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1738.878523][T26994] usb 5-1: Product: syz
[ 1738.892081][T26994] usb 5-1: Manufacturer: syz
[ 1738.913539][T26994] usb 5-1: SerialNumber: syz
[ 1739.002313][T26994] usb 5-1: config 0 descriptor??
[ 1739.179759][T26994] usb 3-1: USB disconnect, device number 3
[ 1739.611381][T30224] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1739.723663][T26994] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1739.910350][T26994] usb 3-1: config 0 has no interfaces?
[ 1739.924460][T26994] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1739.934050][T26994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1739.945969][T26994] usb 3-1: Product: syz
[ 1739.955295][T26994] usb 3-1: Manufacturer: syz
[ 1740.014554][T26994] usb 3-1: SerialNumber: syz
[ 1740.100484][T26994] usb 3-1: config 0 descriptor??
[ 1740.152132][ T5890] usb 4-1: USB disconnect, device number 11
[ 1740.426189][ T5892] usbhid 2-1:1.0: can't add hid device: -71
[ 1740.432399][ T5892] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[ 1740.446927][ T5892] usb 2-1: USB disconnect, device number 112
[ 1740.480104][T30235] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1740.973544][ T5892] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[ 1741.303672][T24328] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1741.359559][ T5892] usb 2-1: config 0 has no interfaces?
[ 1741.384221][ T5890] usb 5-1: USB disconnect, device number 104
[ 1741.474682][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1741.483977][T24328] usb 4-1: config 0 has no interfaces?
[ 1741.494133][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1741.507447][ T5892] usb 2-1: Product: syz
[ 1741.514183][T24328] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1741.524212][T24328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1741.533554][T24328] usb 4-1: Product: syz
[ 1741.537741][ T5892] usb 2-1: Manufacturer: syz
[ 1741.548341][T24328] usb 4-1: Manufacturer: syz
[ 1741.555666][T24328] usb 4-1: SerialNumber: syz
[ 1741.593658][ T5892] usb 2-1: SerialNumber: syz
[ 1741.624748][T24328] usb 4-1: config 0 descriptor??
[ 1741.638564][ T5892] usb 2-1: config 0 descriptor??
[ 1741.773752][ T5890] usb 5-1: new full-speed USB device number 105 using dummy_hcd
[ 1741.937644][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1741.948163][ T5890] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1741.961499][ T5890] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1741.986247][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1742.020829][ T5890] usb 5-1: config 0 descriptor??
[ 1742.036473][ T5890] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1742.047532][ T5890] dvb-usb: bulk message failed: -22 (3/0)
[ 1742.058815][ T5890] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1742.070784][ T5890] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1742.080548][ T5890] usb 5-1: media controller created
[ 1742.090399][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1742.121977][ T5890] dvb-usb: bulk message failed: -22 (6/0)
[ 1742.131222][ T5890] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1742.150769][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input354
[ 1742.172000][ T5890] dvb-usb: schedule remote query interval to 150 msecs.
[ 1742.183121][ T5890] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1742.285235][T24328] usb 3-1: USB disconnect, device number 4
[ 1742.335073][ T5890] dvb-usb: bulk message failed: -22 (1/0)
[ 1742.341884][ T5890] dvb-usb: error while querying for an remote control event.
[ 1742.382897][T30255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1742.405476][T30255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1742.420313][T30255] dvb-usb: bulk message failed: -22 (36/0)
[ 1742.429392][ T5892] usb 5-1: USB disconnect, device number 105
[ 1742.476648][ T5892] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1743.952502][T30268] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1743.959152][T30268] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1744.184497][ T5892] usb 2-1: USB disconnect, device number 113
[ 1744.223666][ T5890] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1744.483553][ T5892] usb 4-1: USB disconnect, device number 12
[ 1744.522059][ T5890] usb 3-1: config 0 has no interfaces?
[ 1744.551980][ T5890] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1744.561369][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1744.569910][ T5890] usb 3-1: Product: syz
[ 1744.592007][ T5890] usb 3-1: Manufacturer: syz
[ 1744.635470][ T5890] usb 3-1: SerialNumber: syz
[ 1744.655965][ T5890] usb 3-1: config 0 descriptor??
[ 1744.900628][T30271] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6235'.
[ 1744.950541][T26994] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1745.288421][T26994] usb 5-1: Using ep0 maxpacket: 32
[ 1745.307898][T26994] usb 5-1: config 0 has no interfaces?
[ 1745.330168][T26994] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1745.408775][T26994] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1745.425900][T26994] usb 5-1: Product: syz
[ 1745.433537][T26994] usb 5-1: Manufacturer: syz
[ 1745.442558][T26994] usb 5-1: SerialNumber: syz
[ 1745.443777][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1745.470918][T26994] usb 5-1: config 0 descriptor??
[ 1745.813558][ T5892] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[ 1745.833370][T24328] usb 5-1: USB disconnect, device number 106
[ 1746.023800][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1746.128181][ T5892] usb 2-1: config 0 has no interfaces?
[ 1746.163364][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1746.185397][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1746.257020][ T5892] usb 2-1: Product: syz
[ 1746.287461][ T5892] usb 2-1: Manufacturer: syz
[ 1746.345200][ T5892] usb 2-1: SerialNumber: syz
[ 1746.367889][ T5892] usb 2-1: config 0 descriptor??
[ 1746.456991][ T5892] usb 3-1: USB disconnect, device number 5
[ 1746.669064][T30290] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[ 1746.992912][T30307] fuse: Bad value for 'fd'
[ 1747.319017][T26994] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[ 1747.583644][T26994] usb 3-1: config 0 has an invalid interface number: 223 but max is 0
[ 1747.713596][T26994] usb 3-1: config 0 has no interface number 0
[ 1747.835388][T26994] usb 3-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice=70.28
[ 1747.851133][T26994] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1747.870632][T26994] usb 3-1: Product: syz
[ 1747.875086][T26994] usb 3-1: Manufacturer: syz
[ 1747.879802][T26994] usb 3-1: SerialNumber: syz
[ 1747.965511][T26994] usb 3-1: config 0 descriptor??
[ 1748.029055][T26994] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.223/input/input355
[ 1748.499704][T26994] usb 2-1: USB disconnect, device number 114
[ 1748.719075][T30316] kvm: kvm [30315]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0x186) = 0x8000
[ 1749.336573][T30325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6247'.
[ 1750.354476][ T5892] usb 3-1: USB disconnect, device number 6
[ 1750.404486][T30327] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1750.410651][T30327] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1750.432923][ T5196] bcm5974 3-1:0.223: could not read from device
[ 1750.597681][ T5196] bcm5974 3-1:0.223: could not read from device
[ 1750.615833][T23895] bcm5974 3-1:0.223: could not read from device
[ 1750.636736][ T5196] bcm5974 3-1:0.223: could not read from device
[ 1751.735269][ T5892] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1751.963673][ T5892] usb 3-1: Using ep0 maxpacket: 32
[ 1752.011748][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1752.043529][ T5890] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1752.101175][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1752.113639][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1752.126837][ T5892] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1752.136005][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1752.154930][ T5892] usb 3-1: config 0 descriptor??
[ 1752.237200][ T5890] usb 4-1: config 0 has no interfaces?
[ 1752.243708][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1752.253536][T26994] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1752.273478][ T5890] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1752.339814][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1752.383823][ T5890] usb 4-1: Product: syz
[ 1752.388013][ T5890] usb 4-1: Manufacturer: syz
[ 1752.423521][ T5890] usb 4-1: SerialNumber: syz
[ 1752.451231][ T5890] usb 4-1: config 0 descriptor??
[ 1752.471480][T30356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6255'.
[ 1752.483533][T26994] usb 5-1: Using ep0 maxpacket: 16
[ 1752.483761][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1752.509303][T26994] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1752.579589][T30348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1752.593382][T30348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1752.619993][T26994] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1752.657107][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00CC/input/input356
[ 1752.685907][T26994] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1752.695591][T26994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1752.706822][T30352] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6253'.
[ 1752.716329][T26994] usb 5-1: Product: syz
[ 1752.726515][T26994] usb 5-1: Manufacturer: syz
[ 1752.731586][T26994] usb 5-1: SerialNumber: syz
[ 1752.753517][T24328] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[ 1752.797624][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.00CC/input/input357
[ 1752.826257][T30348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1752.850780][T30348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1752.877559][ T5892] kye 0003:0458:5011.00CC: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[ 1752.923795][T24328] usb 2-1: Using ep0 maxpacket: 8
[ 1752.931190][T24328] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1752.974789][T24328] usb 2-1: too many endpoints for config 1 interface 0 altsetting 7: 78, using maximum allowed: 30
[ 1752.975304][T30354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1753.028316][T24328] usb 2-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 78
[ 1753.069020][T30354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1753.122217][T24328] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1753.143073][T24328] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.40
[ 1753.195469][T24328] usb 2-1: New USB device strings: Mfr=1, Product=66, SerialNumber=55
[ 1753.240041][T24328] usb 2-1: Product: syz
[ 1753.256378][T24328] usb 2-1: Manufacturer: syz
[ 1753.276810][T24328] usb 2-1: SerialNumber: syz
[ 1753.289947][T30354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1753.305695][T30354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1753.342055][T30354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1753.526502][T30354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1753.589387][T24328] usb 2-1: USB disconnect, device number 115
[ 1753.744861][    C0] kye 0003:0458:5011.00CC: usb_submit_urb(ctrl) failed: -1
[ 1753.757069][ T5889] usb 3-1: USB disconnect, device number 7
[ 1754.853540][ T5889] usb 4-1: USB disconnect, device number 13
[ 1755.173342][T30367] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1755.191714][T30367] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1755.260852][T26994] usb 5-1: 0:2 : does not exist
[ 1755.288184][T26994] usb 5-1: USB disconnect, device number 107
[ 1755.817313][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1756.023571][ T5889] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[ 1756.213516][ T5892] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1756.363679][ T5892] usb 3-1: Using ep0 maxpacket: 32
[ 1756.370768][ T5892] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[ 1756.381307][ T5892] usb 3-1: config 0 has no interface number 0
[ 1756.389880][ T5892] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1756.401353][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1756.413256][ T5892] usb 3-1: Product: syz
[ 1756.431978][ T5892] usb 3-1: Manufacturer: syz
[ 1756.446025][ T5892] usb 3-1: SerialNumber: syz
[ 1756.464566][ T5892] usb 3-1: config 0 descriptor??
[ 1756.477215][ T5892] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1756.533539][T26994] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1756.642601][ T5889] usb 2-1: Using ep0 maxpacket: 16
[ 1756.648565][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1756.708311][ T5889] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1756.721947][ T5889] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1756.733069][ T5892] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1756.760731][ T5889] usb 2-1: string descriptor 0 read error: -22
[ 1756.761361][ T5892] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1756.767262][ T5889] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[ 1756.767311][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1757.212007][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1757.313351][T26994] usb 5-1: config 0 has no interfaces?
[ 1757.565504][    C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1757.573622][ T5892] usb 3-1: USB disconnect, device number 8
[ 1757.584402][ T5892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1757.627492][ T5892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1757.770047][T26994] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1757.783509][T26994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1757.811060][T26994] usb 5-1: Product: syz
[ 1757.822260][T26994] usb 5-1: Manufacturer: syz
[ 1757.839207][T26994] usb 5-1: SerialNumber: syz
[ 1757.884641][ T5892] quatech2 3-1:0.51: device disconnected
[ 1757.897132][T26994] usb 5-1: config 0 descriptor??
[ 1759.613993][ T5889] usbhid 2-1:1.0: can't add hid device: -71
[ 1759.627883][ T5889] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[ 1759.710871][ T5889] usb 2-1: USB disconnect, device number 116
[ 1760.123691][ T5892] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1760.170895][T26994] usb 5-1: USB disconnect, device number 108
[ 1760.283892][ T5889] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1760.298158][ T5892] usb 3-1: config 0 has no interfaces?
[ 1760.368473][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1760.377836][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1760.390519][ T5892] usb 3-1: Product: syz
[ 1760.402693][ T5892] usb 3-1: Manufacturer: syz
[ 1760.463339][ T5889] usb 2-1: Using ep0 maxpacket: 32
[ 1760.477943][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1760.496485][ T5892] usb 3-1: SerialNumber: syz
[ 1760.502439][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1760.516889][ T5892] usb 3-1: config 0 descriptor??
[ 1760.592813][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1760.613524][T26994] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1760.740680][T30419] futex_wake_op: syz.3.6265 tries to shift op by -33; fix this program
[ 1760.753911][ T5889] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1760.765378][T30419] netdevsim netdevsim3: Direct firmware load for .
[ 1760.765378][T30419]  failed with error -2
[ 1760.783383][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1760.791676][T30419] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[ 1760.791676][T30419] 
[ 1760.835384][ T5889] usb 2-1: config 0 descriptor??
[ 1761.258525][T26994] usb 5-1: config 0 has no interfaces?
[ 1761.265096][T30413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1761.280840][T26994] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1761.290578][T26994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1761.300632][T30413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1761.329548][T26994] usb 5-1: Product: syz
[ 1761.352933][T26994] usb 5-1: Manufacturer: syz
[ 1761.364978][ T5889] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00CD/input/input358
[ 1761.386541][T26994] usb 5-1: SerialNumber: syz
[ 1761.411234][T26994] usb 5-1: config 0 descriptor??
[ 1761.482227][ T5889] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.00CD/input/input359
[ 1761.541716][ T5889] kye 0003:0458:5011.00CD: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0
[ 1761.555122][T30413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1761.573890][T30413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1762.453763][    C0] kye 0003:0458:5011.00CD: usb_submit_urb(ctrl) failed: -1
[ 1762.464577][ T5890] usb 2-1: USB disconnect, device number 117
[ 1762.822130][ T5892] usb 3-1: USB disconnect, device number 9
[ 1763.836450][T30431] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1763.857875][T30431] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1764.463578][ T5892] usb 5-1: USB disconnect, device number 109
[ 1765.573630][T30462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6279'.
[ 1765.660645][T30455] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1765.748281][T30455] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1767.054069][ T5892] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1767.229547][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1767.240152][T30478] trusted_key: encrypted_key: insufficient parameters specified
[ 1767.254100][ T5892] usb 5-1: Using ep0 maxpacket: 32
[ 1767.263322][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1767.303839][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1767.330399][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1767.343483][ T5892] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[ 1767.352535][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1767.406069][ T5892] usb 5-1: config 0 descriptor??
[ 1767.773775][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1767.839962][T30477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1767.851486][T30477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1767.930951][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00CE/input/input360
[ 1768.008716][ T5892] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.00CE/input/input361
[ 1768.052029][ T5892] kye 0003:0458:5011.00CE: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[ 1768.160559][T30477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1768.192421][T30477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1768.925607][   T24] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1769.369380][   T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1769.383680][ T5890] usb 5-1: reset high-speed USB device number 110 using dummy_hcd
[ 1769.399392][   T24] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1769.443793][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1769.509099][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1770.175951][ T5892] usb 5-1: USB disconnect, device number 110
[ 1770.538409][T30502] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1770.548648][T30502] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1771.370725][ T5892] usb 2-1: USB disconnect, device number 118
[ 1771.543184][T30523] input: syz0 as /devices/virtual/input/input362
[ 1772.006438][T27578] Bluetooth: hci2: command 0x0406 tx timeout
[ 1772.581477][T27578] Bluetooth: hci1: command 0x0406 tx timeout
[ 1772.769439][T30537] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6293'.
[ 1772.826679][T30535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6290'.
[ 1773.891081][T30549] 
[ 1773.893452][T30549] ======================================================
[ 1773.900466][T30549] WARNING: possible circular locking dependency detected
[ 1773.907473][T30549] 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 Not tainted
[ 1773.914562][T30549] ------------------------------------------------------
[ 1773.921570][T30549] syz.1.6298/30549 is trying to acquire lock:
[ 1773.927630][T30549] ffffffff900fd488 (rtnl_mutex){+.+.}-{4:4}, at: ip_mroute_setsockopt+0x161/0x11f0
[ 1773.936926][T30549] 
[ 1773.936926][T30549] but task is already holding lock:
[ 1773.944282][T30549] ffff88803209b8a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[ 1773.954389][T30549] 
[ 1773.954389][T30549] which lock already depends on the new lock.
[ 1773.954389][T30549] 
[ 1773.964771][T30549] 
[ 1773.964771][T30549] the existing dependency chain (in reverse order) is:
[ 1773.973762][T30549] 
[ 1773.973762][T30549] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[ 1773.982342][T30549]        lock_acquire+0x116/0x2f0
[ 1773.987349][T30549]        __mutex_lock+0x1a5/0x10c0
[ 1773.992439][T30549]        smc_switch_to_fallback+0x35/0xda0
[ 1773.998226][T30549]        smc_sendmsg+0x11f/0x530
[ 1774.003144][T30549]        __sock_sendmsg+0x221/0x270
[ 1774.008323][T30549]        __sys_sendto+0x365/0x4c0
[ 1774.013324][T30549]        __ia32_sys_sendto+0xdd/0x100
[ 1774.018672][T30549]        __do_fast_syscall_32+0xb4/0x110
[ 1774.024286][T30549]        do_fast_syscall_32+0x34/0x80
[ 1774.029637][T30549]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1774.036465][T30549] 
[ 1774.036465][T30549] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}:
[ 1774.044311][T30549]        lock_acquire+0x116/0x2f0
[ 1774.049321][T30549]        lock_sock_nested+0x48/0x100
[ 1774.054591][T30549]        do_ip_setsockopt+0x17e9/0x39c0
[ 1774.060118][T30549]        ip_setsockopt+0x63/0x100
[ 1774.065119][T30549]        do_sock_setsockopt+0x3b1/0x710
[ 1774.070645][T30549]        __ia32_sys_setsockopt+0x1f2/0x280
[ 1774.076431][T30549]        __do_fast_syscall_32+0xb4/0x110
[ 1774.082044][T30549]        do_fast_syscall_32+0x34/0x80
[ 1774.087396][T30549]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1774.094249][T30549] 
[ 1774.094249][T30549] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[ 1774.101469][T30549]        validate_chain+0xa69/0x24e0
[ 1774.106743][T30549]        __lock_acquire+0xad5/0xd80
[ 1774.111930][T30549]        lock_acquire+0x116/0x2f0
[ 1774.116953][T30549]        __mutex_lock+0x1a5/0x10c0
[ 1774.122043][T30549]        ip_mroute_setsockopt+0x161/0x11f0
[ 1774.127829][T30549]        do_ip_setsockopt+0x1114/0x39c0
[ 1774.133354][T30549]        ip_setsockopt+0x63/0x100
[ 1774.138362][T30549]        smc_setsockopt+0x25c/0xd50
[ 1774.143567][T30549]        do_sock_setsockopt+0x3b1/0x710
[ 1774.149104][T30549]        __ia32_sys_setsockopt+0x1f2/0x280
[ 1774.154893][T30549]        __do_fast_syscall_32+0xb4/0x110
[ 1774.160505][T30549]        do_fast_syscall_32+0x34/0x80
[ 1774.165855][T30549]        entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1774.172688][T30549] 
[ 1774.172688][T30549] other info that might help us debug this:
[ 1774.172688][T30549] 
[ 1774.182904][T30549] Chain exists of:
[ 1774.182904][T30549]   rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock
[ 1774.182904][T30549] 
[ 1774.196452][T30549]  Possible unsafe locking scenario:
[ 1774.196452][T30549] 
[ 1774.203886][T30549]        CPU0                    CPU1
[ 1774.209236][T30549]        ----                    ----
[ 1774.214582][T30549]   lock(&smc->clcsock_release_lock);
[ 1774.219942][T30549]                                lock(sk_lock-AF_INET);
[ 1774.226860][T30549]                                lock(&smc->clcsock_release_lock);
[ 1774.234731][T30549]   lock(rtnl_mutex);
[ 1774.238697][T30549] 
[ 1774.238697][T30549]  *** DEADLOCK ***
[ 1774.238697][T30549] 
[ 1774.246853][T30549] 1 lock held by syz.1.6298/30549:
[ 1774.251939][T30549]  #0: ffff88803209b8a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50
[ 1774.262461][T30549] 
[ 1774.262461][T30549] stack backtrace:
[ 1774.268360][T30549] CPU: 0 UID: 0 PID: 30549 Comm: syz.1.6298 Not tainted 6.15.0-rc1-syzkaller-00301-g3bde70a2c827 #0 PREEMPT(full) 
[ 1774.268373][T30549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1774.268380][T30549] Call Trace:
[ 1774.268386][T30549]  <TASK>
[ 1774.268391][T30549]  dump_stack_lvl+0x241/0x360
[ 1774.268408][T30549]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1774.268422][T30549]  ? __pfx__printk+0x10/0x10
[ 1774.268436][T30549]  ? print_lock+0x171/0x1a0
[ 1774.268448][T30549]  print_circular_bug+0x2e1/0x300
[ 1774.268462][T30549]  check_noncircular+0x142/0x160
[ 1774.268476][T30549]  validate_chain+0xa69/0x24e0
[ 1774.268489][T30549]  ? __lock_acquire+0xad5/0xd80
[ 1774.268502][T30549]  __lock_acquire+0xad5/0xd80
[ 1774.268513][T30549]  lock_acquire+0x116/0x2f0
[ 1774.268522][T30549]  ? ip_mroute_setsockopt+0x161/0x11f0
[ 1774.268539][T30549]  __mutex_lock+0x1a5/0x10c0
[ 1774.268551][T30549]  ? ip_mroute_setsockopt+0x161/0x11f0
[ 1774.268565][T30549]  ? preempt_schedule_common+0x84/0xd0
[ 1774.268577][T30549]  ? ip_mroute_setsockopt+0x161/0x11f0
[ 1774.268590][T30549]  ? __pfx___mutex_lock+0x10/0x10
[ 1774.268606][T30549]  ip_mroute_setsockopt+0x161/0x11f0
[ 1774.268619][T30549]  ? preempt_schedule+0xe4/0xf0
[ 1774.268629][T30549]  ? preempt_schedule_common+0x84/0xd0
[ 1774.268641][T30549]  ? register_lock_class+0x54/0x330
[ 1774.268651][T30549]  ? __pfx_ip_mroute_setsockopt+0x10/0x10
[ 1774.268667][T30549]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1774.268682][T30549]  do_ip_setsockopt+0x1114/0x39c0
[ 1774.268696][T30549]  ? __pfx_do_ip_setsockopt+0x10/0x10
[ 1774.268708][T30549]  ? smc_setsockopt+0x1b2/0xd50
[ 1774.268719][T30549]  ? __pfx___mutex_lock+0x10/0x10
[ 1774.268731][T30549]  ? futex_wake+0x525/0x5d0
[ 1774.268743][T30549]  ip_setsockopt+0x63/0x100
[ 1774.268754][T30549]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 1774.268769][T30549]  smc_setsockopt+0x25c/0xd50
[ 1774.268782][T30549]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1774.268795][T30549]  ? __pfx_smc_setsockopt+0x10/0x10
[ 1774.268805][T30549]  ? __lock_acquire+0xad5/0xd80
[ 1774.268815][T30549]  ? aa_sock_opt_perm+0x79/0x120
[ 1774.268829][T30549]  ? __pfx_smc_setsockopt+0x10/0x10
[ 1774.268839][T30549]  do_sock_setsockopt+0x3b1/0x710
[ 1774.268851][T30549]  ? __pfx_do_sock_setsockopt+0x10/0x10
[ 1774.268860][T30549]  ? __fget_files+0x2a/0x420
[ 1774.268870][T30549]  ? __fget_files+0x39d/0x420
[ 1774.268878][T30549]  ? __fget_files+0x2a/0x420
[ 1774.268887][T30549]  __ia32_sys_setsockopt+0x1f2/0x280
[ 1774.268898][T30549]  __do_fast_syscall_32+0xb4/0x110
[ 1774.268911][T30549]  ? exc_page_fault+0x5f8/0x920
[ 1774.268923][T30549]  do_fast_syscall_32+0x34/0x80
[ 1774.268935][T30549]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1774.268951][T30549] RIP: 0023:0xf7f07579
[ 1774.268964][T30549] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1774.268973][T30549] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[ 1774.268992][T30549] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000000
[ 1774.269000][T30549] RDX: 00000000000000d3 RSI: 0000000080000000 RDI: 000000000000003c
[ 1774.269006][T30549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1774.269012][T30549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1774.269018][T30549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1774.269027][T30549]  </TASK>
[ 1774.273531][   T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1774.281157][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1774.611537][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1774.784712][   T24] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1774.795053][   T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1774.805422][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1774.817213][   T24] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1774.829644][   T24] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1774.850724][T23899] udevd[23899]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1776.828121][   T24] usb 4-1: USB disconnect, device number 14