last executing test programs:

17m1.219762925s ago: executing program 4 (id=794):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f00000006c0)={0x8, 0x120, 0xfa00, {0x1, {0x3, 0x45e00000, "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", 0x7, 0x0, 0x7, 0x34, 0x66, 0x5}}}, 0x128)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7420757365723a73797a20303030303030d33a00c6305330303000300500"], 0x2a, 0x0)
r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0x37, 0x2}, 0x20)
keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000040)={0x48})
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0)
ustat(0x801, &(0x7f0000000300))
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x400c081}, 0x2c04c091)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000540)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
sendmsg$nl_route(r5, 0x0, 0x48805)

16m59.961096075s ago: executing program 4 (id=797):
socket$pptp(0x18, 0x1, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@generic={0x0, 0xffffffffffffff2f, 0x6})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008b86d3106d04b50801d7010203030902120001000000000904"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, &(0x7f0000000180)})
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000af8000000060a010400000000000000000a0000053c0005800800014000000073080001400000888e080002400000000008000140000088e508000140000000000800014000000084080001400000003324000480200001800700010063740000140002800800024000000007080001400000000984000480140001800b0001006e756d67656e0000040002800c000180080001006e617400100001800b00010074617267657400000c0001800800010064757000340001800a00010071756f74610000002400028008000240000000030c000440000000000000000c0c000e4000000000ffffffff100001800b0001006e756d67656e0000140000001100010000000000000000000100000a"], 0x120}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

16m58.38243951s ago: executing program 4 (id=807):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140b, 0x200, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040)
r2 = syz_open_dev$dri(&(0x7f0000000140), 0x7fffffffffffffff, 0x111400)
syz_open_dev$vim2m(&(0x7f0000000180), 0x4, 0x2)
close_range(r2, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000140001000000000000c300d92d"], 0x5c}}, 0x0)

16m57.976864592s ago: executing program 4 (id=808):
socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_create1(0x80000)
r0 = socket$igmp6(0xa, 0x3, 0x2)
signalfd(r0, &(0x7f0000000040)={[0x1ff]}, 0x8)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)=""/31, 0x0, 0x0, 0x2, 0x1}, 0x20)
sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x30, 0x0, 0x200, 0x1, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x20044048)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000030427bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000003c0012800b00010067656e65766500002c000280060005004e240000080001000300000004000600060005004e2200000500030005000000040006000a"], 0x78}}, 0x20048004)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0xfc, 0x0, 0x4}, 0xc)
socket$key(0xf, 0x3, 0x2)
r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_persistent(0x16, 0x0, r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000140), 0x0, 0x30)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x12143, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000003280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705fc7f99106f014f1a4692f638abacb71e4bb69643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00'])

16m57.259253297s ago: executing program 4 (id=812):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0)

16m56.825665303s ago: executing program 4 (id=815):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000006c0))

16m56.437290177s ago: executing program 32 (id=815):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f00000006c0))

12m27.073211163s ago: executing program 0 (id=1781):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r2 = io_uring_setup(0x55bd, &(0x7f00000001c0)={0x0, 0xaca0, 0x10})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400b0607e37f7b0b66e00000000000006e4e6097689000200000024000480200001800a00010071756d7461000000100009000c73797a30000000000900020073797a32000000001400000011000100"/126], 0x78}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a0102"], 0x2c}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
shmctl$IPC_RMID(r5, 0x0)
r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000140)={0x3, {0x6, 0x10001, 0x3ff, 0x100}})
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r7, &(0x7f0000000200)={0x1, 0x20, 0x1, 0x20, 0x8}, 0x48)
r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0)
fchdir(r8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000580)=""/211, 0xd3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000280)=ANY=[], 0x0)

12m24.799398118s ago: executing program 0 (id=1793):
r0 = syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x30, 0xc7, 0x41, 0x40, 0x41e, 0x4053, 0xe656, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x71, 0xc1}}]}}]}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}})
r4 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$cont(0x18, r4, 0xfffffffffffffff8, 0x6)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1, 0x0, 0x4000000], [0x7ff, 0x100003, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x91, 0x0, 0x738, 0x0, 0x8, 0x0, 0x1]], '\x00', [{0xfffffffe, 0xfffffffe}, {0x100775, 0xffffffff}, {0x0, 0x5}, {0x5}, {}, {0x8564}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x1}, {0xb6f}], '\x00', 0x5})
io_uring_enter(r0, 0x2def, 0x0, 0x21, 0x0, 0x0)
syz_io_uring_setup(0x23d, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f00000001c0)) (async)
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x30, 0xc7, 0x41, 0x40, 0x41e, 0x4053, 0xe656, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x20, 0x71, 0xc1}}]}}]}}, 0x0) (async)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) (async)
syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r4) (async)
ptrace$cont(0x18, r4, 0xfffffffffffffff8, 0x6) (async)
syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) (async)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1, 0x0, 0x4000000], [0x7ff, 0x100003, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000], [0x91, 0x0, 0x738, 0x0, 0x8, 0x0, 0x1]], '\x00', [{0xfffffffe, 0xfffffffe}, {0x100775, 0xffffffff}, {0x0, 0x5}, {0x5}, {}, {0x8564}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x1}, {0xb6f}], '\x00', 0x5}) (async)
io_uring_enter(r0, 0x2def, 0x0, 0x21, 0x0, 0x0) (async)

12m23.652960969s ago: executing program 0 (id=1796):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a8008f002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

12m23.54575703s ago: executing program 0 (id=1797):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r3, 0x84, 0x82, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x2)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
chroot(&(0x7f0000000780)='./file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
bind$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x1d, 0x0, 0x2, {0x0, 0xff, 0x6}, 0xff}, 0x18)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="2e19a7000000000000e14f003b00000008000300904301b024a2fff3879b3c861ade3c74c46f36cc8671bffa0421d3648c9ace26b2eb73456f9b3f29ad95cd10fcbec4d4eb387a00914d1fb2e6aea817a183ed20d6c4a6ab9f5b3a1e82572522fa905aae4756aafb3f294b97560d2a52caece2592cdbbee88dade48190b4b1245834b80b4a9e071fe1798418f495bfcf636c500ef9ce04164bdf37b53c55b56e83cefaca000289fb29", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)

12m23.364751119s ago: executing program 0 (id=1798):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@flat, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/10, 0xa}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, &(0x7f00000002c0)})

12m22.977844356s ago: executing program 0 (id=1802):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x470f, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x37)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0)
pwritev2(r2, &(0x7f0000022e80)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x41)
getsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

12m22.555844138s ago: executing program 33 (id=1802):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x470f, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x6, 0x4)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x37)
recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0)
pwritev2(r2, &(0x7f0000022e80)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x41)
getsockopt$inet_tcp_int(r2, 0x6, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

3m35.132827631s ago: executing program 6 (id=3416):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket(0x9, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0)
close(r2)

3m32.594852714s ago: executing program 6 (id=3427):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000001300)=""/102396, 0x18ffc}], 0x1, 0x41, 0x0)

3m31.721665734s ago: executing program 6 (id=3429):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x52c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x500, 0x2, [@TCA_U32_SEL={0x354, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x4, 0x0, 0x6, 0x8}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x5c4, 0xa, 0x6, 0xc}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x3, 0xd, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x6}, {0x7fff, 0x0, 0x3, 0x101}, {0x4, 0x5b61, 0x0, 0xe37}, {0x7, 0x2, 0x6, 0x6d}, {0x21, 0x600000, 0xffff, 0x54}, {0xff, 0x81, 0xd4, 0x6}, {0x3, 0x2, 0x3fa4f833, 0x46a}, {0x1, 0x6, 0xff, 0x3ff}, {0x5, 0x9, 0x1, 0x3}, {0x7, 0x1, 0x401, 0x9}, {0x8, 0x100, 0x7, 0x3}, {0x7, 0x9819, 0x6, 0x6}, {0x3, 0xc, 0x5, 0x6}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x0, 0x1, 0x4, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x4, 0xffff, 0x6, 0x2}, {0x80000001, 0x7, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xc63, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x5, 0x400}, {0x10, 0x0, 0x6, 0x3}, {0xb, 0x5, 0x5, 0x5}, {0x0, 0x9, 0x8, 0xa}, {0x9, 0xd, 0x7f, 0x8000}, {0xd, 0x6, 0x2, 0x8}, {0x9, 0x9, 0x7ff, 0x9}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x194, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0x9, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x7, 0x7fff, 0x0, 0x40}, {0x9, 0x10, 0x5, 0x5}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x49f, 0x7, 0x81, 0xb}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x6, 0x0, 0x8, 0x7}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x6, 0x8, 0x2, 0x1}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x4, 0x5d14, 0x7f, 0x72}, {0x7, 0x2, 0x7, 0x7}, {0x5, 0x7fff, 0x3, 0x438}, {0x7fff, 0x5, 0x401, 0xc42b}, {0x80, 0x3, 0x2, 0x1e0}, {0x3, 0xa67, 0x400, 0x80}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x52c}}, 0x24040084)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
socket$l2tp6(0xa, 0x2, 0x73)
clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_mrelease(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
pread64(r5, &(0x7f0000002180)=""/4101, 0x1005, 0x1)

3m29.529650209s ago: executing program 6 (id=3437):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
io_setup(0x222, &(0x7f0000000180)=<r2=>0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
io_submit(r2, 0x1, &(0x7f0000000680)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f00000001c0)="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", 0x200, 0x200}])
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000200), 0x8000000000000000, 0x1)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r8, 0x0, 0x48f, &(0x7f0000000680)={0x11, @empty, 0x4e23, 0x0, 'dh\x00', 0x8, 0x3, 0x3b}, 0x2c)
sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRES32=r4, @ANYRESHEX=r8], 0x80}}, 0x24000000)
ioctl$LOOP_GET_STATUS(r6, 0x4c03, &(0x7f0000000240))
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r9, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r9, &(0x7f0000000100)='./file0\x00', 0x1)

3m29.282258249s ago: executing program 6 (id=3440):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000a00)={0x40, 0x14, 0x5, "22c4ac6929"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')

3m28.769062618s ago: executing program 6 (id=3442):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0, 0x8080000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000400)={0x0, r1})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

3m28.044813684s ago: executing program 34 (id=3442):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x1, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0, 0x8080000})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000fc0))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000400)={0x0, r1})
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

17.552058803s ago: executing program 5 (id=4018):
syz_clone(0x8054880, &(0x7f0000000040)="fe6c3fffd03515dc362e7a8a477e1c5f101f8c25", 0x14, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x371, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(0xffffffffffffffff, 0x0, 0x1)
fchdir(r2)
openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_dev$char_usb(0xc, 0xb4, 0x3)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c02, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x109800, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r6, 0x8008f511, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)

16.33722849s ago: executing program 5 (id=4022):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000380)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x40001)
shutdown(r1, 0x1)
r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, 0x0, 0x0)
r4 = socket(0xa, 0x3, 0xff)
syz_emit_ethernet(0x7e, &(0x7f0000002380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x48, 0x2b, 0x0, @private0, @local, {[@routing={0x3b, 0x8, 0x2, 0x27, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private0]}]}}}}}, 0x0)
recvmmsg(r4, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}}], 0x3, 0x40000322, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[], 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x109281, 0x0)
io_uring_setup(0x4258, &(0x7f0000002300)={0x0, 0x2bb7, 0x0, 0x80000000, 0x2b6, 0x0, r2})
write$FUSE_INIT(r3, &(0x7f0000002280)={0x50, 0x0, 0x0, {0x7, 0x9, 0xfffffffd, 0x110002, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
r6 = socket(0x10, 0x3, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0x2b}]}}]}, 0x44}}, 0x0)
syz_fuse_handle_req(r3, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20, 0x0, 0x0, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
read$FUSE(r5, &(0x7f0000009080)={0x2020}, 0x2020)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r5, &(0x7f0000004540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004500)={&(0x7f00000044c0)={0x20, r10, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x7, 0x51}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008854}, 0x40080c4)

15.299498033s ago: executing program 5 (id=4026):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="cb050000a0000000cf4ebfa646353e6f06000000000000009500000000000000f85a5ae149bd185bbd9f1b4fcac22abad755ea65ddaaaec4c72e40d8b18c853db39a60fef5407e1c6d4db1093c60353b688e92112e06b20f72915246820609c898503112777e5d1b095781599f1b6dc3aac370f0497be950c826463826abebd2"], 0x0, 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000f92bb0e703619f7c09e0bad49b00", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000400"/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1}, &(0x7f0000000040), &(0x7f0000000280)=r0}, 0x20)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
lseek(r1, 0x851, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='lock i'], 0xc)
r3 = fsopen(&(0x7f0000000040)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x1, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r7, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8})
ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r7, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002})
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r7, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9})
ioctl$IOMMU_IOAS_COPY(r6, 0x3b83, &(0x7f0000000380)={0x28, 0x2, r7, r7, 0x1000, 0x5, 0x9})
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000800)={{r6}, "ff20b2f589dc494a83927c0b4d350d2364b4f7e326d6a79f07f6b2aa8f8b3c2bb77586c8ee2f3de97800000080000000005a17a4c5f337332082c25bca2835b8776d08d7bdde4197d74a8f09c1b400cbd38bf64993467bd50cbf8c65cb308d3d92727a4976f47670d0629bb93976e7126bbd4dbc572dc80315025feefc7fb82d25f28aaf8e47d140008bb861437b85ad094fbf01ba12c399971741fdcaf55a925d85006cbb6185fd8a630336a690532dbc97408c78a1c9878b1b2c99ff610132f1736f4843457f314bac1fe46c762bde90e176fbfd12643214c45383b781eb7e8f155fbe7dca27ec671a43e300c56c0da904ac5b69780f4633cb65aa43941f6909506ca6d9a351d6641b59bbb7c9f27af40c4e620059282e2628badf9f192b30e3032977e4ca4bc066ebbfd168388e3d5bdf598cf72be42a1c12dcbd803656e9e5fc7cc1816c4fcc70e30aed928c2e5942e9e25abd0afa8089f2387cdedb4ac09028c56b015f7f631cee7602651b3d5b368730062a8ff95e2c2f0125a3c29e4d141ca635002aab1de918fa0472a02835dc48473680b198311d22bc2f7f218710b755f0709739c75bde7593d82dba1ec600eb8e6723a495eab057f4ebbe447f937539aeaa66a1e88a6692afd54e303bcc21d8006a59b6cf936ba7829c9e2b2677aece031a76c85b283f1cef43597abceaacf66727483524652452d62b8a528dbe148c4c873ac3696cf4590b8504024832bd15fa6a7da8fd417e41161bdc7554856f5b739d2805c64597677f64edc45b4b0cd27cda46c51d9b40b815b6875b492158bda31604569682fa7004ec06b0d109878211dd61f3852d8a8c126eac5c2b2e79f5de6b3707547d1205fd86b2ebfeaf75880ceb42a9fe8659cf99068ea246f5d0bd4fc4cf6878729b37ace683c19d89a83dc06b29375ecc9fab73c42ca858a0a3e5200515c2486f7cad2b7ee47fed5a9cae9e84b6130fd31a6bda5e09bbf7b1387b35055c9a15654c4b102e62a657ea50c3f606d72ea4fd8cc580ab54075e60bfab888eb22af7cf1f246eae1823d930c66dcfbd2c3961f23f8119b938b30c1970ad622389cd32afc927897cbcdd7f49555419c429034af58721f20ae7053439a52d5d3daffcd948ee9d2682920753e466e55771af8d38da09eaea36e6d943ea606b90f9a56eb184b6849b157cf469f32604180c8f149cca4d601b4780251ada59f429ea81b2c9e949e348ca379fd6203ac857dfc560357ba6cde49c9fdd1ce2b29efff1b68d69657219a0013f1cdfa1d42a4a47efb392958478f52d1ddaab828525ed42d87804ceb0a99906515b019a8a8540dd0f0f42d261b52a0a592e407d836119a0e336762bc2916d407a47162e3869815f9555f842954e71b3f100f46c06f7f8f631834b8e1586c9f34c7d3d3ba907e208404a5c15f2db54edcf9f339185b7de67f6f3944067d25a477356790c05ff1586c81eb7e206bd1348c13b70f58304ff7f66118db08736f6413b22d25612a597b6f47f9045f07139c4aeb97f02b26affcd3a0ab578f6f92e44b0a2c4efe0c893d92ecad4d6d78caf266709b37e80728c53cff980912358e51f4ac857d7ef545ea6937ef4472b5fff243f8b24457cae6580e48ba5cde32532d261fb2928b42e7945b7d329a91d87cf285d893e375f77414e9d86368d068964fbdeeee3320596034f355da68e5bc21745627d8a7b9068f077e5648c55d75e3cdcf657deb506904d5c49e2bdd0fa5b98fce2c13ce7ec882e51c80dc894794234f5758f899c98c762212e8f4feb3a894af69ba41ee020c90cf7cb88b9d9c31e5a386dbdfad03f243b947a05c7afab413163036b07b2883a047120dd84042e16ec75ee1825c1b8790ad7ae0b0f1a7608e24b489a8292029a3449e1ec4eaf6a5e1f51e788e9456f82282b079bfcf5f910b266f8bcbc359c43eb1da660799dfe60096b03e75208d29937b6571aee07b21663cd257e02fd054d910da36dc6e3e551e2912c936f8a2bd31f140e1c66afb8cd5b18aca4e5899445271fb46957e02eb99c4b1cc67c653c7784d0633a5083ed21d1e521f8c93d272f818401ff47ef72a38c4fe4799dc443e748b7d81ae03222bbfbdcba123a9054068103eab3472fe99a5dd719c262101136cf1e045ba34c0c6e6f52cf20120fc185093b9a325eff94d38f9c529c3fa86660a71c060e5a1a8fed28b367ad3b7d3159c41fcbf13189411982abaa199a401c099a99c7191f1953a0cade75e2852cb8b1703b5afa9925a040fb2fc885d52b99e4a374933e01408bbe4ceff01b196efd4dea1f1f9cdc63c8545826bd72c9c134b1cab33c5e43805a11a9cba774ddd50dd2199ec7e5cb763ea8579feff8d515a39d04868c34b2b6541e15904bab9522f52ba1591fc4945da8e6120bba7094c651281e56e9883f2f6cdde00454cf44fdd8c8cb53cae3cb74dcd3401bad79d0b99185d51503f547724f71c8cbda087e1973a9682d427ee8c358548e5dd7e33beebfcd4c38d7145d65b6b8c2ba6057f9c18753856da53be8a9d6716a4d40b25317a6c4d53f9840c1b9c2ac18f119dc18d01158d88c8193633279cbca1e0a4563410d7eb50e0189c12ce5d915646ce60186c84b5a63a78fae995b88953f6dff7f1df41bd29fcbaae5d4aeeb3696d4e765f6f5a5dc6efd4d18c45fe5f6b9aceaeb599338e26525e64c88a5fab85b92c52551fc3923eb91c0637297478697e3cd35964f17a9c7a9d7ff417f21f4a039718ad7b0d8e6e672dbe31c15736ffd1934f105a51d57a8f51bba8e6e5b4c0ac876a5310a3d45c5b663253e8f7649e3eca7d817970f7f226eb9eb7d8a40a0669ab077d50722937982c9d92cc33103f45f4a93aaed92be7749a92da091b36d3a01bd6dcf34e7ed00a12ef48b1f5303df80ddbd36390b23e8a7f5bfd5caa7568c460aef7a462849d63ee030335d4efbfd2ab6a15bb7590fb0a761c686ee75a7853044d5b7478f829fc248b8aac742b12f27cff713bc98695fbe4adcba08cbda65607f0f40a3fe566dd129aa79a73d878933138fcc569cc2e37c5868a7b287985d67e76808b25858ae56566f8da127a663752c05415b97d2ea04b1dab6126225fc7a68f9ee47c05304c243fc9f817a50bd250f9d23bc534d7a24731c6fdb6162601832a3ee538f3c7644d27f82e3c6810a7c9137dae3d5f08124fae4804f3841f058ca7de5e9b0ae4607392f2926e1df8f5e70c61b720ba820ad35802d4ad9c24ea0f46c89d58eecdd3bde06d686a3bf27ab9584bff7533dd688e15e6069ff4558aec5da95ff045feecc726a9ca90bc3040516c480001c3d4ccc855280a5251ad506a9d014052086512e8f241edb7cd27f686b33948593c759b31fae6f628afd118720917f6642060e9aa6f4b22b73181b17b397b505783deeae92e26c25c02fa0654be3a1242e284376e08ae2727ca5a3a2ca29769c6867593717825567b78c134a76b3ce8db6fa7a79b24a363ea8a193fcf986ee091a5f1eafa717aa8bb81124a48b0592c998c24bc73c387b55d11b0e4a048c362735f4615c915a257d9b2213cfa2e3341306c08242876c7bc7d6d025bd8e60cdfd9378581e077baf4b1b821901e84776f359f21bfb915296a0bad6db8391f912a72c36e2f9f56d7431d2ae889d50c68ffc3d18f43aad1fedd7b2e3450086dc71a56e27cea7b7f0f4dc49715eb57ceccba39396bf16a5b116b1a81a79209a54bda7c397d0fb5c2fb5d248b7d43cd63b687c73946988a8abcdc366697eef4457cb8b8a2aad045a7cbe5a81ff5f25072ddddd4f4e7ccfdfc640bb21be595706a79bfa33dfd0a43c6779571a02d6e8788270051e0829a2efc1499718e6b4e2418a6f67f616b8c5556d5201180d02120b3a29ec5f8731485921bfe81242443834575b2e8c7b3fa330e4ea02ee2e82f6b3213f8f7fe44ab8cc1efb4d23ff9740d5e43ecbe5f0c5331c3e7fddedd34a8eb77ca78d50973a9c1aa7fd299bd8a7289f0c03c940d4178e18012df7031aef0e27804da1e3a27bb47878513bb3dd2b19d52ba964edbe3dee1e2e6f2618a33b0f7d6cc62253c52f07d7e117d6bcd9cfce7b975fd74cb444f497d3fcef74f7ba6d8d23294b93a1d3af0132b5599270626ac09533bcb9491c4be60814cd1bbf1843cad956cfeb78f6206ef626ca1e860575ea882efa1b9b1b01215f6b65d6f7c403271bacbc81850d5fc95b43f52a996b421c0d0804cd78bc48505f24d4952a6dd474c0f0b26d05b15fb90899c61a3325b5a9c140a12a4e35c42ac6477f17b3a78f1cd67c8a57cff1202e125667a892d14c1f29bda8f6d91b613b2186b3d932490ef3a471f4c56069777d527c277f80d04414a585c1ed6f46e1b3c432b53ac07d332d31d59c8c8c9b54c69456fe121165f49b5da7839545ff0c0f9df5ec5dc7accdfc0a3eaf246f00c45b9af546f63e61c96f4a69599babe33683862c3258d5dbb816f18bb8c967b0d5462d73b6c64f7b4b679fcb5682769bc81d766488071a0db3304f9270d5ae84ca6bd4e0c7b060bf9f203b7ed4f7b91fad1163d26f3b7c3b8261b52cc190dab2c1b3381113804f175f57e5c270545280698e7e2d8bacffd5417d85897b98360164f31d228a3d131ab12c3f4c7adc1a0a0bdc77621bc579592ce3879f8ff0a61d148a6b82683d710aae37b8d0af6927742e87a76970697f7a49cf902edcb01f7b0b2385b99f998d198a98620b680a7e25bfe5d05495348193dc7f3d92e5481eb7a00273ad45f77ff9b18b88606117cc30cb38b197442d94081815daec2767e0fecb2b0aeb19ecf50781b13bd524a0e9a31d02db77e31a41cc194616d8b9f1d548fddd80b0c80b00fd7ac41abbcc8ce0f6c8d6742576d0b55ea2cbb540aef8fe2b14416eb217653233e3dedab4802f129da3f8dbfaf96beb6f3c0be65ed29926c1f68f29398f480b4bb619c18d79cf4994af27850b3abda483813056122701829c44d7bffb0e6996d7b14142c5b582e76d08eb3e495556e48b820f37f3d33b7901024180a1caef43b51182ba2b0ba73f74f5d1585f027431cae375523476863d8acb9d940ad4c19756d794fb546d68cb6a47594eca07628d4b8915786ebcdedec77e966ec959363d9dbfdebc337ee3e2674af2c4f89f0f15870713b83109ec5ede8f183fd6fee12741d382e300824239ecb1bec44f3504fa2622309b840a6120707f03f664ea86e1bfcbd7c52937b7fcc20f36ea8988332aac9ab648582834bd5d2c72378835a9f9ff7338d6f4f80a3ab2365b10de12ff30ed1c8ad8f030d6f93dee21f137ccb5df877440f97e7c5d447cbc5c926423c361a7a57957e025aa16760865edd5868525444ed7b3ccadf01ff901cddfd909c29ae6692116f0497feebc4dcf9b9f08f476200a5606f012814ddcd4727dfddc4c50f9e1d31294decd5a77850951a77661cc178c54c9a4b5e015bcb7564a93e0153f1ddf532d3255d15ce98dd19661e4b98ecd9703f19378c7ba562a995ce822861ac43c4fce6251936d4de9b22f35024e46ce58b67cdfa5377406470082bf5147b1b770b033027b8d65bea651585269c09c5d318b3b19aac946f1c5143778f7c6051e51b120e4e0d8ba6f6f542e6a8239beb30cfccd1488f46d6ef4719fcc904ebfd4ec9b9fb7f2c335459d4f4705e694b16bc3412ac2934ed9d4b4d13c3304e6fbf55f2e31cec67a3ac42c846792629e887b63710637d7ee818a9b7e36a3342851da85fdd0b1f7c1318dab1932110deda0749be950288ded78c9b64600"})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14)
read$FUSE(r5, &(0x7f0000001800)={0x2020}, 0x2020)
getpid()
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r9 = userfaultfd(0x1)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r9, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

14.911730809s ago: executing program 5 (id=4029):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 11)

14.110114338s ago: executing program 5 (id=4031):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x9, 0x0, 0xfffff028}, {0x6, 0x0, 0x8}]})
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0xfff, @loopback, 0x8}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000080)=0xffdffffe, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000101010200000000000000000a0000000c0019800800020017000000380002802c00018014000300fc010000000000000000000000000000140004"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0b0000000000000000000d0000000000000000009f9dbdc4d26d36fb0f1aec44f626a6ba189c48c0e855e384a43f4828064e51e27d3bb5a0649d9a19ca3d9a2f074eeec3c133d2e233dc2116ecf19b18f928655222e414240133e277ad4b6eaae06985f94a9d54da397315323fcce604dd0c77cefbb05d936ccb15536a45851fd85142a22633a309a417", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e06070c"], 0x9)

12.898797075s ago: executing program 5 (id=4034):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000280)={0x20000, 0x4})
r2 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x2, 0x0, @tick=0x9, {0x42, 0xff}, {0x10, 0x9}, @result={0xd66b, 0x3}}, {0x0, 0x7, 0x0, 0x0, @tick=0x22, {0x2}, {0x80, 0x1}, @control={0x1, 0x400, 0xffffffa1}}], 0x38)
write$sndseq(r2, &(0x7f00000005c0)=[{0x2, 0x7, 0x7f, 0x1, @time={0x40, 0xe69}, {0xe}, {0x7, 0x9}, @ext={0x0, 0x0}}, {0x5, 0x6a, 0xf7, 0x2, @time={0xb, 0x5d}, {0x9e, 0x66}, {0x52, 0x5}, @result={0xb4c, 0x8}}], 0x38)
read$snapshot(r2, 0x0, 0xffffffbf)
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000140))
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000000)

11.287122117s ago: executing program 1 (id=4041):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44045}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x8000000)

10.819251742s ago: executing program 1 (id=4045):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r2 = io_uring_setup(0x55bd, &(0x7f00000001c0)={0x0, 0xaca0, 0x10})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c000000190a0102"], 0x2c}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
shmctl$IPC_RMID(r5, 0x0)
r6 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000140)={0x3, {0x6, 0x10001, 0x3ff, 0x100}})
r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$tcp_mem(r7, &(0x7f0000000200)={0x1, 0x20, 0x1, 0x20, 0x8}, 0x48)
syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time\x00')
r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x688200, 0x0)
fchdir(r8)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000580)=""/211, 0xd3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
syz_usb_connect$uac1(0x0, 0x8a, &(0x7f0000000280)=ANY=[], 0x0)

9.768685248s ago: executing program 7 (id=4047):
socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x4000841)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
unshare(0x66000080)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r4=>0x0})
r5 = gettid()
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26004011}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0xfffffffffffffffe, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000952aa3f8f2defdd751331d12095a7c6abfeb884b444488fdc65d5791551be76014f266dc2c25f85e674de564bb2ec7f13719e99a1f4be17d1a0030cfccfd4bba313780be85f1c5820fe299f97f0510dc64130d29db1db444cf18e49519506b3ec7b008bfd5c04a3b4de3b0ad15d746f408c5af85380dd556b1127aba0d043d6fd8e1345562c3c67e581333198585181d4c3396b393dd8edfd5c0a5e73928c4007c005cd945c75787012db515306ffc4109c604423120442884", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000000000001410000001c0017000002ff000000006574683a6d6163766c616e3000000000"], 0x38}}, 0x40000)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7427aea3a9fb692f6dbff823911b9b20757365723a73797a20823030050e3030"], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd)
socket$nl_generic(0x10, 0x3, 0x10)

9.491923387s ago: executing program 2 (id=4048):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
r2 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r2, 0xc0044dff, &(0x7f0000000100)=0x9)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="5c00000002060102000000000000000000000000140007800800124000060000080008400000003710000300686173683a69702c6d616300050005000a00000005000400000000000900020073797a31000000000500010007"], 0x5c}}, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x2dd, 0x10100}, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000180)=<r6=>0x0)
r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
unlinkat(r7, &(0x7f0000000280)='./file0\x00', 0x200)
lseek(r7, 0x100, 0x0)
ioctl$KVM_DIRTY_TLB(r7, 0x4010aeaa, &(0x7f0000000140)={0x4, 0x6bc3})
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
io_uring_enter(r4, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r8 = msgget$private(0x0, 0x6c2)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b04705820"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)
msgsnd(r8, &(0x7f0000000340)={0x3}, 0x2000, 0x0)
r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r11 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x400080, 0x0)
socket(0x26, 0x5, 0x7)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r10, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r11, {0x4}}, './file0\x00'})

8.414870306s ago: executing program 2 (id=4049):
r0 = syz_io_uring_setup(0x5ba6, &(0x7f0000000340)={0x0, 0xb51a, 0x10000, 0x100005, 0xfffffffd}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0)
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)={0x0, 0x9, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0})
syz_usb_control_io$uac1(r6, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r6, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000240)={0x60, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r6, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000b00)={0x40, 0x18, 0x4, ',y&]'}, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x58, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, 0x58}}, 0x40040014)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000000c0)={r8, 0x10, 0x5e3, 0x80, 0x100, 0x6, 0x3ff, 0x9, {0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x1, 0xffff19cf, 0x9, 0x7, 0x4c9}}, &(0x7f0000000240)=0xb0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x300fff2)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x201}, 0x0, 0x4040092})
io_uring_enter(r0, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

7.730418556s ago: executing program 1 (id=4051):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x24044810}, 0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0xa0002)
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r5, 0xc0505405, &(0x7f0000001200)={{0x3, 0x2, 0x1, 0x3}, 0x400, 0x4, 0x6})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'geneve0\x00', 0x2a34}, 0x18)
getsockopt$IP_VS_SO_GET_DAEMON(r8, 0x0, 0x487, &(0x7f00000001c0), &(0x7f0000000200)=0x30)
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
r10 = fsopen(&(0x7f0000000140)='exfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0X#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
fstat(r1, 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000701, 0x0, 0x0, &(0x7f0000000340))
r11 = dup(r9)
ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000048d"])

6.620855778s ago: executing program 7 (id=4052):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000340)="f2440f303e660f388130440f3048b8f8000000000000000f23c00f21f835030005000f23f84c0fc76efdc421fe5b1b66baa00066b8000066efc461cd7455c866b81d000f00d0c4614df97129", 0x4c}], 0x1, 0x13, 0x0, 0x0)

6.118918988s ago: executing program 1 (id=4053):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400", "c14ec98dcd2ad89f"}, 0x28)
sendto$inet6(r0, &(0x7f0000000140)="b9", 0x1, 0x8000, 0x0, 0x0)
write$binfmt_aout(r0, 0x0, 0xfdef)
ioctl$SNDRV_PCM_IOCTL_START(0xffffffffffffffff, 0x4142, 0x0)
unshare(0x20000400)
r1 = socket(0x40000000015, 0x5, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x30}, 0x1, 0x0, 0x0, 0x4841}, 0x800)
getsockopt(r1, 0x200000000114, 0x8, 0x0, &(0x7f0000000000))
bind$can_raw(0xffffffffffffffff, &(0x7f0000000080), 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05002000040000100800000802000000008c2efb", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38)
sendto$inet6(r0, &(0x7f00000003c0)="c6", 0x1, 0x0, 0x0, 0x0)
rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)='./file0\x00')
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=ANY=[], 0x2bc}}, 0x40c0040)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004})
sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x4800}, 0x48080)

6.045337973s ago: executing program 3 (id=4054):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$udambuf(0xffffff9c, &(0x7f0000000080), 0x2)
ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0xfffffffb, 0x100)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@delpolicy={0x50, 0x27, 0x2, 0x0, 0x0, {{@in6=@private2, @in6=@remote, 0x0, 0x0, 0xfffc}}}, 0x50}}, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket$kcm(0x2, 0x3, 0x84)
recvmsg(r6, 0x0, 0x40010022)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @multicast2}, 0x10)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="ffff0100000024"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

5.880784301s ago: executing program 1 (id=4055):
socket(0x10, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x10, @buffer={0x0, 0xc8, &(0x7f0000000640)=""/200}, &(0x7f0000000240)="238d7acf0800", 0x0, 0x0, 0x1b, 0x0, 0x0})
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x2, 0x0, 0x40, 0x0, 0x8})
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)

4.698827834s ago: executing program 7 (id=4056):
syz_open_dev$sg(0x0, 0x0, 0x5)
socket$nl_route(0x10, 0x3, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x7)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket(0x11, 0x800000003, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x48101, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r7, 0xc008aec1, &(0x7f00000021c0)={0x9, 0x0, [{0x80000008, 0x3, 0x1, 0x0, 0x80000000, 0x0, 0xd}, {0xa, 0x3, 0x2, 0x1, 0x800, 0x0, 0x94000000}, {0x80000006, 0x8, 0x1, 0x2, 0x80000000, 0x7fffffff, 0x6}, {0xc0000001, 0xffffffff, 0x5, 0x10001, 0xd56, 0x0, 0x3}, {0x80000008, 0x7ff, 0x2, 0x8, 0x7, 0x8000, 0xfffffffa}, {0x1, 0x6, 0x6, 0x9, 0x9, 0xffff, 0x1a}, {0x40000001, 0x2, 0x4, 0x4, 0x2, 0x80000000, 0xb155}, {0xa, 0x7, 0x4, 0x81, 0x0, 0x124f, 0x57671f32}, {0x0, 0x7, 0x5, 0xd9e7, 0x3, 0x10001, 0x40}]})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r8, r6, 0x0)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r9, &(0x7f0000000180)={0x2020}, 0x143b)
r10 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r10, 0x0, 0xf, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x5, @private0, 0x5}], 0x1c)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20004810)

4.677666522s ago: executing program 2 (id=4057):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000001000010026bd7000fedbdf2500000600", @ANYRES32=0x0, @ANYBLOB="141804002121040038001280110001006272696467655f736c617665000000002000058005000600000000000400180006001f00c0ff000008002200", @ANYRES32, @ANYBLOB="140003006272696467655f736c6176655f30"], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x24000040)

3.604663646s ago: executing program 2 (id=4058):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0)
fsync(r0)
syz_open_dev$loop(0x0, 0x6, 0x142b23)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, 0x0}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000001c0)={0x0, 0x25c9, 0x400, 0x800003, 0x288}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000300))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000))
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11)

2.90697186s ago: executing program 3 (id=4059):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newsa={0x184, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0x2}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tmpl={0x44, 0x5, [{{@in6=@mcast2, 0x4d6, 0x3c}, 0x2, @in6=@remote, 0x3500, 0x4, 0x3, 0x80, 0x2, 0x5, 0x1}]}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x184}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)={0x1c, 0x1e, 0xa01, 0x0, 0x0, {0x7}, [@nested={0x8, 0x6e, 0x0, 0x1, [@nested={0x4, 0x6c}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800d1}, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x103241, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffff6, 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'wlan1\x00', {0x4}, 0x7fff})
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffff, 0x3}}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in=@loopback}}, 0xe8)

2.210122032s ago: executing program 7 (id=4060):
rseq(0x0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = io_uring_setup(0x20, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000300)={0x10000008})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r6=>0x0})
openat$apparmor_thread_exec(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000080)={'\x00', 0x0, 0x5, 0x4, 0xc, 0x7f, 0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYRESHEX=r6], 0x38}}, 0x0)
sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000100)="000000000016e28f0ef8cb43", 0xc}], 0x1}}], 0x1, 0x0)
socket$unix(0x1, 0x1, 0x0)

2.166197655s ago: executing program 1 (id=4061):
socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x4000841)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
sched_getattr(0x0, &(0x7f0000000240)={0x38}, 0x38, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
unshare(0x66000080)
r3 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r4=>0x0})
r5 = gettid()
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r4, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r5], 0x28}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26004011}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x26, 0xfffffffffffffffe, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000952aa3f8f2defdd751331d12095a7c6abfeb884b444488fdc65d5791551be76014f266dc2c25f85e674de564bb2ec7f13719e99a1f4be17d1a0030cfccfd4bba313780be85f1c5820fe299f97f0510dc64130d29db1db444cf18e49519506b3ec7b008bfd5c04a3b4de3b0ad15d746f408c5af85380dd556b1127aba0d043d6fd8e1345562c3c67e581333198585181d4c3396b393dd8edfd5c0a5e73928c4007c005cd945c75787012db515306ffc4109c604423120442884", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000000000001410000001c0017000002ff000000006574683a6d6163766c616e3000000000"], 0x38}}, 0x40000)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e65772064656661756c7427aea3a9fb692f6dbff823911b9b20757365723a73797a20823030050e3030"], 0x2a, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
add_key$user(0x0, &(0x7f0000000440), &(0x7f00000002c0)="ae", 0x1, 0xfffffffffffffffd)
socket$nl_generic(0x10, 0x3, 0x10)

1.124871763s ago: executing program 2 (id=4062):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000014d00)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x101, 0x0, 0x2, 0x442c}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x84, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x3ff}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x5}, @IFLA_GRE_IKEY={0x8, 0x4, 0x6}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x456}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)

1.025095036s ago: executing program 3 (id=4063):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x190}}}}]}, 0x38}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0x7fff}}, './file0\x00'})
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x1ddddf000, 0x3, 0x2, 0x84, 0x4, 0x4, 0x2, 0x8, 0x3c, 0x1, 0x1}, {0x4000, 0xdddd1000, 0xb, 0x1, 0xc, 0xba, 0x5, 0x7, 0x80, 0xad, 0x3, 0x8}, {0xeeee0000, 0x1, 0x0, 0x0, 0x4, 0x9, 0x0, 0x2, 0x1, 0x1, 0x81, 0x5}, {0xdddd0000, 0xeeee8000, 0x9, 0x35, 0x9, 0x5, 0x0, 0x3, 0x6, 0x9, 0xe, 0x2}, {0x2, 0x6000, 0xd, 0x6, 0x2, 0x0, 0x80, 0x5, 0x8, 0x0, 0xad}, {0x5000, 0xeeee0000, 0xf, 0x1, 0xf, 0x7, 0xff, 0x6, 0x3, 0x9, 0x69, 0x3}, {0x80a0000, 0x8000000, 0x10, 0x9, 0x81, 0x66, 0x8, 0x9, 0x3, 0xb3, 0x0, 0x5}, {0x1000, 0x1010f000, 0x4, 0x2, 0xd7, 0x27, 0x5, 0x4, 0xf, 0x0, 0x6}, {0xd000}, {0xeeef0000}, 0x20010000, 0x0, 0xdddd1000, 0x50400, 0x5, 0x100, 0xdddd0000, [0xfffffffffffffffa, 0x7ff, 0x1000, 0x9]})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}]}, 0x50}}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_INDEX={0x8, 0x2, 0x190}}}}]}, 0x38}}, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) (async)
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0x1ddddf000, 0x3, 0x2, 0x84, 0x4, 0x4, 0x2, 0x8, 0x3c, 0x1, 0x1}, {0x4000, 0xdddd1000, 0xb, 0x1, 0xc, 0xba, 0x5, 0x7, 0x80, 0xad, 0x3, 0x8}, {0xeeee0000, 0x1, 0x0, 0x0, 0x4, 0x9, 0x0, 0x2, 0x1, 0x1, 0x81, 0x5}, {0xdddd0000, 0xeeee8000, 0x9, 0x35, 0x9, 0x5, 0x0, 0x3, 0x6, 0x9, 0xe, 0x2}, {0x2, 0x6000, 0xd, 0x6, 0x2, 0x0, 0x80, 0x5, 0x8, 0x0, 0xad}, {0x5000, 0xeeee0000, 0xf, 0x1, 0xf, 0x7, 0xff, 0x6, 0x3, 0x9, 0x69, 0x3}, {0x80a0000, 0x8000000, 0x10, 0x9, 0x81, 0x66, 0x8, 0x9, 0x3, 0xb3, 0x0, 0x5}, {0x1000, 0x1010f000, 0x4, 0x2, 0xd7, 0x27, 0x5, 0x4, 0xf, 0x0, 0x6}, {0xd000}, {0xeeef0000}, 0x20010000, 0x0, 0xdddd1000, 0x50400, 0x5, 0x100, 0xdddd0000, [0xfffffffffffffffa, 0x7ff, 0x1000, 0x9]}) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x8000}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}]}, 0x50}}, 0x80) (async)

956.516972ms ago: executing program 2 (id=4064):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0xa, &(0x7f0000000300)=[{0x1, 0x3, 0x6c, 0x7}, {0xfff, 0x7, 0xbe, 0x81}, {0x528c, 0x3, 0x7, 0x55}, {0x7, 0x6, 0x0, 0x81}, {0x0, 0xf, 0x6, 0x7ff}, {0x3ff, 0x6, 0x0, 0x2}, {0x7f, 0xe6, 0x6, 0x7}, {0x8, 0x2, 0x3, 0xffff7d38}, {0x3ff, 0x8, 0x2}, {0x80, 0x7, 0x80, 0x80000000}]})
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x1f, 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x3a85ef35342a412e)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x7ffffffb, 0x480000000005, 0x9, 0x4000000000, 0x400000000000003, 0x5, 0x1041, 0x807, 0x0, 0x32a, 0xfffffffffffffffd, 0x3, 0x1, 0x10000, 0x800004, 0x4006a], 0x6000, 0x101214})
r4 = socket(0x3, 0x4, 0x0)
connect$l2tp6(r4, &(0x7f0000000740)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x28, r6, 0x3, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c881}, 0x4000)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000418fbea12c573ec2a629b33275465b3cb5c140d40d78016c9af0d10be9683848f57cc10e0eadd7efba5f4a433060a8b216bc870b81fad66463d0ee1122874bca7b02f43522f661c6bfb05d7f868fa19a91b450e3bfe61e3001956f51870f31b11dddd608527bf3ef4db58569bab3b6dbfe31fb362f66b56e6c22eded", @ANYRES16=r6, @ANYBLOB="00042bbd7000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="08000d00ffffffff24005a8020000080040002000400020013000200031c0500282917551013072f15490000"], 0x48}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000)
ioctl$SIOCGETSGCNT_IN6(r4, 0x89e1, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

808.817618ms ago: executing program 3 (id=4065):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000340)="f2440f303e660f388130440f3048b8f8000000000000000f23c00f21f835030005000f23f84c0fc76efdc421fe5b1b66baa00066b8000066efc461cd7455c866b81d000f00d0c4614df97129", 0x4c}], 0x1, 0x13, 0x0, 0x0)

594.199935ms ago: executing program 3 (id=4066):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async, rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece)
read$FUSE(r5, &(0x7f0000002f00)={0x2020}, 0x2020) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000001080)={'syztnl1\x00', <r6=>0x0, 0x29, 0x4, 0x51, 0x1, 0x12, @private1, @mcast2, 0x760, 0x7, 0x1, 0x4}})
sendmsg$nl_route_sched_retired(r5, &(0x7f0000001100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xe70e756cebf5fb5b, 0xcef5, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xffe0, 0xfff2}, {0xa, 0x1}, {0x3d1bfe32e7ade075, 0xffe0}}, [@q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x40}}, 0x810)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r8 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64)
r9 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0}) (async)
r11 = socket(0x400000000010, 0x3, 0x0) (async)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x60, 0xfff0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040084) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async)
recvmsg$unix(r15, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000563000/0x2000)=nil) (async)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000001180)={0x6, 0x0, [{0x201, 0x0, 0x4ad1}, {0xc0010141, 0x0, 0xfb86}, {0x273, 0x0, 0x39a000000}, {0xb53, 0x0, 0x1}, {0x35a, 0x0, 0x1}, {0xc0010064}]}) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket(0x11, 0x800000003, 0x0)

323.151555ms ago: executing program 7 (id=4067):
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$PTP_SYS_OFFSET(r0, 0x43403d05, &(0x7f0000000040)={0x11})
syz_open_dev$vcsa(&(0x7f0000000180), 0x4, 0x101100)
get_mempolicy(0x0, 0xfffffffffffffffc, 0x5, &(0x7f0000ffd000/0x2000)=nil, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0xf2, 0xc8, 0x3}}}, 0x7)

92.919814ms ago: executing program 7 (id=4068):
mmap$IORING_OFF_SQ_RING(&(0x7f0000f77000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x3a)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x18, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0x7}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0xfffffff8, @loopback, 0x401}, 0x1c)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="44010000100001008f1ade9600050000fe880000000000000000000000000001ac1414aa000000000000000000000000000107944e2300050000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000b00000000000000000000010001079c4e230005000000003a000000", @ANYRES32=0x0, @ANYBLOB="fc02e541065996d8ad699cfebd9fbe62dfd28e2844972253e17bcb1eea1777727f137c616c996bacb14b33cb5ea84a41ece7bb651032890036f1739e57b0747e71e7c4c5bee0d7f8e58232a99b4d8636887cc9d8ba2bd9149829a84e64367e39a738942abac5231ab922043834bd4715e6e84d951d417d73ce382b3d711f923e0b27e0c1ecc01f9dbb0bc67cef98f4a524ce88ccd5df378c2fe34fb2f4dd0f0187e2673639d55817fcf193c85f28902e9be00df3d605d21ba627e5b64a4fa97aeec585f8ec2aca693d7930", @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3ce}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=4069):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000083667d001d1040206402d14e0102030109021b000100000000090400000190f19c0009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000000)=0x80001000, 0x4)
setsockopt(r1, 0x6, 0x5, &(0x7f00000001c0)="6ac3d7b8", 0x4)
syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x23, 0x24, {0x24, 0x24, "6c1739006b2d0faa5476d5d5163354035c06e3c4089bbf5e18a9d846375adfe816ca"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x20, 0x10, 0xee, "67a783a9fa838124d9bd753eb9dd3cb59888c0eed402e593e6554332f28635854124840e23134f6f66fe40a44e21d525e9fb47349e2aa2fac7ef0a897255ee80f3ec52733668da9145554b386ca6e4949d3f7e66881fe258060f72af5781bb63f3e5052f1459fc584abd8e78665afba05fe6dde8e579be8ffa2e129e3f7d4c615b9e430e9fe2c800240acfc67d67b1cae3c0df97cf4da3eb4b7261b87d16a86481fd460845be0e4ec777244b3b165dcccc8f5f92eba1b543aa22e9db274a2c0afa72c0df71dbcd3eea45b5fb1f440c2a85a313acb6de73e141242feef7e11c30bbf9beea402e3b3481ec4e78e04c"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000300)={0xc0, 0xa1, 0x4}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "1e85b5656776e0d13494ccf224e9291d1250dde613c020608ff431390e13426b28656ecf4c3b5e72faf51874c2602f"}})
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

ibutes in process `syz.3.3721'.
[ 1169.613115][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1169.727766][T20069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1169.738145][T20069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1169.798910][T20069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1169.811691][T20069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1169.896399][T20063] fuse: Unknown parameter '000000000000000000000030000000000000000000000000000000000000000'
[ 1169.912598][   T43] usb 6-1: config 0 descriptor??
[ 1170.194341][T20060] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[ 1170.201269][T20060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1170.210973][T20060] vhci_hcd vhci_hcd.0: Device attached
[ 1170.225865][T20060] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12)
[ 1170.232479][T20060] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1170.247198][T20060] vhci_hcd vhci_hcd.0: Device attached
[ 1170.312978][T20060] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14)
[ 1170.319611][T20060] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1170.335235][T20060] vhci_hcd vhci_hcd.0: Device attached
[ 1170.335238][T20070] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17)
[ 1170.347311][T20070] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1170.359919][T20070] vhci_hcd vhci_hcd.0: Device attached
[ 1170.370841][T20060] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(16)
[ 1170.377459][T20060] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1170.468713][T20060] vhci_hcd vhci_hcd.0: Device attached
[ 1170.491477][T20070] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(21)
[ 1170.498110][T20070] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1170.521585][T20070] vhci_hcd vhci_hcd.0: Device attached
[ 1170.528389][   T43] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[ 1170.543507][T20060] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1170.631670][T20060] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(23)
[ 1170.638298][T20060] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1170.660013][T20060] vhci_hcd vhci_hcd.0: Device attached
[ 1170.660013][T20070] vhci_hcd vhci_hcd.0: port 0 already used
[ 1170.750687][T20091] vhci_hcd: connection closed
[ 1170.754101][T20088] vhci_hcd: connection closed
[ 1170.759531][ T1016] vhci_hcd: stop threads
[ 1170.766626][T20078] vhci_hcd: connection closed
[ 1170.769319][T20081] vhci_hcd: connection closed
[ 1170.774174][T20075] vhci_hcd: connection closed
[ 1170.774182][T20084] vhci_hcd: connection closed
[ 1170.786565][T20073] vhci_hcd: connection reset by peer
[ 1170.788602][ T1016] vhci_hcd: release socket
[ 1170.809778][ T1016] vhci_hcd: disconnect device
[ 1170.814992][ T1016] vhci_hcd: stop threads
[ 1170.822273][ T1016] vhci_hcd: release socket
[ 1170.828446][ T1016] vhci_hcd: disconnect device
[ 1170.838396][ T1016] vhci_hcd: stop threads
[ 1170.842906][ T1016] vhci_hcd: release socket
[ 1170.848867][ T1016] vhci_hcd: disconnect device
[ 1170.853815][ T1016] vhci_hcd: stop threads
[ 1170.859132][ T1016] vhci_hcd: release socket
[ 1170.864619][ T1016] vhci_hcd: disconnect device
[ 1170.870719][ T1016] vhci_hcd: stop threads
[ 1170.876587][ T1016] vhci_hcd: release socket
[ 1170.883689][ T1016] vhci_hcd: disconnect device
[ 1170.890028][ T1016] vhci_hcd: stop threads
[ 1170.894610][ T1016] vhci_hcd: release socket
[ 1170.900095][ T1016] vhci_hcd: disconnect device
[ 1170.905702][ T1016] vhci_hcd: stop threads
[ 1170.911144][ T1016] vhci_hcd: release socket
[ 1170.918308][ T1016] vhci_hcd: disconnect device
[ 1171.448789][  T982] usb 3-1: USB disconnect, device number 47
[ 1171.726551][  T982] usb 6-1: USB disconnect, device number 110
[ 1171.973601][  T979] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1172.077108][ T5985] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1172.136515][T20112] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3727'.
[ 1172.150404][  T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1172.161171][  T979] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1172.170527][  T979] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1172.195878][  T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1172.294840][  T979] usb 4-1: config 0 descriptor??
[ 1172.370380][T20112] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3727'.
[ 1172.390063][ T5985] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1172.401719][ T5985] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1172.417094][   T30] audit: type=1800 audit(1758667867.614:928): pid=20113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3727" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[ 1172.448046][ T5985] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[ 1172.460504][ T5985] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1172.550736][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1172.631688][ T5985] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1172.770067][ T9888] udevd[9888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1172.792391][ T5985] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -12
[ 1172.929106][T20115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1172.939305][T20115] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1173.137349][ T5985] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1173.282251][ T5985] usb 6-1: device descriptor read/64, error -71
[ 1173.336966][    T9] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[ 1173.506918][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1173.519481][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1173.527630][ T5985] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 1173.539562][    T9] usb 2-1: Product: syz
[ 1173.544074][    T9] usb 2-1: Manufacturer: syz
[ 1173.549353][    T9] usb 2-1: SerialNumber: syz
[ 1173.572256][    T9] usb 2-1: config 0 descriptor??
[ 1173.656987][ T5985] usb 6-1: device descriptor read/64, error -71
[ 1173.767841][ T5985] usb usb6-port1: attempt power cycle
[ 1173.782986][    T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1174.107040][ T5985] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 1174.127765][ T5985] usb 6-1: device descriptor read/8, error -71
[ 1174.367097][ T5985] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 1174.398327][ T5985] usb 6-1: device descriptor read/8, error -71
[ 1174.439732][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3731'.
[ 1174.518314][ T5985] usb usb6-port1: unable to enumerate USB device
[ 1174.884913][T20130] fuse: Unknown parameter 'use00000000000000000000'
[ 1174.989129][  T979] usb 4-1: USB disconnect, device number 124
[ 1174.994228][    C0] raw-gadget.4 gadget.1: ignoring, device is not running
[ 1175.002945][    C0] raw-gadget.4 gadget.1: ignoring, device is not running
[ 1175.027150][    T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1175.055467][    T9] usb 2-1: USB disconnect, device number 6
[ 1175.066278][T20133] binder: 20132:20133 ioctl c0306201 200000000540 returned -22
[ 1175.300747][T15651] usb 3-1: USB disconnect, device number 48
[ 1175.392535][   T30] audit: type=1326 audit(1758667870.644:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20136 comm="syz.2.3735" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a6898eec9 code=0x0
[ 1175.397435][  T979] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1175.446510][T20140] binder: 20134:20140 ioctl 4018620d 0 returned -22
[ 1175.577091][  T979] usb 4-1: Using ep0 maxpacket: 32
[ 1175.585178][  T979] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1175.594692][  T979] usb 4-1: config 244 has an invalid interface number: 68 but max is 0
[ 1175.603660][  T979] usb 4-1: config 244 has no interface number 0
[ 1175.610235][  T979] usb 4-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[ 1175.623307][  T979] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[ 1175.634516][  T979] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[ 1175.646301][  T979] usb 4-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0
[ 1175.656728][  T979] usb 4-1: config 244 interface 68 has no altsetting 0
[ 1175.666436][  T979] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[ 1175.676673][   T43] vhci_hcd: vhci_device speed not set
[ 1175.683496][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1175.692150][  T979] usb 4-1: Product: syz
[ 1175.703502][  T979] usb 4-1: Manufacturer: syz
[ 1175.715215][  T979] usb 4-1: SerialNumber: syz
[ 1176.171997][T20154] binder: 20132:20154 ioctl c0306201 200000000640 returned -22
[ 1176.407710][T20156] binder: 20132:20156 ioctl 2276 200000000240 returned -22
[ 1177.248240][  T979] comedi comedi5: Endpoint has wrong direction
[ 1177.277060][  T979] dt9812 4-1:244.68: driver 'dt9812' failed to auto-configure device.
[ 1177.326089][  T979] usb 4-1: USB disconnect, device number 125
[ 1177.366823][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.388766][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.806931][  T979] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1177.990732][  T979] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1178.045824][  T979] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1178.066609][  T979] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1178.086540][  T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1178.105180][  T979] usb 4-1: config 0 descriptor??
[ 1178.127484][T20172] netlink: 'syz.5.3742': attribute type 12 has an invalid length.
[ 1178.317099][   T43] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[ 1178.487988][   T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1178.502998][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.513404][T20189] fuse: Unknown parameter 'use00000000000000000000'
[ 1178.523428][   T43] usb 3-1: Product: syz
[ 1178.527996][   T43] usb 3-1: Manufacturer: syz
[ 1178.532839][   T43] usb 3-1: SerialNumber: syz
[ 1178.544010][   T43] usb 3-1: config 0 descriptor??
[ 1178.754982][   T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1179.087126][ T5985] usb 6-1: new full-speed USB device number 115 using dummy_hcd
[ 1179.241419][ T5985] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1179.250820][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.258989][ T5985] usb 6-1: Product: syz
[ 1179.263249][ T5985] usb 6-1: Manufacturer: syz
[ 1179.268033][ T5985] usb 6-1: SerialNumber: syz
[ 1179.275686][ T5985] usb 6-1: config 0 descriptor??
[ 1179.405253][T20199] netlink: 'syz.1.3750': attribute type 5 has an invalid length.
[ 1179.485407][ T5985] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1179.707034][ T5975] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1179.860737][ T5975] usb 2-1: Using ep0 maxpacket: 16
[ 1179.868235][ T5975] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[ 1179.876359][ T5975] usb 2-1: config 0 has no interface number 0
[ 1179.883075][ T5975] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1179.893015][ T5975] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1179.903016][ T5975] usb 2-1: config 0 interface 41 has no altsetting 0
[ 1179.912416][ T5975] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 1179.921795][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1179.929992][ T5975] usb 2-1: Product: syz
[ 1179.934199][ T5975] usb 2-1: Manufacturer: syz
[ 1179.938931][ T5975] usb 2-1: SerialNumber: syz
[ 1179.946745][ T5975] usb 2-1: config 0 descriptor??
[ 1179.952727][T20201] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1179.960529][T20201] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1179.979260][   T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1179.997150][   T43] usb 3-1: USB disconnect, device number 49
[ 1180.173056][T20201] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1180.180487][T20201] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1180.701695][ T5985] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1180.770835][ T5985] usb 6-1: USB disconnect, device number 115
[ 1180.904574][   T43] usb 4-1: USB disconnect, device number 126
[ 1181.156730][ T5975] dm9601 2-1:0.41 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 1181.209052][T20217] fuse: Unknown parameter '00000000000000000005^þ´Ø‘î-¨J`çâ4©ÝþZ±ŒÁ~ÞÒ$?ZRõ4Ü£T-2ögîˆýoÊTäã	.ú©”›'
[ 1181.504062][ T5975] dm9601 2-1:0.41 eth13: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, ae:d2:e1:a3:12:0f
[ 1181.525771][ T5975] usb 2-1: USB disconnect, device number 7
[ 1181.539656][ T5975] dm9601 2-1:0.41 eth13: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet
[ 1182.437081][    T9] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1182.532463][T20223] block nbd0: Attempted send on invalid socket
[ 1182.560610][T20223] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1182.604254][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1182.615990][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.663028][    T9] usb 4-1: Product: syz
[ 1182.692064][    T9] usb 4-1: Manufacturer: syz
[ 1182.716545][    T9] usb 4-1: SerialNumber: syz
[ 1183.993902][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO
[ 1184.014135][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1184.029553][    T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1184.040555][    T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[ 1184.062807][    T9] usb 4-1: USB disconnect, device number 127
[ 1184.087605][ T5985] usb 2-1: new low-speed USB device number 8 using dummy_hcd
[ 1184.097296][   T43] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 1184.196945][ T5975] usb 3-1: new full-speed USB device number 50 using dummy_hcd
[ 1184.262099][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1184.274546][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1184.274631][ T5985] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1184.285701][   T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1184.305874][   T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1184.316038][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.321117][ T5985] usb 2-1: config 0 has no interface number 0
[ 1184.328239][   T43] usb 6-1: config 0 descriptor??
[ 1184.336960][ T5975] usb 3-1: device descriptor read/64, error -71
[ 1184.362228][ T5985] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1184.379055][ T5985] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1184.400729][ T5985] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1184.412656][ T5985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.430601][ T5985] usb 2-1: config 0 descriptor??
[ 1184.445658][T20249] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1184.465271][ T5985] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1184.577059][ T5975] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[ 1184.677327][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1184.686430][  T979] usb 2-1: USB disconnect, device number 8
[ 1184.712985][ T5975] usb 3-1: device descriptor read/64, error -71
[ 1184.757704][   T43] plantronics 0003:047F:FFFF.0031: reserved main item tag 0xd
[ 1184.807535][   T43] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1184.847622][ T5975] usb usb3-port1: attempt power cycle
[ 1185.063012][T20250] IPVS: set_ctl: invalid protocol: 103 172.30.1.6:20004
[ 1185.073931][ T5985] usb 6-1: USB disconnect, device number 116
[ 1185.187104][ T5975] usb 3-1: new full-speed USB device number 52 using dummy_hcd
[ 1185.207708][ T5975] usb 3-1: device descriptor read/8, error -71
[ 1185.254667][T20256] netlink: 'syz.3.3767': attribute type 12 has an invalid length.
[ 1185.477009][ T5975] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[ 1185.507635][ T5975] usb 3-1: device descriptor read/8, error -71
[ 1185.617407][ T5975] usb usb3-port1: unable to enumerate USB device
[ 1185.647212][ T5985] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[ 1185.819187][ T5985] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1185.828375][ T5985] usb 4-1: not running at top speed; connect to a high speed hub
[ 1185.838230][ T5985] usb 4-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config
[ 1185.850980][ T5985] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1185.863790][ T5985] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1185.873182][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1185.881297][ T5985] usb 4-1: Product: syz
[ 1185.885488][ T5985] usb 4-1: Manufacturer: syz
[ 1185.890167][ T5985] usb 4-1: SerialNumber: syz
[ 1186.552760][ T5985] usb 4-1: 0:2 : does not exist
[ 1186.577339][T20274] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3771'.
[ 1186.612930][ T5985] usb 4-1: USB disconnect, device number 2
[ 1186.676587][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1187.156972][ T5975] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 1187.337488][ T5975] usb 6-1: Using ep0 maxpacket: 8
[ 1187.360195][ T5975] usb 6-1: config 162 has an invalid interface number: 46 but max is 1
[ 1187.377252][ T5975] usb 6-1: config 162 has no interface number 0
[ 1187.394324][ T5975] usb 6-1: config 162 interface 1 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1187.542871][ T5975] usb 6-1: config 162 interface 46 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 1187.635171][ T5975] usb 6-1: config 162 interface 46 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1187.681418][   T43] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1187.726391][ T5975] usb 6-1: config 162 interface 46 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[ 1187.750435][ T5975] usb 6-1: config 162 interface 46 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[ 1187.771044][ T5975] usb 6-1: config 162 interface 46 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[ 1187.816962][T19753] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[ 1187.827147][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1187.842535][ T5975] usb 6-1: config 162 interface 1 has no altsetting 0
[ 1187.859042][   T43] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1187.868524][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1187.885199][ T5975] usb 6-1: config 162 interface 46 has no altsetting 0
[ 1187.973389][   T43] usb 3-1: config 0 descriptor??
[ 1187.994260][ T5975] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a89, bcdDevice=26.be
[ 1188.016042][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1188.031317][ T5975] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3
[ 1188.042260][T19753] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1188.056980][T19753] usb 4-1: config 0 has no interface number 0
[ 1188.063381][ T5975] usb 6-1: Product: syz
[ 1188.068411][T19753] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1188.079655][    T9] usb 2-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30
[ 1188.087027][ T5975] usb 6-1: Manufacturer: syz
[ 1188.096926][ T5975] usb 6-1: SerialNumber: syz
[ 1188.118708][T19753] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1188.129569][    T9] usb 2-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1188.129601][    T9] usb 2-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1188.129621][    T9] usb 2-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33
[ 1188.129643][    T9] usb 2-1: config 64 interface 0 has no altsetting 0
[ 1188.129675][    T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00
[ 1188.244013][T19753] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1188.271123][T19753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1188.315112][T19753] usb 4-1: config 0 descriptor??
[ 1188.340293][T20294] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1188.374775][T19753] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1188.401833][ T5975] ipaq 6-1:162.46: PocketPC PDA converter detected
[ 1188.410869][ T5975] usb 6-1: active config #162 != 1 ??
[ 1188.444292][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1188.469688][ T5975] usb 6-1: USB disconnect, device number 117
[ 1188.594652][T15651] usb 4-1: USB disconnect, device number 3
[ 1188.600774][    C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1189.038268][T20298] netlink: 'syz.7.3778': attribute type 12 has an invalid length.
[ 1189.055906][    T9] hid-rmi 0003:17EF:6085.0032: unknown main item tag 0x0
[ 1189.065588][    T9] hid-rmi 0003:17EF:6085.0032: unknown main item tag 0x0
[ 1189.073277][    T9] hid-rmi 0003:17EF:6085.0032: unknown main item tag 0x0
[ 1189.083320][    T9] hid-rmi 0003:17EF:6085.0032: unknown main item tag 0x0
[ 1189.102592][    T9] hid-rmi 0003:17EF:6085.0032: unknown main item tag 0x0
[ 1189.168927][    T9] hid-rmi 0003:17EF:6085.0032: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.1-1/input0
[ 1189.606319][T20291] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1189.632467][ T5985] usb 6-1: new low-speed USB device number 118 using dummy_hcd
[ 1189.799719][ T5985] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1189.817869][ T5985] usb 6-1: config 0 has no interface number 0
[ 1189.874144][ T5985] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1189.900276][ T5985] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1190.012215][ T5985] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1190.034590][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1190.061795][ T5985] usb 6-1: config 0 descriptor??
[ 1190.082215][T20308] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1190.104232][ T5985] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1190.308732][    C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1190.318092][T15651] usb 6-1: USB disconnect, device number 118
[ 1190.818332][T20318] block nbd0: Attempted send on invalid socket
[ 1190.818387][T20318] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1191.090995][ T5975] usb 3-1: USB disconnect, device number 54
[ 1191.154260][    T9] usb 2-1: USB disconnect, device number 9
[ 1191.694230][T20324] binder: 20319:20324 ioctl 4018620d 0 returned -22
[ 1192.057088][    T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[ 1192.221761][    T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1192.241182][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1192.263440][    T9] usb 4-1: Product: syz
[ 1192.311225][    T9] usb 4-1: Manufacturer: syz
[ 1192.326996][    T9] usb 4-1: SerialNumber: syz
[ 1192.350602][    T9] usb 4-1: config 0 descriptor??
[ 1192.582147][    T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1193.121779][T20344] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1193.307550][  T979] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1193.387971][ T5975] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 1193.437245][  T979] usb 2-1: device descriptor read/64, error -71
[ 1193.548994][ T5975] usb 6-1: Using ep0 maxpacket: 16
[ 1193.555713][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1193.569632][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1193.579706][ T5975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1193.592819][ T5975] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1193.602385][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1193.618229][ T5975] usb 6-1: config 0 descriptor??
[ 1193.677180][  T979] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1193.807037][  T979] usb 2-1: device descriptor read/64, error -71
[ 1193.839825][    T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1193.852708][    T9] usb 4-1: USB disconnect, device number 4
[ 1193.927698][  T979] usb usb2-port1: attempt power cycle
[ 1194.038088][ T5975] shield 0003:0955:7214.0033: unknown main item tag 0x0
[ 1194.047804][ T5975] shield 0003:0955:7214.0033: unknown main item tag 0x0
[ 1194.054805][ T5975] shield 0003:0955:7214.0033: unknown main item tag 0x0
[ 1194.062745][ T5975] shield 0003:0955:7214.0033: unknown main item tag 0x0
[ 1194.070050][ T5975] shield 0003:0955:7214.0033: unknown main item tag 0x0
[ 1194.082296][ T5975] input: HID 0955:7214 Haptics as /devices/virtual/input/input219
[ 1194.125996][ T5975] shield 0003:0955:7214.0033: Registered Thunderstrike controller
[ 1194.134677][ T5975] shield 0003:0955:7214.0033: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0
[ 1194.259382][T20344] random: crng reseeded on system resumption
[ 1194.267042][  T979] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1194.281749][T15651] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1194.281926][    T9] usb 6-1: USB disconnect, device number 119
[ 1194.312465][  T979] usb 2-1: device descriptor read/8, error -71
[ 1194.320723][T15651] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1194.335682][T15651] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1194.347529][T15651] shield 0003:0955:7214.0033: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1194.566986][  T979] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1194.587519][  T979] usb 2-1: device descriptor read/8, error -71
[ 1194.676967][T15651] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1194.697510][  T979] usb usb2-port1: unable to enumerate USB device
[ 1194.837015][T15651] usb 4-1: Using ep0 maxpacket: 8
[ 1194.843735][T15651] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1194.855442][T15651] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x11, changing to 0x1
[ 1194.870601][T15651] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64
[ 1194.886101][T15651] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1194.895601][T15651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1194.903994][T15651] usb 4-1: Product: syz
[ 1194.908628][T15651] usb 4-1: Manufacturer: syz
[ 1194.913239][T15651] usb 4-1: SerialNumber: syz
[ 1194.922232][T20359] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1195.387060][    T9] usb 3-1: new low-speed USB device number 55 using dummy_hcd
[ 1195.591744][    T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1195.599883][    T9] usb 3-1: config 0 has no interface number 0
[ 1195.606248][    T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1195.623742][    T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1195.649704][    T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1195.662092][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1195.679390][    T9] usb 3-1: config 0 descriptor??
[ 1195.708031][T20366] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1195.774082][T18269] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[ 1195.783908][T18269] Bluetooth: hci4: Injecting HCI hardware error event
[ 1195.793887][ T7561] Bluetooth: hci4: hardware error 0x00
[ 1195.831706][    T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1195.949782][    T9] usb 3-1: USB disconnect, device number 55
[ 1195.955850][    C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1196.007534][T15651] cdc_ncm 4-1:1.0: bind() failure
[ 1196.022657][T15651] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[ 1196.037348][T15651] usb 4-1: USB disconnect, device number 5
[ 1197.277141][ T5985] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1197.310531][T20382] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3803'.
[ 1197.340718][T20385] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1197.429153][ T5985] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1197.439676][ T5985] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1197.454987][ T5985] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1197.464999][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1197.676323][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1197.837812][ T7561] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[ 1197.875932][ T5985] usb 4-1: Product: syz
[ 1197.896901][ T5985] usb 4-1: Manufacturer: syz
[ 1197.901608][ T5985] usb 4-1: SerialNumber: syz
[ 1198.037017][    T9] usb 2-1: Using ep0 maxpacket: 16
[ 1198.044148][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1198.095595][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1198.115087][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1198.134118][    T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1198.147154][ T5935] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 1198.177160][ T5985] usb 4-1: USB disconnect, device number 6
[ 1198.205267][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1198.230733][    T9] usb 2-1: config 0 descriptor??
[ 1198.307008][ T5935] usb 6-1: Using ep0 maxpacket: 16
[ 1198.640445][T20401] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3808'.
[ 1198.655223][T20401] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3808'.
[ 1198.675395][   T30] audit: type=1800 audit(1758667893.924:930): pid=20401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3808" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1198.793199][    T9] shield 0003:0955:7214.0034: unknown main item tag 0x0
[ 1198.840751][    T9] shield 0003:0955:7214.0034: unknown main item tag 0x0
[ 1198.868836][    T9] shield 0003:0955:7214.0034: unknown main item tag 0x0
[ 1198.886023][    T9] shield 0003:0955:7214.0034: unknown main item tag 0x0
[ 1198.900750][    T9] shield 0003:0955:7214.0034: unknown main item tag 0x0
[ 1198.918330][T20385] random: crng reseeded on system resumption
[ 1198.965131][    T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input220
[ 1199.175211][    T9] shield 0003:0955:7214.0034: Registered Thunderstrike controller
[ 1199.194789][    T9] shield 0003:0955:7214.0034: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[ 1199.270407][ T5985] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1199.321726][ T5985] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1199.345324][    T9] usb 2-1: USB disconnect, device number 14
[ 1199.405842][ T5985] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1199.417724][T13164] thermal thermal_zone0: Temperature check failed (-19)
[ 1199.440026][ T5985] shield 0003:0955:7214.0034: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1199.937057][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1200.099492][    T9] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1200.123958][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.179131][    T9] usb 2-1: config 0 descriptor??
[ 1200.538400][ T5935] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1200.559148][ T5935] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1200.566827][ T5935] usb 6-1: can't read configurations, error -71
[ 1200.584082][T20421] fuse: Bad value for 'fd'
[ 1200.627001][T15651] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 1200.797137][T15651] usb 3-1: Using ep0 maxpacket: 32
[ 1200.807264][T15651] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 1200.834534][T15651] usb 3-1: config 0 has no interface number 0
[ 1200.841106][T15651] usb 3-1: config 0 interface 12 has no altsetting 0
[ 1200.853331][T15651] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1200.870362][T15651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1200.879229][T15651] usb 3-1: Product: syz
[ 1200.883429][T15651] usb 3-1: Manufacturer: syz
[ 1200.888589][T15651] usb 3-1: SerialNumber: syz
[ 1200.901055][T15651] usb 3-1: config 0 descriptor??
[ 1200.917264][ T5935] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 1201.079105][ T5935] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1201.094397][ T5935] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1201.113207][ T5935] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1201.134589][ T5935] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1201.155020][ T5935] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1201.181580][ T5935] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1201.211646][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1201.225341][ T5935] usb 6-1: Product: syz
[ 1201.232129][ T5935] usb 6-1: Manufacturer: syz
[ 1201.254788][ T5935] cdc_wdm 6-1:1.0: skipping garbage
[ 1201.264755][ T5935] cdc_wdm 6-1:1.0: skipping garbage
[ 1201.351065][T20416] syz_tun: entered allmulticast mode
[ 1201.355269][ T5935] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1201.372922][ T5935] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1202.155058][T20415] syz_tun: left allmulticast mode
[ 1202.170556][T15651] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1202.187637][T15651] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[ 1202.209091][T15651] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1202.217954][T15651] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[ 1202.275657][T15651] usb 3-1: USB disconnect, device number 56
[ 1202.967267][T15651] usb 2-1: USB disconnect, device number 15
[ 1203.203655][T20457] block nbd0: Attempted send on invalid socket
[ 1203.210023][T20457] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1203.909484][T15651] usb 6-1: USB disconnect, device number 121
[ 1204.842300][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3828'.
[ 1205.038984][ T7561] Bluetooth: hci0: command 0x0406 tx timeout
[ 1205.096700][T20484] fuse: Bad value for 'fd'
[ 1205.267133][T15651] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[ 1205.286999][ T5975] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[ 1205.347001][    T9] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 1205.434077][T15651] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1205.444248][T15651] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[ 1205.455199][ T5975] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[ 1205.467901][ T5975] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1205.480900][ T5975] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1205.491652][T15651] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1205.499239][    T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1205.501451][T15651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.522341][T15651] usb 3-1: Product: syz
[ 1205.526685][    T9] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1205.528238][T15651] usb 3-1: Manufacturer: syz
[ 1205.541978][ T5975] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1205.551349][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1205.559439][ T5975] usb 2-1: Product: syz
[ 1205.564484][T15651] usb 3-1: SerialNumber: syz
[ 1205.569233][ T5975] usb 2-1: Manufacturer: syz
[ 1205.569408][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1205.575078][ T5975] usb 2-1: SerialNumber: syz
[ 1205.770839][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1205.782163][    T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1205.803720][    T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1205.882129][    T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1205.896797][    T9] usb 6-1: Product: syz
[ 1205.902431][    T9] usb 6-1: Manufacturer: syz
[ 1205.913799][    T9] cdc_wdm 6-1:1.0: skipping garbage
[ 1205.925440][    T9] cdc_wdm 6-1:1.0: skipping garbage
[ 1205.932869][    T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1205.938931][    T9] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1205.977884][T20480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1205.995812][T20480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1206.035184][T15651] usb 3-1: USB disconnect, device number 57
[ 1206.096021][ T5975] usb 2-1: USB disconnect, device number 16
[ 1206.137723][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1206.837145][    T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1206.917162][T15651] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1206.998557][    T9] usb 2-1: Using ep0 maxpacket: 32
[ 1207.006230][    T9] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 1207.014620][    T9] usb 2-1: config 0 has no interface number 0
[ 1207.022117][    T9] usb 2-1: config 0 interface 12 has no altsetting 0
[ 1207.038998][    T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1207.048459][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.056502][    T9] usb 2-1: Product: syz
[ 1207.057062][T15651] usb 3-1: device descriptor read/64, error -71
[ 1207.061365][    T9] usb 2-1: Manufacturer: syz
[ 1207.076293][    T9] usb 2-1: SerialNumber: syz
[ 1207.087990][    T9] usb 2-1: config 0 descriptor??
[ 1207.132633][T20500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3839'.
[ 1207.307027][T15651] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1207.437336][T15651] usb 3-1: device descriptor read/64, error -71
[ 1207.496947][ T5985] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1207.517827][T20496] syz_tun: entered allmulticast mode
[ 1207.547648][T15651] usb usb3-port1: attempt power cycle
[ 1207.646969][ T5985] usb 4-1: Using ep0 maxpacket: 16
[ 1207.653855][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1207.665162][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1207.675406][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1207.688525][ T5985] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1207.697786][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.721724][ T5985] usb 4-1: config 0 descriptor??
[ 1207.887947][T15651] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1207.908911][T15651] usb 3-1: device descriptor read/8, error -71
[ 1208.115325][ T5975] usb 6-1: USB disconnect, device number 122
[ 1208.147318][T15651] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1208.151012][ T5985] shield 0003:0955:7214.0035: unknown main item tag 0x0
[ 1208.170063][ T5985] shield 0003:0955:7214.0035: unknown main item tag 0x0
[ 1208.183656][ T5985] shield 0003:0955:7214.0035: unknown main item tag 0x0
[ 1208.192323][T15651] usb 3-1: device descriptor read/8, error -71
[ 1208.192579][ T5985] shield 0003:0955:7214.0035: unknown main item tag 0x0
[ 1208.210220][ T5985] shield 0003:0955:7214.0035: unknown main item tag 0x0
[ 1208.220979][ T5985] input: HID 0955:7214 Haptics as /devices/virtual/input/input222
[ 1208.254509][ T5985] shield 0003:0955:7214.0035: Registered Thunderstrike controller
[ 1208.263896][ T5985] shield 0003:0955:7214.0035: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0
[ 1208.308115][T15651] usb usb3-port1: unable to enumerate USB device
[ 1208.334057][T20502] random: crng reseeded on system resumption
[ 1208.341566][T20495] syz_tun: left allmulticast mode
[ 1208.357290][T13164] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1208.373077][ T5985] usb 4-1: USB disconnect, device number 7
[ 1208.389430][T13164] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1208.402386][T13164] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1208.416745][    T9] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[ 1208.427205][    T9] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[ 1208.436608][    T9] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1208.444577][T13164] shield 0003:0955:7214.0035: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1208.461308][    T9] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[ 1208.490914][    T9] usb 2-1: USB disconnect, device number 17
[ 1208.509985][ T5975] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 1208.666971][ T5975] usb 6-1: Using ep0 maxpacket: 8
[ 1208.672756][ T5975] usb 6-1: too many configurations: 255, using maximum allowed: 8
[ 1208.683434][ T5975] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1208.691462][ T5975] usb 6-1: can't read configurations, error -61
[ 1208.826987][ T5975] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1208.987023][ T5975] usb 6-1: Using ep0 maxpacket: 8
[ 1208.992900][ T5975] usb 6-1: too many configurations: 255, using maximum allowed: 8
[ 1209.124208][ T5975] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1209.132187][ T5975] usb 6-1: can't read configurations, error -61
[ 1209.147721][ T5975] usb usb6-port1: attempt power cycle
[ 1209.496968][ T5975] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1209.517853][ T5975] usb 6-1: Using ep0 maxpacket: 8
[ 1209.523564][ T5975] usb 6-1: too many configurations: 255, using maximum allowed: 8
[ 1209.536633][ T5975] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1209.805006][ T5975] usb 6-1: can't read configurations, error -61
[ 1209.937295][ T5975] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1209.969122][ T5975] usb 6-1: Using ep0 maxpacket: 8
[ 1210.032544][ T5975] usb 6-1: too many configurations: 255, using maximum allowed: 8
[ 1210.062153][ T5975] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1210.083885][ T5975] usb 6-1: can't read configurations, error -61
[ 1210.101373][ T5975] usb usb6-port1: unable to enumerate USB device
[ 1210.357028][T13164] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1210.508567][T13164] usb 3-1: Using ep0 maxpacket: 16
[ 1210.728086][T13164] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[ 1210.781581][T13164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1210.837284][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1210.950836][T13164] usb 3-1: Product: syz
[ 1210.969538][T13164] usb 3-1: Manufacturer: syz
[ 1210.975339][T13164] usb 3-1: SerialNumber: syz
[ 1211.051813][T13164] usb 3-1: config 0 descriptor??
[ 1211.063570][T13164] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[ 1211.287539][T20542] block nbd0: Attempted send on invalid socket
[ 1211.293793][T20542] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1211.461151][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1211.490649][    T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1211.504416][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1211.565431][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1211.588743][    T9] usb 4-1: config 0 descriptor??
[ 1211.682701][T13164] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[ 1211.701396][T20545] fuse: Bad value for 'fd'
[ 1211.733216][T13164] usb 3-1: USB disconnect, device number 62
[ 1211.976996][ T5975] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1212.139585][ T5975] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1212.150558][ T5975] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1212.210080][T20551] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1212.210106][ T5975] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1212.284991][T20553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3855'.
[ 1212.298573][ T5975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1212.318388][ T5975] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1212.333662][ T5975] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1212.345347][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1212.377725][ T5975] usb 6-1: Product: syz
[ 1212.390418][ T5975] usb 6-1: Manufacturer: syz
[ 1212.418080][ T5975] cdc_wdm 6-1:1.0: skipping garbage
[ 1212.423323][ T5975] cdc_wdm 6-1:1.0: skipping garbage
[ 1212.441960][ T5975] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1212.460441][ T5975] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1212.596520][T20558] fuse: Bad value for 'fd'
[ 1212.717089][T13164] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1212.881787][T13164] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[ 1212.892023][T13164] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1212.906788][T13164] usb 3-1: config 0 has no interface number 0
[ 1212.926588][T13164] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1212.940311][T13164] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1212.994544][T13164] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 1213.011872][T13164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1213.022410][T13164] usb 3-1: Product: syz
[ 1213.026788][T13164] usb 3-1: Manufacturer: syz
[ 1213.033240][T13164] usb 3-1: SerialNumber: syz
[ 1213.087826][T13164] usb 3-1: config 0 descriptor??
[ 1213.549506][T13164] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71
[ 1213.582294][ T5975] usb 4-1: USB disconnect, device number 8
[ 1213.669529][T13164] usb 3-1: USB disconnect, device number 63
[ 1214.477282][T15651] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1214.498276][ T5975] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1214.543688][T20587] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3865'.
[ 1214.553869][T20587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3865'.
[ 1214.570420][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'.
[ 1214.647349][T15651] usb 2-1: Using ep0 maxpacket: 32
[ 1214.654557][T15651] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 1214.663319][T15651] usb 2-1: config 0 has no interface number 0
[ 1214.670054][ T5975] usb 3-1: Using ep0 maxpacket: 32
[ 1214.675767][T15651] usb 2-1: config 0 interface 12 has no altsetting 0
[ 1214.687157][ T5975] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 1214.696359][ T5975] usb 3-1: config 0 has no interface number 0
[ 1214.696512][T15651] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1214.712150][ T5975] usb 3-1: config 0 interface 12 has no altsetting 0
[ 1214.728448][ T5975] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1214.743061][T15651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1214.743385][T13164] usb 6-1: USB disconnect, device number 127
[ 1214.751203][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1214.770288][T15651] usb 2-1: Product: syz
[ 1214.774479][T15651] usb 2-1: Manufacturer: syz
[ 1214.784127][T20595] fuse: Bad value for 'fd'
[ 1214.788818][T15651] usb 2-1: SerialNumber: syz
[ 1214.793546][ T5975] usb 3-1: Product: syz
[ 1214.814864][T15651] usb 2-1: config 0 descriptor??
[ 1214.819901][ T5975] usb 3-1: Manufacturer: syz
[ 1214.825193][ T5975] usb 3-1: SerialNumber: syz
[ 1214.840131][ T5975] usb 3-1: config 0 descriptor??
[ 1215.268977][T20577] syz_tun: entered allmulticast mode
[ 1215.316967][   T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1215.506983][    T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd
[ 1215.570160][T20579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1215.580025][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1215.598176][T20579] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1215.622521][ T5975] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1215.649544][   T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1215.687802][ T5975] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[ 1215.695203][ T5975] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1215.704225][   T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1215.733509][    T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 1215.741830][    T9] usb 6-1: config 0 has no interface number 0
[ 1215.750837][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1215.784184][    T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1215.814702][ T5975] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[ 1215.822887][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.837035][    T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1215.861528][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1215.953688][T20576] syz_tun: left allmulticast mode
[ 1215.961838][T15651] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1215.967058][    T9] usb 6-1: config 0 descriptor??
[ 1215.969518][T15651] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[ 1215.989939][   T43] usb 4-1: config 0 descriptor??
[ 1216.018209][ T5975] usb 3-1: USB disconnect, device number 64
[ 1216.045746][T20605] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[ 1216.051480][T15651] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1216.081639][T15651] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[ 1216.087159][    T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1216.141225][T15651] usb 2-1: USB disconnect, device number 18
[ 1216.435181][T20615] block nbd0: Attempted send on invalid socket
[ 1216.441523][T20615] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1216.595577][    C0] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1216.628440][  T982] usb 6-1: USB disconnect, device number 2
[ 1217.037090][    T9] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1217.232041][    T9] usb 3-1: Using ep0 maxpacket: 8
[ 1217.270676][    T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1217.291962][    T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1217.331521][    T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1217.352933][    T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1217.405663][    T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1217.476960][   T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1217.491175][    T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1217.514563][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3877'.
[ 1217.546800][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3877'.
[ 1217.556105][    T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1217.584176][    T9] usb 3-1: config 168 interface 0 has no altsetting 0
[ 1217.598582][    T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1217.626572][    T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1217.658787][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1217.678603][    T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1217.688617][   T43] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1217.699940][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1217.712127][    T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1217.718322][   T43] usb 2-1: config 0 descriptor??
[ 1217.797833][    T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1217.812949][    T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1217.825151][    T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1217.829254][   T43] pwc: Askey VC010 type 2 USB webcam detected.
[ 1217.850516][    T9] usb 3-1: config 168 interface 0 has no altsetting 0
[ 1217.861883][    T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[ 1217.869935][    T9] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[ 1217.891239][    T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1217.914129][    T9] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1218.248687][   T43] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1218.339631][  T982] usb 4-1: USB disconnect, device number 9
[ 1218.348498][   T43] pwc: recv_control_msg error -32 req 02 val 2700
[ 1218.356587][   T43] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1218.364396][   T43] pwc: recv_control_msg error -32 req 04 val 1000
[ 1218.364801][    T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1218.380872][   T43] pwc: recv_control_msg error -32 req 04 val 1300
[ 1218.388804][    T9] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1218.445092][   T43] pwc: recv_control_msg error -32 req 04 val 1400
[ 1218.460965][   T43] pwc: recv_control_msg error -32 req 02 val 2000
[ 1218.484728][   T43] pwc: recv_control_msg error -32 req 02 val 2100
[ 1218.539121][    T9] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[ 1218.581393][   T43] pwc: recv_control_msg error -32 req 04 val 1500
[ 1218.593251][    T9] usb 3-1: config 168 interface 0 has no altsetting 0
[ 1218.619376][    T9] usb 3-1: string descriptor 0 read error: -22
[ 1218.641640][    T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1218.683181][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1218.726404][    T9] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1218.932510][ T5975] usb 3-1: USB disconnect, device number 65
[ 1219.067068][T15651] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1219.140827][T20618] adutux: No device or device unplugged -19
[ 1219.148703][T20618] adutux: No device or device unplugged -19
[ 1219.257031][T15651] usb 6-1: Using ep0 maxpacket: 16
[ 1219.270352][T15651] usb 6-1: config 0 has an invalid interface number: 251 but max is 0
[ 1219.279025][T15651] usb 6-1: config 0 has no interface number 0
[ 1219.285207][T15651] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[ 1219.296033][T15651] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 1219.311830][T15651] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[ 1219.330759][T15651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.339387][T15651] usb 6-1: Product: syz
[ 1219.343599][T15651] usb 6-1: Manufacturer: syz
[ 1219.348950][T15651] usb 6-1: SerialNumber: syz
[ 1219.371601][T15651] usb 6-1: config 0 descriptor??
[ 1219.380998][T20642] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1219.392013][T20642] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22
[ 1219.411402][   T43] pwc: recv_control_msg error -71 req 02 val 2400
[ 1219.427341][   T43] pwc: recv_control_msg error -71 req 02 val 2600
[ 1219.434669][   T43] pwc: recv_control_msg error -71 req 02 val 2900
[ 1219.442812][   T43] pwc: recv_control_msg error -71 req 02 val 2800
[ 1219.454404][   T43] pwc: recv_control_msg error -71 req 04 val 1100
[ 1219.466286][   T43] pwc: recv_control_msg error -71 req 04 val 1200
[ 1219.477103][   T43] pwc: Registered as video103.
[ 1219.485881][   T43] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input224
[ 1219.538023][   T43] usb 2-1: USB disconnect, device number 19
[ 1219.591053][T20652] bridge0: port 3(team0) entered disabled state
[ 1219.625695][T15651] asix 6-1:0.251: probe with driver asix failed with error -71
[ 1219.629502][T20652] bridge_slave_0: left allmulticast mode
[ 1219.647700][ T5975] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[ 1219.650830][T20652] bridge_slave_0: left promiscuous mode
[ 1219.665632][T20652] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1219.665700][T15651] usb 6-1: USB disconnect, device number 3
[ 1219.686706][T20652] bridge_slave_1: left allmulticast mode
[ 1219.699112][T20652] bridge_slave_1: left promiscuous mode
[ 1219.706499][T20652] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1219.728835][T20652] bond0: (slave bond_slave_0): Releasing backup interface
[ 1219.762228][T20652] bond0: (slave bond_slave_1): Releasing backup interface
[ 1219.774942][T20652] team_slave_0: left promiscuous mode
[ 1219.781378][T20652] team_slave_0: left allmulticast mode
[ 1219.808499][T20652] team0: Port device team_slave_0 removed
[ 1219.815474][T20652] team_slave_1: left promiscuous mode
[ 1219.834746][T20652] team_slave_1: left allmulticast mode
[ 1219.859275][ T5975] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1219.863569][T20652] team0: Port device team_slave_1 removed
[ 1219.869916][ T5975] usb 4-1: not running at top speed; connect to a high speed hub
[ 1219.874512][T20652] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1219.883020][ T5975] usb 4-1: config 1 has an invalid descriptor of length 177, skipping remainder of the config
[ 1219.892292][T20652] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1219.904621][ T5975] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1219.921558][ T5975] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1219.931648][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.939955][ T5975] usb 4-1: Product: syz
[ 1219.944209][ T5975] usb 4-1: Manufacturer: syz
[ 1219.949104][ T5975] usb 4-1: SerialNumber: syz
[ 1220.306722][   T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1220.324292][ T5975] usb 4-1: 0:2 : does not exist
[ 1220.376656][ T5975] usb 4-1: USB disconnect, device number 10
[ 1220.480076][   T43] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1220.510820][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1220.528464][   T43] usb 2-1: config 0 descriptor??
[ 1220.587061][T15651] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1220.749984][T15651] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1220.776163][T15651] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1220.789369][T15651] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1220.799140][T15651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1220.810832][T15651] usb 6-1: config 0 descriptor??
[ 1220.868717][T20674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3890'.
[ 1221.054891][T20678] netlink: 'syz.3.3891': attribute type 2 has an invalid length.
[ 1221.366966][ T5985] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[ 1221.539529][ T5985] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1221.571312][ T5985] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1221.604091][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1221.668828][ T5985] usb 4-1: Product: syz
[ 1221.689072][ T5985] usb 4-1: Manufacturer: syz
[ 1221.729249][ T5985] usb 4-1: SerialNumber: syz
[ 1221.766188][ T5985] usb 4-1: config 0 descriptor??
[ 1222.191286][T20695] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[ 1222.197838][T20695] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1222.360223][T20695] vhci_hcd vhci_hcd.0: Device attached
[ 1222.547116][  T982] vhci_hcd: vhci_device speed not set
[ 1222.615423][  T982] usb 37-1: new full-speed USB device number 2 using vhci_hcd
[ 1222.629359][T15651] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1222.959276][T15651] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 1222.971855][T15651] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1223.001552][T15651] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[ 1223.029137][T15651] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 1223.047413][T15651] usb 3-1: Manufacturer: syz
[ 1223.072817][T15651] usb 3-1: config 0 descriptor??
[ 1223.296156][ T5985] usb 6-1: USB disconnect, device number 4
[ 1223.345372][    T9] usb 2-1: USB disconnect, device number 20
[ 1223.390168][T20695] tipc: Started in network mode
[ 1223.395070][T20695] tipc: Node identity 00000000000000000000ffff640101, cluster identity 4711
[ 1223.423990][T20695] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1223.457047][T15651] rc_core: IR keymap rc-hauppauge not found
[ 1223.480498][T20697] vhci_hcd: connection reset by peer
[ 1223.486965][T15651] Registered IR keymap rc-empty
[ 1223.524791][   T59] vhci_hcd: stop threads
[ 1223.555758][T15651] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1223.566419][   T59] vhci_hcd: release socket
[ 1223.608554][   T59] vhci_hcd: disconnect device
[ 1223.620667][T15651] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input226
[ 1223.634661][T20713] fuse: Unknown parameter 'mGN‡8o«ad'
[ 1223.670649][T15651] usb 3-1: USB disconnect, device number 66
[ 1223.814074][   T43] IPVS: starting estimator thread 0...
[ 1223.880013][    T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1223.917655][T20716] IPVS: using max 34 ests per chain, 81600 per kthread
[ 1224.056988][    T9] usb 2-1: Using ep0 maxpacket: 8
[ 1224.064197][    T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[ 1224.081460][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1224.142169][    T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1224.172343][    T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1224.218038][T15651] usb 4-1: USB disconnect, device number 11
[ 1224.241770][    T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1224.242472][T20719] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3899'.
[ 1224.272645][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1224.430309][T20722] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3900'.
[ 1224.449811][T20723] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3901'.
[ 1224.531448][    T9] usb 2-1: GET_CAPABILITIES returned 0
[ 1224.572976][    T9] usbtmc 2-1:16.0: can't read capabilities
[ 1224.745349][    T9] usb 2-1: USB disconnect, device number 21
[ 1224.775098][T20733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3904'.
[ 1224.836157][T20738] netlink: 'syz.2.3903': attribute type 12 has an invalid length.
[ 1225.111524][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3904'.
[ 1225.424480][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3906'.
[ 1225.858137][T15651] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1226.096945][T15651] usb 4-1: Using ep0 maxpacket: 16
[ 1226.358800][    T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1226.547163][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1226.560632][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1226.589857][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1226.601445][T20758] fuse: Unknown parameter '0x0000000000000006'
[ 1226.741306][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1226.768493][    T9] usb 2-1: config 0 descriptor??
[ 1227.637098][T20769] block nbd0: Attempted send on invalid socket
[ 1227.643630][T20769] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[ 1227.770972][  T982] vhci_hcd: vhci_device speed not set
[ 1228.417043][   T43] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[ 1228.572029][   T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1228.585640][   T43] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1228.606043][   T43] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1228.632089][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1228.655890][   T43] usb 6-1: config 0 descriptor??
[ 1228.668120][   T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1228.681168][   T43] dvb-usb: bulk message failed: -22 (3/0)
[ 1228.708728][   T43] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1228.719611][   T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1228.728358][   T43] usb 6-1: media controller created
[ 1228.744073][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1228.876447][T20763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1228.890431][   T43] dvb-usb: bulk message failed: -22 (6/0)
[ 1228.917366][T20763] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1228.930867][   T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1228.966290][   T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input227
[ 1229.029324][   T43] dvb-usb: schedule remote query interval to 150 msecs.
[ 1229.036357][   T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1229.082944][   T43] usb 6-1: USB disconnect, device number 5
[ 1229.134135][  T982] usb 2-1: USB disconnect, device number 22
[ 1229.232831][   T43] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1229.260883][T15651] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1229.269802][T15651] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1229.287574][T15651] usb 4-1: can't read configurations, error -71
[ 1230.432544][T20797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3920'.
[ 1230.617446][T20805] netlink: 'syz.2.3919': attribute type 12 has an invalid length.
[ 1230.776947][T15651] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1230.984305][T15651] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1230.998701][T15651] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1231.008193][T15651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1231.016176][T15651] usb 2-1: Product: syz
[ 1231.030910][T15651] usb 2-1: Manufacturer: syz
[ 1231.036498][T15651] usb 2-1: SerialNumber: syz
[ 1231.067825][T15651] usb 2-1: config 0 descriptor??
[ 1231.074753][T15651] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected
[ 1231.090456][T15651] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[ 1231.126943][T15651] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[ 1231.180814][T20813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3923'.
[ 1231.216162][   T30] audit: type=1800 audit(1758667926.464:931): pid=20813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3923" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[ 1231.312631][T15651] usb 2-1: USB disconnect, device number 23
[ 1231.321032][T15651] garmin_gps 2-1:0.0: device disconnected
[ 1231.587198][  T979] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1231.717109][  T979] usb 4-1: device descriptor read/64, error -71
[ 1231.787148][T15651] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1231.953608][T15651] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1231.964572][T15651] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1231.973670][T15651] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1231.983166][  T979] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1231.992140][T15651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1232.003667][T15651] usb 3-1: config 0 descriptor??
[ 1232.127210][  T979] usb 4-1: device descriptor read/64, error -71
[ 1232.243927][  T979] usb usb4-port1: attempt power cycle
[ 1232.606946][  T979] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1232.637578][  T979] usb 4-1: device descriptor read/8, error -71
[ 1232.887084][  T979] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1232.929265][  T979] usb 4-1: device descriptor read/8, error -71
[ 1233.059133][  T979] usb usb4-port1: unable to enumerate USB device
[ 1233.537054][  T982] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1233.686948][  T982] usb 6-1: Using ep0 maxpacket: 8
[ 1233.941929][  T982] usb 6-1: config 162 has an invalid interface number: 253 but max is 0
[ 1234.003440][  T982] usb 6-1: config 162 has no interface number 0
[ 1234.021856][  T982] usb 6-1: config 162 interface 253 has no altsetting 0
[ 1234.033620][  T982] usb 6-1: New USB device found, idVendor=0ab1, idProduct=7007, bcdDevice= 2.09
[ 1234.044173][  T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.058077][  T982] usb 6-1: Product: syz
[ 1234.071353][  T982] usb 6-1: Manufacturer: syz
[ 1234.078067][  T982] usb 6-1: SerialNumber: syz
[ 1234.310961][T20828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1234.319827][T20828] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1234.406926][T13164] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1234.491162][  T982] usb 3-1: USB disconnect, device number 67
[ 1234.567263][T13164] usb 4-1: Using ep0 maxpacket: 16
[ 1234.574482][T13164] usb 4-1: config 4 has an invalid interface number: 51 but max is 0
[ 1234.586997][T13164] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1234.604385][T13164] usb 4-1: config 4 has no interface number 0
[ 1234.623609][T13164] usb 4-1: config 4 interface 51 has no altsetting 0
[ 1234.639005][T13164] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[ 1234.648240][T13164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1234.656274][T13164] usb 4-1: Product: syz
[ 1234.660728][T13164] usb 4-1: Manufacturer: syz
[ 1234.673833][T13164] usb 4-1: SerialNumber: syz
[ 1234.854491][T15651] usb 6-1: USB disconnect, device number 6
[ 1234.938844][T20838] binder_alloc: 20837: binder_alloc_buf, no vma
[ 1235.293875][T20846] bridge_slave_0: left allmulticast mode
[ 1235.303713][T20846] bridge_slave_0: left promiscuous mode
[ 1235.343839][T20846] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1235.415202][T20846] bridge_slave_1: left allmulticast mode
[ 1235.440685][T20846] bridge_slave_1: left promiscuous mode
[ 1235.464067][T20846] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1235.506433][T20846] bond0: (slave bond_slave_0): Releasing backup interface
[ 1235.564362][T20846] bond0: (slave bond_slave_1): Releasing backup interface
[ 1235.605330][T20846] team0: Port device team_slave_0 removed
[ 1235.636312][T20846] team0: Port device team_slave_1 removed
[ 1235.663712][T20846] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1235.707204][T20846] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1235.727113][T20846] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1235.740824][T20846] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1235.827128][ T5975] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1235.964972][T20857] netlink: 'syz.5.3934': attribute type 12 has an invalid length.
[ 1236.169829][ T5975] usb 2-1: Using ep0 maxpacket: 32
[ 1236.178908][ T5975] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 1236.187825][ T5975] usb 2-1: config 0 has no interface number 0
[ 1236.202340][ T5975] usb 2-1: config 0 interface 12 has no altsetting 0
[ 1236.214905][ T5975] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1236.451223][ T5975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1236.462995][ T5975] usb 2-1: Product: syz
[ 1236.469214][ T5975] usb 2-1: Manufacturer: syz
[ 1236.475062][ T5975] usb 2-1: SerialNumber: syz
[ 1236.575788][ T5975] usb 2-1: config 0 descriptor??
[ 1236.813195][T20866] binder: 20865:20866 ioctl 4018620d 0 returned -22
[ 1237.012652][T20854] syz_tun: entered allmulticast mode
[ 1238.237216][T15651] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 1238.381907][T13164] usb 4-1: USB disconnect, device number 18
[ 1238.406964][  T979] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1238.432254][T20853] syz_tun: left allmulticast mode
[ 1238.450382][ T5975] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[ 1238.467076][ T5975] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[ 1238.475519][T15651] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1238.486498][ T5975] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1238.503545][T15651] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1238.513608][ T5975] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[ 1238.521792][T15651] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1238.536956][T15651] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1238.547154][ T5975] usb 2-1: USB disconnect, device number 24
[ 1238.582304][T15651] usb 6-1: config 0 descriptor??
[ 1238.626951][  T979] usb 3-1: Using ep0 maxpacket: 8
[ 1238.634522][  T979] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1238.650400][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[ 1238.661672][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[ 1238.684466][  T979] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1238.696976][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1238.705204][  T979] usb 3-1: Product: syz
[ 1238.713407][  T979] usb 3-1: Manufacturer: syz
[ 1238.718487][  T979] usb 3-1: SerialNumber: syz
[ 1238.754552][  T979] usb 3-1: config 0 descriptor??
[ 1238.767100][T20878] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22
[ 1238.812302][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.819066][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.432912][T13164] usb 3-1: USB disconnect, device number 68
[ 1239.456970][ T5975] usb 2-1: new low-speed USB device number 25 using dummy_hcd
[ 1239.648099][ T5975] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1239.666315][ T5975] usb 2-1: config 0 has no interface number 0
[ 1239.689567][ T5975] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1239.723930][ T5975] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1239.775108][ T5975] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1239.802227][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1239.830757][ T5975] usb 2-1: config 0 descriptor??
[ 1239.892718][T20889] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1239.909724][ T5975] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1240.017758][T20894] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1240.034710][T20894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1240.071948][T20894] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1240.149655][T20894] random: crng reseeded on system resumption
[ 1240.438177][T15651] usb 6-1: USB disconnect, device number 7
[ 1240.636943][ T5975] usb 3-1: new low-speed USB device number 69 using dummy_hcd
[ 1240.822896][ T5975] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1240.834684][ T5975] usb 3-1: config 0 has no interface number 0
[ 1240.855719][ T5975] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1240.871909][ T5975] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1240.883939][ T5975] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1240.898044][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1240.924744][ T5975] usb 3-1: config 0 descriptor??
[ 1240.937637][T20901] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 1240.973562][ T5975] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[ 1241.203350][ T5975] usb 3-1: USB disconnect, device number 69
[ 1242.732020][  T982] usb 2-1: USB disconnect, device number 25
[ 1243.061281][T20922] netlink: 'syz.5.3950': attribute type 12 has an invalid length.
[ 1243.207038][  T982] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1243.457079][  T982] usb 4-1: Using ep0 maxpacket: 16
[ 1243.464008][  T982] usb 4-1: config 4 has an invalid interface number: 51 but max is 0
[ 1243.507005][  T982] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1243.540144][  T982] usb 4-1: config 4 has no interface number 0
[ 1243.547532][  T982] usb 4-1: config 4 interface 51 has no altsetting 0
[ 1243.558061][  T982] usb 4-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[ 1243.569782][  T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1243.579179][  T982] usb 4-1: Product: syz
[ 1243.583584][  T982] usb 4-1: Manufacturer: syz
[ 1243.591030][  T982] usb 4-1: SerialNumber: syz
[ 1243.896991][  T982] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1244.188477][  T982] usb 3-1: Using ep0 maxpacket: 32
[ 1244.215289][  T982] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[ 1244.237975][  T982] usb 3-1: config 0 has no interface number 0
[ 1244.244118][  T982] usb 3-1: config 0 interface 12 has no altsetting 0
[ 1244.322577][  T982] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1244.336267][  T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1244.345993][  T982] usb 3-1: Product: syz
[ 1244.353206][  T982] usb 3-1: Manufacturer: syz
[ 1244.369906][  T982] usb 3-1: SerialNumber: syz
[ 1244.387429][  T982] usb 3-1: config 0 descriptor??
[ 1244.617007][ T5975] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1244.812122][ T5975] usb 6-1: Using ep0 maxpacket: 32
[ 1244.820294][ T5975] usb 6-1: config 0 has an invalid interface number: 161 but max is 0
[ 1244.831718][T20926] syz_tun: entered allmulticast mode
[ 1244.843404][ T5975] usb 6-1: config 0 has no interface number 0
[ 1244.887655][ T5975] usb 6-1: config 0 interface 161 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1244.933317][ T5975] usb 6-1: New USB device found, idVendor=12d1, idProduct=1435, bcdDevice= 0.00
[ 1244.962849][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1244.983742][ T5975] usb 6-1: Product: syz
[ 1244.994068][ T5975] usb 6-1: Manufacturer: syz
[ 1245.024375][ T5975] usb 6-1: SerialNumber: syz
[ 1245.067285][ T5975] usb 6-1: config 0 descriptor??
[ 1245.080490][ T5975] usb-storage 6-1:0.161: USB Mass Storage device detected
[ 1245.852060][T20925] syz_tun: left allmulticast mode
[ 1245.875052][ T5975] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[ 1245.875057][  T982] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[ 1245.875104][  T982] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[ 1245.943743][  T982] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1245.957028][  T982] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[ 1246.047180][  T979] usb 4-1: USB disconnect, device number 19
[ 1246.150575][ T5975] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1246.163505][ T5975] usb 2-1: config 0 has no interface number 0
[ 1246.173374][ T5975] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1246.204307][ T5975] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1246.225945][  T982] usb 3-1: USB disconnect, device number 70
[ 1246.253423][ T5975] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1246.351395][ T5975] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1246.377945][ T5975] usb 2-1: config 0 descriptor??
[ 1246.401939][T20951] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[ 1246.437639][ T5975] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1247.077546][ T5975] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1247.287119][T15651] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1247.411294][T20976] mmap: syz.7.3965 (20976): VmData 37593088 exceed data ulimit 25. Update limits or use boot option ignore_rlimit_data.
[ 1247.460017][ T5975] usb 3-1: Using ep0 maxpacket: 16
[ 1247.514593][T15651] usb 4-1: config 0 has no interfaces?
[ 1247.632237][T15651] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1247.649451][T15651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1247.659494][T15651] usb 4-1: Product: syz
[ 1247.663861][T15651] usb 4-1: Manufacturer: syz
[ 1247.672474][T15651] usb 4-1: SerialNumber: syz
[ 1247.702399][T15651] usb 4-1: config 0 descriptor??
[ 1247.881879][T15651] usb 6-1: USB disconnect, device number 8
[ 1248.551776][T15651] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1248.610426][T13164] usb 2-1: USB disconnect, device number 26
[ 1248.766954][T15651] usb 6-1: device descriptor read/64, error -71
[ 1248.789154][T20983] vcan0: tx drop: invalid da for name 0x0000000000000003
[ 1249.007005][T15651] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1249.126987][T13164] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1249.137131][T15651] usb 6-1: device descriptor read/64, error -71
[ 1249.250619][T15651] usb usb6-port1: attempt power cycle
[ 1249.277734][T13164] usb 2-1: Using ep0 maxpacket: 16
[ 1249.294169][T13164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1249.305993][T13164] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1249.328638][T13164] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1249.349539][T13164] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[ 1249.362913][T13164] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1249.381884][T13164] usb 2-1: config 0 descriptor??
[ 1249.686962][T15651] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1249.758076][T15651] usb 6-1: device descriptor read/8, error -71
[ 1249.840571][T13164] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1249.848836][   T43] usb 4-1: USB disconnect, device number 20
[ 1249.900456][T13164] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1249.938114][T13164] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1249.966003][T13164] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1249.973659][T13164] shield 0003:0955:7214.0036: unknown main item tag 0x0
[ 1249.998865][T20983] random: crng reseeded on system resumption
[ 1250.000131][T13164] input: HID 0955:7214 Haptics as /devices/virtual/input/input228
[ 1250.023588][T15651] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1250.047533][ T5975] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1250.071269][ T5975] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1250.095200][ T5975] usb 3-1: can't read configurations, error -71
[ 1250.107968][T15651] usb 6-1: device descriptor read/8, error -71
[ 1250.135772][T13164] shield 0003:0955:7214.0036: Registered Thunderstrike controller
[ 1250.146470][T13164] shield 0003:0955:7214.0036: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[ 1250.217268][T15651] usb usb6-port1: unable to enumerate USB device
[ 1250.219248][  T982] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[ 1250.242943][T13164] usb 2-1: USB disconnect, device number 27
[ 1250.249115][  T982] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1250.271354][  T982] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1250.287269][  T982] shield 0003:0955:7214.0036: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[ 1250.358330][   T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 1250.469066][ T5975] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1250.528770][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1250.541909][   T43] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1250.552612][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.561184][   T43] usb 4-1: Product: syz
[ 1250.565447][   T43] usb 4-1: Manufacturer: syz
[ 1250.570567][   T43] usb 4-1: SerialNumber: syz
[ 1250.579729][   T43] usb 4-1: config 0 descriptor??
[ 1250.593424][   T43] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected
[ 1250.603500][   T43] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[ 1250.613098][   T43] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22
[ 1250.627296][ T5975] usb 3-1: Using ep0 maxpacket: 16
[ 1250.634756][ T5975] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[ 1250.643168][ T5975] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1250.656889][ T5975] usb 3-1: config 4 has no interface number 0
[ 1250.663024][ T5975] usb 3-1: config 4 interface 51 has no altsetting 0
[ 1250.672227][ T5975] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[ 1250.681572][ T5975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1250.689713][ T5975] usb 3-1: Product: syz
[ 1250.693901][ T5975] usb 3-1: Manufacturer: syz
[ 1250.698936][ T5975] usb 3-1: SerialNumber: syz
[ 1250.774197][T20994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3972'.
[ 1250.795003][T13164] usb 4-1: USB disconnect, device number 21
[ 1250.802047][T13164] garmin_gps 4-1:0.0: device disconnected
[ 1250.819973][   T30] audit: type=1800 audit(1758667946.074:932): pid=20994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3972" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1250.840638][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1251.108813][  T982] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1251.257238][  T982] usb 2-1: device descriptor read/64, error -71
[ 1251.496945][  T982] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1251.547722][T13164] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1251.637228][  T982] usb 2-1: device descriptor read/64, error -71
[ 1251.717175][T13164] usb 6-1: Using ep0 maxpacket: 16
[ 1252.020578][  T982] usb usb2-port1: attempt power cycle
[ 1252.144096][T13164] usb 6-1: config 4 has an invalid interface number: 51 but max is 0
[ 1252.180686][T13164] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1252.192416][T13164] usb 6-1: config 4 has no interface number 0
[ 1252.198788][T13164] usb 6-1: config 4 interface 51 has no altsetting 0
[ 1252.245761][T13164] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[ 1252.255395][T13164] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1252.283900][T13164] usb 6-1: Product: syz
[ 1252.296740][T21009] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1252.299419][T13164] usb 6-1: Manufacturer: syz
[ 1252.335163][T13164] usb 6-1: SerialNumber: syz
[ 1252.490584][  T982] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1252.606590][  T982] usb 2-1: device descriptor read/8, error -71
[ 1253.025587][  T982] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1253.117636][  T982] usb 2-1: device descriptor read/8, error -71
[ 1253.227408][  T982] usb usb2-port1: unable to enumerate USB device
[ 1253.380941][  T982] usb 3-1: USB disconnect, device number 72
[ 1254.661453][T21029] fuse: Unknown parameter 'fd0x0000000000000006'
[ 1255.587330][   T43] usb 6-1: USB disconnect, device number 13
[ 1255.987017][   T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1256.147160][   T43] usb 6-1: Using ep0 maxpacket: 32
[ 1256.159554][   T43] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 1256.173009][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1256.217473][   T43] usb 6-1: Product: syz
[ 1256.221909][   T43] usb 6-1: Manufacturer: syz
[ 1256.226715][   T43] usb 6-1: SerialNumber: syz
[ 1256.244447][   T43] usb 6-1: config 0 descriptor??
[ 1256.272906][   T43] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 1256.558012][T13164] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1256.671019][T21040] loop7: detected capacity change from 0 to 1
[ 1256.734725][ T9888] Dev loop7: unable to read RDB block 1
[ 1256.747007][T13164] usb 3-1: Using ep0 maxpacket: 16
[ 1256.753007][ T9888]  loop7: unable to read partition table
[ 1256.777664][T13164] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[ 1256.800059][T13164] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1256.810782][ T9888] loop7: partition table beyond EOD, truncated
[ 1256.843282][T13164] usb 3-1: config 4 has no interface number 0
[ 1256.850737][T13164] usb 3-1: config 4 interface 51 has no altsetting 0
[ 1256.853513][T21040] Dev loop7: unable to read RDB block 1
[ 1256.859815][T13164] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[ 1256.877325][T13164] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1256.886005][T13164] usb 3-1: Product: syz
[ 1256.886781][T21040]  loop7: unable to read partition table
[ 1256.901790][T21061] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3989'.
[ 1256.911296][T13164] usb 3-1: Manufacturer: syz
[ 1256.917082][T13164] usb 3-1: SerialNumber: syz
[ 1256.928939][T21040] loop7: partition table beyond EOD, truncated
[ 1256.977521][T21040] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{
WÎÉ´å) failed (rc=-5)
[ 1257.001236][   T30] audit: type=1800 audit(1758667952.254:933): pid=21061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3989" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[ 1257.351914][T13164] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[ 1257.541321][T13164] usb 4-1: config 0 has an invalid interface number: 211 but max is 0
[ 1257.574910][T13164] usb 4-1: config 0 has no interface number 0
[ 1257.597141][T13164] usb 4-1: config 0 interface 211 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[ 1259.286790][   T43] gspca_stk1135: reg_w 0x350 err -71
[ 1259.296154][   T43] gspca_stk1135: serial bus timeout: status=0x00
[ 1259.333175][   T43] gspca_stk1135: Sensor write failed
[ 1259.385565][   T43] gspca_stk1135: serial bus timeout: status=0x00
[ 1259.437001][ T5975] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1259.444807][   T43] gspca_stk1135: Sensor write failed
[ 1259.464945][   T43] gspca_stk1135: serial bus timeout: status=0x00
[ 1259.555749][   T43] gspca_stk1135: Sensor read failed
[ 1259.606143][   T43] gspca_stk1135: serial bus timeout: status=0x00
[ 1259.631794][   T43] gspca_stk1135: Sensor read failed
[ 1259.669983][  T982] usb 3-1: USB disconnect, device number 73
[ 1259.679862][   T43] gspca_stk1135: Detected sensor type unknown (0x0)
[ 1259.706080][   T43] gspca_stk1135: serial bus timeout: status=0x00
[ 1259.729757][   T43] gspca_stk1135: Sensor read failed
[ 1259.735159][   T43] gspca_stk1135: serial bus timeout: status=0x00
[ 1259.751712][ T5975] usb 2-1: Using ep0 maxpacket: 16
[ 1259.791717][   T43] gspca_stk1135: Sensor read failed
[ 1259.860044][   T43] gspca_stk1135: serial bus timeout: status=0x00
[ 1259.866615][   T43] gspca_stk1135: Sensor write failed
[ 1259.904746][   T43] gspca_stk1135: serial bus timeout: status=0x00
[ 1259.933760][   T43] gspca_stk1135: Sensor write failed
[ 1259.950396][   T43] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71
[ 1259.971349][T21084] fuse: Unknown parameter 'fd0x0000000000000006'
[ 1259.994183][   T43] usb 6-1: USB disconnect, device number 14
[ 1260.136541][T13164] usb 4-1: New USB device found, idVendor=041e, idProduct=403a, bcdDevice=55.dd
[ 1260.199859][T13164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1260.241017][T13164] usb 4-1: config 0 descriptor??
[ 1260.258241][T13164] usb 4-1: can't set config #0, error -71
[ 1260.372651][T13164] usb 4-1: USB disconnect, device number 22
[ 1260.617126][   T43] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1260.747039][   T43] usb 6-1: device descriptor read/64, error -71
[ 1260.844112][T13164] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 1261.147267][T21095] fuse: Bad value for 'fd'
[ 1261.257230][T13164] usb 4-1: Using ep0 maxpacket: 32
[ 1261.265699][T13164] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[ 1261.283967][T13164] usb 4-1: config 0 has no interface number 0
[ 1261.305350][T13164] usb 4-1: config 0 interface 12 has no altsetting 0
[ 1261.326958][   T43] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[ 1261.389527][T13164] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1261.402932][T13164] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.429585][T13164] usb 4-1: Product: syz
[ 1261.475642][T13164] usb 4-1: Manufacturer: syz
[ 1261.476961][   T43] usb 6-1: device descriptor read/64, error -71
[ 1261.495280][T13164] usb 4-1: SerialNumber: syz
[ 1261.508251][T13164] usb 4-1: config 0 descriptor??
[ 1261.597486][   T43] usb usb6-port1: attempt power cycle
[ 1261.987295][   T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1262.017674][   T43] usb 6-1: device descriptor read/8, error -71
[ 1262.267108][   T43] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1262.321301][   T43] usb 6-1: device descriptor read/8, error -71
[ 1262.466595][   T43] usb usb6-port1: unable to enumerate USB device
[ 1262.498317][ T5975] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1262.509799][ T5975] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1262.526074][ T5975] usb 2-1: can't read configurations, error -71
[ 1262.717654][T13164] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1262.771139][T13164] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[ 1262.799682][T13164] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1262.820326][T13164] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[ 1262.865065][T13164] usb 4-1: USB disconnect, device number 23
[ 1263.246994][T21113] fuse: Bad value for 'fd'
[ 1263.983555][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4006'.
[ 1264.112606][T21124] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[ 1265.111321][T21142] fuse: Bad value for 'fd'
[ 1265.289626][T21128] delete_channel: no stack
[ 1267.191230][T21174] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1267.206905][T21174] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4017'.
[ 1267.379929][ T5975] usb 3-1: new low-speed USB device number 74 using dummy_hcd
[ 1267.559668][ T5975] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1267.575530][ T5975] usb 3-1: config 0 has no interface number 0
[ 1267.582674][ T5975] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1267.612206][ T5975] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1267.626090][ T5975] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1267.639963][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1267.661427][ T5975] usb 3-1: config 0 descriptor??
[ 1267.670625][T21165] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1267.781727][T21182] dvmrp0: entered allmulticast mode
[ 1267.821194][ T5975] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1268.132115][T21176] delete_channel: no stack
[ 1269.792081][   T43] usb 3-1: USB disconnect, device number 74
[ 1269.816275][T21205] FAULT_INJECTION: forcing a failure.
[ 1269.816275][T21205] name failslab, interval 1, probability 0, space 0, times 0
[ 1269.842510][T21205] CPU: 1 UID: 0 PID: 21205 Comm: syz.5.4029 Not tainted syzkaller #0 PREEMPT(full) 
[ 1269.842534][T21205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1269.842546][T21205] Call Trace:
[ 1269.842554][T21205]  <TASK>
[ 1269.842561][T21205]  dump_stack_lvl+0x189/0x250
[ 1269.842586][T21205]  ? __pfx____ratelimit+0x10/0x10
[ 1269.842603][T21205]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1269.842623][T21205]  ? __pfx__printk+0x10/0x10
[ 1269.842648][T21205]  ? __pfx___might_resched+0x10/0x10
[ 1269.842664][T21205]  ? fs_reclaim_acquire+0x7d/0x100
[ 1269.842685][T21205]  should_fail_ex+0x414/0x560
[ 1269.842714][T21205]  should_failslab+0xa8/0x100
[ 1269.842737][T21205]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1269.842757][T21205]  ? rtnl_newlink+0xed/0x1c70
[ 1269.842773][T21205]  ? kasan_save_free_info+0x46/0x50
[ 1269.842794][T21205]  rtnl_newlink+0xed/0x1c70
[ 1269.842810][T21205]  ? netlink_sendmsg+0x805/0xb30
[ 1269.842826][T21205]  ? __sock_sendmsg+0x21c/0x270
[ 1269.842846][T21205]  ? ____sys_sendmsg+0x52d/0x830
[ 1269.842863][T21205]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1269.842879][T21205]  ? __sys_sendmmsg+0x227/0x430
[ 1269.842894][T21205]  ? __x64_sys_sendmmsg+0xa0/0xc0
[ 1269.842911][T21205]  ? do_syscall_64+0xfa/0x3b0
[ 1269.842927][T21205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1269.842948][T21205]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1269.842986][T21205]  ? kasan_quarantine_put+0xdd/0x220
[ 1269.843004][T21205]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1269.843028][T21205]  ? nlmon_xmit+0xb0/0x100
[ 1269.843044][T21205]  ? kmem_cache_free+0x18f/0x400
[ 1269.843072][T21205]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1269.843089][T21205]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1269.843107][T21205]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1269.843124][T21205]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1269.843144][T21205]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1269.843165][T21205]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1269.843185][T21205]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1269.843213][T21205]  ? __dev_queue_xmit+0x1d79/0x3b50
[ 1269.843239][T21205]  ? __lock_acquire+0xab9/0xd20
[ 1269.843284][T21205]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1269.843302][T21205]  rtnetlink_rcv_msg+0x7cc/0xb70
[ 1269.843323][T21205]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1269.843340][T21205]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1269.843355][T21205]  ? ref_tracker_free+0x63a/0x7d0
[ 1269.843374][T21205]  ? __asan_memcpy+0x40/0x70
[ 1269.843392][T21205]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1269.843419][T21205]  netlink_rcv_skb+0x208/0x470
[ 1269.843443][T21205]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1269.843462][T21205]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1269.843492][T21205]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1269.843518][T21205]  netlink_unicast+0x82c/0x9e0
[ 1269.843548][T21205]  ? __pfx_netlink_unicast+0x10/0x10
[ 1269.843570][T21205]  ? netlink_sendmsg+0x642/0xb30
[ 1269.843586][T21205]  ? skb_put+0x11b/0x210
[ 1269.843605][T21205]  netlink_sendmsg+0x805/0xb30
[ 1269.843628][T21205]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1269.843647][T21205]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1269.843666][T21205]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1269.843683][T21205]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1269.843702][T21205]  __sock_sendmsg+0x21c/0x270
[ 1269.843729][T21205]  ____sys_sendmsg+0x52d/0x830
[ 1269.843755][T21205]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1269.843786][T21205]  ? import_iovec+0x74/0xa0
[ 1269.843811][T21205]  ___sys_sendmsg+0x21f/0x2a0
[ 1269.843834][T21205]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1269.843897][T21205]  ? __might_fault+0xb0/0x130
[ 1269.843923][T21205]  __sys_sendmmsg+0x227/0x430
[ 1269.843949][T21205]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1269.843967][T21205]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1269.844012][T21205]  ? ksys_write+0x22a/0x250
[ 1269.844036][T21205]  ? __pfx_ksys_write+0x10/0x10
[ 1269.844055][T21205]  ? rcu_is_watching+0x15/0xb0
[ 1269.844080][T21205]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1269.844103][T21205]  do_syscall_64+0xfa/0x3b0
[ 1269.844121][T21205]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1269.844138][T21205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1269.844155][T21205]  ? clear_bhb_loop+0x60/0xb0
[ 1269.844176][T21205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1269.844193][T21205] RIP: 0033:0x7fd20ff8eec9
[ 1269.844217][T21205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1269.844233][T21205] RSP: 002b:00007fd210df5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1269.844253][T21205] RAX: ffffffffffffffda RBX: 00007fd2101e5fa0 RCX: 00007fd20ff8eec9
[ 1269.844266][T21205] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[ 1269.844279][T21205] RBP: 00007fd210df5090 R08: 0000000000000000 R09: 0000000000000000
[ 1269.844291][T21205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1269.844301][T21205] R13: 00007fd2101e6038 R14: 00007fd2101e5fa0 R15: 00007fd21030fa28
[ 1269.844330][T21205]  </TASK>
[ 1269.844636][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4029'.
[ 1270.598291][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4031'.
[ 1270.688192][T15651] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[ 1270.746930][   T43] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[ 1270.839147][T15651] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1270.849480][T15651] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1271.018201][T15651] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1271.027623][T15651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1271.051064][   T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1271.060535][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.075907][T15651] usb 4-1: config 0 descriptor??
[ 1271.137707][   T43] usb 3-1: Product: syz
[ 1271.145870][   T43] usb 3-1: Manufacturer: syz
[ 1271.152037][   T43] usb 3-1: SerialNumber: syz
[ 1271.159686][T15651] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1271.172637][   T43] usb 3-1: config 0 descriptor??
[ 1271.180276][T15651] dvb-usb: bulk message failed: -22 (3/0)
[ 1271.199965][T15651] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1271.227882][T15651] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1271.251159][T15651] usb 4-1: media controller created
[ 1271.263778][T15651] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1271.294254][T15651] dvb-usb: bulk message failed: -22 (6/0)
[ 1271.310973][T15651] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1271.339632][T15651] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input229
[ 1271.361713][T21192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1271.370441][T21192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1271.402738][   T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1271.437832][T15651] dvb-usb: schedule remote query interval to 150 msecs.
[ 1271.471499][T15651] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1271.486711][  T982] usb 4-1: USB disconnect, device number 24
[ 1271.579158][  T982] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1271.976899][T15651] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1272.146996][T15651] usb 2-1: Using ep0 maxpacket: 16
[ 1272.167863][T15651] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1272.177796][ T7561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1272.190957][T15651] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1272.201874][ T7561] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1272.210950][T15651] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1272.221030][ T7561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1272.231057][ T7561] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1272.239651][T15651] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1272.250500][ T7561] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1272.258020][T15651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1272.266340][T15651] usb 2-1: Product: syz
[ 1272.271220][T15651] usb 2-1: Manufacturer: syz
[ 1272.275895][T15651] usb 2-1: SerialNumber: syz
[ 1272.346604][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1272.429733][   T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1272.449736][   T43] usb 3-1: USB disconnect, device number 75
[ 1272.545258][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1272.640128][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1272.714494][T15651] usb 2-1: 0:2 : does not exist
[ 1272.762750][T15651] usb 2-1: USB disconnect, device number 34
[ 1272.826064][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1273.450972][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4041'.
[ 1273.562866][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4041'.
[ 1273.575411][T21229] chnl_net:caif_netlink_parms(): no params data found
[ 1273.944769][T21268] random: crng reseeded on system resumption
[ 1274.197484][T21277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4045'.
[ 1274.336925][T18269] Bluetooth: hci1: command tx timeout
[ 1274.716970][T15651] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1274.866981][T15651] usb 2-1: device descriptor read/64, error -71
[ 1274.917564][   T43] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[ 1274.937117][   T13] dvmrp0 (unregistering): left allmulticast mode
[ 1275.069283][   T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1275.082781][   T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1275.103628][   T43] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[ 1275.113163][T15651] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1275.124194][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1275.168501][   T43] usb 4-1: config 0 descriptor??
[ 1275.176632][   T43] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[ 1275.189280][   T43] dvb-usb: bulk message failed: -22 (3/0)
[ 1275.214920][   T43] dvb-usb: will use the device's hardware PID filter (table count: 16).
[ 1275.224813][   T43] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[ 1275.231998][   T43] usb 4-1: media controller created
[ 1275.239284][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1275.258023][T15651] usb 2-1: device descriptor read/64, error -71
[ 1275.273458][   T43] dvb-usb: bulk message failed: -22 (6/0)
[ 1275.292582][   T43] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[ 1275.317802][   T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input230
[ 1275.358578][   T43] dvb-usb: schedule remote query interval to 150 msecs.
[ 1275.365744][   T43] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[ 1275.378524][T21278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1275.387391][T15651] usb usb2-port1: attempt power cycle
[ 1275.402526][T21278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1275.484470][  T982] usb 4-1: USB disconnect, device number 25
[ 1275.556395][  T982] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[ 1275.600086][   T13] bond1 (unregistering): Released all slaves
[ 1275.617351][   T13] bond2 (unregistering): Released all slaves
[ 1275.632361][   T13] bond0 (unregistering): Released all slaves
[ 1275.746947][T15651] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1275.767811][T15651] usb 2-1: device descriptor read/8, error -71
[ 1275.824844][   T13] bond3 (unregistering): Released all slaves
[ 1275.894795][T21229] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1275.984803][T21229] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1276.001726][T21229] bridge_slave_0: entered allmulticast mode
[ 1276.012279][T15651] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1276.019445][T21229] bridge_slave_0: entered promiscuous mode
[ 1276.049641][T15651] usb 2-1: device descriptor read/8, error -71
[ 1276.056451][T21229] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1276.066056][T21229] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1276.074946][T21229] bridge_slave_1: entered allmulticast mode
[ 1276.098090][T21229] bridge_slave_1: entered promiscuous mode
[ 1276.139045][   T13] IPVS: stopping backup sync thread 17359 ...
[ 1276.177930][T15651] usb usb2-port1: unable to enumerate USB device
[ 1276.355807][T21229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1276.383372][T21229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1276.398719][T18269] Bluetooth: hci1: command tx timeout
[ 1276.425094][   T30] audit: type=1326 audit(1758667971.674:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40c18eec9 code=0x7ffc0000
[ 1276.470691][   T30] audit: type=1326 audit(1758667971.674:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40c18eec9 code=0x7ffc0000
[ 1276.502503][   T30] audit: type=1326 audit(1758667971.704:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa40c18eec9 code=0x7ffc0000
[ 1276.532200][   T30] audit: type=1326 audit(1758667971.704:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40c18eec9 code=0x7ffc0000
[ 1276.562908][   T30] audit: type=1326 audit(1758667971.704:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa40c18eec9 code=0x7ffc0000
[ 1276.605083][   T30] audit: type=1326 audit(1758667971.704:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40c18eec9 code=0x7ffc0000
[ 1276.633471][T15651] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[ 1276.641671][   T30] audit: type=1326 audit(1758667971.704:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa40c18eec9 code=0x7ffc0000
[ 1276.681067][   T30] audit: type=1326 audit(1758667971.704:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa40c18d710 code=0x7ffc0000
[ 1276.707138][   T30] audit: type=1326 audit(1758667971.704:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa40c18eacb code=0x7ffc0000
[ 1276.729802][  T979] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 1276.740793][   T30] audit: type=1326 audit(1758667971.704:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21294 comm="syz.3.4050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa40c18eacb code=0x7ffc0000
[ 1276.773378][T21229] team0: Port device team_slave_0 added
[ 1276.826560][T15651] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1276.836120][T15651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.875954][T21229] team0: Port device team_slave_1 added
[ 1276.876754][T15651] usb 3-1: Product: syz
[ 1276.914539][  T979] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1276.932657][T15651] usb 3-1: Manufacturer: syz
[ 1276.959534][  T979] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1276.975530][T15651] usb 3-1: SerialNumber: syz
[ 1276.994254][T15651] usb 3-1: config 0 descriptor??
[ 1277.005800][  T979] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1277.022850][T15651] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1277.047024][  T979] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[ 1277.105172][  T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1277.183196][T21295] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1277.263004][T21229] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1277.275489][T21229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1277.365822][T21229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1277.409485][T21229] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1277.434191][T21229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1277.483078][T21229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1277.526749][   T13] hsr_slave_0: left promiscuous mode
[ 1277.536239][   T13] hsr_slave_1: left promiscuous mode
[ 1277.581767][   T13] veth1_macvtap: left promiscuous mode
[ 1277.592827][   T13] veth0_macvtap: left promiscuous mode
[ 1277.604369][   T13] veth1_vlan: left promiscuous mode
[ 1277.613155][   T13] veth0_vlan: left promiscuous mode
[ 1277.636750][  T979] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[ 1277.654413][  T979] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input231
[ 1278.182108][  T979] usb 4-1: USB disconnect, device number 26
[ 1278.188154][    C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[ 1278.477234][T18269] Bluetooth: hci1: command tx timeout
[ 1278.550322][T21322] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4053'.
[ 1278.849284][  T979] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 1279.008875][  T979] usb 4-1: Using ep0 maxpacket: 32
[ 1279.015820][  T979] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[ 1279.024598][  T979] usb 4-1: config 0 has no interface number 0
[ 1279.031209][T15651] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1279.039155][  T979] usb 4-1: config 0 interface 12 has no altsetting 0
[ 1279.049183][  T979] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1279.068767][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1279.079199][  T979] usb 4-1: Product: syz
[ 1279.083400][  T979] usb 4-1: Manufacturer: syz
[ 1279.088320][  T979] usb 4-1: SerialNumber: syz
[ 1279.103038][  T979] usb 4-1: config 0 descriptor??
[ 1279.211073][T15651] usb 2-1: Using ep0 maxpacket: 8
[ 1279.232420][T15651] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[ 1279.246955][T15651] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[ 1279.255963][T15651] usb 2-1: Product: syz
[ 1279.261932][T15651] usb 2-1: Manufacturer: syz
[ 1279.267223][T15651] usb 2-1: SerialNumber: syz
[ 1279.275765][T15651] usb 2-1: config 0 descriptor??
[ 1279.294095][T15651] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[ 1279.845331][   T43] usb 3-1: USB disconnect, device number 76
[ 1280.158102][T15651] gspca_zc3xx: reg_r err -110
[ 1280.419984][T15651] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -110
[ 1280.557035][T18269] Bluetooth: hci1: command tx timeout
[ 1280.672603][T21346] binder: 21338:21346 ioctl 4018620d 0 returned -22
[ 1280.833325][T21229] hsr_slave_0: entered promiscuous mode
[ 1280.842463][T21229] hsr_slave_1: entered promiscuous mode
[ 1280.852417][T21229] debugfs: 'hsr0' already exists in 'hsr'
[ 1280.860407][T21229] Cannot create hsr debugfs directory
[ 1281.003795][  T979] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1281.017567][  T979] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[ 1281.087970][  T979] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1281.123408][  T979] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[ 1281.198850][  T979] usb 4-1: USB disconnect, device number 27
[ 1281.535173][   T13] IPVS: stop unused estimator thread 0...
[ 1282.335323][ T5935] usb 2-1: USB disconnect, device number 39
[ 1282.969211][ T5935] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1283.168303][ T5935] usb 2-1: config 0 has no interfaces?
[ 1283.175824][ T5935] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1283.185481][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1283.193841][ T5935] usb 2-1: Product: syz
[ 1283.198536][ T5935] usb 2-1: Manufacturer: syz
[ 1283.207609][ T5935] usb 2-1: SerialNumber: syz
[ 1283.253463][ T5935] usb 2-1: config 0 descriptor??
[ 1284.003435][T21229] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1284.035260][T21229] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1284.059276][T21229] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1284.074272][T21229] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1284.167362][  T979] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[ 1284.329838][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1284.370394][  T979] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[ 1284.401917][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 142, setting to 64
[ 1284.421423][  T979] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72
[ 1284.435058][  T979] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0
[ 1284.494301][  T979] usb 3-1: Manufacturer: syz
[ 1284.536462][  T979] usb 3-1: config 0 descriptor??
[ 1284.542837][T21229] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1284.564301][  T979] smsusb:smsusb_probe: board id=9, interface number 0
[ 1284.595896][  T979] smsusb:siano_media_device_register: media controller created
[ 1284.606591][  T979] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed
[ 1284.619491][  T979] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed
[ 1284.631027][T21229] 8021q: adding VLAN 0 to HW filter on device team0
[ 1284.674292][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1284.679229][  T979] ------------[ cut here ]------------
[ 1284.681548][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1284.686915][  T979] WARNING: CPU: 1 PID: 979 at mm/slub.c:4805 free_large_kmalloc+0x15c/0x1f0
[ 1284.702917][  T979] Modules linked in:
[ 1284.707166][  T979] CPU: 1 UID: 0 PID: 979 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[ 1284.716443][  T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1284.726622][  T979] Workqueue: usb_hub_wq hub_event
[ 1284.731843][  T979] RIP: 0010:free_large_kmalloc+0x15c/0x1f0
[ 1284.737781][  T979] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 5e 7b 88 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 46 d7 64 09 cc 90 <0f> 0b 90 65 48 8b 05 39 7b 88 10 48 3b 44 24 08 75 32 48 89 df 48
[ 1284.757469][  T979] RSP: 0018:ffffc900038eeb00 EFLAGS: 00010206
[ 1284.763570][  T979] RAX: 00000000ff000000 RBX: ffffea00016f1880 RCX: 0000000000000000
[ 1284.771650][  T979] RDX: ffffc90017fc2000 RSI: ffff88805bc62000 RDI: ffffea00016f1880
[ 1284.779786][  T979] RBP: 0000000000000100 R08: ffff88814cbf6903 R09: 1ffff1102997ed20
[ 1284.788148][  T979] R10: dffffc0000000000 R11: ffffed102997ed21 R12: 1ffff1100d64e682
[ 1284.796143][  T979] R13: 0000000000000000 R14: ffff88814cbf6960 R15: dffffc0000000000
[ 1284.804333][  T979] FS:  0000000000000000(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000
[ 1284.813323][  T979] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1284.819968][  T979] CR2: 0000000000000040 CR3: 000000007c79e000 CR4: 00000000003526f0
[ 1284.827983][  T979] DR0: 000000000000004b DR1: 0000000000000000 DR2: 0000000000000000
[ 1284.835939][  T979] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1284.843924][  T979] Call Trace:
[ 1284.847278][  T979]  <TASK>
[ 1284.850221][  T979]  usb_free_urb+0xd0/0x120
[ 1284.854784][  T979]  smsusb_term_device+0x1d6/0x3b0
[ 1284.859899][  T979]  smsusb_probe+0x1a04/0x2060
[ 1284.864580][  T979]  ? __pfx_smsusb_probe+0x10/0x10
[ 1284.869634][  T979]  ? __pfx_smsusb_sendrequest+0x10/0x10
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1284.875170][  T979]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1284.881280][  T979]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1284.887683][  T979]  ? __pm_runtime_set_status+0x785/0xa50
[ 1284.893390][  T979]  usb_probe_interface+0x668/0xc30
[ 1284.898591][  T979]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1284.904665][  T979]  really_probe+0x26a/0x9e0
[ 1284.909322][  T979]  __driver_probe_device+0x18c/0x2f0
[ 1284.914632][  T979]  driver_probe_device+0x4f/0x430
[ 1284.919739][  T979]  __device_attach_driver+0x2ce/0x530
[ 1284.925113][  T979]  bus_for_each_drv+0x251/0x2e0
[ 1284.930056][  T979]  ? __pfx___device_attach_driver+0x10/0x10
[ 1284.935968][  T979]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1284.941496][  T979]  __device_attach+0x2b8/0x400
[ 1284.946287][  T979]  ? __pfx___device_attach+0x10/0x10
[ 1284.951700][  T979]  ? do_raw_spin_unlock+0x122/0x240
[ 1284.956973][  T979]  bus_probe_device+0x185/0x260
[ 1284.961928][  T979]  device_add+0x7b6/0xb50
[ 1284.968434][  T979]  usb_set_configuration+0x1a87/0x20e0
[ 1284.973960][  T979]  usb_generic_driver_probe+0x8d/0x150
[ 1284.979536][  T979]  usb_probe_device+0x1c4/0x390
[ 1284.984414][  T979]  ? __pfx_usb_probe_device+0x10/0x10
[ 1284.989856][  T979]  really_probe+0x26a/0x9e0
[ 1284.994382][  T979]  __driver_probe_device+0x18c/0x2f0
[ 1284.999726][  T979]  driver_probe_device+0x4f/0x430
[ 1285.004803][  T979]  __device_attach_driver+0x2ce/0x530
[ 1285.010269][  T979]  bus_for_each_drv+0x251/0x2e0
[ 1285.015134][  T979]  ? __pfx___device_attach_driver+0x10/0x10
[ 1285.021215][  T979]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1285.027003][  T979]  __device_attach+0x2b8/0x400
[ 1285.031786][  T979]  ? __pfx___device_attach+0x10/0x10
[ 1285.037255][  T979]  ? do_raw_spin_unlock+0x122/0x240
[ 1285.042483][  T979]  bus_probe_device+0x185/0x260
[ 1285.047477][  T979]  device_add+0x7b6/0xb50
[ 1285.051834][  T979]  usb_new_device+0xa39/0x16f0
[ 1285.056714][  T979]  ? __pfx_usb_new_device+0x10/0x10
[ 1285.062042][  T979]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1285.067314][  T979]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1285.072548][  T979]  hub_event+0x2958/0x4a20
[ 1285.077087][  T979]  ? __pfx_hub_event+0x10/0x10
[ 1285.081873][  T979]  ? process_scheduled_works+0x9ef/0x17b0
[ 1285.087686][  T979]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1285.093007][  T979]  ? process_scheduled_works+0x9ef/0x17b0
[ 1285.098832][  T979]  ? process_scheduled_works+0x9ef/0x17b0
[ 1285.104572][  T979]  process_scheduled_works+0xae1/0x17b0
[ 1285.110256][  T979]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1285.116275][  T979]  worker_thread+0x8a0/0xda0
[ 1285.120972][  T979]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1285.127395][  T979]  ? __kthread_parkme+0x7b/0x200
[ 1285.132410][  T979]  kthread+0x70e/0x8a0
[ 1285.136508][  T979]  ? __pfx_worker_thread+0x10/0x10
[ 1285.141760][  T979]  ? __pfx_kthread+0x10/0x10
[ 1285.146377][  T979]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1285.151651][  T979]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1285.156934][  T979]  ? __pfx_kthread+0x10/0x10
[ 1285.161549][  T979]  ret_from_fork+0x439/0x7d0
[ 1285.166157][  T979]  ? __pfx_ret_from_fork+0x10/0x10
[ 1285.169342][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1285.171335][  T979]  ? __switch_to_asm+0x39/0x70
[ 1285.178464][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1285.183100][  T979]  ? __switch_to_asm+0x33/0x70
[ 1285.183130][  T979]  ? __pfx_kthread+0x10/0x10
[ 1285.199757][  T979]  ret_from_fork_asm+0x1a/0x30
[ 1285.204566][  T979]  </TASK>
[ 1285.207694][  T979] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1285.214985][  T979] CPU: 1 UID: 0 PID: 979 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) 
[ 1285.224283][  T979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1285.234448][  T979] Workqueue: usb_hub_wq hub_event
[ 1285.239507][  T979] Call Trace:
[ 1285.242794][  T979]  <TASK>
[ 1285.245731][  T979]  dump_stack_lvl+0x99/0x250
[ 1285.250351][  T979]  ? __asan_memcpy+0x40/0x70
[ 1285.254962][  T979]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1285.260174][  T979]  ? __pfx__printk+0x10/0x10
[ 1285.264795][  T979]  vpanic+0x281/0x750
[ 1285.268788][  T979]  ? __pfx__printk+0x10/0x10
[ 1285.273395][  T979]  ? __pfx_vpanic+0x10/0x10
[ 1285.277912][  T979]  ? is_bpf_text_address+0x26/0x2b0
[ 1285.283153][  T979]  panic+0xb9/0xc0
[ 1285.286882][  T979]  ? __pfx_panic+0x10/0x10
[ 1285.291335][  T979]  __warn+0x31b/0x4b0
[ 1285.295334][  T979]  ? free_large_kmalloc+0x15c/0x1f0
[ 1285.300549][  T979]  ? free_large_kmalloc+0x15c/0x1f0
[ 1285.305771][  T979]  report_bug+0x2be/0x4f0
[ 1285.310541][  T979]  ? free_large_kmalloc+0x15c/0x1f0
[ 1285.315754][  T979]  ? free_large_kmalloc+0x15c/0x1f0
[ 1285.320950][  T979]  ? free_large_kmalloc+0x15e/0x1f0
[ 1285.326145][  T979]  handle_bug+0x84/0x160
[ 1285.330377][  T979]  exc_invalid_op+0x1a/0x50
[ 1285.334872][  T979]  asm_exc_invalid_op+0x1a/0x20
[ 1285.339710][  T979] RIP: 0010:free_large_kmalloc+0x15c/0x1f0
[ 1285.345525][  T979] Code: 44 89 f6 e8 b6 19 fd ff 65 48 8b 05 5e 7b 88 10 48 3b 44 24 08 75 57 48 83 c4 10 5b 41 5c 41 5e 41 5f 5d e9 46 d7 64 09 cc 90 <0f> 0b 90 65 48 8b 05 39 7b 88 10 48 3b 44 24 08 75 32 48 89 df 48
[ 1285.365136][  T979] RSP: 0018:ffffc900038eeb00 EFLAGS: 00010206
[ 1285.371203][  T979] RAX: 00000000ff000000 RBX: ffffea00016f1880 RCX: 0000000000000000
[ 1285.379166][  T979] RDX: ffffc90017fc2000 RSI: ffff88805bc62000 RDI: ffffea00016f1880
[ 1285.387129][  T979] RBP: 0000000000000100 R08: ffff88814cbf6903 R09: 1ffff1102997ed20
[ 1285.395173][  T979] R10: dffffc0000000000 R11: ffffed102997ed21 R12: 1ffff1100d64e682
[ 1285.403136][  T979] R13: 0000000000000000 R14: ffff88814cbf6960 R15: dffffc0000000000
[ 1285.411130][  T979]  usb_free_urb+0xd0/0x120
[ 1285.415542][  T979]  smsusb_term_device+0x1d6/0x3b0
[ 1285.420563][  T979]  smsusb_probe+0x1a04/0x2060
[ 1285.425248][  T979]  ? __pfx_smsusb_probe+0x10/0x10
[ 1285.430272][  T979]  ? __pfx_smsusb_sendrequest+0x10/0x10
[ 1285.435854][  T979]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1285.441745][  T979]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1285.448075][  T979]  ? __pm_runtime_set_status+0x785/0xa50
[ 1285.453726][  T979]  usb_probe_interface+0x668/0xc30
[ 1285.458841][  T979]  ? __pfx_usb_probe_interface+0x10/0x10
[ 1285.464463][  T979]  really_probe+0x26a/0x9e0
[ 1285.468971][  T979]  __driver_probe_device+0x18c/0x2f0
[ 1285.474255][  T979]  driver_probe_device+0x4f/0x430
[ 1285.479296][  T979]  __device_attach_driver+0x2ce/0x530
[ 1285.484665][  T979]  bus_for_each_drv+0x251/0x2e0
[ 1285.489517][  T979]  ? __pfx___device_attach_driver+0x10/0x10
[ 1285.495403][  T979]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1285.500774][  T979]  __device_attach+0x2b8/0x400
[ 1285.505533][  T979]  ? __pfx___device_attach+0x10/0x10
[ 1285.510811][  T979]  ? do_raw_spin_unlock+0x122/0x240
[ 1285.516003][  T979]  bus_probe_device+0x185/0x260
[ 1285.520855][  T979]  device_add+0x7b6/0xb50
[ 1285.526849][  T979]  usb_set_configuration+0x1a87/0x20e0
[ 1285.532388][  T979]  usb_generic_driver_probe+0x8d/0x150
[ 1285.537856][  T979]  usb_probe_device+0x1c4/0x390
[ 1285.542714][  T979]  ? __pfx_usb_probe_device+0x10/0x10
[ 1285.548094][  T979]  really_probe+0x26a/0x9e0
[ 1285.552612][  T979]  __driver_probe_device+0x18c/0x2f0
[ 1285.557904][  T979]  driver_probe_device+0x4f/0x430
[ 1285.562944][  T979]  __device_attach_driver+0x2ce/0x530
[ 1285.568335][  T979]  bus_for_each_drv+0x251/0x2e0
[ 1285.573193][  T979]  ? __pfx___device_attach_driver+0x10/0x10
[ 1285.579171][  T979]  ? __pfx_bus_for_each_drv+0x10/0x10
[ 1285.584544][  T979]  __device_attach+0x2b8/0x400
[ 1285.589308][  T979]  ? __pfx___device_attach+0x10/0x10
[ 1285.594596][  T979]  ? do_raw_spin_unlock+0x122/0x240
[ 1285.599789][  T979]  bus_probe_device+0x185/0x260
[ 1285.604717][  T979]  device_add+0x7b6/0xb50
[ 1285.609042][  T979]  usb_new_device+0xa39/0x16f0
[ 1285.613809][  T979]  ? __pfx_usb_new_device+0x10/0x10
[ 1285.619036][  T979]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1285.624233][  T979]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1285.629423][  T979]  hub_event+0x2958/0x4a20
[ 1285.633885][  T979]  ? __pfx_hub_event+0x10/0x10
[ 1285.638640][  T979]  ? process_scheduled_works+0x9ef/0x17b0
[ 1285.644351][  T979]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1285.649545][  T979]  ? process_scheduled_works+0x9ef/0x17b0
[ 1285.655254][  T979]  ? process_scheduled_works+0x9ef/0x17b0
[ 1285.661040][  T979]  process_scheduled_works+0xae1/0x17b0
[ 1285.666598][  T979]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1285.672667][  T979]  worker_thread+0x8a0/0xda0
[ 1285.677335][  T979]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1285.683667][  T979]  ? __kthread_parkme+0x7b/0x200
[ 1285.688613][  T979]  kthread+0x70e/0x8a0
[ 1285.692675][  T979]  ? __pfx_worker_thread+0x10/0x10
[ 1285.697773][  T979]  ? __pfx_kthread+0x10/0x10
[ 1285.702355][  T979]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1285.707547][  T979]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1285.712729][  T979]  ? __pfx_kthread+0x10/0x10
[ 1285.717352][  T979]  ret_from_fork+0x439/0x7d0
[ 1285.721947][  T979]  ? __pfx_ret_from_fork+0x10/0x10
[ 1285.727060][  T979]  ? __switch_to_asm+0x39/0x70
[ 1285.731814][  T979]  ? __switch_to_asm+0x33/0x70
[ 1285.736561][  T979]  ? __pfx_kthread+0x10/0x10
[ 1285.741154][  T979]  ret_from_fork_asm+0x1a/0x30
[ 1285.745941][  T979]  </TASK>
[ 1285.749097][  T979] Kernel Offset: disabled
[ 1285.753409][  T979] Rebooting in 86400 seconds..