last executing test programs:

5m49.088798884s ago: executing program 1 (id=2371):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000)

5m48.35218295s ago: executing program 1 (id=2376):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2000})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x443, 0x1ff)
close(r3)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
shutdown(r1, 0x1)
syz_open_dev$audion(&(0x7f0000000180), 0x9, 0x8c4201)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x0, 0x0, 0x0, 0xffff0739, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3, 0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x18000000}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x14)
write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x84, 0x9, 0x9b, 0x0, 0x0, 0xdddd0000, 0x2, '\x00', 0xac2})

5m45.261227851s ago: executing program 1 (id=2390):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f00000001c0)='mand\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x1, 0x3)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="280000006c00010029bd7000ffdbdf2508000d00", @ANYRES32, @ANYBLOB="10003b800c001680080031"], 0x28}], 0x1, 0x0, 0x0, 0x20004880}, 0xc000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', <r4=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
r8 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x2b94, 0x8008, 0x4, 0x3d1}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000000)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r7, 0x0, 0x0})
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dummy0\x00', <r11=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r11}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x8, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4}]}]}], {0x14, 0x10}}, 0x6c}}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) (async)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r12 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', <r13=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x46, r13})
ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x7e, r13})

5m45.055733902s ago: executing program 1 (id=2392):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40)
recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0, 0x8104}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0)

5m45.006616279s ago: executing program 1 (id=2395):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = syz_io_uring_setup(0x9c1, &(0x7f00000002c0)={0x0, 0x200002f, 0x1, 0x1000, 0x100020c}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000), 0x0, 0x12})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000180)=0x2, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

5m44.82473921s ago: executing program 1 (id=2396):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = syz_io_uring_setup(0x9c1, &(0x7f00000002c0)={0x0, 0x200002f, 0x1, 0x1000, 0x100020c}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_emit_ethernet(0x17a, &(0x7f00000004c0)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x16c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, @dest_unreach={0x3, 0xdfb3ac7ca9972a53, 0x0, 0x0, 0xed, 0x8000, {0x53, 0x4, 0x1, 0x1, 0x35, 0x65, 0x9, 0x1, 0x4, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x7c, 0x3, [{0x2, 0x4, "b11e"}, {0x2, 0xf, "024017210d121fcbed9c77412b"}, {0x2, 0xd, "d8bcc7e1b9f48afc335d5d"}, {0x0, 0x6, "8e00d90f"}, {0x2, 0x12, "e00974e6bf2552a613c2661becef75a2"}, {0x1, 0x6, "b5de006c"}, {0x6, 0xd, "5997d33fd7f90c9445afc2"}, {0x1, 0xf, "b072cab0bb18a5703fc2b5cee9"}, {0x2, 0x10, "44b51a03ede7560397b5954b4a34"}, {0x0, 0xc, "6985416990d47cb3179b"}]}, @lsrr={0x83, 0x27, 0x64, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @empty, @empty]}, @ssrr={0x89, 0x17, 0xf4, [@multicast1, @local, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x86, 0x11, "741d721bfb991031b8e24b55ce41f7"}, @rr={0x7, 0x27, 0x9c, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @loopback, @broadcast, @private=0xa010100, @empty, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x44, 0xff, 0x1, 0x8, [{@remote, 0x5}, {@local, 0x3}, {@broadcast, 0x80000000}, {@rand_addr=0x64010100, 0x3}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@empty, 0x1}, {@broadcast, 0xfffffc00}]}]}}, "95b2af76"}}}}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f00000001c0), &(0x7f0000000340)='%pi6   \x00'}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20)
r8 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp6\x00')
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={r6, 0x20, &(0x7f00000004c0)={&(0x7f0000000680)=""/141, 0x8d, <r9=>0x0, &(0x7f0000000740)=""/4096, 0x1000}}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00')
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_SET_TSC_KHZ_cpu(r12, 0xaea2, 0x7a120)
r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xe, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000000000000d428000018400000fcffffff000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007580500008000000850000003d0000009500000000000000e8b01ffdfd7193fe96c15984328f6578c82cff21c69fddccb0cc48464fd46d975353431101e437e36dc43953af8b87e757fd63e7d143f5a95233db2aac69b125dc66b0ebce1ca383b868289ecfff8b20f40028f1baee3cbe50591dd81b5c7c3e0e369ad611ce5600ae1045baed835dc1b64bac6963c4b3d76419c20359a76d6c796a02e3aa624b74e6cad02474c28f2cd1a31b81b8154aef9aa737be123c2ae3db27516ae6650619d3437f21d91fc7dded39fab17fe2718a63d0610552"], &(0x7f0000000280)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0xe4, '\x00', 0x0, @fallback=0x33, r8, 0x8, &(0x7f0000000440)={0x26, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x3, 0x3, 0x7}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r13, 0xffffffffffffffff, 0x1, r14], 0x0, 0x10, 0x667}, 0x94)

5m29.598685487s ago: executing program 32 (id=2396):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = syz_io_uring_setup(0x9c1, &(0x7f00000002c0)={0x0, 0x200002f, 0x1, 0x1000, 0x100020c}, &(0x7f0000000040)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_emit_ethernet(0x17a, &(0x7f00000004c0)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x16c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, @dest_unreach={0x3, 0xdfb3ac7ca9972a53, 0x0, 0x0, 0xed, 0x8000, {0x53, 0x4, 0x1, 0x1, 0x35, 0x65, 0x9, 0x1, 0x4, 0x0, @multicast1, @loopback, {[@cipso={0x86, 0x7c, 0x3, [{0x2, 0x4, "b11e"}, {0x2, 0xf, "024017210d121fcbed9c77412b"}, {0x2, 0xd, "d8bcc7e1b9f48afc335d5d"}, {0x0, 0x6, "8e00d90f"}, {0x2, 0x12, "e00974e6bf2552a613c2661becef75a2"}, {0x1, 0x6, "b5de006c"}, {0x6, 0xd, "5997d33fd7f90c9445afc2"}, {0x1, 0xf, "b072cab0bb18a5703fc2b5cee9"}, {0x2, 0x10, "44b51a03ede7560397b5954b4a34"}, {0x0, 0xc, "6985416990d47cb3179b"}]}, @lsrr={0x83, 0x27, 0x64, [@dev={0xac, 0x14, 0x14, 0x1e}, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1, @empty, @empty]}, @ssrr={0x89, 0x17, 0xf4, [@multicast1, @local, @broadcast, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x86, 0x11, "741d721bfb991031b8e24b55ce41f7"}, @rr={0x7, 0x27, 0x9c, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2, @loopback, @broadcast, @private=0xa010100, @empty, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x44, 0xff, 0x1, 0x8, [{@remote, 0x5}, {@local, 0x3}, {@broadcast, 0x80000000}, {@rand_addr=0x64010100, 0x3}, {@broadcast, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@empty, 0x1}, {@broadcast, 0xfffffc00}]}]}}, "95b2af76"}}}}}, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{}, &(0x7f00000001c0), &(0x7f0000000340)='%pi6   \x00'}, 0x20)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, <r7=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000180)}, 0x20)
r8 = syz_open_procfs(0x0, &(0x7f0000000400)='net/tcp6\x00')
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={r6, 0x20, &(0x7f00000004c0)={&(0x7f0000000680)=""/141, 0x8d, <r9=>0x0, &(0x7f0000000740)=""/4096, 0x1000}}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00')
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x2)
ioctl$KVM_SET_TSC_KHZ_cpu(r12, 0xaea2, 0x7a120)
r13 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001780), 0x800, 0x0)
r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001800)=@generic={&(0x7f00000017c0)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0xe, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000000000000d428000018400000fcffffff000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000007580500008000000850000003d0000009500000000000000e8b01ffdfd7193fe96c15984328f6578c82cff21c69fddccb0cc48464fd46d975353431101e437e36dc43953af8b87e757fd63e7d143f5a95233db2aac69b125dc66b0ebce1ca383b868289ecfff8b20f40028f1baee3cbe50591dd81b5c7c3e0e369ad611ce5600ae1045baed835dc1b64bac6963c4b3d76419c20359a76d6c796a02e3aa624b74e6cad02474c28f2cd1a31b81b8154aef9aa737be123c2ae3db27516ae6650619d3437f21d91fc7dded39fab17fe2718a63d0610552"], &(0x7f0000000280)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0xe4, '\x00', 0x0, @fallback=0x33, r8, 0x8, &(0x7f0000000440)={0x26, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x3, 0x3, 0x7}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000001840)=[r13, 0xffffffffffffffff, 0x1, r14], 0x0, 0x10, 0x667}, 0x94)

9.031815245s ago: executing program 5 (id=3635):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
llistxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/15, 0xf)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
unshare(0x8000000)
shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0xb5092cdcd9010528, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f024})
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}})
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
memfd_create(0x0, 0x3)
socket$tipc(0x1e, 0x2, 0x0)

7.14117188s ago: executing program 5 (id=3640):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
preadv(r0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000500)=""/94, 0x5e}], 0x2, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x0, 0x3})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024082c1dc42b17608af030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a00"], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000002008000000fc000000000000000000000000f90000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000090000000000000000000000020000000000000300000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000005a8efc2feb70df70dc000000000000"], 0xb8}}, 0xc844)

7.06732748s ago: executing program 4 (id=3641):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000000feffffff18acb600", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000010000008520000003000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x3}, {0x0, 0x5, 0xf, 0x9}]}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f", @ANYBLOB=',ro', @ANYBLOB=',gro'])
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.876231907s ago: executing program 5 (id=3644):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffb000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = ioctl$KVM_GET_STATS_FD_cpu(r4, 0xaece)
read$FUSE(r5, &(0x7f0000002f00)={0x2020}, 0x2020)
setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f00000002c0)=0x5, 0x4)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000006c0)=[{0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r7, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8d0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c004000030a010200000000000000000100000a0900010073797a30000000000900030073797a30000000005c1b0000060a010400000000000000000100000008000b4000000000340004803000018008000100636d700024000280d710000380090001002a8e0008000140000000080900010073797a300000000014000000110001000000000000000000070000"], 0xd0}}, 0x0)

6.76478911s ago: executing program 2 (id=3645):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
clock_gettime(0x0, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
timer_settime(r1, 0x0, &(0x7f0000000340)={{r2, r3+10000000}}, 0x0)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8240, 0x0)
read$alg(r4, &(0x7f0000000240)=""/4096, 0xfffffdef)

6.680777105s ago: executing program 5 (id=3646):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000000feffffff18acb600", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000010000008520000003000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x1], &(0x7f0000000340)=[{0x2, 0x2, 0xf, 0x3}, {0x0, 0x5, 0xf, 0x9}]}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6.233933458s ago: executing program 5 (id=3650):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00')
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r2 = socket(0x1, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x97}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)
mknodat(r0, &(0x7f0000000000)='./file0\x00', 0x2, 0x100)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

6.070177001s ago: executing program 5 (id=3652):
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) (async)
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000040)=0xfffffffc) (async)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)) (async)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (rerun: 32)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)

6.068047978s ago: executing program 4 (id=3653):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x2, 0x3, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x800)
syz_emit_ethernet(0x8f, &(0x7f0000000140)={@local, @multicast, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x0, 0x0, 0x2}}, {@llc_tr={0x11, {@llc={0xf8, 0x4, "c3", "1dae5b30f6814f31cc9d2decb8df7cc6e87ee2d2cbcd783467f5296b18e34c57856dc144ee3a121e271280de4a2cec2c472cc08ca6372b5030f1c5e8fc4f33f98d697264e80e2bd5b31248cf07d5aabd7f4f5f7f94d74a95b5d18bd5475e5e597131a91dac7d68d49ec0e0972275621b6bb8ab1ff72c"}}}}}, &(0x7f0000000080)={0x1, 0x4, [0xe58, 0xfe6, 0xe12, 0x67b]})
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000100)={r2}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000100)=0x10)
timer_create(0x2, 0x0, &(0x7f0000000480))
timer_create(0x0, 0x0, &(0x7f0000000480)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000300)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
timer_delete(r3)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x1, 0x1)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000480)=@sack_info={0x0, 0x103, 0x7}, 0xc)

5.812193007s ago: executing program 2 (id=3654):
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xfa, 0x40, 0x66, 0x8, 0x55aa, 0xa103, 0x5049, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7f, 0x0, 0x0, 0x6e, 0xa0, 0xdf, 0x3}}]}}]}}, 0x0)
syz_usb_connect$uac1(0x2, 0x86, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xe7, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0xf, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2}, [@feature_unit={0xd, 0x24, 0x6, 0x5, 0x4, 0x3, [0x9, 0x6, 0x9]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x64, 0x4, 0x31, {0x7, 0x25, 0x1, 0x83, 0xfd, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xc4, 0x1, 0x8, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x8, 0x2, {0x7, 0x25, 0x1, 0x82, 0x3, 0x1000}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0xff, 0x89, 0x1, 0x8, 0x4}, 0xc0, &(0x7f0000000140)={0x5, 0xf, 0xc0, 0x6, [@ptm_cap={0x3}, @generic={0x7b, 0x10, 0x4, "88f9d309dd50dc45163f513a3bcbd8c4894991dee323806d635a9987f78da33f3f1cad34b5f60d875424d75099a0685ffaf155d66f381aebd890bbb31e2600d09dc31ab7ce0e844c438277c8e27ddedbd80f01dd2b718c80edf5052c79c1579d6c5c96fd804c4a0fc19078f9394319bfc1a9f587c017e52b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x0, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x4, 0x40, 0x9, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "6a411ee360ee444dbaeb725cb581c7a1"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "64b803640b1e597798cb9a9ab7138c00"}]}, 0x7, [{0x33, &(0x7f0000000200)=@string={0x33, 0x3, "8d1c2b6e44b5205ff38a7776c4312f4e7d433a78cebf6b7975ff7722f72c78aedc623ca2666669579040f27d6b1da00088"}}, {0x92, &(0x7f0000000240)=@string={0x92, 0x3, "75054dec2d30f394708609096694cb16066fc45a520df7cd6ddf75caa9b3cd3fbc0b6a2bb1fedfe09c8365217c19874ea8cb530ae1cd9a3e10ac3bddce5886ff0269548b9621914e542b30a06d9ff7daa6711d28b58e1a882359f0371516f0fd0d2ef3187a26d8dfcd886a42baf63b22c40fff6862c8f5a5275ed44b4be017dbc2571438c263104524ea187d7afc0728"}}, {0x4c, &(0x7f0000000300)=@string={0x4c, 0x3, "f74c3a510574f2e7c23384b96111db22fa1a451230507d1a2d8a5eac2afd40519289f5773961a77b8fae5c73d74d8c33342c94da6cf08890ccd6949ae303d2fccd3f33346fe62929eec3"}}, {0x9a, &(0x7f0000000380)=@string={0x9a, 0x3, "7758c21d3cfa88d61b1fbb7448aadaf3552be0dd22d057bf6606f6492cedb4b59f5c0b5612119a953eae70f6a34a75593f121a3d5911b8df4583bfde13bfced51ab0716aedee7c2e822dfee82bc5ec724c6623a1a4680b5ff485f6d72aeee2935b1b086616d536856fad3baa7f70cdaf241d181ff2936b4c4da155ede82dc541000528baf18254e28deb852917f80784d42d44ffe09d262e"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x406}}, {0x72, &(0x7f0000000480)=@string={0x72, 0x3, "73840236e34c280b886842440a3eeedcd19cc2577514787c547313e49d35f5308f5411c61de86e824b6ae4cde8e291d993d3373f435f2059e080766953bfc45eb4d5a6c401bb6160b8be0a4ee7326cde62754a6c04dd1a321e5ce61908d9900114a5d0dd7d9da7b4a858c51fe6bd5fbc"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x2009}}]})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x22eb}, @val={0x3, 0x0, 0x3ff, 0xfe00, 0x1, 0x7}, @eth={@local, @empty, @void, {@generic={0x88f5, "ec602ebb2ed511c738a9679ebce9b649aeb0b0cd5cfadf17b288a6fc9dd1e118b85c5dac88174ff8d2959a674dfd955b2a41348223b982b40ee18245bfa247e4c06e15fa1c344f7b69bc1fbfe0053cd3270ef2bccedb2bd03c30"}}}}, 0x76)

5.644000519s ago: executing program 4 (id=3656):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000001c0)={0x5, 0x8})
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5d114b6e, 0x12, r3, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0xf, 0x4})
sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

5.479927547s ago: executing program 4 (id=3658):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
r2 = request_key(&(0x7f0000000180)='rxrpc\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='!*-*\'\x00', 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r4 = openat$urandom(0xffffff9c, &(0x7f0000003580), 0x80100, 0x0)
pread64(r4, 0x0, 0x0, 0xa)
fcntl$lock(r3, 0x6, &(0x7f0000000140)={0x0, 0x4, 0x400000000008, 0xf})
io_setup(0x2, &(0x7f0000000340)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r1, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x2}])
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2)
mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
recvmmsg(r8, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f0000000240)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f0000000480)=""/144, 0x90}, {&(0x7f00000002c0)=""/48, 0x30}], 0x2, &(0x7f0000000540)=""/150, 0x96}, 0x1000}], 0x2, 0x4c42bb4f92, 0x0)
shutdown(r8, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x19, 0x1, 0x1, "000000000000000405f13ab2871f6f9ecbc053ffff39361e97000000001b0200", 0x59565955})
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io(r6, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d096471908"], 0x0, 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, r7, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r9 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r9, 0xd01c4813, &(0x7f00000000c0)={0x1, 0x100, 0x3e082604, 0x142, 0xfffffffd, 0x400001})
keyctl$set_timeout(0xf, r2, 0x2)
ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='pimreg\x00'})
ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'caif0\x00', {0x2}})

5.395273176s ago: executing program 3 (id=3659):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
unshare(0x2c000680)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000200)=r6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000002c80)}, 0x50)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x7000000)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x0, 0x0, 0x4e23, 0xfffc, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) (fail_nth: 1)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x2080483)
pwritev(r1, 0x0, 0x0, 0x0, 0x9)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8001004, 0x9, 0x7ff, 0x80b}})

4.35206596s ago: executing program 2 (id=3660):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
unshare(0x2c000680)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000200)=r6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, &(0x7f0000002c80)}, 0x50)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x7000000)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x0, 0x0, 0x4e23, 0xfffc, 0xa, 0x10}, {0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffa, 0x4, 0x3}, 0x4, 0x6e6bb5, 0x0, 0x1, 0x3, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4)
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x2080483)
pwritev(r1, 0x0, 0x0, 0x0, 0x9)
ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8001004, 0x9, 0x7ff, 0x80b}})

4.343594554s ago: executing program 3 (id=3661):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1]}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4.115580581s ago: executing program 3 (id=3662):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{0x0, 0x30}], 0x1}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080))
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000001c0)={0xf, {"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", 0x1000}}, 0x1006)
r1 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001240)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000, 0x0, 0x0, 0x18, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000000004000"}})

3.70038158s ago: executing program 3 (id=3663):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap$usbfs(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x120051, 0xffffffffffffffff, 0x56)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x8, 0x0, 0x0)
r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0xc, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)

3.125871294s ago: executing program 2 (id=3664):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000400000000000000feffffff18acb600", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000010000008520000003000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], 0x0, 0x9491426, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x4, 0x7, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x1]}, 0x94)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.864859787s ago: executing program 2 (id=3666):
read$FUSE(0xffffffffffffffff, &(0x7f0000001880)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
timer_create(0x0, &(0x7f00000004c0)={0x0, 0xfffffffe, 0x4, @tid=r0}, &(0x7f0000000500)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000540)={{0x77359400}, {0x77359400}}, &(0x7f0000000580))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000980)={0x2, @pix_mp={0x80, 0x81, 0x50565559, 0x7, 0xb, [{0x8f, 0x1}, {0xfffffff7, 0x9}, {0x5, 0x5}, {0x0, 0x4}, {0x8, 0x9d8}, {0x10, 0x4}, {0x1}, {0xfffff000, 0xffffffff}], 0xcb, 0x9, 0x8, 0x4, 0x4}})
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f0000000fc0)=[{{&(0x7f0000000140)=@in, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=""/234, 0xea}], 0x1, &(0x7f0000000440)=""/88, 0x58}, 0x9}, {{&(0x7f00000005c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000240)=""/27, 0x1b}, {&(0x7f00000002c0)=""/18, 0x12}, {&(0x7f00000038c0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/192, 0xc0}, {&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000780)=""/34, 0x22}, {&(0x7f00000007c0)=""/148, 0x94}, {&(0x7f0000000880)=""/239, 0xef}, {&(0x7f0000000a80)=""/246, 0xf6}, {&(0x7f0000000b80)=""/165, 0xa5}], 0xa, &(0x7f0000000d00)}, 0x5}, {{&(0x7f0000000d40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000f80)=[{0xffffffffffffffff}, {&(0x7f0000000dc0)=""/69, 0x45}, {&(0x7f0000000e40)=""/249, 0xf9}, {&(0x7f0000000f40)=""/2, 0x2}], 0x4}, 0x4}], 0x3, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x4, 0x0, 0x9, 0x0, 0xfffffdfffffffffd, 0xfa10, 0xffffffff}, 0x0)
rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0)
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0)
mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil)
close_range(r6, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
openat$snapshot(0xffffff9c, 0x0, 0x48c1, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x0, {0x7, @win={{0x3, 0x1, 0x0, 0xd}, 0x1, 0xffffff80, &(0x7f0000000500)={{0x3, 0x6c07, 0x3ff, 0xfffffffb}}, 0x6, 0x0, 0x6}}, 0xfffffffd})
socket$nl_generic(0x10, 0x3, 0x10)

2.469863753s ago: executing program 0 (id=3668):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x158, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x30000}, [@IFLA_LINKINFO={0x124, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x114, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x7c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xd, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xa425, 0xe}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x41c}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xffffff81, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x802, 0x72e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x95a}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x64, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xfffffff7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x81}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1}}, @IFLA_VLAN_QOS_MAPPING={0x3c, 0x1, {0x3bb, 0x9de7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x9}}]}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x158}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000001000030500000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="40000000002200002c0012800c0001006d6163766c616e001c00028006000200a4ed0000100005800a0004000180c200000300000a000100aa"], 0x58}}, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) (async)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f00000002c0)={0x1, [{0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x1, 0x18, 0xb, &(0x7f0000000100)="3ae870"}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x1, 0x0, 0x7ff, 0x0}, {0x3, 0x0, 0x80000006, 0x0}, {0x1, 0x0, 0x8, 0xfffffffffffffffd}, {0x2, 0x0, 0xfffffff9, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x5da2, 0x0}, {0x1, 0x8, 0xd1a5, &(0x7f0000000700)="d2"}, {0x2, 0x0, 0x9a93, 0x0}, {0x3, 0x0, 0x818, 0x0}]}) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.311878983s ago: executing program 0 (id=3669):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103302)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
r3 = semget(0x3, 0x7, 0x208)
semop(r3, &(0x7f0000000000)=[{0x0, 0x7fff, 0x1800}, {0x3, 0x8001}], 0x2)
semtimedop(r3, &(0x7f00000000c0)=[{0x0, 0x7, 0x1000}], 0x1, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3})
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000080)=0xfffffff8)
ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x6, 0x0, @scatter={0x18, 0x3, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f00000000c0)="ae08eabc877cce69aad499c993f2632aa94507177cca43943c4ec7783f690f236f406fded6891d0ad3247fef76692b21466bbe85fd85ae09f2bd5e784b", 0x3d}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)

2.208334169s ago: executing program 4 (id=3670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
unshare(0x24020400)
pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffefffffffffffe, 0xe, 0xfffffffffffffffd, 0x100000001, 0x4, 0x5, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
getsockname$packet(r1, &(0x7f00000002c0), &(0x7f00000003c0)=0x14)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000b06010800000000000000000600000205000100070000001c0007801800018014000240ff0200000000000000000000000000010900020073797a31000000000c5ec1cce96ec333f7059ffe25621bf9830abeb566867d57561809ed5b511a1608eb0ea52b5f4e75128bfd42ad317d6eb84278ac127384f133d133898d9aa40b5fe719ab115de5c510540a8ef8"], 0x44}, 0x1, 0x0, 0x0, 0x20008041}, 0x8190)

2.138686574s ago: executing program 0 (id=3671):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x50}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x5}]}}}]}, 0x50}}, 0x0)
syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402) (async)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x402)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x2, &(0x7f0000000240)={0x93, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}}) (async)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x0, 0x18, 0x2, &(0x7f0000000240)={0x93, "a52422ffd60775c221c4031d467d6648a97569b7d49cc4492d050600000000ff00"}})
r2 = syz_io_uring_setup(0x4d5, &(0x7f0000000480)={0x0, 0x404525, 0x81, 0x2, 0x12a}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r5=>r1, {0x51}}, './file0\x00'})
ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000613000/0x4000)=nil}) (async)
ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000613000/0x4000)=nil})
r6 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0x8, 0xfa04, 0x0, 0x6c02, 0x1f0, 0x194, 0x194, 0x1f0, 0x194, 0x3, 0x0, {[{{@ip={@empty, @broadcast, 0xff000000, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x2}, 0x0, 0xa0, 0x70, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[0x3], [], 0x0, 0x8, 0x8, 0xb}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1, 0xffffffff, 0xff000000, 'pim6reg1\x00', 'ipvlan0\x00', {}, {}, 0x1, 0x0, 0x23}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@addrtype={{0x30}, {0x218, 0x11}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x6, 0x0, 0x3, 0x4, 0x2], 0x1, 0x6}, {0x0, [0x3, 0x5, 0x6, 0x2, 0x0, 0x6], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r2, 0x0, 0x0, 0x1, 0x1})
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
io_uring_enter(r2, 0x22d8, 0x20, 0x9, 0x0, 0x0)
r7 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x5, 0x0, &(0x7f0000000000)) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x5, 0x0, &(0x7f0000000000))
socket$inet6_sctp(0xa, 0x1, 0x84)

2.10633805s ago: executing program 4 (id=3672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x410480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000101ac1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
timerfd_settime(r5, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'})
landlock_create_ruleset(0x0, 0x2f, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r6}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x401, r6, 0x0, 0x100000000000000}, 0x38)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x480)
socket$igmp6(0xa, 0x3, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffaaaaaa86dd6010104000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e220000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5470000090780000"], 0x0)
syz_emit_ethernet(0x5c, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6000000000260600fe8000000000000000000000000000bbfe800000000000000000000000000016110004002a480100080000000000000000004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002001190780000a05c85fb44edc34d614663a8e3249406f918e7b302eb2bb731f04d5ed64f91cfd9031b31ded427fe77d17000572a7c73677a314e3e56f3120d43e86b2aba6139c13edcaec81eb098c2ed859269ca7b661f90e6a8576000"/108], 0x0)
inotify_init1(0x80000)
r8 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000080)={@remote, 0xfb3, 0x2, 0x0, 0x1, 0x1, 0x8}, 0x20)
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0f3166b842000f00d864660f38f61bb9a00000000f01c53e0f070f01ca0f0130670f01c2f2360f217a0f07", 0x2b}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)

2.012029509s ago: executing program 3 (id=3673):
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802)
ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0000f2"])
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$midi(0x0, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pipe2$watch_queue(0x0, 0x80)
prctl$PR_GET_ENDIAN(0x13, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f0000000680)={0x9, {"a2e3ad214fc752f91b29090942f70e0dd038e7ff7fc6e5539b324c078b089b34313b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd736d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25987969a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e89198f595dc4d470e01002a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d0db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008094}, 0x4)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="380000000102010200"], 0x38}}, 0x0)
recvmmsg(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/180, 0xb4}, {&(0x7f0000000440)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000003d40)=""/4097, 0x1001}, {&(0x7f00000016c0)=""/217, 0xd9}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/4120, 0x1018}, {&(0x7f0000000240)=""/75, 0x4b}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}, {{&(0x7f0000000600)=@isdn, 0x80, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/98, 0x62}], 0x1}, 0xc}], 0x9, 0x20, 0x0)

1.987294213s ago: executing program 0 (id=3674):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00')
writev(r0, &(0x7f0000003740)=[{&(0x7f0000001440)='deny;', 0x5}], 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000300)={0xf, 0x4, 0x3})
personality(0x400000)
unshare(0x2c020400)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
pwritev2(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="1204e8733fa6c0f882298d2a8da393d95d8a4e034c9b91cf4e51d0c2c9fa5fe7206da05974e8938751f1b9267e3bb7ff7064ec4f3f82dc8a9a1b4ac43bd3ae75303f2d7be381511254173285879d6c053c70a26fdd3e24d5defebe7646702fad33d7c4414dd30361bf2847662f765f66c04095c34af0069320bc3976acf9815c67", 0x81}, {&(0x7f00000000c0)="0c6c2b27d5b71e68340d5679e480922409357843040eaca48cdaae44e21c461a2a7584ca71433b0d9a54b9417f1f14114374392b7a5ef0f721869426bb7a0a0a7e3ec3f7333001de0652c8d83d6feaf81a03017c59864afdf0df7c5e82c8a6dc87c9e6b05b68a0bde552e5fac3c66ab7da093a03a4ff70509052a88e36821a1a3b253de84e881808115a88732cdb6c7cdcb2d664784f2e8c7aa0358545bd4b452eb8b33d27f528d7d4ef5f2bff748737b1cf980c42506a6c679d3a", 0xbb}], 0x2, 0x3, 0x6, 0x14)
sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x2, 0xe, 0x9, 0xf, 0x13, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_ident={0x2, 0xa, 0xe447, 0x0, 0x5}, @sadb_x_nat_t_type={0x1, 0x14, 0x1}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e23, 0x3, @mcast2, 0x9}, @in={0x2, 0x4e21, @broadcast}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e23, @broadcast}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x4, 0x1, 0x72, 0x1, 0x20000001}]}, 0x98}}, 0x40080d1)
getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000700)={{0x1c4, 0xc, 0x0, 0x281, 0x22b, 0x81, 0x382, 0x4}, "bfb6bcef5410823bacacda76a7fbe9b788341b74ec51a8510e954bbb8ad4b5d4b2ea9ea32a4323d31af18c270ec2ee3fb92730861012dcce653ca04bdcfe62419075be31715f3995bcb1a14c6bf77820946c441246a720a2415449b94303ac592f5c36261fe0c8bb1faf72f83aadebba8692c6003902c5787871", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x59a)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0))

1.879443341s ago: executing program 2 (id=3675):
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0585605, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x3c)
pipe(0x0)
socket$pppoe(0x18, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x40900)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000040)=0x3)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52", 0xc)
socket$inet6(0xa, 0xa, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
r5 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x80108907, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408048000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
r8 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000400)=r7, 0x4)
sendmsg$kcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="d80000001a0081044e81f782db4cb904021d0800fe0055a1150015000200142603600e12080005007a010401a8001600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457fffffffffffff0001bace8017cbec4c2ee5a7cef4090000001fb79164d322fe7c9f8775d3f2d5d0683f5aeb4edbb57a5025ccca9e00360db785262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a94100000000000000000000000000d4da15", 0xd8}], 0x1}, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)

1.66018809s ago: executing program 0 (id=3676):
r0 = socket$inet6(0xa, 0x1, 0x84)
rt_sigpending(&(0x7f0000000000), 0x8)
bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2000790780003"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

1.321002525s ago: executing program 0 (id=3677):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f00000002c0)=ANY=[], 0x2a)
syz_usb_control_io$printer(r0, 0x0, 0x0)
socket$inet(0x10, 0x3, 0x0)
io_setup(0x5, 0x0)
close_range(r1, r2, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000680), 0x7ff, 0x2)
ppoll(&(0x7f0000000040)=[{r3, 0x5}], 0x1, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000500)={0x0, 0x4005, 0x4, {0x3, @win={{0xfffffffe, 0xffffffff}, 0x3, 0xfffffffb, 0x0, 0x0, 0x0}}, 0x2})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00160600000020fc94453a41f1b4c7145e9d3f7a92f20c7eac6e5892e6891113"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000200)={0x2c, &(0x7f0000000000)={0x20, 0x9, 0x10, {0x10, 0x9, "3d4f9a28d8e7cbac1a5a41e2d006"}}, &(0x7f0000000080)={0x0, 0x3, 0x49, @string={0x49, 0x3, "5427cea737a3853ff895ffa581c0948e37508f6863608c190df114e4c79209d9c3cce289d02cb6eb7fc9f1b18f2414f8c0e487ad4d43f5cf1d70483cc559ae3f0520b10f002933"}}, &(0x7f0000000100)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x8, 0x9, 0xb, "148ab067", "4b27bd28"}}, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x8, 0x5, 0x3, 0x4, 0x5}}}, &(0x7f00000008c0)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="2015ad000000e9962ca454f15f0c9fc95ed8602df42f5c306f24f97d9f25b95448959109980a8989da1d56d00daeb5462b350c8e425d8b658f730fd1dbdb7ef37b13cad384ba8eaddf2cdc88be5cec4125996b84d7e5a533d4afc65c88ec590b84aaa95989bb70ddb2bf3740c1c4d35874a935b31952ee77ceb13321d134a4b4d1066d491c413c014cc394fbc16af7faade2ebb15d2476759681d6bf9eaf9e9da2055d1f4e82ff8a611950302eb3184f41bdca"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x8, 0x40}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0xa257}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0xff}, &(0x7f0000000600)={0x40, 0xb, 0x2, "9cf3"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0xfffc}, &(0x7f0000000700)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000740)={0x40, 0x17, 0x6}, &(0x7f0000000780)={0x40, 0x19, 0x2, "7793"}, &(0x7f00000007c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x1c, 0x1, 0xf8}, &(0x7f0000000840)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000880)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io(r0, 0x0, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff000000050018"], 0x4c}}, 0x14)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000002c0)={0x0, 0x1, 0x2, "8d8c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 3 (id=3678):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x4000000) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7732, 0x100, 0x0, 0x34f}, &(0x7f0000000600)=<r3=>0x0, &(0x7f00000005c0)=<r4=>0x0) (async)
r5 = socket(0x10, 0x3, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', <r7=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) (async)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0)
r10 = getpid()
ptrace$setregset(0x4205, r10, 0x200, &(0x7f0000000000)={&(0x7f0000000640)="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", 0x1000})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) (async)
r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x101440, 0x0)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f00000000c0)=0xd) (async)
r13 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3578, 0x0, 0x0, 0xb2}, &(0x7f0000000080)=<r14=>0x0, &(0x7f0000000100)=<r15=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r14, r15, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async)
io_uring_enter(r13, 0x47f6, 0x0, 0x4, 0x0, 0x0)
ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000000000)) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0400}]})

kernel console output (not intermixed with test programs):

47526][  T982] usb 3-1: USB disconnect, device number 111
[  754.291138][  T982] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  754.329658][  T982] option 3-1:0.0: device disconnected
[  754.614331][T16643] Bluetooth: hci2: command 0x0406 tx timeout
[  754.789767][T16696] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3187'.
[  754.954370][  T982] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[  755.159214][  T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  755.204775][  T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  755.235827][  T982] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  755.250153][  T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.264857][  T982] usb 3-1: config 0 descriptor??
[  755.388473][ T5836] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  755.469945][T16715] program syz.5.3190 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  755.585677][ T5836] usb 1-1: Using ep0 maxpacket: 16
[  755.608057][ T5836] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  755.633133][ T5836] usb 1-1: config 1 has no interface number 0
[  755.650404][ T5836] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  755.681035][ T5836] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  755.717092][  T982] arvo 0003:1E7D:30D4.0026: report_id 2771978158 is invalid
[  755.767187][ T5836] usb 1-1: config 1 interface 105 has no altsetting 0
[  755.774982][  T982] arvo 0003:1E7D:30D4.0026: item 0 4 1 8 parsing failed
[  755.778040][ T5836] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  755.809169][  T982] arvo 0003:1E7D:30D4.0026: parse failed
[  755.817041][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.830835][ T5836] usb 1-1: Product: syz
[  755.836919][ T5836] usb 1-1: Manufacturer: syz
[  755.841824][ T5836] usb 1-1: SerialNumber: syz
[  755.841905][  T982] arvo 0003:1E7D:30D4.0026: probe with driver arvo failed with error -22
[  755.878975][T16711] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  755.887279][T16711] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  755.935607][  T982] usb 5-1: USB disconnect, device number 111
[  755.962875][  T982] cdc_eem 5-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.4-1, CDC EEM Device
[  755.977134][T16691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  756.057301][T16691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  756.109068][ T5836] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22
[  756.339154][T16728] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3194'.
[  757.012058][T16748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3189'.
[  757.205655][  T982] usb 5-1: new full-speed USB device number 112 using dummy_hcd
[  757.390062][  T982] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  757.406485][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  757.441381][  T982] usb 5-1: Product: syz
[  757.459167][  T982] usb 5-1: Manufacturer: syz
[  757.505995][  T982] usb 5-1: SerialNumber: syz
[  757.543134][T16760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3200'.
[  757.652561][  T982] usb 5-1: config 0 descriptor??
[  757.912937][  T982] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  758.032247][T16766] vxcan2: entered allmulticast mode
[  758.270229][ T5913] usb 1-1: USB disconnect, device number 125
[  759.144232][ T5913] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  759.297102][ T5913] usb 4-1: Using ep0 maxpacket: 32
[  759.318227][ T5913] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  759.328912][ T5913] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  759.356154][ T5886] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  759.393508][ T5913] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  759.423966][ T5913] usb 4-1: config 1 has no interface number 0
[  759.474185][ T5913] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  759.514361][ T5913] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  759.546503][ T5886] usb 1-1: Using ep0 maxpacket: 32
[  759.556772][ T5913] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  759.576351][ T5886] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  759.591042][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.599482][ T5886] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  759.624278][ T5886] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  759.659695][ T5913] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  759.671553][ T5886] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  759.693753][ T5886] usb 1-1: Product: syz
[  759.717612][ T5886] usb 1-1: Manufacturer: syz
[  759.749561][ T5886] hub 1-1:4.0: USB hub found
[  759.859849][ T5913] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  759.943415][ T5886] hub 1-1:4.0: config failed, hub has too many ports! (err -19)
[  759.954318][ T5836] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  760.071734][T16782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.080758][T16782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  760.095882][ T5836] usb 6-1: device descriptor read/64, error -71
[  760.156281][T16789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  760.165555][  T982] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  760.174914][T16789] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  760.179895][  T982] usb 5-1: USB disconnect, device number 112
[  760.364509][ T5836] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  760.504332][ T5836] usb 6-1: device descriptor read/64, error -71
[  760.614848][ T5836] usb usb6-port1: attempt power cycle
[  760.936078][ T5886] snd_usb_pod 4-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  760.954500][ T5836] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  761.005099][ T5836] usb 6-1: device descriptor read/8, error -71
[  761.244231][ T5836] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  761.264215][   T24] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  761.272808][ T5836] usb 6-1: device descriptor read/8, error -71
[  761.384603][ T5836] usb usb6-port1: unable to enumerate USB device
[  761.425367][   T24] usb 5-1: Using ep0 maxpacket: 16
[  761.435109][   T24] usb 5-1: config 1 interface 0 has no altsetting 0
[  761.445405][   T24] usb 5-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.40
[  761.458323][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  761.469400][   T24] usb 5-1: Product: syz
[  761.474993][   T24] usb 5-1: Manufacturer: 丏錦㊙엯渇뽡쏄ㆅ⻪ﰼ苪䉁Ͼ䄙둱媟缜Ⅾጲ⠤櫟쒔萏ᔦ蛱톮냲ᛍ鿻鿐䮌㫀鯨⩆牢餉꟬角쳿킆祱』캂䥽䋟윕줺愓ຯ㛨氩刜Ꮏ殥筤搸꼃ჹຒ뚷錓粦衠᝽⏧혐蓧唵痢溄
[  761.507623][   T24] usb 5-1: SerialNumber: syz
[  761.631846][T12694] usb 3-1: USB disconnect, device number 112
[  761.748673][   T24] usbhid 5-1:1.0: can't add hid device: -71
[  761.756599][   T24] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  761.781859][   T24] usb 5-1: USB disconnect, device number 113
[  761.997039][T16822] ALSA: mixer_oss: invalid OSS volume 'IG'
[  762.006822][ T5886] usb 4-1: USB disconnect, device number 119
[  762.026805][ T5886] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  762.494276][ T5886] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  762.573886][ T5913] usb 1-1: reset high-speed USB device number 126 using dummy_hcd
[  762.610205][ T5913] usb 1-1: device reset changed ep0 maxpacket size!
[  762.646171][ T5913] usb 1-1: USB disconnect, device number 126
[  762.756591][ T5886] usb 4-1: Using ep0 maxpacket: 16
[  762.793599][ T5886] usb 4-1: config 0 has an invalid interface number: 251 but max is 0
[  762.837449][ T5886] usb 4-1: config 0 has no interface number 0
[  762.875510][ T5886] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  762.894323][ T5886] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  762.936534][ T5886] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  762.991904][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  763.027003][ T5913] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  763.078515][ T5886] usb 4-1: Product: syz
[  763.097828][ T5886] usb 4-1: Manufacturer: syz
[  763.131314][ T5886] usb 4-1: SerialNumber: syz
[  763.204390][ T5913] usb 1-1: Using ep0 maxpacket: 8
[  763.249298][ T5913] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  763.274253][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  763.342148][ T5886] usb 4-1: config 0 descriptor??
[  763.369230][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  763.393181][T16830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  763.402815][T16830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  763.429516][ T5913] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  763.463164][ T5913] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  763.514428][  T982] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  763.531964][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  763.614303][T16830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  763.621998][T16830] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  763.654721][  T982] usb 6-1: device descriptor read/64, error -71
[  763.845225][ T5913] usb 1-1: GET_CAPABILITIES returned 0
[  763.850848][ T5913] usbtmc 1-1:16.0: can't read capabilities
[  763.954323][  T982] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  764.048010][T16841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.071323][T16841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  764.087727][  T982] usb 6-1: device descriptor read/64, error -71
[  764.160070][   T24] usb 1-1: USB disconnect, device number 127
[  764.225341][  T982] usb usb6-port1: attempt power cycle
[  764.337213][T16846] xt_TCPMSS: Only works on TCP SYN packets
[  764.584262][  T982] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  764.591966][ T5913] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  764.624954][  T982] usb 6-1: device descriptor read/8, error -71
[  764.774271][ T5913] usb 5-1: Using ep0 maxpacket: 32
[  764.791751][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  764.815382][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  764.837950][ T5913] usb 5-1: New USB device found, idVendor=ae6f, idProduct=79f4, bcdDevice=8f.99
[  764.855256][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  764.883347][ T5913] usb 5-1: Product: syz
[  764.888028][  T982] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  764.904236][ T5913] usb 5-1: Manufacturer: syz
[  764.915758][ T5913] usb 5-1: SerialNumber: syz
[  764.925040][  T982] usb 6-1: device descriptor read/8, error -71
[  764.947626][ T5913] usb 5-1: config 0 descriptor??
[  764.964205][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  764.964224][   T30] audit: type=1326 audit(1760126214.705:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  765.056208][   T30] audit: type=1326 audit(1760126214.705:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  765.085079][  T982] usb usb6-port1: unable to enumerate USB device
[  765.093163][   T30] audit: type=1326 audit(1760126214.705:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  765.175071][   T30] audit: type=1326 audit(1760126214.755:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  765.226211][   T30] audit: type=1326 audit(1760126214.755:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  765.256320][   T30] audit: type=1326 audit(1760126214.755:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16860 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1bde7c1785 code=0x7ffc0000
[  765.279125][   T30] audit: type=1326 audit(1760126214.785:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  765.302421][   T30] audit: type=1326 audit(1760126214.785:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  765.353199][   T30] audit: type=1326 audit(1760126214.785:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  765.389340][ T5886] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  765.399596][ T5886] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  765.411273][   T30] audit: type=1326 audit(1760126214.785:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16858 comm="syz.0.3223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  765.442237][   T24] usb 5-1: USB disconnect, device number 114
[  765.469039][ T5886] asix 4-1:0.251: probe with driver asix failed with error -71
[  765.506807][ T5886] usb 4-1: USB disconnect, device number 120
[  765.854196][ T5836] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[  765.854246][  T982] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  765.997073][T16880] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  766.025812][T16880] syzkaller0: entered promiscuous mode
[  766.031644][T16880] syzkaller0: entered allmulticast mode
[  766.056480][  T982] usb 1-1: Using ep0 maxpacket: 16
[  766.073637][ T5836] usb 3-1: Using ep0 maxpacket: 32
[  766.085170][  T982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  766.113152][T16880] tipc: Resetting bearer <eth:syzkaller0>
[  766.121700][  T982] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  766.135644][  T982] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  766.150588][ T5836] usb 3-1: config 0 has an invalid interface number: 235 but max is 0
[  766.160088][  T982] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  766.169585][  T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.178140][T16879] tipc: Resetting bearer <eth:syzkaller0>
[  766.184005][ T5836] usb 3-1: config 0 has no interface number 0
[  766.185711][  T982] usb 1-1: Product: syz
[  766.196514][  T982] usb 1-1: Manufacturer: syz
[  766.201441][  T982] usb 1-1: SerialNumber: syz
[  766.215840][  T982] usb 1-1: config 0 descriptor??
[  766.222739][T16870] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  766.236424][ T5836] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47
[  766.265198][T16879] tipc: Disabling bearer <eth:syzkaller0>
[  766.273211][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.318651][  T982] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  766.326281][  T982] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  766.333403][  T982] mcba_usb 1-1:0.0 can0: failed tx_urb -90
[  766.343613][  T982] mcba_usb 1-1:0.0 can0: Failed to send cmd (169)
[  766.343939][ T5836] usb 3-1: Product: syz
[  766.369971][  T982] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected
[  766.454542][ T5836] usb 3-1: Manufacturer: syz
[  766.499016][ T5836] usb 3-1: SerialNumber: syz
[  766.565703][ T5836] usb 3-1: config 0 descriptor??
[  766.723257][T16899] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.754416][  T982] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  766.763541][T16899] bridge_slave_1: left allmulticast mode
[  766.814548][T16899] bridge_slave_1: left promiscuous mode
[  766.860074][T16899] bridge0: port 2(bridge_slave_1) entered disabled state
[  766.895930][ T5836] kaweth 3-1:0.235: Firmware present in device.
[  766.956512][T16899] bond0: (slave bond_slave_0): Releasing backup interface
[  767.013389][T16899] bond0: (slave bond_slave_1): Releasing backup interface
[  767.025074][  T982] usb 4-1: Using ep0 maxpacket: 8
[  767.042732][  T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  767.065915][ T5836] kaweth 3-1:0.235: Statistics collection: 85b004
[  767.095384][ T5836] kaweth 3-1:0.235: Multicast filter limit: 0
[  767.103010][T16899] team0: Port device team_slave_0 removed
[  767.110117][  T982] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  767.121649][  T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  767.137935][  T982] usb 4-1: Product: syz
[  767.142480][ T5836] kaweth 3-1:0.235: MTU: 0
[  767.162033][  T982] usb 4-1: Manufacturer: syz
[  767.165176][T16899] team0: Port device team_slave_1 removed
[  767.173934][  T982] usb 4-1: SerialNumber: syz
[  767.182568][ T5836] kaweth 3-1:0.235: Read MAC address e5:c4:a7:b9:29:a3
[  767.192421][  T982] usb 4-1: config 0 descriptor??
[  767.200531][T16899] batman_adv: batadv0: Removing interface: batadv_slave_0
[  767.219634][  T982] cdc_phonet 4-1:0.0: skipping garbage
[  767.227769][  T982] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22
[  767.242474][T16899] batman_adv: batadv0: Removing interface: batadv_slave_1
[  767.273471][T16899] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  767.457525][T16890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.487032][T16890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.516222][T16890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  767.534951][T16890] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  767.668498][ T5836] kaweth 3-1:0.235: Error setting receive filter
[  767.678052][ T5836] kaweth 3-1:0.235: probe with driver kaweth failed with error -5
[  767.975363][ T5493] mcba_usb 1-1:0.0 can0: bit-timing not yet defined
[  768.013724][ T5836] usb 3-1: USB disconnect, device number 113
[  768.824637][  T982] usb 1-1: USB disconnect, device number 2
[  768.835732][  T982] mcba_usb 1-1:0.0 can0: device disconnected
[  769.335825][T16949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3241'.
[  769.364011][T16948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3241'.
[  769.482903][  T982] usb 4-1: USB disconnect, device number 121
[  769.611731][T16953] tipc: Started in network mode
[  769.637206][T16953] tipc: Node identity c65fd183633f, cluster identity 4711
[  769.705887][T16953] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  769.751475][T16957] syzkaller0: entered promiscuous mode
[  769.794374][T16957] syzkaller0: entered allmulticast mode
[  769.862554][T16957] tipc: Resetting bearer <eth:syzkaller0>
[  769.907523][T16952] tipc: Resetting bearer <eth:syzkaller0>
[  769.970312][T16952] tipc: Disabling bearer <eth:syzkaller0>
[  769.994231][T12694] usb 4-1: new full-speed USB device number 122 using dummy_hcd
[  770.112223][T16972] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3245'.
[  770.164397][T12694] usb 4-1: device descriptor read/64, error -71
[  770.374322][  T982] usb 3-1: new full-speed USB device number 114 using dummy_hcd
[  770.490584][T12694] usb 4-1: new full-speed USB device number 123 using dummy_hcd
[  770.536087][  T982] usb 3-1: config 0 has no interfaces?
[  770.543101][  T982] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  770.571190][  T982] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  770.587585][  T982] usb 3-1: Manufacturer: syz
[  770.633670][  T982] usb 3-1: config 0 descriptor??
[  770.704245][T12694] usb 4-1: device descriptor read/64, error -71
[  770.824778][T12694] usb usb4-port1: attempt power cycle
[  770.876226][T16970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  770.919034][T16970] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  770.964891][ T5836] usb 3-1: USB disconnect, device number 114
[  771.213252][T16988] netlink: 'syz.5.3252': attribute type 21 has an invalid length.
[  771.222521][T12694] usb 4-1: new full-speed USB device number 124 using dummy_hcd
[  771.224300][ T5886] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  771.235338][T16988] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3252'.
[  771.257971][T12694] usb 4-1: device descriptor read/8, error -71
[  771.414482][ T5886] usb 1-1: device descriptor read/64, error -71
[  771.504195][T12694] usb 4-1: new full-speed USB device number 125 using dummy_hcd
[  771.547503][T12694] usb 4-1: device descriptor read/8, error -71
[  771.679884][ T5886] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  771.689418][T12694] usb usb4-port1: unable to enumerate USB device
[  771.834304][ T5886] usb 1-1: device descriptor read/64, error -71
[  771.978520][ T5886] usb usb1-port1: attempt power cycle
[  772.068861][  T982] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  772.158289][T17016] binder: 17001:17016 ioctl c0306201 200000000100 returned -11
[  772.375487][  T982] usb 6-1: Using ep0 maxpacket: 32
[  772.389249][  T982] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[  772.397601][  T982] usb 6-1: config 0 has an invalid descriptor of length 192, skipping remainder of the config
[  772.411868][  T982] usb 6-1: config 0 has no interface number 0
[  772.418094][  T982] usb 6-1: config 0 interface 12 altsetting 2 endpoint 0x2 has invalid maxpacket 39629, setting to 64
[  772.458429][  T982] usb 6-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  772.494940][  T982] usb 6-1: config 0 interface 12 has no altsetting 0
[  772.510624][T17013] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3258'.
[  772.540833][  T982] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  772.554210][ T5886] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  772.591186][  T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  772.612208][ T5886] usb 1-1: device descriptor read/8, error -71
[  772.624215][  T982] usb 6-1: Product: syz
[  772.644679][  T982] usb 6-1: Manufacturer: syz
[  772.692563][  T982] usb 6-1: SerialNumber: syz
[  772.717162][  T982] usb 6-1: config 0 descriptor??
[  772.750826][  T982] f81534 6-1:0.12: required endpoints missing
[  772.889350][ T5886] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  772.992558][ T5886] usb 1-1: device descriptor read/8, error -71
[  773.104708][ T5886] usb usb1-port1: unable to enumerate USB device
[  773.396504][ T5886] usb 6-1: USB disconnect, device number 53
[  773.517772][T17026] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  773.567297][T17029] C: renamed from team_slave_0
[  773.576022][T17029] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3262'.
[  773.785488][T12694] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  773.874245][ T5886] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  773.984888][T12694] usb 5-1: Using ep0 maxpacket: 32
[  773.991967][T12694] usb 5-1: too many endpoints for config 0 interface 0 altsetting 64: 255, using maximum allowed: 30
[  774.006499][T12694] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 108, changing to 10
[  774.020426][T12694] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0
[  774.035206][T12694] usb 5-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  774.049670][T12694] usb 5-1: config 0 interface 0 has no altsetting 0
[  774.064580][ T5886] usb 3-1: Using ep0 maxpacket: 8
[  774.108131][T12694] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  774.112210][ T5886] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  774.137646][T12694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  774.165516][T17042] vxcan2: entered allmulticast mode
[  774.171276][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  774.191668][T12694] usb 5-1: config 0 descriptor??
[  774.220940][ T5886] usb 3-1: Product: syz
[  774.241561][ T5886] usb 3-1: Manufacturer: syz
[  774.294439][ T5886] usb 3-1: SerialNumber: syz
[  774.395826][ T5886] usb 3-1: config 0 descriptor??
[  774.398830][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3269'.
[  774.564292][ T5836] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  774.653569][T12694] waltop 0003:172F:0038.0027: unknown main item tag 0x0
[  774.685622][T12694] waltop 0003:172F:0038.0027: hidraw0: USB HID v0.07 Device [HID 172f:0038] on usb-dummy_hcd.4-1/input0
[  774.699926][ T5836] usb 1-1: device descriptor read/64, error -71
[  774.703678][T17055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.741624][T17055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.898090][ T5886] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  774.940067][ T5886] gspca_sunplus: reg_w_riv err -71
[  774.954335][ T5836] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  774.956009][ T5886] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  775.009442][ T5886] usb 3-1: USB disconnect, device number 115
[  775.095016][ T5836] usb 1-1: device descriptor read/64, error -71
[  775.228225][ T5836] usb usb1-port1: attempt power cycle
[  775.527947][T17072] syzkaller0: entered promiscuous mode
[  775.540713][T17072] syzkaller0: entered allmulticast mode
[  775.614273][ T5836] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  775.683408][ T5836] usb 1-1: device descriptor read/8, error -71
[  775.974447][ T5836] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  776.005222][ T5836] usb 1-1: device descriptor read/8, error -71
[  776.124565][ T5836] usb usb1-port1: unable to enumerate USB device
[  776.382154][ T5886] usb 5-1: USB disconnect, device number 115
[  776.956585][ T5886] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  777.144229][ T5886] usb 5-1: Using ep0 maxpacket: 32
[  777.152427][ T5886] usb 5-1: config index 0 descriptor too short (expected 32786, got 18)
[  777.163111][ T5886] usb 5-1: config 0 has an invalid interface number: 66 but max is 0
[  777.186765][ T5886] usb 5-1: config 0 has no interface number 0
[  777.207477][ T5886] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50
[  777.216785][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.225421][ T5886] usb 5-1: Product: syz
[  777.232235][ T5886] usb 5-1: Manufacturer: syz
[  777.237620][ T5886] usb 5-1: SerialNumber: syz
[  777.263443][ T5886] usb 5-1: config 0 descriptor??
[  777.283547][ T5886] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state.
[  777.293093][ T5886] dvb-usb: bulk message failed: -22 (2/0)
[  777.322539][ T5886] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  777.355737][ T5886] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold)
[  777.363846][ T5886] usb 5-1: media controller created
[  777.405905][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  777.447565][ T5886] cxusb: set interface failed
[  777.452322][ T5886] dvb-usb: bulk message failed: -22 (1/0)
[  777.499448][ T5886] DVB: Unable to find symbol lgdt330x_attach()
[  777.507315][ T5886] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold'
[  777.586203][ T5886] rc_core: IR keymap rc-dvico-portable not found
[  777.592622][ T5886] Registered IR keymap rc-empty
[  777.602040][ T5886] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[  777.615264][ T5886] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input47
[  777.629036][ T5886] dvb-usb: schedule remote query interval to 100 msecs.
[  777.636575][ T5886] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected.
[  777.674221][  T982] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  777.751182][ T5886] dvb-usb: bulk message failed: -22 (1/0)
[  777.843113][  T982] usb 1-1: unable to get BOS descriptor or descriptor too short
[  777.852666][  T982] usb 1-1: config 176 has an invalid interface number: 218 but max is 0
[  777.861472][  T982] usb 1-1: config 176 has no interface number 0
[  777.868197][  T982] usb 1-1: config 176 interface 218 has no altsetting 0
[  777.875660][ T5882] dvb-usb: bulk message failed: -22 (1/0)
[  777.883979][  T982] usb 1-1: New USB device found, idVendor=05ac, idProduct=b231, bcdDevice=85.00
[  777.893855][  T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  777.902268][  T982] usb 1-1: Product: syz
[  777.906981][  T982] usb 1-1: Manufacturer: syz
[  777.911626][  T982] usb 1-1: SerialNumber: syz
[  777.994285][ T5882] dvb-usb: bulk message failed: -22 (1/0)
[  778.019506][T12694] usb 5-1: USB disconnect, device number 116
[  778.129688][T17092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  778.132051][T12694] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected.
[  778.158698][T17092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  778.193104][  T982] ipheth 1-1:176.218: Unable to find alternate settings interface
[  778.219279][  T982] usb 1-1: USB disconnect, device number 11
[  778.494431][T12694] usb 5-1: new full-speed USB device number 117 using dummy_hcd
[  778.544794][T17085] tipc: New replicast peer: 0.0.0.0
[  778.550802][T17085] tipc: Enabled bearer <udp:syz2>, priority 10
[  778.557678][T17086] tipc: New replicast peer: 255.255.255.255
[  778.683520][T12694] usb 5-1: config 8 has an invalid interface number: 80 but max is 0
[  778.715243][T12694] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  778.754179][T12694] usb 5-1: config 8 has no interface number 0
[  778.764009][T12694] usb 5-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  778.792423][T12694] usb 5-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  778.829088][T12694] usb 5-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14
[  778.853686][T12694] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f
[  778.866613][T12694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.924652][T12694] usb 5-1: NFC: intf ffff888031d93000 id ffffffff8eb1e2c0
[  778.944685][  T982] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[  779.034968][T17111] program syz.2.3285 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  779.085110][  T982] usb 4-1: device descriptor read/64, error -71
[  779.108376][T17097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  779.127830][T17097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  779.139381][ T5882] usb 5-1: USB disconnect, device number 117
[  779.305468][T17124] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3288'.
[  779.324264][  T982] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  779.464550][T12694] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  779.504282][  T982] usb 4-1: device descriptor read/64, error -71
[  779.529007][T17129] sctp: [Deprecated]: syz.2.3289 (pid 17129) Use of int in maxseg socket option.
[  779.529007][T17129] Use struct sctp_assoc_value instead
[  779.625415][T12694] usb 1-1: Using ep0 maxpacket: 16
[  779.639507][T12694] usb 1-1: config 0 has no interfaces?
[  779.651342][T12694] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  779.661985][T12694] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  779.670396][ T5836] tipc: Node number set to 2549529348
[  779.677775][T12694] usb 1-1: Manufacturer: syz
[  779.684463][  T982] usb usb4-port1: attempt power cycle
[  779.688306][T12694] usb 1-1: config 0 descriptor??
[  780.037870][  T982] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  780.066853][  T982] usb 4-1: device descriptor read/8, error -71
[  780.154206][T12694] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  780.305228][  T982] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  780.324254][T12694] usb 5-1: Using ep0 maxpacket: 8
[  780.343902][T12694] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  780.345129][  T982] usb 4-1: device descriptor read/8, error -71
[  780.392575][T12694] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00
[  780.408401][T12694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.424810][T12694] usb 5-1: config 0 descriptor??
[  780.484016][  T982] usb usb4-port1: unable to enumerate USB device
[  780.624148][T17142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3293'.
[  780.640215][T17142] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3293'.
[  780.946300][ T5836] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  780.965321][T12694] hid-corsair-void 0003:1B1C:1B25.0028: item fetching failed at offset 0/1
[  780.984368][T12694] hid-corsair-void 0003:1B1C:1B25.0028: parse failed (reason: -22)
[  780.993619][T12694] hid-corsair-void 0003:1B1C:1B25.0028: probe with driver hid-corsair-void failed with error -22
[  781.134364][ T5836] usb 3-1: Using ep0 maxpacket: 32
[  781.142031][ T5836] usb 3-1: config 5 has an invalid interface number: 34 but max is 0
[  781.150730][ T5836] usb 3-1: config 5 has no interface number 0
[  781.157244][ T5836] usb 3-1: config 5 interface 34 has no altsetting 0
[  781.167365][ T5836] usb 3-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=95.76
[  781.178155][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.192846][ T5836] usb 3-1: Product: syz
[  781.200316][ T5836] usb 3-1: Manufacturer: syz
[  781.212151][ T5836] usb 3-1: SerialNumber: syz
[  781.427609][T17142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  781.453305][T17142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  781.468779][ T5836] usb 3-1: bad CDC descriptors
[  781.490316][ T5836] ums-datafab 3-1:5.34: USB Mass Storage device detected
[  781.512787][ T5836] ums-datafab 3-1:5.34: This device (07c4,a001,9576 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  781.512787][ T5836]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  781.796212][ T5836] usb 3-1: USB disconnect, device number 116
[  782.039714][ T5882] usb 1-1: USB disconnect, device number 12
[  782.424222][ T5836] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  782.604184][ T5836] usb 4-1: Using ep0 maxpacket: 32
[  782.616054][ T5836] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  782.646934][ T5836] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  782.674935][ T5836] usb 4-1: config 0 interface 0 has no altsetting 0
[  782.681643][ T5836] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  782.714229][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.733801][ T5836] usb 4-1: config 0 descriptor??
[  783.009082][T12694] usb 5-1: USB disconnect, device number 118
[  783.160927][ T5836] corsair-cpro 0003:1B1C:0C10.0029: item fetching failed at offset 2/5
[  783.215818][ T5836] corsair-cpro 0003:1B1C:0C10.0029: probe with driver corsair-cpro failed with error -22
[  783.362433][T17159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.384631][T17159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.991976][ T5882] usb 4-1: USB disconnect, device number 4
[  784.141183][T17198] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3310'.
[  785.358591][T16643] Bluetooth: hci4: command 0x0406 tx timeout
[  785.389830][T17215] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3316'.
[  786.125482][T17213] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  786.490799][T12694] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  786.668703][T12694] usb 4-1: Using ep0 maxpacket: 16
[  786.715228][T12694] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  786.724441][ T5886] usb 6-1: new full-speed USB device number 54 using dummy_hcd
[  786.725688][T12694] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  786.747664][T12694] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  786.757077][T12694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  786.774009][T12694] usb 4-1: Product: syz
[  786.779086][T12694] usb 4-1: Manufacturer: syz
[  786.783851][T12694] usb 4-1: SerialNumber: syz
[  786.939311][ T5886] usb 6-1: config 252 has an invalid descriptor of length 80, skipping remainder of the config
[  786.984172][ T5886] usb 6-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[  787.069071][ T5886] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67
[  787.106347][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.109173][T12694] usb 4-1: 0:2 : does not exist
[  787.123784][ T5886] usb 6-1: Product: syz
[  787.128133][ T5886] usb 6-1: Manufacturer: syz
[  787.132869][ T5886] usb 6-1: SerialNumber: syz
[  787.235735][T12694] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  787.280224][T12694] usb 4-1: USB disconnect, device number 5
[  787.323482][T11080] udevd[11080]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  787.354790][ T5886] usb 6-1: USB disconnect, device number 54
[  787.635419][T17270] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3332'.
[  787.834314][T12694] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  787.974224][T12694] usb 1-1: device descriptor read/64, error -71
[  788.214340][T12694] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  788.361070][T12694] usb 1-1: device descriptor read/64, error -71
[  788.484709][T12694] usb usb1-port1: attempt power cycle
[  788.747605][   T43] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  788.834497][T12694] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  788.875051][T12694] usb 1-1: device descriptor read/8, error -71
[  788.939626][   T43] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  788.949218][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.959171][   T43] usb 6-1: Product: syz
[  788.969306][   T43] usb 6-1: Manufacturer: syz
[  788.975267][   T43] usb 6-1: SerialNumber: syz
[  788.982848][   T43] usb 6-1: config 0 descriptor??
[  789.104142][ T5836] usb 3-1: new full-speed USB device number 117 using dummy_hcd
[  789.124215][T12694] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  789.144815][T12694] usb 1-1: device descriptor read/8, error -71
[  789.234215][ T5836] usb 3-1: device descriptor read/64, error -71
[  789.254908][T12694] usb usb1-port1: unable to enumerate USB device
[  789.310064][T17281] input: syz1 as /devices/virtual/input/input48
[  789.474189][ T5836] usb 3-1: new full-speed USB device number 118 using dummy_hcd
[  789.608126][ T5836] usb 3-1: device descriptor read/64, error -71
[  789.615972][   T43] usb 6-1: Firmware version (0.0) predates our first public release.
[  789.625905][   T43] usb 6-1: Please update to version 0.2 or newer
[  789.633334][   T43] usb 6-1: Firmware: build �.�
[  789.745438][ T5836] usb usb3-port1: attempt power cycle
[  789.862252][   T43] usb 6-1: USB disconnect, device number 55
[  790.094313][ T5836] usb 3-1: new full-speed USB device number 119 using dummy_hcd
[  790.126818][ T5836] usb 3-1: device descriptor read/8, error -71
[  790.374296][ T5836] usb 3-1: new full-speed USB device number 120 using dummy_hcd
[  790.468705][ T5836] usb 3-1: device descriptor read/8, error -71
[  790.527019][T17296] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  790.533557][T17296] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  790.542692][T17296] vhci_hcd vhci_hcd.0: Device attached
[  790.584516][ T5836] usb usb3-port1: unable to enumerate USB device
[  790.724475][   T43] vhci_hcd: vhci_device speed not set
[  790.804372][   T43] usb 43-1: new full-speed USB device number 2 using vhci_hcd
[  791.004368][   T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  791.184892][   T24] usb 1-1: Using ep0 maxpacket: 16
[  791.203171][   T24] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85
[  791.214011][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  791.232155][   T24] usb 1-1: config 0 descriptor??
[  791.256869][   T24] usb 1-1: interface 1 not found
[  791.355680][T17297] vhci_hcd: connection reset by peer
[  791.367183][   T33] vhci_hcd: stop threads
[  791.373316][   T33] vhci_hcd: release socket
[  791.379693][   T33] vhci_hcd: disconnect device
[  791.452544][   T24] usb 1-1: USB disconnect, device number 17
[  792.142078][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'.
[  792.165953][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3348'.
[  792.194416][T17319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3349'.
[  792.657185][T17337] vxcan2: entered allmulticast mode
[  793.404324][   T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  793.580886][   T24] usb 6-1: Using ep0 maxpacket: 16
[  793.588611][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  793.599497][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  793.614206][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  793.630621][   T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  793.642600][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  793.659543][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  793.669129][   T24] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  793.696943][T17358] netlink: 'syz.2.3356': attribute type 8 has an invalid length.
[  793.714329][ T5836] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  793.723322][   T24] usb 6-1: Manufacturer: syz
[  793.732405][   T24] usb 6-1: config 0 descriptor??
[  793.884203][ T5836] usb 4-1: Using ep0 maxpacket: 16
[  794.060079][ T5836] usb 4-1: config 0 has an invalid interface number: 180 but max is 0
[  794.068857][ T5836] usb 4-1: config 0 has no interface number 0
[  794.138205][ T5836] usb 4-1: New USB device found, idVendor=0421, idProduct=0134, bcdDevice=11.72
[  794.168938][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  794.232527][ T5836] usb 4-1: Product: syz
[  794.273272][ T5836] usb 4-1: Manufacturer: syz
[  794.288257][ T5836] usb 4-1: SerialNumber: syz
[  794.304047][ T5836] usb 4-1: config 0 descriptor??
[  794.330621][ T5836] usb 4-1: bad CDC descriptors
[  794.526855][ T5836] usb 4-1: USB disconnect, device number 6
[  794.856828][   T30] kauditd_printk_skb: 33 callbacks suppressed
[  794.856851][   T30] audit: type=1326 audit(1760126244.595:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  794.989814][   T30] audit: type=1326 audit(1760126244.595:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  795.051557][   T30] audit: type=1326 audit(1760126244.595:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  795.111157][   T30] audit: type=1326 audit(1760126244.595:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  795.178395][   T30] audit: type=1326 audit(1760126244.595:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  795.222172][   T30] audit: type=1326 audit(1760126244.595:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  795.267650][   T30] audit: type=1326 audit(1760126244.595:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  795.290788][   T30] audit: type=1326 audit(1760126244.595:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  795.383680][   T30] audit: type=1326 audit(1760126244.595:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  795.448011][   T30] audit: type=1326 audit(1760126244.635:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17373 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bde78eec9 code=0x7ffc0000
[  795.964404][   T43] vhci_hcd: vhci_device speed not set
[  796.514177][   T24] rc_core: IR keymap rc-hauppauge not found
[  796.530437][   T24] Registered IR keymap rc-empty
[  796.541030][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  796.584199][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  796.622907][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  796.645955][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input49
[  796.911834][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  796.936321][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  796.954222][  T982] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  796.974454][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  796.994285][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  797.016129][T17405] vxcan2: entered allmulticast mode
[  797.034247][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  797.083980][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  797.153914][  T982] usb 1-1: Using ep0 maxpacket: 16
[  797.166919][  T982] usb 1-1: config 0 has an invalid interface number: 63 but max is 0
[  797.184764][  T982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  797.212266][  T982] usb 1-1: config 0 has no interface number 0
[  797.232164][  T982] usb 1-1: config 0 interface 63 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  797.268857][  T982] usb 1-1: config 0 interface 63 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  797.284256][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  797.305989][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  797.324262][  T982] usb 1-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=41.e6
[  797.354394][  T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  797.445700][  T982] usb 1-1: config 0 descriptor??
[  797.473818][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  797.539543][   T24] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  797.568681][T17418] vxcan2: entered allmulticast mode
[  797.617018][   T24] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  797.634727][   T24] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  797.702375][   T24] usb 6-1: USB disconnect, device number 56
[  799.251521][  T982] usb 1-1: USB disconnect, device number 18
[  800.424185][ T5836] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  800.594323][ T5836] usb 3-1: Using ep0 maxpacket: 16
[  800.606308][ T5836] usb 3-1: config 0 has no interfaces?
[  800.614815][ T5836] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  800.628141][ T5836] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  800.638618][ T5836] usb 3-1: Manufacturer: syz
[  800.648295][ T5836] usb 3-1: config 0 descriptor??
[  800.740201][T17433] syzkaller0: entered promiscuous mode
[  800.745975][T17433] syzkaller0: entered allmulticast mode
[  800.956480][T17483] fuse: Bad value for 'user_id'
[  800.982309][T17483] fuse: Bad value for 'user_id'
[  801.274351][ T5836] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  801.446201][ T5836] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  801.474197][ T5836] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  801.595916][ T5836] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  801.635516][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  801.657140][ T5836] usb 4-1: SerialNumber: syz
[  801.939489][ T5836] usb 4-1: 0:2 : does not exist
[  801.992252][ T5836] usb 4-1: USB disconnect, device number 7
[  802.122808][T11080] udevd[11080]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  802.898172][ T5882] usb 3-1: USB disconnect, device number 121
[  802.965639][ T5836] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  803.140935][ T5836] usb 1-1: Using ep0 maxpacket: 32
[  803.163434][ T5836] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  803.194782][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  803.206218][ T5836] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  803.217617][ T5836] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  803.226838][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  803.237044][ T5836] usb 1-1: config 0 descriptor??
[  803.242929][T17497] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  803.261738][ T5836] hub 1-1:0.0: USB hub found
[  803.435014][T17499] netlink: 'syz.3.3391': attribute type 1 has an invalid length.
[  803.471745][ T5836] hub 1-1:0.0: config failed, hub has too many ports! (err -19)
[  803.871073][ T5836] usbhid 1-1:0.0: can't add hid device: -71
[  803.877253][ T5836] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  803.906937][ T5836] usb 1-1: USB disconnect, device number 19
[  804.605538][T17504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.606486][T17488] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  804.641091][T17499] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  804.664603][T17504] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.825949][ T5886] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  805.244216][ T5882] usb 5-1: new full-speed USB device number 119 using dummy_hcd
[  805.407137][ T5882] usb 5-1: config 252 has an invalid interface number: 191 but max is 0
[  805.444227][ T5882] usb 5-1: config 252 has no interface number 0
[  805.464885][ T5882] usb 5-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f
[  805.493998][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.546995][ T5882] usb 5-1: Product: syz
[  805.559722][ T5882] usb 5-1: Manufacturer: syz
[  805.584525][T17534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  805.616807][ T5882] usb 5-1: SerialNumber: syz
[  805.687059][ T5882] usb-storage 5-1:252.191: USB Mass Storage device detected
[  805.726092][ T5882] usb-storage 5-1:252.191: Quirks match for vid 054c pid 0069: 1
[  805.767504][T17537] vim2m vim2m.0: vidioc_s_fmt queue busy
[  805.819798][T17542] fuse: Unknown parameter 'fl0x0000000000000008'
[  805.934598][T17547] netlink: 'syz.3.3405': attribute type 13 has an invalid length.
[  806.267532][ T5886] usb 5-1: USB disconnect, device number 119
[  806.747174][T17566] binfmt_misc: register: failed to install interpreter file ./file0
[  807.054337][   T24] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  807.324194][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  807.349963][   T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  807.481703][   T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  807.500105][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  807.527419][   T24] usb 4-1: SerialNumber: syz
[  807.604562][   T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  807.684853][   T24] usb-storage 4-1:1.0: USB Mass Storage device detected
[  807.749477][   T24] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  807.772154][   T24] scsi host1: usb-storage 4-1:1.0
[  807.957597][T17596] program syz.2.3416 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  808.094494][   T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  808.189029][T17600] netlink: set zone limit has 8 unknown bytes
[  808.374152][   T24] usb 1-1: Using ep0 maxpacket: 8
[  808.382377][T17602] netlink: 'syz.3.3408': attribute type 3 has an invalid length.
[  808.401728][T17602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3408'.
[  808.429056][   T24] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  808.453120][   T24] usb 1-1: config 0 has no interface number 0
[  808.464240][   T24] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  808.512963][   T24] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  808.547926][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  808.636924][   T24] usb 1-1: config 0 descriptor??
[  808.685850][   T24] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  808.879161][T17594] netlink: 'syz.0.3417': attribute type 4 has an invalid length.
[  808.925983][T17594] netlink: 'syz.0.3417': attribute type 4 has an invalid length.
[  809.137163][T17594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  809.234350][T17594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  809.980375][ T5836] usb 1-1: USB disconnect, device number 21
[  810.607393][T17634] batman_adv: batadv0: Adding interface: dummy0
[  810.626856][T17634] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  810.696539][T17634] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  810.746615][   T24] usb 4-1: USB disconnect, device number 8
[  810.944285][T16643] Bluetooth: hci0: command 0x0406 tx timeout
[  811.174297][ T5836] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  811.324369][ T5886] usb 3-1: new full-speed USB device number 122 using dummy_hcd
[  811.327275][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  811.361727][ T5836] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  811.372124][ T5836] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  811.385292][ T5836] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  811.396024][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.407977][ T5836] usb 6-1: config 0 descriptor??
[  811.414417][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  811.486974][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short
[  811.497159][ T5886] usb 3-1: not running at top speed; connect to a high speed hub
[  811.505964][ T5886] usb 3-1: too many configurations: 79, using maximum allowed: 8
[  811.516077][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61
[  811.523697][ T5886] usb 3-1: can't read configurations, error -61
[  811.534254][   T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  811.564279][ T5882] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  811.586334][   T24] usb 4-1: config 0 has an invalid interface number: 83 but max is 0
[  811.594833][   T24] usb 4-1: config 0 has no interface number 0
[  811.600984][   T24] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  811.611488][   T24] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  811.621545][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.632628][   T24] usb 4-1: config 0 descriptor??
[  811.643235][   T24] ttusbir 4-1:0.83: cannot find expected altsetting
[  811.654929][ T5886] usb 3-1: new full-speed USB device number 123 using dummy_hcd
[  811.684383][   T43] usb 1-1: device descriptor read/64, error -71
[  811.714216][ T5882] usb 5-1: Using ep0 maxpacket: 32
[  811.721188][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  811.732459][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  811.744425][ T5882] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  811.753518][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.764444][ T5882] usb 5-1: config 0 descriptor??
[  811.773718][ T5882] hub 5-1:0.0: USB hub found
[  811.817593][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short
[  811.826157][ T5886] usb 3-1: not running at top speed; connect to a high speed hub
[  811.833997][ T5886] usb 3-1: too many configurations: 79, using maximum allowed: 8
[  811.843888][ T5836] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0
[  811.853670][ T5836] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0
[  811.862858][ T5836] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0
[  811.863312][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61
[  811.863350][ T5886] usb 3-1: can't read configurations, error -61
[  811.881525][ T5836] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0
[  811.895191][ T5836] kovaplus 0003:1E7D:2D50.002A: unknown main item tag 0x0
[  811.897762][ T5886] usb usb3-port1: attempt power cycle
[  811.913520][ T5836] kovaplus 0003:1E7D:2D50.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0
[  811.935312][   T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  811.972838][ T5882] hub 5-1:0.0: 1 port detected
[  812.074383][   T43] usb 1-1: device descriptor read/64, error -71
[  812.182591][ T5882] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  812.191751][   T43] usb usb1-port1: attempt power cycle
[  812.198371][ T5882] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  812.211120][ T5882] usbhid 5-1:0.0: can't add hid device: -71
[  812.217353][ T5882] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  812.245137][ T5882] usb 5-1: USB disconnect, device number 120
[  812.264525][ T5886] usb 3-1: new full-speed USB device number 124 using dummy_hcd
[  812.298834][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short
[  812.308224][ T5886] usb 3-1: not running at top speed; connect to a high speed hub
[  812.316101][ T5886] usb 3-1: too many configurations: 79, using maximum allowed: 8
[  812.325752][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61
[  812.333369][ T5886] usb 3-1: can't read configurations, error -61
[  812.442748][ T5836] kovaplus 0003:1E7D:2D50.002A: couldn't init struct kovaplus_device
[  812.451386][ T5836] kovaplus 0003:1E7D:2D50.002A: couldn't install mouse
[  812.462575][ T5836] kovaplus 0003:1E7D:2D50.002A: probe with driver kovaplus failed with error -71
[  812.471999][ T5886] usb 3-1: new full-speed USB device number 125 using dummy_hcd
[  812.478384][ T5836] usb 6-1: USB disconnect, device number 57
[  812.508818][ T5886] usb 3-1: unable to get BOS descriptor or descriptor too short
[  812.517604][ T5886] usb 3-1: not running at top speed; connect to a high speed hub
[  812.525935][ T5886] usb 3-1: too many configurations: 79, using maximum allowed: 8
[  812.536435][ T5886] usb 3-1: unable to read config index 0 descriptor/start: -61
[  812.544158][   T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  812.544274][ T5886] usb 3-1: can't read configurations, error -61
[  812.559740][ T5886] usb usb3-port1: unable to enumerate USB device
[  812.574958][   T43] usb 1-1: device descriptor read/8, error -71
[  812.834835][   T43] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  812.846811][T17658] vim2m vim2m.0: vidioc_s_fmt queue busy
[  812.865790][   T43] usb 1-1: device descriptor read/8, error -71
[  812.995567][   T43] usb usb1-port1: unable to enumerate USB device
[  813.089493][T17665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  813.098763][T17665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  813.314183][   T43] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[  813.484227][   T43] usb 6-1: Using ep0 maxpacket: 32
[  813.491458][   T43] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  813.501993][   T43] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  813.511951][   T43] usb 6-1: config 1 interface 0 has no altsetting 0
[  813.521041][   T43] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  813.530330][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  813.538387][   T43] usb 6-1: Product: syz
[  813.542602][   T43] usb 6-1: Manufacturer: syz
[  813.547295][   T43] usb 6-1: SerialNumber: syz
[  813.555238][T17666] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  813.562860][T17666] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  813.799459][   T43] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  813.822912][   T43] usb 6-1: USB disconnect, device number 58
[  813.852799][T17668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3437'.
[  813.865457][T17668] 8021q: VLANs not supported on caif0
[  813.983176][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  813.992268][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  814.088001][ T5882] usb 4-1: USB disconnect, device number 9
[  814.501676][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3445'.
[  814.512506][T17692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3445'.
[  814.734226][ T5886] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  814.741908][ T5882] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  814.894335][ T5886] usb 1-1: Using ep0 maxpacket: 32
[  814.899603][ T5882] usb 3-1: Using ep0 maxpacket: 32
[  814.907124][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  814.918436][ T5882] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  814.928659][ T5886] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  814.937927][ T5882] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  814.949739][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.958308][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.969152][ T5886] usb 1-1: config 0 descriptor??
[  814.978241][ T5886] gspca_main: sunplus-2.14.0 probing 041e:400b
[  814.994649][ T5882] usb 3-1: config 0 descriptor??
[  815.003454][ T5882] hub 3-1:0.0: USB hub found
[  815.202672][ T5882] hub 3-1:0.0: 1 port detected
[  815.413453][ T5882] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  815.427017][ T5882] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  815.448619][ T5882] usbhid 3-1:0.0: can't add hid device: -71
[  815.464407][ T5882] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  815.513393][ T5882] usb 3-1: USB disconnect, device number 126
[  815.524189][ T5886] gspca_sunplus: reg_w_riv err -71
[  815.529437][ T5886] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  815.609989][ T5886] usb 1-1: USB disconnect, device number 26
[  815.784206][ T5836] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[  815.995979][ T5836] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  816.019011][ T5836] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  816.040281][ T5836] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  816.052565][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  816.121700][T17706] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  816.175485][ T5836] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  816.235295][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'.
[  816.267084][T17719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3453'.
[  816.290019][T17723] netlink: 'syz.2.3453': attribute type 10 has an invalid length.
[  816.434540][T17723] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  816.935410][  T982] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  817.099150][  T982] usb 1-1: config 0 has an invalid descriptor of length 247, skipping remainder of the config
[  817.128670][  T982] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  817.192465][  T982] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.40
[  817.271323][  T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=32
[  817.307466][  T982] usb 1-1: SerialNumber: syz
[  817.415155][  T982] usb 1-1: config 0 descriptor??
[  817.855097][  T982] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  817.910265][T17734] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3452'.
[  818.004155][  T982] usb 3-1: Using ep0 maxpacket: 8
[  818.020279][  T982] usb 3-1: unable to get BOS descriptor or descriptor too short
[  818.032121][  T982] usb 3-1: config 1 interface 0 altsetting 14 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  818.056883][  T982] usb 3-1: config 1 interface 0 has no altsetting 0
[  818.071996][  T982] usb 3-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40
[  818.082149][  T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  818.098544][  T982] usb 3-1: Product: syz
[  818.103037][  T982] usb 3-1: Manufacturer: syz
[  818.108482][  T982] usb 3-1: SerialNumber: syz
[  818.391565][ T5886] usb 1-1: USB disconnect, device number 27
[  818.489210][  T982] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input52
[  818.540287][ T5183] bcm5974 3-1:1.0: could not read from device
[  818.569440][ T5183] bcm5974 3-1:1.0: could not read from device
[  818.612393][ T5183] bcm5974 3-1:1.0: could not read from device
[  818.614689][  T982] usb 3-1: USB disconnect, device number 127
[  818.665983][ T5183] bcm5974 3-1:1.0: could not read from device
[  818.798484][ T5913] usb 6-1: USB disconnect, device number 59
[  819.154284][ T5836] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  819.311487][T17782] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  819.384342][ T5836] usb 4-1: Using ep0 maxpacket: 16
[  819.392351][ T5836] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  819.407414][ T5836] usb 4-1: config 0 interface 0 has no altsetting 0
[  819.425582][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=c117, bcdDevice= 0.00
[  819.436766][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  819.463466][ T5836] usb 4-1: config 0 descriptor??
[  819.497475][ T5836] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  820.874369][ T5913] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[  821.125476][ T5913] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  821.139639][ T5913] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  821.151141][ T5913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  821.159743][ T5913] usb 6-1: Product: syz
[  821.168015][ T5913] usb 6-1: Manufacturer: syz
[  821.172829][ T5913] usb 6-1: SerialNumber: syz
[  821.230120][ T5913] usb 6-1: config 0 descriptor??
[  821.244180][ T5913] adutux 6-1:0.0: interrupt endpoints not found
[  821.351114][  T982] usb 3-1: new low-speed USB device number 2 using dummy_hcd
[  821.516811][  T982] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  821.529125][  T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  821.552310][  T982] usb 3-1: config 0 descriptor??
[  821.788397][ T5913] usb 6-1: USB disconnect, device number 60
[  821.892776][T17832] program syz.4.3473 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  822.007107][  T982] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  822.017603][  T982] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  822.037805][  T982] asix 3-1:0.0: probe with driver asix failed with error -71
[  822.057584][  T982] usb 3-1: USB disconnect, device number 2
[  822.364217][  T982] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  822.452713][ T5836] usb 4-1: USB disconnect, device number 10
[  822.524344][  T982] usb 3-1: Using ep0 maxpacket: 16
[  822.533946][  T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  822.545838][  T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  822.556237][  T982] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  822.569631][  T982] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  822.579154][  T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.617583][  T982] usb 3-1: config 0 descriptor??
[  823.047585][T17840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  823.114705][T17840] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  823.147305][  T982] shield 0003:0955:7214.002B: item fetching failed at offset 4/5
[  823.167223][T17859] hub 9-0:1.0: USB hub found
[  823.176469][  T982] shield 0003:0955:7214.002B: Parse failed
[  823.187402][T17859] hub 9-0:1.0: 1 port detected
[  823.192889][  T982] shield 0003:0955:7214.002B: probe with driver shield failed with error -22
[  823.337936][  T982] usb 3-1: USB disconnect, device number 3
[  823.864475][   T24] usb 6-1: new high-speed USB device number 61 using dummy_hcd
[  824.077306][   T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  824.090503][   T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  824.108356][   T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  824.118581][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  824.126747][   T24] usb 6-1: Product: syz
[  824.131181][   T24] usb 6-1: Manufacturer: syz
[  824.136785][   T24] usb 6-1: SerialNumber: syz
[  824.838175][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3483'.
[  824.903333][T17884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  824.934856][T17884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  825.074529][T17892] trusted_key: encrypted_key: insufficient parameters specified
[  825.129167][T17892] trusted_key: encrypted_key: keylen parameter is missing
[  825.706677][   T24] cdc_ncm 6-1:1.0: bind() failure
[  825.732417][   T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  825.749704][   T24] cdc_ncm 6-1:1.1: bind() failure
[  825.779400][   T24] usb 6-1: USB disconnect, device number 61
[  826.613687][T17925] netlink: 4400 bytes leftover after parsing attributes in process `syz.5.3499'.
[  826.794169][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  826.801422][T17929] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3502'.
[  826.954442][   T24] usb 4-1: Using ep0 maxpacket: 8
[  826.967570][   T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  826.979327][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  826.989917][   T24] usb 4-1: Product: syz
[  826.995526][   T24] usb 4-1: Manufacturer: syz
[  827.001474][   T24] usb 4-1: SerialNumber: syz
[  827.012325][   T24] usb 4-1: config 0 descriptor??
[  827.064214][   T43] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  827.164183][ T5836] usb 6-1: new high-speed USB device number 62 using dummy_hcd
[  827.222637][   T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  827.231213][   T43] usb 1-1: Using ep0 maxpacket: 8
[  827.240839][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  827.255811][   T43] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  827.274474][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.283752][   T43] usb 1-1: Product: syz
[  827.288518][   T43] usb 1-1: Manufacturer: syz
[  827.293396][   T43] usb 1-1: SerialNumber: syz
[  827.302648][   T43] usb 1-1: config 0 descriptor??
[  827.319826][   T43] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[  827.327066][ T5836] usb 6-1: Using ep0 maxpacket: 8
[  827.335263][ T5836] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  827.347257][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  827.367040][ T5836] pvrusb2: Hardware description: Terratec Grabster AV400
[  827.375208][ T5836] pvrusb2: **********
[  827.379590][ T5836] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  827.390635][ T5836] pvrusb2: Important functionality might not be entirely working.
[  827.398711][ T5836] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  827.410932][ T5836] pvrusb2: **********
[  827.528475][T17931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  827.539990][T17931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  827.553357][T17931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  827.563613][T17936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  827.574690][ T2344] pvrusb2: Invalid write control endpoint
[  827.577742][T17936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  827.597434][T17931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  827.624511][   T43] snd_usb_toneport 1-1:0.0: set_interface failed
[  827.631205][   T43] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[  827.664344][   T43] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -71
[  827.703040][   T43] usb 1-1: USB disconnect, device number 28
[  827.735524][ T2344] pvrusb2: Invalid write control endpoint
[  827.741493][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  827.750984][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  827.762908][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  827.773592][ T2344] pvrusb2: Device being rendered inoperable
[  827.781440][T17933] pvrusb2: Attempted to execute control transfer when device not ok
[  827.792155][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  827.801299][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  827.812838][ T2344] pvrusb2: Attached sub-driver cx25840
[  827.820319][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  827.842390][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  828.106757][T17946] vxcan6: entered allmulticast mode
[  828.487797][T17953] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3431573084 (3431573084 ns) > initial count (653659414 ns). Using initial count to start timer.
[  828.824147][  T982] usb 1-1: new low-speed USB device number 29 using dummy_hcd
[  828.976009][  T982] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2
[  828.986443][  T982] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  829.003644][  T982] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8
[  829.015121][  T982] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  829.032520][  T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  829.046879][T17953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  829.274483][  T982] usb 1-1: string descriptor 0 read error: -71
[  829.307374][   T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  829.340851][   T24] usb 4-1: USB disconnect, device number 11
[  829.459530][  T982] usb 1-1: USB disconnect, device number 29
[  830.020126][  T982] usb 6-1: USB disconnect, device number 62
[  830.123118][T17974] @: renamed from vlan0
[  831.204234][   T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  831.334398][   T24] usb 3-1: device descriptor read/64, error -71
[  831.344191][  T982] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  831.387263][T18003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3518'.
[  831.463662][T17997] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3516'.
[  831.572868][  T982] usb 4-1: Using ep0 maxpacket: 16
[  831.588059][   T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  831.618477][  T982] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 2
[  831.634151][  T982] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  831.654377][ T5836] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  831.689367][  T982] usb 4-1: config 1 interface 0 has no altsetting 0
[  831.755553][  T982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  831.781918][  T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.804830][   T24] usb 3-1: device descriptor read/64, error -71
[  831.820718][  T982] usb 4-1: Product: syz
[  831.829521][  T982] usb 4-1: Manufacturer: syz
[  831.846019][  T982] usb 4-1: SerialNumber: syz
[  831.884390][ T5836] usb 1-1: Using ep0 maxpacket: 32
[  831.891288][ T5836] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config
[  831.902155][ T5836] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  831.916533][ T5836] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  831.927943][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.936551][ T5836] usb 1-1: Product: syz
[  831.940759][ T5836] usb 1-1: Manufacturer: syz
[  831.948265][T17994] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  832.008151][   T24] usb usb3-port1: attempt power cycle
[  832.018405][ T5836] usb 1-1: SerialNumber: syz
[  832.035952][ T5836] usb 1-1: config 0 descriptor??
[  832.176955][  T982] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[  832.347493][T18003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  832.357655][T18003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  832.365150][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  832.381499][T18003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  832.390295][   T24] usb 3-1: device descriptor read/8, error -71
[  832.397654][T18003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  832.714384][   T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  832.834974][   T24] usb 3-1: device descriptor read/8, error -71
[  832.954451][   T24] usb usb3-port1: unable to enumerate USB device
[  834.261595][T18017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  834.271469][T18017] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  834.376426][   T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  834.439371][ T5836] usb 4-1: USB disconnect, device number 12
[  834.489203][ T5836] usblp0: removed
[  834.495289][   T43] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  834.524164][T18020] syzkaller1: entered allmulticast mode
[  834.544193][   T24] usb 6-1: Using ep0 maxpacket: 8
[  834.562775][   T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  834.593175][   T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  834.614596][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  834.628079][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  834.639644][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  834.657340][   T24] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  834.674645][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  834.683061][   T24] usb 6-1: Product: syz
[  834.687871][   T43] usb 5-1: Using ep0 maxpacket: 8
[  834.693304][   T24] usb 6-1: Manufacturer: syz
[  834.724899][   T24] usb 6-1: SerialNumber: syz
[  834.730084][   T43] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  834.741063][   T43] usb 5-1: config 179 has no interface number 0
[  834.752052][   T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  834.763944][   T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  834.776520][   T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  834.789754][   T24] usb 6-1: config 0 descriptor??
[  834.802739][   T43] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  834.817992][   T43] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  834.833987][   T43] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  834.854369][ T5835] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  834.866625][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  834.916652][ T5836] usb 1-1: USB disconnect, device number 30
[  834.930202][T18018] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  835.001922][   T24] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  835.010036][ T5835] usb 3-1: Using ep0 maxpacket: 16
[  835.019258][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  835.032068][   T24] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  835.050676][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 7
[  835.062757][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 1797, setting to 1024
[  835.081212][ T5835] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  835.091119][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.100684][ T5835] usb 3-1: Product: syz
[  835.105394][ T5835] usb 3-1: Manufacturer: syz
[  835.110390][ T5835] usb 3-1: SerialNumber: syz
[  835.131662][ T5835] usb 3-1: config 0 descriptor??
[  835.142855][T18034] fuse: Unknown parameter '00000000000000000003'
[  835.150674][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  835.150708][   T30] audit: type=1326 audit(1760126284.895:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18031 comm="syz.0.3525" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bde78eec9 code=0x0
[  835.180501][ T5886] usb 5-1: USB disconnect, device number 121
[  835.180585][    C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  835.194944][    C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  835.211501][ T5835] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  835.224664][ T5835] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  835.242329][   T24] radio-si470x 6-1:0.0: software version 0, hardware version 0
[  835.251691][   T24] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  835.266318][   T24] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  835.443921][   T24] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71
[  835.452618][   T24] radio-si470x 6-1:0.0: submitting int urb failed (-90)
[  835.460402][   T24] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71
[  835.469638][   T24] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22
[  835.486300][   T24] usb 6-1: USB disconnect, device number 63
[  835.758068][ T5835] em28xx 3-1:0.0: chip ID is em2874
[  835.972624][ T5886] usb 3-1: USB disconnect, device number 8
[  835.986057][ T5886] em28xx 3-1:0.0: Disconnecting em28xx
[  836.006985][ T5886] em28xx 3-1:0.0: Freeing device
[  836.012786][T18047] loop2: detected capacity change from 0 to 7
[  836.029150][T18047] Dev loop2: unable to read RDB block 7
[  836.043998][T18047]  loop2: AHDI p1 p2 p3
[  836.054242][T18047] loop2: partition table partially beyond EOD, truncated
[  836.073336][T18047] loop2: p1 start 1601398130 is beyond EOD, truncated
[  836.086238][T18047] loop2: p2 start 1702059890 is beyond EOD, truncated
[  836.207281][T18046] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  836.684164][ T5835] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  836.794201][ T5886] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  836.841897][ T5835] usb 1-1: Using ep0 maxpacket: 32
[  836.866686][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  836.896654][ T5835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  836.924304][ T5835] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  836.954152][ T5886] usb 6-1: Using ep0 maxpacket: 8
[  836.959637][ T5835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.961572][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short
[  836.985486][ T5886] usb 6-1: config 1 interface 0 has no altsetting 0
[  836.988772][ T5835] usb 1-1: config 0 descriptor??
[  837.004262][ T5886] usb 6-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=6a.56
[  837.016389][ T5835] hub 1-1:0.0: USB hub found
[  837.016737][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.032670][ T5886] usb 6-1: Product: syz
[  837.045650][ T5886] usb 6-1: Manufacturer: syz
[  837.050528][ T5886] usb 6-1: SerialNumber: syz
[  837.104433][ T5913] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  837.213650][ T5835] hub 1-1:0.0: 1 port detected
[  837.262306][ T5913] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  837.275183][T18060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  837.285273][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  837.299415][T18060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  837.324314][ T5913] usb 3-1: Product: syz
[  837.328594][ T5913] usb 3-1: Manufacturer: syz
[  837.333553][ T5913] usb 3-1: SerialNumber: syz
[  837.347547][ T5886] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[  837.363985][ T5886] pwc: send_video_command error -71
[  837.371941][ T5886] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  837.384613][ T5886] Philips webcam 6-1:1.0: probe with driver Philips webcam failed with error -71
[  837.407317][ T5886] usb 6-1: USB disconnect, device number 64
[  837.449365][ T5835] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  837.469136][ T5835] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  837.508259][ T5835] usbhid 1-1:0.0: can't add hid device: -71
[  837.514558][ T5835] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  837.555170][ T5835] usb 1-1: USB disconnect, device number 31
[  838.012618][T18067] xt_l2tp: invalid flags combination: 8
[  838.444226][ T5886] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  838.594202][   T43] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  838.616520][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  838.628030][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  838.637921][ T5886] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  838.647246][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  838.658993][ T5886] usb 1-1: config 0 descriptor??
[  838.749336][   T43] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e
[  838.768961][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.795190][T18062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3534'.
[  838.797059][   T43] usb 6-1: Product: syz
[  838.816325][T18073] vxcan6: entered allmulticast mode
[  838.822373][   T43] usb 6-1: Manufacturer: syz
[  838.828739][   T43] usb 6-1: SerialNumber: syz
[  838.845198][   T43] usb 6-1: config 0 descriptor??
[  838.877690][ T5886] usbhid 1-1:0.0: can't add hid device: -71
[  838.883834][ T5886] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  838.922552][ T5886] usb 1-1: USB disconnect, device number 32
[  839.062033][T18075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  839.073893][T18075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  839.101294][T18075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  839.118812][T18075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  839.131567][T18075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  839.147235][T18075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  839.404283][ T5886] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  839.414464][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE
[  839.427190][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  839.437601][ T5913] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  839.457195][ T5913] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[  839.557465][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  839.595173][ T5886] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  839.614398][ T5886] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  839.629873][   T43] mos7840 6-1:0.0: required endpoints missing
[  839.634595][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  839.678048][   T43] usb 6-1: USB disconnect, device number 65
[  839.687922][ T5886] usb 1-1: config 0 descriptor??
[  839.918815][ T5886] usbhid 1-1:0.0: can't add hid device: -71
[  839.957706][ T5886] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  839.996522][ T5886] usb 1-1: USB disconnect, device number 33
[  840.511674][ T5886] usb 3-1: USB disconnect, device number 9
[  840.730520][T18100] loop6: detected capacity change from 0 to 7
[  840.776891][T18100]  loop6: [POWERTEC] p1 p2 p3 p4
[  840.782091][T18100] loop6: p1 size 46137344 extends beyond EOD, truncated
[  840.851177][T18100] loop6: p2 start 1986290036 is beyond EOD, truncated
[  840.864007][T18100] loop6: p3 size 1633812480 extends beyond EOD, truncated
[  840.876523][T18100] loop6: p4 start 1635021614 is beyond EOD, truncated
[  840.887042][T18107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3545'.
[  841.020684][T11111] udevd[11111]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  841.035910][T11080] udevd[11080]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  841.387723][T18118] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3547'.
[  842.494173][   T43] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  842.655601][   T43] usb 3-1: Using ep0 maxpacket: 32
[  842.792720][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  842.824322][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  842.877298][   T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  842.896629][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  842.945636][   T43] usb 3-1: config 0 descriptor??
[  842.952750][   T43] hub 3-1:0.0: USB hub found
[  843.039086][ T5886] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  843.159715][   T43] hub 3-1:0.0: 1 port detected
[  843.232370][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  843.278231][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.294633][ T5886] usb 1-1: Product: syz
[  843.304187][ T5886] usb 1-1: Manufacturer: syz
[  843.308840][ T5886] usb 1-1: SerialNumber: syz
[  843.362148][   T43] hub 3-1:0.0: hub_hub_status failed (err = -71)
[  843.371448][T18131] fuse: Bad value for 'user_id'
[  843.377519][   T43] hub 3-1:0.0: config failed, can't get hub status (err -71)
[  843.396482][T18131] fuse: Bad value for 'user_id'
[  843.418033][   T43] usbhid 3-1:0.0: can't add hid device: -71
[  843.427768][T18131] tipc: Started in network mode
[  843.432813][   T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  843.437097][T18131] tipc: Node identity ae8ede4279a3, cluster identity 4711
[  843.459013][T18131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  843.467062][   T43] usb 3-1: USB disconnect, device number 10
[  843.478616][T18131] syzkaller0: entered promiscuous mode
[  843.489563][T18131] syzkaller0: entered allmulticast mode
[  843.525689][T18131] tipc: Resetting bearer <eth:syzkaller0>
[  843.542800][T18130] tipc: Resetting bearer <eth:syzkaller0>
[  843.610922][T18130] tipc: Disabling bearer <eth:syzkaller0>
[  843.679875][T18140] batadv_slave_0: entered promiscuous mode
[  843.687526][T18140] macsec2: entered promiscuous mode
[  843.692982][T18140] macsec2: entered allmulticast mode
[  843.698713][T18140] batadv_slave_0: entered allmulticast mode
[  843.709657][T18140] batadv_slave_0: left allmulticast mode
[  843.718820][T18140] batadv_slave_0: left promiscuous mode
[  843.802447][T18145] loop6: detected capacity change from 0 to 7
[  843.839438][T18145]  loop6: [POWERTEC] p1 p2 p3 p4
[  843.860307][T18145] loop6: p1 size 46137344 extends beyond EOD, truncated
[  843.887641][T18145] loop6: p2 start 1986290036 is beyond EOD, truncated
[  843.907701][T18145] loop6: p3 size 1633812480 extends beyond EOD, truncated
[  843.939862][T18145] loop6: p4 start 1635021614 is beyond EOD, truncated
[  844.084217][   T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  844.142840][T11077] udevd[11077]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  844.172021][T11111] udevd[11111]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  844.196612][T18150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  844.217807][T18150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  844.245998][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO
[  844.306918][   T43] usb 4-1: config 0 has no interfaces?
[  844.319775][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  844.321215][   T43] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  844.339819][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.349946][   T43] usb 4-1: Product: syz
[  844.354285][   T43] usb 4-1: Manufacturer: syz
[  844.359101][   T43] usb 4-1: SerialNumber: syz
[  844.375821][   T43] usb 4-1: config 0 descriptor??
[  844.405457][ T5886] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  844.444169][   T24] usb 6-1: new low-speed USB device number 66 using dummy_hcd
[  844.452030][ T5886] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  844.477103][ T5886] usb 1-1: USB disconnect, device number 34
[  844.615197][   T24] usb 6-1: Invalid ep0 maxpacket: 64
[  844.764152][   T24] usb 6-1: new low-speed USB device number 67 using dummy_hcd
[  844.933900][T18165] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  844.946411][   T24] usb 6-1: Invalid ep0 maxpacket: 64
[  844.961142][   T24] usb usb6-port1: attempt power cycle
[  845.097638][   T30] audit: type=1800 audit(1760126294.815:467): pid=18167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3561" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=94011 res=0 errno=0
[  845.354921][   T24] usb 6-1: new low-speed USB device number 68 using dummy_hcd
[  845.415032][   T24] usb 6-1: Invalid ep0 maxpacket: 64
[  845.458459][T18172] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3565'.
[  845.546318][   T24] usb 6-1: new low-speed USB device number 69 using dummy_hcd
[  845.636037][   T24] usb 6-1: Invalid ep0 maxpacket: 64
[  845.643184][   T24] usb usb6-port1: unable to enumerate USB device
[  845.980168][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3566'.
[  846.191777][T18177] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3566'.
[  846.252303][T18175] gtp0: entered promiscuous mode
[  846.572085][T18180] syzkaller0: entered promiscuous mode
[  846.577741][T18180] syzkaller0: entered allmulticast mode
[  846.743874][T18184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3568'.
[  846.944163][   T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  847.095364][   T43] usb 3-1: Using ep0 maxpacket: 16
[  847.106459][   T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  847.120596][   T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  847.134604][   T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  847.144167][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.154739][   T43] usb 3-1: Product: syz
[  847.160132][   T43] usb 3-1: Manufacturer: syz
[  847.193219][   T43] usb 3-1: SerialNumber: syz
[  847.329755][ T5913] usb 4-1: USB disconnect, device number 13
[  847.440917][   T43] usb 3-1: 0:2 : does not exist
[  847.487067][   T43] usb 3-1: USB disconnect, device number 11
[  847.570869][T11080] udevd[11080]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  847.694658][T18214] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  847.711951][T18208] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3573'.
[  848.354183][ T5913] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  848.422394][T18225] random: crng reseeded on system resumption
[  848.484174][ T5913] usb 3-1: device descriptor read/64, error -71
[  848.601286][   T30] audit: type=1326 audit(1760126298.345:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18232 comm="syz.3.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454878eec9 code=0x7ffc0000
[  848.628658][   T30] audit: type=1326 audit(1760126298.345:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18232 comm="syz.3.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454878eec9 code=0x7ffc0000
[  848.652840][   T30] audit: type=1326 audit(1760126298.345:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18232 comm="syz.3.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f454878eec9 code=0x7ffc0000
[  848.683283][   T30] audit: type=1326 audit(1760126298.345:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18232 comm="syz.3.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454878eec9 code=0x7ffc0000
[  848.707804][   T30] audit: type=1326 audit(1760126298.345:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18232 comm="syz.3.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454878eec9 code=0x7ffc0000
[  848.730480][   T30] audit: type=1326 audit(1760126298.345:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18232 comm="syz.3.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f454878eec9 code=0x7ffc0000
[  848.752771][    C0] vkms_vblank_simulate: vblank timer overrun
[  848.760992][ T5913] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  848.775839][   T30] audit: type=1326 audit(1760126298.345:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18232 comm="syz.3.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454878eec9 code=0x7ffc0000
[  848.798940][   T30] audit: type=1326 audit(1760126298.345:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18232 comm="syz.3.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f454878eec9 code=0x7ffc0000
[  848.824417][   T30] audit: type=1326 audit(1760126298.345:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18232 comm="syz.3.3582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454878eec9 code=0x7ffc0000
[  848.914199][ T5913] usb 3-1: device descriptor read/64, error -71
[  849.037601][ T5913] usb usb3-port1: attempt power cycle
[  849.404178][ T5913] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  849.426229][ T5913] usb 3-1: device descriptor read/8, error -71
[  849.684671][ T5913] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  849.704673][ T5913] usb 3-1: device descriptor read/8, error -71
[  849.804416][ T5886] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  849.816964][ T5913] usb usb3-port1: unable to enumerate USB device
[  849.975979][ T5886] usb 4-1: Using ep0 maxpacket: 16
[  849.990567][ T5886] usb 4-1: config 166 has an invalid interface number: 177 but max is 1
[  850.000396][ T5886] usb 4-1: config 166 has an invalid interface number: 34 but max is 1
[  850.012697][ T5886] usb 4-1: config 166 has no interface number 0
[  850.019350][ T5886] usb 4-1: config 166 has no interface number 1
[  850.028111][ T5886] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  850.039787][ T5886] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  850.051618][ T5886] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  850.087344][ T5886] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  850.111213][ T5886] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  850.124681][ T5886] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  850.135676][ T5886] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  850.147061][ T5886] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  850.162823][ T5886] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  850.176402][ T5886] usb 4-1: config 166 interface 177 has no altsetting 0
[  850.193754][ T5886] usb 4-1: config 166 interface 34 has no altsetting 0
[  850.222671][ T5886] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  850.232362][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.240824][ T5886] usb 4-1: Product: syz
[  850.246366][ T5886] usb 4-1: Manufacturer: syz
[  850.253373][ T5886] usb 4-1: SerialNumber: syz
[  850.454396][   T43] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  850.468764][ T5886] ums-realtek 4-1:166.177: USB Mass Storage device detected
[  850.630381][   T43] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  850.654800][   T43] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  850.671166][   T43] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  850.682462][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  850.692621][   T43] usb 1-1: SerialNumber: syz
[  850.719331][T18265] netlink: 'syz.4.3589': attribute type 15 has an invalid length.
[  850.727750][T18265] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3589'.
[  850.748536][ T5886] ums-realtek 4-1:166.34: USB Mass Storage device detected
[  851.135390][ T5886] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5
[  851.266329][ T5886] uvcvideo 4-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[  851.287375][ T5886] uvcvideo 4-1:166.34: No valid video chain found.
[  851.305213][ T5886] usb 4-1: USB disconnect, device number 14
[  851.608683][T18276] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3592'.
[  851.622430][T18276] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3592'.
[  851.874396][ T5886] usb 6-1: new full-speed USB device number 70 using dummy_hcd
[  852.097438][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short
[  852.115047][ T5886] usb 6-1: not running at top speed; connect to a high speed hub
[  852.139589][ T5886] usb 6-1: config 7 has an invalid interface number: 205 but max is 0
[  852.156484][ T5886] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  852.224399][ T5886] usb 6-1: config 7 has no interface number 0
[  852.245059][ T5886] usb 6-1: config 7 interface 205 altsetting 247 endpoint 0x6 has invalid maxpacket 1600, setting to 64
[  852.262027][ T5886] usb 6-1: config 7 interface 205 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  852.294990][ T5886] usb 6-1: config 7 interface 205 has no altsetting 0
[  852.325721][ T5886] usb 6-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice=30.fb
[  852.344913][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.353247][ T5886] usb 6-1: Product: syz
[  852.358202][ T5886] usb 6-1: Manufacturer: syz
[  852.363003][ T5886] usb 6-1: SerialNumber: syz
[  852.524303][ T5882] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  852.640482][ T5886] usb 6-1: USB disconnect, device number 70
[  852.697122][ T5882] usb 3-1: unable to read config index 0 descriptor/start: -61
[  852.711611][ T5882] usb 3-1: can't read configurations, error -61
[  852.924216][ T5882] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  853.119606][ T5882] usb 3-1: unable to read config index 0 descriptor/start: -61
[  853.138446][ T5882] usb 3-1: can't read configurations, error -61
[  853.168311][ T5882] usb usb3-port1: attempt power cycle
[  853.252597][   T43] usb 1-1: 0:2 : does not exist
[  853.302234][   T43] usb 1-1: unit 5: unexpected type 0x0b
[  853.352798][   T43] usb 1-1: USB disconnect, device number 36
[  853.424351][T11080] udevd[11080]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  853.547428][ T5882] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  853.586841][ T5882] usb 3-1: unable to read config index 0 descriptor/start: -61
[  853.601486][ T5882] usb 3-1: can't read configurations, error -61
[  853.764365][ T5882] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  853.838717][ T5882] usb 3-1: unable to read config index 0 descriptor/start: -61
[  853.848833][ T5882] usb 3-1: can't read configurations, error -61
[  853.857487][ T5882] usb usb3-port1: unable to enumerate USB device
[  853.894461][T18306] fuse: Bad value for 'user_id'
[  853.899510][T18306] fuse: Bad value for 'user_id'
[  853.998863][T18310] netlink: 1312 bytes leftover after parsing attributes in process `syz.4.3602'.
[  853.999105][T18308] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3600'.
[  854.714164][   T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  854.904172][   T43] usb 4-1: Using ep0 maxpacket: 32
[  854.915126][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  854.926151][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  854.936703][   T43] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  854.947016][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  854.971108][   T43] usb 4-1: config 0 descriptor??
[  855.012474][   T43] hub 4-1:0.0: USB hub found
[  855.017332][ T5836] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[  855.181735][ T5836] usb 6-1: device descriptor read/64, error -71
[  855.199412][   T43] hub 4-1:0.0: config failed, can't read hub descriptor (err -90)
[  855.434461][ T5836] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[  855.527579][T18337] input: syz1 as /devices/virtual/input/input55
[  855.584156][ T5836] usb 6-1: device descriptor read/64, error -71
[  855.623218][   T43] hid-generic 0003:046D:C31C.002C: item fetching failed at offset 0/1
[  855.649112][   T43] hid-generic 0003:046D:C31C.002C: probe with driver hid-generic failed with error -22
[  855.715310][ T5836] usb usb6-port1: attempt power cycle
[  855.831276][T18322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  855.847336][T18322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  856.084146][ T5836] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[  856.144721][ T5836] usb 6-1: device descriptor read/8, error -71
[  856.395492][ T5836] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  856.445509][ T5836] usb 6-1: device descriptor read/8, error -71
[  856.568735][ T5836] usb usb6-port1: unable to enumerate USB device
[  857.194337][ T5882] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  857.356009][ T5882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  857.377420][ T5882] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=67.3e
[  857.388975][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.399452][ T5882] usb 1-1: Product: syz
[  857.405016][ T5882] usb 1-1: Manufacturer: syz
[  857.411240][ T5882] usb 1-1: SerialNumber: syz
[  857.423317][ T5882] usb 1-1: config 0 descriptor??
[  857.431972][ T5882] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  857.474298][ T5886] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  857.605444][ T5886] usb 3-1: device descriptor read/64, error -71
[  857.854194][ T5886] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  857.994221][ T5886] usb 3-1: device descriptor read/64, error -71
[  858.114567][ T5886] usb usb3-port1: attempt power cycle
[  858.422942][T18375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  858.432345][   T43] usb 4-1: USB disconnect, device number 15
[  858.484754][ T5886] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  858.524647][ T5886] usb 3-1: device descriptor read/8, error -71
[  858.764202][ T5886] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  858.810154][ T5886] usb 3-1: device descriptor read/8, error -71
[  858.895956][T18387] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3621'.
[  858.964544][ T5886] usb usb3-port1: unable to enumerate USB device
[  859.136398][   T43] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  859.284770][   T43] usb 6-1: device descriptor read/64, error -71
[  859.534203][   T43] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[  859.684447][   T43] usb 6-1: device descriptor read/64, error -71
[  859.794792][   T43] usb usb6-port1: attempt power cycle
[  859.815531][T18395] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3623'.
[  859.922626][ T5913] usb 1-1: USB disconnect, device number 37
[  860.039008][T18402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  860.058636][T18402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  860.121031][T18407] loop6: detected capacity change from 0 to 7
[  860.130368][T18407] Dev loop6: unable to read RDB block 7
[  860.137245][   T43] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  860.141764][T18407]  loop6: unable to read partition table
[  860.151450][T18407] loop6: partition table beyond EOD, truncated
[  860.158218][T18407] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  860.173375][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3625'.
[  860.186311][   T43] usb 6-1: device descriptor read/8, error -71
[  860.195430][T18408] bridge_slave_1: left allmulticast mode
[  860.213769][T18408] bridge_slave_1: left promiscuous mode
[  860.227012][T18408] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.246963][T18408] bridge_slave_0: left allmulticast mode
[  860.252811][T18408] bridge_slave_0: left promiscuous mode
[  860.259059][T18408] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.456716][   T43] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  860.483825][T18417] team0: Device gtp0 is of different type
[  860.502551][   T43] usb 6-1: device descriptor read/8, error -71
[  860.537016][T18420] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  860.615851][   T43] usb usb6-port1: unable to enumerate USB device
[  860.914259][ T5886] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  860.992097][T18430] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3632'.
[  861.784265][ T5886] usb 1-1: device descriptor read/64, error -71
[  862.024438][ T5886] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  862.274284][ T5886] usb 1-1: Using ep0 maxpacket: 16
[  862.328811][ T5886] usb 1-1: config 0 has no interfaces?
[  862.348075][ T5886] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  862.367496][ T5886] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  862.415535][ T5886] usb 1-1: Manufacturer: syz
[  862.432285][ T5886] usb 1-1: config 0 descriptor??
[  862.565565][T18446] binder: BINDER_SET_CONTEXT_MGR already set
[  862.615372][T18446] binder: 18442:18446 ioctl 4018620d 200000000040 returned -16
[  863.521519][T18454] loop6: detected capacity change from 0 to 7
[  863.529149][T18454]  loop6: [POWERTEC] p1 p2 p3 p4
[  863.535360][T18454] loop6: p1 size 46137344 extends beyond EOD, truncated
[  863.546197][T18454] loop6: p2 start 1986290036 is beyond EOD, truncated
[  863.553827][T18454] loop6: p3 size 1633812480 extends beyond EOD, truncated
[  863.568753][T18454] loop6: p4 start 1635021614 is beyond EOD, truncated
[  863.676996][T11111] udevd[11111]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  863.699605][T11080] udevd[11080]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  864.259159][ T5886] usb 1-1: USB disconnect, device number 39
[  864.760510][T18485] loop6: detected capacity change from 0 to 7
[  864.787575][T18485] Dev loop6: unable to read RDB block 7
[  864.813364][T18485]  loop6: unable to read partition table
[  864.825451][T18485] loop6: partition table beyond EOD, truncated
[  864.842775][T18485] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  865.517136][T18503] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3651'.
[  865.704864][   T43] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  865.748679][T18520] fuse: Unknown parameter 'Ud'
[  865.765372][T18520] fuse: Unknown parameter 'fd����L�ߓ�H�>�K���'���0x0000000000000008'
[  865.874177][   T43] usb 3-1: Using ep0 maxpacket: 8
[  865.881482][   T43] usb 3-1: config 0 has an invalid interface number: 127 but max is 0
[  865.890631][   T43] usb 3-1: config 0 has no interface number 0
[  865.903184][   T43] usb 3-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice=50.49
[  865.915364][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  865.924928][   T43] usb 3-1: Product: syz
[  865.930768][   T43] usb 3-1: Manufacturer: syz
[  865.936219][   T43] usb 3-1: SerialNumber: syz
[  865.951289][   T43] usb 3-1: config 0 descriptor??
[  866.144568][ T5835] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  866.210236][T18512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  866.230675][T18512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  866.285965][   T43] ums-sddr55 3-1:0.127: USB Mass Storage device detected
[  866.522466][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  866.535093][   T43] usb 3-1: USB disconnect, device number 24
[  866.576619][ T5835] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  866.634179][ T5835] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  866.650235][ T5835] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  866.662048][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.676105][ T5835] usb 5-1: config 0 descriptor??
[  867.117175][T18540] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3660'.
[  867.159877][ T5835] plantronics 0003:047F:FFFF.002D: reserved main item tag 0xd
[  867.176725][ T5835] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0
[  867.195117][T18542] loop6: detected capacity change from 0 to 7
[  867.222237][ T5835] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  867.248376][T18542]  loop6: [POWERTEC] p1 p2 p3 p4
[  867.253712][T18542] loop6: p1 size 46137344 extends beyond EOD, truncated
[  867.299310][T18542] loop6: p2 start 1986290036 is beyond EOD, truncated
[  867.308078][T18542] loop6: p3 size 1633812480 extends beyond EOD, truncated
[  867.335153][T18542] loop6: p4 start 1635021614 is beyond EOD, truncated
[  867.498405][T18388] udevd[18388]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  867.519563][T11080] udevd[11080]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory
[  867.796271][ T5886] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  867.965829][ T5886] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  867.978928][ T5886] usb 4-1: config 1 has no interface number 0
[  867.991131][ T5886] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  868.020110][ T5886] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  868.040212][ T5886] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  868.102410][ T5886] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  868.114494][ T5886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  868.122795][ T5886] usb 4-1: Product: syz
[  868.127676][ T5886] usb 4-1: Manufacturer: syz
[  868.132590][ T5886] usb 4-1: SerialNumber: syz
[  868.153081][T18545] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  868.263042][ T5835] usb 5-1: USB disconnect, device number 122
[  868.368136][T18545] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  868.392713][ T5886] usb 4-1: No status endpoint found
[  868.589069][ T5886] usb 4-1: USB disconnect, device number 16
[  868.768296][T18564] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3668'.
[  869.206538][T18583] program syz.3.3673 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  869.496088][T18590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3673'.
[  869.649765][T18596] loop2: detected capacity change from 0 to 7
[  869.672981][T11080] Dev loop2: unable to read RDB block 7
[  869.682363][T11080]  loop2: unable to read partition table
[  869.693046][T11080] loop2: partition table beyond EOD, truncated
[  869.711860][T18596] Dev loop2: unable to read RDB block 7
[  869.732329][T18596]  loop2: unable to read partition table
[  869.750435][T18596] loop2: partition table beyond EOD, truncated
[  869.769096][T18596] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  869.829181][T18601] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3675'.
[  870.284189][ T5913] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  870.534274][ T5913] usb 1-1: Using ep0 maxpacket: 16
[  870.542352][ T5913] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  870.556495][ T5913] usb 1-1: config 1 has no interface number 0
[  870.577576][ T5913] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  870.607117][ T5913] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  870.641208][ T5913] usb 1-1: config 1 interface 105 has no altsetting 0
[  870.671024][ T5913] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  870.703030][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.730017][ T5913] usb 1-1: Product: syz
[  870.743339][ T5913] usb 1-1: Manufacturer: syz
[  870.758967][ T5913] usb 1-1: SerialNumber: syz
[  870.775642][T18604] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  870.817721][T18604] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  871.277472][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3678'.
[  871.297088][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3678'.
[  871.322866][T18610] ==================================================================
[  871.330991][T18610] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  871.339637][T18610] Write of size 5120 at addr ffffc9000baa3c40 by task vivid-000-vid-c/18610
[  871.348345][T18610] 
[  871.350693][T18610] CPU: 0 UID: 0 PID: 18610 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) 
[  871.350721][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  871.350737][T18610] Call Trace:
[  871.350746][T18610]  <TASK>
[  871.350756][T18610]  dump_stack_lvl+0x189/0x250
[  871.350784][T18610]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  871.350813][T18610]  ? __pfx_dump_stack_lvl+0x10/0x10
[  871.350836][T18610]  ? __pfx__printk+0x10/0x10
[  871.350857][T18610]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  871.350885][T18610]  ? __virt_addr_valid+0xdc/0x5c0
[  871.350914][T18610]  ? __virt_addr_valid+0xdc/0x5c0
[  871.350945][T18610]  print_report+0xca/0x240
[  871.350972][T18610]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  871.350996][T18610]  kasan_report+0x118/0x150
[  871.351018][T18610]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  871.351048][T18610]  kasan_check_range+0x2b0/0x2c0
[  871.351068][T18610]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  871.351105][T18610]  __asan_memcpy+0x40/0x70
[  871.351133][T18610]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  871.351202][T18610]  vivid_thread_vid_cap_tick+0xfff/0x5fd0
[  871.351223][T18610]  ? finish_task_switch+0x18b/0x950
[  871.351269][T18610]  ? __schedule+0x17ae/0x4cc0
[  871.351306][T18610]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[  871.351336][T18610]  ? kasan_check_range+0x9f/0x2c0
[  871.351361][T18610]  vivid_thread_vid_cap+0x8da/0x10d0
[  871.351397][T18610]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  871.351432][T18610]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  871.351456][T18610]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  871.351485][T18610]  ? __kthread_parkme+0x7b/0x200
[  871.351510][T18610]  ? __kthread_parkme+0x1a1/0x200
[  871.351538][T18610]  kthread+0x711/0x8a0
[  871.351567][T18610]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  871.351601][T18610]  ? __pfx_kthread+0x10/0x10
[  871.351630][T18610]  ? _raw_spin_unlock_irq+0x23/0x50
[  871.351654][T18610]  ? lockdep_hardirqs_on+0x9c/0x150
[  871.351678][T18610]  ? __pfx_kthread+0x10/0x10
[  871.351706][T18610]  ret_from_fork+0x4bc/0x870
[  871.351729][T18610]  ? __pfx_ret_from_fork+0x10/0x10
[  871.351754][T18610]  ? __switch_to_asm+0x39/0x70
[  871.351779][T18610]  ? __switch_to_asm+0x33/0x70
[  871.351802][T18610]  ? __pfx_kthread+0x10/0x10
[  871.351830][T18610]  ret_from_fork_asm+0x1a/0x30
[  871.351864][T18610]  </TASK>
[  871.351872][T18610] 
[  871.576763][T18610] The buggy address belongs to a vmalloc virtual mapping
[  871.583797][T18610] The buggy address belongs to the physical page:
[  871.590213][T18610] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43b84
[  871.598983][T18610] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  871.606125][T18610] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  871.614709][T18610] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000
[  871.623305][T18610] page dumped because: kasan: bad access detected
[  871.629723][T18610] page_owner tracks the page as allocated
[  871.635458][T18610] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_NOWARN), pid 18604, tgid 18603 (syz.0.3677), ts 871296472538, free_ts 870083215076
[  871.653985][T18610]  post_alloc_hook+0x240/0x2a0
[  871.658783][T18610]  get_page_from_freelist+0x2365/0x2440
[  871.664345][T18610]  __alloc_frozen_pages_noprof+0x181/0x370
[  871.670168][T18610]  alloc_pages_mpol+0x232/0x4a0
[  871.675039][T18610]  alloc_pages_noprof+0xa9/0x190
[  871.679987][T18610]  __vmalloc_node_range_noprof+0x96c/0x12d0
[  871.685986][T18610]  vmalloc_user_noprof+0xad/0xf0
[  871.690941][T18610]  vb2_vmalloc_alloc+0xef/0x340
[  871.695804][T18610]  __vb2_queue_alloc+0x9bf/0x15a0
[  871.700845][T18610]  vb2_core_reqbufs+0xc31/0x1420
[  871.705790][T18610]  __vb2_init_fileio+0x318/0xff0
[  871.710772][T18610]  vb2_core_poll+0x4c1/0x840
[  871.715368][T18610]  vb2_fop_poll+0x193/0x310
[  871.719885][T18610]  v4l2_poll+0x147/0x2c0
[  871.724151][T18610]  do_sys_poll+0x8c6/0x1070
[  871.728666][T18610]  __se_sys_ppoll+0x1ff/0x260
[  871.733349][T18610] page last free pid 3497 tgid 3497 stack trace:
[  871.739672][T18610]  __free_frozen_pages+0xbc4/0xd30
[  871.744941][T18610]  vfree+0x25a/0x400
[  871.748878][T18610]  htab_map_free+0x7b2/0x980
[  871.753481][T18610]  bpf_map_free+0x19b/0x3f0
[  871.758001][T18610]  process_scheduled_works+0xae1/0x17b0
[  871.763553][T18610]  worker_thread+0x8a0/0xda0
[  871.768154][T18610]  kthread+0x711/0x8a0
[  871.772234][T18610]  ret_from_fork+0x4bc/0x870
[  871.776834][T18610]  ret_from_fork_asm+0x1a/0x30
[  871.781608][T18610] 
[  871.783933][T18610] Memory state around the buggy address:
[  871.789561][T18610]  ffffc9000baa4f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  871.797624][T18610]  ffffc9000baa4f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  871.805694][T18610] >ffffc9000baa5000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  871.813749][T18610]                    ^
[  871.817814][T18610]  ffffc9000baa5080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  871.825904][T18610]  ffffc9000baa5100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  871.833962][T18610] ==================================================================
[  872.005970][T18610] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  872.013224][T18610] CPU: 1 UID: 0 PID: 18610 Comm: vivid-000-vid-c Not tainted syzkaller #0 PREEMPT(full) 
[  872.023060][T18610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  872.033148][T18610] Call Trace:
[  872.036456][T18610]  <TASK>
[  872.039417][T18610]  dump_stack_lvl+0x99/0x250
[  872.044035][T18610]  ? __asan_memcpy+0x40/0x70
[  872.048662][T18610]  ? __pfx_dump_stack_lvl+0x10/0x10
[  872.053893][T18610]  ? __pfx__printk+0x10/0x10
[  872.058522][T18610]  vpanic+0x237/0x6d0
[  872.062553][T18610]  ? __pfx_vpanic+0x10/0x10
[  872.067084][T18610]  ? preempt_schedule+0xae/0xc0
[  872.071967][T18610]  ? __pfx_preempt_schedule+0x10/0x10
[  872.077377][T18610]  panic+0xb9/0xc0
[  872.081143][T18610]  ? __pfx_panic+0x10/0x10
[  872.085602][T18610]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  872.091540][T18610]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  872.097209][T18610]  check_panic_on_warn+0x89/0xb0
[  872.102188][T18610]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  872.107856][T18610]  end_report+0x78/0x160
[  872.112121][T18610]  kasan_report+0x129/0x150
[  872.116653][T18610]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  872.122312][T18610]  kasan_check_range+0x2b0/0x2c0
[  872.127288][T18610]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  872.132953][T18610]  __asan_memcpy+0x40/0x70
[  872.137400][T18610]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[  872.142911][T18610]  vivid_thread_vid_cap_tick+0xfff/0x5fd0
[  872.148686][T18610]  ? finish_task_switch+0x18b/0x950
[  872.153969][T18610]  ? __schedule+0x17ae/0x4cc0
[  872.158685][T18610]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[  872.164867][T18610]  ? kasan_check_range+0x9f/0x2c0
[  872.169915][T18610]  vivid_thread_vid_cap+0x8da/0x10d0
[  872.175263][T18610]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  872.181026][T18610]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  872.186962][T18610]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  872.193319][T18610]  ? __kthread_parkme+0x7b/0x200
[  872.198291][T18610]  ? __kthread_parkme+0x1a1/0x200
[  872.203359][T18610]  kthread+0x711/0x8a0
[  872.207456][T18610]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[  872.213215][T18610]  ? __pfx_kthread+0x10/0x10
[  872.217880][T18610]  ? _raw_spin_unlock_irq+0x23/0x50
[  872.223100][T18610]  ? lockdep_hardirqs_on+0x9c/0x150
[  872.228322][T18610]  ? __pfx_kthread+0x10/0x10
[  872.232956][T18610]  ret_from_fork+0x4bc/0x870
[  872.237577][T18610]  ? __pfx_ret_from_fork+0x10/0x10
[  872.242718][T18610]  ? __switch_to_asm+0x39/0x70
[  872.247511][T18610]  ? __switch_to_asm+0x33/0x70
[  872.252296][T18610]  ? __pfx_kthread+0x10/0x10
[  872.256904][T18610]  ret_from_fork_asm+0x1a/0x30
[  872.261868][T18610]  </TASK>
[  872.265252][T18610] Kernel Offset: disabled
[  872.269590][T18610] Rebooting in 86400 seconds..