last executing test programs:

1m17.092608949s ago: executing program 3 (id=502):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettfilter={0x64, 0x2e, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x4, 0xfff1}, {0x0, 0x9}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xce2a}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x1}]}, 0x64}}, 0x4000800)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001f00010026bd7000fcdbdf25fe880000000000000000000000000001000004d20a002b00ac1414350000000000000000000000007469c3d2de2f890b2b0000ff340000"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x10)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_MIGRATE(r3, 0x6609)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x810)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x200000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}})
fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
r4 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_exec(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b706212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd503eac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147cca3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d9f47e89c4044eadde57cdefd15f25b822d2eaf2205df0d6b71b63ee0b63cb598f26509af36983578f6f4198a0843cc1b1bd780015007ab9709cc6211e3b5c68502f7f549fa66f30e7a9fe149282f679c8466b9734e3850ec98419dd0c887715902f9e7802842085bc606f30c2654869e9e3701fd0fc69137fe16559268a265eebd5cafad7c29de2adadec42a818d8ee389ca1fe33a1ef23617c89116a3a458b56612e4c36c43a9150d5331adbb0beb01a062b1f1349fc2ecea76cb7c40cdfe378185f3099b1d71414d0fda5a47f8593260cc0bd723a4cca81435f041321635f91bcb15aac48883a9617fb4e58c19b18cf3a7e1299a07f45325fcd05a7c30f47e77073dcc584f7e0516cb74c55a0a2a30dc9f3163868f7c233ad1fff87a2c3ad0fb71cc6433e9bd7c3209de0cba9552f5c7c04f24eccf206bdb745564539dd62d655a33d40a507660668c30f7720280c86c104e58d30d6cb65814e00b55ff9a33f3ed375dfb4b47d89a599f31a0d612827a8f6e2a73eb376e11160ddbc0d79e3a11d5a99fa9c98f559efeb1e0a196d6da225f8c145334989fae4eafc05bbad0dc880e923d6b2ed2890eed8255bd2f8296b8d689762aa02e1399045bc0cbec07ec937f2e6dfac960460574e2e00dc39221a4a0c31dbbfa4973e8b056afe87bdfe6bc1405d9ae867d05316247465aceddf5c95825d73a9b119dab89ac982fff04e5d140a8391bd6f1831a9b7519ba86abc94993fe918a1b640d57e276027d9ef490065235935403f7eda36490d0c96a16d276851a27ecd6d5a18a9c6e55f106"], 0x564)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0x2, 0x0)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

1m16.214315435s ago: executing program 3 (id=508):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0xfffc, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x200608c0)

1m15.662203359s ago: executing program 3 (id=510):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x0)
r0 = syz_clone(0x9cfdaa7c58b8bd70, &(0x7f0000000400)="1bcdffeda9e9c0e64ab53003301941bbeb88eb563314aafa43300466c4903a572cdc7339b50ff0960981448126008227f4da625c7bde48c2be65e090f4127c87a3284c7652e1af88ef78dac0d949668e09b31a5571c08f1d27b8b1b1eef3bd78485bdde818b5a764070f44ebbfa229db11871f45788aefef8c5b7ebdc8e6ebaeedf5d91f2c0aad7f3d396a4e238d", 0x8e, 0x0, 0x0, 0x0)
ptrace$peek(0x1, r0, &(0x7f00000005c0)) (async)
prctl$PR_SCHED_CORE(0x3e, 0x20000000000000, 0x0, 0x0, 0x0) (async)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x43, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) (async)
setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x12) (async)
r6 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/4\x00') (async)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0)
syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0, @ANYRES64=r6], 0x0) (async)
r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x2710, 0x3, 0xeeee0000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) (async)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async)
getsockname$packet(r8, 0x0, &(0x7f0000000100)) (async)
accept4$alg(r6, 0x0, 0x0, 0x1996a43e3195a8fb)
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r10 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
r11 = dup(r10) (async)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xe39, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0)
poll(0x0, 0x0, 0xfffeffff) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x2, 0x900, {{0x2f, 0x4, 0x1, 0x9, 0xbc, 0x67, 0x0, 0x6, 0x2f, 0x0, @remote, @empty, {[@rr={0x7, 0x1f, 0x44, [@dev={0xac, 0x14, 0x14, 0xd}, @remote, @broadcast, @rand_addr=0x64010100, @private=0xa010102, @multicast1, @multicast1]}, @cipso={0x86, 0x13, 0x2, [{0x6, 0xd, "6736f1490294106d7aa4ce"}]}, @timestamp_addr={0x44, 0x4, 0xa4, 0x1, 0x3}, @lsrr={0x83, 0x17, 0x98, [@empty, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @broadcast]}, @cipso={0x86, 0x4e, 0x3, [{0x2, 0x2}, {0x0, 0x7, "bed96de197"}, {0x0, 0xc, "bb86d4335bace0fcf050"}, {0x0, 0x11, "43e0fd7531ae3ffce44038d399840d"}, {0x0, 0x11, "791a058b459e956097f849ad9da70c"}, {0x0, 0x11, "85f887b9eca1025f6e07a774c72fa7"}]}, @timestamp={0x44, 0xc, 0x11, 0x0, 0x7, [0x0, 0x9]}]}}}}})

1m15.008377351s ago: executing program 3 (id=512):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={0x0}}, 0xfeb11bdd49a3dcc5)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100)
r3 = syz_io_uring_setup(0x24ff, &(0x7f0000000240)={0x0, 0xf36b, 0x10100, 0x1, 0x115}, &(0x7f0000000100)=<r4=>0x0, &(0x7f00000002c0)=<r5=>0x0)
syz_clone(0x668c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}}, 0x80)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x48, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "c5e4"}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
r7 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_SMBUS(r7, 0x720, &(0x7f00000000c0)={0x0, 0xc, 0x4, 0xfffffffffffffffe})
io_uring_enter(r3, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)

1m14.015803353s ago: executing program 3 (id=516):
syz_usb_connect(0x1, 0xffffffffffffff5b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x64, 0xf8, 0xf9, 0x40, 0x586, 0x340a, 0x1d5b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x1, 0x0, 0x80, 0xa0, 0x0, [{{0x9, 0x4, 0xb1, 0x0, 0x0, 0xd8, 0x57, 0x42, 0x4, [@generic={0xa3, 0xd, "442324648ad8c40ad70e45a13d1829be9d67a0aaa229daa7b97cb51e7e7fb96385ffaea316cd8afe5ee62671529de48c8fd72671523eb3b725e261e16c950dd8a1666a8cf4c691960d1e63c952cffb664e213825050c1f1803a3a234eb43c93d5a0955416ab43a967280aa36c34bfe425462af6b714773d470b1519c9a4d88d6ea28d1b0647f55f9c79c511e7fa552d982c2565cb62b9d108fd2a6bacbe58b511c"}]}}]}}]}}, 0x0)

1m13.780132855s ago: executing program 3 (id=518):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40000000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4)
set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
futex(0x0, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r7, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000300)="b9310a00000f3267260f01cfd9ada80000002e0f01d464df20ea060000804b00b9800000c00f3235000400000f30b8c49500000f23c80f21f8350000c0000f23f80f20d6c4c25dacac9640450000", 0x4e}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x5, 0x2, 0xfd, 0x800000000003, 0x4, 0x70a, 0x0, 0x81, 0xe141, 0x2000fffffffffc, 0x3, 0x8, 0xcc, 0xee, 0x3], 0x800a001, 0x281580})
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES16=0x0], 0x28}}, 0x1)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0)
userfaultfd(0x1)
unshare(0x28020480)

1m13.55273086s ago: executing program 32 (id=518):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x40000000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/schedstat\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0x8, 0x4)
set_mempolicy(0x6, &(0x7f0000000180)=0x472, 0x9)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
futex(0x0, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000)=0x1, 0x0)
r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r7, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000300)="b9310a00000f3267260f01cfd9ada80000002e0f01d464df20ea060000804b00b9800000c00f3235000400000f30b8c49500000f23c80f21f8350000c0000f23f80f20d6c4c25dacac9640450000", 0x4e}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x5, 0x2, 0xfd, 0x800000000003, 0x4, 0x70a, 0x0, 0x81, 0xe141, 0x2000fffffffffc, 0x3, 0x8, 0xcc, 0xee, 0x3], 0x800a001, 0x281580})
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r9, @ANYRES32=0x0, @ANYRES16=0x0], 0x28}}, 0x1)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0)
userfaultfd(0x1)
unshare(0x28020480)

10.842103291s ago: executing program 2 (id=771):
syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="1201555003651c73080a11511499970102030109021200000800"/36], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})

9.855050223s ago: executing program 5 (id=777):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4081}, 0x4080)
io_uring_enter(r1, 0x1238, 0x63e9, 0x21, &(0x7f00000001c0), 0x8)
readv(r1, &(0x7f0000000380)=[{&(0x7f0000000200)=""/34, 0x22}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/154, 0x9a}], 0x3)
r3 = socket$netlink(0x10, 0x3, 0x6)
openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x8800, 0x0)
r4 = dup3(r1, r0, 0x80000)
r5 = getpgrp(0x0)
process_vm_writev(r5, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/136, 0x88}], 0x1, &(0x7f0000000800)=[{&(0x7f0000000500)=""/81, 0x51}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/212, 0xd4}, {&(0x7f00000006c0)=""/180, 0xb4}, {&(0x7f0000000780)=""/86, 0x56}], 0x5, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x408, 0x1f8, 0x0, 0x98, 0x290, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, &(0x7f0000000880), {[{{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'vlan0\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x0, 0x45}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x7, 0xfff], 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x7f}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x1, 0x7, 0x2}}}, {{@ip={@broadcast, @loopback, 0xfaad3e21341dd91f, 0xffffff00, 'veth0_to_bond\x00', 'gretap0\x00', {}, {0xff}, 0x0, 0x3}, 0x0, 0xa0, 0xe0, 0x0, {}, [@common=@ah={{0x30}, {[0x101, 0x7fffffff]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xff, 0x1, @ipv4=@loopback, 0x4e21}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5000}, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000e80)={0xc})
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f00), r4)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048054}, 0x810)
read$FUSE(r1, &(0x7f0000001000)={0x2020, 0x0, <r8=>0x0}, 0x2020)
write$FUSE_IOCTL(r1, &(0x7f0000003040)={0x20, 0x0, r8, {0x1, 0xc, 0x400, 0xb}}, 0x20)
syz_open_dev$loop(&(0x7f0000003080), 0x9, 0x400000)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x32)
r9 = open(&(0x7f00000030c0)='./file0\x00', 0x800, 0x5f)
r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000003100), 0x952326cd22c48d82, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r10, 0xc020f509, &(0x7f0000003140)={r3, 0x0, 0xe, 0x2})
r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000031c0), r4)
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000003300)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000032c0)={&(0x7f0000003200)={0xa0, r11, 0x8, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0xa0}}, 0x0)
pipe2(&(0x7f0000003340)={<r12=>0xffffffffffffffff}, 0x880)
r13 = fcntl$getown(r9, 0x9)
ptrace$setopts(0x4206, r13, 0x800, 0x25)
ioctl$TIOCGSOFTCAR(r12, 0x5419, &(0x7f0000003380))

9.793227214s ago: executing program 5 (id=778):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc)
splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)
syz_emit_ethernet(0x6b, &(0x7f00000004c0)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5d, 0x0, 0x0, 0x40, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x1, 0x0, [0x0], "7f"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f00000001c0)={0x2, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0)
r4 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000001400)={{0x1, 0x1, 0x18, <r5=>r0, {0x6}}, './file0\x00'})
getsockopt$inet_buf(r5, 0x0, 0x26, &(0x7f0000001440)=""/178, &(0x7f0000001500)=0xb2)
syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_usb_connect$rtl8150(0x2, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_control_io$rtl8150(r6, &(0x7f00000003c0)={0x14, &(0x7f00000002c0)={0x20, 0x21, 0x11, {0x11, 0x10, "433fed3a5bc08ff068c6d9c3732285"}}, 0x0}, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x20, 0x6, 0x2, "9b80"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000004c0)={0xc0, 0x5, 0x5, "fe4462e261"}, &(0x7f0000000500)})
sendto$inet6(r2, &(0x7f0000001580)="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", 0xfe, 0x60000000, &(0x7f0000001680)={0xa, 0x4e24, 0x834f783b, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x2}, 0x1c)
bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e23, 0x3, @mcast1, 0x100}, 0x1c)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_connect$lan78xx(0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r4, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_extract_tcp_res$synack(&(0x7f0000000680)={0x41424344, <r7=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, r7, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0)
r8 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0x2, [{{0x9, 0x4, 0x0, 0x78, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x7d, 0x3, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0xb5ae35f4fb7db396, 0xf9, 0xf, 0x4}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x4, 0x6, 0x0, 0x40, 0xd}, 0xf, &(0x7f0000000340)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x1, 0x2}]}, 0x9, [{0x23, &(0x7f00000005c0)=@string={0x23, 0x3, "e9cd81dfbf4a3bf21d4ee69201373e636c635d1e0d999db942b172b9e80df906ae"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x480a}}, {0x7a, &(0x7f00000007c0)=@string={0x7a, 0x3, "1084f6d9e21f74e96ec315e8d1d62f5c47ed042eaad9fa5d4e46ae32cd9e711c6277a8c127e288fa99fc93cfa52d1eae43dd5c17f7fa3229cbecc753197ed140687db1f0d0c51f9b73ed50688d312ae7f719ca699e0dee0901b65c5a29c8426045ca830b42d04d6845d06ffd02b5292473817c54325d0257"}}, {0xe2, &(0x7f0000000840)=@string={0xe2, 0x3, "0e21eb4d13a82d6a5e8c0fd205caf9d2e79887ba2694fe44b04169097b195ee82cd7ac215965594ed5245ea44489f6705216244bcde2e2cbb9d7b98ebf84d26712cf93c98816544c6f65106f56815c070ff4c6966e725c90044707ccb443057346579f2b110e347c06871ae093448b38c7d82b67e057938fff9404dcb30ea90b8630bea376c8e5ac57e234080a677b5ce0c4d2b9a67597e7b83a3eeefa38f459f949e7c93206c1dc68a26f9aa73df762698a89b2ed5207f99add66545e98c592cc184b43c0775338cd0d7483f763b255ce2961a5d22193bdce4036777ed85b89"}}, {0xae, &(0x7f0000000940)=@string={0xae, 0x3, "f64ed8368ba2d540e2da452892b7b1d31ec6fcdaae1594642795b3448d709a76ef08031b4e7051d6f1a8330955139da9972a5557d6c00cd8a9cf35666fd751abed327af29de32d68852c887f3b9fd5840f33dcff589d8dc5dd0a66f6596b430b5928300f56e1ef468e6bcb1bc26bae42fd47875be968070fd74b112ab4369299d8c758e4c39c0c2fec29697bf84bb4ba845754e5deffd88da2f2f6c884c7420b0676ca5073289690159ad349"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x865b67c2a3963795}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1aa048a9ad8b7788}}]})
syz_usb_control_io(r8, &(0x7f0000000e40)={0x2c, &(0x7f0000000b40)={0x0, 0x22, 0x101, {0x101, 0x23, "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"}}, &(0x7f0000000c80)={0x0, 0x3, 0xee, @string={0xee, 0x3, "7cb2be87fd957ef02d509e3bb88e7ddd3bff2ab86f95e81bfdf3dbf8817418924361ee9c6b089a882ec455e6848a7aad633514a84cf58df5cde4917a8180a9d4a24ab03f06a8e7c1b0b3b01b3124dd2fedbb7547e89b5576d7e5257e20a7617df4779e50b6c06652c12201238b6ec6274d3170bdefdf55a684ed098b049180750ecb76e9cc2627b906e866536dda58218326cf9f61b5979dee27bad5cccf0a640a1969f8511ee14b6ced34640b2d68499295d946f97ebf91f1cbd3bf2f2a7fa5ee87edda5651eb408288a6f4d1e5dc0f378dd014e7dfeba7c8a9ec53952bb5d1c94d3528297c41fcddfec897"}}, &(0x7f0000000d80)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x0, 0xc, 0x3, "f2fc92a4", "f7709b94"}}, &(0x7f0000000e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x7, 0x48, 0x10, 0x98, 0x6}}}, &(0x7f0000001340)={0x84, &(0x7f0000000e80)={0x20, 0x14, 0xf0, "4ef77f6ad6ae10b1377e1e3884134ff54c9f63b2d74b9a453317e39f8a5509ec970206fff921cf1c43c9b585065226b2fb93657ac693ac5e2b12a3cad9908fc6750b36daef82ff01e255ca667fcd5dd7ea617b18785af6ee232fe32c90f9a86e194de24538ee16b01421feadbbf952611778d11c3d0c9ce669702a2343926de9cca10441f9244dcade8c074c6ddbf2e37bf276ae41e07c9a06669f7e027496df13d3cf26905dac9788c0c735d882b40e3b8311cb3544780e801bada4cf6a98ce2fe53b3f43da4142b58166f29eede52af4ba40720b88dd27458a5cebbd044b6db225176cda094fac69e0fa1d9334b3ef"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000001000)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000001040)={0x20, 0x0, 0x8, {0x400, 0x40, [0xf00]}}, &(0x7f0000001080)={0x40, 0x7, 0x2, 0xe91}, &(0x7f00000010c0)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000001100)={0x40, 0xb, 0x2, "e627"}, &(0x7f0000001140)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001180)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, &(0x7f00000011c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000001200)={0x40, 0x19, 0x2, "8cf0"}, &(0x7f0000001240)={0x40, 0x1a, 0x2, 0x7be9}, &(0x7f0000001280)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000012c0)={0x40, 0x1e, 0x1, 0xe7}, &(0x7f0000001300)={0x40, 0x21, 0x1, 0x2d}})

8.405369276s ago: executing program 4 (id=786):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r2 = syz_clone(0x60000900, &(0x7f00000006c0)="7659370a8e66ece412921f4d367517635c840c98172a375358810e9a69a5a7ee73d0ae11f9cda7b9d1a44c62de11de5e7049eaee3654f4ecbde125a4737823dd3de316c2cb63db9872a03c5916b8ea522798ca1fce1638b0aa56fb788fee0662e146c3e91a856b299e091dd396c75f5a6c4762703225170119617a0e83dbbfb37fbc485b2cee19cc664f22f33adf12c6d034645c621948b7afe74d243ced28881f6733da60195aac76daae2491cb3e8e427f261f3b1573ba05ca05446f98a8c44207c2486f", 0xc5, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000940)="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")
ptrace$peeksig(0x4209, r2, &(0x7f00000002c0)={0x8001, 0x0, 0x3}, &(0x7f0000001940)=[{}, {}, {}])
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, 0x228})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
r5 = add_key$user(&(0x7f0000000440), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffb)
r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r6, r5}, &(0x7f00000005c0)=""/208, 0xd0, &(0x7f0000000580)={&(0x7f0000000340)={'md5\x00'}})
syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000057000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
fstatfs(r4, &(0x7f0000000140)=""/166)
socket$netlink(0x10, 0x3, 0x8000000004)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)
fallocate(0xffffffffffffffff, 0x10, 0x0, 0x72000)

8.154073839s ago: executing program 4 (id=788):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettfilter={0x64, 0x2e, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x4, 0xfff1}, {0x0, 0x9}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xce2a}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x1}]}, 0x64}}, 0x4000800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001f00010026bd7000fcdbdf25fe880000000000000000000000000001000004d20a002b00ac1414350000000000000000000000007469c3d2de2f890b2b0000ff340000"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x810)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x200000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}})
fcntl$dupfd(r0, 0x406, r3)
r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_exec(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0x2, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)

7.710824212s ago: executing program 2 (id=789):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x7, 0x9, 0x0, 0xb49, 0x9, 0x8, 0x1, 0x3}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e22, @rand_addr=0x64010100}, {0x0, @local}, 0x12, {0x2, 0x4e20, @rand_addr=0x64010101}, 'sit0\x00'})
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r4 = socket$netlink(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x20800, 0x0)
r5 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r6 = socket$alg(0x26, 0x5, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, [<r7=>0x0]})
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000002140)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r7], [0x0, 0x0, 0xfffffffe, 0x4], [], [0x8000000000000000, 0x0, 0x4000]})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r4)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0xac, r8, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x94, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x11}, 0x40000)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56fa8ef1d91a4574758ecefbe1d7a46df6d558ecf1820f", 0x18)
r9 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
write$binfmt_misc(r5, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x0, 'veth0\x00', {0x2}, 0x9})

6.696554702s ago: executing program 1 (id=790):
r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
read(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000300)=0x8)
r7 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000015c0)={r6, 0xffffffff}, 0x8)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r6, 0x4)
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xffffd000)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=<r9=>0x0)
capget(&(0x7f0000000080)={0x10040291, r9}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
munlockall()
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000040), 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r11=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r11, @ANYRESHEX=0x0, @ANYRES8], 0x44}}, 0x0)

6.584152938s ago: executing program 5 (id=792):
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
close(r1)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

6.397296173s ago: executing program 4 (id=794):
socket$nl_route(0x10, 0x3, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
getitimer(0x0, &(0x7f0000000040))
r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r5, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000004a40)="312908101225e7604aa5cabb", 0xc}], 0x1, &(0x7f0000000900)=ANY=[], 0x440}}], 0x1, 0x50)
sendmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0xc0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x9834}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x2)
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0xc28, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x0, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x5, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0xffff, 0x0, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xffffeffd, 0x103, 0x0, 0x5, 0x8001, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x29, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xffb, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0x6, 0x79, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x4000000, 0x0, 0x15, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x6, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa0, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0x3, 0x200, 0x0, 0x400002, 0x3, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x2000000, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0xfffffffb, 0x2, 0x5, 0x1, 0x4, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0x2, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x9, 0x54, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x6, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
r8 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe825, 0x8, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r9=>0x0, &(0x7f0000000100)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r8, 0x847ba, 0x0, 0xe, 0x0, 0x0)
write$char_usb(r7, &(0x7f0000000040)="e2", 0x918)

5.954579159s ago: executing program 1 (id=796):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000)
cachestat(r0, &(0x7f0000000100)={0xe6af, 0x3}, &(0x7f0000002280), 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x7ff, 0x2100)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000340)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x4, 0x1, 0x3, 0x2, 0x0, [{0xf, 0x0, 0x0, '\x00', 0xe}, {0x5, 0x0, 0x0, '\x00', 0xfc}, {0x1, 0x1, 0x7, '\x00', 0x3}, {0xfa, 0x8, 0x1, '\x00', 0xa0}, {0x1, 0x9}, {0xa, 0x3, 0x5}, {0xb8, 0xda, 0xd, '\x00', 0x59}, {0xb, 0x1, 0xc, '\x00', 0x3}, {0x9, 0x7, 0x81, '\x00', 0x9}, {0x4, 0x6, 0x4, '\x00', 0x9}, {0x7, 0x5, 0xd, '\x00', 0xa}, {0x0, 0x4b, 0x45, '\x00', 0xc2}, {0x8, 0xab, 0x8, '\x00', 0x3}, {0x1, 0x3, 0xfe, '\x00', 0x81}, {0x5, 0xfb, 0x1, '\x00', 0x2}, {0xfe, 0x4, 0x6, '\x00', 0x9}, {0xc2, 0x9, 0x7, '\x00', 0x4}, {0x4, 0x7, 0x4, '\x00', 0x9}, {0xab, 0xef, 0x40, '\x00', 0x6}, {0x8, 0x10, 0x80, '\x00', 0x10}, {0x3, 0x3, 0x2, '\x00', 0x86}, {0x9, 0xb, 0xa, '\x00', 0x8}, {0x86, 0x8e, 0x5, '\x00', 0x9}, {0x56, 0x3, 0x4, '\x00', 0x7f}]}})

5.942631126s ago: executing program 2 (id=797):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000000))
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000480))
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = getpid()
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
r4 = syz_pidfd_open(r2, 0x0)
setns(r4, 0x8020000)
open$dir(0x0, 0x400000, 0x100)
r5 = socket$inet(0x2b, 0x800, 0x8)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r6, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r6, &(0x7f0000000000)="e6", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c000000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fbdbdf250b0000003c00018008000300010000000800030003000000080003000100000008000100", @ANYRES32=r9, @ANYBLOB="08000300030000000800030001000000080003000000000020000180140002006970766c616e3100000000000000000008000300000000002c000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="080003020000000008000300000000000800030004000000fe237dcb46cbb0ac5bbb3cb538ee1f04f8510aa9d7bdc6462ee9e3a0e9aab37bd25e891cdacc34b5dd292cb842a31e1cd402ecb8c9170a22b0b2e537ab4ffd88888f69478e609b64a8be7812e020"], 0x9c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40440c1)
shutdown(r6, 0x1)
recvfrom(r6, 0x0, 0x0, 0x61, 0x0, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x17, 0x0, 0x0)

4.716377144s ago: executing program 1 (id=798):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

4.545422748s ago: executing program 1 (id=799):
r0 = landlock_create_ruleset(&(0x7f0000000000)={0x1080, 0x1}, 0x18, 0x0)
r1 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r0, 0x0)
landlock_restrict_self(r0, 0x1)
syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0xf2, 0x6c, 0x44, 0x20, 0x84f, 0x1, 0xe0b8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xb2, 0x84, 0xbb}}]}}]}}, 0x0)
unshare(0x42000000)

4.373873149s ago: executing program 2 (id=800):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8) (async)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00', 0x4a, "e0dec2ef272212ebb459694af6906a88d649f5bd4abac31ff8d10b2ad7899f611edb05d4d0756bbac7ee5edcc1968919d748e0dd9f0b6a75fac4bdc47a6541fd87af5e71bcffd03ab9a2"}, &(0x7f0000000000)=0x6e) (async)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x5, 0xfff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}}) (async)
r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, 0x0) (async)
ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0)

4.223705006s ago: executing program 5 (id=801):
gettid()
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x181640, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40c000, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)={0x30000000})
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$uinput_user_dev(r5, &(0x7f0000000a00)={'syz0\x00', {0x6ec9, 0x7, 0x5, 0x7f}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0xa, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xffffffff, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8020, 0x3ff, 0x3, 0x1, 0x3, 0xba52, 0x4000800, 0x2, 0x200, 0xffffffff, 0x400008, 0xe, 0x2, 0x5, 0xde, 0x8, 0x4, 0x1, 0x199f, 0x8, 0x8000002, 0x9, 0xe, 0x4, 0x6, 0x4001000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8020, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x8001, 0x72c, 0x1c32, 0x101, 0x8, 0x10400, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x2, 0x0, 0x981, 0x4, 0x7ff, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0x8, 0x6, 0x96, 0xfffffff9, 0xc, 0x0, 0x2, 0x401, 0xd, 0x3, 0x379, 0x8, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0xb, 0x6, 0x2c2], [0x401, 0xc584, 0xffff, 0xcd1, 0x7, 0x23, 0x2, 0x4, 0xb, 0x10, 0x5, 0xd, 0x7, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x11, 0x1000, 0x4, 0x4, 0xf, 0x9, 0xfffffffe, 0x5, 0x80, 0x3, 0x9, 0x44, 0x2, 0x80000003, 0x5, 0x10000000, 0x0, 0x3, 0x8, 0x8001, 0x1000, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x2, 0x1010001, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0xfffffffe, 0x7d, 0x403, 0x5], [0x1e6a, 0x7fff, 0x4, 0x5, 0x88, 0x2, 0x6, 0x0, 0x50, 0x2, 0x75f, 0xb, 0x40000402, 0x800, 0x4, 0x5, 0x80, 0x7, 0x3fa6, 0x4, 0xffffffff, 0x5, 0x1e0, 0x4, 0x5, 0x4, 0x3, 0x4, 0x1ff, 0x9, 0x3b, 0xb, 0x1, 0x800, 0xa80a, 0x65f413f9, 0x104, 0x8, 0x8a8, 0x1000, 0x40, 0x7, 0x0, 0x4, 0x4, 0x18, 0x4d13, 0x6, 0x7fff, 0x2, 0xffffffff, 0x401, 0x9, 0x200, 0x7, 0x6, 0x0, 0x7, 0xe, 0x2, 0xe, 0xf, 0xfffffff9, 0x6]}, 0x45c)
ioctl$UI_DEV_CREATE(r5, 0x5501)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r6, 0x0, 0x0)
r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
preadv(r7, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001240)=""/167, 0xa7}], 0x3, 0x1000, 0x3f2f0fde)
ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f00000000c0)={0x0, 0x4, 0xfffffffe})
rename(0x0, 0x0)

4.120161824s ago: executing program 2 (id=802):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
read$char_usb(r1, 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
r3 = memfd_create(&(0x7f0000000540)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\x03\x00\x00\x00\xe3LS\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh\x9c\xea\xc9\x01c\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xd0\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\x17d\xc7d\xc5\xfa\b<\xe3?ip\x9dX4U\xd70\xfdM1\x17\xe1G\x81\xd1\x84\v{\x16\xcc7\xd8fP\x12\x0e\xe07)[;\xa4\xc1\x05S\xf9~\x8e7\xa8sKkR\x16\aA\x9a\xf4\x1a\x01\xe5vm\x18&\x8f.\x87\a\xde\xd7M\xda\xa1\xa2b\x0f)\xd0\xf1\x02;\x01\xd5\x94gD\x87\xd3E\xcf!\xf8K\xa4\xee\xb7rS\x8e\xbc`;\xb8\x8er\xe1\xb2\x8b\xb9wN\x87\xad\xd1W\xa7\xe7\xff_&\bv\xb46\xf6\x89\t\x1d\x8b@\xd63\x1d\x80\\\xef\xd0g`\xc6\xaem\n', 0x6)
r4 = socket$rds(0x15, 0x5, 0x0)
unshare(0x26020480)
setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000000)=0x8, 0x39)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0)
read(r5, &(0x7f0000000080)=""/1, 0x1)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000140)={0x2016})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000000c0)={'bond_slave_0\x00', @local})
r7 = dup(r3)
fanotify_mark(r2, 0x1, 0x4800105c, r7, 0x0)
execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

4.074897929s ago: executing program 4 (id=803):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fcebe440470501686f43010203010902df75cc41a349bf90748212000100000000090400000808441300a38bee83168704f75296d9b4d22f71bd5aecbb2293747ca9e81f58ef0b17f6"], 0x0)

3.647414959s ago: executing program 1 (id=804):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettfilter={0x64, 0x2e, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x4, 0xfff1}, {0x0, 0x9}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xce2a}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x1}]}, 0x64}}, 0x4000800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001f00010026bd7000fcdbdf25fe880000000000000000000000000001000004d20a002b00ac1414350000000000000000000000007469c3d2de2f890b2b0000ff340000"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x810)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x200000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}})
fcntl$dupfd(r0, 0x406, r3)
r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_exec(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0x2, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)

2.416152269s ago: executing program 5 (id=805):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="28400103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="28400103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

2.294463908s ago: executing program 1 (id=807):
r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="007aa8119c007982024c54bc8538a6ba7d68ccc2bdd7616a272c3b9798aade07ce525f9fb04ede538f03f7b09daac1b253d503cb1f0bc2f470646df0b6aac8fceba46442bd32ad0483767330deaa1b4671096d58507e2ceb40d5ea2d3e36ee780792650de210"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x60, 0xfc, 0x2, "7bd1195e", "7e0813a3"}}, 0x0}, &(0x7f0000000900)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="404b8d00000037"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})

1.836238789s ago: executing program 4 (id=808):
syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x22, 0x17, 0x4a, 0x20, 0x4b4, 0x861f, 0xf9d6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x73, 0xa7, 0x7a}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0x5, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x2, 0x1, 0x10, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "eaa5c39ee8e9"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xa, 0xc, 0xff, 0x7}, {0x6, 0x24, 0x1a, 0x2, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x3e, 0x80, 0xfe, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x911, 0x80, 0x7, 0xf4fe, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x3, 0xb, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0xfa, 0x5}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x201, 0xcc, 0x5, 0x1e, 0x40, 0x7}, 0x36, &(0x7f0000000100)={0x5, 0xf, 0x36, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x2f, 0xd, 0x7}, @ssp_cap={0x24, 0x10, 0xa, 0xe, 0x6, 0x1a7, 0x1e0f, 0x4, [0xff3ff0, 0xff3fcf, 0xf, 0xffc030, 0x0, 0x30]}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x448}}, {0x84, &(0x7f0000000240)=@string={0x84, 0x3, "05b3e677949fc4e682c5be4a06e1169553881b3880aae2f62d9ad18abb192c4b76fda618bd8811a31229bec64ff73ff612b547c5a6876376dcbeae125bd76ff114090ed266d913985dd68e3a246ffc7e644812a084964b960c526cf0d3f3ca8b5c86cf425341e1e5fdc83faa6eb45b9587deb79fff68345a586178198ff54f3a1694"}}]})

1.542912381s ago: executing program 0 (id=809):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000004480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004260000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close_range(r0, 0xffffffffffffffff, 0x600000000000000)

1.487457551s ago: executing program 0 (id=810):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000240)={0x2002, 0x6}, 0x4)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x41, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000f80)="a4", 0xfffffe3e}, {&(0x7f0000000080)="5160310c0d2d7efb3bd8bb9b95bf0695bdcb47f321b70a1457ab22d26072ffc81a501c005d92e97f7922555350231eb7df7d0175efd152181d1a4a5f8839ab1689b7aafac03672a5df0ed870d48bc849d219064705c5f58b7523eae0f220ac544397cff0f40012da603cd43e1d6c491df685e77b8518b2f0f2eb91000000000000", 0x81}, {&(0x7f0000000240)="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", 0xfa}, {&(0x7f0000000500)="cac234d2a369e8d0b762c70b1614990e05ab50b6e3442292235d86ff96958ab353e6263e99f988c59c7a54c3cc6e805caacc507adbafa601bcf563d756c67bce6f9c04f76d55d94e10a6b08a0fba23dddfaac34c9586560d5ca5e878bcfe4bc2835d417f6568e2f6380471b0834663f1821e771e5aed0bdeffdfa77d805dc1d9073cd805052f0d68fdc0f7fc2131a1989a27ca729e0ea45e2c493e2ec72e9e8be76cfc77d60f4f443331a0f6b913d7ed6979bb0ba6e877a04abda66bc6ead433f5482c81fc267659d7bbd8a7ee4f37b55ee85ae3be38bc4cb8eaa5f59f71985e588159648fa36df38d5344fedad3b445fe21a2ea33d34f983d", 0xf9}, {&(0x7f0000000340)="cf0d27d1653081dd048029d227e630947e0c58522e1657827dd3b146013e782821931c71c52dac6adda7b8b19d1f78016df5186dfc96e04eae73611ea52b0762f25083fecaf1db24ed4332da100db738c412dfd3481342dac2a35f9c070b99ad121c9710194b08e8ef094d9c2b462738f923a3dd028662bb77c9e82a54768be1a2bacef0456c79cfacb232b9a58fbfdfac837acb32d48e2a198c07d9abdb7f28a0", 0xa1}, {&(0x7f0000000fc0)="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", 0x4eb}], 0x6)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6, 0x40, 0x0, 0xfffffffc}]}, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x68, r2, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x20000019)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1.364190673s ago: executing program 0 (id=811):
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a010400000000000000000b0000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c00014000000000000000080800044000000001"], 0xdc}}, 0x0)

1.308756258s ago: executing program 0 (id=812):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24)

1.226198398s ago: executing program 0 (id=813):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
semget$private(0x0, 0x5, 0x1a4)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000180)=0x6)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0)
r4 = syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000040)=<r5=>0x0)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0)
sendmsg$unix(r1, &(0x7f0000000780)={&(0x7f0000000a00)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000200)="b6dfbabef5c6236520e67a7599a821ebbae8a3c3cc256499", 0x18}, {&(0x7f0000000380)="d72936bfdd3c2b964fc4e7d631da86b2f70a29acf2223ab4ba32f96511adbc5f7ca847be135b8261dae90dccfbfa9b3fa7671fe2db2e7f54e65d70f93ca64df9977123d66ac25b33f05e85ad33f9c43183fc908251a591ed4b00"/104, 0x68}, {0x0}, {0x0}, {&(0x7f00000004c0)="0a1f6058f2940e57bf7d17373739558a984daa8b3fa06dcc42caf7693577dc5312ace9369989c3373f4c22b29d72e348841083ca9377fbc80cb3fc0b551fbc55f42abb5375fdc6157609289356f03129fb959dcc29ed980e5579083d31ab4f466576b2fd92949db9faaa5097c13001630c027c2a8fbc95a0867a7f1495089b13448649203f090c73be68e733f313dcc9d3e9c84a3da8d50a7f56c399a6315b0f52908d1ace5d6d97b0d284bf933fba07b5ab41adb420625cedf190238937", 0xbe}, {&(0x7f0000000580)}, {&(0x7f0000000640)="84b69967ec6906b97ea51b7210ea1c96d6a8ee3883ede75d7bc6494c520c042b650674606426de486e6ba909678213ef79e2bb7a04604babd6b262025ec316940f8d38a999e39d0a0b6feb78ece3ee328233efebe358401f095b0bb94fcb78cb9f175c99f0a2613c4b6980cb32b8689449b581f0a578b44ccb9712f37d466260e8b5b4537cc173ed42aa413a2c8d94d306c21e6b4ef0c4b1e67ebc5bc36529652b9a01752352b0cefd974455", 0xac}], 0x7, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r4, @ANYRES16=r0, @ANYRESDEC=r4, @ANYRESHEX], 0x30}, 0x1)
syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)="e283cb7d75bd352f1938d141676d9b6c59065f664735c08b9d695a645f85b19ba9031ff18e47da009f33260648cd046d", 0x30, 0xebec93e830fd2194})
io_uring_enter(r4, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r6 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, 0x0, &(0x7f0000000480))
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003a80)=ANY=[@ANYBLOB="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"], 0x1cdc}}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1.056143017s ago: executing program 2 (id=814):
r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x180800)
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e21, @local}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}, 0xa0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)='veth1_to_team\x00', 0x80, 0x0, 0x4})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x4, 0x9}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000380)={&(0x7f00000004c0)="470098", 0x0, 0x0, 0x0, 0x7, r2}, 0x38)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x5, &(0x7f0000000000)=0xa, 0x4)
syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0)

637.222299ms ago: executing program 4 (id=815):
socket$inet_sctp(0x2, 0x5, 0x84)
fsopen(&(0x7f0000000080)='securityfs\x00', 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40500000040000061107500000000006605000000e3000095000000000000001e6443165316606826570673bd2015c43a9334a136ff04a6ed8d044bcadbd5681eeb13a486a6672414270acfad927fa112e1ed0ea257d0faff057ae67db946f94cc0f40f17c4454ca4dddacb0670b381446a93ffa6e7f1acc3c7b9a32f3735c11887122f4e4c090702a196afb7429e7bbe719d312a1280630c2b50d279a9c2a292027134f755125ee8423af5eb0d984344a35400a7dda797b6e2bfebd839ff07f3d916ef3ac97176d8687a67cb82a2fb494ba644a7c90a2cd6b75bcfb934d1033e0a5341b324c10e1cc16c507483300aa357d01cd65751366e99257ea3057840"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94)
r1 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0)
ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f00000003c0)={0x2, 0x1, 0x1, {0x80000004, 0x6, 0x2, 0x8000001}})
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4040)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200700, 0x0)
ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000140)={r5, 0x7, 0x2})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000004})
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
r8 = socket$inet(0x2, 0x3, 0x9)
setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4)
shutdown(r8, 0x0)
recvmmsg(r8, &(0x7f00000066c0), 0x0, 0x2083, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)

540.567049ms ago: executing program 5 (id=816):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pipe(&(0x7f0000000440)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff})
splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0)
splice(r2, 0x0, r4, 0x0, 0x10000025a5, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x11, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r2}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

0s ago: executing program 0 (id=817):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettfilter={0x64, 0x2e, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x4, 0xfff1}, {0x0, 0x9}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xce2a}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0xa}, {0x8, 0xb, 0x200}, {0x8, 0xb, 0x1}]}, 0x64}}, 0x4000800)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="400000001f00010026bd7000fcdbdf25fe880000000000000000000000000001000004d20a002b00ac1414350000000000000000000000007469c3d2de2f890b2b0000ff340000"], 0x40}, 0x1, 0x0, 0x0, 0x48000}, 0x10)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$EXT4_IOC_MIGRATE(r5, 0x6609)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x404c010}, 0x24040013)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x810)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x200000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}})
fcntl$dupfd(r0, 0x406, r3)
r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_exec(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x564)
preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000002c0)=""/23, 0x17}], 0x2, 0x2, 0x0)
r7 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r7, 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)

kernel console output (not intermixed with test programs):

ytes leftover after parsing attributes in process `syz.4.232'.
[  141.520324][ T6926] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  141.534145][ T6926] block device autoloading is deprecated and will be removed.
[  142.578427][ T6944] sit0: entered promiscuous mode
[  142.587326][ T6944] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[  142.613493][ T6944] netlink: 1 bytes leftover after parsing attributes in process `syz.1.237'.
[  142.773209][ T6952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'.
[  143.771657][ T6978] ip6tnl1: entered promiscuous mode
[  143.792124][ T6978] netlink: 'syz.1.240': attribute type 10 has an invalid length.
[  143.974807][ T6978] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  144.507687][ T6985] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve0, syncid = 10804, id = 0
[  144.911994][ T6997] tipc: Started in network mode
[  144.917418][ T6997] tipc: Node identity 02ef6eee0e35, cluster identity 4711
[  144.986039][ T6997] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  145.026607][ T7001] syzkaller0: entered promiscuous mode
[  145.066924][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  145.077216][ T7001] syzkaller0: entered allmulticast mode
[  145.111007][ T6997] syzkaller0: mtu greater than device maximum
[  145.162520][ T6994] tipc: Resetting bearer <eth:syzkaller0>
[  145.197289][ T6994] tipc: Disabling bearer <eth:syzkaller0>
[  145.247520][    T9] usb 4-1: Using ep0 maxpacket: 16
[  145.263845][    T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  145.275882][    T9] usb 4-1: config 0 has no interface number 0
[  145.359015][    T9] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  145.386322][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.396286][    T9] usb 4-1: Product: syz
[  145.400520][    T9] usb 4-1: Manufacturer: syz
[  145.405130][    T9] usb 4-1: SerialNumber: syz
[  145.414412][    T9] usb 4-1: config 0 descriptor??
[  145.444956][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  145.625846][ T7015] Context (ID=0x1) not attached to queue pair (handle=0x4db:0x802)
[  145.806290][ T5970] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  145.834650][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.249'.
[  145.894592][ T7027] wireguard0: entered allmulticast mode
[  145.998445][ T5970] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  146.008029][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.020203][ T5970] usb 2-1: config 0 descriptor??
[  146.058149][ T5970] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  146.155014][ T7032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.159941][ T7025] netlink: 'syz.4.258': attribute type 25 has an invalid length.
[  146.169089][ T7032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.249678][ T7025] netlink: 165 bytes leftover after parsing attributes in process `syz.4.258'.
[  146.286341][ T5938] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  146.340503][ T5970] gspca_stv06xx: I2C: Read error writing address: -71
[  146.372529][ T5970] usb 2-1: USB disconnect, device number 16
[  147.118383][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  147.130230][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  147.176408][    T9] gspca_spca1528: reg_w err -110
[  147.181459][    T9] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  147.201883][    T9] usb 4-1: USB disconnect, device number 13
[  148.335226][   T30] audit: type=1326 audit(1758651253.407:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018b8eec9 code=0x7ffc0000
[  148.357336][    C1] vkms_vblank_simulate: vblank timer overrun
[  148.407578][ T7074] netlink: 'syz.4.268': attribute type 21 has an invalid length.
[  148.415463][ T7074] netlink: 128 bytes leftover after parsing attributes in process `syz.4.268'.
[  148.424657][ T7074] netlink: 'syz.4.268': attribute type 5 has an invalid length.
[  148.432382][ T7074] netlink: 3 bytes leftover after parsing attributes in process `syz.4.268'.
[  148.494394][   T30] audit: type=1326 audit(1758651253.427:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018b8eec9 code=0x7ffc0000
[  148.596084][ T7073] fuse: Bad value for 'user_id'
[  148.601340][ T7073] fuse: Bad value for 'user_id'
[  148.704399][   T30] audit: type=1326 audit(1758651253.427:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3018b8eec9 code=0x7ffc0000
[  148.846271][   T30] audit: type=1326 audit(1758651253.427:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018b8eec9 code=0x7ffc0000
[  148.876762][   T30] audit: type=1326 audit(1758651253.427:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018b8eec9 code=0x7ffc0000
[  148.957709][   T30] audit: type=1326 audit(1758651253.427:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3018b8d710 code=0x7ffc0000
[  149.002388][   T30] audit: type=1326 audit(1758651253.427:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018b8eec9 code=0x7ffc0000
[  149.034478][   T30] audit: type=1326 audit(1758651253.427:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018b8eec9 code=0x7ffc0000
[  149.173981][   T30] audit: type=1326 audit(1758651253.437:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3018b8d710 code=0x7ffc0000
[  149.258875][   T30] audit: type=1326 audit(1758651253.437:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7068 comm="syz.4.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3018b8eec9 code=0x7ffc0000
[  149.536646][  T979] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  149.653677][ T7094] netlink: 'syz.4.276': attribute type 1 has an invalid length.
[  149.679631][ T7093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  149.690600][  T979] usb 4-1: Using ep0 maxpacket: 8
[  149.697680][  T979] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  149.708302][ T7093] syzkaller0: entered promiscuous mode
[  149.718796][  T979] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.729221][ T7093] syzkaller0: entered allmulticast mode
[  149.742577][  T979] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  149.753242][  T979] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.772790][ T7093] tipc: Resetting bearer <eth:syzkaller0>
[  149.775703][ T7096] binder: BINDER_SET_CONTEXT_MGR already set
[  149.785976][  T979] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.811217][ T7096] binder: 7095:7096 ioctl 4018620d 200000004a80 returned -16
[  149.817315][  T979] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  149.829188][  T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.069273][  T979] usb 4-1: usb_control_msg returned -32
[  150.156526][  T979] usbtmc 4-1:16.0: can't read capabilities
[  150.196365][ T7087] tipc: Resetting bearer <eth:syzkaller0>
[  150.641167][ T7112] vcan0: tx drop: invalid da for name 0x0000000000000001
[  150.702354][ T7087] tipc: Disabling bearer <eth:syzkaller0>
[  151.857374][ T7143] fuse: Bad value for 'fd'
[  152.118879][ T7144] kvm: user requested TSC rate below hardware speed
[  152.267627][ T5970] usb 4-1: USB disconnect, device number 14
[  153.176415][ T5952] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  153.409517][ T5952] usb 2-1: Using ep0 maxpacket: 32
[  153.421842][ T5952] usb 2-1: unable to get BOS descriptor or descriptor too short
[  153.440329][ T5952] usb 2-1: config 7 has an invalid interface number: 128 but max is 0
[  153.440347][ T5952] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  153.440357][ T5952] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  153.440366][ T5952] usb 2-1: config 7 has no interface number 0
[  153.440387][ T5952] usb 2-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7
[  153.440400][ T5952] usb 2-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32
[  153.440411][ T5952] usb 2-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11
[  153.440423][ T5952] usb 2-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  153.440435][ T5952] usb 2-1: config 7 interface 128 has no altsetting 0
[  153.458816][ T5952] usb 2-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13
[  153.458834][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.458844][ T5952] usb 2-1: Product: syz
[  153.458852][ T5952] usb 2-1: Manufacturer: syz
[  153.458859][ T5952] usb 2-1: SerialNumber: syz
[  153.461766][ T7151] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  153.700487][ T5952] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  153.700537][ T5952] usb 2-1: MIDIStreaming interface descriptor not found
[  153.789112][ T5952] usb 2-1: USB disconnect, device number 17
[  153.836266][ T5930] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  154.016673][ T5937] udevd[5937]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  154.073053][ T5930] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  154.147114][ T5930] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  154.223588][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.281514][ T5930] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  154.464011][ T5930] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[  154.791288][   T30] kauditd_printk_skb: 80 callbacks suppressed
[  154.791305][   T30] audit: type=1326 audit(1758651259.867:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  154.824285][ T7192] netlink: 244 bytes leftover after parsing attributes in process `syz.3.302'.
[  154.835674][ T7196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.303'.
[  154.849090][   T30] audit: type=1326 audit(1758651259.897:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  154.900731][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.909817][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  154.992948][ T7197] program syz.0.299 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  155.089409][   T30] audit: type=1326 audit(1758651259.897:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  155.156430][ T5930] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  155.306621][   T30] audit: type=1326 audit(1758651259.897:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  155.553988][ T7196] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.562223][ T7196] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.648053][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10
[  155.728751][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  155.772112][ T7196] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.807534][ T5930] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  155.820563][ T7196] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.271286][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.296006][ T5930] usb 4-1: config 0 descriptor??
[  156.501055][   T30] audit: type=1326 audit(1758651261.557:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  156.547036][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.588492][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.606320][   T30] audit: type=1326 audit(1758651261.557:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  156.629658][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.639019][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.649273][   T30] audit: type=1326 audit(1758651261.647:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f460238eacb code=0x7ffc0000
[  156.735051][   T30] audit: type=1326 audit(1758651261.657:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f460238eacb code=0x7ffc0000
[  156.795138][   T30] audit: type=1326 audit(1758651261.657:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f46023c1785 code=0x7ffc0000
[  156.892224][   T30] audit: type=1326 audit(1758651261.857:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  156.969462][ T7205] netlink: 56 bytes leftover after parsing attributes in process `syz.2.305'.
[  156.983790][ T5930] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  157.267894][ T5930] usb 5-1: USB disconnect, device number 14
[  157.277562][ T7175] delete_channel: no stack
[  157.527689][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.612237][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.936598][    T9] usb 4-1: USB disconnect, device number 15
[  159.555082][ T7242] netlink: 56 bytes leftover after parsing attributes in process `syz.4.313'.
[  159.926299][ T5952] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  160.128784][ T5952] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  160.146406][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.270086][ T5952] usb 5-1: config 0 descriptor??
[  160.471126][ T5952] gspca_main: cpia1-2.14.0 probing 0813:0001
[  160.556355][    T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  160.770273][    T9] usb 2-1: Using ep0 maxpacket: 8
[  160.787926][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  160.830667][ T5952] cpia1 5-1:0.0: unexpected state after lo power cmd: 00
[  160.850846][    T9] usb 2-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  160.876332][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.904201][    T9] usb 2-1: config 0 descriptor??
[  161.091427][ T1904] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  161.124293][ T7260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'.
[  161.253969][ T5952] cpia1 5-1:0.0: only firmware version 1 is supported (got: 32)
[  161.280054][ T1904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.299125][ T1904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.329072][    T9] kye 0003:0458:4018.0004: unbalanced collection at end of report description
[  161.346250][ T1904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  161.348632][    T9] kye 0003:0458:4018.0004: parse failed
[  161.363989][ T1904] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  161.374360][ T1904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.375037][    T9] kye 0003:0458:4018.0004: probe with driver kye failed with error -22
[  161.405712][ T1904] usb 4-1: config 0 descriptor??
[  161.463232][ T5952] usb 5-1: USB disconnect, device number 15
[  161.555208][    T9] usb 2-1: USB disconnect, device number 18
[  161.670923][ T7266] kvm: user requested TSC rate below hardware speed
[  161.704638][ T7262] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  161.862975][ T1904] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  162.156320][ T5952] usb 4-1: USB disconnect, device number 16
[  162.201996][ T7269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3176969119 (406652047232 ns) > initial count (321993810432 ns). Using initial count to start timer.
[  162.231063][ T7269] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  162.264382][ T7269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  162.303773][ T7274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'.
[  162.321736][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.325'.
[  162.333155][ T7274] sch_tbf: burst 4 is lower than device lo mtu (18) !
[  162.636245][ T1904] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  162.874145][ T7295] block nbd0: Attempted send on invalid socket
[  162.880967][ T7295] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  162.966624][ T1904] usb 2-1: Using ep0 maxpacket: 8
[  162.974312][ T1904] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  162.989147][ T1904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.024671][ T1904] pvrusb2: Hardware description: Terratec Grabster AV400
[  163.054374][ T1904] pvrusb2: **********
[  163.060964][ T1904] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  163.115354][ T1904] pvrusb2: Important functionality might not be entirely working.
[  163.224998][ T1904] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  163.448111][ T1904] pvrusb2: **********
[  163.499422][ T2345] pvrusb2: Invalid write control endpoint
[  163.535443][ T7304] veth3: entered promiscuous mode
[  163.600457][ T7304] bond0: (slave veth3): Enslaving as an active interface with an up link
[  163.830714][ T2345] pvrusb2: Invalid write control endpoint
[  163.854972][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  163.870175][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  163.887291][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  163.901779][ T2345] pvrusb2: Device being rendered inoperable
[  163.912308][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  163.948989][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  164.009475][ T2345] pvrusb2: Attached sub-driver cx25840
[  164.015240][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.026987][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  164.042962][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.055293][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  164.075496][ T7313] loop2: detected capacity change from 0 to 7
[  164.099093][ T6214] Dev loop2: unable to read RDB block 7
[  164.135826][ T6214]  loop2: AHDI p1 p2 p3
[  164.197658][ T6214] loop2: partition table partially beyond EOD, truncated
[  164.232193][ T6214] loop2: p1 start 1601398130 is beyond EOD, truncated
[  164.270941][ T6214] loop2: p2 start 1702059890 is beyond EOD, truncated
[  164.301255][ T7313] Dev loop2: unable to read RDB block 7
[  164.308874][ T7313]  loop2: AHDI p1 p2 p3
[  164.313239][ T7313] loop2: partition table partially beyond EOD, truncated
[  164.327876][ T7313] loop2: p1 start 1601398130 is beyond EOD, truncated
[  164.338569][ T7313] loop2: p2 start 1702059890 is beyond EOD, truncated
[  164.696974][ T7322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'.
[  164.946221][ T5938] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  165.156870][ T5938] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.180001][ T5938] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  165.195788][ T5938] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  165.204997][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.214399][ T5938] usb 4-1: Product: syz
[  165.218807][ T5938] usb 4-1: Manufacturer: syz
[  165.223407][ T5938] usb 4-1: SerialNumber: syz
[  165.413343][ T5952] usb 2-1: USB disconnect, device number 19
[  165.442372][ T7341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.338'.
[  165.489578][ T7344] netlink: 36 bytes leftover after parsing attributes in process `syz.1.345'.
[  165.526779][ T5938] usb 4-1: 0:2 : does not exist
[  165.650789][ T5938] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  165.661448][ T7348] netlink: 132 bytes leftover after parsing attributes in process `syz.1.345'.
[  165.803390][ T5938] usb 4-1: USB disconnect, device number 17
[  165.827258][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'.
[  165.941275][ T7358] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.347'.
[  166.002118][ T7358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.159832][ T7358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.210452][ T6214] udevd[6214]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.150614][ T7371] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.159019][ T7371] syzkaller0: entered promiscuous mode
[  167.164567][ T7371] syzkaller0: entered allmulticast mode
[  167.197105][ T7371] FAULT_INJECTION: forcing a failure.
[  167.197105][ T7371] name failslab, interval 1, probability 0, space 0, times 0
[  167.210152][ T7371] CPU: 0 UID: 0 PID: 7371 Comm: syz.4.352 Not tainted syzkaller #0 PREEMPT(full) 
[  167.210175][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  167.210186][ T7371] Call Trace:
[  167.210193][ T7371]  <TASK>
[  167.210201][ T7371]  dump_stack_lvl+0x189/0x250
[  167.210228][ T7371]  ? __pfx____ratelimit+0x10/0x10
[  167.210247][ T7371]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.210266][ T7371]  ? __pfx__printk+0x10/0x10
[  167.210300][ T7371]  should_fail_ex+0x414/0x560
[  167.210330][ T7371]  should_failslab+0xa8/0x100
[  167.210355][ T7371]  __kmalloc_cache_noprof+0x70/0x3d0
[  167.210376][ T7371]  ? nsim_fib_event_nb+0x187/0x1080
[  167.210399][ T7371]  nsim_fib_event_nb+0x187/0x1080
[  167.210417][ T7371]  ? atomic_notifier_call_chain+0x26/0x180
[  167.210441][ T7371]  notifier_call_chain+0x1b3/0x3e0
[  167.210459][ T7371]  ? atomic_notifier_call_chain+0x26/0x180
[  167.210479][ T7371]  atomic_notifier_call_chain+0xda/0x180
[  167.210500][ T7371]  call_fib_notifiers+0x31/0x60
[  167.210521][ T7371]  fib6_del+0x104d/0x1550
[  167.210547][ T7371]  ? fib6_del+0x5a1/0x1550
[  167.210586][ T7371]  ? __pfx_fib6_del+0x10/0x10
[  167.210629][ T7371]  fib6_clean_node+0x29f/0x590
[  167.210655][ T7371]  ? __pfx_fib6_clean_node+0x10/0x10
[  167.210676][ T7371]  ? __lock_acquire+0xab9/0xd20
[  167.210706][ T7371]  ? __local_bh_enable_ip+0x12d/0x1c0
[  167.210728][ T7371]  fib6_walk_continue+0x67b/0x910
[  167.210764][ T7371]  fib6_walk+0x149/0x290
[  167.210788][ T7371]  __fib6_clean_all+0x234/0x380
[  167.210808][ T7371]  ? __fib6_clean_all+0x9b/0x380
[  167.210836][ T7371]  ? __pfx_fib6_ifdown+0x10/0x10
[  167.210853][ T7371]  ? __pfx___fib6_clean_all+0x10/0x10
[  167.210879][ T7371]  ? __pfx_fib6_clean_node+0x10/0x10
[  167.210901][ T7371]  ? __pfx_fib6_ifdown+0x10/0x10
[  167.210925][ T7371]  ? __mutex_trylock_common+0x153/0x260
[  167.210948][ T7371]  rt6_disable_ip+0x120/0x720
[  167.210969][ T7371]  ? rcu_is_watching+0x15/0xb0
[  167.210987][ T7371]  ? trace_contention_end+0x39/0x120
[  167.211004][ T7371]  ? __pfx_rt6_disable_ip+0x10/0x10
[  167.211037][ T7371]  addrconf_ifdown+0x15d/0x1880
[  167.211059][ T7371]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  167.211083][ T7371]  ? tls_dev_event+0x717/0xec0
[  167.211099][ T7371]  ? __pfx_addrconf_ifdown+0x10/0x10
[  167.211131][ T7371]  addrconf_notify+0x1bc/0x1010
[  167.211152][ T7371]  notifier_call_chain+0x1b3/0x3e0
[  167.211177][ T7371]  netif_set_mtu_ext+0x594/0x7d0
[  167.211203][ T7371]  ? __pfx_netif_set_mtu_ext+0x10/0x10
[  167.211219][ T7371]  ? __mutex_trylock_common+0x153/0x260
[  167.211240][ T7371]  ? __pfx___mutex_trylock_common+0x10/0x10
[  167.211263][ T7371]  ? rcu_is_watching+0x15/0xb0
[  167.211279][ T7371]  ? trace_contention_end+0x39/0x120
[  167.211304][ T7371]  netif_set_mtu+0xa4/0x150
[  167.211322][ T7371]  ? __pfx_netif_set_mtu+0x10/0x10
[  167.211339][ T7371]  ? __lock_acquire+0xab9/0xd20
[  167.211372][ T7371]  ? netdev_name_node_lookup+0xdf/0x120
[  167.211402][ T7371]  dev_set_mtu+0x126/0x260
[  167.211423][ T7371]  dev_ioctl+0x7b4/0x1150
[  167.211445][ T7371]  sock_do_ioctl+0x22c/0x300
[  167.211472][ T7371]  ? __pfx_sock_do_ioctl+0x10/0x10
[  167.211491][ T7371]  ? __lock_acquire+0xab9/0xd20
[  167.211530][ T7371]  sock_ioctl+0x576/0x790
[  167.211554][ T7371]  ? __pfx_sock_ioctl+0x10/0x10
[  167.211577][ T7371]  ? __fget_files+0x2a/0x420
[  167.211591][ T7371]  ? __fget_files+0x3a0/0x420
[  167.211605][ T7371]  ? __fget_files+0x2a/0x420
[  167.211624][ T7371]  ? bpf_lsm_file_ioctl+0x9/0x20
[  167.211643][ T7371]  ? __pfx_sock_ioctl+0x10/0x10
[  167.211664][ T7371]  __se_sys_ioctl+0xfc/0x170
[  167.211687][ T7371]  do_syscall_64+0xfa/0x3b0
[  167.211704][ T7371]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.211721][ T7371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.211737][ T7371]  ? clear_bhb_loop+0x60/0xb0
[  167.211757][ T7371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.211774][ T7371] RIP: 0033:0x7f3018b8eec9
[  167.211789][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.211802][ T7371] RSP: 002b:00007f30199f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  167.211821][ T7371] RAX: ffffffffffffffda RBX: 00007f3018de5fa0 RCX: 00007f3018b8eec9
[  167.211833][ T7371] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000006
[  167.211844][ T7371] RBP: 00007f30199f1090 R08: 0000000000000000 R09: 0000000000000000
[  167.211854][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  167.211864][ T7371] R13: 00007f3018de6038 R14: 00007f3018de5fa0 R15: 00007f3018f0fa28
[  167.211893][ T7371]  </TASK>
[  167.660486][ T7371] tipc: Resetting bearer <eth:syzkaller0>
[  167.722433][ T7370] tipc: Resetting bearer <eth:syzkaller0>
[  168.103024][ T7370] tipc: Disabling bearer <eth:syzkaller0>
[  168.226521][ T1904] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  168.389375][ T1904] usb 2-1: Using ep0 maxpacket: 16
[  168.397290][ T1904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  168.412763][ T1904] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  168.422600][ T1904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.435339][ T1904] usb 2-1: Product: syz
[  168.441358][ T1904] usb 2-1: Manufacturer: syz
[  168.454682][ T1904] usb 2-1: SerialNumber: syz
[  168.472140][ T1904] usb 2-1: config 0 descriptor??
[  168.493316][ T1904] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  168.551208][ T1904] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  168.696922][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  168.781316][ T7385] input: syz1 as /devices/virtual/input/input13
[  168.924485][ T7386] netlink: 'syz.4.356': attribute type 1 has an invalid length.
[  169.016386][    T9] usb 4-1: Using ep0 maxpacket: 16
[  169.058108][ T7388] gretap1: entered allmulticast mode
[  169.068713][ T7388] bond1: (slave gretap1): making interface the new active one
[  169.078040][ T7388] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  169.099465][    T9] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  169.108903][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.117641][    T9] usb 4-1: Product: syz
[  169.138014][    T9] usb 4-1: Manufacturer: syz
[  169.143161][    T9] usb 4-1: SerialNumber: syz
[  169.152913][ T1904] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  169.165288][    T9] r8152-cfgselector 4-1: Unknown version 0x0000
[  169.171864][    T9] r8152-cfgselector 4-1: config 0 descriptor??
[  169.609987][ T1904] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  169.745779][ T1904] em28xx 2-1:0.0: board has no eeprom
[  170.008208][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.023130][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.046272][ T1904] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  170.087500][ T1904] em28xx 2-1:0.0: dvb set to bulk mode.
[  170.106222][ T5952] em28xx 2-1:0.0: Binding DVB extension
[  170.173566][    T9] usb 2-1: USB disconnect, device number 20
[  170.197038][    T9] em28xx 2-1:0.0: Disconnecting em28xx
[  170.396667][ T7412] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.426957][ T7412] syzkaller0: entered promiscuous mode
[  170.452191][ T5952] em28xx 2-1:0.0: Registering input extension
[  170.463014][    T9] em28xx 2-1:0.0: Closing input extension
[  170.473140][ T7412] syzkaller0: entered allmulticast mode
[  170.610658][ T7412] syzkaller0: mtu greater than device maximum
[  170.624386][ T7411] tipc: Resetting bearer <eth:syzkaller0>
[  170.673344][    T9] em28xx 2-1:0.0: Freeing device
[  170.725268][ T7411] tipc: Disabling bearer <eth:syzkaller0>
[  170.981036][ T7426] fuse: Bad value for 'group_id'
[  170.994444][ T7426] fuse: Bad value for 'group_id'
[  171.093251][ T7424] kvm: MONITOR instruction emulated as NOP!
[  171.145832][ T7424] ipvlan2: entered promiscuous mode
[  171.162043][ T7424] bridge0: port 3(ipvlan2) entered blocking state
[  171.170836][ T7424] bridge0: port 3(ipvlan2) entered disabled state
[  171.182398][ T7424] ipvlan2: entered allmulticast mode
[  171.190780][ T7424] bridge0: entered allmulticast mode
[  171.202751][ T7424] ipvlan2: left allmulticast mode
[  171.210286][ T7424] bridge0: left allmulticast mode
[  171.386222][    T9] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  171.536472][ T1904] r8152-cfgselector 4-1: USB disconnect, device number 18
[  171.586697][    T9] usb 5-1: device descriptor read/64, error -71
[  171.846367][    T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  171.986270][    T9] usb 5-1: device descriptor read/64, error -71
[  172.110527][ T7454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.113158][    T9] usb usb5-port1: attempt power cycle
[  172.121637][ T7454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.172300][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.185524][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.466570][    T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  172.506901][    T9] usb 5-1: device descriptor read/8, error -71
[  172.556253][ T5952] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  172.716325][ T5952] usb 2-1: device descriptor read/64, error -71
[  172.732094][ T7465] netlink: 344 bytes leftover after parsing attributes in process `syz.3.378'.
[  172.755568][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  172.755583][   T30] audit: type=1326 audit(1758651277.827:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  172.758951][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  172.761969][    T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  172.788763][   T30] audit: type=1326 audit(1758651277.827:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  172.795117][  T979] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  172.806241][   T30] audit: type=1326 audit(1758651277.827:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  172.829500][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  172.868098][   T30] audit: type=1326 audit(1758651277.827:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  172.891828][    T9] usb 5-1: device descriptor read/8, error -71
[  172.902659][   T30] audit: type=1326 audit(1758651277.827:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  172.930256][   T30] audit: type=1326 audit(1758651277.827:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  172.958928][   T30] audit: type=1326 audit(1758651277.827:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  172.986228][ T5952] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  172.994141][   T30] audit: type=1326 audit(1758651277.827:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  173.016896][  T979] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  173.026532][    T9] usb usb5-port1: unable to enumerate USB device
[  173.051401][   T30] audit: type=1326 audit(1758651277.827:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  173.079392][   T30] audit: type=1326 audit(1758651277.827:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7464 comm="syz.3.378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f460238eec9 code=0x7ffc0000
[  173.087008][ T7471] fuse: Bad value for 'user_id'
[  173.109215][ T7471] fuse: Bad value for 'user_id'
[  173.136271][ T5952] usb 2-1: device descriptor read/64, error -71
[  173.266896][ T5952] usb usb2-port1: attempt power cycle
[  173.352715][ T7478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.365844][ T7478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.628122][ T5952] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  173.658697][ T5952] usb 2-1: device descriptor read/8, error -71
[  173.736812][    T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  173.896428][ T5952] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  173.927615][ T5952] usb 2-1: device descriptor read/8, error -71
[  174.065761][ T5952] usb usb2-port1: unable to enumerate USB device
[  175.142519][ T7508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'.
[  175.706348][ T5952] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  175.822930][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  175.917792][ T5952] usb 4-1: Using ep0 maxpacket: 16
[  175.950964][ T5952] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  175.976231][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.059530][ T5952] usb 4-1: Product: syz
[  176.080434][ T5952] usb 4-1: Manufacturer: syz
[  176.085083][ T5952] usb 4-1: SerialNumber: syz
[  176.144186][    T9] usb 2-1: Using ep0 maxpacket: 16
[  176.155003][ T5952] r8152-cfgselector 4-1: Unknown version 0x0000
[  176.161423][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  176.165625][ T5952] r8152-cfgselector 4-1: config 0 descriptor??
[  176.181850][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  176.192714][ T7536] loop2: detected capacity change from 0 to 7
[  176.209889][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  176.226576][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  176.254199][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  176.273135][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.282579][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.296019][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.305694][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.314728][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.323981][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.338006][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.347268][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.356342][    T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  176.365371][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.373725][    T9] usb 2-1: Product: syz
[  176.438228][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.447436][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.473584][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.476158][    T9] usb 2-1: Manufacturer: syz
[  176.482855][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.505686][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.514942][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.526209][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  176.535407][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.545399][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.568854][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  176.568950][    T9] usb 2-1: SerialNumber: syz
[  176.593939][    T9] usb 2-1: config 0 descriptor??
[  176.605668][ T7521] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  176.625951][ T7548] netlink: 'syz.3.393': attribute type 46 has an invalid length.
[  176.644217][ T7548] netlink: 176 bytes leftover after parsing attributes in process `syz.3.393'.
[  176.776350][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  176.811394][    T9] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[  176.851117][ T7521] netlink: 'syz.1.392': attribute type 1 has an invalid length.
[  176.885526][    T9] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[  176.893865][ T7550] netlink: 92 bytes leftover after parsing attributes in process `syz.3.393'.
[  176.986227][    T9] mcba_usb 2-1:0.0 can0: failed tx_urb -90
[  176.992161][    T9] mcba_usb 2-1:0.0 can0: Failed to send cmd (169)
[  177.046186][    T9] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected
[  179.233660][ T7585] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.406'.
[  179.371294][ T5938] usb 2-1: USB disconnect, device number 25
[  179.449876][ T5938] mcba_usb 2-1:0.0 can0: device disconnected
[  179.571182][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.409'.
[  179.726288][ T5952] r8152-cfgselector 4-1: Unknown version 0x0000
[  179.732897][ T5952] r8152-cfgselector 4-1: bad CDC descriptors
[  179.743065][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'.
[  179.756345][ T7598] batman_adv: batadv0: Adding interface: ipvlan2
[  179.797488][ T7598] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.838999][ T5952] r8152-cfgselector 4-1: USB disconnect, device number 19
[  179.961318][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  179.975439][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  179.995839][ T7598] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  181.336261][ T5938] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  181.443151][ T7659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.468872][ T5938] usb 5-1: device descriptor read/64, error -71
[  181.495032][ T7659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.717719][ T5938] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  181.742912][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'.
[  181.772483][ T7668] openvswitch: netlink: Message has 3 unknown bytes.
[  181.866263][ T5938] usb 5-1: device descriptor read/64, error -71
[  181.978837][ T5938] usb usb5-port1: attempt power cycle
[  182.356421][ T5938] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  182.397051][ T5938] usb 5-1: device descriptor read/8, error -71
[  182.474344][ T7674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.485534][ T7674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.636214][ T5938] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  182.657239][ T5938] usb 5-1: device descriptor read/8, error -71
[  182.767226][ T5938] usb usb5-port1: unable to enumerate USB device
[  183.436226][ T5938] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  183.596255][ T5938] usb 2-1: Using ep0 maxpacket: 8
[  183.617176][ T5938] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  183.635571][ T5938] usb 2-1: config 0 has no interface number 0
[  183.644561][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  183.663261][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  183.715528][ T5938] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  183.746230][ T5938] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  183.760422][ T5938] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  183.772504][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.785480][ T5938] usb 2-1: config 0 descriptor??
[  183.800358][ T7680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'.
[  183.830232][ T5938] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  184.146327][ T5938] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  184.314613][ T5938] usb 4-1: not running at top speed; connect to a high speed hub
[  184.374446][ T5938] usb 4-1: config 119 has an invalid interface number: 231 but max is 0
[  184.402896][ T5938] usb 4-1: config 119 has no interface number 0
[  184.428499][ T5938] usb 4-1: config 119 interface 231 altsetting 32 endpoint 0xF has invalid maxpacket 512, setting to 64
[  184.444931][ T7687] netlink: 56 bytes leftover after parsing attributes in process `syz.4.434'.
[  184.471159][ T5938] usb 4-1: config 119 interface 231 altsetting 32 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  184.487329][ T7678] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  184.504582][ T5938] usb 4-1: config 119 interface 231 altsetting 32 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  184.608851][ T5938] usb 4-1: config 119 interface 231 altsetting 32 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  184.633343][ T5938] usb 4-1: config 119 interface 231 altsetting 32 has a duplicate endpoint with address 0xF, skipping
[  184.633446][ T5938] usb 4-1: config 119 interface 231 altsetting 32 has an invalid descriptor for endpoint zero, skipping
[  184.633468][ T5938] usb 4-1: config 119 interface 231 has no altsetting 0
[  184.638106][ T5938] usb 4-1: New USB device found, idVendor=257a, idProduct=2608, bcdDevice=e9.28
[  184.638136][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.638155][ T5938] usb 4-1: Product: ጋ贆虂ἽḈ䤾㯾挹♴齤湞㣽岇恹텸릜﹊亻꫽齆捣緕寳홞鿩샅䔧覰껯뛻蔜〠叙숛唹姲ී㟜儬ẑ襦ꑚ쁞䄤絷頼㜥㦕觝䔒ᷘ૨캦籷뺂袮꛳榝頋앛С픆ꋋ댭㔑ᡅ蔃㽶꼝ꌕ꽟久䚊徧ͬ⑂ꫲ鐼┚揘ීၶ䳣㲛㹫唚꽬儝셎掙事∞嗌뎬襇鹫ꗦ힬﻾ᰀ폃鳢姐
[  184.638251][ T5938] usb 4-1: Manufacturer: 测舿䣷ﴜ獅畫ᬄ黅뫪㳩뇛发ͦ襋㣑졈䞒ԇ쏖퓕
[  184.638270][ T5938] usb 4-1: SerialNumber: з
[  184.696518][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  184.782850][ T7691] openvswitch: netlink: Missing key (keys=40, expected=80)
[  184.986466][ T5938] option 4-1:119.231: GSM modem (1-port) converter detected
[  185.043498][ T5938] usb 4-1: USB disconnect, device number 20
[  185.081583][ T5938] option 4-1:119.231: device disconnected
[  185.585176][ T7700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.598283][ T7700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.126227][  T979] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  186.351000][  T979] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  186.377440][  T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  186.390817][  T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  186.405384][  T979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  186.427971][  T979] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  186.436606][ T5938] usb 2-1: USB disconnect, device number 26
[  186.443428][  T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.474491][ T5938] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  186.482710][  T979] usb 4-1: config 0 descriptor??
[  186.528093][ T7719] netlink: 56 bytes leftover after parsing attributes in process `syz.1.445'.
[  186.535017][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.561887][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.725583][  T979] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  186.756318][ T5952] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  186.929880][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  186.941157][ T5952] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  186.950738][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.966845][ T5952] usb 5-1: config 0 descriptor??
[  186.989985][ T5952] pwc: Askey VC010 type 2 USB webcam detected.
[  187.144601][ T7733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.154976][ T7733] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.296213][ T1904] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  187.348335][  T979] usb 4-1: USB disconnect, device number 21
[  187.393734][ T5952] pwc: recv_control_msg error -32 req 02 val 2b00
[  187.416987][ T5952] pwc: recv_control_msg error -32 req 02 val 2700
[  187.437079][ T5952] pwc: recv_control_msg error -32 req 02 val 2c00
[  187.444766][ T5952] pwc: recv_control_msg error -32 req 04 val 1000
[  187.456819][ T1904] usb 2-1: Using ep0 maxpacket: 8
[  187.466807][ T1904] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  187.467643][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.475851][ T5952] pwc: recv_control_msg error -32 req 04 val 1300
[  187.485043][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.490820][ T1904] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  187.520566][ T1904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.534058][ T5952] pwc: recv_control_msg error -32 req 04 val 1400
[  187.541621][ T5952] pwc: recv_control_msg error -32 req 02 val 2000
[  187.555816][ T1904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.570793][ T1904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.579210][ T5952] pwc: recv_control_msg error -32 req 02 val 2100
[  187.589178][ T1904] usb 2-1: Product: syz
[  187.593363][ T1904] usb 2-1: Manufacturer: syz
[  187.598976][ T5952] pwc: recv_control_msg error -32 req 04 val 1500
[  187.605549][ T1904] usb 2-1: SerialNumber: syz
[  187.623753][ T5952] pwc: recv_control_msg error -32 req 02 val 2500
[  187.631570][ T5952] pwc: recv_control_msg error -32 req 02 val 2400
[  187.680053][ T5952] pwc: recv_control_msg error -32 req 02 val 2600
[  187.687783][ T5952] pwc: recv_control_msg error -32 req 02 val 2900
[  187.842506][ T1904] usb 2-1: 0:2 : does not exist
[  187.861317][ T1904] usb 2-1: USB disconnect, device number 27
[  187.920807][ T5952] pwc: recv_control_msg error -71 req 04 val 1100
[  187.933381][ T5952] pwc: recv_control_msg error -71 req 04 val 1200
[  187.936543][  T979] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  187.972222][ T5952] pwc: Registered as video103.
[  187.981818][ T5952] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16
[  188.026810][ T5952] usb 5-1: USB disconnect, device number 24
[  188.176247][  T979] usb 4-1: Using ep0 maxpacket: 16
[  188.189798][  T979] usb 4-1: unable to get BOS descriptor or descriptor too short
[  188.213362][  T979] usb 4-1: unable to read config index 0 descriptor/start: -71
[  188.255041][  T979] usb 4-1: can't read configurations, error -71
[  188.628528][ T7769] netlink: 6 bytes leftover after parsing attributes in process `syz.1.460'.
[  188.718913][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'.
[  188.946327][ T1904] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  189.086274][  T979] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  189.136296][ T1904] usb 5-1: Using ep0 maxpacket: 8
[  189.148544][ T1904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  189.175845][ T1904] usb 5-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  189.193230][ T1904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.203729][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.214443][ T1904] usb 5-1: config 0 descriptor??
[  189.221124][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.250040][  T979] usb 4-1: Using ep0 maxpacket: 32
[  189.271652][  T979] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  189.284284][  T979] usb 4-1: config 0 has no interface number 0
[  189.291865][  T979] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  189.336251][  T979] usb 4-1: config 0 interface 85 has no altsetting 0
[  189.353104][  T979] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  189.362831][  T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.383788][  T979] usb 4-1: Product: syz
[  189.395751][  T979] usb 4-1: Manufacturer: syz
[  189.406281][  T979] usb 4-1: SerialNumber: syz
[  189.421772][  T979] usb 4-1: config 0 descriptor??
[  189.503178][ T7783] netdevsim netdevsim2: Direct firmware load for ..� failed with error -2
[  189.525935][ T7783] netdevsim netdevsim2: Falling back to sysfs fallback for: ..�
[  189.549429][ T7790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'.
[  189.590391][ T7790] geneve3: entered promiscuous mode
[  189.595984][ T7790] geneve3: entered allmulticast mode
[  189.654651][ T1904] kye 0003:0458:4018.0007: unbalanced collection at end of report description
[  189.702595][ T7795] @: renamed from vlan0
[  189.769535][ T1904] kye 0003:0458:4018.0007: parse failed
[  189.775338][ T1904] kye 0003:0458:4018.0007: probe with driver kye failed with error -22
[  189.853675][ T1904] usb 5-1: USB disconnect, device number 25
[  190.306917][  T979] appletouch 4-1:0.85: Geyser mode initialized.
[  190.318614][  T979] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input17
[  190.333460][    C0] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  190.558137][  T979] usb 4-1: USB disconnect, device number 23
[  190.713506][  T979] appletouch 4-1:0.85: input: appletouch disconnected
[  190.756269][ T1904] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  191.018197][ T1904] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  191.173679][ T1904] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  191.239615][ T1904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.239644][ T1904] usb 5-1: Product: syz
[  191.239660][ T1904] usb 5-1: Manufacturer: syz
[  191.239674][ T1904] usb 5-1: SerialNumber: syz
[  191.245425][ T1904] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input18
[  191.593464][ T7822] program syz.4.470 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  191.938953][ T7815] tty tty4: ldisc open failed (-12), clearing slot 3
[  193.456025][ T7846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.469309][ T7846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.313251][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  194.321987][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  194.591336][ T5218] bcm5974 5-1:1.0: could not read from device
[  194.754757][ T1904] usb 5-1: USB disconnect, device number 26
[  194.767037][ T5218] bcm5974 5-1:1.0: could not read from device
[  194.901980][ T5915] udevd[5915]: Error opening device "/dev/input/event4": No such file or directory
[  195.125659][ T7867] netlink: 'syz.0.486': attribute type 29 has an invalid length.
[  195.175774][ T5915] udevd[5915]: Unable to EVIOCGABS device "/dev/input/event4"
[  195.511898][ T5915] udevd[5915]: Unable to EVIOCGABS device "/dev/input/event4"
[  195.544702][ T5915] udevd[5915]: Unable to EVIOCGABS device "/dev/input/event4"
[  195.597576][ T5915] udevd[5915]: Unable to EVIOCGABS device "/dev/input/event4"
[  196.165213][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.246629][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.263502][ T7889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  196.271091][ T7889] IPv6: NLM_F_CREATE should be set when creating new route
[  196.278423][ T7889] IPv6: NLM_F_CREATE should be set when creating new route
[  196.679570][ T7894] tipc: Started in network mode
[  196.699694][ T7894] tipc: Node identity 0a347530b228, cluster identity 4711
[  196.733903][ T7894] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  196.879015][ T7896] syzkaller0: entered promiscuous mode
[  196.906293][ T7896] syzkaller0: entered allmulticast mode
[  197.056217][ T5970] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  197.182174][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.193668][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.229869][ T5970] usb 2-1: Using ep0 maxpacket: 16
[  197.247927][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.321523][ T5970] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  197.340348][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.357611][ T5970] usb 2-1: config 0 descriptor??
[  197.459541][ T7906] [U] 
[  197.807528][ T5970] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  197.856367][ T1904] tipc: Node number set to 3088872752
[  197.899457][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  197.899475][   T30] audit: type=1400 audit(1758651302.977:156): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  197.964376][ T5233] Dev loop6: unable to read RDB block 7
[  198.113987][ T5233]  loop6: unable to read partition table
[  198.122084][ T5233] loop6: partition table beyond EOD, truncated
[  198.412725][ T5930] usb 2-1: USB disconnect, device number 28
[  198.689065][ T7934] batadv1: entered promiscuous mode
[  198.723297][ T7892] tipc: Resetting bearer <eth:syzkaller0>
[  198.779016][ T7892] tipc: Disabling bearer <eth:syzkaller0>
[  198.946871][ T5970] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  199.108936][ T5970] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  199.118295][ T5970] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204
[  199.210811][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.222358][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.436223][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  199.540062][ T5970] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  199.585592][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.625404][ T5970] usb 5-1: config 0 descriptor??
[  199.858048][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  200.022225][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.036782][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.056841][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  200.072721][ T5970] usbhid 5-1:0.0: can't add hid device: -71
[  200.087388][ T5970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  200.103722][    T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  200.114198][ T5970] usb 5-1: USB disconnect, device number 27
[  200.132621][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.155559][    T9] usb 2-1: config 0 descriptor??
[  200.434898][ T7963] loop2: detected capacity change from 0 to 7
[  200.456718][ T7963] Dev loop2: unable to read RDB block 7
[  200.471089][ T7963]  loop2: AHDI p1 p2 p3
[  200.475395][ T7963] loop2: partition table partially beyond EOD, truncated
[  200.482763][ T7963] loop2: p1 start 1601398130 is beyond EOD, truncated
[  200.489818][ T7963] loop2: p2 start 1702059890 is beyond EOD, truncated
[  200.570908][    T9] cypress 0003:04B4:DE61.0009: item fetching failed at offset 5/7
[  200.581158][    T9] cypress 0003:04B4:DE61.0009: parse failed
[  200.587979][    T9] cypress 0003:04B4:DE61.0009: probe with driver cypress failed with error -22
[  200.720958][ T1206] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.774434][ T5970] usb 2-1: USB disconnect, device number 29
[  200.815361][ T1206] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.900300][ T1904] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  200.922078][ T1206] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.001525][ T1206] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.084247][ T1904] usb 5-1: config 0 has an invalid interface number: 160 but max is 0
[  201.100612][ T1904] usb 5-1: config 0 has no interface number 0
[  201.111440][ T1904] usb 5-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  201.133208][ T1904] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e
[  201.163180][ T1904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.196068][ T1904] usb 5-1: Product: syz
[  201.200330][ T1904] usb 5-1: Manufacturer: syz
[  201.204929][ T1904] usb 5-1: SerialNumber: syz
[  201.233980][ T1904] usb 5-1: config 0 descriptor??
[  201.255817][ T1904] usb 5-1: Found UVC 0.00 device syz (05ac:8501)
[  201.263811][ T1206] bridge_slave_1: left allmulticast mode
[  201.269141][ T1904] usb 5-1: No valid video chain found.
[  201.275615][ T1206] bridge_slave_1: left promiscuous mode
[  201.286934][ T1206] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.347708][ T1206] bridge_slave_0: left allmulticast mode
[  201.363613][ T1206] bridge_slave_0: left promiscuous mode
[  201.379734][ T1206] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.390251][ T5863] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  201.401893][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  201.412892][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  201.432053][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  201.443429][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  201.474871][ T1904] usb 5-1: USB disconnect, device number 28
[  201.666242][  T979] usb 2-1: new full-speed USB device number 30 using dummy_hcd
[  201.829937][  T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.840475][  T979] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  201.853971][  T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  201.876984][  T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  201.901639][  T979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  201.947865][  T979] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  201.971331][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  201.989448][  T979] usb 2-1: Product: syz
[  202.003977][  T979] usb 2-1: Manufacturer: syz
[  202.014363][  T979] usb 2-1: SerialNumber: syz
[  202.037211][ T7988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  202.045996][ T7988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  202.058312][  T979] usb 2-1: config 0 descriptor??
[  202.309064][  T979] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  202.322661][  T979] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  202.510844][  T979] radio-si470x 2-1:0.0: software version 0, hardware version 0
[  202.534584][ T7977] chnl_net:caif_netlink_parms(): no params data found
[  202.541041][  T979] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  202.563953][  T979] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  202.670866][ T1206] hsr_slave_0: left promiscuous mode
[  202.681637][ T1206] hsr_slave_1: left promiscuous mode
[  202.688273][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.695806][ T1206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.710294][  T979] radio-si470x 2-1:0.0: submitting int urb failed (-90)
[  202.719715][ T1206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.735239][ T1206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.783324][ T1206] veth1_macvtap: left promiscuous mode
[  202.789637][ T1206] veth0_macvtap: left promiscuous mode
[  202.795610][ T1206] veth1_vlan: left promiscuous mode
[  202.802031][ T1206] veth0_vlan: left promiscuous mode
[  203.076039][ T1206] pim6reg (unregistering): left allmulticast mode
[  203.111907][ T7976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.133643][ T7976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.232481][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.311761][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  203.417259][ T5930] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  203.496604][ T5863] Bluetooth: hci3: command tx timeout
[  203.595230][ T5930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  203.615756][ T5930] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  203.626458][  T979] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32
[  203.635840][  T979] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22
[  203.655132][ T5930] usb 5-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  203.678856][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.707981][ T5930] usb 5-1: config 0 descriptor??
[  203.758561][  T979] usb 2-1: USB disconnect, device number 30
[  204.170081][ T1206] team0 (unregistering): Port device team_slave_1 removed
[  204.233476][ T1206] team0 (unregistering): Port device team_slave_0 removed
[  204.327595][ T8035] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  204.592381][  T979] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  204.756226][  T979] usb 2-1: Using ep0 maxpacket: 32
[  204.860085][  T979] usb 2-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice=e0.d8
[  204.890764][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.947932][  T979] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:16.0/input/input20
[  204.989597][ T7977] bridge0: port 1(bridge_slave_0) entered blocking state
[  205.011892][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.023949][ T7977] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.048785][ T7977] bridge_slave_0: entered allmulticast mode
[  205.071086][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.075837][ T7977] bridge_slave_0: entered promiscuous mode
[  205.102537][ T7977] bridge0: port 2(bridge_slave_1) entered blocking state
[  205.111083][ T7977] bridge0: port 2(bridge_slave_1) entered disabled state
[  205.118401][ T7977] bridge_slave_1: entered allmulticast mode
[  205.134400][ T5218] bcm5974 2-1:16.0: could not read from device
[  205.143220][ T7977] bridge_slave_1: entered promiscuous mode
[  205.152767][ T5218] bcm5974 2-1:16.0: could not read from device
[  205.158249][  T979] usb 2-1: USB disconnect, device number 31
[  205.179776][ T5218] bcm5974 2-1:16.0: could not read from device
[  205.376957][ T7977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  205.398094][ T7977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  205.465331][ T7977] team0: Port device team_slave_0 added
[  205.482100][ T7977] team0: Port device team_slave_1 added
[  205.540401][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_0
[  205.548670][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.574582][    C1] vkms_vblank_simulate: vblank timer overrun
[  205.576235][ T5863] Bluetooth: hci3: command tx timeout
[  205.591514][ T7977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  205.605120][ T7977] batman_adv: batadv0: Adding interface: batadv_slave_1
[  205.618641][ T7977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  205.644597][    C1] vkms_vblank_simulate: vblank timer overrun
[  205.659097][ T7977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  205.762637][ T7977] hsr_slave_0: entered promiscuous mode
[  205.785797][ T7977] hsr_slave_1: entered promiscuous mode
[  205.793595][ T7977] debugfs: 'hsr0' already exists in 'hsr'
[  205.803830][ T7977] Cannot create hsr debugfs directory
[  206.024169][  T979] usb 5-1: USB disconnect, device number 29
[  206.121734][ T5233] Dev loop6: unable to read RDB block 7
[  206.148238][ T5233]  loop6: unable to read partition table
[  206.170618][ T5233] loop6: partition table beyond EOD, truncated
[  206.296650][ T7977] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  206.339235][ T7977] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  206.378451][ T8071] fuse: Bad value for 'fd'
[  206.482430][ T7977] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  206.565645][ T8076] ip6erspan0: entered promiscuous mode
[  206.583005][ T8079] sch_fq: defrate 4294967295 ignored.
[  206.615506][ T7977] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  206.818901][  T979] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  207.028335][ T7977] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.066448][ T7977] 8021q: adding VLAN 0 to HW filter on device team0
[  207.127363][  T979] usb 5-1: Using ep0 maxpacket: 32
[  207.152051][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.159254][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.175121][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.182338][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.240110][  T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  207.285588][  T979] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=8a.0a
[  207.291720][ T7977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.305328][  T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.330221][  T979] usb 5-1: Product: syz
[  207.342111][  T979] usb 5-1: Manufacturer: syz
[  207.355742][  T979] usb 5-1: SerialNumber: syz
[  207.474095][  T979] usb 5-1: config 0 descriptor??
[  207.736650][ T5863] Bluetooth: hci3: command tx timeout
[  207.843182][ T7977] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.884504][ T7977] veth0_vlan: entered promiscuous mode
[  207.895571][ T7977] veth1_vlan: entered promiscuous mode
[  207.969129][ T7977] veth0_macvtap: entered promiscuous mode
[  208.155586][ T7977] veth1_macvtap: entered promiscuous mode
[  208.389897][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_0
[  208.408059][ T7977] batman_adv: batadv0: Interface activated: batadv_slave_1
[  208.519486][   T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.574114][   T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.641130][   T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.721230][   T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  208.728965][   T30] audit: type=1326 audit(1758651313.807:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz.2.544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11db98eec9 code=0x0
[  209.002902][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.020778][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.107069][ T1206] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.145645][ T1206] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.816235][ T5863] Bluetooth: hci3: command tx timeout
[  209.897341][ T8135] netlink: 40 bytes leftover after parsing attributes in process `syz.2.546'.
[  209.978645][ T5970] usb 5-1: USB disconnect, device number 30
[  210.016304][ T5930] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  210.236233][ T5930] usb 6-1: device descriptor read/64, error -71
[  210.476857][ T5930] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  210.577182][ T5970] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  210.616392][ T5930] usb 6-1: device descriptor read/64, error -71
[  210.796690][ T5930] usb usb6-port1: attempt power cycle
[  210.885026][ T5970] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  210.896740][ T5970] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  210.923571][ T5970] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.988487][ T5970] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  211.001902][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.212591][ T5930] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  211.376914][ T5930] usb 6-1: device descriptor read/8, error -71
[  211.715990][ T5930] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  211.740923][ T1904] usb 5-1: USB disconnect, device number 31
[  211.841408][ T5930] usb 6-1: device descriptor read/8, error -71
[  211.969670][ T5930] usb usb6-port1: unable to enumerate USB device
[  212.531807][ T8164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.551'.
[  212.816844][ T8172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.554'.
[  213.477063][ T8187] netlink: 56 bytes leftover after parsing attributes in process `syz.0.557'.
[  214.097045][ T8197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.559'.
[  214.736374][  T979] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  214.826585][ T5930] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  214.907216][  T979] usb 2-1: Using ep0 maxpacket: 8
[  214.925688][  T979] usb 2-1: config 0 has no interfaces?
[  214.950133][  T979] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=95.0d
[  214.986227][ T5930] usb 5-1: Using ep0 maxpacket: 8
[  214.992296][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.993297][ T5930] usb 5-1: config 179 has an invalid interface number: 97 but max is 0
[  215.016451][  T979] usb 2-1: Product: syz
[  215.020661][  T979] usb 2-1: Manufacturer: syz
[  215.043959][ T5930] usb 5-1: config 179 has no interface number 0
[  215.046159][  T979] usb 2-1: SerialNumber: syz
[  215.054992][ T5930] usb 5-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  215.066634][ T5930] usb 5-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  215.079261][ T5930] usb 5-1: config 179 interface 97 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  215.093265][ T5930] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce
[  215.114369][  T979] usb 2-1: config 0 descriptor??
[  215.160435][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.184347][ T8209] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  215.203853][ T8217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.564'.
[  215.318582][ T8219] netlink: 56 bytes leftover after parsing attributes in process `syz.0.565'.
[  215.466342][ T5930] usb 5-1: USB disconnect, device number 32
[  215.532802][   T30] audit: type=1326 audit(1758651320.607:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8200 comm="syz.1.560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe03258eec9 code=0x0
[  216.760948][ T8239] atomic_op ffff88802878e198 conn xmit_atomic 0000000000000000
[  217.371340][  T979] usb 2-1: USB disconnect, device number 32
[  218.232185][ T8260] netlink: 56 bytes leftover after parsing attributes in process `syz.5.576'.
[  218.433324][ T8258] ipip1: entered promiscuous mode
[  218.708494][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.735469][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  219.115504][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.129972][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.154948][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.163522][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.173974][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.176430][ T5930] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  219.182195][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.196966][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.205093][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.244394][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.252664][    T9] hid-generic 00A0:0006:0003.000A: unknown main item tag 0x0
[  219.272502][    T9] hid-generic 00A0:0006:0003.000A: hidraw0: <UNKNOWN> HID v0.05 Device [syz1] on syz0
[  219.349332][ T5930] usb 2-1: Using ep0 maxpacket: 8
[  219.356227][  T979] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  219.358218][ T5930] usb 2-1: config 0 has no interfaces?
[  219.427050][ T5930] usb 2-1: New USB device found, idVendor=4971, idProduct=8024, bcdDevice= f.37
[  219.437202][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.456179][ T5930] usb 2-1: Product: syz
[  219.470642][ T5930] usb 2-1: Manufacturer: syz
[  219.475298][ T5930] usb 2-1: SerialNumber: syz
[  219.523170][ T5930] usb 2-1: config 0 descriptor??
[  219.529892][  T979] usb 5-1: config 0 has no interfaces?
[  219.542851][  T979] usb 5-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00
[  219.707999][  T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.711343][ T8285] netlink: 80 bytes leftover after parsing attributes in process `syz.0.584'.
[  219.820908][ T8287] vlan2: entered allmulticast mode
[  219.826153][ T8287] hsr0: entered allmulticast mode
[  219.831203][ T8287] hsr_slave_0: entered allmulticast mode
[  219.836922][ T8287] hsr_slave_1: entered allmulticast mode
[  220.004228][  T979] usb 5-1: config 0 descriptor??
[  220.186547][ T8292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'.
[  220.263599][ T8288] bridge1: entered promiscuous mode
[  220.283838][ T8274] netlink: 'syz.4.579': attribute type 1 has an invalid length.
[  220.294132][ T8288] bridge1: entered allmulticast mode
[  220.878512][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.887239][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.948280][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.984676][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.939332][  T979] usb 2-1: USB disconnect, device number 33
[  222.327738][ T8322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.352351][ T8322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.444454][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.5.592'.
[  222.565326][ T8329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  222.664412][ T8329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  222.793435][  T979] usb 5-1: USB disconnect, device number 33
[  223.248225][ T8343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.597'.
[  223.470063][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'.
[  224.235421][   T30] audit: type=1326 audit(1758651328.947:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  224.257652][    C0] vkms_vblank_simulate: vblank timer overrun
[  224.385844][   T30] audit: type=1326 audit(1758651328.947:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  224.408034][    C0] vkms_vblank_simulate: vblank timer overrun
[  224.859545][   T30] audit: type=1326 audit(1758651328.947:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  224.966292][ T8370] vlan2: entered allmulticast mode
[  224.971769][ T8370] bridge0: entered allmulticast mode
[  225.110206][   T30] audit: type=1326 audit(1758651328.947:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  225.241989][   T30] audit: type=1326 audit(1758651328.947:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  225.322025][   T30] audit: type=1326 audit(1758651328.947:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  225.412042][   T30] audit: type=1326 audit(1758651328.947:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  225.537158][   T30] audit: type=1326 audit(1758651328.947:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  225.610964][   T30] audit: type=1326 audit(1758651328.947:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  225.681158][   T30] audit: type=1326 audit(1758651328.947:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8349 comm="syz.5.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe97058eec9 code=0x7ffc0000
[  225.703279][    C0] vkms_vblank_simulate: vblank timer overrun
[  226.856836][ T5930] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  227.048389][ T5930] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  227.057902][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.100820][ T5930] usb 5-1: config 0 descriptor??
[  227.127787][ T5930] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  227.545779][ T8407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  227.759094][ T8414] netlink: 'syz.1.610': attribute type 4 has an invalid length.
[  228.146309][ T5971] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  228.181004][ T8425] netlink: 'syz.0.613': attribute type 1 has an invalid length.
[  228.246547][  T979] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  228.311809][ T5971] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  228.322374][ T5971] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  228.342631][ T5971] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.375498][ T5971] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  228.411825][  T979] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  228.421198][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.462445][  T979] usb 2-1: Product: syz
[  228.478088][ T5971] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -2
[  228.488950][ T6214] udevd[6214]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  228.506786][  T979] usb 2-1: Manufacturer: syz
[  228.511386][  T979] usb 2-1: SerialNumber: syz
[  228.545172][  T979] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  228.562336][ T5971] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  228.795098][    T9] usb 6-1: USB disconnect, device number 6
[  228.817941][ T8419] delete_channel: no stack
[  228.822660][ T8422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.836724][ T8422] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.004003][ T5952] usb 2-1: USB disconnect, device number 34
[  229.786044][ T8424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  229.816532][ T5971] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  229.852620][ T5971] ath9k_htc: Failed to initialize the device
[  229.880512][ T5952] usb 2-1: ath9k_htc: USB layer deinitialized
[  230.236381][ T5952] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  230.263605][  T979] usb 5-1: USB disconnect, device number 34
[  230.416844][ T1904] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  230.427997][ T5952] usb 2-1: Using ep0 maxpacket: 16
[  230.437350][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  230.456161][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  230.477998][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11
[  230.544753][ T5952] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024
[  230.585288][ T5952] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  230.606494][ T1904] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  230.620484][ T1904] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  230.645077][ T1904] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  230.672914][ T5952] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=7f.89
[  230.690080][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.701069][ T1904] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  230.711400][ T8475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.723727][ T5952] usb 2-1: Product: syz
[  230.727987][ T1904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.741841][ T5952] usb 2-1: Manufacturer: syz
[  230.746863][ T8475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.765910][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.783195][ T5952] usb 2-1: SerialNumber: syz
[  230.802962][ T5952] usb 2-1: config 0 descriptor??
[  230.809755][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.812307][ T1904] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  230.908451][ T8475] vxcan1: entered allmulticast mode
[  230.913878][ T8475] vxcan1: left allmulticast mode
[  230.919199][  T979] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  231.081769][ T8438] binder: BINDER_SET_CONTEXT_MGR already set
[  231.089164][ T8438] binder: 8436:8438 ioctl 4018620d 200000000040 returned -16
[  231.099742][ T8438] binder: 8436:8438 ioctl c0306201 200000000240 returned -11
[  231.108070][  T979] usb 5-1: Using ep0 maxpacket: 16
[  231.117280][ T5952] appledisplay: Apple Cinema Display connected
[  231.121665][  T979] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 38, changing to 9
[  231.144823][  T979] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  231.222393][  T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.234244][ T1904] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12
[  231.280097][  T979] usb 5-1: config 0 descriptor??
[  231.323492][ T5971] usb 2-1: USB disconnect, device number 35
[  231.323592][    C1] usb 2-1: appledisplay_complete - usb_submit_urb failed with result -19
[  231.339227][ T5971] appledisplay: Apple Cinema Display disconnected
[  231.524619][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.536668][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.376488][ T8495] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  232.560444][ T5971] usb 6-1: USB disconnect, device number 7
[  232.615611][ T8496] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  232.986372][ T5971] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  233.156535][ T5971] usb 6-1: Using ep0 maxpacket: 8
[  233.201387][ T5971] usb 6-1: unable to get BOS descriptor or descriptor too short
[  233.224561][ T5971] usb 6-1: unable to read config index 0 descriptor/start: -71
[  233.246770][ T5971] usb 6-1: can't read configurations, error -71
[  233.329701][ T8507] bond1: entered allmulticast mode
[  233.365942][ T8507] 8021q: adding VLAN 0 to HW filter on device bond1
[  233.628572][  T979] usbhid 5-1:0.0: can't add hid device: -71
[  233.637520][  T979] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  233.712091][  T979] usb 5-1: USB disconnect, device number 35
[  233.728024][ T8514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.630'.
[  234.453834][ T8538] netlink: 'syz.4.637': attribute type 13 has an invalid length.
[  234.885671][ T8542] !
: renamed from dummy0
[  235.072020][ T8554] ptrace attach of "./syz-executor exec"[7977] was attempted by "./syz-executor exec"[8554]
[  235.152619][ T8555] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=3176969119 (406652047232 ns) > initial count (321993810432 ns). Using initial count to start timer.
[  235.184435][ T8555] kvm: vcpu 4: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  235.866289][ T1904] usb 2-1: new low-speed USB device number 36 using dummy_hcd
[  236.150935][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.650'.
[  236.168000][ T1904] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  236.185348][   T59] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  236.192353][ T1904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  236.196554][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.5.650'.
[  236.211340][ T1904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  236.234890][   T59] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  236.248753][   T59] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  236.274632][   T59] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  236.502922][ T8583] tipc: Started in network mode
[  236.546874][ T8583] tipc: Node identity 6a8f5eea85bf, cluster identity 4711
[  236.575244][ T8583] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  236.599930][ T8585] syzkaller0: entered promiscuous mode
[  236.619586][ T8585] syzkaller0: entered allmulticast mode
[  236.701035][ T8583] tipc: Resetting bearer <eth:syzkaller0>
[  236.749938][ T8583] kvm: user requested TSC rate below hardware speed
[  236.790123][ T8582] tipc: Resetting bearer <eth:syzkaller0>
[  236.843500][ T8582] tipc: Disabling bearer <eth:syzkaller0>
[  237.058280][ T8592] netlink: 76 bytes leftover after parsing attributes in process `syz.5.654'.
[  238.700841][ T1904] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  238.761219][ T8628] bridge2: entered promiscuous mode
[  238.767323][ T8628] bridge2: entered allmulticast mode
[  238.822990][ T1904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.896501][ T1904] usb 2-1: config 0 descriptor??
[  238.908093][ T1904] usb 2-1: can't set config #0, error -71
[  238.956187][ T1904] usb 2-1: USB disconnect, device number 36
[  239.458428][ T1904] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  239.539463][ T5971] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  239.636271][ T1904] usb 2-1: Using ep0 maxpacket: 8
[  239.643141][ T1904] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  239.658721][ T1904] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  239.679000][ T1904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  239.708182][ T1904] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  239.717587][ T1904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.726469][ T5971] usb 5-1: Using ep0 maxpacket: 32
[  239.747558][ T5971] usb 5-1: config 1 interface 0 has no altsetting 0
[  239.755990][ T5971] usb 5-1: New USB device found, idVendor=1477, idProduct=1022, bcdDevice= 0.40
[  239.775440][ T1904] usb 2-1: Product: syz
[  239.775581][ T5971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.780354][ T1904] usb 2-1: Manufacturer: syz
[  239.820430][ T5971] usb 5-1: Product: syz
[  239.824620][ T5971] usb 5-1: Manufacturer: з
[  239.828898][ T1904] usb 2-1: SerialNumber: syz
[  239.839797][ T5971] usb 5-1: SerialNumber: syz
[  240.072118][ T1904] usb 2-1: 0:2 : does not exist
[  240.125760][ T1904] usb 2-1: USB disconnect, device number 37
[  240.130065][ T8646] netlink: 'syz.0.670': attribute type 1 has an invalid length.
[  240.168346][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.197216][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.210346][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.0.670'.
[  240.324169][ T8646] 8021q: adding VLAN 0 to HW filter on device bond1
[  240.337965][ T8651] mac80211_hwsim hwsim3 �: renamed from wlan1
[  240.425066][ T8646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  240.461561][ T8646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.479790][ T8122] udevd[8122]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  240.513625][ T8657] netlink: 68 bytes leftover after parsing attributes in process `syz.5.671'.
[  240.809544][ T8661] syzkaller1: entered promiscuous mode
[  240.815110][ T8661] syzkaller1: entered allmulticast mode
[  240.824639][ T8661] binder: 8659:8661 ioctl 5605 0 returned -22
[  240.973418][ T8664] netlink: 88 bytes leftover after parsing attributes in process `syz.5.673'.
[  241.987245][  T979] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  242.156229][  T979] usb 2-1: Using ep0 maxpacket: 32
[  242.164063][  T979] usb 2-1: config 0 has an invalid interface number: 247 but max is 0
[  242.172568][  T979] usb 2-1: config 0 has no interface number 0
[  242.183690][  T979] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  242.210575][  T979] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  242.219139][  T979] usb 2-1: Product: syz
[  242.225132][  T979] usb 2-1: Manufacturer: syz
[  242.242503][ T5971] usbhid 5-1:1.0: can't add hid device: -71
[  242.273268][ T8671] pim6reg: entered allmulticast mode
[  242.289889][  T979] usb 2-1: config 0 descriptor??
[  242.305275][ T5971] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  242.353095][ T5971] usb 5-1: USB disconnect, device number 36
[  242.706307][ T5971] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  242.856365][ T5971] usb 5-1: device descriptor read/64, error -71
[  242.906301][  T979] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  243.086303][  T979] usb 6-1: Using ep0 maxpacket: 16
[  243.116257][ T5971] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  243.124066][  T979] usb 6-1: config 0 has an invalid interface number: 217 but max is 0
[  243.168209][  T979] usb 6-1: config 0 has no interface number 0
[  243.183579][  T979] usb 6-1: config 0 interface 217 has no altsetting 0
[  243.202985][  T979] usb 6-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=ce.a8
[  243.213765][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.222665][  T979] usb 6-1: Product: syz
[  243.226963][  T979] usb 6-1: Manufacturer: syz
[  243.231572][  T979] usb 6-1: SerialNumber: syz
[  243.266387][  T979] usb 6-1: config 0 descriptor??
[  243.277657][ T5971] usb 5-1: device descriptor read/64, error -71
[  243.386586][ T5971] usb usb5-port1: attempt power cycle
[  243.645181][  T979] usb 2-1: USB disconnect, device number 38
[  243.976976][ T5971] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  244.735166][ T5971] usb 5-1: device descriptor read/8, error -71
[  244.956206][  T979] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  245.004388][ T5971] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  245.047706][ T5971] usb 5-1: device descriptor read/8, error -71
[  245.140876][  T979] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  245.153614][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.165965][ T5971] usb usb5-port1: unable to enumerate USB device
[  245.213712][  T979] usb 2-1: config 0 descriptor??
[  245.255346][  T979] gspca_main: sunplus-2.14.0 probing 055f:c420
[  245.787966][  T979] gspca_sunplus: reg_w_riv err -110
[  245.807599][  T979] sunplus 2-1:0.0: probe with driver sunplus failed with error -110
[  245.882623][ T8731] netlink: 'syz.0.689': attribute type 1 has an invalid length.
[  245.931737][ T8731] bond2: entered promiscuous mode
[  245.936945][ T8731] bond2: entered allmulticast mode
[  245.942727][ T8731] 8021q: adding VLAN 0 to HW filter on device bond2
[  245.973527][ T8731] bridge3: entered promiscuous mode
[  245.979023][ T8731] bridge3: entered allmulticast mode
[  245.985458][ T8731] bond2: (slave bridge3): Enslaving as a backup interface with an up link
[  246.053541][   T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  246.241861][   T12] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  246.357874][  T979] usb 6-1: USB disconnect, device number 10
[  247.156228][ T5970] usb 5-1: new full-speed USB device number 41 using dummy_hcd
[  247.422517][ T5970] usb 5-1: config 117 has an invalid descriptor of length 0, skipping remainder of the config
[  247.432972][ T5970] usb 5-1: config 117 has 0 interfaces, different from the descriptor's value: 1
[  247.525288][ T5952] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  247.633537][ T5970] usb 5-1: New USB device found, idVendor=9f72, idProduct=302d, bcdDevice=65.05
[  247.659474][ T5970] usb 5-1: New USB device strings: Mfr=21, Product=239, SerialNumber=201
[  247.702624][ T5952] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  247.713362][ T5952] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  247.755656][ T5970] usb 5-1: Product: syz
[  247.763156][ T5970] usb 5-1: Manufacturer: syz
[  247.770163][ T5970] usb 5-1: SerialNumber: syz
[  247.771263][ T5952] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  247.845091][ T5930] usb 2-1: USB disconnect, device number 39
[  247.916237][ T5952] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  247.965463][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.006082][ T5952] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  248.049846][ T5952] usb 6-1: invalid MIDI out EP 0
[  248.313913][ T8774] netlink: 'syz.1.697': attribute type 10 has an invalid length.
[  248.325638][ T8774] 8021q: adding VLAN 0 to HW filter on device team0
[  248.348368][ T8774] bond0: (slave team0): Enslaving as an active interface with an up link
[  248.353398][ T8122] udevd[8122]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.378823][ T8750] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  248.404939][ T5952] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  248.420708][ T8752] syzkaller0: entered promiscuous mode
[  248.444848][ T5952] usb 6-1: USB disconnect, device number 11
[  248.450976][ T8752] syzkaller0: entered allmulticast mode
[  248.575576][ T8785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.597034][ T8785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  248.930727][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  248.941016][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.574871][ T5970] usb 5-1: USB disconnect, device number 41
[  249.576329][ T5952] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  249.590149][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'.
[  249.628345][ T8750] tipc: Resetting bearer <eth:syzkaller0>
[  249.655610][ T8750] tipc: Disabling bearer <eth:syzkaller0>
[  249.856809][ T5952] usb 6-1: Using ep0 maxpacket: 16
[  249.920036][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.968774][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  250.191444][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  250.436658][ T5952] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  250.464591][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  250.496913][ T5952] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  250.523699][ T5952] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  250.553533][ T5952] usb 6-1: Manufacturer: syz
[  250.585560][ T5952] usb 6-1: config 0 descriptor??
[  250.886191][ T5952] rc_core: IR keymap rc-hauppauge not found
[  250.892236][ T5952] Registered IR keymap rc-empty
[  250.900145][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  250.936460][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  250.960266][ T5952] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  250.975498][ T5952] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21
[  250.992884][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.028816][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.057536][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.076398][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.107685][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.146387][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.166334][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.186410][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.217429][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.246715][ T5952] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  251.272849][ T5952] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  251.284577][ T5952] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  251.305099][ T5952] usb 6-1: USB disconnect, device number 12
[  251.635772][ T8830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'.
[  251.651248][ T8830] netlink: 'syz.4.716': attribute type 20 has an invalid length.
[  251.660260][ T8830] netlink: 'syz.4.716': attribute type 21 has an invalid length.
[  252.334487][ T8848] ALSA: mixer_oss: invalid OSS volume '�'
[  252.368503][  T979] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  252.579470][  T979] usb 5-1: unable to get BOS descriptor or descriptor too short
[  252.618713][  T979] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  252.646265][  T979] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  252.691163][  T979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.778408][  T979] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  252.816412][  T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.838092][  T979] usb 5-1: Product: syz
[  252.842540][  T979] usb 5-1: Manufacturer: syz
[  252.847229][  T979] usb 5-1: SerialNumber: syz
[  252.885016][ T8855] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  252.949052][ T8859] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  253.136487][  T979] usb 5-1: 0:2 : does not exist
[  253.197857][ T8868] netlink: 'syz.5.724': attribute type 4 has an invalid length.
[  253.329732][  T979] usb 5-1: USB disconnect, device number 42
[  253.462338][ T6214] udevd[6214]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  254.436254][ T5952] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  254.459158][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  254.518636][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  254.642486][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  254.660437][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.733'.
[  254.688811][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  254.774207][ T5952] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66
[  254.824020][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.868727][ T5952] usb 5-1: Product: syz
[  254.890518][ T8905] Failed to get privilege flags for destination (handle=0x2:0x8)
[  254.896355][ T5952] usb 5-1: Manufacturer: syz
[  254.906037][ T5952] usb 5-1: SerialNumber: syz
[  254.935884][ T5952] usb 5-1: config 0 descriptor??
[  254.983446][ T5952] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -90
[  255.087098][  T979] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  255.269148][ T5970] usb 5-1: USB disconnect, device number 43
[  255.302459][ T8915] netlink: 'syz.1.738': attribute type 1 has an invalid length.
[  255.347695][ T8914] netlink: 'syz.1.738': attribute type 1 has an invalid length.
[  255.796933][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.803380][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  255.846353][ T8928] netlink: 14212 bytes leftover after parsing attributes in process `syz.0.741'.
[  257.476460][ T5970] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  257.652849][ T5970] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  257.665156][ T5970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.667926][ T8957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.748'.
[  257.685184][ T8957] tipc: Invalid UDP bearer configuration
[  257.685469][ T8957] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  257.852754][ T5970] usb 6-1: Product: syz
[  257.861699][ T5970] usb 6-1: Manufacturer: syz
[  257.883831][ T5970] usb 6-1: SerialNumber: syz
[  257.904574][ T5970] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  257.925127][ T5971] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  258.340468][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  258.340524][   T30] audit: type=1804 audit(1758651363.417:208): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.750" name="/newroot/137/file1" dev="fuse" ino=1 res=1 errno=0
[  258.592357][ T5952] usb 6-1: USB disconnect, device number 13
[  259.255211][ T5971] usb 6-1: Service connection timeout for: 256
[  259.262301][ T5971] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services
[  259.271659][ T5971] ath9k_htc: Failed to initialize the device
[  259.282943][ T5952] usb 6-1: ath9k_htc: USB layer deinitialized
[  259.525268][ T9014] pim6reg: entered allmulticast mode
[  259.736667][  T979] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  259.978880][  T979] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  260.013814][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.035723][ T9024] x_tables: ip_tables: udp match: only valid for protocol 17
[  260.041054][  T979] usb 2-1: Product: syz
[  260.059481][  T979] usb 2-1: Manufacturer: syz
[  260.075893][  T979] usb 2-1: SerialNumber: syz
[  260.103198][  T979] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  260.126565][    T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  260.370642][ T9013] kvm: pic: non byte write
[  260.927773][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'.
[  261.605946][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.5.765'.
[  261.624377][    T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  261.636296][    T9] ath9k_htc: Failed to initialize the device
[  261.751240][    T9] usb 2-1: ath9k_htc: USB layer deinitialized
[  261.785468][ T9044] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  263.322247][ T5952] usb 2-1: USB disconnect, device number 41
[  263.463653][ T9034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.764'.
[  263.737029][ T5952] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  263.886198][ T5952] usb 2-1: Using ep0 maxpacket: 8
[  263.893351][ T5952] usb 2-1: config 5 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.913080][ T5952] usb 2-1: config 5 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  263.928943][ T5952] usb 2-1: New USB device found, idVendor=0853, idProduct=0146, bcdDevice= 0.00
[  263.939207][ T5952] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=64
[  263.947355][ T5952] usb 2-1: SerialNumber: syz
[  264.223641][ T5952] usbhid 2-1:5.0: can't add hid device: -71
[  264.229812][ T5952] usbhid 2-1:5.0: probe with driver usbhid failed with error -71
[  264.242640][ T5952] usb 2-1: USB disconnect, device number 42
[  264.527573][ T9077] loop2: detected capacity change from 0 to 7
[  264.538686][ T9077] Dev loop2: unable to read RDB block 7
[  264.544268][ T9077]  loop2: unable to read partition table
[  264.551192][ T9077] loop2: partition table beyond EOD, truncated
[  264.557900][ T9077] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  264.760523][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.5.778'.
[  264.817774][ T9087] netlink: 44 bytes leftover after parsing attributes in process `syz.1.780'.
[  264.907539][ T9090] fuse: Invalid gid '00000000000000000005'
[  264.924503][ T9090] netlink: 56 bytes leftover after parsing attributes in process `syz.1.781'.
[  265.078984][ T9090] netlink: 'syz.1.781': attribute type 1 has an invalid length.
[  265.136321][ T5952] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  265.290867][ T5952] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  265.314694][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.345723][ T5952] usb 6-1: Product: syz
[  265.362311][ T5952] usb 6-1: Manufacturer: syz
[  265.377364][ T5952] usb 6-1: SerialNumber: syz
[  265.807283][ T9083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.818397][ T9083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.882711][ T5952] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  265.907060][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.782'.
[  265.930789][ T5952] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  265.972115][ T5952] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  266.028223][ T5952] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32
[  266.256955][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  266.265608][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.710980][   T30] audit: type=1400 audit(1758651371.757:209): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  267.290677][ T5233] Dev loop6: unable to read RDB block 7
[  267.754280][ T5233]  loop6: unable to read partition table
[  267.761860][ T5233] loop6: partition table beyond EOD, truncated
[  267.823527][  T979] usb 6-1: USB disconnect, device number 14
[  267.962806][ T9139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.037331][ T9139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.043218][ T9141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.117539][ T9141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.396381][  T979] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  268.566479][  T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.601321][  T979] usb 6-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  268.853985][  T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.874220][  T979] usb 6-1: config 0 descriptor??
[  269.133279][ T9142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.140874][ T9142] syzkaller0: entered promiscuous mode
[  269.146619][ T9142] syzkaller0: entered allmulticast mode
[  269.157327][ T9142] tipc: Resetting bearer <eth:syzkaller0>
[  269.216986][ T9140] tipc: Resetting bearer <eth:syzkaller0>
[  269.358561][ T9152] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  269.367977][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.391443][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.514696][ T9140] tipc: Disabling bearer <eth:syzkaller0>
[  269.626737][ T9152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.637977][ T9152] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.712430][  T979] usbhid 6-1:0.0: can't add hid device: -71
[  269.730071][  T979] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  269.769903][  T979] usb 6-1: USB disconnect, device number 15
[  270.213682][ T9172] loop9: detected capacity change from 0 to 7
[  270.508606][ T9183] input: syz0 as /devices/virtual/input/input22
[  270.876205][ T1904] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  271.028289][ T1904] usb 5-1: config index 0 descriptor too short (expected 30175, got 18)
[  271.258760][ T1904] usb 5-1: config 65 has too many interfaces: 204, using maximum allowed: 32
[  271.324668][   T30] audit: type=1400 audit(1758651376.397:210): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[  271.336043][ T1904] usb 5-1: config 65 has an invalid descriptor of length 144, skipping remainder of the config
[  271.665734][ T1904] usb 5-1: config 65 has 0 interfaces, different from the descriptor's value: 204
[  271.700916][ T1904] usb 5-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f
[  271.732008][ T1904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.774389][ T5233] Dev loop6: unable to read RDB block 7
[  271.780252][ T1904] usb 5-1: Product: syz
[  271.780293][ T5233]  loop6: unable to read partition table
[  271.784537][ T1904] usb 5-1: Manufacturer: syz
[  271.790842][ T5233] loop6: partition table beyond EOD, truncated
[  271.795521][ T1904] usb 5-1: SerialNumber: syz
[  272.074688][ T1904] usb 5-1: USB disconnect, device number 44
[  272.119662][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.132677][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.160061][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.175416][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.276441][  T979] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  272.436402][    T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  272.448316][  T979] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  272.457523][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.465540][  T979] usb 6-1: Product: syz
[  272.469825][  T979] usb 6-1: Manufacturer: syz
[  272.474426][  T979] usb 6-1: SerialNumber: syz
[  272.481264][  T979] usb 6-1: config 0 descriptor??
[  272.624371][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  272.633596][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.641708][    T9] usb 2-1: Product: syz
[  272.645903][    T9] usb 2-1: Manufacturer: syz
[  272.650829][    T9] usb 2-1: SerialNumber: syz
[  272.868389][   T10] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  272.889446][  T979] usb 6-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0)
[  272.897758][  T979] usb 6-1: Firmware version (0.0) predates our first public release.
[  272.905862][  T979] usb 6-1: Please update to version 0.2 or newer
[  273.026302][   T10] usb 5-1: Using ep0 maxpacket: 32
[  273.033593][   T10] usb 5-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6
[  273.043304][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.055365][   T10] usb 5-1: config 0 descriptor??
[  273.070094][   T10] usb 5-1: dvb_usb_v2: found a 'Anysee' in warm state
[  273.077545][   T10] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  273.084353][   T10] dvb_usb_anysee 5-1:0.0: probe with driver dvb_usb_anysee failed with error -22
[  273.103687][ T9193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.130826][ T9193] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.278044][ T9199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.288741][ T9199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.298578][  T979] usb 5-1: USB disconnect, device number 45
[  273.369145][   T10] usb 6-1: USB disconnect, device number 16
[  274.068045][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  274.687845][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[  274.724676][   T30] audit: type=1400 audit(1758651379.787:211): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B706212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD503EAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C68502F7F549FA66F30E7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE16559268A265EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04
[  274.727119][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  274.816200][ T9228] ------------[ cut here ]------------
[  274.818142][    C0] vkms_vblank_simulate: vblank timer overrun
[  274.821518][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  274.831101][ T9228] faux_driver vkms: [drm] vblank wait timed out on crtc 0
[  274.837594][    T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  274.870775][ T9228] WARNING: CPU: 1 PID: 9228 at drivers/gpu/drm/drm_vblank.c:1308 drm_wait_one_vblank+0x571/0x5b0
[  274.872098][    T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  274.881840][ T9228] Modules linked in:
[  274.893895][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.0.817 Not tainted syzkaller #0 PREEMPT(full) 
[  274.897132][    T9] usb 2-1: USB disconnect, device number 44
[  274.903148][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  274.903165][ T9228] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0
[  274.925054][ T9228] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 d9 3c b3 fc 4d 8b 2c 24 48 c7 c7 80 b6 f5 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 20 5c 13 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9
[  274.945761][ T9228] RSP: 0018:ffffc90003407ae0 EFLAGS: 00010246
[  274.952353][ T9228] RAX: 229f8e7e85a7ad00 RBX: 1ffff11004935801 RCX: 0000000000080000
[  274.960643][ T9228] RDX: ffffc9000fc73000 RSI: 0000000000042064 RDI: 0000000000042065
[  274.968791][ T9228] RBP: ffffc90003407be0 R08: ffffc90003407807 R09: 1ffff92000680f00
[  274.976913][ T9228] R10: dffffc0000000000 R11: fffff52000680f01 R12: ffff88802499b000
[  274.984895][ T9228] R13: ffffffff8c08a980 R14: 0000000000000000 R15: ffffffff8c0a42e0
[  274.992928][ T9228] FS:  00007f7d91a286c0(0000) GS:ffff888125d12000(0000) knlGS:0000000000000000
[  275.001949][ T9228] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  275.008571][ T9228] CR2: 0000000000000000 CR3: 000000007988c000 CR4: 00000000003526f0
[  275.016626][ T9228] Call Trace:
[  275.019918][ T9228]  <TASK>
[  275.022855][ T9228]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  275.028591][ T9228]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  275.034887][ T9228]  ? __pfx_autoremove_wake_function+0x10/0x10
[  275.041325][ T9228]  ? drm_vblank_enable+0x297/0x440
[  275.046489][ T9228]  ? drm_vblank_get+0x151/0x270
[  275.051349][ T9228]  ? __pfx_drm_fb_helper_ioctl+0x10/0x10
[  275.057061][ T9228]  drm_fb_helper_ioctl+0x116/0x140
[  275.062186][ T9228]  do_fb_ioctl+0x45c/0x750
[  275.066676][ T9228]  ? __pfx_do_fb_ioctl+0x10/0x10
[  275.071662][ T9228]  ? __fget_files+0x2a/0x420
[  275.076319][ T9228]  ? __fget_files+0x3a0/0x420
[  275.080998][ T9228]  ? __fget_files+0x2a/0x420
[  275.085594][ T9228]  ? bpf_lsm_file_ioctl+0x9/0x20
[  275.090598][ T9228]  ? __pfx_fb_ioctl+0x10/0x10
[  275.095284][ T9228]  __se_sys_ioctl+0xfc/0x170
[  275.099994][ T9228]  do_syscall_64+0xfa/0x3b0
[  275.104502][ T9228]  ? lockdep_hardirqs_on+0x9c/0x150
[  275.109758][ T9228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.115831][ T9228]  ? clear_bhb_loop+0x60/0xb0
[  275.120584][ T9228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.126507][ T9228] RIP: 0033:0x7f7d90b8eec9
[  275.130924][ T9228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.151003][ T9228] RSP: 002b:00007f7d91a28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  275.159783][ T9228] RAX: ffffffffffffffda RBX: 00007f7d90de6180 RCX: 00007f7d90b8eec9
[  275.167824][ T9228] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006
[  275.175798][ T9228] RBP: 00007f7d90c11f91 R08: 0000000000000000 R09: 0000000000000000
[  275.183869][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.191906][ T9228] R13: 00007f7d90de6218 R14: 00007f7d90de6180 R15: 00007f7d90f0fa28
[  275.199935][ T9228]  </TASK>
[  275.202968][ T9228] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  275.210245][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.0.817 Not tainted syzkaller #0 PREEMPT(full) 
[  275.219443][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  275.229499][ T9228] Call Trace:
[  275.232770][ T9228]  <TASK>
[  275.235690][ T9228]  dump_stack_lvl+0x99/0x250
[  275.240292][ T9228]  ? __asan_memcpy+0x40/0x70
[  275.244868][ T9228]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.250051][ T9228]  ? __pfx__printk+0x10/0x10
[  275.254638][ T9228]  vpanic+0x281/0x750
[  275.258605][ T9228]  ? __pfx__printk+0x10/0x10
[  275.263186][ T9228]  ? __pfx_vpanic+0x10/0x10
[  275.267675][ T9228]  ? is_bpf_text_address+0x26/0x2b0
[  275.272874][ T9228]  panic+0xb9/0xc0
[  275.276579][ T9228]  ? __pfx_panic+0x10/0x10
[  275.280991][ T9228]  __warn+0x31b/0x4b0
[  275.284957][ T9228]  ? drm_wait_one_vblank+0x571/0x5b0
[  275.290234][ T9228]  ? drm_wait_one_vblank+0x571/0x5b0
[  275.295507][ T9228]  report_bug+0x2be/0x4f0
[  275.299821][ T9228]  ? drm_wait_one_vblank+0x571/0x5b0
[  275.305094][ T9228]  ? drm_wait_one_vblank+0x571/0x5b0
[  275.310367][ T9228]  ? drm_wait_one_vblank+0x573/0x5b0
[  275.315639][ T9228]  handle_bug+0x84/0x160
[  275.319870][ T9228]  exc_invalid_op+0x1a/0x50
[  275.324360][ T9228]  asm_exc_invalid_op+0x1a/0x20
[  275.329192][ T9228] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0
[  275.335071][ T9228] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 d9 3c b3 fc 4d 8b 2c 24 48 c7 c7 80 b6 f5 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 20 5c 13 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9
[  275.354659][ T9228] RSP: 0018:ffffc90003407ae0 EFLAGS: 00010246
[  275.360715][ T9228] RAX: 229f8e7e85a7ad00 RBX: 1ffff11004935801 RCX: 0000000000080000
[  275.368672][ T9228] RDX: ffffc9000fc73000 RSI: 0000000000042064 RDI: 0000000000042065
[  275.376627][ T9228] RBP: ffffc90003407be0 R08: ffffc90003407807 R09: 1ffff92000680f00
[  275.384581][ T9228] R10: dffffc0000000000 R11: fffff52000680f01 R12: ffff88802499b000
[  275.392535][ T9228] R13: ffffffff8c08a980 R14: 0000000000000000 R15: ffffffff8c0a42e0
[  275.400512][ T9228]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  275.406139][ T9228]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  275.412027][ T9228]  ? __pfx_autoremove_wake_function+0x10/0x10
[  275.418083][ T9228]  ? drm_vblank_enable+0x297/0x440
[  275.423185][ T9228]  ? drm_vblank_get+0x151/0x270
[  275.428024][ T9228]  ? __pfx_drm_fb_helper_ioctl+0x10/0x10
[  275.433693][ T9228]  drm_fb_helper_ioctl+0x116/0x140
[  275.438797][ T9228]  do_fb_ioctl+0x45c/0x750
[  275.443208][ T9228]  ? __pfx_do_fb_ioctl+0x10/0x10
[  275.448160][ T9228]  ? __fget_files+0x2a/0x420
[  275.452735][ T9228]  ? __fget_files+0x3a0/0x420
[  275.457393][ T9228]  ? __fget_files+0x2a/0x420
[  275.461972][ T9228]  ? bpf_lsm_file_ioctl+0x9/0x20
[  275.466898][ T9228]  ? __pfx_fb_ioctl+0x10/0x10
[  275.471605][ T9228]  __se_sys_ioctl+0xfc/0x170
[  275.476188][ T9228]  do_syscall_64+0xfa/0x3b0
[  275.480680][ T9228]  ? lockdep_hardirqs_on+0x9c/0x150
[  275.485876][ T9228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.491943][ T9228]  ? clear_bhb_loop+0x60/0xb0
[  275.496616][ T9228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.502500][ T9228] RIP: 0033:0x7f7d90b8eec9
[  275.506908][ T9228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.526502][ T9228] RSP: 002b:00007f7d91a28038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  275.534909][ T9228] RAX: ffffffffffffffda RBX: 00007f7d90de6180 RCX: 00007f7d90b8eec9
[  275.542865][ T9228] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000006
[  275.550822][ T9228] RBP: 00007f7d90c11f91 R08: 0000000000000000 R09: 0000000000000000
[  275.558777][ T9228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  275.566732][ T9228] R13: 00007f7d90de6218 R14: 00007f7d90de6180 R15: 00007f7d90f0fa28
[  275.574703][ T9228]  </TASK>
[  275.577988][ T9228] Kernel Offset: disabled
[  275.582322][ T9228] Rebooting in 86400 seconds..