last executing test programs:

8m57.561314694s ago: executing program 1 (id=1027):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
fcntl$getownex(r2, 0x10, &(0x7f00000001c0))
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r4 = socket(0x10, 0x801, 0x4000000)
r5 = syz_open_dev$media(&(0x7f0000000080), 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)
sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2040000, 0x0)
ioctl$FS_IOC_GETFLAGS(r5, 0x80046601, 0x0)
memfd_create(0x0, 0x0)
r6 = socket$kcm(0xa, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x20, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x521044, 0x0)
close(r7)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180))
sendmsg$kcm(r6, 0x0, 0x0)
syz_usb_connect$uac1(0x0, 0x9b, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902890003010000000904000000010100000a24010000000201020524040000090401000001020000090401010101020000072401000000000c24020100000005d5ae37460905010900000000000725010000000009e6010000010200000904020101010200000b2402011e0300019f8eca072401000000000905010910"], 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800000010628a740039040000000000000000000000001eac0cab237eccd42e7f85a57108eb472eb491dda8343b24e77b152db5bc6e5e5309aa44208b670ca049b6c0cadd19ae795c9be3bcffa2", @ANYRES32=r9, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac141400"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r0, &(0x7f00000003c0)="11eb534bfc0b", 0x6, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @local}, 0x14)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x17, "f398b3c892a0c6a45f07a7e9f1ff8092ee98b25a82a0a7"}, &(0x7f00000000c0)=0x1f)

8m55.026595787s ago: executing program 1 (id=1032):
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000000)={0x1, 0x0, @pic={0x1, 0x7, 0x4, 0x6, 0xf0, 0x1, 0x1, 0x1, 0xfa, 0x9, 0x6, 0xa, 0x1, 0xa7, 0x3, 0x2}})
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0x80, 0x1, {<r1=>0xffffffffffffffff}, {}, 0x2, 0x5})
r2 = syz_open_procfs(r1, &(0x7f0000000280)='net/icmp6\x00')
ioctl$CEC_ADAP_S_PHYS_ADDR(r0, 0x40026102, &(0x7f00000002c0)=0x6)
setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000300)={0x7fff, {{0x2, 0x4e20, @local}}}, 0x88)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="5ce8f7f0bb0605000000120003006269746d61703a69702c6d616300000015000300686173683a69702c706f72742c6e6574000000001100030068613a000000000000006574000000000500050000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x44804}, 0x800)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000500)=ANY=[@ANYBLOB="06e5b576620000000400000095000000060000000700000002000000fb0c89c01d28b11087f635060000000600000000000000000000000000000001000080ffff000003000000bb06000000000000cb000000000000000000000000000000000000000a000000040000000200000000010000000000008c4d0000020000000000000000000000000000000100004008000000030000009d0000000800000023050000ffffff7f00000000000000000000000000000000050000000300000003000000fcffffff09000000010000000000000000000000000000000700000000040000020000000300000015090000070000000700000000"])
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000640), r0)
sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040027bd7000fbdbdf250f000000180005008515000004000380080005000500000008000500600000000800050001000000b8d9e24fd214fc103ccc93f25b1c7b1f51b9a7159ed26664dd2d12365b4361deed2d6315e5985090bfe8be0305cc2d1bbc6dce5c01640700000000000000cfc4c8f725110e0000008eaad2f5b7de5f5abf66cf84f05d6e8bc7c77d746c9e1345e10217a769aa9e73904150b2986d3c6ec6700d6a5ef42452635727ef0b3af815d785d9c3cc8775cdeaa4eb5cf9971269ca1f42b96298d71b4a6588000400000000000020a679575ea5b1a8bf4aa342f42d"], 0x38}, 0x1, 0x0, 0x0, 0x4801}, 0x40040c0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf257400000008000300", @ANYRES32=r4, @ANYBLOB="000000e6d0b7ec740b71ea6f"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4800)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)={0x34, 0x17, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x240480d0}, 0x4000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000002, 0x31, 0xffffffffffffffff, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r6, 0xc0046209, &(0x7f0000001340))
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000900)={<r7=>0x0, @private, @broadcast}, &(0x7f0000000a80)=0xffffff9e)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000000940)={0x0, @aes128, 0x0, @desc1})
sendmsg$nl_route(r2, &(0x7f0000000c00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)=ANY=[@ANYBLOB="54000000190000042bbd7000fcdbdf250a2000fcff040006000200000c00090000080801af43cd1cd0df8dd371678694197059c70b44ed7155fe864762ea7efe79cf3c959df00cbed786f0960a8a67568e6639db9e347ca952b829fe957fefb0c1dcb1fda66e2e77078d336db2871276fb819c35122e68eb4efd80d11060e3ffcd758c635f46b570d79bef356f9eb9da35f362311e7eb6b39ceda717b2402b0bbe49a41e1b1afcb69575794f01ebb360f3ffba5355432b049f60", @ANYRES32=r7, @ANYBLOB="08001700070000000400088018001680140005000000000000000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x40)
sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x20000080)
ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1)
ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000dc0)={[0xfffffff5, 0x8, 0x9f84, 0x0, 0xd, 0x4, 0x7, 0x81, 0x0, 0x4, 0x10, 0x9741, 0x2, 0x11ab, 0x8, 0x2, 0x4, 0x9f, 0x6, 0x9, 0xa, 0x8, 0x1, 0xffff3973, 0x7, 0x4, 0x9, 0x2, 0x43, 0x1400, 0xa, 0x4, 0x73b, 0x4, 0x7f1, 0x7, 0x4, 0x8, 0x101, 0xfffffffe, 0x84, 0x8, 0x9, 0x1000, 0x8, 0x3, 0xfffffff5, 0x3, 0x3, 0x7f, 0x6, 0x732, 0x9, 0x4, 0x7, 0x70, 0x2, 0x7, 0x1, 0xba01, 0x15, 0x9, 0xd, 0x80, 0x99, 0x7b, 0x1, 0x8, 0x7, 0x401, 0x3ff, 0x8, 0x5, 0xffff, 0x3, 0x0, 0x4, 0x7a, 0x4, 0x8, 0x7fff, 0x8, 0x7fffffff, 0x2, 0x5, 0x8, 0x70f, 0x33c594d7, 0x8, 0x2, 0x2910f4a4, 0x0, 0x9, 0x5726, 0x2e6dfdc5, 0x2, 0x8, 0x5, 0x4, 0x9, 0x400, 0x7fe5, 0x4d88411, 0xf637, 0x9, 0x9, 0x3, 0x9, 0x6, 0x100, 0x3, 0x7, 0x0, 0x4, 0x0, 0xf7b5, 0x7f, 0x67dd, 0xc, 0x2, 0x3, 0x4, 0x7, 0x10, 0x4, 0x644, 0x9, 0x4, 0x1, 0x3, 0x6, 0x0, 0xffffffff, 0x9a000000, 0x10, 0x691cd6a8, 0x5, 0x1, 0xa, 0xffffffff, 0x7, 0x9, 0x7, 0x3, 0x7, 0x101, 0x3, 0x2, 0x4, 0x6, 0x4, 0x200, 0x7, 0x9, 0x1, 0x3ff, 0x3, 0x9, 0x40, 0x9, 0x1, 0x1d9, 0x400, 0x3, 0x6, 0x8, 0xe4, 0x0, 0xd, 0x4, 0xf, 0x8, 0x0, 0x40, 0x494b, 0x351369f6, 0x0, 0xfffffff2, 0xfffffff1, 0xa6f3, 0xf250, 0x1, 0x3, 0x101, 0x8b6e, 0x8, 0x1, 0x3, 0x10002000, 0x7, 0x7, 0x4, 0x2ba9, 0x7, 0x9, 0x17ed, 0x0, 0xb, 0x6, 0x9, 0x6000, 0x9, 0x400, 0x4, 0x3, 0x7, 0xfff, 0x7, 0xffff, 0x0, 0x2, 0x2, 0xf45, 0x5, 0x1, 0x80000000, 0x0, 0x7, 0x9, 0x2, 0x0, 0x7, 0x0, 0x2, 0x8c0, 0x5, 0xc, 0x86d2, 0xcb2, 0xb, 0x7, 0xf27c, 0x9, 0xff, 0x7, 0x1, 0x101, 0xfff, 0x7, 0x640, 0x1, 0x7, 0x9, 0xffffff01, 0x8, 0xc7d, 0x5, 0x4, 0x7, 0x586e27a4, 0x10, 0x2, 0x800, 0x6, 0x1, 0x81, 0x7, 0x3b, 0x0, 0x0, 0x0, 0xfffffff7, 0x2, 0x19, 0x101, 0x3, 0x9c3, 0x9, 0x1, 0x2, 0xfffffffe, 0x7, 0x401, 0x8, 0x7f, 0xee, 0x4, 0x400, 0x8, 0x10, 0x8, 0x9, 0x6, 0x860, 0x2, 0x4, 0x7da, 0x2, 0xc, 0x8, 0x3, 0x2, 0xd8, 0x1, 0x1, 0x1, 0x6, 0xfffffff2, 0x80, 0x2, 0x2, 0x9, 0xbe, 0x5, 0x1, 0x200, 0xb840, 0x6, 0x0, 0x8, 0x8, 0x7ff, 0xe, 0x6, 0x7, 0x3, 0x3, 0x9, 0x3ff, 0x1, 0x800, 0x5, 0x976, 0x0, 0xd, 0x0, 0x6, 0x290, 0x3, 0x100, 0x7, 0x0, 0x10, 0xcb, 0x4, 0x1000, 0x80000000, 0xab8, 0x200, 0x9, 0xbca7, 0x5, 0x2, 0x4, 0x80000001, 0x233a, 0x6, 0x1, 0x4, 0x8, 0x8, 0x9, 0x1, 0xab, 0x4, 0x6, 0x9, 0x3, 0x5, 0x5, 0x9, 0x800, 0x4, 0x6, 0x7, 0x0, 0x9, 0x4adf43ed, 0xdb, 0x9, 0x90dc, 0x0, 0x1, 0x2, 0x5, 0x2, 0x8, 0x10001, 0x200, 0x200, 0x0, 0x4, 0xfffffff9, 0x4, 0x8, 0xffffffff, 0xa, 0xe29, 0x8001, 0x10, 0xcb96, 0x34fa4a2d, 0xa, 0x8, 0x467, 0x4, 0x3, 0x9, 0xf, 0x5, 0xb, 0x1, 0x2, 0x22, 0x6, 0x10, 0x200, 0xff, 0x9, 0x2, 0x2, 0x38000000, 0x6, 0x200, 0x1000, 0x8, 0x80, 0x0, 0x50, 0x2, 0xaaf, 0x2, 0x1, 0x3, 0x80000000, 0x0, 0x8, 0x7, 0x485, 0x1, 0x7, 0x1, 0x4, 0xc52, 0x2, 0x7, 0x3, 0xe809, 0x9, 0x71c, 0x3, 0x8, 0x3, 0x8, 0x4, 0x1, 0x2, 0x224, 0x80000001, 0x1, 0xff, 0x0, 0xb, 0x3, 0x1, 0x0, 0x4, 0x7, 0x1, 0x10001, 0xb97, 0x7, 0x9, 0x2, 0xc7, 0x7, 0x4, 0x0, 0x7, 0x9, 0x1a1ba9e7, 0x9, 0x1, 0x1000, 0x8, 0x3, 0x6, 0x8, 0x0, 0x8, 0xe4e1, 0x2, 0x2, 0x8, 0x7, 0x2, 0x100, 0xee, 0xfffffffd, 0x4, 0xffff270b, 0x201b, 0x4, 0x0, 0x6, 0xffff, 0x2, 0x7, 0x81, 0x3ff, 0x0, 0xd, 0x4, 0x5, 0xd, 0xa229, 0x9, 0x8, 0x55, 0x3ff, 0xf021, 0x6, 0x8, 0x7fff, 0x5, 0x333, 0x5, 0x1, 0x2, 0x5, 0x8000000, 0x7fffffff, 0x2, 0x6, 0xb1, 0x5, 0x6, 0x5, 0x9, 0x2, 0x1, 0xb, 0x4, 0x3, 0x7, 0xfffff3ca, 0x2, 0xffff, 0x6, 0x9, 0x7, 0xfffffffb, 0x9, 0x80, 0x4, 0x6, 0x80, 0x9, 0x3, 0x10, 0x6b9, 0x1, 0x1, 0x9, 0x7fffffff, 0xdb58, 0xfffffff8, 0x5, 0xfffffffc, 0xec7d, 0xc7, 0x9, 0x9, 0x74c, 0x7, 0xe, 0x6, 0x7fff, 0x4, 0xffffe68d, 0x7, 0x6, 0x3, 0x4, 0xccdd, 0xd, 0x8, 0x9, 0xfffffcc4, 0x7f, 0x800, 0x2f0, 0x40, 0x6, 0xf8, 0xffff, 0x7, 0x45d4, 0xfffffff9, 0x7ff, 0xe, 0x7, 0x2, 0x2, 0x3, 0x12000000, 0x6, 0x3, 0x8, 0x0, 0x1, 0xed, 0x6, 0x3f5f, 0x7, 0xd, 0x7, 0x3, 0x7, 0x8, 0x7437, 0xd822, 0x8497, 0x405, 0x1, 0x0, 0xca6, 0x6, 0x10000, 0x3, 0x6, 0xea3b, 0x7fffffff, 0x2, 0x4, 0x241, 0x13ac127b, 0x3cf, 0x9, 0x200, 0x200, 0x8000, 0xffffffff, 0x7, 0x3, 0x7f, 0x9, 0x5, 0x611e, 0x1, 0x7, 0x4, 0xffff, 0x6, 0x7, 0x1, 0xd, 0x6cd, 0x1, 0x6, 0x0, 0x8, 0x3, 0x10001, 0xb53, 0x9, 0x261a, 0x101, 0xd, 0x800, 0x2, 0x0, 0x1, 0x5, 0x3, 0x28, 0x5, 0x2, 0x3, 0x1, 0x76f, 0x3, 0x7, 0x7fffffff, 0xac, 0x2, 0x3ff, 0x400, 0xff, 0x0, 0x80000000, 0x7, 0x671, 0x4, 0x7, 0x3, 0x3, 0x3, 0x0, 0x9, 0x2, 0xa, 0x3, 0x70, 0x5, 0x1000, 0x3, 0x41, 0x1, 0x80, 0x6, 0xa16, 0x70000000, 0x5, 0x6, 0x4, 0xff, 0x5, 0xffff8000, 0x0, 0x400, 0x7, 0x2, 0x9, 0xfffffdff, 0x5, 0x2, 0xa, 0x3, 0x2, 0x6, 0x11edbee4, 0x2, 0x5, 0x3ff, 0x4, 0x3, 0x7, 0xf7, 0x33, 0xe9a, 0x6, 0x6, 0x7, 0x9, 0x9, 0x2, 0x2, 0x937, 0xcb, 0x4, 0xd, 0x1, 0x1, 0x10001, 0xffff, 0x4d0b3f93, 0x400, 0x8a0, 0x6, 0x8, 0xd, 0x7, 0x7fffffff, 0x4, 0x5, 0x2, 0x8, 0x7, 0xa0, 0x6, 0x1, 0x1, 0xc, 0x4, 0x4, 0x3, 0xa3f5, 0x400, 0x6, 0x7ff, 0xfffffffe, 0xfffff715, 0x554b, 0x3, 0x8001, 0xff, 0x4, 0x1, 0x8, 0x800, 0x77, 0x5, 0x7, 0x4ae, 0x5, 0x9d0, 0x2, 0x0, 0x1, 0x9, 0x8695d24, 0xd, 0x80000001, 0x4, 0xd, 0x9, 0x400, 0x7, 0x2, 0x97dd, 0x52ad, 0x759f, 0x0, 0x6, 0x789, 0x100, 0x1, 0xe62, 0x4, 0x9, 0x10, 0xa, 0x23, 0x2, 0x0, 0x0, 0x9, 0x0, 0x7, 0x493, 0x6, 0x81, 0xc91, 0x8001, 0xff, 0x0, 0x1, 0x7, 0x4, 0x5, 0xc08, 0x6acb, 0xc00000, 0x1, 0x8, 0x6, 0x0, 0x9, 0xfffffffb, 0x10001, 0x75, 0xc9, 0x3ff, 0xffffffff, 0x7, 0x0, 0xfffffff4, 0x4, 0x6b9, 0xff, 0x3, 0xb8b3, 0x3, 0x5785, 0x8, 0xffffffff, 0x0, 0xcab, 0x1, 0x2, 0x7fff, 0x4, 0x9, 0x2, 0x80000000, 0x3, 0xfff, 0x7, 0x9, 0x7fff, 0x4, 0x800, 0x7fffffff, 0x3ff, 0x4, 0x0, 0x4, 0x7, 0x10040, 0x200, 0x52f, 0x8, 0x4, 0x2, 0x5, 0x8e6, 0x0, 0x800, 0x4, 0xa9c8, 0xb463, 0x5, 0x8, 0x1, 0x4, 0x4, 0x8, 0x7, 0x1, 0x7, 0xfffffff8, 0x2, 0x8001, 0x8, 0x2, 0x5, 0x4, 0x200, 0x8, 0x7, 0x0, 0x7fff, 0x30, 0x3, 0xd11, 0x3, 0xde, 0x1, 0x32484ca9, 0x3, 0x3ff, 0xd2, 0x1, 0x3a33, 0x3662ec95, 0x7, 0x1, 0x7, 0x200, 0xffffffa7, 0xc00, 0x2, 0xc1, 0x5, 0x80000000, 0xfffffff5, 0x6, 0xaf, 0x1000, 0xdbd, 0x7, 0x4, 0x5, 0xfffffffd, 0x0, 0xfffffffe, 0x1, 0x4, 0x100, 0x2, 0x5, 0x437, 0xfffffc01, 0xe, 0x10, 0x5, 0x3, 0x0, 0x5a47, 0x6, 0x80, 0xfffffffb, 0xc, 0x9, 0xed6, 0x2, 0xaf, 0x3, 0x15f76, 0x0, 0x3ff, 0xb66b, 0x4, 0x4, 0x0, 0x40000000, 0x24, 0x7, 0x2, 0x9d5e9c6, 0x34be, 0x6, 0xb, 0x4, 0x4, 0x200, 0x3, 0x9, 0x53d, 0x0, 0x7, 0x3, 0x2, 0x7fffffff, 0x10000, 0x3ff, 0x80000000, 0xffff7fff, 0x8, 0x3, 0x5, 0x2, 0x1, 0x200, 0x80000001, 0x400, 0x1, 0xeb, 0x7, 0x758, 0xab, 0x3, 0x7, 0x9, 0xffff0001, 0x4, 0x9, 0x9, 0x6, 0x1, 0xa, 0x400, 0xffff6e1d]})
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b7020000b96871dfbfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe0000004f850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d62de53a9a53608c10556e5734eb84049761451ce2e2d9f8004e26f7fcc059c06220002595f6dba87b81d1106fb026cce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd6fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f2fcb6d753a78845d8363e0401861abebe428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30810400000000000000d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f804924600273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c048d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b10700ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e357e4e90583ce8d43ec65ed491d87a51d7c13f665dcf772e3ead71112008b16b0ea821f70aee1ccbd71c5a1c21e87d5b7b73d356337dbcf3456ff6cd0d6b98a258e3509a7d15b9dcae4d0d750ffa07909c955e718585b2456308beda2fa03bb9bcf03cdff31ee4b1665b987829c0f0872c006c6e4ed666fe23b343aae943923eedbdb0e7abee90e3da7b98b7d07d2d4816201ad1737798635b0a3ebd3aed120e4500c16e6c9dc729f009db49c6b8b19613e4d792cb4ff5106419291d4222980b49ddb9527ce785822d8f4e2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_device, r2, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, r2}, 0x94)
syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe80, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, 0x0)
syz_emit_vhci(&(0x7f0000003040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_ecred_conn_req={{0x17, 0x5, 0xa}, {0x80, 0x8, 0xff, 0x800, [0x0]}}}}, 0x17)

8m54.850474454s ago: executing program 1 (id=1035):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
io_submit(r1, 0x29, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x604, 0x5, 0x0, r0, 0x0}])

8m54.716388177s ago: executing program 1 (id=1038):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
copy_file_range(r6, 0x0, r6, 0x0, 0x4, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000})
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x35}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="d6264fc90035"}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x24040050)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904"], 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="220000005e1d"], 0x20)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r9, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0x4000}})
move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r9, &(0x7f0000000100)='./file0\x00', 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0))

8m51.624288356s ago: executing program 1 (id=1051):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000900)=""/230, 0xe6}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)=""/124, 0x7c}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/104, 0x68}], 0x6}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010022, 0x0)

8m51.161362483s ago: executing program 1 (id=1054):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}], 0x3}, 0x4000000000000000)

8m49.958247435s ago: executing program 32 (id=1054):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000006c0)=""/174, 0xae}, {&(0x7f00000005c0)=""/172, 0xac}], 0x3}, 0x4000000000000000)

22.650801102s ago: executing program 4 (id=3316):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000140)={0x2, 0x1, {0x0, 0x1e, 0xd, 0x17, 0x1, 0x60, 0x4, 0x0, 0x1}})
syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})

22.466469536s ago: executing program 4 (id=3317):
r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="1900050000000500b1a748"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
accept4$alg(r1, 0x0, 0x0, 0x800)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)={0x1c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0)

21.883054068s ago: executing program 4 (id=3324):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x8000, 0x7ff, 0x1, 0x4, 0x4, 0xfffffffffffffe01, 0xb3aa, 0x10001, 0xe, 0x6, 0x3, 0x0, 0x1, 0x1, 0x6, 0x5], 0x5000, 0x452})
ioctl$KVM_X86_SETUP_MCE(r2, 0x8140aecc, &(0x7f0000000080)={0x2, 0x0, 0x6})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xa, 0x0, [{0x48a, 0x0, 0x6}, {0x350, 0x0, 0x9}, {0x949, 0x0, 0x4d2}, {0x92c, 0x0, 0x3}, {0xc0001c2a, 0x0, 0x71}, {0x963, 0x0, 0x1}, {0xaad, 0x0, 0xe3a}, {0xa1b, 0x0, 0x10}, {0x288, 0x0, 0xffffffffffffffff}, {0xba5, 0x0, 0xf}]})
ioctl$KVM_SET_MSRS(r2, 0x4140aecd, &(0x7f0000000080)=ANY=[])
r3 = msgget(0x1, 0x2)
msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000340)=""/4096)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x1e, 0x0, 0x0, 0x0}, {0x8001, 0x68c864dec95d5b95, 0x0, 0x0}], 0x2})

19.034749934s ago: executing program 4 (id=3332):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x1e, 0x0, 0x0, 0x0}, {0x8001, 0x68c864dec95d5b95, 0x0, 0x0}], 0x2}) (fail_nth: 3)

17.097600298s ago: executing program 4 (id=3342):
syz_emit_vhci(0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf090000f300000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000180), &(0x7f0000000240)=@tcp, 0x1}, 0x20)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'geneve1\x00', &(0x7f0000000000)=@ethtool_dump={0x3e}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004080)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x2a803)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000280)={0x2, 0x100004, 0x20})
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}})

16.625524931s ago: executing program 4 (id=3345):
r0 = syz_usb_connect$cdc_ncm(0x6, 0x7a, &(0x7f0000000140)=ANY=[@ANYRES32=<r1=>0xffffffffffffffff], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
connect$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x200200000, {0x0, 0x0, 0x1}, 0x2}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0x0, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
close_range(r8, r8, 0x2)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r9 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x5ec276bbe67a852b, 0x5, 0x45, 0x58}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x6a, 0x3}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x1, 0x84, 0xd, 0x40, 0x2f}, 0x5, &(0x7f0000000c40)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x440a}}, {0x2, &(0x7f00000006c0)=@string={0x2}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41f}}, {0x21, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x345f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}, {0x96, &(0x7f0000000d40)=@string={0x96, 0x3, "93f2f6321b9dff16056678d53eca63eae0f9d925ed81c278dc5d71cd9aa86d324736b69ada7631cbc958c0941a13b58e9419b034dd8d65e94eae41fcf52a67d2f937d47dce1a368863663b310bbfaa213505eb6c3803e3e7b3736b349668c3ba7e7bb8f4c5f7e9f4733786ce88ad382eee6e41fd5d93739c09d9b2f8ba134be35241f44f23f024fbb1f6eb4e78b95fb9ca4b447b"}}]})
syz_usb_control_io$printer(r9, &(0x7f0000000980)={0x14, &(0x7f00000008c0)={0x0, 0xa, 0x10, {0x10, 0xa, "878aa35a2060a09ed13eca26c820"}}, &(0x7f0000000900)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "c8119690d5cdc31f45791ce848abb0786b87ca1ff279fa2744615d355b7bc016df8f01d3b9213e9cc63037856999f38c08983fc79dd21b3dfa"}}}, &(0x7f0000000c00)={0x34, &(0x7f00000009c0)={0x0, 0xc, 0xa2, "39ab350b08f57768b4949c01f0fa4a157697aa3a8fc7702e4fb38f6755c178456fed78f1907ad026ac74fd894d0ed1b6806f65cc547b78b15a6d63597ff872dcec3928b0d30a9007685d585c503b278b09a882a468342af3f1ccab5dad4d7b86b51b1444c7db0d811990a48a4fc318ee1832ebcd3a15a592d2e74cbfd69aba5bb37f18112d17d28ef42ec6925a05276234575019f3c831cc401a061e1760dbedabe8"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b00)={0x20, 0x0, 0x74, {0x72, "5b7d6ea3a906ace456e3661de90e8626acc43ab4465d81306648972dcaacc7653a851042779568008200694a8802d11ff5d3dd7187f913fd771af43fe31f12af17d504136769e2cdec2fa2b746a646981fb8154706ff1340af866d566995e01952b40519986a327992f385b0ca409e8e6347"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0x1}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))

8.472660518s ago: executing program 0 (id=3386):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x0, 0x2b4}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x708, 0x41e3, 0x0, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000340)=0x4, 0x0, 0x4)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000b00)=@deltaction={0x40, 0x31, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)
unshare(0x2c020400)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0)
msgget$private(0x0, 0x240)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x48)
write(0xffffffffffffffff, &(0x7f0000000a00)="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", 0x831)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r7, 0xd}, 0x50)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_LINKS(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1f, r10, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r8}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x1000)
r11 = socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x96, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x2, 0x1, 0x5, 0x80, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x596}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x2, 0x343, 0x5}, {0x6, 0x24, 0x1a, 0x7ff, 0x3e}, [@mbim={0xc, 0x24, 0x1b, 0xfffb, 0xe, 0x25, 0xd, 0x9, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x3, 0x6, 0xb0}, @mdlm={0x15, 0x24, 0x12, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x84, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3c, 0x7, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x0, 0x1}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x250, 0x8, 0xff, 0x2, 0x10, 0x5}, 0x56, &(0x7f0000000640)=ANY=[@ANYBLOB="050f5600051410a9da94b3340f4c1a01000f0000000000ff001410040507ad295e5ffc958e3f9d102aea81c982edaf7f13f0e8e4e43b18620b10010401000a060600040a1003020200110303001410f101a201000000f00600000000000fc0ff00"], 0x7, [{0x43, &(0x7f00000001c0)=@string={0x43, 0x3, "b1078861b24040ef8eb0965e8010d2463bb5b169c96f9ce52769f78a6207307d7d0142b1be9a67da15dba6ed4b63fe6597100a8ec89b0fffc21c082101bb64e639"}}, {0x9c, &(0x7f00000002c0)=@string={0x9c, 0x3, "8598b17ff097872a2f0d85df84b656ca5950cfb4a2aaedd3abfd8844b58155c72c36ff2fd47d7354c83a416810187c9ecb41f39d40b7c6f58d969ea4e943338b4782d18cd9a6d4efe2bd6cf79e19477a492edd09101c8461d86c2c31b28cb690c5415de1ac91585b693999301922a11eb11e7660cccf7b4c1ec7339f536bf47eec765d738df0d9752d6701ecd847be1e13a79119dcc768ba80d7"}}, {0x1b, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b03346d9b327c081afeff21537e3007bc4f58eefd597eb885fc22f758849bb269fc6bee60176e146d0c7fed7d286c7692e23a9b61ea06543578b06b991bf75f19c2aa760977f74687a61ce5f34375cb3d298a12bb0ccab53374ac0e5a8ebac6b2a02d037a594b6c664a7066bd9c3a7c1a6a958f24007c7d507bf21f94a4e45418b946a35bd3db0adea4a6b180136a0e4cba7f939a04d5511c7349cf1119756e5e33f3e99efe9b72957372446cfd08439f5ae151a56936187e40f3ed9bbf4b34ae72d70a258e2fb714cd00"/220]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1407}}, {0xd5, &(0x7f0000000480)=@string={0xd5, 0x3, "7e35adc3e5b6547bcfd4020383e7e058cb605ff6f65cf7af6e324457ba4c7e7fa200e32492c7345c79173f79d3435e85061c78607b54d0cc55153d5262bba9a43c9b8b1e46e529f9f9a37a7c6cdc12de60df3a6f64e2bb083c880db66b7fa0de05b78ce0573de5522ef75487365ff7eaeba0dff298f372e09bfc188f1011b059956f21ddfc9bea68f3e3b8a469be0eabcb05294d1bba28d0198b4919dd93f2f02b46ae1fe10197f31c2d7f4893d9e8228838591aabfb67768b21954c62c063455c69a88ab6e46103dddad5134e6b4872127fc8"}}]})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6019f14d00383c0020010000000000000000000000000000ff0200000000000000000000000000012c03000000000000c910ff"], 0x0)

7.10126687s ago: executing program 2 (id=3394):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x2, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x804}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000004)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000180)={0x10000, {{0xa, 0x4e23, 0x84, @rand_addr=' \x01\x00', 0x5}}}, 0x90)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000000b00000700000009000100737905000000000014000000020a01010000000000000000000000002c000000180a05000000000000000000070000010900010073797a30000000000c0005400000000000000002580000000b0a01010000000000000000070000090800034000000008090001"], 0x392c}}, 0x0)

6.858267294s ago: executing program 5 (id=3396):
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
nanosleep(&(0x7f0000000100)={r1, r2+60000000}, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xe2)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x1000000008, 0x10000, 0x3}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x3)
setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x20000004)
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3})
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
getpgid(0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCMGET(r6, 0x5415, 0x0)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r7, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20020}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}]}}}]}, 0x40}}, 0x880)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

6.82341111s ago: executing program 2 (id=3397):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
openat2$dir(0xffffffffffffff9c, &(0x7f0000002900)='./file0\x00', &(0x7f0000004240)={0x240400, 0x3, 0x2}, 0x18)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/diskstats\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e, 0x0, r1}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000003e40), 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)
socket$nl_route(0x10, 0x3, 0x0)

5.458165924s ago: executing program 2 (id=3399):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
link(0x0, &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'geneve1\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x2000000)
request_key(0x0, 0x0, &(0x7f00000001c0), 0x0)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

5.294301869s ago: executing program 0 (id=3400):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x200002, 0x0, 0x81, 0xfffffffd, 'syz0\x00', 0x10000}, 0x3, 0x0, 0x3e, 0x0, 0x1, 0x0, 'syz1\x00', &(0x7f00000002c0)=['syz0\x00\x9cB\xd1}\xb7\xe2\xde\xb0\xc0\xab\x18]\xe5\xa1\x1anK\xadL\xe0\x00\xfd\xbc\xf2\x89\x8f\xe5)\xa8\xdeuYD\x14\x84\x01\xd3e?\xde/\x80y]\xa6\xb4^\xa66_\xb2RR\r\xc2\xa6\xb2\xa23\x1e\x880$\x87\xcdb\xa1\xf1\x19\x00d\xf1}\"\x9f#\x9a\xd2T\xfc\x84\xce\x8cW[AQ\xc4R\xec\xef7o\x03\x90\x8c\x01O\x89\xb7\r\x90\xd1\xde\xa6`\xbe\x93\xe96\xeei8\x8b~b+\x02\xbfy\x96\xb3h\x96R\xd18\b\b\xc5\v\xeac\x98\xd8\x95\xd3\x1f\x03\x00\x9d\x8f\xeb\x16 \xa0u\xad\xc2\xd4UH\x82\xbb\xe5\xd9\x19\xb7P\xfc\xf2\x02{\xba&\x0f/\xb2d\aC\xd0Q\x9e\xb2\x16\xea\xfe\x06\x92`\xdaV\xe3\xb0'], 0xbe})
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r2)
close(r2)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000002100010027bd7000ffdbdf250a140007070000020c00010008000400641c0000140001"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x2c2180, 0x0)
unshare(0x20000400)
r5 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
lseek(r5, 0x6, 0x3)
write$FUSE_NOTIFY_STORE(r4, &(0x7f00000002c0)=ANY=[], 0x28)
sendmmsg$unix(r1, &(0x7f0000000540), 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000008000000000000000c00000081116d00"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x1a9840, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'gretap0\x00', <r10=>0x0})
sendto$packet(r9, 0x0, 0x0, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r10, 0x1, 0x85, 0x6, @broadcast}, 0x14)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000080009000100000005000200fc0000000800050010270000"], 0x44}}, 0x0)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000400)=ANY=[@ANYBLOB="94000000", @ANYRES16=r11, @ANYBLOB="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"], 0x94}}, 0x0)

4.758470152s ago: executing program 0 (id=3402):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r0=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, r0, 0x8000000000000003}, 0x18)
r1 = epoll_create(0x1)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080))
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x80)

4.682833589s ago: executing program 5 (id=3404):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r0=>0xffffffffffffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000012fc509000000000000004dec25551ad9fa7f86"], 0x18}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f00001b4000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000000))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_opts(r11, 0x29, 0x37, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000000600200008000300", @ANYRES32=r12, @ANYBLOB="080005"], 0x24}}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x74, &(0x7f0000000080)={0x0, 0x4, 0x20, 0x3}, &(0x7f0000000840)=0x18)
sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r7, 0x30d, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x6f}, @val={0x8}, @val={0xc, 0x99, {0x5, 0x32}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24004904}, 0x4)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x14, "4372070000001000476fb2940acfbe4c"}})

4.414378703s ago: executing program 0 (id=3405):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_clone(0x8000, &(0x7f0000000200)="97d9a84c22f1a98db29459580d04c2f686804115ce2778e3479a21cbadfe706951550717026d66a86769afbc1664a6df36137db267bc24327aa0475992c074b763ed1882c9e17326b054758bf59df47834465a3755b6fc3b52cb81a1ff963d4b65dc9bde85ea4d43cdd7fab858e97207f1854a55f4397a974dfe1acf793f09d9006391ec31238dba0eaab29de4bc56724a673372752d68447d60f3f8d3afa0c3aa60a2e34b6b81d8c97449cca1", 0xad, &(0x7f0000000140), &(0x7f00000002c0), &(0x7f0000000300)="42e2485f056c55790eec5b9e13f8b85a52c0995d2290dd77c66ec57e1ec968c6fd4fb25a1771cc5cc6fde57564e9d2b1a4795ec9d25c4294e0a89e66603f02234776fa7e37ea367a206475eef45a8767da00005c094a3f366e9b8a6d477ef57b6721c3576c905226aad32ed9398a07eab87a3f04bcb71a2e173258499335cf430ffa2c2b07692f0f3f4cc5e6a354b5eed33a8dce8690b5472e13d3a56f1312a844a0d9325add62658d14ca463308b41d52d8fefd1c6d3b19a3a376700878cd7e51328fc374c7dcf9f52d1d2fe51de9c1f5555b536f075d40339a2a85849bb87d620340c49aa6f506cb08d0208d2f81386bfd672ebfe73d836b95aa1e788e3d46f5555c7d74b8812d3cce595fab253a6539a1042829aaa495cc50eb976bbb9daadfea0757e822410ac60d312443cd69aec9d13fae66aaba294776abbe9fa403a5ee95d663c5fd86e33c6754c895c2fd005cc208a0f926713d82a4723595c861dbd1df9bd0a2521979e4bda2b742387d5034140eaa9595152ec65be06fd8e8d533ea7afb97e93fced972f70987a6c2094eaf8fcd52bcc835882891d80416f00e3ffa4f6274218d0f8c92939834b1ca80bf401e4925554c86ef17216e235338caaaa3d21a13cb44e51e603dc5421d07e936cfa739a6c6e22d84605eddd9464ac4c8f809d20dbb2c2c8fbbd3e18417450f70e1501bc28d7b1a1cb7207e5b152a23f96db2589f8475e478d637174c1d0ecb89abd1f03a025f05c5fb13c812b795974256bfeb591c63243be3ca6abb10aac577ab427cf3890caffb1871bfcf08ff24dcf83005b1249313fea6a86aa4924f45c74f4f38b9af307e5eadb1b1206a6b063fe3a4210e0d4fa08029dd42852e4e22b49c6a3dbe6180c9e0e7a93bc081abff7a9fe76e261b62f1dc2bacd14559ab9a7aac4944cdf42cd3af81105e6ac6a9e551c4a90d043cf34356ed9d80cc5f9e58e93ffaab6cbe61c47d271d00e0b3a646e7e10375b5b6a87331c345fba8ad5b238224e3d7d7cae673fc51b9875878ec4af931fbd2410ff6f16cd12645802efb38970386d7589e70745aa38f78509829ed5410ba82759fefe0a7318167b163ca4776d26baf740cbf8e871c4da81fc5eb8c1dbc3a956502df58faf21942ae30a1568d97b2135b6179a457d50d4fef56c928287aeb07169a7e127b04e8914dfe8a3790d9605fc49961177f9451c6e232cf953a1cabccad71305eba2d06115c46a5d13fe0e7cd4bb9b1e56dd01574ae41ccf8029ea3c226e0a38a90ed18cd7e8eea59c84cde95d4d1d68b3953d66b71ea5d50890f83ad09cb7b0f1017d5d9f32cc4aa4113cd4a072bae30c5fa5fd21594c17929c8dbcb4ebed7daa83bcad5431830f67afbf0ae0b4accd63a8ca3b5d391828f0efd207ac01699bfe5f45a402d1a823bf988fe4e8f0a457f19fea92b5c713d3a33e765faf9e5adfd07ed3bc32a1b18e92d725adfd7c226dff7c99fa4bbea2d74eb48ec7f7bb9f2ddefc5e190c526af215bc5f5e05c472f63b959cff388f9f4694f9669c0ce888d095f2ab7926734663a0a7895ae9491b49bc99b8244a7772284a54231ffe33a7ddaedb6ab9de3f0fe58400c0de6cf0c77f55acef519c8f2dde728ffcc40e9aeddecc8383bd085580643a4451a974b32909fa302ade8d67eb3c752f9518fb968e4d532e1bd7bfdc02f24a0d8473c5c3a49dabcc1c8f6435f32038de635dc5756cb2f5aa33ce40163b775159405992cce88b8c152768b56ef18ab96616a17ca6d3ca801e65ee80e7f2bfd3c5741ee6fede94940f652c407d6ffd3ffa395028a824e9b6cb67f768afac9267a2d93d2b85aa92b2524ee1b76d062ffcb31e80f967f3557a23dc44751160daf99ce20c34a612cef2ea84c3908b270a853579737f053389c35e09f502184328c6dd56dc25e3efce7aceea3082a9021bb4bc5fa0b4d84725ccc4b0234a771bf985611f2a60ca2c905f63b5fcb63ce7d1c147ba272e9ae6472e77311a44969496a7fda1227a1635335c2d6882a274f812ebe8f4c3132ca450ba38c93fae661b643a0b25815291b7f636984a89fadcc556a414ca5f5ae8d990407c3d2253ce83072e474b38195083c39006f18ea25cd5cba13b9562b7ad05919a6da20f5194149e0f775f73ee8a0f976fbd851cfd26bcfb50cbf044ab9eafcf96016cf46f0cb8141e7cdee9d2d39b31495cb89940b4b74f3ee56f9e19190345266effa3234a7c7dcfbbbdff35a62556fe446f298d8d4a61bacb949e1d9e42011e389e979538aed6a3051a5264236d3529bdf0bfcc25ebf6573d3cf66a70b3c04d5e8b2cd24427a4f2da5a4d2cd74646a256befbd1ed5e6aae143916d5ffe80b8cad8cb24f212f0d9e10a5cffb919121eccb7669a9e3ed39801e99ae0b02f6db25f7a69ef5e8e898ca7533de1c3e6650fa726d03b7208e55b86d2b23b50a6f56d1a15228c90ac2596774e3374012682f3d3fddc9b171ad05871b1b59d3072f504713b409e432c1000ff2e50a15e0b6ffc1b53c2f673cc089bd94805b1a6cc752b58b8534e900290708e54fc618503c4b8bb290d12a523cf0e281da945f3f9680db8d2b08af8c2c18987f4f026b01a49f6a4dd7a50224d525e3e65d3a960970a5755422f011704d1e273eea8b9cec32d6107364df050535eed0ec65430a990d23f081a5595f68b843a9306a588c051376128c404299e8642458015b43b5202cb07a7eab341d42c8580790106dbcf8ceeae611611d4d763ba433079424d53f1b547fe6b08881fd1ca416d6eabf81fad1619a0038293808049d451a25f8b653543315aa95b77ac32a13c6c7879bedd19aceca879e1855b0dc83a1219c11c2366986a67e4a1260561854f3283d8570083a7b8dbfa6667edc55bce904b5f826ba3161388ae4ea8582910a94d315e2ecc2630dfb00058001ae56cd2bc3349abee1e07cb7c8d4e49fbd695b483dc9e3e4e3032687dd0bcd657557cd442de1f6af60933efd0c4d294926b2e49d335a4bb4a590d062fa612026de7badea1783962a3cabc8e78d67c3ebcd19546bafc64816a5ca5670b92af60e16b7f73908ce83719f5a49d5023f639d066633e0160090e9da872b04d9a828c167a48323ac3e2e0c0ef9dd2384a90655ec5cdeb95d6a08583264451270968cae7de363d143dd553045bb1ec0252d1a7d6facf7679f6742c00ca9f699d4a67794d93dd8280fde6d9bd5ed276c4739ed3974be6aa456e197a3535846522ce7f4064d8f98638cc6489866e35073244e9c5f576510222ce2c2269d1b2be3958eac1b13e85967cff6daed5c2934bf5d28ce8ad407ce321f0a84bd17111dac858286663cb2e0765387aceb14435a4a4bd6eff0268567c0293807e7665064e4392bb46609b060792d8e64b88bf8565bf82f5a204fe5848339ed9be65688377b785e922628cdfbe636441587bd26a5d39bb1da823a2f4076780b2985162eb497acb73188622c4a1a4d40969a5a700c7f37d9c9a90e85cbc20e27cb1a3ee51a508863be1b9bdb3dbb2e906491655654d6c7c9f5f566b18ca43bac595a43bbcdab0067b702d193f508c2d31c72fccd14753518b3ca6d213568487d9b565ab0c338dd5477636518f172387bc6c6ceb7d83d12a569e112e1a67f4e3c583369d88d60bb5d869453e4ba2a4815a9257ad020c6894d096f3537af20ef6be4bc881ae3bc4d657e7f6767a8efde20dcbb16adb79bf6a7e2dc7e91a618a3e8f7b5259fc109e0a245cc45d37e7c76216eb218c798efd913b147070455339f107b371b99f36651783108871d0157c7d49c8dc6d34ff0505cfe4f8f840639b02a39088ae3be82df69275fea07737e587eba8a18451bc0e4d5f0684b46c98d7489053c3b3ae2f6e057f09814ac6fe345944207c607cc97c85c5f8b24f046dd8166b70a6bbbd71df1cdd81cad5dfa8562cf1df8b49d90dfda7404cd6915741b0953cce70a17c1fe2d5dda2b6ef044d1a676799a5037d457e1e3ba63b043d25edc30c4092b03da48c39f53d7c486c2ea5c936c9dfe7898a29dc5caf6315b4c49819ae5a5cf716a056cf0e1e2ad0d6faeff5cf7ba99af872ae63aaef33dd20bffd165c420136cffe473eabe306c16f532eefc716e987612f5488d01ad3166059b5f4847fbcd34bb3e7e753ed52f507c153a6a0dc7504049408f20030500455f10524c91a39ee48fd582d6c33b027ffa59b15d154d4bd53e0a59cf594dd541c7aca6505610ea7d3954fc993c0a18abcff71bd94181349186db164a88407d993fa9d0e17a988ffd8334f65a72784920d68d21a6ee6431018f72cfdc50024bedd462909c44241779254d970c0c66e9b32fc16baffe27670696f9c7e6f6e8a13ab252f97180b87f6a886cbbafff464efe0ef0ef40d2296f8fda9202c984ba99512b0e96a5fdb059cc13991a54d8ac8a36541f2cae1de262e3f69f1e20bb5f03d275a81c9aa3527b6cd8548f6d9e041c3f54347ba83c92e7eb9a0289ddcbd1220286336f372fdb3715e6ce42cf115581eb804db1086dc2cbfe0b347b87e4640cce716b712f1685e2340c96b60daf6a6ca9352d312ef7a8415670767d75b341cca898ae42b9023aed1cdf1ebcaf9baf2143be3dce05126ee8836d1278add0331e6def6f1787106d1b37f7e85347430f5d8ee0f77e6d6f417bdffde391e4aa01fc5f5a86a75aaf6947ef846edbf72c3a09bf6c3ce14b266c79333a0a13877447bdb340944a60ec395249fd8751b87f1b95111df7e74b7956c04c0240b90b2b144685db8067964b3de5369ddc6fead6221883d69dcdb4aeb24dea9bee0d1f1231b20e515d72f98517fa34d213fce84c2a5f58a41c2e9634f38a5fb4ca3839d15e57ee8e20753fa16796b2246d91ddb59057e4fcd2d6dbd51e43cfc874940db552a0de3511e8a6be2d44260368356d6a81616c7d70b878d9b035695ef2c154f0ed4c68a91693055f1b15413af4613ba61f58b1eb779ab4179ab0f00227abbe4ccd0526ef1d761600efa393b1eb87a7830f938a8329d9155e60bd64788708565c4354ac9f433400110e35fba580ba551fac71e6b91be3cc97fb4e85f9ee3e3534f17bd15c028d375c10e9a28826a35f818ce37dba5c7d9be210dae91513c1da08fcb4c4baeee961e409545370f8ab3b7364451d02fd27460a8c3f64a96da8bfed121fecf6772a01d8b62b732822fa09860bf4d1cfbcfd6120ec2e913ea9fae3c0fd5501bbad8dbf5eb45e12bc606a2780105c56ef7d71476900e77144372716985ee182e38388d48c2eea6768d2c96caa4f88f4ed61bff68911113ac51198f0cc7e63e7149a1b5bcb551d0dcdde506f591d1c90ad14bedf9836f6bf43c4c22d0cc821eef54abeca9f5eb097ce44f6bd03ceb895749015e3d8dcedaed83d637c0b9fde14e60448efab30a4b9fb2e84b7c0b8fc89d9d0623bb86254a66222f67da6ec550a94fbc4e5f775081d94a68dc9d466353a1f2a17afa6349456b4f0d483929ffac2dcc1e39df90d58c2c1686b04e9568ba5bc395c48b35fd9423712dd453d7fc39fa3ba47c6bf527bc3d38554c4e9f6d17c19d7b2507e51e9557d4bba6e5133bf35761a1dd9aa73262c1890627a0f560e730992e907061ef06053657b854bc69627d75703cc754e37855db4120d38a0d2c810a1383786da19864575e1ebae6c5dda52506b450e8355f34eb209e51b1bd707f33330404f55a4c1d8061821cda10baac1125450373ee92b1cd5a287bd54bd1ec1dc1693d8e31e791c5252bc0fb4acfda75d46c4111d02e1170d9addfd7d0c4b959e7")
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r1, 0x852ac000)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4)
r2 = open(&(0x7f0000000140)='.\x00', 0x0, 0x103)
fcntl$notify(r2, 0x402, 0x8000003d)
fcntl$setsig(r2, 0xa, 0x21)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x1000000d)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a)
fallocate(r0, 0x0, 0x0, 0x1)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x5d0c4000)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x16}, 0x300, 0x0, 0x2, 0x9, 0x0, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x300, 0x2, 0x1, 0x6, 0x6, 0xbf}, 0x20)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x400})
write$cgroup_devices(r5, 0x0, 0xffdd)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4})
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x0, 0x20000000)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)

4.390660425s ago: executing program 5 (id=3406):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e01, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x401}, 0x1c)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000001080), 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40000002, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}], 0x1, 0x1)
setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f0000000f80)={0x1, 0x8, 0x4d, 0x34000000, @vifc_lcl_addr=@multicast1, @multicast2}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000fc0)=[@text64={0x40, &(0x7f0000001000)="c46179c5eef92e3ef30fb80366ba410066b8562666ef420f07f33e0f23e2b9260300000f32660f383c541b08b8010000000f01d966b8df000f00d866baf80cb822ee6186ef66bafc0cb000ee", 0x4c}], 0x1, 0x4f, 0x0, 0x0)
r7 = syz_open_dev$vim2m(&(0x7f0000000300), 0xd37, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000004b40)={0x1, @vbi={0x0, 0x0, 0x56595559}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
socket$alg(0x26, 0x5, 0x0)
r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1)
ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000f40)=ANY=[@ANYBLOB="00000000000000000a00000073d02c4bdb2e04feb9819bc8406c5ac9a241cb67940386cb59b9ae178eed29df"])
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

3.936158784s ago: executing program 5 (id=3407):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000002c0)={0xa, @sliced={0x8001, [0x6, 0x6, 0x6, 0xe8, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x6, 0x150a, 0x8002, 0x7, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x4, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0x8, 0x4, 0x5, 0x7, 0x1000, 0x7f, 0xa62c, 0x7, 0x4, 0x8, 0x40, 0x9, 0x6, 0x6, 0xf, 0x8, 0x46, 0x9, 0x7, 0xfce8], 0x2}})
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x20010100)
r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x10, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
ioctl$SNDCTL_DSP_NONBLOCK(0xffffffffffffffff, 0x500e, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
dup3(r2, r3, 0x80000)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x4)
r6 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000)
r9 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000000040)=0x2)
readv(r9, &(0x7f00000002c0)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1)
r10 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r11=>0x0})
sendmsg$can_raw(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r11}, 0x10, &(0x7f00000005c0)={&(0x7f0000000100)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x48}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)

3.678213869s ago: executing program 5 (id=3408):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000600)=[@in6={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1}, @in={0x2, 0x0, @remote}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in6={0xa, 0x4e22, 0x0, @private1, 0x80}], 0x64)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
syz_usb_control_io(r2, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.969508144s ago: executing program 3 (id=3409):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffd, 0x0, 0x8}}}}}}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000900)="4c5d74501dbebddefd2964303684b21e14d9ef79d33eeb1709e82fc8480f0a0adeab210260dec580d6c8cf242d18f33866ea581554f1aefa6c2c85ee6fd4a90506a7165b8855f48f1fa9e47a78be2ed830a774007d2237a3e7a475440221e1610e2d6883c3ce03870cf9fa6b4b24fc", 0x6f)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)

2.740644169s ago: executing program 3 (id=3410):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000002140)=[{{&(0x7f0000000880)={0xa, 0x4e21, 0x0, @empty, 0xfffffff8}, 0x1c, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1c0}}], 0x1, 0x80)

2.526523839s ago: executing program 3 (id=3411):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7fff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r1, 0xfffff000)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x7, 0x1, {{0x12, '/dev/snd/pcmC#D#p\x00'}, 0x2}}, 0x1f)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setreuid(0xee00, 0x0)
r2 = openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x2000000000000, 0x20041)
write$dsp(r2, &(0x7f00000004c0)='\x00', 0x1)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r6, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={<r8=>r7, @in={{0x2, 0x4e22, @broadcast}}}, &(0x7f0000000100)=0x84)
sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
ioctl$TUNSETOWNER(r4, 0x400454cc, 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r8, 0x6, 0xd, 0x20000, 0x9, 0x7}, &(0x7f0000000040)=0x14)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r4, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000000)={0x20001, 0x1fffffe, 0x7, 0x1ff, 0x9, 0x6, 0xfffdfffffffffffe, 0x4, 0x0, 0x2, 0xfffffffd, 0x2})

2.089720006s ago: executing program 2 (id=3412):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000020ac050f02220001828301090224000101000000090400000203010200092100050001220000090581", @ANYBLOB="87e9"], 0x0)
unshare(0x400)
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00')
getdents(r0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2c, 0xfffffffd, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_FLAGS={0x8, 0x8, 0x515}, @IFA_LOCAL={0x8, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x871ac4b30833d133}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x20008084)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x28, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x2d, 0x1, 0x7, 0x1, 0x3, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xe1, 0xcd, 0x2c}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0xf, 0x5}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0xc, 0x6, 0x7, 0x20, 0x2}, 0x1f8, &(0x7f0000000180)={0x5, 0xf, 0x1f8, 0x4, [@generic={0xcf, 0x10, 0x1, "b622da93465cf87061e58b7e04e9c878e3c775c98a8e272bf2ba317d5f4fe29502d310ce8ebc6b434b49ff5c3bfad4295e350e02e75604ea4e8f4ce2332b9747b6d1e5fabf0361a1c88c9cbbe04fbb1e7261fd86e68162ed5558eeb687cf2a7e09acc6bdd79b5313dd9522810eda1cbcaa6615597f76f534f6a1954dcf4afdfad6386becbcfbdf9f14ca0ad0486e844e357880b212f26ed0ef4e0f338dbb23352d5e550e82917f24cd63d1d9c9c3b58df8f3d47d97f5fe935844b3e99214c6a0cffb8ee5d3a956ca4b24619a"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x3, 0x6, 0x3}, @generic={0xfa, 0x10, 0x0, "1ee142f1c27d9f423c6486f14c6db94b01669cec907ed0c2f100c409d3bdd436fb4a61d376bcf01bc953511493bffb8c2c74f129f9401bf1f931b12d7bd1c5c22e60c900f868b3afbaf793cbb9e7a917f32f585842e702619dd77de27423cea6c697eaac90df4c26b70e4d3f3cae54c7de18d880462bbb36508fe59f32da9dc4d92e64fe256322a3e9bf24b8327d64f7c90d20562618a81fce288f2ebc1fa7c1f9249189bc889fa859632729c498d113b160ae9899a4bb8710e278afe1c2aa456ac3fc9c416c839eb177fd7c0c5928335acb889d97c5a5cc9617e86fd732187dcc43879fa7012aa3ac2be80d16a9938b016b930c82c5cf"}, @ssp_cap={0x20, 0x10, 0xa, 0x2, 0x5, 0x8, 0xf000, 0x4, [0x3f00, 0x1f8f, 0xff000f, 0xffc0c0, 0xc0]}]}, 0x4, [{0x91, &(0x7f0000000380)=@string={0x91, 0x3, "883c18fe9a19c918001cd8e3a67d997dd43e2e032406116a2f4e0d862425a81f287032cbbbb23e9057fba0f50fb6495e7b82a0d1af3aeda76f31370ff3f2de0e2d0a6db88eb85fcbf36b56652900ff24b9761f7a9f52d35841db626eb748a209fa2cb4c57f7921cfcfd31095208b3deafd38d19e9849796fe8cda862fe431ef2c555929e8e6802501775efb2f0441c"}}, {0x6d, &(0x7f00000000c0)=@string={0x6d, 0x3, "2401627ac619c00b93be25824c40b217e6f1011050a10b8d34d8c21ff046a361d8ed2c0a30feb81888bde858da5402dccd600e331e954855d8758f7af0ca23e96e59340c8659209200b5d45013deeba494451d2521570e2e8b5de2080c7ad14559bc5676740e8846f76be2"}}, {0x86, &(0x7f0000000440)=@string={0x86, 0x3, "68c47c0b14aed744f458c08050798885b8e51a2fb4edad56b4686e9941dd12ecd75b015bcb02c5c9763feffc713d03f1c647deb28180f5e11000b07b0fa9fd719671694d717029a0c2a3add6a2f8c45461a6ac8f244bae3e688a9dd6a29beb434945186a43ee6c41bbdeffb1573a68621a475839a74f193c5157dbcdd09d6aab3c5d23a8"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x82c}}]})
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x3fd, 0x2000)
r5 = openat$userio(0xffffffffffffff9c, &(0x7f00000005c0), 0x44400, 0x0)
write$USERIO_CMD_REGISTER(r5, &(0x7f0000000600)={0x0, 0x3}, 0x2)
syz_usb_connect$cdc_ncm(0x6, 0x78, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x5bd42500bd9162d0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x8, 0xd0, 0x74, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "95371f4689"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x40, 0x11}, {0x6, 0x24, 0x1a, 0xa, 0x3e}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x93}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x68, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xea, 0x7, 0x81}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0xe5, 0xe}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x310, 0x1, 0x2, 0x6, 0x20, 0x9}, 0x5, &(0x7f0000000700)={0x5, 0xf, 0x5}, 0x2, [{0xff, &(0x7f0000000740)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3801}}]})
close_range(r4, r4, 0x0)

1.847513146s ago: executing program 3 (id=3413):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3", 0x10)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
add_key(0x0, 0x0, &(0x7f0000000100)="305c0605e182d1447ad1ad837003", 0xe, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9", 0x5, 0xfffffffffffffffe)
write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000880)={0x706, 0x75, 0x1, {0x6fb, "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"}}, 0x706)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48000000100005"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r8 = accept4$alg(r0, 0x0, 0x0, 0x800)
sendmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x14)
io_setup(0xff, &(0x7f0000000380)=<r9=>0x0)
io_submit(r9, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r8, &(0x7f0000000340), 0x41}])

1.783941723s ago: executing program 5 (id=3414):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x13, 0x1, {0x1, '\x00', 0x5, 0x28e3, 0x5, 0x200}}}}]}, 0x48}}, 0x40)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0)
get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ac4000/0x4000)=nil, 0x2)
getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x4000002}, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]}, &(0x7f0000000500)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="00058200000037d97757f071c8d0494b7293ad51c43df3075d0a16b144b5fc421295293c9e91722a0d65dbdb08f831710e945adc3eaf96da9f8b8fab23b79c4b2075c6630609e22e177181038c3f1778afb031f40c270dfc101a86da"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000480)={0x40, 0xa0, 0x4, 0x7}, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "62df5fb6002862f4c0681446fe3b9413c27ed94b899765fcb937537bb2bba44fc634f806a93be684f7f222b8e84040"}})
syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa}}}}}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1.518106555s ago: executing program 3 (id=3415):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, &(0x7f00000000c0)='/dev/input/event#\x00')
socket$inet6_sctp(0xa, 0x0, 0x84)
r2 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/51, 0x33}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000280)=""/15, 0xf}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x5, &(0x7f0000000380)=""/134, 0x86}, 0xfff}, {{&(0x7f0000000440)=@phonet, 0x80, &(0x7f00000005c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/162, 0xa2}], 0x2, &(0x7f0000001940)=""/192, 0xc0}, 0xc4a}, {{&(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a00)=""/100, 0x64}, {&(0x7f0000001a80)=""/39, 0x27}, {&(0x7f0000001ac0)=""/124, 0x7c}, {&(0x7f0000001b40)=""/117, 0x75}, {&(0x7f0000001bc0)=""/244, 0xf4}], 0x5, &(0x7f0000001d40)=""/199, 0xc7}, 0xfffff1a8}, {{&(0x7f0000001e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000002f40)=""/67, 0x43}], 0x1, &(0x7f0000002fc0)=""/5, 0x5}, 0x100}, {{&(0x7f0000003000)=@nfc, 0x80, &(0x7f00000033c0)=[{&(0x7f0000003080)=""/177, 0xb1}, {&(0x7f0000003140)=""/232, 0xe8}, {&(0x7f0000003240)=""/118, 0x76}, {&(0x7f00000032c0)=""/215, 0xd7}], 0x4, &(0x7f0000003400)=""/211, 0xd3}, 0x77da31cb}, {{&(0x7f0000003500)=@hci, 0x80, &(0x7f0000004b00)=[{&(0x7f0000003580)=""/96, 0x60}, {&(0x7f0000003600)=""/149, 0x95}, {&(0x7f00000036c0)=""/186, 0xba}, {&(0x7f0000003780)=""/223, 0xdf}, {&(0x7f0000003880)=""/215, 0xd7}, {&(0x7f0000003980)=""/4096, 0x1000}, {&(0x7f0000004980)=""/69, 0x45}, {&(0x7f0000004a00)=""/86, 0x56}, {&(0x7f0000004a80)=""/111, 0x6f}], 0x9, &(0x7f0000004bc0)=""/146, 0x92}, 0x7}, {{0x0, 0x0, &(0x7f0000006000)=[{&(0x7f0000004c80)=""/42, 0x2a}, {&(0x7f0000004cc0)=""/141, 0x8d}, {&(0x7f0000004d80)=""/22, 0x16}, {&(0x7f0000004dc0)=""/243, 0xf3}, {&(0x7f0000004ec0)=""/30, 0x1e}, {&(0x7f0000004f00)=""/106, 0x6a}, {&(0x7f0000004f80)=""/75, 0x4b}, {&(0x7f0000005000)=""/4096, 0x1000}], 0x8, &(0x7f0000006080)=""/157, 0x9d}, 0x9}, {{&(0x7f0000006140)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000007440)=[{&(0x7f00000061c0)}, {&(0x7f0000006200)=""/231, 0xe7}, {&(0x7f0000006300)=""/107, 0x6b}, {&(0x7f0000006380)=""/8, 0x8}, {&(0x7f00000063c0)=""/4096, 0x1000}, {&(0x7f00000073c0)=""/98, 0x62}], 0x6, &(0x7f00000074c0)=""/209, 0xd1}, 0x2}], 0x8, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x14, 0x5, 0x0, 0x0, 0x4ee59ce4, 0xbfffffffffffffff, 0xfffffffb}, 0x0)
getpid()
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0)
setns(0xffffffffffffffff, 0x8020000)
syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58)
getdents64(r2, &(0x7f0000001f00)=""/4111, 0x100f)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = eventfd2(0xe5c, 0x80000)
r7 = eventfd2(0x4001, 0x800)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r6, 0x7, 0x2, r7})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r9 = eventfd2(0x8, 0x80001)
ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000140)={r9, 0x7, 0x2, r9})
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2d, 0xc0, 0x5, 0x7, 0x7f, 0x5, 0xf, 0x9, 0x3, 0x41, 0x7, 0x5c, 0x5, 0x5, 0xb, 0x7f}})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c4210})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

1.501971541s ago: executing program 33 (id=3345):
r0 = syz_usb_connect$cdc_ncm(0x6, 0x7a, &(0x7f0000000140)=ANY=[@ANYRES32=<r1=>0xffffffffffffffff], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1})
syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
connect$can_j1939(r5, &(0x7f0000000000)={0x1d, r6, 0x200200000, {0x0, 0x0, 0x1}, 0x2}, 0x18)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r6, {0xfffd, 0xffeb}, {0x1, 0x1}, {0x0, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
shutdown(r7, 0x0)
recvmmsg(r7, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
close_range(r8, r8, 0x2)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f00000020c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
r9 = syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x5ec276bbe67a852b, 0x5, 0x45, 0x58}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x6a, 0x3}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x1, 0x84, 0xd, 0x40, 0x2f}, 0x5, &(0x7f0000000c40)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x400a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x440a}}, {0x2, &(0x7f00000006c0)=@string={0x2}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x41f}}, {0x21, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r1]}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x345f}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}, {0x96, &(0x7f0000000d40)=@string={0x96, 0x3, "93f2f6321b9dff16056678d53eca63eae0f9d925ed81c278dc5d71cd9aa86d324736b69ada7631cbc958c0941a13b58e9419b034dd8d65e94eae41fcf52a67d2f937d47dce1a368863663b310bbfaa213505eb6c3803e3e7b3736b349668c3ba7e7bb8f4c5f7e9f4733786ce88ad382eee6e41fd5d93739c09d9b2f8ba134be35241f44f23f024fbb1f6eb4e78b95fb9ca4b447b"}}]})
syz_usb_control_io$printer(r9, &(0x7f0000000980)={0x14, &(0x7f00000008c0)={0x0, 0xa, 0x10, {0x10, 0xa, "878aa35a2060a09ed13eca26c820"}}, &(0x7f0000000900)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "c8119690d5cdc31f45791ce848abb0786b87ca1ff279fa2744615d355b7bc016df8f01d3b9213e9cc63037856999f38c08983fc79dd21b3dfa"}}}, &(0x7f0000000c00)={0x34, &(0x7f00000009c0)={0x0, 0xc, 0xa2, "39ab350b08f57768b4949c01f0fa4a157697aa3a8fc7702e4fb38f6755c178456fed78f1907ad026ac74fd894d0ed1b6806f65cc547b78b15a6d63597ff872dcec3928b0d30a9007685d585c503b278b09a882a468342af3f1ccab5dad4d7b86b51b1444c7db0d811990a48a4fc318ee1832ebcd3a15a592d2e74cbfd69aba5bb37f18112d17d28ef42ec6925a05276234575019f3c831cc401a061e1760dbedabe8"}, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000b00)={0x20, 0x0, 0x74, {0x72, "5b7d6ea3a906ace456e3661de90e8626acc43ab4465d81306648972dcaacc7653a851042779568008200694a8802d11ff5d3dd7187f913fd771af43fe31f12af17d504136769e2cdec2fa2b746a646981fb8154706ff1340af866d566995e01952b40519986a327992f385b0ca409e8e6347"}}, &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0x1}})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))

1.320756935s ago: executing program 0 (id=3417):
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0) (async, rerun: 64)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffffffffffe}, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x240) (async)
r2 = io_uring_setup(0x1581, &(0x7f0000000380)={0x0, 0x81ce, 0x100, 0x0, 0x3bd}) (async)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) (async, rerun: 64)
listen(0xffffffffffffffff, 0x0) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r3)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="8f9f02000000006ca200040000000400018085e6635b351b11591c179fa3e57c845682c08580573056e362350fe0d9be0fc23528b60d6c381ce238c88432fe8f43ff13948ebf1b9e478f1adcb25ff7c25f971a"], 0x18}}, 0x2000c090)
close_range(r2, 0xffffffffffffffff, 0x0) (async)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ac1000/0x3000)=nil, 0x3000, 0x2000000, 0x5d031, 0xffffffffffffffff, 0x0) (async)
syz_open_dev$dri(0x0, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1a, 0x1, 0x8, 0x8}, 0x50)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async, rerun: 32)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async, rerun: 64)
add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
socket$netlink(0x10, 0x3, 0x10)

946.480635ms ago: executing program 0 (id=3418):
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008e88052086800095d8b601020301090212000100000000090401"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000300)={&(0x7f0000000180)=[{0x3, 0xa800, 0x0, 0x0}, {0x8001, 0x68c864dec95d5b95, 0x0, 0x0}, {0xfff, 0x0, 0x35, &(0x7f0000000100)="5ebab46ec0fc6081107513d81474813fbba6c7101c0c3b3d06f4cf275f9d63901e3573803834e768b8007ae60926ba6ca944a9b9a9"}, {0x1ff, 0xb100, 0x39, &(0x7f0000000140)="25ef6721485f8e8195a9e90dd9483532d8577bc727a702a6a4268ee38c9e1115b8fb267990ef1f5bb7800cfbc347075cc823b4e5870aa532d6"}], 0x4})
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000ac0)={0x2c, &(0x7f0000000740)={0x0, 0xd, 0x7, {0x7, 0x0, "8c8fde8535"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

540.934742ms ago: executing program 3 (id=3419):
syz_usb_connect$uac1(0x0, 0xa5, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x305, 0x0, 0x4, 0x3}, @selector_unit={0x6, 0x24, 0x5, 0x4, 0x0, "dd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1420000041000001feffffff00000000057c0000fb25e82ab3ddf91106656d2c51ec0c831cc22918c7451baf9fa90846adcd6314effca59208f7abbd3b46e0cff85992bfa8f911b477929b647884df6c72f962082311de18a7c4f3b8e786bdc7c18c6f06e55cda4678b5af80a0b3aaa6da448549e81d547511fe771f49fbfd4c344a99905da945"], 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c)
setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000001c0)={{0xa, 0x4e22, 0xc4, @loopback, 0x3c}, {0xa, 0x4e21, 0xdb94, @mcast2, 0x1}, 0x1, {[0xc, 0xfd, 0x4, 0x1, 0xffffff27, 0xff, 0x1, 0xde]}}, 0x5c)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = io_uring_setup(0x6c0a, &(0x7f0000000100)={0x0, 0x9705, 0x10, 0x0, 0x71})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000180)=[0x282, 0x80000001], 0x2)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x4e22, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
unshare(0x400)
io_setup(0x222, &(0x7f0000000180)=<r4=>0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0)
io_submit(r4, 0x2, &(0x7f0000000080)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r5, &(0x7f00000002c0)="ab", 0x54, 0x6ed}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x3, r5, 0x0, 0x0, 0x1}])
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
lseek(r6, 0x6, 0x1)
listen(r2, 0x28)
r7 = accept4(r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x3, 0x8b}, &(0x7f0000000000)=0x90)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0], 0xdc}}, 0x0)

359.308302ms ago: executing program 2 (id=3420):
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x14, 0x6, 0x0, @local, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffd, 0x0, 0x8}}}}}}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000900)="4c5d74501dbebddefd2964303684b21e14d9ef79d33eeb1709e82fc8480f0a0adeab210260dec580d6c8cf242d18f33866ea581554f1aefa6c2c85ee6fd4a90506a7165b8855f48f1fa9e47a78be2ed830a774007d2237a3e7a475440221e1610e2d6883c3ce03870cf9fa6b4b24fc", 0x6f)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0)

0s ago: executing program 2 (id=3421):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x403, 0x80000, 0x25dfdc02, {0x0, 0x0, 0x74, 0x0, 0x800, 0x45407}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x6e560}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
listen(r1, 0x6)
getpeername$inet6(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

][T16938] use of bytesused == 0 is deprecated and will be removed in the future,
[  796.423652][T16938] use the actual size instead.
[  796.449764][T16749] 8021q: adding VLAN 0 to HW filter on device bond0
[  796.589485][ T5974] usb 4-1: USB disconnect, device number 21
[  796.616500][T16749] 8021q: adding VLAN 0 to HW filter on device team0
[  796.689682][T15284] bridge0: port 1(bridge_slave_0) entered blocking state
[  796.696867][T15284] bridge0: port 1(bridge_slave_0) entered forwarding state
[  796.789293][ T3580] bridge0: port 2(bridge_slave_1) entered blocking state
[  796.796494][ T3580] bridge0: port 2(bridge_slave_1) entered forwarding state
[  797.416598][T16967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3062'.
[  797.558137][T16749] 8021q: adding VLAN 0 to HW filter on device batadv0
[  797.691152][T16973] FAULT_INJECTION: forcing a failure.
[  797.691152][T16973] name failslab, interval 1, probability 0, space 0, times 0
[  797.742562][T16973] CPU: 0 UID: 0 PID: 16973 Comm: syz.5.3063 Not tainted syzkaller #0 PREEMPT(full) 
[  797.742587][T16973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  797.742606][T16973] Call Trace:
[  797.742615][T16973]  <TASK>
[  797.742623][T16973]  dump_stack_lvl+0x189/0x250
[  797.742649][T16973]  ? __pfx____ratelimit+0x10/0x10
[  797.742670][T16973]  ? __pfx_dump_stack_lvl+0x10/0x10
[  797.742691][T16973]  ? __pfx__printk+0x10/0x10
[  797.742720][T16973]  ? __ip_dev_find+0x444/0x4e0
[  797.742737][T16973]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.742754][T16973]  ? __ip_dev_find+0xa2/0x4e0
[  797.742776][T16973]  should_fail_ex+0x414/0x560
[  797.742812][T16973]  should_failslab+0xa8/0x100
[  797.742838][T16973]  kmem_cache_alloc_noprof+0x73/0x3c0
[  797.742860][T16973]  ? dst_alloc+0x105/0x170
[  797.742886][T16973]  dst_alloc+0x105/0x170
[  797.742905][T16973]  ? ip_check_mc_rcu+0x4c7/0x680
[  797.742929][T16973]  ip_route_output_key_hash_rcu+0x1560/0x23e0
[  797.742961][T16973]  ? ip_route_output_key_hash+0xde/0x2e0
[  797.742985][T16973]  ip_route_output_key_hash+0x1b9/0x2e0
[  797.743006][T16973]  ? __lock_acquire+0xab9/0xd20
[  797.743031][T16973]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  797.743070][T16973]  ip_route_output_flow+0x2a/0x150
[  797.743089][T16973]  ? security_sk_classify_flow+0x70/0x180
[  797.743114][T16973]  udp_sendmsg+0x142e/0x2170
[  797.743152][T16973]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  797.743177][T16973]  ? __pfx_udp_sendmsg+0x10/0x10
[  797.743197][T16973]  ? do_wp_page+0x22eb/0x5800
[  797.743255][T16973]  ? __pfx_aa_sk_perm+0x10/0x10
[  797.743276][T16973]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  797.743296][T16973]  ? sock_rps_record_flow+0x19/0x410
[  797.743321][T16973]  ? inet_sendmsg+0x29c/0x370
[  797.743340][T16973]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  797.743362][T16973]  __sock_sendmsg+0x19c/0x270
[  797.743388][T16973]  ____sys_sendmsg+0x52d/0x830
[  797.743415][T16973]  ? __pfx_____sys_sendmsg+0x10/0x10
[  797.743444][T16973]  ? import_iovec+0x74/0xa0
[  797.743468][T16973]  ___sys_sendmsg+0x21f/0x2a0
[  797.743490][T16973]  ? __pfx____sys_sendmsg+0x10/0x10
[  797.743552][T16973]  ? __might_fault+0xb0/0x130
[  797.743575][T16973]  __sys_sendmmsg+0x227/0x430
[  797.743597][T16973]  ? __pfx___sys_sendmmsg+0x10/0x10
[  797.743614][T16973]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  797.743655][T16973]  ? ksys_write+0x22a/0x250
[  797.743678][T16973]  ? __pfx_ksys_write+0x10/0x10
[  797.743704][T16973]  __x64_sys_sendmmsg+0xa0/0xc0
[  797.743726][T16973]  do_syscall_64+0xfa/0x3b0
[  797.743743][T16973]  ? lockdep_hardirqs_on+0x9c/0x150
[  797.743758][T16973]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.743774][T16973]  ? clear_bhb_loop+0x60/0xb0
[  797.743795][T16973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.743811][T16973] RIP: 0033:0x7fe31198ebe9
[  797.743827][T16973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  797.743842][T16973] RSP: 002b:00007fe30fbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  797.743861][T16973] RAX: ffffffffffffffda RBX: 00007fe311bc6090 RCX: 00007fe31198ebe9
[  797.743873][T16973] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006
[  797.743884][T16973] RBP: 00007fe30fbf6090 R08: 0000000000000000 R09: 0000000000000000
[  797.743895][T16973] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002
[  797.743906][T16973] R13: 00007fe311bc6128 R14: 00007fe311bc6090 R15: 00007fe311cefa28
[  797.743935][T16973]  </TASK>
[  798.445823][T16749] veth0_vlan: entered promiscuous mode
[  798.472686][T16749] veth1_vlan: entered promiscuous mode
[  798.702512][T16749] veth0_macvtap: entered promiscuous mode
[  798.724997][T16981] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  798.790120][T16749] veth1_macvtap: entered promiscuous mode
[  798.870460][T16984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3066'.
[  798.949910][T16749] batman_adv: batadv0: Interface activated: batadv_slave_0
[  799.002632][T16988] vivid-000: =================  START STATUS  =================
[  799.007218][T16749] batman_adv: batadv0: Interface activated: batadv_slave_1
[  799.026158][T16988] vivid-000: Test Pattern: 75% Colorbar
[  799.037412][T16988] vivid-000: Fill Percentage of Frame: 100
[  799.049307][T16988] vivid-000: Horizontal Movement: No Movement
[  799.058548][   T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  799.068775][T16988] vivid-000: Vertical Movement: No Movement
[  799.075818][T16988] vivid-000: OSD Text Mode: All
[  799.103550][T16988] vivid-000: Show Border: false
[  799.108855][T16988] vivid-000: Show Square: false
[  799.121914][T16988] vivid-000: Sensor Flipped Horizontally: true
[  799.130413][T16988] vivid-000: Sensor Flipped Vertically: false
[  799.136929][T16988] vivid-000: Insert SAV Code in Image: false
[  799.143645][T16988] vivid-000: Insert EAV Code in Image: false
[  799.152044][T16988] vivid-000: Insert Video Guard Band: false
[  799.180622][T16988] vivid-000: Reduced Framerate: false
[  799.207741][T15188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  799.219200][T16988] vivid-000: HDMI 000-0 Is Connected To: None
[  799.225868][T15188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  799.255106][T16988] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  799.278511][T15188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  799.314419][T16988] vivid-000: Enable Capture Cropping: true
[  799.327884][T16988] vivid-000: Enable Capture Composing: true
[  799.335614][T16988] vivid-000: Enable Capture Scaler: true
[  799.343360][T16988] vivid-000: Timestamp Source: End of Frame
[  799.362776][T16988] vivid-000: Colorspace: Rec. 709
[  799.373217][T16988] vivid-000: Transfer Function: Default
[  799.388134][T16988] vivid-000: Y'CbCr Encoding: Default
[  799.406163][T16988] vivid-000: HSV Encoding: Hue 0-179
[  799.414084][T16988] vivid-000: Quantization: Default
[  799.426584][T16988] vivid-000: Apply Alpha To Red Only: false
[  799.438213][T16988] vivid-000: Standard Aspect Ratio: 4x3
[  799.452055][T16988] vivid-000: DV Timings Signal Mode: Current DV Timings
[  799.459827][T16988] vivid-000: DV Timings: 640x480p59 inactive
[  799.469342][T16988] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  799.477081][T16988] vivid-000: Maximum EDID Blocks: 1
[  799.484584][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.492548][T16988] 
[  799.496646][T16988] vivid-000: Limited RGB Range (16-235): true
[  799.511442][T16988] vivid-000: Rx RGB Quantization Range: Automatic
[  799.517564][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.532949][T16988] 
[  799.537497][T16988] vivid-000: Power Present: 0x00000000
[  799.551873][T16988] tpg source WxH: 1280x720 (Y'CbCr)
[  799.558507][T16988] tpg field: 1
[  799.565159][T16988] tpg crop: (0,0)/64x64
[  799.570741][T16988] tpg compose: (0,0)/16x16
[  799.577353][T16988] tpg colorspace: 3
[  799.582936][T16988] tpg transfer function: 0/0
[  799.590220][T16988] tpg Y'CbCr encoding: 0/0
[  799.610673][T16988] tpg quantization: 0/0
[  799.614942][T16988] tpg RGB range: 0/1
[  799.620743][T16988] vivid-000: ==================  END STATUS  ==================
[  799.661750][T15280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  799.671540][T15280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  799.895232][ T5925] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  800.134490][ T5925] usb 1-1: config index 0 descriptor too short (expected 39, got 27)
[  800.159249][ T5925] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  800.187497][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0
[  800.226469][ T5925] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  800.242646][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  800.268966][ T5925] usb 1-1: Product: syz
[  800.273569][ T5925] usb 1-1: Manufacturer: syz
[  800.286301][ T5925] usb 1-1: SerialNumber: syz
[  800.296615][ T5974] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  800.338730][ T5925] usb 1-1: config 0 descriptor??
[  800.392134][ T5925] hub 1-1:0.0: bad descriptor, ignoring hub
[  800.407410][ T5925] hub 1-1:0.0: probe with driver hub failed with error -5
[  800.464158][ T5925] usb 1-1: selecting invalid altsetting 0
[  800.497570][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  800.510022][ T5955] hid_parser_main: 1 callbacks suppressed
[  800.510036][ T5955] hid-generic 0000:0000:0000.006E: unknown main item tag 0x0
[  800.561066][ T5955] hid-generic 0000:0000:0000.006E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  800.595718][ T5974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  800.669732][ T5974] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  800.810917][ T5956] usb 1-1: USB disconnect, device number 31
[  800.842701][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.914145][ T5974] usb 4-1: config 0 descriptor??
[  801.096069][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  801.301693][T17036] FAULT_INJECTION: forcing a failure.
[  801.301693][T17036] name failslab, interval 1, probability 0, space 0, times 0
[  801.326471][T17036] CPU: 1 UID: 0 PID: 17036 Comm: syz.5.3078 Not tainted syzkaller #0 PREEMPT(full) 
[  801.326499][T17036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  801.326510][T17036] Call Trace:
[  801.326518][T17036]  <TASK>
[  801.326539][T17036]  dump_stack_lvl+0x189/0x250
[  801.326570][T17036]  ? __pfx____ratelimit+0x10/0x10
[  801.326588][T17036]  ? __pfx_dump_stack_lvl+0x10/0x10
[  801.326608][T17036]  ? __pfx__printk+0x10/0x10
[  801.326636][T17036]  ? __pfx___might_resched+0x10/0x10
[  801.326658][T17036]  should_fail_ex+0x414/0x560
[  801.326686][T17036]  ? io_sqe_buffers_register+0x133/0x8d0
[  801.326706][T17036]  should_failslab+0xa8/0x100
[  801.326731][T17036]  __kvmalloc_node_noprof+0x161/0x5f0
[  801.326754][T17036]  ? io_sqe_buffers_register+0x133/0x8d0
[  801.326780][T17036]  io_sqe_buffers_register+0x133/0x8d0
[  801.326801][T17036]  ? __se_sys_io_uring_register+0x1e1/0x11b0
[  801.326828][T17036]  ? __fget_files+0x2a/0x420
[  801.326845][T17036]  ? __pfx_io_sqe_buffers_register+0x10/0x10
[  801.326865][T17036]  ? __fget_files+0x2a/0x420
[  801.326879][T17036]  ? __fget_files+0x3a0/0x420
[  801.326894][T17036]  ? __fget_files+0x2a/0x420
[  801.326912][T17036]  ? io_is_uring_fops+0xd/0x50
[  801.326937][T17036]  __se_sys_io_uring_register+0xb85/0x11b0
[  801.326963][T17036]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  801.326982][T17036]  ? ksys_write+0x22a/0x250
[  801.327005][T17036]  ? __pfx_ksys_write+0x10/0x10
[  801.327025][T17036]  ? rcu_is_watching+0x15/0xb0
[  801.327048][T17036]  ? do_syscall_64+0xbe/0x3b0
[  801.327070][T17036]  do_syscall_64+0xfa/0x3b0
[  801.327086][T17036]  ? lockdep_hardirqs_on+0x9c/0x150
[  801.327104][T17036]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.327121][T17036]  ? clear_bhb_loop+0x60/0xb0
[  801.327142][T17036]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.327159][T17036] RIP: 0033:0x7fe31198ebe9
[  801.327175][T17036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  801.327190][T17036] RSP: 002b:00007fe31272f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  801.327209][T17036] RAX: ffffffffffffffda RBX: 00007fe311bc5fa0 RCX: 00007fe31198ebe9
[  801.327223][T17036] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000009
[  801.327234][T17036] RBP: 00007fe31272f090 R08: 0000000000000000 R09: 0000000000000000
[  801.327245][T17036] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001
[  801.327256][T17036] R13: 00007fe311bc6038 R14: 00007fe311bc5fa0 R15: 00007fe311cefa28
[  801.327287][T17036]  </TASK>
[  801.618280][T17016] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3075'.
[  801.886655][T14415] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  801.897600][T14415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  801.905528][T14415] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  801.913743][T14415] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  801.929955][T14415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  802.250556][ T5974] usbhid 4-1:0.0: can't add hid device: -71
[  802.286103][ T5974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  802.354103][ T5974] usb 4-1: USB disconnect, device number 22
[  802.935379][ T5974] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  803.054221][T17045] chnl_net:caif_netlink_parms(): no params data found
[  803.116051][ T5974] usb 3-1: Using ep0 maxpacket: 32
[  803.151351][ T5974] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  803.173369][ T5974] usb 3-1: config 0 has no interface number 0
[  803.221872][ T5974] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  803.274522][ T5974] usb 3-1: config 0 interface 85 has no altsetting 0
[  803.322292][ T5974] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  803.380448][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  803.403746][T17085] binder: BINDER_SET_CONTEXT_MGR already set
[  803.426737][ T5974] usb 3-1: Product: syz
[  803.430932][ T5974] usb 3-1: Manufacturer: syz
[  803.460264][T17085] binder: 17083:17085 ioctl 40046207 0 returned -16
[  803.465833][ T5974] usb 3-1: SerialNumber: syz
[  803.497296][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  803.504584][    C0] bridge0: topology change detected, propagating
[  803.537249][ T5974] usb 3-1: config 0 descriptor??
[  803.566655][ T5956] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  803.901195][ T5956] usb 5-1: config 0 has an invalid interface number: 95 but max is 0
[  803.985055][T14415] Bluetooth: hci4: command tx timeout
[  803.993889][ T5956] usb 5-1: config 0 has no interface number 0
[  804.026436][ T5956] usb 5-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  804.047492][ T5956] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  804.058450][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  804.067018][ T5956] usb 5-1: Product: syz
[  804.071320][ T5956] usb 5-1: Manufacturer: syz
[  804.075992][ T5956] usb 5-1: SerialNumber: syz
[  804.093468][ T5956] usb 5-1: config 0 descriptor??
[  804.101915][T17082] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  804.214164][T17045] bridge0: port 1(bridge_slave_0) entered blocking state
[  804.269204][T17045] bridge0: port 1(bridge_slave_0) entered disabled state
[  804.275104][ T5974] appletouch 3-1:0.85: Geyser mode initialized.
[  804.286677][T17045] bridge_slave_0: entered allmulticast mode
[  804.306121][ T5974] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input56
[  804.345465][T17045] bridge_slave_0: entered promiscuous mode
[  804.353135][T17082] loop6: detected capacity change from 0 to 7
[  804.372573][T17082] Dev loop6: unable to read RDB block 7
[  804.386010][T17082]  loop6: unable to read partition table
[  804.391827][T17082] loop6: partition table beyond EOD, truncated
[  804.411224][T17045] bridge0: port 2(bridge_slave_1) entered blocking state
[  804.476801][T17082] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  804.486039][T17045] bridge0: port 2(bridge_slave_1) entered disabled state
[  804.486305][T17045] bridge_slave_1: entered allmulticast mode
[  804.532849][T17096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  804.534452][T17045] bridge_slave_1: entered promiscuous mode
[  804.567828][ T5974] usb 3-1: USB disconnect, device number 26
[  804.623323][T17096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  804.658435][ T5974] appletouch 3-1:0.85: input: appletouch disconnected
[  804.688289][ T5956] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  804.736633][ T5956] usb 5-1: MIDIStreaming interface descriptor not found
[  804.853988][T17045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  804.927015][ T5956] usb 5-1: USB disconnect, device number 72
[  804.942962][T17045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  805.028621][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  805.106322][ T5926] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  805.140785][T17045] team0: Port device team_slave_0 added
[  805.150155][T17045] team0: Port device team_slave_1 added
[  805.261485][ T5926] usb 6-1: Using ep0 maxpacket: 32
[  805.307200][T17114] openvswitch: netlink: Message has 8 unknown bytes.
[  805.310096][ T5926] usb 6-1: config 1 has an invalid interface number: 70 but max is 0
[  805.352497][ T5926] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  805.372096][T17045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  805.379432][ T5926] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  805.396019][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  805.433778][ T5926] usb 6-1: config 1 has no interface number 0
[  805.440320][ T5926] usb 6-1: config 1 interface 70 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  805.480453][T17045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  805.504508][ T5926] usb 6-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40
[  805.518238][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  805.531045][T17045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  805.539666][ T5926] usb 6-1: Product: syz
[  805.544220][T17045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  805.571461][ T5926] usb 6-1: Manufacturer: syz
[  805.579222][ T5926] usb 6-1: SerialNumber: syz
[  805.593327][T17045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  805.733850][T17129] loop6: detected capacity change from 0 to 7
[  805.744100][T17129] Dev loop6: unable to read RDB block 7
[  805.780827][T17129]  loop6: unable to read partition table
[  805.819285][T17103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  805.839141][T17129] loop6: partition table beyond EOD, truncated
[  805.846175][T17103] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  805.864393][T17129] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  805.902120][ T5926] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  805.913485][T17045] hsr_slave_0: entered promiscuous mode
[  805.928648][ T5926] usb 6-1: MIDIStreaming interface descriptor not found
[  805.938077][T17045] hsr_slave_1: entered promiscuous mode
[  805.970924][T17045] debugfs: 'hsr0' already exists in 'hsr'
[  805.995267][T17045] Cannot create hsr debugfs directory
[  806.017580][ T5926] usb 6-1: USB disconnect, device number 92
[  806.067719][T14415] Bluetooth: hci4: command tx timeout
[  806.069536][T17136] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3103'.
[  806.148654][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.70/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  806.377754][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3104'.
[  806.814076][T17045] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.875854][T17154] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  806.931885][T17045] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  806.956017][ T3094] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  807.001878][T17045] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.012461][ T5974] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  807.026507][ T5926] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  807.093846][T17045] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.108055][ T3094] usb 4-1: Using ep0 maxpacket: 16
[  807.115255][ T3094] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  807.124596][ T3094] usb 4-1: config 0 has no interface number 0
[  807.130951][ T3094] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  807.142084][ T3094] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  807.151952][ T5933] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  807.162507][ T3094] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  807.171652][ T3094] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  807.179916][ T3094] usb 4-1: Product: syz
[  807.188469][ T5926] usb 5-1: Using ep0 maxpacket: 8
[  807.191276][ T3094] usb 4-1: SerialNumber: syz
[  807.198264][ T5974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  807.207431][ T5926] usb 5-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=e3.67
[  807.214258][ T5974] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  807.227556][ T3094] usb 4-1: config 0 descriptor??
[  807.240926][ T3094] cm109 4-1:0.8: invalid payload size 0, expected 4
[  807.242195][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.250190][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.267107][ T3094] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input57
[  807.287580][ T5926] usb 5-1: config 0 descriptor??
[  807.294564][ T5974] usb 6-1: config 0 descriptor??
[  807.299863][ T5933] usb 3-1: device descriptor read/64, error -71
[  807.322529][ T5926] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  807.333014][ T5974] pwc: Askey VC010 type 2 USB webcam detected.
[  807.388781][T17045] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  807.403052][T17045] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  807.421855][T17045] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  807.444991][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  807.451525][T17045] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  807.510760][ T5926] usb 5-1: qt2_attach - failed to power on unit: -71
[  807.520180][ T5926] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71
[  807.538157][ T5926] usb 5-1: USB disconnect, device number 73
[  807.549238][ T5933] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  807.594031][T17045] 8021q: adding VLAN 0 to HW filter on device bond0
[  807.620355][T17045] 8021q: adding VLAN 0 to HW filter on device team0
[  807.632760][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  807.639980][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  807.655827][T15188] bridge0: port 2(bridge_slave_1) entered blocking state
[  807.662987][T15188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  807.708339][ T5933] usb 3-1: device descriptor read/64, error -71
[  807.741757][ T5974] pwc: recv_control_msg error -32 req 02 val 2b00
[  807.762770][ T5974] pwc: recv_control_msg error -32 req 02 val 2700
[  807.772011][ T5974] pwc: recv_control_msg error -32 req 02 val 2c00
[  807.784570][ T5974] pwc: recv_control_msg error -32 req 04 val 1000
[  807.795740][ T5974] pwc: recv_control_msg error -32 req 04 val 1300
[  807.803189][T17045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  807.811944][ T5974] pwc: recv_control_msg error -32 req 04 val 1400
[  807.821524][ T5933] usb usb3-port1: attempt power cycle
[  807.833199][ T5974] pwc: recv_control_msg error -32 req 02 val 2000
[  807.843335][ T5974] pwc: recv_control_msg error -32 req 02 val 2100
[  807.856927][T17045] veth0_vlan: entered promiscuous mode
[  807.862537][ T5974] pwc: recv_control_msg error -32 req 04 val 1500
[  807.880276][T17149] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  807.889846][T17045] veth1_vlan: entered promiscuous mode
[  807.900770][T17149] syzkaller0: entered promiscuous mode
[  807.906394][T17149] syzkaller0: entered allmulticast mode
[  807.923917][T17149] tipc: Resetting bearer <eth:syzkaller0>
[  807.939101][ T5974] pwc: recv_control_msg error -32 req 02 val 2500
[  807.945725][T17147] tipc: Resetting bearer <eth:syzkaller0>
[  807.965201][T17147] tipc: Disabling bearer <eth:syzkaller0>
[  807.994801][T17045] veth0_macvtap: entered promiscuous mode
[  808.000971][ T5974] pwc: recv_control_msg error -71 req 02 val 2400
[  808.012527][T17045] veth1_macvtap: entered promiscuous mode
[  808.019540][ T5974] pwc: recv_control_msg error -71 req 02 val 2600
[  808.028514][ T5974] pwc: recv_control_msg error -71 req 02 val 2900
[  808.036335][ T5974] pwc: recv_control_msg error -71 req 02 val 2800
[  808.045609][T17045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  808.054025][ T5974] pwc: recv_control_msg error -71 req 04 val 1100
[  808.063601][ T5974] pwc: recv_control_msg error -71 req 04 val 1200
[  808.075173][T17045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  808.088313][ T5974] pwc: Registered as video103.
[  808.104884][ T5974] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input58
[  808.129396][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  808.132847][ T5974] usb 6-1: USB disconnect, device number 93
[  808.138938][T14415] Bluetooth: hci4: command tx timeout
[  808.157506][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  808.166517][ T5933] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  808.190647][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  808.201537][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  808.240634][ T5933] usb 3-1: device descriptor read/8, error -71
[  808.372580][T15188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  808.395768][T15188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  808.453481][T15188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  808.469229][T15188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  808.490278][T17169] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3111'.
[  808.507171][ T5933] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  808.546105][ T5933] usb 3-1: device descriptor read/8, error -71
[  808.605890][T17173] loop6: detected capacity change from 0 to 7
[  808.613570][T17173] Dev loop6: unable to read RDB block 7
[  808.622298][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  808.622358][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  808.635496][T17173]  loop6: unable to read partition table
[  808.642451][T17173] loop6: partition table beyond EOD, truncated
[  808.649010][T17173] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  808.666503][ T5933] usb usb3-port1: unable to enumerate USB device
[  808.769477][T17177] VFS: Mount too revealing
[  809.159936][   T30] audit: type=1400 audit(1757380809.324:360): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=17184 comm="syz.0.3116"
[  809.171820][T17185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3116'.
[  809.626641][ T5956] usb 4-1: USB disconnect, device number 23
[  809.703976][ T5956] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  810.076316][ T5956] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  810.116292][ T5926] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  810.226802][T14415] Bluetooth: hci4: command tx timeout
[  810.240712][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  810.257623][ T5956] usb 4-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  810.316508][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  810.335198][ T5956] usb 4-1: config 0 interface 0 has no altsetting 0
[  810.343384][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  810.358878][ T5926] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  810.369048][ T5956] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38
[  810.379964][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.388352][T16799] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  810.389231][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  810.404843][ T5956] usb 4-1: Product: syz
[  810.409204][ T5956] usb 4-1: Manufacturer: syz
[  810.413997][ T5956] usb 4-1: SerialNumber: syz
[  810.426077][T15419] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  810.427492][ T5926] usb 6-1: config 0 descriptor??
[  810.446944][ T5956] usb 4-1: config 0 descriptor??
[  810.559302][T16799] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  810.584813][T16799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.593346][T15419] usb 3-1: Using ep0 maxpacket: 8
[  810.600902][T15419] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  810.615213][T16799] usb 1-1: Product: syz
[  810.626084][T15419] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  810.636720][T16799] usb 1-1: Manufacturer: syz
[  810.641571][T16799] usb 1-1: SerialNumber: syz
[  810.647353][T15419] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  810.666907][T16799] usb 1-1: config 0 descriptor??
[  810.679650][T15419] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  810.692720][T15419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.705260][T15419] usb 3-1: Product: syz
[  810.710404][T15419] usb 3-1: Manufacturer: syz
[  810.717524][T15419] usb 3-1: SerialNumber: syz
[  810.737330][T15419] usb 3-1: config 0 descriptor??
[  810.748923][T15419] radioshark2 3-1:0.0: Invalid radioSHARK2 device
[  810.763080][T15419] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22
[  810.777873][T15419] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  810.893057][T16799] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  810.966587][T17199] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3121'.
[  810.982865][ T5926] usbhid 6-1:0.0: can't add hid device: -71
[  810.996921][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  811.021599][ T5926] usb 6-1: USB disconnect, device number 94
[  811.235157][ T5926] usb 4-1: USB disconnect, device number 24
[  812.066352][ T5933] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  812.286151][ T5933] usb 6-1: Using ep0 maxpacket: 32
[  812.304705][ T5933] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  812.322695][ T5933] usb 6-1: config 0 has no interface number 0
[  812.351212][T16799] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  812.361060][ T5933] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  812.422216][T16799] usb 1-1: USB disconnect, device number 32
[  812.433437][ T5933] usb 6-1: config 0 interface 85 has no altsetting 0
[  812.459855][ T5933] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  812.470112][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  812.478288][ T5933] usb 6-1: Product: syz
[  812.485905][ T5933] usb 6-1: Manufacturer: syz
[  812.492095][ T5933] usb 6-1: SerialNumber: syz
[  812.499950][ T5933] usb 6-1: config 0 descriptor??
[  812.722076][ T5933] appletouch 6-1:0.85: Failed to read mode from device.
[  812.732988][ T5933] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[  812.746225][ T5933] usb 6-1: USB disconnect, device number 95
[  812.766070][ T5974] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  812.878142][T17235] netlink: 'syz.0.3131': attribute type 29 has an invalid length.
[  812.936768][ T5974] usb 5-1: Using ep0 maxpacket: 16
[  812.943502][ T5974] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  812.954987][ T5974] usb 5-1: config 0 has no interface number 0
[  812.962481][ T5974] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  812.974240][ T5974] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  812.987948][ T5974] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  812.997293][ T5974] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  813.396091][ T5974] usb 5-1: Product: syz
[  813.400375][ T5974] usb 5-1: SerialNumber: syz
[  813.421217][ T5974] usb 5-1: config 0 descriptor??
[  813.443403][ T5974] cm109 5-1:0.8: invalid payload size 0, expected 4
[  813.454074][ T5974] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input60
[  813.611517][ T5933] usb 3-1: USB disconnect, device number 31
[  813.658251][T17243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3133'.
[  813.672475][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  813.690931][T17243] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3133'.
[  813.738863][ T5974] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  813.996221][ T5974] usb 1-1: Using ep0 maxpacket: 16
[  814.003452][ T5974] usb 1-1: too many configurations: 27, using maximum allowed: 8
[  814.071904][ T5974] usb 1-1: unable to read config index 0 descriptor/start: -61
[  814.084943][ T5974] usb 1-1: can't read configurations, error -61
[  814.246142][ T5974] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  814.336023][ T5925] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  814.351113][T17253] ptrace attach of "./syz-executor exec"[9807] was attempted by "./syz-executor exec"[17253]
[  814.416128][ T5974] usb 1-1: Using ep0 maxpacket: 16
[  814.425774][ T5974] usb 1-1: too many configurations: 27, using maximum allowed: 8
[  814.438571][ T5974] usb 1-1: unable to read config index 0 descriptor/start: -61
[  814.448320][ T5974] usb 1-1: can't read configurations, error -61
[  814.468742][ T5974] usb usb1-port1: attempt power cycle
[  814.496072][ T5925] usb 4-1: Using ep0 maxpacket: 16
[  814.503782][ T5925] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  814.514626][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  814.547244][ T5925] usb 4-1: config 0 descriptor??
[  814.594563][ T5925] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  814.849273][ T5974] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  814.869944][ T5925] usb 4-1: Detected FT232A
[  814.892650][ T5925] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  814.928294][ T5974] usb 1-1: Using ep0 maxpacket: 16
[  814.963182][ T5925] usb 4-1: USB disconnect, device number 25
[  814.966150][ T5974] usb 1-1: too many configurations: 27, using maximum allowed: 8
[  814.998275][ T5925] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  815.018591][ T5974] usb 1-1: unable to read config index 0 descriptor/start: -61
[  815.027577][ T5974] usb 1-1: can't read configurations, error -61
[  815.051067][ T5925] ftdi_sio 4-1:0.0: device disconnected
[  815.113265][T17262] : entered promiscuous mode
[  815.176259][ T5974] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  815.196128][T16799] usb 6-1: new full-speed USB device number 96 using dummy_hcd
[  815.204587][ T5974] usb 1-1: Using ep0 maxpacket: 16
[  815.211509][ T5974] usb 1-1: too many configurations: 27, using maximum allowed: 8
[  815.220677][ T5974] usb 1-1: unable to read config index 0 descriptor/start: -61
[  815.228292][ T5974] usb 1-1: can't read configurations, error -61
[  815.235036][ T5974] usb usb1-port1: unable to enumerate USB device
[  815.380645][T16799] usb 6-1: unable to get BOS descriptor or descriptor too short
[  815.392147][T16799] usb 6-1: not running at top speed; connect to a high speed hub
[  815.408714][T16799] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  815.418854][T16799] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  815.470794][T16799] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  815.479039][ T5925] usb 5-1: USB disconnect, device number 74
[  815.515618][ T5925] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  815.540958][T16799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.571532][T16799] usb 6-1: Product: syz
[  815.579214][T16799] usb 6-1: Manufacturer: syz
[  815.585741][T16799] usb 6-1: SerialNumber: syz
[  816.813259][T17283] program syz.0.3146 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  817.396823][T17293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3150'.
[  817.878105][T16799] usb 6-1: 0:2 : does not exist
[  817.903103][T16799] usb 6-1: unit 4 not found!
[  817.921655][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  817.966033][ T5933] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  818.047023][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  818.067490][T16799] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5)
[  818.106474][T16799] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  818.144174][T16799] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5)
[  818.196009][ T5933] usb 4-1: Using ep0 maxpacket: 16
[  818.205243][T16799] usb 6-1: USB disconnect, device number 96
[  818.248198][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  818.342561][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  818.361897][ T5933] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  818.379158][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.391009][ T5933] usb 4-1: config 0 descriptor??
[  818.486514][ T5926] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  818.617578][ T5974] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  818.636256][ T5926] usb 5-1: Using ep0 maxpacket: 16
[  818.643164][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  818.654306][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  818.659798][T16799] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  818.664213][ T5926] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  818.685141][ T5926] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[  818.694477][ T5925] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  818.702379][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  818.713762][ T5926] usb 5-1: config 0 descriptor??
[  818.786381][ T5974] usb 3-1: Using ep0 maxpacket: 16
[  818.794538][ T5974] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  818.802680][ T5974] usb 3-1: config 0 has no interface number 0
[  818.809333][ T5974] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  818.820398][ T5974] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  818.830216][T16799] usb 6-1: Using ep0 maxpacket: 32
[  818.836302][ T5925] usb 1-1: device descriptor read/64, error -71
[  818.839100][ T5933] microsoft 0003:045E:07DA.006F: unknown main item tag 0x0
[  818.851620][ T5933] microsoft 0003:045E:07DA.006F: unknown main item tag 0x0
[  818.861603][ T5974] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  818.874099][T16799] usb 6-1: config 0 has an invalid interface number: 124 but max is 0
[  818.885297][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  818.893511][ T5933] microsoft 0003:045E:07DA.006F: unknown main item tag 0x0
[  818.901129][T16799] usb 6-1: config 0 has no interface number 0
[  818.907266][ T5974] usb 3-1: Product: syz
[  818.911431][ T5974] usb 3-1: SerialNumber: syz
[  818.916347][T16799] usb 6-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA
[  818.929168][ T5933] HID 045e:07da: Invalid code 65791 type 1
[  818.945536][ T5974] usb 3-1: config 0 descriptor??
[  818.954663][ T5933] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.006F/input/input61
[  818.979826][ T5974] cm109 3-1:0.8: invalid payload size 0, expected 4
[  818.998798][T16799] usb 6-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8
[  819.008074][T16799] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.019384][ T5974] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input62
[  819.036803][T16799] usb 6-1: Product: syz
[  819.040981][T16799] usb 6-1: Manufacturer: syz
[  819.045586][T16799] usb 6-1: SerialNumber: syz
[  819.052458][T17299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  819.053287][T16799] usb 6-1: config 0 descriptor??
[  819.084984][T17299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  819.085589][T16799] kvaser_usb 6-1:0.124: error -ENODEV: Cannot get usb endpoint(s)
[  819.108148][ T5925] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  819.119819][ T5933] microsoft 0003:045E:07DA.006F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  819.191485][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  819.193265][ T5955] usb 4-1: USB disconnect, device number 26
[  819.242075][ T5926] hid (null): usage index exceeded
[  819.280444][ T5926] hid-multitouch 0003:0457:07DA.0070: ignoring exceeding usage max
[  819.284103][T16799] usb 6-1: USB disconnect, device number 97
[  819.296670][ T5925] usb 1-1: device descriptor read/64, error -71
[  819.310991][ T5926] hid-multitouch 0003:0457:07DA.0070: usage index exceeded
[  819.340287][ T5926] hid-multitouch 0003:0457:07DA.0070: item 0 4 2 0 parsing failed
[  819.365591][T17312] fido_id[17312]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  819.366743][ T5926] hid-multitouch 0003:0457:07DA.0070: probe with driver hid-multitouch failed with error -22
[  819.408794][ T5925] usb usb1-port1: attempt power cycle
[  819.463184][ T5926] usb 5-1: USB disconnect, device number 75
[  819.766170][ T5925] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  819.799787][ T5925] usb 1-1: device descriptor read/8, error -71
[  820.053873][ T5925] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  820.126169][ T5925] usb 1-1: device descriptor read/8, error -71
[  820.240218][ T5925] usb usb1-port1: unable to enumerate USB device
[  820.345261][T16799] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  820.506053][T16799] usb 5-1: Using ep0 maxpacket: 32
[  820.519574][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  820.522837][T16799] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  820.536659][T16799] usb 5-1: config 0 has no interface number 0
[  820.541024][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  820.542889][T16799] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  820.562151][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  820.575583][T16799] usb 5-1: config 0 interface 85 has no altsetting 0
[  820.575721][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  820.592072][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  820.606314][T16799] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  820.636042][T16799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.644966][T16799] usb 5-1: Product: syz
[  820.649694][T16799] usb 5-1: Manufacturer: syz
[  820.654434][T16799] usb 5-1: SerialNumber: syz
[  820.673655][T16799] usb 5-1: config 0 descriptor??
[  820.852071][T17333] loop2: detected capacity change from 0 to 7
[  820.906220][T16799] appletouch 5-1:0.85: Failed to read mode from device.
[  820.921638][T17333] Dev loop2: unable to read RDB block 7
[  820.936097][T16799] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  820.945797][T17333]  loop2: unable to read partition table
[  820.957883][T17333] loop2: partition table beyond EOD, truncated
[  820.969760][T16799] usb 5-1: USB disconnect, device number 76
[  820.983878][T17333] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  821.060623][T17331] chnl_net:caif_netlink_parms(): no params data found
[  821.185878][T17331] bridge0: port 1(bridge_slave_0) entered blocking state
[  821.193251][T17331] bridge0: port 1(bridge_slave_0) entered disabled state
[  821.200834][T17331] bridge_slave_0: entered allmulticast mode
[  821.209289][T17331] bridge_slave_0: entered promiscuous mode
[  821.220366][T17331] bridge0: port 2(bridge_slave_1) entered blocking state
[  821.228663][T17331] bridge0: port 2(bridge_slave_1) entered disabled state
[  821.235856][T17331] bridge_slave_1: entered allmulticast mode
[  821.243937][T17331] bridge_slave_1: entered promiscuous mode
[  821.245466][T16799] usb 3-1: USB disconnect, device number 32
[  821.314801][T16799] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  821.391283][T17331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  821.404703][T17331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  821.427528][ T5974] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  821.559431][T17331] team0: Port device team_slave_0 added
[  821.586889][ T5974] usb 6-1: Using ep0 maxpacket: 8
[  821.597479][T17331] team0: Port device team_slave_1 added
[  821.606979][ T5974] usb 6-1: config index 0 descriptor too short (expected 30768, got 18)
[  821.615455][ T5974] usb 6-1: config 102 has too many interfaces: 102, using maximum allowed: 32
[  821.646138][ T5974] usb 6-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config
[  821.659012][ T5974] usb 6-1: config 102 has 0 interfaces, different from the descriptor's value: 102
[  821.668436][ T5974] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  822.082899][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.442782][ T5974] usb 6-1: string descriptor 0 read error: -22
[  822.482378][T17331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  822.544740][T17331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.698408][T14415] Bluetooth: hci2: command tx timeout
[  822.722891][T17331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  822.748958][T17331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  822.765691][T17331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  822.786283][ T5926] usb 5-1: new full-speed USB device number 77 using dummy_hcd
[  822.812203][    C0] vkms_vblank_simulate: vblank timer overrun
[  822.826242][T17331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  822.980862][T17331] hsr_slave_0: entered promiscuous mode
[  822.993668][T17331] hsr_slave_1: entered promiscuous mode
[  823.000471][T17331] debugfs: 'hsr0' already exists in 'hsr'
[  823.006196][ T5926] usb 5-1: device descriptor read/64, error -71
[  823.015222][T17331] Cannot create hsr debugfs directory
[  823.152444][  T957] usb 6-1: USB disconnect, device number 98
[  823.296106][ T5926] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  823.446756][ T5926] usb 5-1: device descriptor read/64, error -71
[  823.537118][T17375] sctp: [Deprecated]: syz.2.3174 (pid 17375) Use of struct sctp_assoc_value in delayed_ack socket option.
[  823.537118][T17375] Use struct sctp_sack_info instead
[  823.566443][ T5926] usb usb5-port1: attempt power cycle
[  823.769083][T17381] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  823.895039][T17381] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  824.166290][ T5926] usb 5-1: new full-speed USB device number 79 using dummy_hcd
[  824.370707][ T5926] usb 5-1: device descriptor read/8, error -71
[  824.655325][T17331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.666702][ T5926] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[  824.698652][ T5926] usb 5-1: device descriptor read/8, error -71
[  824.776358][T14415] Bluetooth: hci2: command tx timeout
[  824.806373][ T5926] usb usb5-port1: unable to enumerate USB device
[  824.819511][T17331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.920797][T17331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.367671][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3178'.
[  825.386323][ T5926] usb 3-1: new full-speed USB device number 33 using dummy_hcd
[  825.386338][ T5933] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  825.546292][ T5926] usb 3-1: device descriptor read/64, error -71
[  825.560795][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  825.612452][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  825.632785][T17331] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  825.653564][T17331] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  825.665017][T17331] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  825.672851][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  825.725448][T17331] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  825.734751][ T5933] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  825.796209][ T5926] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  825.824236][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  825.936232][ T5926] usb 3-1: device descriptor read/64, error -71
[  825.954644][ T5933] usb 1-1: config 0 descriptor??
[  826.086595][ T5926] usb usb3-port1: attempt power cycle
[  826.246678][T16799] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  826.305790][T17331] 8021q: adding VLAN 0 to HW filter on device bond0
[  826.366444][ T5933] plantronics 0003:047F:FFFF.0071: reserved main item tag 0xe
[  826.389150][ T5933] plantronics 0003:047F:FFFF.0071: unknown main item tag 0x0
[  826.401150][T17331] 8021q: adding VLAN 0 to HW filter on device team0
[  826.419316][T16799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  826.426690][ T5926] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  826.451570][ T5933] plantronics 0003:047F:FFFF.0071: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  826.457175][ T5926] usb 3-1: device descriptor read/8, error -71
[  826.478018][T16799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  826.503774][T15188] bridge0: port 1(bridge_slave_0) entered blocking state
[  826.510947][T15188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  826.511049][T16799] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  826.548140][T15188] bridge0: port 2(bridge_slave_1) entered blocking state
[  826.555312][T15188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  826.625033][T16799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  826.644749][T17399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  826.674431][T16799] usb 5-1: config 0 descriptor??
[  826.683378][T17399] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  826.688449][ T5933] usb 1-1: USB disconnect, device number 41
[  826.703333][T17425] fido_id[17425]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  826.795686][ T5926] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  826.808462][T17331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  826.840818][ T5926] usb 3-1: device descriptor read/8, error -71
[  826.857219][T14415] Bluetooth: hci2: command tx timeout
[  826.889703][T17331] veth0_vlan: entered promiscuous mode
[  826.919340][T17331] veth1_vlan: entered promiscuous mode
[  826.957087][ T5926] usb usb3-port1: unable to enumerate USB device
[  826.995385][T17331] veth0_macvtap: entered promiscuous mode
[  827.006830][T17331] veth1_macvtap: entered promiscuous mode
[  827.045632][T17331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  827.072417][T17331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  827.093128][   T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  827.103998][   T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  827.118858][   T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  827.128533][   T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  827.152318][T16799] hid-steam 0003:28DE:1142.0072: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  827.214602][T15282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  827.223637][T15282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  827.231881][T16799] hid-steam 0003:28DE:1142.0072: Steam wireless receiver connected
[  827.257469][T16799] hid-steam 0003:28DE:1142.0073: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  827.307699][T15282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  827.329326][T15282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  827.366512][ T5933] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  827.430030][T17412] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3182'.
[  827.495488][ T5926] usb 5-1: USB disconnect, device number 81
[  827.531518][ T5926] hid-steam 0003:28DE:1142.0072: Steam wireless receiver disconnected
[  827.546046][ T5933] usb 6-1: Using ep0 maxpacket: 32
[  827.559481][ T5933] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  827.571977][ T5933] usb 6-1: config 0 has no interface number 0
[  828.307547][ T5933] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  828.351869][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.360675][ T5933] usb 6-1: Product: syz
[  828.397357][ T5933] usb 6-1: Manufacturer: syz
[  828.417217][ T5933] usb 6-1: SerialNumber: syz
[  828.425343][ T5933] usb 6-1: config 0 descriptor??
[  828.440127][ T5933] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  828.462545][ T5933] usb 6-1: selecting invalid altsetting 1
[  828.468596][ T5933] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  828.480711][ T5933] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  828.530072][ T5933] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  828.556080][ T5955] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  828.584009][ T5933] usb 6-1: media controller created
[  828.638731][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  828.651545][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  828.660759][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  828.706448][ T5933] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  828.713500][ T5933] zl10353_read_register: readreg error (reg=127, ret==-71)
[  828.726164][ T5955] usb 4-1: Using ep0 maxpacket: 32
[  828.729653][ T5933] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  828.773424][ T5955] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  828.794891][ T5955] usb 4-1: config 0 has no interface number 0
[  828.823113][ T5955] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  828.890434][ T5955] usb 4-1: config 0 interface 85 has no altsetting 0
[  828.909204][ T5933] usb 6-1: USB disconnect, device number 99
[  828.936502][T14415] Bluetooth: hci2: command tx timeout
[  828.944473][ T5955] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  828.956546][ T5955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  828.964521][ T5955] usb 4-1: Product: syz
[  828.975604][ T5955] usb 4-1: Manufacturer: syz
[  828.981575][ T5955] usb 4-1: SerialNumber: syz
[  829.053002][ T5955] usb 4-1: config 0 descriptor??
[  829.128164][   T30] audit: type=1326 audit(1757380829.294:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17460 comm="syz.0.3192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2816b8ebe9 code=0x0
[  829.174694][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3193'.
[  829.185637][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3193'.
[  829.294566][ T5955] appletouch 4-1:0.85: Failed to read mode from device.
[  829.317065][ T5955] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  829.358136][ T5955] usb 4-1: USB disconnect, device number 27
[  829.630595][T17477] netlink: 'syz.5.3196': attribute type 10 has an invalid length.
[  829.648354][T17477] bridge_slave_1: left allmulticast mode
[  829.661445][T17477] bridge_slave_1: left promiscuous mode
[  829.669182][T17477] bridge0: port 2(bridge_slave_1) entered disabled state
[  829.682367][T17477] bridge_slave_1: entered promiscuous mode
[  829.689111][T17477] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  829.737324][  T957] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  829.751112][T17480] FAULT_INJECTION: forcing a failure.
[  829.751112][T17480] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  829.770766][T17480] CPU: 1 UID: 0 PID: 17480 Comm: syz.5.3197 Not tainted syzkaller #0 PREEMPT(full) 
[  829.770805][T17480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  829.770823][T17480] Call Trace:
[  829.770830][T17480]  <TASK>
[  829.770837][T17480]  dump_stack_lvl+0x189/0x250
[  829.770859][T17480]  ? __pfx____ratelimit+0x10/0x10
[  829.770875][T17480]  ? __pfx_dump_stack_lvl+0x10/0x10
[  829.770893][T17480]  ? __pfx__printk+0x10/0x10
[  829.770915][T17480]  ? __might_fault+0xb0/0x130
[  829.770946][T17480]  should_fail_ex+0x414/0x560
[  829.770972][T17480]  _copy_from_user+0x2d/0xb0
[  829.770994][T17480]  snd_ctl_ioctl+0x184/0x1bf0
[  829.771016][T17480]  ? stack_trace_save+0x9c/0xe0
[  829.771034][T17480]  ? __pfx_stack_trace_save+0x10/0x10
[  829.771051][T17480]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  829.771075][T17480]  ? stack_depot_save_flags+0x40/0x860
[  829.771105][T17480]  ? kasan_save_track+0x4f/0x80
[  829.771123][T17480]  ? kasan_save_track+0x3e/0x80
[  829.771140][T17480]  ? kasan_save_free_info+0x46/0x50
[  829.771156][T17480]  ? __kasan_slab_free+0x5b/0x80
[  829.771174][T17480]  ? kfree+0x18e/0x440
[  829.771191][T17480]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  829.771211][T17480]  ? security_file_ioctl+0xcb/0x2d0
[  829.771230][T17480]  ? __se_sys_ioctl+0x47/0x170
[  829.771248][T17480]  ? do_syscall_64+0xfa/0x3b0
[  829.771265][T17480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.771322][T17480]  ? kasan_quarantine_put+0xdd/0x220
[  829.771352][T17480]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  829.771377][T17480]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  829.771408][T17480]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  829.771440][T17480]  ? __lock_acquire+0xab9/0xd20
[  829.771480][T17480]  ? __fget_files+0x2a/0x420
[  829.771498][T17480]  ? __fget_files+0x2a/0x420
[  829.771512][T17480]  ? __fget_files+0x3a0/0x420
[  829.771526][T17480]  ? __fget_files+0x2a/0x420
[  829.771545][T17480]  ? bpf_lsm_file_ioctl+0x9/0x20
[  829.771565][T17480]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  829.771585][T17480]  __se_sys_ioctl+0xfc/0x170
[  829.771608][T17480]  do_syscall_64+0xfa/0x3b0
[  829.771624][T17480]  ? lockdep_hardirqs_on+0x9c/0x150
[  829.771640][T17480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.771657][T17480]  ? clear_bhb_loop+0x60/0xb0
[  829.771678][T17480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  829.771694][T17480] RIP: 0033:0x7fe31198ebe9
[  829.771710][T17480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  829.771724][T17480] RSP: 002b:00007fe31272f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  829.771742][T17480] RAX: ffffffffffffffda RBX: 00007fe311bc5fa0 RCX: 00007fe31198ebe9
[  829.771754][T17480] RDX: 0000200000000540 RSI: 0000000040405515 RDI: 0000000000000003
[  829.771766][T17480] RBP: 00007fe31272f090 R08: 0000000000000000 R09: 0000000000000000
[  829.771777][T17480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  829.771787][T17480] R13: 00007fe311bc6038 R14: 00007fe311bc5fa0 R15: 00007fe311cefa28
[  829.771816][T17480]  </TASK>
[  830.152383][  T957] usb 5-1: Using ep0 maxpacket: 32
[  830.169662][  T957] usb 5-1: too many configurations: 216, using maximum allowed: 8
[  830.222179][  T957] usb 5-1: config index 0 descriptor too short (expected 259, got 36)
[  830.233026][T17483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3198'.
[  830.269098][T17483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  830.287814][  T957] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  830.305899][  T957] usb 5-1: can't read configurations, error -22
[  830.426752][T17482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3198'.
[  830.466331][T17482] syzkaller1: entered promiscuous mode
[  830.472387][T17482] syzkaller1: entered allmulticast mode
[  830.566065][  T957] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  830.736409][  T957] usb 5-1: Using ep0 maxpacket: 32
[  830.742397][  T957] usb 5-1: too many configurations: 216, using maximum allowed: 8
[  830.790940][  T957] usb 5-1: config index 0 descriptor too short (expected 259, got 36)
[  830.806002][  T957] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  830.826814][  T957] usb 5-1: can't read configurations, error -22
[  830.846706][  T957] usb usb5-port1: attempt power cycle
[  831.186374][  T957] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  831.212107][  T957] usb 5-1: Using ep0 maxpacket: 32
[  831.218529][  T957] usb 5-1: too many configurations: 216, using maximum allowed: 8
[  831.227519][  T957] usb 5-1: config index 0 descriptor too short (expected 259, got 36)
[  831.235716][  T957] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  831.244486][ T5925] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  831.252319][  T957] usb 5-1: can't read configurations, error -22
[  831.316105][ T5926] usb 6-1: new full-speed USB device number 100 using dummy_hcd
[  831.386841][  T957] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  831.406003][ T5925] usb 4-1: Using ep0 maxpacket: 32
[  831.412458][  T957] usb 5-1: Using ep0 maxpacket: 32
[  831.419897][ T5925] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  831.428541][ T5925] usb 4-1: config 0 has no interface number 0
[  831.434893][  T957] usb 5-1: too many configurations: 216, using maximum allowed: 8
[  831.445763][  T957] usb 5-1: config index 0 descriptor too short (expected 259, got 36)
[  831.454425][ T5925] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  831.465786][  T957] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1
[  831.474913][  T957] usb 5-1: can't read configurations, error -22
[  831.481737][ T5925] usb 4-1: config 0 interface 85 has no altsetting 0
[  831.489483][  T957] usb usb5-port1: unable to enumerate USB device
[  831.498996][ T5926] usb 6-1: config 0 has an invalid interface number: 30 but max is 0
[  831.507432][ T5926] usb 6-1: config 0 has no interface number 0
[  831.513604][ T5925] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  831.523194][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.531550][ T5925] usb 4-1: Product: syz
[  831.536208][ T5925] usb 4-1: Manufacturer: syz
[  831.540861][ T5925] usb 4-1: SerialNumber: syz
[  831.547067][ T5926] usb 6-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04
[  831.559779][ T5925] usb 4-1: config 0 descriptor??
[  831.564959][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  831.574770][ T5926] usb 6-1: Product: syz
[  831.582793][ T5926] usb 6-1: Manufacturer: syz
[  831.592054][ T5926] usb 6-1: SerialNumber: syz
[  831.607030][ T5926] usb 6-1: config 0 descriptor??
[  831.615445][ T5926] hub 6-1:0.30: bad descriptor, ignoring hub
[  831.622279][ T5926] hub 6-1:0.30: probe with driver hub failed with error -5
[  831.633648][ T5926] keyspan 6-1:0.30: Keyspan - (without firmware) converter detected
[  831.817688][ T5925] appletouch 4-1:0.85: Failed to read mode from device.
[  831.824760][ T5925] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  831.900084][ T5925] usb 4-1: USB disconnect, device number 28
[  832.133734][ T5974] usb 6-1: USB disconnect, device number 100
[  832.152163][ T5974] keyspan 6-1:0.30: device disconnected
[  832.966016][T16799] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  833.180922][T16799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.213720][T16799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  833.292411][   T51] Bluetooth: hci4: SCO packet for unknown connection handle 0
[  833.339890][T16799] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  833.465758][T16799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.508217][T16799] usb 5-1: config 0 descriptor??
[  833.606322][ T5925] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  833.767332][ T5925] usb 1-1: Using ep0 maxpacket: 16
[  833.824724][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  833.855103][T17563] program syz.5.3227 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  833.883030][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  833.914961][ T5925] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  833.934935][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.939981][T17538] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3217'.
[  833.963741][T16799] usbhid 5-1:0.0: can't add hid device: -71
[  834.007135][T16799] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  834.020994][T16799] usb 5-1: USB disconnect, device number 86
[  834.052499][T17565] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  834.059053][T17565] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  834.060966][ T5925] usb 1-1: config 0 descriptor??
[  834.108884][T17565] vhci_hcd vhci_hcd.0: Device attached
[  834.116232][    C1] sd 0:0:1:0: [sda] tag#547 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  834.126611][    C1] sd 0:0:1:0: [sda] tag#547 CDB: Write(6) 0a 00 00 00 73 d0
[  834.254397][T17569] netdevsim netdevsim3: Direct firmware load for x failed with error -2
[  834.266573][T17569] netdevsim netdevsim3: Falling back to sysfs fallback for: x
[  834.374435][T17558] usb usb8: usbfs: process 17558 (syz.0.3225) did not claim interface 0 before use
[  834.386268][ T5933] usb 39-1: new low-speed USB device number 6 using vhci_hcd
[  834.526266][T17567] vhci_hcd: connection reset by peer
[  834.570097][   T49] vhci_hcd: stop threads
[  834.639839][   T49] vhci_hcd: release socket
[  834.660743][   T49] vhci_hcd: disconnect device
[  834.730593][ T5925] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0074/input/input66
[  834.972791][ T5925] microsoft 0003:045E:07DA.0074: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  835.057040][ T5925] usb 1-1: USB disconnect, device number 42
[  835.119908][T17584] fido_id[17584]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  835.287797][ T3094] usb 5-1: new full-speed USB device number 87 using dummy_hcd
[  835.460852][ T3094] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  835.474108][ T3094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  835.485755][ T3094] usb 5-1: Product: syz
[  835.502534][ T3094] usb 5-1: Manufacturer: syz
[  835.512795][ T3094] usb 5-1: SerialNumber: syz
[  835.549511][ T3094] usb 5-1: config 0 descriptor??
[  835.777653][ T3094] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  836.116328][  T957] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  836.263299][   T30] audit: type=1326 audit(1757380836.424:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17600 comm="syz.0.3239" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2816b8ebe9 code=0x0
[  836.298494][  T957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  836.315443][  T957] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  836.331863][  T957] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  836.342480][  T957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.358716][  T957] usb 6-1: config 0 descriptor??
[  836.456689][ T5925] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  836.618831][ T5925] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  836.627555][ T5925] usb 4-1: config 0 has no interface number 0
[  836.633793][ T5925] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  836.651267][ T5925] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  836.664494][ T5925] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  836.680887][ T5925] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  836.693628][ T5925] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  836.706857][ T5925] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  836.720377][ T5925] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  836.729548][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  836.749385][ T5925] usb 4-1: config 0 descriptor??
[  836.761843][T17599] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  836.809040][  T957] hid_mf 0003:0079:1846.0075: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0
[  836.812225][T17599] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  836.827396][  T957] hid_mf 0003:0079:1846.0075: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  836.890638][ T5925] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  837.174388][ T5925] usb 4-1: USB disconnect, device number 29
[  837.183478][ T5925] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  837.195285][ T3094] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  837.227114][ T3094] usb 5-1: USB disconnect, device number 87
[  837.467619][ T3094] usb 6-1: USB disconnect, device number 101
[  838.376254][ T3094] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  838.506560][  T957] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  838.566038][ T3094] usb 5-1: Using ep0 maxpacket: 16
[  838.581405][ T3094] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  838.601677][ T3094] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  838.663779][  T957] usb 1-1: Using ep0 maxpacket: 8
[  838.709999][  T957] usb 1-1: unable to get BOS descriptor or descriptor too short
[  838.726536][  T957] usb 1-1: config 7 has an invalid interface number: 31 but max is 0
[  838.784064][  T957] usb 1-1: config 7 has no interface number 0
[  838.795051][ T3094] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  838.810038][ T3094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.815822][  T957] usb 1-1: config 7 interface 31 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64
[  838.821529][ T3094] usb 5-1: Product: syz
[  838.834554][ T3094] usb 5-1: Manufacturer: syz
[  838.847261][ T3094] usb 5-1: SerialNumber: syz
[  838.884202][  T957] usb 1-1: config 7 interface 31 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  838.954349][  T957] usb 1-1: config 7 interface 31 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  838.999473][  T957] usb 1-1: config 7 interface 31 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  839.048494][  T957] usb 1-1: New USB device found, idVendor=067b, idProduct=23b3, bcdDevice=5d.75
[  839.058005][  T957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.496293][ T5933] vhci_hcd: vhci_device speed not set
[  839.675877][  T957] usb 1-1: Product: syz
[  839.680799][  T957] usb 1-1: Manufacturer: syz
[  839.685417][  T957] usb 1-1: SerialNumber: syz
[  839.705894][T17627] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  839.914020][  T957] pl2303 1-1:7.31: required endpoints missing
[  839.957842][  T957] usb 1-1: USB disconnect, device number 43
[  840.308746][ T3094] usb 5-1: cannot find UAC_HEADER
[  840.358614][ T3094] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  840.394370][ T3094] usb 5-1: USB disconnect, device number 88
[  840.466709][ T8411] udevd[8411]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  840.539199][T17655] loop6: detected capacity change from 0 to 7
[  840.563668][ T8411] Dev loop6: unable to read RDB block 7
[  840.570757][ T8411]  loop6: unable to read partition table
[  840.576952][ T8411] loop6: partition table beyond EOD, truncated
[  840.594577][T17655] Dev loop6: unable to read RDB block 7
[  840.632803][T17655]  loop6: unable to read partition table
[  840.643184][T17655] loop6: partition table beyond EOD, truncated
[  840.659612][T17655] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  840.993127][T17669] libceph: resolve '0.0' (ret=-3): failed
[  841.348780][T17677] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3262'.
[  841.946101][ T3094] usb 6-1: new full-speed USB device number 102 using dummy_hcd
[  842.120907][ T3094] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  842.146591][ T3094] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  842.156981][T16799] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  842.179053][   T30] audit: type=1800 audit(1757380842.324:363): pid=17689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3268" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  842.241180][ T3094] usb 6-1: config 8 has no interface number 0
[  842.280286][ T3094] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  842.330908][ T3094] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  842.340557][ T3094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.375635][ T3094] usb 6-1: Product: syz
[  842.391313][ T3094] usb 6-1: Manufacturer: syz
[  842.415531][T16799] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  842.431852][ T3094] usb 6-1: SerialNumber: syz
[  842.438981][T16799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.454652][T16799] usb 1-1: Product: syz
[  842.460521][T16799] usb 1-1: Manufacturer: syz
[  842.465367][T16799] usb 1-1: SerialNumber: syz
[  842.546021][ T5925] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  842.717954][ T5925] usb 5-1: Using ep0 maxpacket: 16
[  842.745881][ T5925] usb 5-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config
[  842.818128][ T5925] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  842.854874][T17674] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13)
[  842.861510][T17674] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  842.888069][T17677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  842.916413][ T5925] usb 5-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=15.e8
[  842.935143][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.955630][ T5925] usb 5-1: Product: syz
[  842.961745][ T5925] usb 5-1: Manufacturer: syz
[  842.966957][T17677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  842.971887][T17674] vhci_hcd vhci_hcd.0: Device attached
[  842.981565][ T5925] usb 5-1: SerialNumber: syz
[  842.993175][ T5925] usb 5-1: config 0 descriptor??
[  843.019890][T17702] vhci_hcd: connection closed
[  843.021941][   T36] vhci_hcd: stop threads
[  843.035319][   T36] vhci_hcd: release socket
[  843.040396][   T36] vhci_hcd: disconnect device
[  843.121333][ T3094] usb 6-1: USB disconnect, device number 102
[  843.129093][T16799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  843.172522][T16799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  843.206871][  T957] usb 5-1: USB disconnect, device number 89
[  843.240628][T16799] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  843.335267][T16799] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  843.851409][  T957] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  843.917636][T16799] usb 1-1: USB disconnect, device number 44
[  844.061151][  T957] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  844.079400][  T957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  844.088736][  T957] usb 4-1: Product: syz
[  844.092911][  T957] usb 4-1: Manufacturer: syz
[  844.102508][  T957] usb 4-1: SerialNumber: syz
[  844.243069][T17718] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3278'.
[  844.306304][ T5926] usb 6-1: new full-speed USB device number 103 using dummy_hcd
[  844.468408][ T5926] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  844.480387][ T5926] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  844.491935][ T5926] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  844.504106][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  844.754332][ T5926] aiptek 6-1:17.0: Aiptek using 400 ms programming speed
[  844.783156][ T5926] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input67
[  844.880477][ T5926] input: failed to attach handler kbd to device input67, error: -5
[  844.982289][ T5926] usb 6-1: USB disconnect, device number 103
[  845.216111][ T5974] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  845.376264][ T5974] usb 5-1: Using ep0 maxpacket: 32
[  845.384342][ T5974] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  845.393094][ T5974] usb 5-1: config 0 has no interface number 0
[  845.401020][ T5974] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  845.414488][ T5974] usb 5-1: config 0 interface 85 has no altsetting 0
[  845.436211][ T5974] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  845.447597][T17709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  845.454377][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.467541][T17709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  845.575299][ T5974] usb 5-1: Product: syz
[  845.579775][ T5933] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  845.608891][ T5974] usb 5-1: Manufacturer: syz
[  845.636982][ T5974] usb 5-1: SerialNumber: syz
[  845.704263][  T957] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  845.739235][ T5933] usb 3-1: Using ep0 maxpacket: 16
[  845.775002][ T5933] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  845.829260][ T5974] usb 5-1: config 0 descriptor??
[  845.881959][ T5933] usb 3-1: config 0 has no interface number 0
[  846.013142][ T5933] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  846.180052][ T5974] appletouch 5-1:0.85: Failed to read mode from device.
[  846.203645][ T5933] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  846.218755][ T5974] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  846.248917][ T5933] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  846.263992][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  846.277437][ T5974] usb 5-1: USB disconnect, device number 90
[  846.333241][ T5933] usb 3-1: Product: syz
[  846.367720][ T5933] usb 3-1: SerialNumber: syz
[  846.415810][ T5933] usb 3-1: config 0 descriptor??
[  846.460312][ T5933] cm109 3-1:0.8: invalid payload size 0, expected 4
[  846.498442][ T5933] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input69
[  846.659628][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[  847.176189][ T5933] usb 5-1: new full-speed USB device number 91 using dummy_hcd
[  847.200670][T17755] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3290'.
[  847.312949][ T5956] usb 3-1: USB disconnect, device number 37
[  847.329677][ T5956] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  847.380179][ T5933] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  847.389654][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  847.399247][ T5933] usb 5-1: Product: syz
[  847.403546][ T5933] usb 5-1: Manufacturer: syz
[  847.411440][ T5933] usb 5-1: SerialNumber: syz
[  847.424603][ T5933] usb 5-1: config 0 descriptor??
[  847.654059][ T5933] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  847.982316][T17763] netlink: 'syz.5.3293': attribute type 21 has an invalid length.
[  847.990330][T17763] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3293'.
[  848.091072][T17763] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3293'.
[  848.136779][   T30] audit: type=1326 audit(1757380848.234:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  848.282800][  T957] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001000. ret = -EPROTO
[  848.356661][  T957] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  848.368760][   T30] audit: type=1326 audit(1757380848.244:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  848.399314][T17768] program syz.0.3294 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  848.464492][  T957] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  848.493013][   T30] audit: type=1326 audit(1757380848.244:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  848.516937][  T957] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  848.582665][  T957] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  848.728449][   T30] audit: type=1326 audit(1757380848.244:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  848.815174][   T30] audit: type=1326 audit(1757380848.244:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  848.823910][  T957] usb 4-1: USB disconnect, device number 30
[  848.837941][    C1] sd 0:0:1:0: [sda] tag#567 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  848.838010][    C1] sd 0:0:1:0: [sda] tag#567 CDB: Write(6) 0a 00 00 00 73 d0
[  848.856191][   T30] audit: type=1326 audit(1757380848.244:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  849.111336][   T30] audit: type=1326 audit(1757380848.244:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  849.297901][   T30] audit: type=1326 audit(1757380848.244:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  849.366159][ T5933] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  849.424548][ T5933] usb 5-1: USB disconnect, device number 91
[  849.526578][   T30] audit: type=1326 audit(1757380848.244:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  849.612305][   T30] audit: type=1326 audit(1757380848.244:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17760 comm="syz.5.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe31198ebe9 code=0x7ffc0000
[  849.686419][ T5955] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  849.848465][ T5955] usb 3-1: Using ep0 maxpacket: 32
[  849.857774][ T5955] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  849.910323][ T5955] usb 3-1: config 0 has no interface number 0
[  849.936318][ T5955] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  850.002961][ T5955] usb 3-1: config 0 interface 85 has no altsetting 0
[  850.030201][ T5955] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  850.046559][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  850.054669][ T5955] usb 3-1: Product: syz
[  850.133111][ T5955] usb 3-1: Manufacturer: syz
[  850.154370][ T5955] usb 3-1: SerialNumber: syz
[  850.194592][ T5955] usb 3-1: config 0 descriptor??
[  850.492778][ T5955] appletouch 3-1:0.85: Failed to read mode from device.
[  850.507169][ T5956] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  850.526786][ T5955] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  850.595528][ T5955] usb 3-1: USB disconnect, device number 38
[  850.686110][ T5956] usb 6-1: Using ep0 maxpacket: 32
[  850.693059][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  850.708887][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  850.737871][ T5956] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  850.747646][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  850.775580][ T5956] usb 6-1: config 0 descriptor??
[  850.991929][ T5956] ft260 0003:0403:6030.0076: unknown main item tag 0x0
[  851.196927][ T5956] ft260 0003:0403:6030.0076: chip code: 0000 0000
[  851.207193][ T5956] ft260 0003:0403:6030.0076: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  851.896313][T15419] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  852.069824][T15419] usb 3-1: Using ep0 maxpacket: 16
[  852.095103][T15419] usb 3-1: unable to get BOS descriptor or descriptor too short
[  852.142958][T15419] usb 3-1: config 8 has an invalid interface number: 132 but max is 0
[  852.151389][T15419] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  852.170279][T15419] usb 3-1: config 8 has no interface number 0
[  852.173872][T17831] netlink: 'syz.4.3312': attribute type 25 has an invalid length.
[  852.190905][T17831] netlink: 'syz.4.3312': attribute type 7 has an invalid length.
[  852.198766][T17831] netlink: 'syz.4.3312': attribute type 8 has an invalid length.
[  852.217793][T15419] usb 3-1: config 8 interface 132 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  852.237002][T15419] usb 3-1: config 8 interface 132 has no altsetting 0
[  852.315564][T15419] usb 3-1: string descriptor 0 read error: -22
[  852.329950][T15419] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8f.8b
[  852.348223][T15419] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  852.367304][  T957] usb 6-1: reset high-speed USB device number 104 using dummy_hcd
[  852.378880][T15419] usb-storage 3-1:8.132: USB Mass Storage device detected
[  852.424638][T15419] usb-storage 3-1:8.132: Quirks match for vid 07cf pid 1001: a
[  852.506515][  T957] usb 6-1: device descriptor read/64, error -32
[  852.777204][  T957] usb 6-1: reset high-speed USB device number 104 using dummy_hcd
[  852.961433][  T957] usb 6-1: device descriptor read/64, error -32
[  853.022522][T17839] program syz.4.3314 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  853.226478][    C1] sd 0:0:1:0: [sda] tag#517 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  853.236825][    C1] sd 0:0:1:0: [sda] tag#517 CDB: Write(6) 0a 00 00 00 73 d0
[  853.508706][T17846] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3317'.
[  853.879865][T17853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  853.935826][ T5974] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01)
[  853.947759][ T5974] wlan1: send auth to 08:02:11:00:00:00 (try 1/3)
[  853.972958][ T3580] wlan1: authenticated
[  853.973260][T17853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  853.987966][ T3580] wlan1: associate with 08:02:11:00:00:00 (try 1/3)
[  854.110659][T17861] i2c i2c-1: adapter quirk: too many messages (addr 0x0003, size 0, write)
[  854.122598][ T1340] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1)
[  854.122807][T17853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  854.136233][ T1340] wlan1: associated
[  854.176901][  T957] usb 6-1: reset high-speed USB device number 104 using dummy_hcd
[  854.197349][  T957] usb 6-1: device reset changed ep0 maxpacket size!
[  854.207042][ T5956] usb 6-1: USB disconnect, device number 104
[  854.246770][T17865] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  854.316411][ T5974] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  854.356495][ T5956] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[  854.466174][ T5974] usb 5-1: Using ep0 maxpacket: 32
[  854.473168][ T5974] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  854.481473][ T5974] usb 5-1: config 0 has no interface number 0
[  854.490058][ T5974] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  854.499298][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.510791][ T5974] usb 5-1: Product: syz
[  854.515043][ T5974] usb 5-1: Manufacturer: syz
[  854.519690][ T5974] usb 5-1: SerialNumber: syz
[  854.525999][T15419] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  854.534504][ T5974] usb 5-1: config 0 descriptor??
[  854.534727][ T5956] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  854.548906][ T5974] hub 5-1:0.1: bad descriptor, ignoring hub
[  854.554190][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.555005][ T5974] hub 5-1:0.1: probe with driver hub failed with error -5
[  854.563234][ T5956] usb 6-1: Product: syz
[  854.577793][ T5956] usb 6-1: Manufacturer: syz
[  854.579497][ T5974] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  854.582399][ T5956] usb 6-1: SerialNumber: syz
[  854.596827][ T5974] usb 5-1: selecting invalid altsetting 1
[  854.600860][ T5956] usb 6-1: config 0 descriptor??
[  854.602567][ T5974] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  854.624021][ T5974] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  854.637054][ T5974] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  854.646285][ T5974] usb 5-1: media controller created
[  854.672266][ T5974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  854.680741][T15419] usb 1-1: device descriptor read/64, error -71
[  854.818671][ T5956] usb-storage 6-1:0.0: USB Mass Storage device detected
[  854.930995][T15419] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  855.040901][ T3094] usb 6-1: USB disconnect, device number 105
[  855.066054][T15419] usb 1-1: device descriptor read/64, error -71
[  855.126036][ T5956] usb 3-1: USB disconnect, device number 39
[  855.193311][T15419] usb usb1-port1: attempt power cycle
[  855.556086][T15419] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  855.636958][T15419] usb 1-1: device descriptor read/8, error -71
[  855.754963][ T5974] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  855.765346][ T5974] zl10353_read_register: readreg error (reg=127, ret==-110)
[  855.795831][T17880] vivid-000: disconnect
[  855.947626][ T5974] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  856.039733][T15419] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  856.116912][T15419] usb 1-1: device descriptor read/8, error -71
[  856.140869][ T5974] usb 5-1: USB disconnect, device number 92
[  856.448966][T17874] vivid-000: reconnect
[  856.465262][T15419] usb usb1-port1: unable to enumerate USB device
[  857.248939][ T5974] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  857.421373][ T5974] usb 5-1: Using ep0 maxpacket: 32
[  857.458452][ T5974] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  857.472457][ T5974] usb 5-1: config 0 has no interface number 0
[  857.482636][ T5974] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  857.503719][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  857.521525][ T5974] usb 5-1: Product: syz
[  857.525784][ T5974] usb 5-1: Manufacturer: syz
[  857.531151][ T5974] usb 5-1: SerialNumber: syz
[  857.542535][ T5974] usb 5-1: config 0 descriptor??
[  857.550753][ T5974] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  857.560266][ T5974] usb 5-1: selecting invalid altsetting 1
[  857.566361][ T5974] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  857.577422][ T5974] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  857.619991][ T5974] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  857.645790][ T5974] usb 5-1: media controller created
[  857.685837][ T5974] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  857.798001][T15419] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  857.810360][T17888] FAULT_INJECTION: forcing a failure.
[  857.810360][T17888] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  857.856046][ T5955] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  857.898013][T17888] CPU: 0 UID: 0 PID: 17888 Comm: syz.4.3332 Not tainted syzkaller #0 PREEMPT(full) 
[  857.898039][T17888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  857.898050][T17888] Call Trace:
[  857.898058][T17888]  <TASK>
[  857.898066][T17888]  dump_stack_lvl+0x189/0x250
[  857.898092][T17888]  ? __pfx____ratelimit+0x10/0x10
[  857.898109][T17888]  ? __pfx_dump_stack_lvl+0x10/0x10
[  857.898129][T17888]  ? __pfx__printk+0x10/0x10
[  857.898152][T17888]  ? __might_fault+0xb0/0x130
[  857.898185][T17888]  should_fail_ex+0x414/0x560
[  857.898214][T17888]  _copy_from_user+0x2d/0xb0
[  857.898237][T17888]  i2cdev_ioctl+0x2e7/0x7f0
[  857.898256][T17888]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  857.898276][T17888]  ? __fget_files+0x3a0/0x420
[  857.898291][T17888]  ? __fget_files+0x2a/0x420
[  857.898309][T17888]  ? bpf_lsm_file_ioctl+0x9/0x20
[  857.898330][T17888]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  857.898348][T17888]  __se_sys_ioctl+0xfc/0x170
[  857.898378][T17888]  do_syscall_64+0xfa/0x3b0
[  857.898396][T17888]  ? lockdep_hardirqs_on+0x9c/0x150
[  857.898412][T17888]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.898428][T17888]  ? clear_bhb_loop+0x60/0xb0
[  857.898449][T17888]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.898465][T17888] RIP: 0033:0x7f99e398ebe9
[  857.898481][T17888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  857.898495][T17888] RSP: 002b:00007f99e47d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  857.898513][T17888] RAX: ffffffffffffffda RBX: 00007f99e3bc5fa0 RCX: 00007f99e398ebe9
[  857.898526][T17888] RDX: 0000200000000300 RSI: 0000000000000707 RDI: 0000000000000004
[  857.898538][T17888] RBP: 00007f99e47d9090 R08: 0000000000000000 R09: 0000000000000000
[  857.898549][T17888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  857.898559][T17888] R13: 00007f99e3bc6038 R14: 00007f99e3bc5fa0 R15: 00007f99e3cefa28
[  857.898588][T17888]  </TASK>
[  858.113773][ T5974] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  858.121502][ T5974] zl10353_read_register: readreg error (reg=127, ret==-71)
[  858.204392][T15419] usb 1-1: Using ep0 maxpacket: 32
[  858.210039][ T5974] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  858.226768][ T5955] usb 6-1: Using ep0 maxpacket: 8
[  858.236677][ T5955] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  858.247697][ T5955] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  858.256993][ T5955] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.274140][ T5955] usb 6-1: config 0 descriptor??
[  858.279522][   T43] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  858.290015][ T5955] ldusb 6-1:0.0: Interrupt in endpoint not found
[  858.328705][T15419] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  858.353809][T15419] usb 1-1: config 0 has no interface number 0
[  858.361001][T15419] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  858.380985][ T5974] usb 5-1: USB disconnect, device number 93
[  858.388119][T15419] usb 1-1: config 0 interface 85 has no altsetting 0
[  858.518418][T15419] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  858.522790][ T5955] usb 6-1: USB disconnect, device number 106
[  858.541371][T15419] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.583230][   T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  858.596759][   T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  858.613626][T15419] usb 1-1: Product: syz
[  858.625462][T15419] usb 1-1: Manufacturer: syz
[  858.632059][   T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  858.642492][T15419] usb 1-1: SerialNumber: syz
[  858.648189][   T43] usb 3-1: config 1 has no interface number 0
[  858.654985][T15419] usb 1-1: config 0 descriptor??
[  858.665256][   T43] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  858.679225][   T43] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  858.709913][   T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  858.719712][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  858.733471][   T43] usb 3-1: Product: syz
[  858.740563][   T43] usb 3-1: Manufacturer: syz
[  858.750648][   T43] usb 3-1: SerialNumber: syz
[  858.890601][T17916] loop2: detected capacity change from 0 to 7
[  858.902322][T17916] Dev loop2: unable to read RDB block 7
[  858.910500][T17916]  loop2: unable to read partition table
[  858.918084][T17916] loop2: partition table beyond EOD, truncated
[  858.955598][T17916] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  859.180414][T15419] appletouch 1-1:0.85: Failed to request geyser raw mode
[  859.189260][T15419] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  859.290023][T15419] usb 1-1: USB disconnect, device number 49
[  859.521776][T17924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3345'.
[  859.835991][T15419] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[  860.016010][ T5974] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  860.024914][T15419] usb 6-1: Using ep0 maxpacket: 32
[  860.034038][T15419] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  860.064863][T15419] usb 6-1: config 0 has no interface number 0
[  860.078789][T15419] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  860.094316][T15419] usb 6-1: config 0 interface 85 has no altsetting 0
[  860.106076][ T5955] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  860.117792][T15419] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  860.136029][T15419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.145676][T15419] usb 6-1: Product: syz
[  860.149955][ T3094] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  860.158794][T15419] usb 6-1: Manufacturer: syz
[  860.166107][T15419] usb 6-1: SerialNumber: syz
[  860.175010][T15419] usb 6-1: config 0 descriptor??
[  860.180063][ T5974] usb 4-1: Using ep0 maxpacket: 32
[  860.188974][ T5974] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  860.197428][ T5974] usb 4-1: config 0 has no interface number 0
[  860.206075][ T5974] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  860.217693][ T5974] usb 4-1: config 0 interface 85 has no altsetting 0
[  860.227680][ T5974] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  860.236857][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.247614][ T5974] usb 4-1: Product: syz
[  860.251831][ T5974] usb 4-1: Manufacturer: syz
[  860.257076][ T5974] usb 4-1: SerialNumber: syz
[  860.262617][ T5955] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x1 has invalid maxpacket 34091, setting to 1024
[  860.266464][ T5974] usb 4-1: config 0 descriptor??
[  860.284661][ T5955] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x1 has invalid maxpacket 1024
[  860.298853][ T5955] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 8
[  860.313174][ T5955] usb 5-1: config 1 interface 0 has no altsetting 0
[  860.320670][ T3094] usb 1-1: Using ep0 maxpacket: 8
[  860.331784][ T5955] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  860.333082][ T3094] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  860.353633][ T3094] usb 1-1: config 0 has no interface number 0
[  860.353692][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.360266][ T3094] usb 1-1: config 0 interface 132 altsetting 3 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  860.368538][ T5955] usb 5-1: Manufacturer: 䐊
[  860.384021][ T5955] usb 5-1: SerialNumber: П
[  860.392372][ T3094] usb 1-1: config 0 interface 132 altsetting 3 bulk endpoint 0x7 has invalid maxpacket 16
[  860.410906][T15419] appletouch 6-1:0.85: Failed to read mode from device.
[  860.411584][T17927] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  860.421455][T15419] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[  860.437968][ T3094] usb 1-1: config 0 interface 132 has no altsetting 0
[  860.445529][T17927] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  860.452386][ T3094] usb 1-1: New USB device found, idVendor=1199, idProduct=6802, bcdDevice=fe.e3
[  860.464139][ T3094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.473079][ T3094] usb 1-1: Product: syz
[  860.480888][T15419] usb 6-1: USB disconnect, device number 107
[  860.492134][ T3094] usb 1-1: Manufacturer: syz
[  860.506575][ T3094] usb 1-1: SerialNumber: syz
[  860.515275][ T5974] appletouch 4-1:0.85: Failed to read mode from device.
[  860.524295][ T5974] appletouch 4-1:0.85: probe with driver appletouch failed with error -5
[  860.542157][ T3094] usb 1-1: config 0 descriptor??
[  860.556308][ T5974] usb 4-1: USB disconnect, device number 31
[  860.563467][T17934] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  860.775122][T17934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  860.786567][T17934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  860.798371][ T3094] sierra 1-1:0.132: Sierra USB modem converter detected
[  860.813280][ T3094] usb 1-1: Sierra USB modem converter now attached to ttyUSB0
[  860.826080][ T3094] usb 1-1: Sierra USB modem converter now attached to ttyUSB1
[  860.860187][ T3094] usb 1-1: USB disconnect, device number 50
[  860.894355][ T3094] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  860.925100][ T3094] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  860.936716][ T3094] sierra 1-1:0.132: device disconnected
[  861.290659][  T957] usb 3-1: USB disconnect, device number 40
[  861.416393][T14415] Bluetooth: hci2: command 0x0405 tx timeout
[  861.506413][ T5956] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[  861.642390][T17955] netlink: zone id is out of range
[  861.647983][T17955] netlink: zone id is out of range
[  861.653317][T17955] netlink: zone id is out of range
[  861.659485][T17955] netlink: zone id is out of range
[  861.664815][T17955] netlink: zone id is out of range
[  861.670671][T17955] netlink: zone id is out of range
[  861.677302][T17955] netlink: zone id is out of range
[  861.682607][T17955] netlink: zone id is out of range
[  861.688099][ T5956] usb 6-1: Using ep0 maxpacket: 8
[  861.694462][T17955] netlink: zone id is out of range
[  861.701740][ T5956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  861.711650][T17955] netlink: zone id is out of range
[  861.723475][ T5956] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  861.732700][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  861.744038][ T5956] usb 6-1: config 0 descriptor??
[  861.755739][ T5956] ldusb 6-1:0.0: Interrupt in endpoint not found
[  861.961905][ T3094] usb 6-1: USB disconnect, device number 108
[  862.316328][ T5956] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  862.428346][ T5955] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 94 if 0 alt 6 proto 2 vid 0x0525 pid 0xA4A8
[  862.446484][ T5956] usb 1-1: device descriptor read/64, error -71
[  862.465512][ T5955] usb 5-1: USB disconnect, device number 94
[  862.484574][ T5955] usblp0: removed
[  862.706261][ T5956] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  862.787455][T17976] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3365'.
[  862.857832][ T5956] usb 1-1: device descriptor read/64, error -71
[  862.966390][ T5956] usb usb1-port1: attempt power cycle
[  862.986082][ T5926] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[  863.136277][ T5926] usb 6-1: Using ep0 maxpacket: 32
[  863.143714][ T5926] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  863.152373][ T5926] usb 6-1: config 0 has no interface number 0
[  863.158808][ T5926] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  863.170222][ T5926] usb 6-1: config 0 interface 85 has no altsetting 0
[  863.179843][ T5926] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  863.189307][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  863.197368][ T5926] usb 6-1: Product: syz
[  863.201610][ T5926] usb 6-1: Manufacturer: syz
[  863.206484][ T5926] usb 6-1: SerialNumber: syz
[  863.215126][ T5926] usb 6-1: config 0 descriptor??
[  863.306921][ T5956] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  863.329533][ T5956] usb 1-1: device descriptor read/8, error -71
[  863.428324][ T5926] appletouch 6-1:0.85: Failed to read mode from device.
[  863.440700][ T5926] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[  863.453858][ T5926] usb 6-1: USB disconnect, device number 109
[  863.573578][T17984] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  863.584895][ T5956] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  863.617791][ T5956] usb 1-1: device descriptor read/8, error -71
[  863.705734][T17986] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.3367'.
[  863.728188][ T5956] usb usb1-port1: unable to enumerate USB device
[  864.013828][T17994] netlink: 'syz.3.3370': attribute type 3 has an invalid length.
[  864.023707][T17994] netlink: 666 bytes leftover after parsing attributes in process `syz.3.3370'.
[  864.458300][ T3094] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[  864.856242][ T3094] usb 6-1: Using ep0 maxpacket: 8
[  864.863619][ T3094] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  864.878808][ T3094] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  864.899656][ T3094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  864.917920][ T3094] usb 6-1: config 0 descriptor??
[  864.932110][ T3094] ldusb 6-1:0.0: Interrupt in endpoint not found
[  865.198737][ T3094] usb 6-1: USB disconnect, device number 110
[  865.368538][T18008] loop6: detected capacity change from 0 to 7
[  865.375623][T18008] Dev loop6: unable to read RDB block 7
[  865.387421][T18008]  loop6: AHDI p2 p3
[  865.398929][T18008] loop6: partition table partially beyond EOD, truncated
[  865.423605][T18008] loop6: p3 size 805306368 extends beyond EOD, truncated
[  865.667278][ T8411] udevd[8411]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory
[  866.256953][ T5974] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  866.328827][ T5956] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[  866.448568][ T5974] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  866.464483][ T5974] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=10.40
[  866.473842][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  866.484464][ T5974] usb 1-1: Product: syz
[  866.491552][ T5974] usb 1-1: Manufacturer: syz
[  866.504542][ T5956] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  866.551936][ T5974] usb 1-1: SerialNumber: syz
[  866.570211][ T5956] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  866.602266][ T5956] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  866.631567][ T5956] usb 6-1: config 0 interface 0 has no altsetting 0
[  866.649992][ T5956] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  866.685844][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.716695][ T5956] usb 6-1: config 0 descriptor??
[  866.836875][ T5974] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  866.923379][ T5974] usb 1-1: USB disconnect, device number 55
[  866.991102][ T5974] usblp0: removed
[  867.164432][ T5956] usbhid 6-1:0.0: can't add hid device: -71
[  867.178795][ T5956] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  867.221263][ T5956] usb 6-1: USB disconnect, device number 111
[  867.227917][ T5926] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  867.396028][ T5926] usb 3-1: Using ep0 maxpacket: 32
[  867.404882][ T5926] usb 3-1: config 128 has an invalid interface number: 108 but max is 1
[  867.424359][ T5926] usb 3-1: config 128 contains an unexpected descriptor of type 0x1, skipping
[  867.471265][ T5926] usb 3-1: config 128 contains an unexpected descriptor of type 0x2, skipping
[  867.503220][ T5926] usb 3-1: config 128 has an invalid interface number: 221 but max is 1
[  867.528840][ T5926] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  867.557091][ T5926] usb 3-1: config 128 has no interface number 0
[  867.604020][ T5926] usb 3-1: config 128 has no interface number 1
[  867.611436][ T5926] usb 3-1: config 128 interface 108 altsetting 14 endpoint 0xA has invalid maxpacket 41830, setting to 1024
[  867.624008][ T5926] usb 3-1: config 128 interface 108 altsetting 14 has a duplicate endpoint with address 0xA, skipping
[  867.626955][T18045] netlink: 'syz.0.3386': attribute type 6 has an invalid length.
[  867.658596][T18047] binder: 18044:18047 ioctl c018620c 200000000000 returned -22
[  867.682499][ T5926] usb 3-1: config 128 interface 108 altsetting 14 endpoint 0x8 has invalid maxpacket 45973, setting to 1024
[  867.806663][ T5926] usb 3-1: config 128 interface 108 altsetting 14 bulk endpoint 0x8 has invalid maxpacket 1024
[  867.858008][ T5926] usb 3-1: config 128 interface 221 altsetting 53 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  867.865557][T18056] netlink: 'syz.5.3388': attribute type 1 has an invalid length.
[  867.923470][ T5926] usb 3-1: config 128 interface 108 has no altsetting 0
[  867.932194][ T5926] usb 3-1: config 128 interface 221 has no altsetting 0
[  867.960089][ T5926] usb 3-1: New USB device found, idVendor=1608, idProduct=000e, bcdDevice=22.26
[  867.986239][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.994711][ T5926] usb 3-1: Product: 킢
[  867.999962][ T5926] usb 3-1: Manufacturer: 
[  868.004575][ T5926] usb 3-1: SerialNumber: ޒ䎋현歾탒䟵ꀌᗶ験ㅐ袧抐틝懆돝ડ䤡孄휖倔浨洌ꍧ੓愋佒啼׿
[  868.034983][T18039] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  868.250327][ T5926] io_edgeport 3-1:128.108: required endpoints missing
[  868.299094][ T5926] io_edgeport 3-1:128.221: required endpoints missing
[  868.734792][ T5926] usb 3-1: USB disconnect, device number 41
[  868.948081][T18073] netdevsim netdevsim3: Direct firmware load for .
[  868.948081][T18073]  failed with error -2
[  868.958817][T18073] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  868.958817][T18073] 
[  869.050373][T18076] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3394'.
[  870.093819][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  870.100200][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  870.718025][T18100] netlink: 'syz.3.3401': attribute type 15 has an invalid length.
[  871.657192][T18120] program syz.5.3406 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  871.686126][ T3094] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  871.862170][ T3094] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  871.874099][ T3094] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  871.882334][ T3094] usb 3-1: Product: syz
[  871.909390][    C1] sd 0:0:1:0: [sda] tag#551 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  871.919768][    C1] sd 0:0:1:0: [sda] tag#551 CDB: Write(6) 0a 00 00 00 73 d0
[  871.956468][ T3094] usb 3-1: Manufacturer: syz
[  872.024554][ T3094] usb 3-1: SerialNumber: syz
[  872.117201][ T3094] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  872.138540][ T5974] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  872.836016][ T3094] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[  873.016085][ T3094] usb 6-1: Using ep0 maxpacket: 32
[  873.079404][ T3094] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  873.089926][ T3094] usb 6-1: config 0 has no interface number 0
[  873.097009][ T3094] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  873.108440][ T3094] usb 6-1: config 0 interface 85 has no altsetting 0
[  873.118692][ T3094] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  873.127831][ T3094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  873.135884][ T3094] usb 6-1: Product: syz
[  873.158838][ T3094] usb 6-1: Manufacturer: syz
[  873.169892][ T3094] usb 6-1: SerialNumber: syz
[  873.206264][ T3094] usb 6-1: config 0 descriptor??
[  873.266458][ T5974] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  873.281877][ T5974] ath9k_htc: Failed to initialize the device
[  873.331828][ T5974] usb 3-1: ath9k_htc: USB layer deinitialized
[  873.623521][ T3094] appletouch 6-1:0.85: Failed to request geyser raw mode
[  873.630998][ T3094] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[  873.645859][ T5926] usb 3-1: USB disconnect, device number 42
[  873.716137][ T3094] usb 6-1: USB disconnect, device number 112
[  874.196077][ T5926] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  874.366123][ T5926] usb 3-1: Using ep0 maxpacket: 32
[  874.382379][ T5926] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  874.442852][ T5926] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  874.496035][ T3094] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[  874.510961][ T5926] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  874.541346][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  874.562510][ T5926] usb 3-1: Product: syz
[  874.571708][ T5926] usb 3-1: Manufacturer: syz
[  874.588493][ T5926] usb 3-1: SerialNumber: syz
[  874.641669][ T5926] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input76
[  874.676037][ T3094] usb 6-1: Using ep0 maxpacket: 32
[  874.716132][ T3094] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  874.745516][ T3094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  874.784478][ T3094] usb 6-1: config 0 descriptor??
[  874.857123][T18140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.898035][T18140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  875.004089][ T3094] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[  875.029075][ T3094] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  875.072726][ T3094] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[  875.102167][ T3094] usb 6-1: media controller created
[  875.153305][T14415] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  875.166207][T14415] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  875.174371][T14415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  875.185346][T14415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  875.195369][T14415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  875.222345][ T3094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  875.276094][ T5926] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  875.466064][ T5926] usb 1-1: Using ep0 maxpacket: 32
[  875.476484][T15419] usb 3-1: USB disconnect, device number 43
[  875.487066][ T3094] DVB: Unable to find symbol dib7000p_attach()
[  875.495000][ T5926] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  875.524873][ T5926] usb 1-1: config 0 has no interface number 0
[  875.526869][ T3094] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[  875.585851][ T5926] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  875.618305][T15419] appletouch 3-1:1.0: input: appletouch disconnected
[  875.635662][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.665787][ T5926] usb 1-1: Product: syz
[  875.679535][ T5926] usb 1-1: Manufacturer: syz
[  875.684209][ T5926] usb 1-1: SerialNumber: syz
[  875.726046][ T5974] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  875.774964][ T5926] usb 1-1: config 0 descriptor??
[  875.796709][ T3094] rc_core: IR keymap rc-dib0700-rc5 not found
[  875.802806][ T3094] Registered IR keymap rc-empty
[  875.835836][ T3094] dvb-usb: could not initialize remote control.
[  875.852334][ T3094] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[  875.885978][ T5974] usb 4-1: Using ep0 maxpacket: 16
[  875.926162][ T5974] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  875.940144][ T5926] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  875.947287][ T5974] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  875.967326][ T5974] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  875.985935][ T5974] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  875.995870][ T5926] usb 1-1: selecting invalid altsetting 1
[  876.003145][ T5926] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  876.017685][ T5974] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  876.035989][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.044538][ T5974] usb 4-1: Product: syz
[  876.048811][ T5974] usb 4-1: Manufacturer: syz
[  876.053425][ T5974] usb 4-1: SerialNumber: syz
[  876.056517][ T5926] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  876.077751][T18171] bridge0: port 1(bridge_slave_0) entered disabled state
[  876.096492][ T5926] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  876.131287][ T5926] usb 1-1: media controller created
[  876.149557][T18159] ------------[ cut here ]------------
[  876.155301][T18159] usb 6-1: BOGUS control dir, pipe 80007180 doesn't match bRequestType c0
[  876.167984][T18159] WARNING: CPU: 1 PID: 18159 at drivers/usb/core/urb.c:413 usb_submit_urb+0x112b/0x1830
[  876.177880][T18159] Modules linked in:
[  876.182259][T18159] CPU: 1 UID: 0 PID: 18159 Comm: syz.0.3418 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  876.192128][T18159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  876.202283][T18159] RIP: 0010:usb_submit_urb+0x112b/0x1830
[  876.208204][T18159] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 00 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 56 2f 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80
[  876.228933][T18159] RSP: 0018:ffffc90005287850 EFLAGS: 00010246
[  876.234509][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  876.235015][T18159] RAX: c476ea020a6c0a00 RBX: ffff88814d2e9900 RCX: 0000000000080000
[  876.252087][T18159] RDX: ffffc9000d5bb000 RSI: 0000000000004e14 RDI: 0000000000004e15
[  876.260482][T18159] RBP: 1ffff1100c4b21b4 R08: 0000000000000003 R09: 0000000000000004
[  876.268714][T18159] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000
[  876.276759][T18159] R13: ffff888062590da0 R14: 0000000080007180 R15: ffff8880645085e0
[  876.284775][T18159] FS:  00007f2817a066c0(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000
[  876.293808][T18159] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  876.300507][T18159] CR2: 000000110c2fe3f2 CR3: 000000005ec98000 CR4: 00000000003526f0
[  876.308561][T18159] DR0: 0000040000000000 DR1: 000000000000064f DR2: 0000000000000006
[  876.316632][T18159] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  876.325536][T18159] Call Trace:
[  876.330419][T18159]  <TASK>
[  876.333423][T18159]  usb_start_wait_urb+0x114/0x4c0
[  876.338569][T18159]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  876.344185][T18159]  usb_control_msg+0x232/0x3e0
[  876.349040][T18159]  dib0700_i2c_xfer+0xba7/0xf70
[  876.353965][T18159]  __i2c_transfer+0x871/0x2170
[  876.357517][T18174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.358975][T18159]  ? lockdep_hardirqs_on+0x9c/0x150
[  876.372446][T18159]  ? __pfx___i2c_transfer+0x10/0x10
[  876.378082][T18159]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  876.383528][T18159]  ? i2c_transfer+0x120/0x3a0
[  876.388306][T18159]  i2c_transfer+0x25b/0x3a0
[  876.392868][T18159]  ? __pfx_i2c_transfer+0x10/0x10
[  876.397978][T18159]  ? _copy_from_user+0x94/0xb0
[  876.402792][T18159]  i2cdev_ioctl_rdwr+0x460/0x740
[  876.408168][T18159]  i2cdev_ioctl+0x64b/0x7f0
[  876.412716][T18159]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  876.417800][T18159]  ? __fget_files+0x3a0/0x420
[  876.423315][T18159]  ? __fget_files+0x2a/0x420
[  876.428583][T18159]  ? bpf_lsm_file_ioctl+0x9/0x20
[  876.433573][T18159]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  876.438671][T18159]  __se_sys_ioctl+0xfc/0x170
[  876.443304][T18159]  do_syscall_64+0xfa/0x3b0
[  876.447969][T18159]  ? lockdep_hardirqs_on+0x9c/0x150
[  876.450788][T18162] chnl_net:caif_netlink_parms(): no params data found
[  876.453191][T18159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.466115][T18159]  ? clear_bhb_loop+0x60/0xb0
[  876.470822][T18159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.476793][T18159] RIP: 0033:0x7f2816b8ebe9
[  876.481238][T18159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  876.500920][T18159] RSP: 002b:00007f2817a06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  876.509413][T18159] RAX: ffffffffffffffda RBX: 00007f2816dc5fa0 RCX: 00007f2816b8ebe9
[  876.517457][T18159] RDX: 0000200000000300 RSI: 0000000000000707 RDI: 0000000000000004
[  876.526431][T18159] RBP: 00007f2816c11e19 R08: 0000000000000000 R09: 0000000000000000
[  876.534419][T18159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  876.543141][T18159] R13: 00007f2816dc6038 R14: 00007f2816dc5fa0 R15: 00007f2816eefa28
[  876.551190][T18159]  </TASK>
[  876.554240][T18159] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  876.561521][T18159] CPU: 1 UID: 0 PID: 18159 Comm: syz.0.3418 Not tainted syzkaller #0 PREEMPT(full) 
[  876.570886][T18159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  876.580933][T18159] Call Trace:
[  876.584204][T18159]  <TASK>
[  876.587125][T18159]  dump_stack_lvl+0x99/0x250
[  876.591719][T18159]  ? __asan_memcpy+0x40/0x70
[  876.596304][T18159]  ? __pfx_dump_stack_lvl+0x10/0x10
[  876.601498][T18159]  ? __pfx__printk+0x10/0x10
[  876.606091][T18159]  vpanic+0x281/0x750
[  876.610063][T18159]  ? __pfx__printk+0x10/0x10
[  876.614643][T18159]  ? __pfx_vpanic+0x10/0x10
[  876.619134][T18159]  ? is_bpf_text_address+0x292/0x2b0
[  876.624428][T18159]  panic+0xb9/0xc0
[  876.628142][T18159]  ? __pfx_panic+0x10/0x10
[  876.632567][T18159]  __warn+0x31b/0x4b0
[  876.636540][T18159]  ? usb_submit_urb+0x112b/0x1830
[  876.641557][T18159]  ? usb_submit_urb+0x112b/0x1830
[  876.646598][T18159]  report_bug+0x2be/0x4f0
[  876.650919][T18159]  ? usb_submit_urb+0x112b/0x1830
[  876.655936][T18159]  ? usb_submit_urb+0x112b/0x1830
[  876.660958][T18159]  ? usb_submit_urb+0x112d/0x1830
[  876.665969][T18159]  handle_bug+0x84/0x160
[  876.670203][T18159]  exc_invalid_op+0x1a/0x50
[  876.674694][T18159]  asm_exc_invalid_op+0x1a/0x20
[  876.679530][T18159] RIP: 0010:usb_submit_urb+0x112b/0x1830
[  876.685155][T18159] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 60 00 35 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 56 2f 57 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 17 f4 ff ff 89 e9 80
[  876.704750][T18159] RSP: 0018:ffffc90005287850 EFLAGS: 00010246
[  876.710814][T18159] RAX: c476ea020a6c0a00 RBX: ffff88814d2e9900 RCX: 0000000000080000
[  876.718798][T18159] RDX: ffffc9000d5bb000 RSI: 0000000000004e14 RDI: 0000000000004e15
[  876.726759][T18159] RBP: 1ffff1100c4b21b4 R08: 0000000000000003 R09: 0000000000000004
[  876.734718][T18159] R10: dffffc0000000000 R11: fffffbfff1bfa1f4 R12: dffffc0000000000
[  876.742686][T18159] R13: ffff888062590da0 R14: 0000000080007180 R15: ffff8880645085e0
[  876.750673][T18159]  usb_start_wait_urb+0x114/0x4c0
[  876.755704][T18159]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  876.761258][T18159]  usb_control_msg+0x232/0x3e0
[  876.766026][T18159]  dib0700_i2c_xfer+0xba7/0xf70
[  876.770901][T18159]  __i2c_transfer+0x871/0x2170
[  876.775657][T18159]  ? lockdep_hardirqs_on+0x9c/0x150
[  876.780902][T18159]  ? __pfx___i2c_transfer+0x10/0x10
[  876.786091][T18159]  ? rt_mutex_lock_nested+0x15e/0x1e0
[  876.791454][T18159]  ? i2c_transfer+0x120/0x3a0
[  876.796127][T18159]  i2c_transfer+0x25b/0x3a0
[  876.800631][T18159]  ? __pfx_i2c_transfer+0x10/0x10
[  876.805674][T18159]  ? _copy_from_user+0x94/0xb0
[  876.810430][T18159]  i2cdev_ioctl_rdwr+0x460/0x740
[  876.815368][T18159]  i2cdev_ioctl+0x64b/0x7f0
[  876.819858][T18159]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  876.824875][T18159]  ? __fget_files+0x3a0/0x420
[  876.829536][T18159]  ? __fget_files+0x2a/0x420
[  876.834114][T18159]  ? bpf_lsm_file_ioctl+0x9/0x20
[  876.839049][T18159]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  876.844063][T18159]  __se_sys_ioctl+0xfc/0x170
[  876.848648][T18159]  do_syscall_64+0xfa/0x3b0
[  876.853143][T18159]  ? lockdep_hardirqs_on+0x9c/0x150
[  876.858350][T18159]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.864408][T18159]  ? clear_bhb_loop+0x60/0xb0
[  876.869081][T18159]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  876.874961][T18159] RIP: 0033:0x7f2816b8ebe9
[  876.879364][T18159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  876.898961][T18159] RSP: 002b:00007f2817a06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  876.907366][T18159] RAX: ffffffffffffffda RBX: 00007f2816dc5fa0 RCX: 00007f2816b8ebe9
[  876.915327][T18159] RDX: 0000200000000300 RSI: 0000000000000707 RDI: 0000000000000004
[  876.923288][T18159] RBP: 00007f2816c11e19 R08: 0000000000000000 R09: 0000000000000000
[  876.931260][T18159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  876.939287][T18159] R13: 00007f2816dc6038 R14: 00007f2816dc5fa0 R15: 00007f2816eefa28
[  876.947274][T18159]  </TASK>
[  876.950518][T18159] Kernel Offset: disabled
[  876.954828][T18159] Rebooting in 86400 seconds..