last executing test programs:

7m26.608242845s ago: executing program 3 (id=1641):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x80, 0xa, 0xb9, 0x1, 0x11, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x49, 0x7, 0x2, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0x8000000000000006, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffffa, 0x2, 0x68ff, 0x9, 0x0, 0x3, 0x0, 0x8000000000], 0x1, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

7m25.972611088s ago: executing program 3 (id=1645):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x6de6, 0x100, 0x1, 0xbfdffffb}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000440)={0x638584, 0x2, 0x8}, &(0x7f0000000680)='./file0\x00', 0x18, 0x0, 0x12345})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

7m23.686511705s ago: executing program 3 (id=1654):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x141400, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'tunl0\x00', 0x800})
r4 = socket(0x1f, 0x3, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private2, 0x4e22, 0xffff, 0x4e23, 0x0, 0x2, 0x40, 0xe0, 0x2e}, {0x0, 0x3, 0x200, 0x5, 0x6, 0x2, 0xdb3, 0x10000}, {0x8, 0x2, 0xa, 0x7f}, 0x1, 0x6e6bbf, 0x2, 0x0, 0x2, 0x1}, {{@in6=@mcast1, 0x4d2, 0x3c}, 0xa, @in=@multicast1, 0x3500, 0x2, 0x1, 0x98, 0x4, 0x9, 0x5}}, 0xe8)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0)
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007500000000000000c000180080016"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x2, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
r11 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=r11], &(0x7f0000000000)='GPL\x00'}, 0x94)

7m21.978686105s ago: executing program 3 (id=1659):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
writev(r2, &(0x7f0000000780)=[{&(0x7f0000000640)="03f14b2f97c5", 0x6}, {0x0}], 0x2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6577206465528f05de7420747275739a87c6fdd97465643a73797a2030303030303030300000000000000000"], 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00')
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0)
creat(&(0x7f0000000380)='./file0\x00', 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14020000f57b29e7e2f8b47b2b5d52be81067477acbe673f0a4b072f339984a8c7cede3bc0eb9a86086beb92ec05660b809feacc1a314a3630a90a9bd12ae15c9f5a617d6388c9f4b07b9345d52169910b44104ba7fed361b86085c149", @ANYRES16=r7, @ANYBLOB="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"], 0x214}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
syz_open_procfs$userns(0x0, &(0x7f00000002c0))
r8 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r8, 0x0)
r9 = syz_io_uring_setup(0x109, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81})
io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

7m19.471898552s ago: executing program 3 (id=1668):
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
syz_emit_ethernet(0x0, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0xffffff51}], 0x1, 0x3f, 0x6a76)
syz_usb_connect(0x4, 0x24, 0x0, 0x0)
io_uring_setup(0x45a6, &(0x7f0000000500)={0x0, 0x0, 0x1, 0x0, 0x228})
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0)

7m17.015979157s ago: executing program 3 (id=1679):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000"], 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_usb_control_io(r0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0xffffffffffffffda, 0x3)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000300)={@hyper, 0x1})
readv(0xffffffffffffffff, 0x0, 0x0)
unshare(0x24040000)
unshare(0x2c020400)
syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00')
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, 0x0, 0x0, 0x200020, 0x3, 0x0, 0x4bf, 0x404, 0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x1, 0x283, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x76, 0x9f, 0x15, 0x20, 0x12d1, 0xb49b, 0x19d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x271, 0x1, 0x7, 0xd, 0x10, 0xb2, [{{0x9, 0x4, 0xb4, 0x2, 0x9, 0xff, 0x3, 0x5, 0xad, [@uac_control={{0xa, 0x24, 0x1, 0xffa6, 0xf}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x3, 0x4, 0x71}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xd, "9751b1"}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x7, 0x9], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x0, 0xd, 0x7a43, 0x9, 0x7f}]}], [{{0x9, 0x5, 0x9, 0x8, 0x630, 0x8, 0x8, 0xc}}, {{0x9, 0x5, 0x11, 0x10, 0x10, 0x9, 0x1, 0x1, [@generic={0xca, 0x2d, "0054e8c41647950f11f7d50ec8aa73668da92471dd1466281e7ae03b177300b2236cbc166af62882ce1619860208b9b781a84f5ad0d2b1e236d1e6e67b9748a519785f65bd1e881c39f4223c29a90e888d495082bbdb548acc80eb8fd8f854a1c608d5d7cc3d08f12ebc6d73ac096d9c579f8d654434156245a0eba42f3bb37ccfaa26137d1baf0117998569df3cce27372df20df58a22c92c055aa7b5f26e128676a69b9210dda3e3473aec0a12c86276d3e215e83fba2ba81ed19834d8d53097a1ec7b3e47bf3f"}, @generic={0xfe, 0xd, "41f2719d7c515c5e9c2114eb5cea0b5129429b0a445ea9e002bcfd320b4ff6ba4ba4180f27dab7f3d8e72738b57d2bff348aa70431703e7d4b3ac3e0e3f84edaa289970dffd704c0b2000c16c667ab8d9af52de20e503dd83fc037ed4d60da8022982bb3885b37b66e377415daa806db14819c653dd73e7597ac4b7e1fda17a50b631bb27a447878bd3cb6a5c4acd89ac4eacf12cf8a8e0b483bd04bd1c8e32333bb839718dabdc4516dfbef3ff2eb4bc61c2adb94edcb6614e08a0add7a661cc5615ad42863700bd3f2aac10bc20bc3624913dd3c826aa38679ceb94d8877d178ff057d9bc2c60cac8dccc21cec3d5450935d71642450741f332fd5"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x80, 0x5, 0xfc}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xefe5}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x4, 0x5, 0x9}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x5, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x9}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x41, 0x2, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x6, 0x6, 0x10}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x6, 0x2c, 0x1f}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x37, 0x4, 0x6d, 0x68, 0xf9}, 0x1f, &(0x7f0000000340)={0x5, 0xf, 0x1f, 0x2, [@generic={0x6, 0x10, 0x3, "b61d4d"}, @ss_container_id={0x14, 0x10, 0x4, 0x54, "340cad10afd33f7136d4772e6dbe18e6"}]}, 0x2, [{0xca, &(0x7f0000000200)=@string={0xca, 0x3, "5ae14b8e13ca71f6dbccd55199b5f3d042afa1b55f0839390dba4e5db8fbb9a0189eb04767c1003dadfaca26117ef17dae194025b740935e4035181582e045b04bb9164ffd69da52b2837539a1136db5fb1b3c5737f00a8dc30da46815b4a3ccceb1bab4cfc51e0be1d251aff499d13035ea2b92aaf7f9de8aead10ef5227de9dd7babea9c544ccc4a732f0803427056c201391524c866291967d4607419953da5b7dbf9f78d2e295f477d004306ea963076ff62ebe65d253f752842196edd4dd3d48b0725b5bf15"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42a}}]})
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002205070000004722eccb5632023781925832ac14aa0e9f6766d61118ad8f5636b42a9e3c4803622b20f1dfb52ea72483dcd09710a6fba78ad09753a1618611c0af960d7efce60e80858be9e3d6a6b08a159bc79648c7cd244a5e039bea9c1af2c0", @ANYRES64=r0], 0x0}, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000000840)={{0x107, 0x6, 0x8a, 0x2ee, 0x1a5, 0x9, 0x98, 0x8}, "6ca5cdc507fc7ab92db6111858cad99a8f08ee9ee40c9427f4f54256050b8c3a4628551b50cbe14441c7cdca93c08eb55684a56d48a7305db0caff295322a2059a262c831b84036559495d25e2a93cfab35a5e68de114a7871becd1139682a70", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x580)

7m15.553304762s ago: executing program 32 (id=1679):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000"], 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
syz_usb_control_io(r0, 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0xffffffffffffffda, 0x3)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, &(0x7f0000000300)={@hyper, 0x1})
readv(0xffffffffffffffff, 0x0, 0x0)
unshare(0x24040000)
unshare(0x2c020400)
syz_open_procfs(0x0, &(0x7f0000000040)='net/anycast6\x00')
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, 0x0, 0x0, 0x200020, 0x3, 0x0, 0x4bf, 0x404, 0x0})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x11, 0x0, 0x11)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x1, 0x283, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0x76, 0x9f, 0x15, 0x20, 0x12d1, 0xb49b, 0x19d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x271, 0x1, 0x7, 0xd, 0x10, 0xb2, [{{0x9, 0x4, 0xb4, 0x2, 0x9, 0xff, 0x3, 0x5, 0xad, [@uac_control={{0xa, 0x24, 0x1, 0xffa6, 0xf}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x3, 0x4, 0x71}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xd, "9751b1"}, @feature_unit={0xb, 0x24, 0x6, 0x6, 0x1, 0x2, [0x7, 0x9], 0x7}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x0, 0xd, 0x7a43, 0x9, 0x7f}]}], [{{0x9, 0x5, 0x9, 0x8, 0x630, 0x8, 0x8, 0xc}}, {{0x9, 0x5, 0x11, 0x10, 0x10, 0x9, 0x1, 0x1, [@generic={0xca, 0x2d, "0054e8c41647950f11f7d50ec8aa73668da92471dd1466281e7ae03b177300b2236cbc166af62882ce1619860208b9b781a84f5ad0d2b1e236d1e6e67b9748a519785f65bd1e881c39f4223c29a90e888d495082bbdb548acc80eb8fd8f854a1c608d5d7cc3d08f12ebc6d73ac096d9c579f8d654434156245a0eba42f3bb37ccfaa26137d1baf0117998569df3cce27372df20df58a22c92c055aa7b5f26e128676a69b9210dda3e3473aec0a12c86276d3e215e83fba2ba81ed19834d8d53097a1ec7b3e47bf3f"}, @generic={0xfe, 0xd, "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"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x80, 0x5, 0xfc}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x1, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xefe5}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x4, 0x5, 0x9}}, {{0x9, 0x5, 0xa, 0x1, 0x8, 0x5, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x9}]}}, {{0x9, 0x5, 0x5, 0xc, 0x20, 0x41, 0x2, 0x37, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x7}]}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x6, 0x6, 0x10}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x6, 0x2c, 0x1f}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x201, 0x37, 0x4, 0x6d, 0x68, 0xf9}, 0x1f, &(0x7f0000000340)={0x5, 0xf, 0x1f, 0x2, [@generic={0x6, 0x10, 0x3, "b61d4d"}, @ss_container_id={0x14, 0x10, 0x4, 0x54, "340cad10afd33f7136d4772e6dbe18e6"}]}, 0x2, [{0xca, &(0x7f0000000200)=@string={0xca, 0x3, "5ae14b8e13ca71f6dbccd55199b5f3d042afa1b55f0839390dba4e5db8fbb9a0189eb04767c1003dadfaca26117ef17dae194025b740935e4035181582e045b04bb9164ffd69da52b2837539a1136db5fb1b3c5737f00a8dc30da46815b4a3ccceb1bab4cfc51e0be1d251aff499d13035ea2b92aaf7f9de8aead10ef5227de9dd7babea9c544ccc4a732f0803427056c201391524c866291967d4607419953da5b7dbf9f78d2e295f477d004306ea963076ff62ebe65d253f752842196edd4dd3d48b0725b5bf15"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42a}}]})
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="002205070000004722eccb5632023781925832ac14aa0e9f6766d61118ad8f5636b42a9e3c4803622b20f1dfb52ea72483dcd09710a6fba78ad09753a1618611c0af960d7efce60e80858be9e3d6a6b08a159bc79648c7cd244a5e039bea9c1af2c0", @ANYRES64=r0], 0x0}, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$binfmt_aout(r4, &(0x7f0000000840)={{0x107, 0x6, 0x8a, 0x2ee, 0x1a5, 0x9, 0x98, 0x8}, "6ca5cdc507fc7ab92db6111858cad99a8f08ee9ee40c9427f4f54256050b8c3a4628551b50cbe14441c7cdca93c08eb55684a56d48a7305db0caff295322a2059a262c831b84036559495d25e2a93cfab35a5e68de114a7871becd1139682a70", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x580)

2m36.997460116s ago: executing program 0 (id=2665):
r0 = epoll_create1(0x0)
r1 = syz_io_uring_setup(0x749e, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x0, 0x2e7}, &(0x7f00000001c0), &(0x7f0000000280))
syz_io_uring_setup(0x1005c1f, &(0x7f00000002c0)={0x0, 0x778b, 0x13290, 0x2, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000000))
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000))
timerfd_settime(r2, 0x2, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1ea81, 0x0)
poll(&(0x7f0000000140)=[{r0}], 0x1, 0xdc)
fadvise64(0xffffffffffffffff, 0x18, 0x1800, 0x4)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000040)={0x9})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, &(0x7f0000000340)="16723c04e215c56e3c20541a8fa5858d6860ad750b292bb9a726b1d74e31d5806907b1cde4c9b0e9357901929e20e386ad7e15b56e4fb2cbb86adf11f0658c5b9343812ae32392f7b2a68df07b5b7b6d859c59a72d23c890972408306226749f5f223981f3ddfeef975b77c7342f31e1ff39408544870469a2c33bfd920679190dbb9e28741ea7a290e7ceea9df921c059799c0cfda9f82cab7d3d68b1ac1b4b2a57218a6ea77b275a6abcf5a06dc551f73627c02598e4b2923d903ca04feb13b485afb8b888d167420d66f94c84d3d03452b8f0869027190c41ae54e38061405b8e4e19e14b12db574bfcca389ffff56592327a22c5", 0xf6, 0x20000000, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="40010000100001000000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000040030000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000000002f66d71e00000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a00010000000000eeffffff070023"], 0x140}}, 0x0)

2m36.262166079s ago: executing program 0 (id=2669):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x6c033, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0x160f, &(0x7f00000012c0)={0x0, 0x9e40, 0x800, 0x7})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {&(0x7f0000000280)=""/4086, 0xff6}], 0x0}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20)

2m36.020058589s ago: executing program 0 (id=2670):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x101000, 0x1e8)
r1 = socket$nl_route(0x10, 0x3, 0x0)
fanotify_init(0x8, 0x101000)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40101}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

2m35.738234081s ago: executing program 0 (id=2671):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40008)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
r2 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000ddbd73120001000000000904deffff96695800bccc653990893249ecdebeaa3893967c48478113430c90352d7537a113e1a75d7995b620aa54b1be0fec35b2a31ee03414da40134462d3e2902628c45558c7d3"], 0x0)

2m34.383662674s ago: executing program 0 (id=2681):
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r4, 0x400, 0x0)
mq_unlink(&(0x7f0000000340)='eth0\x00')
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
r5 = request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)='\x00', 0xffffffffffffffff)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$sock_int(r6, 0x1, 0x9, &(0x7f0000002840)=0x2, 0x4)
r7 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "43aa884c5abada3e8e2918b8f4587f22115cecfb84bd9a4c251dd12f772e1b512ebdcf7100d25abfa2b60949d31bcb0c546b70aa46e5d79b7b312b33d7ddedb0", 0x16}, 0x48, 0x0)
r8 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, r5, r7, r8, 0x1)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x6}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x9132, 0xffffffffffffffff, 0x9aa9b000)

2m34.223860693s ago: executing program 0 (id=2682):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
fchdir(r0)
exit(0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x3, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x40000fe, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x545}, {0x4, 0x7fffffffffffffff}, {0xfffffffd}, 0x70bd28, 0x3500, 0x2, 0x4, 0x80}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x24040014)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
r6 = io_uring_setup(0x5491, &(0x7f00000001c0)={0x0, 0xf04d, 0x1, 0xfffffffc, 0x211})
close(r6)
ioctl$TCSETSW2(r5, 0x5425, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r8, 0x0, 0xc, 0x0, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000440)=0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="000800008c751f445419007390380f1328d82e8cf4541885afac578585f19f6ddbb5f30ae9c80123", @ANYRESOCT=r0, @ANYBLOB="010000000080000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0)
close(r1)
socket$igmp6(0xa, 0x3, 0x2)
write$6lowpan_enable(r2, &(0x7f00000002c0)='0', 0x1)

2m33.990355556s ago: executing program 33 (id=2682):
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
fchdir(r0)
exit(0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x3, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee00}, {@in6=@private1, 0x40000fe, 0x32}, @in=@remote, {0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x545}, {0x4, 0x7fffffffffffffff}, {0xfffffffd}, 0x70bd28, 0x3500, 0x2, 0x4, 0x80}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x24040014)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
r6 = io_uring_setup(0x5491, &(0x7f00000001c0)={0x0, 0xf04d, 0x1, 0xfffffffc, 0x211})
close(r6)
ioctl$TCSETSW2(r5, 0x5425, 0x0)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r7, &(0x7f0000000180), 0x40010)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r8, 0x0, 0xc, 0x0, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000440)=0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="000800008c751f445419007390380f1328d82e8cf4541885afac578585f19f6ddbb5f30ae9c80123", @ANYRESOCT=r0, @ANYBLOB="010000000080000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c400010000000400c5"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0)
close(r1)
socket$igmp6(0xa, 0x3, 0x2)
write$6lowpan_enable(r2, &(0x7f00000002c0)='0', 0x1)

12.815008821s ago: executing program 5 (id=3172):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = gettid() (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r2, &(0x7f00000001c0)='\\', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
syz_open_procfs(r1, &(0x7f0000000180)='net/nf_conntrack\x00')
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r3, 0x1000, 0x1003ffd})
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010c41090ea40000000000109022400010000000009040000010e01000009210000000122050009058103", @ANYRES16], 0x0)
syz_usb_connect$uac1(0x6, 0xd9, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc7, 0x3, 0x1, 0x2e, 0x10, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xff}, [@extension_unit={0xc, 0x24, 0x8, 0x2, 0xe4, 0x80, "82a69484ad"}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x3, 0x0, [], 0x3}, @extension_unit={0x7, 0x24, 0x8, 0x1, 0xe42a, 0x9}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x0, "998301850672"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x203, 0x6, 0xe1, 0xd, 0x6, 0x60}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x1, 0x2, [0x8, 0x8], 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xc9, 0xa, 0xd8, {0x7, 0x25, 0x1, 0x0, 0xc, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x9, 0x9, 0xc, "1d"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xd, 0x3, 0xb5}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xa, 0x4, 0x40, 0x4}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf1, 0x2, 0x6, 0x1, "d534db65b4eb0114f2"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x9, 0x4, {0x7, 0x25, 0x1, 0x81, 0x5, 0x7f}}}}}}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x6, 0x6, 0x3, 0x10, 0xf}, 0x39, &(0x7f0000000180)=ANY=[@ANYBLOB="050f3904050b100104200000030004040b10010c0800fc2410000107100208399ee003100b14100407428bbdc76eb1ee41d2abe5ad45caa987"], 0x1, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x807}}]})

9.603870728s ago: executing program 5 (id=3185):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$netlink(0x10, 0x3, 0x15)
r1 = socket$inet6(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f00000002c0)='\x00', 0x1, 0x8000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000cc0)=""/4092, &(0x7f0000000040)=0x72d)
unshare(0xc010000)
unshare(0xc000000)
syz_usb_connect(0x2, 0x5c, &(0x7f0000000800)=ANY=[@ANYBLOB="12010102c05f560882052001cd9c0102030109024a00020b0b6009090b100900800c4c03090403"], &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
socket$alg(0x26, 0x5, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r2, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x2, 0x401, 0x0, 0x0, {0x9}, [@CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x200080d0}, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0)
madvise(&(0x7f00005bf000/0x3000)=nil, 0x3000, 0x65)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)

9.178438027s ago: executing program 1 (id=3189):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40c4)
shutdown(r0, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x4b, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$sndmidi(0x0, 0xa, 0x147b42)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r7=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r7})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x100, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e})
sched_setscheduler(0x0, 0x2, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38)
close_range(r5, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x10, 0x75}, 0x8)

9.177232028s ago: executing program 4 (id=3190):
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0x0, 0x0, &(0x7f0000000040))
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x62, 0x1, 0x3031334d, 0x3, 0xa, [{0x3, 0x6}, {0x2, 0x2}, {0x3, 0x411}, {0x10001, 0x8}, {0x6, 0x8}, {0x4, 0xd}, {0x8, 0xfffffff8}, {0x5, 0x1}], 0xc, 0x2, 0x1, 0x0, 0x2}})
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000100))
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x0, 0x2, 0x0, "e5e81571c9e17a69780f9385d774de107de8b9041b511300"})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000540)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7})
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x2400c890)
syz_usb_connect(0x0, 0x34, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80cb59acbc0413a1f8480f0000005e2900421803001825e60a001402000002800000121f", 0x2e}], 0x1}, 0x0)

9.019926345s ago: executing program 2 (id=3192):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xa6}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0)

8.569711547s ago: executing program 6 (id=3193):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000100)={[0xfffffffffffffffc]}, 0x8, 0x800)
io_setup(0x206, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}])
fsopen(&(0x7f0000000380)='squashfs\x00', 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94)
socketpair(0xb, 0x6, 0x8, &(0x7f0000000040))

7.938233325s ago: executing program 6 (id=3194):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
openat$cgroup_ro(r1, &(0x7f0000000180)='cpuacct.usage_all\x00', 0x275a, 0x0)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_disconnect={0x6})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000711000/0x400000)=nil)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet(0x2, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket(0x10, 0x80002, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
sendmsg$inet6(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="05", 0x1}], 0x1}, 0x4040845)

7.080062028s ago: executing program 2 (id=3195):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110b5000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_setup(0x36, &(0x7f0000004800))
io_setup(0x4, &(0x7f0000004e00))
r1 = socket(0x15, 0x5, 0x0)
connect$unix(r1, &(0x7f0000000080)=@abs={0xa}, 0x6e)
io_setup(0x6, &(0x7f0000004e40))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x48}}, 0x0)

6.610314879s ago: executing program 2 (id=3196):
eventfd2(0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c)
recvfrom(r1, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4ed82, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4)
sendto$inet(r0, &(0x7f0000000040)="0400", 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280))
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0)

5.991400141s ago: executing program 1 (id=3197):
syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000022000010000000000000000000a00204000c7fa4e46b152602a000204000000000000000000000000001a00001400030076657468315fd200c3e40c6b5e0435cb"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00'], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0}, 0xbac00000}], 0x1, 0x2b, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000980)=0x9, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000001c0)="d35a", 0x2, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0)
write$proc_mixer(r3, &(0x7f0000000140)=ANY=[], 0xb0)
r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x14, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x3938700}})
io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x2000)=nil)
dup3(r4, r3, 0x0)

5.579961531s ago: executing program 4 (id=3198):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) (async, rerun: 32)
splice(r1, 0x0, r4, 0x0, 0x25a3, 0x4) (async, rerun: 32)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) (async, rerun: 64)
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) (async)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000003c0)={0x0, 0x3, 0x5, "a727cd51d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCSUSAGE(r5, 0x4018480c, 0x0)

5.455012321s ago: executing program 5 (id=3199):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='reno\x00', 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x211, 0x9, 0x3, {0x0, 0x100}, 0x0, 0xfffffffc})
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f00000004c0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00', 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)='6', 0x1}], 0x1}}], 0x1, 0x0)
shutdown(r7, 0x1)
getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x2, 0x101, 0x5, 0x5, 0xfffb, 0x8001, 0x4, {0x0, @in6={{0xa, 0x4e20, 0x7, @loopback, 0x4}}, 0x20000000, 0xf4, 0x9, 0x0, 0x4}}, &(0x7f00000001c0)=0xb0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r6, r5, 0x0, 0x20000023893)
ioctl$HIDIOCSREPORT(r5, 0x400c4808, &(0x7f0000000200)={0x2, 0x100, 0x81c9})
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap(&(0x7f00004a8000/0x2000)=nil, 0x2000, 0x0, 0x2010, r4, 0x82ca6000)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$binfmt_register(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)

4.81923537s ago: executing program 6 (id=3200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="a9010203010902240001de0d000809041f0b02511bdcfc09058e03000203070909050e021000240303d5cc721bea1ab9c6eec2fa4ad284d1e48ca28327289d33c3b6cd07411977779d2f1a8718b1a1bd0e072239572dfdabaaf54fa19b5413df4bd5a02f7daadcf881df1258144f7450c1c221e4b6b5a16e75a81d889ce492e365dd63390c93645c0a183ea181f4b676f4b676d35ba9987af4aeb82fed274eb29a7fbb552ededecf2f165167be52674a1e2700a8f15f808ae249900878ed9dd138cd841d8e3788b5b31d4d7872f87c50db58cf990b389aa809b61600"/232], 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000010000000000090000002400048013000100"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x80000}, 0x50)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)={0x294, r1, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc82fba0}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x57}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd28}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfb45}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc00}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0xe8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x30e, @rand_addr=' \x01\x00', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'pimreg\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @empty, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e21, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'hsr0\x00'}}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfe000000}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080)
syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x404c004}, 0x8000)
setsockopt$sock_attach_bpf(r5, 0x1, 0x22, &(0x7f00000018c0), 0x4)
recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0xf}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000feffffff000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000008000000bf09000000000000a5090100ffffff809500000000000000ad980000000000005e080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4.632115943s ago: executing program 1 (id=3201):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0x2)

4.202083562s ago: executing program 1 (id=3202):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}, {0xffff}}}, 0x24}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet6(0xa, 0x3, 0x38)
setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0)
socket$kcm(0xa, 0x3, 0x87)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r5, r4}}, 0x18)
writev(r3, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3)
syz_emit_ethernet(0x57, &(0x7f0000000780)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x21, 0x87, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, {[@routing={0x4, 0x2, 0x1, 0xf, 0x0, [@empty]}], "1392687524eae523de"}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000000)={0x0, 0x1000, &(0x7f0000002a80)=""/4096})
r6 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0)
syz_usb_control_io$printer(r6, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
syz_usb_control_io$printer(r6, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x65942126f3d7b6a8, 0x2, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x2c)
syz_usb_control_io$uac1(r6, &(0x7f0000000080)={0x14, &(0x7f0000000800)={0x40, 0xe, 0xd7, {0xd7, 0x6, "e28cbd3cc080a3ed3d1f1c5dca1e76ec140c64603c5494e7c8e2f08f1deb8a00b77a4dbb60dc13f2eaf07ecf79a4ed2bd1bd8b4b5f881dc67a3be2fac3079e923885c11ef41381cd7ff65a74b89fc3c6b883fa77d90594450fb1419dab55751efd6c6c48e0e105ead28ac3c6587399d10f0656e38b020d73a5efecdec7a71b4b26b22f895b582fb5572dadcc1739bf1d5568c52b991eb35dc311ba0e688f51e18af20757601e86bce66481c7584ae3c895de4b4a8bf1d55919fbeef73a5152bf58da8633301d6a69cb45bf5c80fb63d60db203d164"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2001}}}, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x0, 0x3, 0xf2, "040fb312dd2157839a4292160ed1563b2122c64b08b8cee95562b22aad1c9dd5e71a2b1b4511d3bb32de306d019150562fa36d4468bbd85063c1714cc5f021ba41a502e20923dfe95742eafc9a1dbd764d825f9309b012462a8e1f3aa436d0bda6395d73b3d91f5e8043b761158953db3bdba6a26d5c5c50a38da963b8c98f62153fceceb0374b2aa74c08b151b8fd639b51bf4c05cc494d75d849fe0e40b1f128f187f6f8a7c214e0bd2258895fa5c97ef58f76f98dfbbaa750ad285812ae8d3d739c38570d6d59fb84718edc9f207713910d94a4f415f478118a9506b690861ad7f3f12cbf86d7764826772873e0170652"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xdf}, &(0x7f0000000240)={0x20, 0x81, 0x3, "26b33c"}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x85, 0x3, "bacf60"}})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

3.380528782s ago: executing program 2 (id=3203):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x28, &(0x7f0000000140)=0x6, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10)
sendmmsg$inet(r2, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000076"], 0x18}}], 0x1, 0x44000840)
r3 = dup(r2)
recvmmsg$unix(r3, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000062, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x80}}, 0x10)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r6, 0x80045301, &(0x7f0000000100))
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x38}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bf001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x4000)
lseek(r8, 0x2004, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0)
ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x77, 0x8, 0x8, @remote, @mcast1, 0x8, 0x80, 0xd2006e7f, 0x9}})

2.80245914s ago: executing program 2 (id=3204):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0)
readv(r0, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}], 0x1)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x37, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0xbd, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x56, 0xff, 0x2}}}}}]}}]}}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x1c0, 0x43, 0xa0, 0x0, 0x98, 0x360, 0x178, 0x178, 0x360, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@connbytes={{0x38}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x168, 0x1a0, 0x0, {}, [@common=@unspec=@connbytes={{0x38}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@multicast1, [], @ipv6=@loopback, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [], @ipv4=@multicast1}}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x468)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x0, "b8c103da"}, @local=@item_4={0x3, 0x2, 0x2}, @local=@item_4={0x3, 0x2, 0x4}]}}, 0x0}, 0x0)
openat(r0, 0x0, 0x40, 0x143)

2.210775841s ago: executing program 5 (id=3205):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0xb0}, 0x1, 0x7}, 0x4008800)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064d1, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='setgroups\x00')

2.143655355s ago: executing program 4 (id=3206):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20001, 0x3})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1c, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x20182)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000017c0)={0xe0c, 0x1, 0x5, 0x201, 0x0, 0x0, {0xc, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x6}, 0xf, 0x3, 0x7, 0xa8a7, 0x1a, 'syz0\x00', "036d5580044097ca4029edcef8a0bf12e06b921cf5d5a38c7994ecb4ea90db9e", "e82be124d146788b68cd21598ef27828f0fe8fe4d30bc09b5486da284b1becfb", [{0x7f, 0xffff, {0x0, 0x7}}, {0x10, 0xcad, {0x1, 0x2}}, {0x7f, 0x5, {0x3, 0x1}}, {0x7f, 0x3, {0x1, 0x2}}, {0x6, 0x3, {0x0, 0xd511}}, {0x7f, 0x7, {0x3, 0x2}}, {0x5, 0x2, {0x1, 0x4}}, {0x2, 0x3, {0x1}}, {0xfff8, 0x1, {0x2, 0x9}}, {0x10, 0x10, {0x2, 0xe7}}, {0x1, 0x6, {0x2, 0x40a8}}, {0x5, 0x5, {0x3, 0x5061}}, {0x10, 0x3, {0x2, 0xa}}, {0xa000, 0x10, {0x0, 0xb}}, {0x401, 0x1, {0x3, 0x3377}}, {0x5, 0x0, {0x2, 0x9}}, {0x6, 0x2, {0x2, 0x1ff}}, {0x6, 0x1, {0x1, 0x3}}, {0x2, 0x8, {0x3, 0x4}}, {0x7, 0x4, {0x3, 0x7}}, {0x3, 0x81, {0x1, 0x5}}, {0x40, 0x3, {0x2, 0x2}}, {0x1, 0x0, {0x3, 0x2}}, {0x0, 0x9, {0x0, 0x23c36c7d}}, {0x2, 0x0, {0x3, 0x6}}, {0x5, 0xbea, {0x159e427aa95428a2, 0x7fffffff}}, {0x301, 0x81, {0x2, 0x372a}}, {0x6, 0x80, {0x0, 0x3ff}}, {0x1, 0x2780, {0x1, 0x10}}, {0xad, 0x0, {0x2, 0x1}}, {0x5, 0xfffc, {0x3, 0x80000000}}, {0x6, 0xfffb, {0x1, 0x400}}, {0x7, 0x7, {0x3, 0x8}}, {0x1ff, 0xf, {0x1, 0x2}}, {0x1400, 0x0, {0x1, 0xf}}, {0x7, 0x100, {0x1, 0x8}}, {0xd071, 0xfb0, {0x3, 0x8001}}, {0x0, 0x4, {0x2}}, {0x4, 0x56b5, {0x1, 0xfffffffa}}, {0x400, 0x3, {0x3, 0x9}}]}}}, {{0x254, 0x1, {{0x2, 0xe689}, 0x10, 0xd, 0x3, 0x3, 0x1e, 'syz0\x00', "47b332ba2a780bfa43fd1effe014068682c376c782cafd143c4b1edf00352e17", "829c915b88ebc90b7244d07a8ce8fedc0309eee5512ee3ce128e651de0a0d2ca", [{0x6, 0x8, {0x0, 0x9}}, {0x3, 0x4, {0x3, 0x1}}, {0x101, 0x2, {0x2, 0x5}}, {0x7, 0x8, {0x1, 0xd}}, {0x0, 0x2, {0x1, 0x2}}, {0x10, 0x9, {0x1, 0x8}}, {0x9, 0x4, {0x1, 0x1ff}}, {0x6, 0x1a, {0x2, 0x94}}, {0xf29a, 0x4, {0x1, 0x1}}, {0xc, 0xd9, {0x3, 0x3}}, {0x6, 0x6, {0x3, 0x3}}, {0x1000, 0x4, {0x0, 0x6}}, {0xfffc, 0x7, {0xc0492bc01b9dcb04}}, {0x2, 0xfffd, {0x3, 0xffff8001}}, {0x240, 0x10, {0x1, 0x6}}, {0x914, 0x200, {0x3, 0x8}}, {0x2, 0x3, {0x3, 0x10001}}, {0x0, 0x5, {0x0, 0x6}}, {0x1f78, 0x1, {0x0, 0x5}}, {0x8, 0x2, {0x1, 0x1}}, {0x3, 0x4, {0x2, 0x2}}, {0x7, 0x4, {0x3, 0x1}}, {0x768, 0x2, {0x2, 0x33000000}}, {0x81bc, 0xc, {0x0, 0x7}}, {0x4, 0x5, {0x2, 0x6}}, {0x6, 0x7fff, {0x3, 0x9}}, {0x1000, 0x1, {0x0, 0x6}}, {0x6, 0xd, {0x3, 0x4}}, {0x0, 0x4, {0x3, 0x5}}, {0x6d4, 0x9, {0x3, 0x3}}, {0x8000, 0x9ea5, {0x2, 0xb0}}, {0x4, 0x101, {0x3, 0x10001}}, {0x0, 0x3, {0x2}}, {0x2, 0x5, {0x1, 0xe31}}, {0x4, 0x24f8, {0x3, 0x7}}, {0x5, 0x73fb, {0x0, 0x2}}, {0x9, 0x7, {0x2}}, {0xb, 0x7, {0x1, 0xbd}}, {0x6, 0xfffa, {0x1, 0x4}}, {0x10, 0x8, {0x3, 0x40}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0x81, 0x80, 0x0, 0x9, 0x1e, 'syz0\x00', "e1430f231eb4cae1f3be39ef919d91ce473d7edeebdbb31287227ef34f9e6526", "be38d9522c403c32049041cc926d52226baf15496265d2fb0a1b33897b3c168f", [{0xfffd, 0xfff7, {0x3, 0x8b}}, {0x81, 0x7, {0x0, 0xc}}, {0x1, 0x8, {0x3, 0x8001}}, {0x0, 0x31, {0x2, 0x1}}, {0x7, 0x0, {0x3, 0xffff0b88}}, {0xa701, 0x5, {0x2, 0x23d}}, {0x7847, 0x1, {0x3, 0x101}}, {0xf, 0xffce, {0x2, 0x4}}, {0x6, 0x2a, {0x2, 0xffffffff}}, {0x2, 0x3, {0x3, 0x8}}, {0x1, 0x6}, {0x57, 0x1000, {0x2, 0x5}}, {0xa22f, 0xe616}, {0x3, 0x1, {0x1}}, {0xe04, 0x9, {0x1, 0x3}}, {0x9, 0x7fff, {0x3, 0x8000}}, {0xe75, 0x854, {0x0, 0x3}}, {0xa000, 0x375a, {0x3, 0xffffffff}}, {0x3, 0xa000, {0x2, 0x10001}}, {0x9, 0x8000, {0x0, 0x36}}, {0x8, 0x8, {0x0, 0x2176}}, {0x3, 0x3, {0x3, 0x22}}, {0x7d, 0x8001, {0x2, 0x4}}, {0x200, 0x1, {0x1, 0x3}}, {0x422c, 0x500, {0x3, 0x10000}}, {0xd, 0x2, {0x3, 0x9}}, {0xf, 0xbb02, {0x0, 0x3ff}}, {0xfff8, 0x4, {0x2, 0x2}}, {0x6, 0x2635, {0x1, 0x1}}, {0xf69, 0x800, {0x2, 0xf6}}, {0x2, 0xff00, {0x3, 0xc27}}, {0x4, 0x81, {0x2, 0x1}}, {0x9, 0xe16, {0x0, 0x6}}, {0x401, 0xe0, {0x2, 0x9}}, {0xdad3, 0xfffd, {0x2, 0x4}}, {0xffff, 0x401, {0x1, 0x8}}, {0x80, 0xd, {0x2, 0x4}}, {0x5061, 0x579a, {0x1, 0x6}}, {0x0, 0x6, {0x2, 0x101}}, {0x4, 0xd, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0xf0, 0x2, 0x9, 0xf5a, 0x24, 'syz0\x00', "48de0cd5ca7d1aabf4a7c91ea670437847761c4b09477c7288d084bef5bcfd3d", "bfdb79e4aa40d3d68a9b07b86cdbf0d194405c9594a7e090de73cda68009717f", [{0x6, 0x2, {0x3, 0x1}}, {0x6, 0x9800, {0x1}}, {0x5, 0x1, {0x0, 0x3}}, {0x0, 0x2, {0x2, 0x6ab}}, {0x1, 0x1, {0x2, 0x1}}, {0xf, 0x0, {0x0, 0x1}}, {0xc6, 0x9, {0x1, 0x80000000}}, {0x2, 0x40, {0x0, 0x8}}, {0x5089, 0x7, {0x2, 0xfffffffe}}, {0x9, 0x3ff, {0x0, 0x9bd0ddd}}, {0x1, 0xff, {0x0, 0xffff}}, {0x2, 0xf4a, {0x1, 0x5}}, {0x6, 0x5, {0x1, 0x3}}, {0x5, 0x3, {0x0, 0x7a66}}, {0x3, 0x7, {0x0, 0xfffffff9}}, {0x4, 0x2, {0x0, 0x8}}, {0x3, 0x1, {0x0, 0x2}}, {0x9e6, 0x7ff, {0x2, 0xc0}}, {0x8, 0x0, {0x3, 0xa}}, {0x0, 0x8, {0x2, 0x4}}, {0x0, 0x6, {0x1, 0x8000}}, {0x7fff, 0x10, {0x3, 0x1}}, {0x3, 0xa, {0x1, 0xfffff0c2}}, {0x2, 0x3, {0x2, 0x5}}, {0x1000, 0xff}, {0xf801, 0x1, {0x0, 0x80000001}}, {0xffe0, 0x5, {0x2, 0x6}}, {0x7, 0xfffc, {0x2, 0xa}}, {0xff, 0x6, {0x2, 0x3}}, {0x3ff, 0x453, {0x2, 0x1}}, {0xb2e8, 0x0, {0x2, 0x6}}, {0x1, 0x4, {0x3, 0x2}}, {0x6, 0x9, {0x2, 0x7}}, {0x9, 0x8, {0x2, 0x380f}}, {0x3, 0x7, {0x2, 0x8000}}, {0x0, 0x0, {0x0, 0x9}}, {0x4, 0x69e5, {0x2, 0x9}}, {0x7, 0xa, {0x2, 0xfffffffe}}, {0x7755, 0xa120, {0x3, 0x8}}, {0x7, 0x8000, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x2}, 0x40, 0x3, 0x8, 0xb4, 0x10, 'syz0\x00', "c428de7f2f9255e558113325197382a8b777a806ea5f5564d1981e14446b73b3", "ccbf2099169abc3a9685b4696a81168c5756beb20b1a8d94b0a60606aec98a10", [{0x9dd6, 0x7fff, {0x0, 0xffffffff}}, {0x40, 0x401, {0x2, 0x1}}, {0x200, 0x4, {0x1, 0x9}}, {0x3, 0x7, {0x3, 0x5}}, {0x4, 0x456, {0x2, 0x29a77150}}, {0x101, 0xced3, {0x2, 0x3ff}}, {0x7, 0x1, {0x3, 0x7}}, {0x3, 0xffff, {0x1, 0x1}}, {0x6, 0x1, {0x3, 0x4}}, {0x1, 0x6, {0x3, 0x9}}, {0x80, 0x6, {0x2, 0xdff}}, {0xfb, 0x9, {0x0, 0x8}}, {0x0, 0x1, {0x1}}, {0xc59, 0x9, {0x0, 0xd}}, {0x1, 0x2}, {0x6, 0x10, {0x3, 0x19484e6d}}, {0x8, 0x6, {0x3, 0xda}}, {0x8000, 0xff9c, {0x3, 0x8}}, {0x1, 0x3, {0x2, 0x6}}, {0x3, 0x3, {0x3, 0x2}}, {0x4, 0xab, {0x1, 0x5}}, {0x9, 0xe5, {0x3, 0x7}}, {0xc, 0x9, {0x1, 0xffffffff}}, {0x3, 0x5, {0x2, 0x5}}, {0x6, 0x6, {0x2}}, {0xe, 0xfff7, {0x2, 0xffff0000}}, {0x2, 0xe8c9, {0x0, 0xf52}}, {0x0, 0x7fff, {0x5e367b5d8b518db9, 0x9}}, {0xffff, 0x2, {0x2, 0xefa}}, {0x7, 0x400, {0x2, 0x2}}, {0xd4, 0x6, {0x3, 0x1}}, {0x8001, 0x53, {0x1, 0x5}}, {0x8, 0x17, {0x0, 0xffff7fff}}, {0x6, 0x0, {0x0, 0x7}}, {0x6, 0x0, {0x2, 0x1}}, {0x2f37, 0xfe4, {0x0, 0x9}}, {0x7, 0x4, {0x1, 0x1d}}, {0x800, 0x9, {0x3, 0x8}}, {0x3fa5, 0xd4d6, {0x3, 0x33}}, {0x4, 0x2, {0x2, 0xf}}]}}}, {{0x254, 0x1, {{0x0, 0x3ff}, 0x4, 0x0, 0x4, 0x7f, 0x1e, 'syz1\x00', "55dd3fb4c31946fce15947bbacceac133c013f38551a9d69d8ab866ffd718057", "0438534c96a90b65f9eab352a5f97e5580336022f3bafcc9cbe14aa5a803497c", [{0x800, 0x1, {0x1, 0x1}}, {0xff, 0x0, {0x0, 0xe7}}, {0x2, 0x1, {0x2, 0x1b9}}, {0x7ab4, 0x7, {0x0, 0xffffffff}}, {0x5, 0x8, {0x0, 0x7c674a3d}}, {0x73, 0x3, {0x1, 0x7}}, {0xc16, 0x8001, {0x2, 0x6}}, {0x5, 0x1, {0x1, 0x80000001}}, {0xb4, 0x11f9, {0x1, 0x3}}, {0x2, 0x2, {0x0, 0x8}}, {0x7, 0x2d5b, {0x3, 0x8}}, {0x8001, 0x3ff, {0x0, 0x3}}, {0x3, 0x3, {0x2, 0x2}}, {0x100, 0x3, {0x1, 0xa}}, {0xffff, 0x0, {0x1, 0x9}}, {0x7859, 0x0, {0x0, 0x6156}}, {0x551, 0x7, {0x1, 0x7}}, {0x7ff, 0x1, {0x1, 0x12db}}, {0x1, 0x0, {0x1, 0x4}}, {0xff, 0xfff, {0x1, 0x3}}, {0x8, 0x0, {0x2, 0x8}}, {0x40, 0x2, {0x1, 0x1}}, {0x7f63, 0xd, {0x2, 0xf}}, {0x99f, 0x1, {0x2, 0x100}}, {0x6ff6, 0x80, {0x0, 0x80}}, {0x90, 0x0, {0x1, 0x19}}, {0x26e, 0x6, {0x1, 0x401}}, {0x5, 0x400, {0x1, 0x4}}, {0x3, 0x2, {0x3}}, {0x400, 0x0, {0x1, 0xff6a}}, {0x6, 0x4, {0x2, 0x7a0ab14e}}, {0x2, 0xffff, {0x0, 0x8751}}, {0x9, 0x9, {0x3, 0x45}}, {0x5, 0x6, {0x2, 0x7ff}}, {0x9, 0x9000, {0x0, 0x6}}, {0x400, 0x0, {0x0, 0x17dc}}, {0x8, 0x2, {0x1, 0xfffffff2}}, {0xff, 0x8, {0x0, 0x9}}, {0x4, 0x800, {0x1, 0x8}}, {0x4, 0xff0, {0x2, 0x1}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x4080}, 0x24040004)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f0000000140))
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]})
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r6, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="f37481d90eeaead391345b4da9d27e24c9c670da3afc5c00000000007fffffff00"/50, 0x32}, {&(0x7f0000000140)="ead5e96719a44591801f33", 0xff02}, {&(0x7f0000000180)="f3f97053495b072215aee864193557c0dabdd253711d5ed9b131c5abd8796e5759ab1f639211e68e24bf4471b6ab1429b165c7248cded82bfb4a3f48e8d0", 0x3e}], 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c9301ffffffff0000000000000000000000000000000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aae0007ba019354c4c4166000200000000"], 0x50}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="c1ad061c5d914eadd95de7fb63eb7b0306d91c25f3fba6c97eda8ade2420dfe1fe0f5c7a01d724be33a44f1cd52028110d8f7dd4b3421a3fe4b2066d179f938ba15c3956e1aaad35035bcde7b90ed59ee2de06c8a4af3de95bda", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000480)="f41fa963edcd5e2a5d", 0x9}, {&(0x7f00000004c0)="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", 0x4c6}], 0x2}}, {{0x0, 0x0, &(0x7f0000004240), 0x300}}], 0x4, 0xc080)
ioctl$TCSETSF(r5, 0x5404, &(0x7f00000004c0)={0xffffffff, 0xc9a, 0x80080000, 0x6, 0xe, '\t\x00'})
syz_open_dev$usbfs(&(0x7f00000000c0), 0x606202f6, 0x200401)
ioctl$TCSETS(r5, 0x5402, &(0x7f0000000040)={0xe6c, 0x2, 0xffff1980, 0xa, 0x6, "d8ad0e98c775e49ce1c41b6500a138b8ccdb17"})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="000000004000000014001280090001007663616e000000000400028008004040a66398"], 0x3c}}, 0x0)

2.042065077s ago: executing program 5 (id=3207):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/228, 0xe4}], 0x1, 0xfffffffd, 0xe1ad, 0x5)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x76, 0xcf, 0x1c, 0x40, 0x1110, 0x9001, 0x94cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe2, 0x1, 0x0, 0x73, 0x65, 0xc9, 0x1}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)

1.822833843s ago: executing program 4 (id=3208):
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000100001042cbd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2410000000000000280012800b00010067656e65766500001800028014000700ff"], 0x5c}}, 0x2000000)

1.673701136s ago: executing program 4 (id=3209):
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async)
r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r0, &(0x7f0000000000)="c0effb32133c92b314ed48adf77babab59539757a8900c803836ff336c6726dce413d7e353b7a0937aafa6adda106bb115cd9212ef901d06635ba3c70a3cbbc152b76d03ea85c824ea38e77a443b5cd45e38dc2515c9098b91e22d4f983a19459f20019dabb954f52c572611d96e94fd7840cf174f9408a61ba468b701fb6a70bffe39fead155a9df480cea413d1691a", 0x90)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f00000000c0)=0x7, 0x4)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x82800, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, <r3=>0x0})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r3, 0x0, <r4=>0xffffffffffffffff})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000200), 0x4)
r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x1ff)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x4, 0x40}) (async)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r2, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x4, 0x40})
sendmsg$AUDIT_TTY_SET(r6, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x18, 0x3f9, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
close(r1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000001500)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/4096, 0x1000, 0x1, &(0x7f0000001440)=""/184, 0xb8}, &(0x7f0000001540)=0x40)
ioctl$TIOCL_GETSHIFTSTATE(r2, 0x541c, &(0x7f0000001580)={0x6, 0x15})
syz_genetlink_get_family_id$devlink(&(0x7f0000001600), r4) (async)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001600), r4)
sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f00000017c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x128, r7, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20040080}, 0x1)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0xefe0852a7fd0d29d}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
ioctl$BLKOPENZONE(r6, 0x40101286, &(0x7f0000001900)={0x6, 0x7ff})
ioctl$USBDEVFS_CONNECTINFO(r6, 0x40085511, &(0x7f0000001940))
openat$pidfd(0xffffffffffffff9c, &(0x7f0000001980), 0x200c00, 0x0) (async)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000001980), 0x200c00, 0x0)
write$6lowpan_control(r6, &(0x7f00000019c0)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) (async)
write$6lowpan_control(r6, &(0x7f00000019c0)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e)
ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000001a00)) (async)
ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000001a00))
ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000001a40)={0xb43f, "ee9ecadcad1ddfa51bf2e02207bb86871a83fa764260cf44c2aaa2b20fbc8527", 0x0, 0x400, 0x1dd, 0x6, 0x4, 0x0, 0x1, 0xfffffffe})
sendmsg$NFT_BATCH(r6, &(0x7f0000001b80)={&(0x7f0000001ac0), 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xbadaab669224653f}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001bc0)=0x1, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001bc0)=0x1, 0x4)
socket$inet_smc(0x2b, 0x1, 0x0)
fsetxattr(r6, &(0x7f0000001c00)=@random={'system.', '/dev/iommu\x00'}, &(0x7f0000001c40)='\'y@\'-\xd1/:\x00', 0x9, 0x1)
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451) (async)
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451)

1.525093849s ago: executing program 4 (id=3210):
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = userfaultfd(0x1)
unshare(0x6a040000)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x6, 0x8031, 0xffffffffffffffff, 0x481d4000) (async)
mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x6, 0x8031, 0xffffffffffffffff, 0x481d4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x20000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0x20000)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r1=>0xffffffffffffffff})
getsockopt(r1, 0x1, 0x9, &(0x7f00000023c0)=""/4096, &(0x7f00000001c0)=0x1000)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040))
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2)
syz_open_dev$sg(0x0, 0x0, 0x8002) (async)
syz_open_dev$sg(0x0, 0x0, 0x8002)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1})
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19) (async)
madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x19)
syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000080)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345})

1.524258853s ago: executing program 6 (id=3211):
r0 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x3e)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = open(0x0, 0x0, 0x12e)
fcntl$notify(r1, 0x402, 0x80000004) (async)
fcntl$notify(r1, 0x402, 0x80000004)
recvfrom$l2tp6(r3, 0x0, 0x0, 0x40, 0x0, 0x0) (async)
recvfrom$l2tp6(r3, 0x0, 0x0, 0x40, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20084084)
clock_gettime(0x0, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4) (async)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4)
socket(0x1e, 0x5, 0x8000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, 0xffffffffffffffff, 0x3000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
futimesat(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, 0x0) (async)
ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b48, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x1ff, 0x0, 0x4}, 0x0)
syz_usb_connect(0x4, 0x5f, &(0x7f0000000040)=ANY=[], 0x0) (async)
syz_usb_connect(0x4, 0x5f, &(0x7f0000000040)=ANY=[], 0x0)
openat$vimc2(0xffffff9c, &(0x7f0000003d00), 0x2, 0x0) (async)
openat$vimc2(0xffffff9c, &(0x7f0000003d00), 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xff5f)
listen(r0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

1.324201514s ago: executing program 6 (id=3212):
r0 = syz_open_pts(0xffffffffffffffff, 0x44001)
ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000))
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000040), {[{{@arp={@empty, @local, 0xffffffff, 0xffffff00, 0xf, 0x3, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff]}}, 0xfffa, 0x4d, 0x9, 0x3ae8, 0x8001, 0x5, 'ip6tnl0\x00', 'gretap0\x00', {0xff}, {}, 0x0, 0x1b4}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 0xf, 0xa, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x80, 0x0, 0x4, 0x7fff, 0x6, 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x285}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @broadcast, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (async)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x1d0, 0xe8, 0x2e0, 0x2e0, 0x2e0, 0x4, &(0x7f0000000040), {[{{@arp={@empty, @local, 0xffffffff, 0xffffff00, 0xf, 0x3, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0x0, 0xff, 0x0, 0xff]}}, 0xfffa, 0x4d, 0x9, 0x3ae8, 0x8001, 0x5, 'ip6tnl0\x00', 'gretap0\x00', {0xff}, {}, 0x0, 0x1b4}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x1}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0x0, 0xf, 0xa, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x80, 0x0, 0x4, 0x7fff, 0x6, 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {0xff}, 0x0, 0x285}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @local, @broadcast, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0) (async)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0), 0x10000, 0x0)
ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000500)={0x1, "afdd11938b1d4f89f90b41d8728de4ff15f850edec3cc6a8bf8f49862f348ea2", 0x800, 0x8000, 0x7, 0x1, 0x5}) (async)
ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000500)={0x1, "afdd11938b1d4f89f90b41d8728de4ff15f850edec3cc6a8bf8f49862f348ea2", 0x800, 0x8000, 0x7, 0x1, 0x5})
setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000600)={0xab1b, 0xbc, 0x2, 0x2}, 0x10)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000640)) (async)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000640))
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18, <r5=>r2}, './file0\x00'})
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000006c0)={0x62, @remote, 0x4e24, 0x1, 'dh\x00', 0x18, 0x2, 0x26}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000006c0)={0x62, @remote, 0x4e24, 0x1, 'dh\x00', 0x18, 0x2, 0x26}, 0x2c)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf742, 0x0, 0x0, 0x0, 0xb}, [@ldst={0x3, 0x0, 0x4, 0x2, 0x2, 0x0, 0x1}]}, &(0x7f0000000740)='GPL\x00', 0x400000, 0x5a, &(0x7f0000000780)=""/90, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x279fe, r5, 0x5, &(0x7f0000000840)=[r3, r3, r5, r3, r5], &(0x7f0000000880)=[{0x3, 0x3, 0x9, 0x2}, {0x0, 0x5, 0xe, 0x4}, {0x3, 0x1, 0xb, 0x5}, {0x3, 0x1}, {0x2, 0x3, 0xf, 0xb}], 0x10, 0x2}, 0x94) (async)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf742, 0x0, 0x0, 0x0, 0xb}, [@ldst={0x3, 0x0, 0x4, 0x2, 0x2, 0x0, 0x1}]}, &(0x7f0000000740)='GPL\x00', 0x400000, 0x5a, &(0x7f0000000780)=""/90, 0x40f00, 0x5, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000800)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x279fe, r5, 0x5, &(0x7f0000000840)=[r3, r3, r5, r3, r5], &(0x7f0000000880)=[{0x3, 0x3, 0x9, 0x2}, {0x0, 0x5, 0xe, 0x4}, {0x3, 0x1, 0xb, 0x5}, {0x3, 0x1}, {0x2, 0x3, 0xf, 0xb}], 0x10, 0x2}, 0x94)
cachestat(r6, &(0x7f00000009c0)={0xffffffffffffff26, 0x5678}, &(0x7f0000000a00), 0x0) (async)
cachestat(r6, &(0x7f00000009c0)={0xffffffffffffff26, 0x5678}, &(0x7f0000000a00), 0x0)
lstat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
keyctl$get_persistent(0x16, r7, r4)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000b00)={0x0, 0x1, {<r8=>0xffffffffffffffff}, {r7}, 0x920, 0x100})
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000b40)={0xffffffff, 0x401, {r8}, {r7}, 0x4, 0x80000000}) (async)
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000b40)={0xffffffff, 0x401, {<r9=>r8}, {r7}, 0x4, 0x80000000})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000fc0)={&(0x7f0000000b80)={{@host, 0x8f}, {@any, 0x40}, 0x400, "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"}, 0x418, 0x3})
open$dir(&(0x7f0000001000)='.\x00', 0x280040, 0x28) (async)
r10 = open$dir(&(0x7f0000001000)='.\x00', 0x280040, 0x28)
mknodat$loop(r10, &(0x7f0000001040)='./file0\x00', 0x0, 0x1)
ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000001080)={0x5, 0x380, 0x80})
syz_open_dev$sndpcmc(&(0x7f00000010c0), 0x77b, 0x0)
ioprio_set$uid(0x0, 0xee00, 0x2004) (async)
ioprio_set$uid(0x0, 0xee00, 0x2004)
socket$inet_sctp(0x2, 0x1, 0x84)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001140), 0x4002, 0x0)
fcntl$lock(r5, 0x25, &(0x7f0000001180)={0x2, 0x2, 0x2, 0x7fffffffffffffff, r9})

1.244998257s ago: executing program 6 (id=3213):
eventfd2(0x6, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x54c, 0x4, 0x3, 0x3, 0xc, 0x6, 0x7}, 0x1c)
recvfrom(r1, &(0x7f0000000040)=""/18, 0x12, 0x6667b9fa4a4ed82, 0x0, 0x0)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4)
sendto$inet(r0, &(0x7f0000000040)="0400", 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280))
io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r5, 0x3517, 0x173d, 0x42, 0x0, 0x0)

1.020108847s ago: executing program 2 (id=3214):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x20202, 0xac)
sendfile(r0, r0, 0x0, 0x68) (async, rerun: 32)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x17ef, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0x10, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x4}}}}}]}}]}}, 0x0) (rerun: 32)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000e80)={0x24, 0x0, 0x0, &(0x7f0000000e00)={0x0, 0x22, 0xb, {[@local=@item_012={0x2, 0x2, 0x3, "4399"}, @local=@item_012={0x2, 0x2, 0x7, "b8e9"}, @global=@item_4={0x3, 0x1, 0x1, "d03408ac"}]}}, 0x0}, 0x0) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) (async)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000180)=""/154, &(0x7f0000000100)=0x9a) (async)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100085010000000000000000000", 0x58}], 0x1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000240)={0x6, 0x7, 0x7, 0xc, 0x4, 0x34})

835.804249ms ago: executing program 1 (id=3215):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce0702000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e73", 0xc, 0xfffffffffffffffe)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x20048000)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) (async)
r3 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$reject(0x13, r1, 0x7, 0x1, r3) (async)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
socket$pppoe(0x18, 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

614.541196ms ago: executing program 5 (id=3216):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000004000900041122000b00000001"], 0x48)
r2 = socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000440)={0x0, 0x496b}, 0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4affffff00010101000000000000000001000000d8f84ebf07c8c879dddb4a6de791364b71ad7112bee1abef57f871331f9d1bf948ebf87de18d342c37ea53054a37217cfe25bf9e85d3365c0deed45ad225d6863ba97d95a2de695a065d4299e80fc03da67cd9bfc256e9c427ba60fc2a1e"], 0x24}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32, @ANYBLOB="0000002c7f008b5ffef99adbbf79a1d65c10b9f188bbc90000000000", @ANYRESHEX=r0, @ANYRES64=r1, @ANYBLOB='\x00'/28], 0x50)
mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r7, 0xffff8000)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0xfffc, 0x0, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000002c0)="fb03", 0x2}], 0x1}}], 0x1, 0x4400c800)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000190000012bbd700004004000000000000000000000000000000000012001000000000000000000000000000200000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000020080000000000000000010000000000000010000a002abd70002ebd700008000000"], 0xc8}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendto$inet6(r8, 0x0, 0x0, 0x3b40, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x8910, 0x0, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
r10 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r10, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f00000004c0)="143ed35eb9f519442d8e244fb24fbe23d81042a131fc1ad5ebc53e356dc1b7a737f0e35214f01c152f83f548a6458c4edb194118907429e0dede948ab83303836552", &(0x7f0000000640)="327844cd01976300a518619d1138a6bdd9e083ee9c4965337eed8316a7bd66299b5b27be85ee939cdb02dddae768c0c59c28ccfd4a8e46bcfd717f715a74e8b50d97254f89a4f4adb60b96f19509471f312f4cab3f0855d96fc0374b350dcb9fb9cef26f0400fdbd38a7726afc4b21561789902b494b702d5f133adbd395609bca5a4c6d5b46a0740f886cd9f9935278a46899de7a6dd85e66010b6862afc9dbc47de2eb816df387c14f0ff763bb3bdc03b95ddf4910fe058040caba3762305bf137cf8a3dac061c6b9a4f5acb6919d79371c0809e0dedef87dc7da25e01dedd873024c858d4a632c2", 0x0, r1}, 0x38)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r1}, 0x38)

0s ago: executing program 1 (id=3217):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r2, &(0x7f0000000440)="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", 0x1a9, 0x4000, &(0x7f0000000400)={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
sendto$inet6(r2, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r2, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0xfff, 0xa}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0x1}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x6, 0x40, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0xb, 0x7, 0x3, 0x2, 0x4000005, 0x5}, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000000)='./file0\x00', 0xa0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xb, 0x0, 0xb4c, 0x9, 0x8, 0x200, 0x400003}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
keyctl$read(0x20, 0x0, 0x0, 0x0)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000080)={0xb, @raw_data="4355303869080408cd249ec7efb301198680b5be6e23aeee037757247f8e7cf0314d80d8580d64e14364154a0a387d927cd57e123ba1efbe01652a5f640684fa5e893e897ccc3074465e163176e53cd24bf2af34498cc63505008850dd4c66c27b1a79895f7fd2f1e0808bce73abcfc38c2403597d41733d28f53f05bb06b0d4f2abb107a766aeb4184284d3088a97541741bb90239de08950c97b7a438137b639689d695fd868a1a509524b4a3a3d3e5afbd859c1ec4e282a50c8b1a2d85bdb653a9ce0918200"})
socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
accept4(0xffffffffffffffff, &(0x7f00000001c0)=@x25={0x9, @remote}, 0x0, 0x80800)

kernel console output (not intermixed with test programs):

r after parsing attributes in process `syz.1.2753'.
[  875.790497][  T979] usb 3-1: config 0 has no interface number 0
[  875.823951][  T979] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  875.867211][  T979] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  875.925270][  T979] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  875.935369][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.988315][  T979] usb 3-1: Product: syz
[  876.002968][  T979] usb 3-1: Manufacturer: syz
[  876.012914][  T979] usb 3-1: SerialNumber: syz
[  876.030248][  T979] usb 3-1: config 0 descriptor??
[  876.042405][T17236] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  876.132190][  T979] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  876.223415][  T979] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  876.661964][ T5907] usb 3-1: USB disconnect, device number 26
[  876.721757][ T5907] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  876.798737][ T5907] cyberjack 3-1:0.69: device disconnected
[  877.215431][ T5907] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  877.321322][   T30] audit: type=1326 audit(1753349745.402:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f38e9a9 code=0x7ffc0000
[  877.380307][   T30] audit: type=1326 audit(1753349745.402:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f38e9a9 code=0x7ffc0000
[  877.399947][ T5907] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  877.466582][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  877.475240][   T30] audit: type=1326 audit(1753349745.432:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7ff40f38e9a9 code=0x7ffc0000
[  877.481612][ T5907] usb 3-1: Product: syz
[  877.511345][ T5907] usb 3-1: Manufacturer: syz
[  877.516488][ T5907] usb 3-1: SerialNumber: syz
[  877.534751][ T5907] usb 3-1: config 0 descriptor??
[  877.539964][   T30] audit: type=1326 audit(1753349745.432:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f38e9a9 code=0x7ffc0000
[  877.592616][ T5907] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  877.651961][   T30] audit: type=1326 audit(1753349745.432:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff40f38e9a9 code=0x7ffc0000
[  877.703409][   T30] audit: type=1326 audit(1753349745.432:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f38e9a9 code=0x7ffc0000
[  877.732464][   T30] audit: type=1326 audit(1753349745.432:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f38e9a9 code=0x7ffc0000
[  877.762468][   T30] audit: type=1326 audit(1753349745.432:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff40f38e9a9 code=0x7ffc0000
[  877.791013][   T30] audit: type=1326 audit(1753349745.432:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17291 comm="syz.1.2761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff40f38e9a9 code=0x7ffc0000
[  877.986804][ T5992] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  878.144258][ T5992] usb 7-1: Using ep0 maxpacket: 8
[  878.151815][ T5992] usb 7-1: config 0 has an invalid interface number: 52 but max is 0
[  878.160385][ T5992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  878.223362][ T5992] usb 7-1: config 0 has no interface number 0
[  878.307652][T17283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  878.312373][ T5992] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  878.336573][ T5992] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  878.349125][ T5992] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  878.350376][T17283] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  878.362135][ T5992] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  878.396947][ T5992] usb 7-1: config 0 interface 52 has no altsetting 0
[  878.403950][ T5992] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  878.430169][ T5907] gspca_sunplus: reg_r err -71
[  878.444254][ T5907] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  878.453620][ T5992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  878.506063][ T5907] usb 3-1: USB disconnect, device number 27
[  878.516977][ T5992] usb 7-1: config 0 descriptor??
[  878.762245][ T5992] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.52/input/input102
[  878.963319][T17302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  878.976284][T17302] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  879.375128][T15741] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  879.567138][T15741] usb 3-1: Using ep0 maxpacket: 32
[  879.586343][T15741] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  879.595790][T15741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.611770][T15741] usb 3-1: config 0 descriptor??
[  879.714742][  T979] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  879.842893][T15741] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  879.864022][T15741] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  879.904235][  T979] usb 6-1: Using ep0 maxpacket: 16
[  879.914582][  T979] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  879.925546][T15741] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  879.932822][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.946512][T15741] usb 3-1: media controller created
[  879.974207][  T979] usb 6-1: Product: syz
[  879.978617][  T979] usb 6-1: Manufacturer: syz
[  879.988215][  T979] usb 6-1: SerialNumber: syz
[  880.015446][  T979] usb 6-1: config 0 descriptor??
[  880.034561][T15741] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  880.282096][  T979] usb 6-1: ignoring: not an USB2CAN converter
[  880.284224][ T5907] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  880.465103][ T5907] usb 2-1: too many configurations: 36, using maximum allowed: 8
[  880.483308][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  880.506476][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.525501][ T5907] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  880.545303][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0
[  880.566519][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  880.590719][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.626455][ T5907] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  880.658268][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0
[  880.672252][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  880.687892][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.709171][ T5907] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  880.768679][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0
[  880.777237][ T5992] usb 7-1: USB disconnect, device number 8
[  880.808936][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  880.840155][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  880.872913][ T5907] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  880.932838][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0
[  880.962539][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  880.998007][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  881.027238][ T5907] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  881.058592][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0
[  881.071190][T17350] input: syz0 as /devices/virtual/input/input104
[  881.080684][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  881.121207][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  881.132696][T17353] fuse: Invalid gid '00000000000000000003'
[  881.162859][ T5907] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  881.188943][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0
[  881.199780][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  881.224692][T15741] az6027: usb out operation failed. (-71)
[  881.228292][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  881.245660][ T5907] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  881.262733][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0
[  881.279056][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10
[  881.307626][T15741] az6027: usb out operation failed. (-71)
[  881.320559][ T5907] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  881.325673][T15741] stb0899_attach: Driver disabled by Kconfig
[  881.352685][ T5907] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  881.364156][T15741] az6027: no front-end attached
[  881.364156][T15741] 
[  881.387126][T15741] az6027: usb out operation failed. (-71)
[  881.393941][T15741] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  881.403769][ T5907] usb 2-1: config 0 interface 0 has no altsetting 0
[  881.419868][T15741] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input105
[  881.439056][ T5907] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00
[  881.460233][ T5907] usb 2-1: New USB device strings: Mfr=244, Product=177, SerialNumber=14
[  881.478226][ T5907] usb 2-1: Product: syz
[  881.489037][T15741] dvb-usb: schedule remote query interval to 400 msecs.
[  881.514535][T15741] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  881.540850][T15741] usb 3-1: USB disconnect, device number 28
[  881.578638][ T5907] usb 2-1: Manufacturer: syz
[  881.588055][ T5907] usb 2-1: SerialNumber: syz
[  881.613393][ T5907] usb 2-1: config 0 descriptor??
[  881.730412][T15741] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  882.490649][ T5992] usb 6-1: USB disconnect, device number 78
[  882.977364][T17381] syzkaller0: entered promiscuous mode
[  883.000075][T17381] syzkaller0: entered allmulticast mode
[  883.640737][T17389] netlink: 79 bytes leftover after parsing attributes in process `syz.2.2781'.
[  883.729807][ T5992] IPVS: starting estimator thread 0...
[  883.828236][T17396] xt_SECMARK: invalid mode: 2
[  883.864363][T17394] IPVS: using max 26 ests per chain, 62400 per kthread
[  884.474254][ T5992] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  884.575018][ T5907] usbhid 2-1:0.0: can't add hid device: -71
[  884.581068][ T5907] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  884.670912][ T5907] usb 2-1: USB disconnect, device number 70
[  884.677052][ T5992] usb 7-1: Using ep0 maxpacket: 8
[  884.713481][ T5992] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  884.755982][ T5992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.808775][ T5992] usb 7-1: config 0 descriptor??
[  885.021058][ T5992] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  885.284522][T15741] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  885.464720][T15741] usb 6-1: Using ep0 maxpacket: 16
[  885.486324][T15741] usb 6-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  885.511207][T15741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  885.561089][T15741] usb 6-1: Product: syz
[  885.574178][T15741] usb 6-1: Manufacturer: syz
[  885.584394][T15741] usb 6-1: SerialNumber: syz
[  885.607572][T15741] usb 6-1: config 0 descriptor??
[  885.712565][T17426] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  885.937192][T15741] usb 6-1: ignoring: not an USB2CAN converter
[  886.351378][T17440] xt_CT: You must specify a L4 protocol and not use inversions on it
[  887.293786][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'.
[  888.118725][ T1209] usb 6-1: USB disconnect, device number 79
[  888.196868][T17478] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2800'.
[  888.236010][T17478] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2800'.
[  888.253028][ T5992] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  888.293317][ T5992] asix 7-1:0.0: probe with driver asix failed with error -71
[  888.355496][T17486] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2801'.
[  888.374520][ T5992] usb 7-1: USB disconnect, device number 9
[  888.715976][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2805'.
[  888.776512][T17503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  888.879345][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2808'.
[  888.991007][T17521] xt_SECMARK: invalid mode: 2
[  889.184433][ T5953] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  889.338166][ T5953] usb 6-1: device descriptor read/64, error -71
[  889.644216][ T5953] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  889.816192][ T5953] usb 6-1: device descriptor read/64, error -71
[  889.864705][ T5914] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  889.944548][ T5953] usb usb6-port1: attempt power cycle
[  890.029091][ T5914] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  890.038657][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  890.094369][ T5914] usb 2-1: Product: syz
[  890.103232][ T5914] usb 2-1: Manufacturer: syz
[  890.118953][ T5914] usb 2-1: SerialNumber: syz
[  890.154364][ T5914] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  890.192594][ T5992] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  890.334370][ T5953] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  890.370698][ T5953] usb 6-1: device descriptor read/8, error -71
[  890.615918][ T5953] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  890.657306][ T5953] usb 6-1: device descriptor read/8, error -71
[  890.774863][ T5953] usb usb6-port1: unable to enumerate USB device
[  890.807676][T17532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  890.819117][T17532] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  890.950357][T15741] usb 2-1: USB disconnect, device number 71
[  891.285593][ T5992] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  891.313141][ T5992] ath9k_htc: Failed to initialize the device
[  891.379976][T15741] usb 2-1: ath9k_htc: USB layer deinitialized
[  892.124495][T17577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2815'.
[  892.454172][T15741] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  892.474202][ T5953] usb 6-1: new full-speed USB device number 84 using dummy_hcd
[  892.645105][T15741] usb 3-1: device descriptor read/64, error -71
[  892.659898][ T5953] usb 6-1: device descriptor read/64, error -71
[  892.884223][T15741] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  892.904369][ T5953] usb 6-1: new full-speed USB device number 85 using dummy_hcd
[  893.074235][T15741] usb 3-1: device descriptor read/64, error -71
[  893.121385][ T5953] usb 6-1: device descriptor read/64, error -71
[  893.185605][T15741] usb usb3-port1: attempt power cycle
[  893.234767][ T5953] usb usb6-port1: attempt power cycle
[  893.544285][T15741] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  893.586761][T15741] usb 3-1: device descriptor read/8, error -71
[  893.614303][ T5953] usb 6-1: new full-speed USB device number 86 using dummy_hcd
[  893.655107][ T5953] usb 6-1: device descriptor read/8, error -71
[  893.824265][T15741] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  893.845194][T15741] usb 3-1: device descriptor read/8, error -71
[  893.894332][ T5953] usb 6-1: new full-speed USB device number 87 using dummy_hcd
[  893.915061][ T5953] usb 6-1: device descriptor read/8, error -71
[  893.954921][T15741] usb usb3-port1: unable to enumerate USB device
[  894.014480][T17613] misc userio: Begin command sent, but we're already running
[  894.028589][ T5953] usb usb6-port1: unable to enumerate USB device
[  894.274519][ T5953] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  894.437213][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.448934][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.459239][ T5953] usb 7-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.00
[  894.472101][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.487296][ T5953] usb 7-1: config 0 descriptor??
[  895.070790][ T5953] itetech 0003:06CB:2968.0031: hidraw0: USB HID v0.00 Device [HID 06cb:2968] on usb-dummy_hcd.6-1/input0
[  895.131873][T17625] FAULT_INJECTION: forcing a failure.
[  895.131873][T17625] name failslab, interval 1, probability 0, space 0, times 0
[  895.148076][T17625] CPU: 1 UID: 0 PID: 17625 Comm: syz.5.2826 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) 
[  895.148107][T17625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  895.148122][T17625] Call Trace:
[  895.148131][T17625]  <TASK>
[  895.148141][T17625]  dump_stack_lvl+0x189/0x250
[  895.148176][T17625]  ? __pfx____ratelimit+0x10/0x10
[  895.148200][T17625]  ? __pfx_dump_stack_lvl+0x10/0x10
[  895.148227][T17625]  ? __pfx__printk+0x10/0x10
[  895.148262][T17625]  ? __pfx___might_resched+0x10/0x10
[  895.148287][T17625]  ? fs_reclaim_acquire+0x7d/0x100
[  895.148313][T17625]  should_fail_ex+0x414/0x560
[  895.148341][T17625]  should_failslab+0xa8/0x100
[  895.148376][T17625]  __kmalloc_cache_noprof+0x70/0x3d0
[  895.148405][T17625]  ? rtm_new_nexthop+0x28c2/0x7eb0
[  895.148432][T17625]  rtm_new_nexthop+0x28c2/0x7eb0
[  895.148454][T17625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.148494][T17625]  ? __pfx_rtm_new_nexthop+0x10/0x10
[  895.148528][T17625]  ? kasan_quarantine_put+0xdd/0x220
[  895.148555][T17625]  ? lockdep_hardirqs_on+0x9c/0x150
[  895.148585][T17625]  ? nlmon_xmit+0xb0/0x100
[  895.148610][T17625]  ? kmem_cache_free+0x18f/0x400
[  895.148647][T17625]  ? __local_bh_enable_ip+0x12d/0x1c0
[  895.148672][T17625]  ? lockdep_hardirqs_on+0x9c/0x150
[  895.148697][T17625]  ? __local_bh_enable_ip+0x12d/0x1c0
[  895.148721][T17625]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  895.148766][T17625]  ? __lock_acquire+0xab9/0xd20
[  895.148816][T17625]  ? __pfx_rtm_new_nexthop+0x10/0x10
[  895.148836][T17625]  rtnetlink_rcv_msg+0x7cc/0xb70
[  895.148870][T17625]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  895.148897][T17625]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  895.148923][T17625]  ? ref_tracker_free+0x63a/0x7d0
[  895.148944][T17625]  ? __copy_skb_header+0xa7/0x550
[  895.148967][T17625]  ? __pfx_ref_tracker_free+0x10/0x10
[  895.149004][T17625]  netlink_rcv_skb+0x205/0x470
[  895.149035][T17625]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  895.149063][T17625]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  895.149114][T17625]  ? netlink_deliver_tap+0x2e/0x1b0
[  895.149142][T17625]  ? netlink_deliver_tap+0x2e/0x1b0
[  895.149175][T17625]  netlink_unicast+0x759/0x8e0
[  895.149215][T17625]  netlink_sendmsg+0x805/0xb30
[  895.149256][T17625]  ? __pfx_netlink_sendmsg+0x10/0x10
[  895.149291][T17625]  ? aa_sock_msg_perm+0x94/0x160
[  895.149316][T17625]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  895.149340][T17625]  ? __pfx_netlink_sendmsg+0x10/0x10
[  895.149371][T17625]  __sock_sendmsg+0x219/0x270
[  895.149399][T17625]  ____sys_sendmsg+0x505/0x830
[  895.149426][T17625]  ? __pfx_____sys_sendmsg+0x10/0x10
[  895.149456][T17625]  ? import_iovec+0x74/0xa0
[  895.149489][T17625]  ___sys_sendmsg+0x21f/0x2a0
[  895.149513][T17625]  ? __pfx____sys_sendmsg+0x10/0x10
[  895.149570][T17625]  ? __fget_files+0x2a/0x420
[  895.149589][T17625]  ? __fget_files+0x3a0/0x420
[  895.149618][T17625]  __x64_sys_sendmsg+0x19b/0x260
[  895.149642][T17625]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  895.149664][T17625]  ? __pfx_ksys_write+0x10/0x10
[  895.149683][T17625]  ? rcu_is_watching+0x15/0xb0
[  895.149705][T17625]  ? do_syscall_64+0xbe/0x3b0
[  895.149726][T17625]  do_syscall_64+0xfa/0x3b0
[  895.149742][T17625]  ? lockdep_hardirqs_on+0x9c/0x150
[  895.149759][T17625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.149774][T17625]  ? clear_bhb_loop+0x60/0xb0
[  895.149792][T17625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.149807][T17625] RIP: 0033:0x7f606638e9a9
[  895.149823][T17625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  895.149836][T17625] RSP: 002b:00007f6067284038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  895.149854][T17625] RAX: ffffffffffffffda RBX: 00007f60665b5fa0 RCX: 00007f606638e9a9
[  895.149865][T17625] RDX: 0000000000044010 RSI: 0000200000000100 RDI: 0000000000000003
[  895.149876][T17625] RBP: 00007f6067284090 R08: 0000000000000000 R09: 0000000000000000
[  895.149885][T17625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  895.149894][T17625] R13: 0000000000000000 R14: 00007f60665b5fa0 R15: 00007f60666dfa28
[  895.149916][T17625]  </TASK>
[  896.254227][ T5953] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[  896.414451][ T5953] usb 3-1: Invalid ep0 maxpacket: 32
[  896.544341][ T5953] usb 3-1: new low-speed USB device number 34 using dummy_hcd
[  896.744233][ T5953] usb 3-1: Invalid ep0 maxpacket: 32
[  896.750242][ T5953] usb usb3-port1: attempt power cycle
[  897.035836][  T979] usb 7-1: USB disconnect, device number 10
[  897.144328][ T5953] usb 3-1: new low-speed USB device number 35 using dummy_hcd
[  897.185102][ T5953] usb 3-1: Invalid ep0 maxpacket: 32
[  897.278999][T17649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2833'.
[  897.325780][ T5953] usb 3-1: new low-speed USB device number 36 using dummy_hcd
[  897.378054][ T5953] usb 3-1: Invalid ep0 maxpacket: 32
[  897.387597][ T5953] usb usb3-port1: unable to enumerate USB device
[  897.779232][ T5992] usb 6-1: new high-speed USB device number 88 using dummy_hcd
[  897.934652][ T5992] usb 6-1: Using ep0 maxpacket: 16
[  897.978764][ T5992] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  898.070111][ T5992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  898.463297][ T5992] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  898.500314][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.508952][ T5992] usb 6-1: Product: syz
[  898.513261][ T5992] usb 6-1: Manufacturer: syz
[  898.520636][ T5992] usb 6-1: SerialNumber: syz
[  898.622119][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  898.632156][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  898.641326][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  898.651562][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  898.662516][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  899.055094][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2840'.
[  899.537467][ T5914] usb 3-1: new full-speed USB device number 37 using dummy_hcd
[  900.089909][ T5914] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  900.099472][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.156455][ T5914] usb 3-1: config 0 descriptor??
[  900.182413][ T5914] ums-realtek 3-1:0.0: USB Mass Storage device detected
[  900.370031][ T5914] usb 3-1: USB disconnect, device number 37
[  900.749142][ T5992] usb 6-1: 0:2 : does not exist
[  900.808146][   T51] Bluetooth: hci0: command tx timeout
[  900.860390][ T5992] usb 6-1: USB disconnect, device number 88
[  901.017941][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  901.162424][T17699] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  901.471923][T17720] hub 9-0:1.0: USB hub found
[  901.479116][T17720] hub 9-0:1.0: 1 port detected
[  902.363656][T15201] dvmrp0 (unregistering): left allmulticast mode
[  902.836106][ T5907] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  902.884631][   T51] Bluetooth: hci0: command tx timeout
[  903.013571][ T5907] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  903.060821][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  903.103396][ T5907] usb 3-1: Product: syz
[  903.111889][ T5907] usb 3-1: Manufacturer: syz
[  903.232261][ T5907] usb 3-1: SerialNumber: syz
[  903.241403][ T5907] usb 3-1: config 0 descriptor??
[  903.455205][ T5907] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  903.843937][T17752] netlink: 'syz.6.2853': attribute type 5 has an invalid length.
[  904.566940][T15201] team0: Port device bond0 removed
[  904.606753][T15201] bond0 (unregistering): Released all slaves
[  904.975540][   T51] Bluetooth: hci0: command tx timeout
[  905.025468][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  905.025487][   T30] audit: type=1326 audit(1753349773.112:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.071274][   T30] audit: type=1326 audit(1753349773.112:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.094220][   T30] audit: type=1326 audit(1753349773.112:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.127913][   T30] audit: type=1326 audit(1753349773.112:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.193497][   T30] audit: type=1326 audit(1753349773.112:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.194920][T15201] bond1 (unregistering): (slave veth3): Releasing active interface
[  905.242411][   T30] audit: type=1326 audit(1753349773.112:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.267391][   T30] audit: type=1326 audit(1753349773.112:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.289749][    C0] vkms_vblank_simulate: vblank timer overrun
[  905.308752][T15201] bond1 (unregistering): Released all slaves
[  905.324455][ T5992] usb 6-1: new high-speed USB device number 89 using dummy_hcd
[  905.414336][   T30] audit: type=1326 audit(1753349773.112:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.436717][    C0] vkms_vblank_simulate: vblank timer overrun
[  905.500612][   T30] audit: type=1326 audit(1753349773.112:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.548970][ T5992] usb 6-1: config 0 has no interfaces?
[  905.559349][   T30] audit: type=1326 audit(1753349773.122:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17763 comm="syz.6.2856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f862a38e9a9 code=0x7ffc0000
[  905.603573][ T5992] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  905.638878][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.674170][ T5992] usb 6-1: Product: syz
[  905.684268][T15741] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  905.692231][ T5992] usb 6-1: Manufacturer: syz
[  905.702227][ T5992] usb 6-1: SerialNumber: syz
[  905.725974][ T5992] usb 6-1: config 0 descriptor??
[  905.833327][T15201] bond2 (unregistering): Released all slaves
[  905.834555][T15741] usb 7-1: Using ep0 maxpacket: 32
[  905.851462][T15201] bond3 (unregistering): Released all slaves
[  905.868839][T15741] usb 7-1: too many configurations: 29, using maximum allowed: 8
[  905.894804][T15741] usb 7-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5
[  905.908240][T15741] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  905.917412][T15741] usb 7-1: Product: syz
[  905.921680][T15741] usb 7-1: Manufacturer: syz
[  905.932826][T17676] chnl_net:caif_netlink_parms(): no params data found
[  905.943654][T15741] usb 7-1: SerialNumber: syz
[  905.960832][T15741] usb 7-1: config 0 descriptor??
[  905.972971][T15741] hub 7-1:0.0: Invalid hub with more than one config or interface
[  906.017782][T15741] hub 7-1:0.0: probe with driver hub failed with error -22
[  906.111800][T15201] : left promiscuous mode
[  906.124645][T15741] gspca_main: 0ac8:c301 too many config
[  906.267906][T15201] tipc: Left network mode
[  906.351662][T15201] IPVS: stopping master sync thread 7031 ...
[  906.559676][T17740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  906.578971][  T979] usb 7-1: USB disconnect, device number 11
[  906.594935][T17740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  906.625071][ T5907] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  906.662696][ T5907] usb 3-1: USB disconnect, device number 38
[  906.968167][T17676] bridge0: port 1(bridge_slave_0) entered blocking state
[  906.991857][T17676] bridge0: port 1(bridge_slave_0) entered disabled state
[  907.005486][T17676] bridge_slave_0: entered allmulticast mode
[  907.032428][T17676] bridge_slave_0: entered promiscuous mode
[  907.044575][   T51] Bluetooth: hci0: command tx timeout
[  907.147898][T17676] bridge0: port 2(bridge_slave_1) entered blocking state
[  907.155918][T17676] bridge0: port 2(bridge_slave_1) entered disabled state
[  907.187369][T17676] bridge_slave_1: entered allmulticast mode
[  907.212975][T17676] bridge_slave_1: entered promiscuous mode
[  907.416354][T17676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  907.447597][T17676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  907.644004][T15201] hsr_slave_0: left promiscuous mode
[  907.775102][T15201] team0 (unregistering): Port device batadv2 removed
[  907.904032][ T5953] usb 6-1: USB disconnect, device number 89
[  907.990981][T15201] team0 (unregistering): Port device batadv1 removed
[  909.033105][T17805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2863'.
[  910.132609][T17676] team0: Port device team_slave_0 added
[  910.168332][T17676] team0: Port device team_slave_1 added
[  910.306767][T17676] batman_adv: batadv0: Adding interface: batadv_slave_0
[  910.314491][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  910.340581][    C1] vkms_vblank_simulate: vblank timer overrun
[  910.346318][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2869'.
[  910.365151][T17676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  910.384719][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2869'.
[  910.394994][T17676] batman_adv: batadv0: Adding interface: batadv_slave_1
[  910.402080][T17676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  910.430936][T17676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  910.554274][ T5992] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  910.666352][T15201] IPVS: stop unused estimator thread 0...
[  910.704204][ T5992] usb 3-1: Using ep0 maxpacket: 32
[  910.714034][ T5992] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=56.a5
[  910.757180][T17676] hsr_slave_0: entered promiscuous mode
[  910.765200][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.775089][T17676] hsr_slave_1: entered promiscuous mode
[  910.781113][ T5992] usb 3-1: Product: syz
[  910.787042][ T5992] usb 3-1: Manufacturer: syz
[  910.795259][T17676] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  910.806225][ T5992] usb 3-1: SerialNumber: syz
[  910.819385][T17676] Cannot create hsr debugfs directory
[  910.831248][ T5992] usb 3-1: config 0 descriptor??
[  910.848959][ T5992] gspca_main: mars-2.14.0 probing 093a:050f
[  911.050244][ T5992] usb 3-1: USB disconnect, device number 39
[  911.237125][T17862] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2872'.
[  911.241245][T17861] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2872'.
[  911.360316][T17863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2872'.
[  911.838717][T17874] cifs: Unknown parameter '00000000000000000000'
[  911.852697][T17877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  911.884636][T17877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  912.054556][ T5907] usb 6-1: new high-speed USB device number 90 using dummy_hcd
[  912.094593][ T5953] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[  912.243839][ T5907] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  912.270732][ T5907] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  912.287963][ T5907] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  912.298197][ T5953] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  912.326422][ T5907] usb 6-1: config 0 interface 0 has no altsetting 0
[  912.326786][ T5953] usb 3-1: config 0 has no interface number 0
[  912.346068][ T5907] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  912.353528][ T5953] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  912.373386][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.383468][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.422364][ T5907] usb 6-1: config 0 descriptor??
[  912.430019][ T5953] usb 3-1: config 0 descriptor??
[  912.480216][ T5953] usb 3-1: selecting invalid altsetting 1
[  912.489393][ T5953] dvb_ttusb_budget: ttusb_init_controller: error
[  912.496705][ T5953] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  912.572320][T17676] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  912.602392][T17676] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  912.633864][T17676] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  913.154407][ T5953] DVB: Unable to find symbol cx22700_attach()
[  913.257659][ T5907] kye 0003:0458:5015.0032: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  913.259122][T17676] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  913.296752][ T5907] kye 0003:0458:5015.0032: item fetching failed at offset 3/7
[  913.332252][ T5907] kye 0003:0458:5015.0032: parse failed
[  913.352847][ T5953] DVB: Unable to find symbol tda10046_attach()
[  913.392718][ T5953] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  913.401465][ T5907] kye 0003:0458:5015.0032: probe with driver kye failed with error -22
[  913.476283][T17905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.509333][T17905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.534454][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2878'.
[  913.565398][ T5953] usb 3-1: USB disconnect, device number 40
[  913.624270][T15741] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  913.805491][T15741] usb 7-1: device descriptor read/64, error -71
[  913.954476][ T5953] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  913.969245][T17676] 8021q: adding VLAN 0 to HW filter on device bond0
[  914.002095][T17676] 8021q: adding VLAN 0 to HW filter on device team0
[  914.021478][   T59] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.028686][   T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[  914.047837][T15741] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  914.080105][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.087389][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  914.147759][ T5953] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  914.163264][ T5953] usb 3-1: config 0 interface 0 has no altsetting 0
[  914.194544][T15741] usb 7-1: device descriptor read/64, error -71
[  914.210976][ T5953] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  914.231911][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  914.250471][ T5953] usb 3-1: Product: syz
[  914.263618][ T5953] usb 3-1: Manufacturer: syz
[  914.281227][ T5953] usb 3-1: SerialNumber: syz
[  914.305993][T15741] usb usb7-port1: attempt power cycle
[  914.312917][ T5953] usb 3-1: config 0 descriptor??
[  914.338488][ T5953] usb 3-1: selecting invalid altsetting 0
[  914.367296][T17676] 8021q: adding VLAN 0 to HW filter on device batadv0
[  914.560914][T17928] fuse: Unknown parameter '0xffffffffffffffff'
[  914.570971][T17928] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  914.582110][T17676] veth0_vlan: entered promiscuous mode
[  914.611225][T17676] veth1_vlan: entered promiscuous mode
[  914.657409][T15741] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  914.697770][T17676] veth0_macvtap: entered promiscuous mode
[  914.741834][T17676] veth1_macvtap: entered promiscuous mode
[  914.779844][T15741] usb 7-1: device descriptor read/8, error -71
[  914.823138][T17676] batman_adv: batadv0: Interface activated: batadv_slave_0
[  914.843779][ T5907] usb 3-1: USB disconnect, device number 41
[  914.960573][T17676] batman_adv: batadv0: Interface activated: batadv_slave_1
[  915.006679][T17676] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  915.027157][T17676] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  915.036754][T17676] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  915.050043][T17676] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  915.107273][ T5953] usb 6-1: USB disconnect, device number 90
[  915.144280][T15741] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  915.194567][T15741] usb 7-1: device descriptor read/8, error -71
[  915.296886][T17942] loop6: detected capacity change from 0 to 63
[  915.315215][T15741] usb usb7-port1: unable to enumerate USB device
[  915.325894][T17942] buffer_io_error: 14 callbacks suppressed
[  915.325913][T17942] Buffer I/O error on dev loop6, logical block 0, async page read
[  915.376628][T17942] Buffer I/O error on dev loop6, logical block 1, async page read
[  915.474272][T17942] Buffer I/O error on dev loop6, logical block 2, async page read
[  915.482850][T17942] Buffer I/O error on dev loop6, logical block 3, async page read
[  915.687724][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  915.712044][ T6209] Buffer I/O error on dev loop6, logical block 1, async page read
[  915.748207][ T6209] Buffer I/O error on dev loop6, logical block 2, async page read
[  915.775486][ T6209] Buffer I/O error on dev loop6, logical block 3, async page read
[  915.803645][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  915.839653][ T6209] Buffer I/O error on dev loop6, logical block 1, async page read
[  916.032389][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.094548][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  916.187341][T17956] tipc: Invalid UDP bearer configuration
[  916.187400][T17956] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  916.211705][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  916.223070][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  916.352497][T17938] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0
[  916.375383][T17938] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0
[  916.383369][T17938] hid-generic 0003:0004:0000.0033: unknown main item tag 0x0
[  916.414201][  T979] usb 6-1: new high-speed USB device number 91 using dummy_hcd
[  916.451279][T17938] hid-generic 0003:0004:0000.0033: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  916.585111][  T979] usb 6-1: Using ep0 maxpacket: 8
[  916.600710][  T979] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  916.631000][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.655927][  T979] usb 6-1: Product: syz
[  916.660169][  T979] usb 6-1: Manufacturer: syz
[  916.673263][  T979] usb 6-1: SerialNumber: syz
[  916.751789][T17974] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2886'.
[  916.804362][T17938] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  916.829704][  T979] usb 6-1: config 0 descriptor??
[  916.848087][  T979] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  916.960959][T17977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2887'.
[  916.974374][T17938] usb 2-1: Using ep0 maxpacket: 8
[  917.000433][T17973] hub 9-0:1.0: USB hub found
[  917.009422][T17973] hub 9-0:1.0: 1 port detected
[  917.054016][T17955] mmap: syz.5.2885 (17955): VmData 37855232 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  917.061761][T17938] usb 2-1: config 0 has an invalid interface number: 250 but max is 0
[  917.076466][T17938] usb 2-1: config 0 has no interface number 0
[  917.092866][  T979] gspca_sn9c2028: read1 error -71
[  917.102807][  T979] gspca_sn9c2028: read1 error -71
[  917.144743][T17938] usb 2-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10
[  917.146737][  T979] gspca_sn9c2028: read1 error -71
[  917.170058][T17938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.174242][  T979] sn9c2028 6-1:0.0: probe with driver sn9c2028 failed with error -71
[  917.269111][T17938] usb 2-1: Product: syz
[  917.282472][T17938] usb 2-1: Manufacturer: syz
[  917.303600][T17938] usb 2-1: SerialNumber: syz
[  917.333591][  T979] usb 6-1: USB disconnect, device number 91
[  917.350307][T17938] usb 2-1: config 0 descriptor??
[  917.456816][T17982] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2888'.
[  917.470936][T17938] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614
[  917.518858][T17982] netlink: zone id is out of range
[  917.544390][T17982] netlink: get zone limit has 8 unknown bytes
[  917.674384][T17938] gspca_sn9c20x: Write register 1000 failed -71
[  917.680723][T17938] gspca_sn9c20x: Device initialization failed
[  917.734268][T17938] gspca_sn9c20x 2-1:0.250: probe with driver gspca_sn9c20x failed with error -71
[  917.814916][T17938] usb 2-1: USB disconnect, device number 72
[  918.174238][    T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  918.349007][    T9] usb 3-1: Using ep0 maxpacket: 16
[  918.372134][    T9] usb 3-1: config 0 has an invalid interface descriptor of length 5, skipping
[  918.418304][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  918.430426][T18007] xt_SECMARK: invalid mode: 2
[  918.459351][    T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  918.520627][    T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  918.530199][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.604342][    T9] usb 3-1: Product: syz
[  918.623358][    T9] usb 3-1: Manufacturer: syz
[  918.639917][    T9] usb 3-1: SerialNumber: syz
[  918.651481][    T9] usb 3-1: config 0 descriptor??
[  918.875714][    T9] usb 3-1: USB disconnect, device number 42
[  919.733704][T18044] netlink: 9280 bytes leftover after parsing attributes in process `syz.5.2901'.
[  919.801121][T18044] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2901'.
[  919.828568][T18043] IPVS: dh: UDP 224.0.0.2:0 - no destination available
[  920.074358][    T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  920.274696][    T9] usb 3-1: Using ep0 maxpacket: 16
[  920.295975][    T9] usb 3-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02
[  920.315823][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  920.354336][    T9] usb 3-1: Product: syz
[  920.361695][    T9] usb 3-1: Manufacturer: syz
[  920.378352][    T9] usb 3-1: SerialNumber: syz
[  920.410074][    T9] usb 3-1: config 0 descriptor??
[  920.437374][    T9] go7007 3-1:0.0: probe with driver go7007 failed with error -12
[  920.645183][    T9] usb 3-1: USB disconnect, device number 43
[  921.064505][  T979] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  921.227676][  T979] usb 2-1: Using ep0 maxpacket: 32
[  921.265111][  T979] usb 2-1: config 0 has an invalid interface number: 202 but max is 1
[  921.555160][  T979] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  921.567215][  T979] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  921.585649][  T979] usb 2-1: config 0 has no interface number 0
[  921.592643][  T979] usb 2-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30
[  921.624178][  T979] usb 2-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64
[  921.636626][  T979] usb 2-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182
[  921.664809][  T979] usb 2-1: config 0 interface 202 has no altsetting 0
[  921.673938][  T979] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b
[  921.704199][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  921.712266][  T979] usb 2-1: Product: syz
[  921.730455][  T979] usb 2-1: Manufacturer: syz
[  921.747408][  T979] usb 2-1: SerialNumber: syz
[  921.772264][  T979] usb 2-1: config 0 descriptor??
[  921.805188][  T979] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  921.995551][   T59] usb 2-1: Failed to submit usb control message: -71
[  921.999992][T15741] usb 2-1: USB disconnect, device number 73
[  922.002845][   T59] usb 2-1: unable to send the bmi data to the device: -71
[  922.032482][   T59] usb 2-1: unable to get target info from device
[  922.052598][   T59] usb 2-1: could not get target info (-71)
[  922.069442][   T59] usb 2-1: could not probe fw (-71)
[  923.002237][T18110] fuse: Bad value for 'group_id'
[  923.002254][T18110] fuse: Bad value for 'group_id'
[  924.095028][T18133] netlink: 'syz.5.2917': attribute type 2 has an invalid length.
[  924.159751][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2917'.
[  924.997597][T18138] fuse: Unknown parameter 'no�'
[  925.479190][T18148] program syz.5.2920 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  925.528125][T18148] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  925.822533][  T979] usb 2-1: new full-speed USB device number 74 using dummy_hcd
[  926.684662][  T979] usb 2-1: unable to get BOS descriptor or descriptor too short
[  926.706075][  T979] usb 2-1: not running at top speed; connect to a high speed hub
[  926.831297][  T979] usb 2-1: config 1 has an invalid interface descriptor of length 4, skipping
[  926.844165][T17938] usb 3-1: new low-speed USB device number 44 using dummy_hcd
[  926.863174][  T979] usb 2-1: config 1 has an invalid descriptor of length 161, skipping remainder of the config
[  926.952732][  T979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  927.073378][  T979] usb 2-1: config 1 interface 0 altsetting 2 has an invalid endpoint descriptor of length 2, skipping
[  927.184266][  T979] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  927.535630][T18162] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2921'.
[  927.591653][  T979] usb 2-1: config 1 interface 0 has no altsetting 0
[  927.631314][  T979] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  927.657904][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  927.691684][  T979] usb 2-1: Product: syz
[  927.712560][  T979] usb 2-1: Manufacturer: syz
[  927.739334][  T979] usb 2-1: SerialNumber: syz
[  928.018167][T18149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  928.165858][T18149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  929.634191][ T5914] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  930.065595][ T5914] usb 3-1: Using ep0 maxpacket: 32
[  930.135366][ T5914] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  930.190094][ T5914] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  930.234203][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  930.295627][ T5914] usb 3-1: Product: syz
[  930.299873][ T5914] usb 3-1: Manufacturer: syz
[  930.414174][ T5914] usb 3-1: SerialNumber: syz
[  930.509352][ T5914] usb 3-1: config 0 descriptor??
[  930.619545][ T5914] usb 3-1: bad CDC descriptors
[  930.729897][ T5914] usb 3-1: unsupported MDLM descriptors
[  931.659329][  T979] usb 2-1: USB disconnect, device number 74
[  931.977835][T18214] loop9: detected capacity change from 0 to 7
[  932.314236][   T24] usb 3-1: USB disconnect, device number 45
[  932.335278][T18224] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  932.341219][T18224] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  932.435357][ T5914] usb 2-1: new high-speed USB device number 75 using dummy_hcd
[  932.482284][T18224] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  932.493431][T18224] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  932.584385][ T5914] usb 2-1: device descriptor read/64, error -71
[  932.634377][T17938] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  932.701552][T18234] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2940'.
[  932.807840][T17938] usb 7-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  932.827525][ T5914] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  932.837644][T17938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  932.863541][T17938] usb 7-1: Product: syz
[  932.893179][T17938] usb 7-1: Manufacturer: syz
[  932.902241][T17938] usb 7-1: SerialNumber: syz
[  932.924648][T17938] usb 7-1: config 0 descriptor??
[  932.990535][ T5914] usb 2-1: device descriptor read/64, error -71
[  933.048243][T17938] i2c-tiny-usb 7-1:0.0: version 6d.cc found at bus 007 address 016
[  933.085259][T18247] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  933.111793][T18247] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  933.152098][ T5914] usb usb2-port1: attempt power cycle
[  933.205585][  T979] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  933.374516][  T979] usb 6-1: Using ep0 maxpacket: 32
[  933.388233][  T979] usb 6-1: config 4 has an invalid interface number: 128 but max is 0
[  933.452269][  T979] usb 6-1: config 4 has no interface number 0
[  933.521020][ T5914] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  933.544919][ T5914] usb 2-1: device descriptor read/8, error -71
[  933.546973][  T979] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  933.559176][T18229] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  933.588197][T18229] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  933.595820][  T979] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  933.623482][  T979] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  933.732718][  T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  933.763080][  T979] hub 6-1:4.128: USB hub found
[  933.844560][ T5914] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  933.875025][ T5914] usb 2-1: device descriptor read/8, error -71
[  934.009402][ T5914] usb usb2-port1: unable to enumerate USB device
[  934.018559][  T979] hub 6-1:4.128: 2 ports detected
[  934.023712][  T979] hub 6-1:4.128: Using single TT (err -22)
[  935.288834][  T979] hub 6-1:4.128: hub_hub_status failed (err = -32)
[  935.307251][  T979] hub 6-1:4.128: config failed, can't get hub status (err -32)
[  935.365430][T17938] i2c i2c-1: failure reading functionality
[  935.398643][T18262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2948'.
[  935.398797][T17938] i2c i2c-1: connected i2c-tiny-usb device
[  935.461774][  T979] usb 7-1: USB disconnect, device number 16
[  935.816648][T17938] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  935.866357][ T5907] usb 6-1: USB disconnect, device number 92
[  935.936533][ T5914] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  936.011150][T17938] usb 3-1: Using ep0 maxpacket: 8
[  936.035617][T17938] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 143, changing to 11
[  936.035659][T17938] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[  936.035686][T17938] usb 3-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  936.035715][T17938] usb 3-1: config 1 interface 0 has no altsetting 0
[  936.041858][T17938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  936.041894][T17938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.041918][T17938] usb 3-1: Product: ᠊
[  936.041935][T17938] usb 3-1: Manufacturer: 锢슀籷ᴪ훏퓔뚔⒠貪燼캩՞Ⱉ﮶ꨘ⚰쬔ⴿ
[  936.041957][T17938] usb 3-1: SerialNumber: ffi蘼Եа盕讷獂ۦ皿弼袆釗熌쭒ۄ恬觲㝻⟶뛊팩嶵ﻷ閧࿙雠穐츀ฐซ艐藨㟈沎㓼ꃛญ뼯㻀ତꓳ魎⼗ੜ根绐鰄㬄珬ई㲜ᆥꔂ䊄
[  936.053802][T18268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  936.053953][T18268] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  936.085541][ T5914] usb 2-1: Using ep0 maxpacket: 16
[  936.205172][T18283] tty tty28: ldisc open failed (-12), clearing slot 27
[  936.270820][T18290] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  936.372044][ T5914] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  936.381528][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  936.391233][ T5914] usb 2-1: Product: syz
[  936.395652][ T5914] usb 2-1: Manufacturer: syz
[  936.401528][ T5914] usb 2-1: SerialNumber: syz
[  936.411529][ T5914] usb 2-1: config 0 descriptor??
[  936.460750][T18268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  936.469938][T18268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  936.495263][T17938] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  936.513729][T17938] usb 3-1: USB disconnect, device number 46
[  936.631177][ T5914] usb 2-1: ignoring: not an USB2CAN converter
[  936.887751][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  936.894462][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  936.930015][T18303] input: syz0 as /devices/virtual/input/input109
[  937.114338][  T979] usb 6-1: new high-speed USB device number 93 using dummy_hcd
[  937.294226][  T979] usb 6-1: Using ep0 maxpacket: 16
[  937.310341][  T979] usb 6-1: unable to get BOS descriptor or descriptor too short
[  937.323930][  T979] usb 6-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  937.334992][  T979] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  937.349524][  T979] usb 6-1: New USB device found, idVendor=05ac, idProduct=2509, bcdDevice=e0.5e
[  937.364911][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  937.374233][  T979] usb 6-1: Product: syz
[  937.380047][  T979] usb 6-1: Manufacturer: syz
[  937.385097][  T979] usb 6-1: SerialNumber: syz
[  937.403880][  T979] usb 6-1: config 0 descriptor??
[  937.640351][  T979] usb 6-1: USB disconnect, device number 93
[  937.694292][   T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  937.864363][   T24] usb 3-1: Using ep0 maxpacket: 8
[  937.881867][   T24] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  937.892166][   T24] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  937.902307][   T24] usb 3-1: config 0 has no interface number 0
[  937.917598][   T24] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  937.939027][   T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  937.952590][   T24] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  937.972014][   T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  937.982231][   T24] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  937.992621][   T24] usb 3-1: Product: syz
[  938.003077][   T24] usb 3-1: config 0 descriptor??
[  938.018649][T18312] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  938.490194][T18326] fuse: Bad value for 'fd'
[  938.637456][   T24] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input110
[  938.760875][T18331] sctp: [Deprecated]: syz.5.2966 (pid 18331) Use of struct sctp_assoc_value in delayed_ack socket option.
[  938.760875][T18331] Use struct sctp_sack_info instead
[  938.781288][   T24] usb 2-1: USB disconnect, device number 79
[  939.984157][T17938] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[  940.154750][T17938] usb 6-1: Using ep0 maxpacket: 16
[  940.179064][T17938] usb 6-1: too many endpoints for config 0 interface 0 altsetting 215: 111, using maximum allowed: 30
[  940.263226][T17938] usb 6-1: config 0 interface 0 altsetting 215 has 0 endpoint descriptors, different from the interface descriptor's value: 111
[  940.337589][  T979] usb 3-1: USB disconnect, device number 47
[  940.343689][    C1] keyspan_remote 3-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[  940.505574][T17938] usb 6-1: config 0 interface 0 has no altsetting 0
[  940.515182][T17938] usb 6-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6
[  940.558356][T17938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.624617][ T5914] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  940.636169][T17938] usb 6-1: Product: syz
[  940.650174][T17938] usb 6-1: Manufacturer: syz
[  940.668685][T17938] usb 6-1: SerialNumber: syz
[  940.721372][T17938] usb 6-1: config 0 descriptor??
[  940.794422][ T5914] usb 2-1: Using ep0 maxpacket: 16
[  940.830303][ T5914] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  940.850146][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  940.870510][ T5914] usb 2-1: Product: syz
[  940.880479][ T5914] usb 2-1: Manufacturer: syz
[  940.890598][ T5914] usb 2-1: SerialNumber: syz
[  940.900066][ T5914] usb 2-1: config 0 descriptor??
[  940.917898][ T5914] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  940.984490][T17938] usb 6-1: USB disconnect, device number 94
[  941.132197][ T5914] usb 2-1: USB disconnect, device number 80
[  941.453094][T18388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2980'.
[  941.846691][T18405] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.2984'.
[  941.916567][T18405] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.2984'.
[  941.927870][T18405] netlink: 584 bytes leftover after parsing attributes in process `syz.1.2984'.
[  941.995962][T18395] [U] k�}��Iy�x��5�x��솱4~�������ʫ�B���́u6�ss�ɞǠT@.��m"	�mp�-
[  942.006701][  T979] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[  942.166230][T17938] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  942.281215][  T979] usb 6-1: Using ep0 maxpacket: 16
[  942.300926][T18410] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2985'.
[  942.455519][T17938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  942.456589][  T979] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  942.481880][T17938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  942.492767][  T979] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  942.501386][T17938] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  942.602972][  T979] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  942.612732][T17938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  942.612764][T17938] usb 2-1: SerialNumber: syz
[  942.688127][  T979] usb 6-1: config 0 interface 0 altsetting 4 has a duplicate endpoint with address 0xB, skipping
[  942.716348][  T979] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0xA has invalid maxpacket 512, setting to 64
[  942.743407][  T979] usb 6-1: config 0 interface 0 altsetting 4 has a duplicate endpoint with address 0xA, skipping
[  942.824290][  T979] usb 6-1: config 0 interface 0 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[  942.898790][  T979] usb 6-1: config 0 interface 0 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[  942.917894][T17938] usb 2-1: 0:2 : does not exist
[  942.922917][T17938] usb 2-1: unit 255 not found!
[  942.968399][  T979] usb 6-1: config 0 interface 0 altsetting 4 has a duplicate endpoint with address 0x82, skipping
[  942.976640][T17938] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  943.021498][  T979] usb 6-1: config 0 interface 0 has no altsetting 0
[  943.061013][  T979] usb 6-1: New USB device found, idVendor=0e41, idProduct=4151, bcdDevice=22.7f
[  943.072384][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  943.093531][  T979] usb 6-1: Product: syz
[  943.100438][  T979] usb 6-1: Manufacturer: syz
[  943.103475][T17938] usb 2-1: USB disconnect, device number 81
[  943.112192][  T979] usb 6-1: SerialNumber: syz
[  943.180842][  T979] usb 6-1: config 0 descriptor??
[  943.221228][T18398] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  943.250435][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  943.467449][  T979] snd_usb_toneport 6-1:0.0: Line 6 POD Studio UX2 found
[  943.509126][  T979] usb 6-1: selecting invalid altsetting 2
[  943.529877][  T979] snd_usb_toneport 6-1:0.0: set_interface failed
[  943.556985][  T979] snd_usb_toneport 6-1:0.0: Line 6 POD Studio UX2 now disconnected
[  943.576911][  T979] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  943.662801][  T979] usb 6-1: USB disconnect, device number 95
[  944.015865][T18435] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2993'.
[  944.103775][T18438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  944.414571][T17938] usb 2-1: new full-speed USB device number 82 using dummy_hcd
[  944.577695][T17938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  944.616674][T17938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  944.656980][T17938] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  944.668784][T17938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.691531][T17938] usb 2-1: Product: syz
[  944.702896][T17938] usb 2-1: Manufacturer: syz
[  944.736195][T17938] usb 2-1: SerialNumber: syz
[  944.992599][T17938] usb 2-1: 0:2 : does not exist
[  945.030904][T17938] usb 2-1: unit 6 not found!
[  945.110830][T17938] usb 2-1: USB disconnect, device number 82
[  945.243944][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  945.702530][ T5992] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  945.820506][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3004'.
[  945.831667][T18471] xt_CT: You must specify a L4 protocol and not use inversions on it
[  945.874612][ T5992] usb 3-1: Using ep0 maxpacket: 32
[  945.895727][ T5992] usb 3-1: New USB device found, idVendor=08ca, idProduct=0111, bcdDevice=6d.c8
[  945.907611][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  945.953107][ T5992] usb 3-1: config 0 descriptor??
[  945.982012][ T5992] gspca_main: mr97310a-2.14.0 probing 08ca:0111
[  946.006942][ T5992] gspca_mr97310a: reg write [21] error -22
[  946.023244][ T5992] mr97310a 3-1:0.0: probe with driver mr97310a failed with error -22
[  946.180221][T18461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  946.209757][T18461] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  946.222529][ T5953] usb 3-1: USB disconnect, device number 48
[  946.230166][  T979] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  946.405040][  T979] usb 2-1: Using ep0 maxpacket: 32
[  946.431780][  T979] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  946.456342][  T979] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  946.479665][  T979] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  946.495041][  T979] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  946.521313][  T979] usb 2-1: config 0 interface 0 has no altsetting 0
[  946.532603][  T979] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  946.547725][  T979] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  946.558727][  T979] usb 2-1: Product: syz
[  946.563016][  T979] usb 2-1: Manufacturer: syz
[  946.604215][  T979] usb 2-1: SerialNumber: syz
[  946.613250][  T979] usb 2-1: config 0 descriptor??
[  946.641078][  T979] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  946.656219][  T979] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  946.854994][ T5992] usb 2-1: USB disconnect, device number 83
[  946.861031][    C0] ldusb 2-1:0.0: usb_submit_urb failed (-19)
[  946.881562][ T5992] ldusb 2-1:0.0: LD USB Device #0 now disconnected
[  947.084684][ T5914] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[  947.245821][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  947.274165][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  947.294127][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  947.314154][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  947.327258][T17938] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[  947.345172][ T5914] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  947.364636][ T5914] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  947.384139][ T5914] usb 3-1: Manufacturer: syz
[  947.394536][ T5914] usb 3-1: config 0 descriptor??
[  947.424487][  T979] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  947.520562][T17938] usb 6-1: config 7 descriptor has 1 excess byte, ignoring
[  947.534438][T17938] usb 6-1: config 7 has 1 interface, different from the descriptor's value: 2
[  947.549675][T17938] usb 6-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[  947.558855][T17938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  947.566986][T17938] usb 6-1: Product: syz
[  947.571207][T17938] usb 6-1: Manufacturer: syz
[  947.576065][T17938] usb 6-1: SerialNumber: syz
[  947.584833][  T979] usb 7-1: Using ep0 maxpacket: 16
[  947.598606][T17938] rndis_host 6-1:7.0: skipping garbage
[  947.609103][T17938] usb 6-1: bad CDC descriptors
[  947.616550][  T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  947.618150][T17938] option 6-1:7.0: GSM modem (1-port) converter detected
[  947.641746][  T979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  947.655410][  T979] usb 7-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  947.671673][  T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  947.697430][  T979] usb 7-1: config 0 descriptor??
[  947.727491][  T979] usbhid 7-1:0.0: can't add hid device: -22
[  947.736989][  T979] usbhid 7-1:0.0: probe with driver usbhid failed with error -22
[  947.784452][ T5914] rc_core: IR keymap rc-hauppauge not found
[  947.790517][ T5914] Registered IR keymap rc-empty
[  947.795785][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  947.804545][  T979] usb 6-1: USB disconnect, device number 96
[  947.817030][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  947.828409][  T979] option 6-1:7.0: device disconnected
[  947.848050][ T5914] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  947.863736][ T5914] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input111
[  947.879554][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  947.904398][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  947.924344][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  947.944225][T17938] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  947.976670][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  948.004629][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  948.024335][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  948.044625][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  948.064250][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  948.084430][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  948.095418][T17938] usb 2-1: Using ep0 maxpacket: 16
[  948.102626][T17938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  948.113956][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  948.122146][T17938] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  948.131598][T17938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  948.143912][T17938] usb 2-1: config 0 descriptor??
[  948.150903][ T5914] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  948.177019][ T5914] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  948.187975][ T5914] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  948.205681][ T5914] usb 3-1: USB disconnect, device number 49
[  948.574263][T17938] usbhid 2-1:0.0: can't add hid device: -71
[  948.619498][T17938] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  948.639651][T17938] usb 2-1: USB disconnect, device number 84
[  948.821105][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'.
[  948.846090][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'.
[  949.076121][T18514] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3018'.
[  949.504411][ T5992] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  949.691597][ T5992] usb 2-1: Using ep0 maxpacket: 8
[  949.728533][ T5992] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  949.744211][ T5992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  949.814136][ T5992] usb 2-1: config 0 has no interface number 0
[  949.832969][ T5992] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  949.850956][ T5992] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  949.867498][ T5992] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  949.913684][ T5992] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  949.927479][ T5992] usb 2-1: config 0 interface 52 has no altsetting 0
[  949.935076][ T5992] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00
[  949.944502][ T5992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  949.993998][ T5992] usb 2-1: config 0 descriptor??
[  950.163730][T17938] usb 7-1: USB disconnect, device number 17
[  950.206636][ T5992] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input112
[  950.412674][T18516] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  950.447024][T18531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3023'.
[  950.574428][T18516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  950.633083][T18516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  950.692014][T17938] usb 2-1: USB disconnect, device number 85
[  950.954168][ T5914] usb 7-1: new low-speed USB device number 18 using dummy_hcd
[  951.150956][ T5914] usb 7-1: config 7 interface 0 has no altsetting 0
[  952.748338][ T5992] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  952.922071][ T5992] usb 3-1: config index 0 descriptor too short (expected 16420, got 36)
[  952.931387][ T5992] usb 3-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config
[  952.959405][ T5992] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  953.003335][ T5992] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  953.044223][ T5992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  953.089943][ T5992] usb 3-1: config 0 descriptor??
[  953.566791][T18554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  953.581639][T18554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  953.624016][ T5992] usb 3-1: string descriptor 0 read error: -71
[  953.723229][ T5992] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  953.776451][ T5992] usb 3-1: USB disconnect, device number 50
[  953.788139][ T5914] usb 7-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44
[  953.818409][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.969844][ T5914] usb 7-1: can't set config #7, error -71
[  954.019504][ T5914] usb 7-1: USB disconnect, device number 18
[  954.333315][T18586] IPVS: set_ctl: invalid protocol: 28 172.30.1.7:20003
[  954.444189][ T5992] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  954.607206][ T5914] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  954.634621][ T5992] usb 6-1: Using ep0 maxpacket: 32
[  954.642592][ T5992] usb 6-1: unable to get BOS descriptor or descriptor too short
[  954.669764][ T5992] usb 6-1: config 7 has an invalid interface number: 187 but max is 0
[  954.700906][ T5992] usb 6-1: config 7 has no interface number 0
[  954.720573][ T5992] usb 6-1: config 7 interface 187 has no altsetting 0
[  954.765303][ T5992] usb 6-1: New USB device found, idVendor=18d1, idProduct=02af, bcdDevice=5a.bb
[  954.786241][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  954.804519][ T5992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  954.814242][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  954.853906][ T5992] usb 6-1: Product: syz
[  954.864286][ T5992] usb 6-1: Manufacturer: syz
[  954.870375][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  954.885284][ T5992] usb 6-1: SerialNumber: syz
[  954.890043][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  954.917283][ T5914] usb 3-1: SerialNumber: syz
[  954.964380][    T9] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  954.977174][ T5914] usb 3-1: 0:2 : does not exist
[  955.119247][T18570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  955.160520][    T9] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  955.195776][ T5914] usb 3-1: USB disconnect, device number 51
[  955.201964][    T9] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  955.227590][T18570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  955.266949][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  955.282887][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  955.296416][    T9] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  955.324140][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  955.358393][    T9] usb 7-1: config 0 descriptor??
[  955.890918][    T9] hid-steam 0003:28DE:1102.0034: item fetching failed at offset 4/5
[  955.912903][    T9] hid-steam 0003:28DE:1102.0034: steam_probe:parse of hid interface failed
[  955.933875][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  955.933896][   T30] audit: type=1326 audit(1753349824.012:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18594 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba0f8e9a9 code=0x7ffc0000
[  955.942040][    T9] hid-steam 0003:28DE:1102.0034: probe with driver hid-steam failed with error -22
[  956.032761][   T30] audit: type=1326 audit(1753349824.072:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18594 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1ba0f8e9a9 code=0x7ffc0000
[  956.130228][    T9] usb 7-1: USB disconnect, device number 19
[  956.132092][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  956.149907][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  956.164984][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  956.174678][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  956.182710][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  956.197729][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  956.205833][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  956.215238][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  956.224249][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  956.234783][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  956.257783][   T30] audit: type=1326 audit(1753349824.072:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18594 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba0f8e9a9 code=0x7ffc0000
[  956.283423][   T30] audit: type=1326 audit(1753349824.072:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18594 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba0f8e9a9 code=0x7ffc0000
[  956.312524][   T30] audit: type=1326 audit(1753349824.072:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18594 comm="syz.1.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1ba0f8e9a9 code=0x7ffc0000
[  956.832664][  T979] usb 6-1: USB disconnect, device number 97
[  957.208446][ T9278] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.352945][T18621] ip6t_rpfilter: unknown options
[  957.384966][T18616] erspan0: entered promiscuous mode
[  957.413523][T18616] vlan2: entered promiscuous mode
[  957.418925][ T5992] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[  957.608452][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  957.630348][ T5992] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  957.646108][ T9278] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  957.672123][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  957.740661][ T5992] usb 6-1: config 0 descriptor??
[  958.014134][ T5992] usbhid 6-1:0.0: can't add hid device: -71
[  958.064564][ T5992] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  958.140606][ T9278] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.148555][ T5992] usb 6-1: USB disconnect, device number 98
[  958.199311][T18651] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3054'.
[  958.303030][ T9278] bond0: (slave netdevsim0): Releasing backup interface
[  958.315633][ T9278] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.326346][ T5854] Bluetooth: hci5: command tx timeout
[  958.353154][T18606] chnl_net:caif_netlink_parms(): no params data found
[  958.406520][T18657] fuse: root generation should be zero
[  958.457277][   T30] audit: type=1326 audit(1753349826.542:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18658 comm="syz.1.3058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ba0f8e9a9 code=0x0
[  958.515257][ T5992] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[  958.642335][T18606] bridge0: port 1(bridge_slave_0) entered blocking state
[  958.652135][T18606] bridge0: port 1(bridge_slave_0) entered disabled state
[  958.660757][T18606] bridge_slave_0: entered allmulticast mode
[  958.674272][T18606] bridge_slave_0: entered promiscuous mode
[  958.674705][    T9] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  958.688159][ T5992] usb 6-1: Using ep0 maxpacket: 16
[  958.691403][T18606] bridge0: port 2(bridge_slave_1) entered blocking state
[  958.700609][T18606] bridge0: port 2(bridge_slave_1) entered disabled state
[  958.714989][T18606] bridge_slave_1: entered allmulticast mode
[  958.719452][ T5992] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  958.723407][T18606] bridge_slave_1: entered promiscuous mode
[  958.763716][ T5992] usb 6-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  958.782777][ T5992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.811602][ T5992] usb 6-1: config 0 descriptor??
[  958.894464][T18606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  958.904362][    T9] usb 3-1: Using ep0 maxpacket: 16
[  958.916363][    T9] usb 3-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config
[  958.927407][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  958.940942][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  958.955578][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.977111][T18606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  958.986878][    T9] usb 3-1: Product: syz
[  958.991197][    T9] usb 3-1: Manufacturer: syz
[  959.003392][    T9] usb 3-1: SerialNumber: syz
[  959.113423][T18606] team0: Port device team_slave_0 added
[  959.126230][T18606] team0: Port device team_slave_1 added
[  959.246492][ T5992] mcp2200 0003:04D8:00DF.0035: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.5-1/input0
[  959.274166][    T9] usb 3-1: 0:2 : does not exist
[  959.312725][T18606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  959.324480][    T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  959.341269][T18606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  959.424801][T18606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  959.446224][    T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  959.474350][    T9] usb 3-1: 5:0: cannot get min/max values for control 4 (id 5)
[  959.521668][    T9] usb 3-1: 5:0: cannot get min/max values for control 8 (id 5)
[  959.624979][    T9] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  959.643242][T17938] usb 6-1: USB disconnect, device number 99
[  959.721397][    T9] usb 3-1: USB disconnect, device number 52
[  959.804878][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  960.034552][ T5953] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  960.248545][ T5953] usb 7-1: Using ep0 maxpacket: 8
[  960.257764][ T5953] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  960.282891][ T5953] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  960.311758][ T5953] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  960.343603][ T5953] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  960.369044][ T5953] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  960.383998][ T5953] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  960.393276][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  960.419806][ T5854] Bluetooth: hci5: command tx timeout
[  960.917147][T18705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3064'.
[  961.177601][ T9278] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  961.192845][ T9278] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  961.203545][ T9278] bond0 (unregistering): Released all slaves
[  961.358097][ T5953] usb 7-1: usb_control_msg returned -71
[  961.363808][ T5953] usbtmc 7-1:16.0: can't read capabilities
[  961.416398][ T5953] usb 7-1: USB disconnect, device number 20
[  961.586712][ T9278] bond1 (unregistering): Released all slaves
[  961.616471][ T9278] bond2 (unregistering): Released all slaves
[  961.640892][T18606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  961.653533][T18606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  961.687281][T18606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  961.830237][T18704] bond0: entered promiscuous mode
[  961.841050][T18704] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  962.209712][ T5953] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  962.251195][T18705] bond0 (unregistering): left promiscuous mode
[  962.258263][T18705] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  962.279165][T18705] bond0 (unregistering): (slave netdevsim0): Releasing backup interface
[  962.303208][T18705] bond0 (unregistering): Released all slaves
[  962.364526][ T5953] usb 2-1: Using ep0 maxpacket: 16
[  962.372314][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  962.382647][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  962.445452][ T5953] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[  962.487369][ T5854] Bluetooth: hci5: command tx timeout
[  962.498582][ T9278] tipc: Disabling bearer <udp:syz2>
[  962.508471][ T9278] tipc: Left network mode
[  962.606065][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  962.652199][ T5953] usb 2-1: config 0 descriptor??
[  962.868313][T18606] hsr_slave_0: entered promiscuous mode
[  962.880145][T18606] hsr_slave_1: entered promiscuous mode
[  962.906349][T18606] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  962.921537][T18606] Cannot create hsr debugfs directory
[  962.953667][ T5953] usbhid 2-1:0.0: can't add hid device: -71
[  962.991261][ T5953] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  963.024615][ T5953] usb 2-1: USB disconnect, device number 86
[  963.286584][T18716] kvm: user requested TSC rate below hardware speed
[  963.315324][T18716] kvm: user requested TSC rate below hardware speed
[  963.654584][ T5992] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  963.694454][ T9278] hsr_slave_0: left promiscuous mode
[  963.705438][ T9278] hsr_slave_1: left promiscuous mode
[  963.731842][ T9278] veth1_macvtap: left allmulticast mode
[  963.747830][ T9278] veth1_macvtap: left promiscuous mode
[  963.753710][ T9278] veth0_macvtap: left promiscuous mode
[  963.924272][ T5992] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  963.933382][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  963.973237][ T5992] usb 3-1: Product: syz
[  963.983950][ T5992] usb 3-1: Manufacturer: syz
[  964.000771][ T5992] usb 3-1: SerialNumber: syz
[  964.056493][ T5992] usb 3-1: config 0 descriptor??
[  964.083172][ T5992] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  964.135007][T18744] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3071'.
[  964.564695][ T5854] Bluetooth: hci5: command tx timeout
[  964.618550][ T5992] gspca_sunplus: reg_r err -110
[  964.804895][ T5992] usb 3-1: USB disconnect, device number 53
[  965.137451][T18756] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3075'.
[  965.467263][ T5992] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  965.644173][ T5992] usb 3-1: Using ep0 maxpacket: 32
[  965.653946][ T5992] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  965.663530][ T5992] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  965.676498][ T5992] usb 3-1: Product: syz
[  965.681211][ T5992] usb 3-1: Manufacturer: syz
[  965.691328][ T5992] usb 3-1: SerialNumber: syz
[  965.712358][ T5992] usb 3-1: config 0 descriptor??
[  965.927431][ T5992] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[  965.936476][ T5992] eb 9a 47 80 9b f8 7a f0 
[  965.941573][ T5992] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  966.640344][T18744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  966.659472][T18744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  966.670456][T18744] bond0 (unregistering): Released all slaves
[  967.185861][ T9278] IPVS: stop unused estimator thread 0...
[  967.410636][ T5953] usb 3-1: USB disconnect, device number 54
[  967.726533][T18606] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  968.441935][T18606] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  968.461292][T18606] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  968.564511][    T9] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  968.582248][T18606] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  968.744413][    T9] usb 6-1: Using ep0 maxpacket: 8
[  968.783045][    T9] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[  968.811879][    T9] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  968.882842][    T9] usb 6-1: config 135 has no interface number 0
[  968.892330][    T9] usb 6-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  968.907548][    T9] usb 6-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  968.924487][    T9] usb 6-1: config 135 interface 230 has no altsetting 0
[  968.935021][    T9] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  968.944618][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  968.952693][    T9] usb 6-1: Product: syz
[  968.957614][    T9] usb 6-1: Manufacturer: syz
[  968.962262][    T9] usb 6-1: SerialNumber: syz
[  968.999990][    T9] usb 6-1: Found UVC 0.00 device syz (18ec:3288)
[  969.008945][T18796] netlink: 'syz.6.3083': attribute type 2 has an invalid length.
[  969.024578][    T9] usb 6-1: No valid video chain found.
[  969.246753][T18779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  969.284597][T18779] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  969.321623][T18779] input: syz1 as /devices/virtual/input/input115
[  969.489364][T18606] 8021q: adding VLAN 0 to HW filter on device bond0
[  969.563101][T18811] netlink: 'syz.6.3086': attribute type 1 has an invalid length.
[  969.838487][T18811] bond0: entered promiscuous mode
[  969.844605][T18811] 8021q: adding VLAN 0 to HW filter on device bond0
[  969.926679][T18814] 8021q: adding VLAN 0 to HW filter on device bond0
[  969.937025][T18814] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  969.964114][T18814] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  969.975065][T18821] program syz.2.3088 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  970.019713][   T30] audit: type=1800 audit(1753349838.092:682): pid=18823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3089" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  970.047836][T18814] bond0: (slave ip6gre1): making interface the new active one
[  970.055493][T18814] ip6gre1: entered promiscuous mode
[  970.062662][T18814] bond0: (slave ip6gre1): Enslaving as an active interface with an up link
[  970.142257][T18606] 8021q: adding VLAN 0 to HW filter on device team0
[  970.180553][T11072] bridge0: port 1(bridge_slave_0) entered blocking state
[  970.187782][T11072] bridge0: port 1(bridge_slave_0) entered forwarding state
[  970.284962][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  970.292109][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  970.394462][ T5953] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  970.554256][ T5953] usb 2-1: Using ep0 maxpacket: 8
[  970.563806][ T5953] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[  970.582640][ T5953] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[  970.623178][ T5953] usb 2-1: config 0 has no interface number 0
[  970.646604][ T5953] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  970.679114][T18606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  970.697565][ T5953] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  970.757526][T17938] usb 6-1: USB disconnect, device number 100
[  970.761293][ T5953] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  970.851356][ T5953] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  970.894994][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  970.938683][T18606] veth0_vlan: entered promiscuous mode
[  970.962534][ T5953] usb 2-1: Product: syz
[  970.994832][ T5953] usb 2-1: config 0 descriptor??
[  971.027849][T18606] veth1_vlan: entered promiscuous mode
[  971.036473][T18823] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  971.155701][T18606] veth0_macvtap: entered promiscuous mode
[  971.176883][    T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  971.177982][T18606] veth1_macvtap: entered promiscuous mode
[  971.258502][T18606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  971.276084][ T5953] usb 2-1: USB disconnect, device number 87
[  971.337005][T18606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  971.394186][    T9] usb 3-1: Using ep0 maxpacket: 16
[  971.401498][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  971.410316][    T9] usb 3-1: config 2 has an invalid interface number: 9 but max is 0
[  971.418741][    T9] usb 3-1: config 2 has no interface number 0
[  971.425044][    T9] usb 3-1: config 2 interface 9 altsetting 10 bulk endpoint 0xC has invalid maxpacket 32
[  971.454628][    T9] usb 3-1: config 2 interface 9 altsetting 10 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  971.466538][    T9] usb 3-1: config 2 interface 9 has no altsetting 0
[  971.483569][    T9] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=6f.97
[  971.493102][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  971.501289][    T9] usb 3-1: Product: syz
[  971.505688][    T9] usb 3-1: Manufacturer: syz
[  971.510436][    T9] usb 3-1: SerialNumber: syz
[  971.520369][T18831] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  971.583055][T18606] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  971.655083][T18606] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  971.733541][T18831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  971.748861][T18606] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  971.795686][T18831] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  971.804860][T18606] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  971.913456][T18831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3090'.
[  972.454503][T11072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.554371][T11072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  972.792645][T11076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  972.859265][T11076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  973.352881][T18871] program syz.6.3099 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  973.534227][ T5953] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  973.571062][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3043'.
[  973.689655][ T5953] usb 6-1: Using ep0 maxpacket: 8
[  973.710238][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  973.751499][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  973.796307][    T9] pn533_usb 3-1:2.9: NFC: Could not find bulk-in or bulk-out endpoint
[  973.811576][    T9] usb 3-1: USB disconnect, device number 55
[  973.849461][ T5953] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  973.884159][ T5992] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  973.889553][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  973.959489][ T5953] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  973.985871][ T5953] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  974.000075][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.037978][ T5953] usb 6-1: config 0 descriptor??
[  974.050990][T18872] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  974.095360][ T5992] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  974.127304][ T5992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.174128][ T5992] usb 7-1: Product: syz
[  974.209059][ T5992] usb 7-1: Manufacturer: syz
[  974.219150][ T5992] usb 7-1: SerialNumber: syz
[  974.259165][ T5992] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  974.284905][   T51] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  974.286246][T17938] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  974.292063][   T51] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  974.308948][   T51] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  974.321410][   T51] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  974.328459][   T51] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  974.336092][ T5953] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  974.499482][ T5953] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  974.517386][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.547005][T18868] netlink: 'syz.5.3098': attribute type 1 has an invalid length.
[  974.578349][T18868] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  974.596246][ T5953] usb 3-1: config 0 descriptor??
[  974.653039][ T5936] usb 6-1: USB disconnect, device number 101
[  974.661329][ T5854] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  974.830034][  T979] usb 7-1: USB disconnect, device number 21
[  974.846300][ T5953] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  975.180340][ T5953] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  975.620951][T17938] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive
[  975.638555][T17938] ath9k_htc: Failed to initialize the device
[  975.856872][  T979] usb 7-1: ath9k_htc: USB layer deinitialized
[  975.909649][ T5953] [drm] Initialized udl on minor 2
[  975.964847][ T5953] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  975.980077][ T5953] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  976.009323][T18913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3101'.
[  976.109217][T18917] kAFS: unable to lookup cell ''
[  976.631765][T18924] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  976.679746][T18924] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  976.744380][T18924] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  976.771581][T18925] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  976.840727][T18924] trusted_key: encrypted_key: insufficient parameters specified
[  976.983159][T18933] netlink: 'syz.6.3111': attribute type 322 has an invalid length.
[  977.029648][T18931] block device autoloading is deprecated and will be removed.
[  977.049985][T18931] syz.6.3111: attempt to access beyond end of device
[  977.049985][T18931] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  977.097923][ T5936] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  977.105222][T17938] usb 3-1: USB disconnect, device number 56
[  977.150632][ T5936] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  977.350990][T18938] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  977.396382][T18939] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  977.517721][T18927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3110'.
[  977.590881][T18945] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3110'.
[  977.796343][ T5936] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  977.923522][  T979] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  977.966106][ T5936] usb 6-1: Using ep0 maxpacket: 16
[  977.988808][ T5936] usb 6-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  978.022103][ T5936] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  978.054125][ T5936] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  978.068268][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.198436][T18959] vivid-000: disconnect
[  978.297835][ T5936] usb 6-1: Product: syz
[  978.316026][ T5936] usb 6-1: Manufacturer: syz
[  978.325972][  T979] usb 2-1: unable to read config index 0 descriptor/start: -61
[  978.364157][  T979] usb 2-1: can't read configurations, error -61
[  978.427307][ T5936] usb 6-1: SerialNumber: syz
[  978.684518][  T979] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  978.735287][T18963] x_tables: duplicate underflow at hook 1
[  978.892848][  T979] usb 2-1: unable to read config index 0 descriptor/start: -61
[  978.945362][  T979] usb 2-1: can't read configurations, error -61
[  979.022834][ T5936] usb 6-1: 0:2 : does not exist
[  979.084167][  T979] usb usb2-port1: attempt power cycle
[  979.099585][ T5936] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5)
[  979.157664][ T5936] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  979.180967][ T5936] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  979.363494][ T5936] usb 6-1: 5:0: failed to get current value for ch 1 (-22)
[  979.435003][ T5936] usb 6-1: 5:0: cannot get min/max values for control 5 (id 5)
[  979.444266][  T979] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  979.494281][ T5936] usb 6-1: USB disconnect, device number 102
[  979.518864][  T979] usb 2-1: unable to read config index 0 descriptor/start: -61
[  979.534264][  T979] usb 2-1: can't read configurations, error -61
[  979.551518][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  979.704278][  T979] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  979.868030][T18945] vivid-000: reconnect
[  980.286725][  T979] usb 2-1: device not accepting address 91, error -71
[  980.309037][  T979] usb usb2-port1: unable to enumerate USB device
[  980.748132][T18992] bridge1: entered promiscuous mode
[  981.184262][  T979] usb 6-1: new full-speed USB device number 103 using dummy_hcd
[  981.413204][  T979] usb 6-1: unable to get BOS descriptor or descriptor too short
[  981.422076][  T979] usb 6-1: not running at top speed; connect to a high speed hub
[  981.442935][  T979] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  981.468091][  T979] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  981.514129][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  981.764909][  T979] usb 6-1: Product: syz
[  981.785129][  T979] usb 6-1: Manufacturer: syz
[  981.789887][  T979] usb 6-1: SerialNumber: syz
[  982.104300][T18988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  982.171341][T18988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  982.239391][T19002] kAFS: unable to lookup cell ''
[  982.451059][  T979] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  982.714708][  T979] usb 6-1: USB disconnect, device number 103
[  983.201935][    T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  983.397751][T19015] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  983.640178][    T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  983.732147][    T9] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[  983.774346][    T9] usb 2-1: config 220 interface 0 has no altsetting 0
[  983.790883][    T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  983.800380][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  983.809470][    T9] usb 2-1: Product: syz
[  983.825338][  T979] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  983.834154][    T9] usb 2-1: Manufacturer: syz
[  983.874115][    T9] usb 2-1: SerialNumber: syz
[  983.990781][  T979] usb 7-1: config 0 has an invalid interface number: 117 but max is 0
[  984.010335][  T979] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  984.152991][  T979] usb 7-1: config 0 has no interface number 0
[  984.240576][  T979] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  984.270338][  T979] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  984.288041][  T979] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  984.298492][  T979] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  984.307820][  T979] usb 7-1: Product: syz
[  984.312206][  T979] usb 7-1: Manufacturer: syz
[  984.367972][  T979] usb 7-1: SerialNumber: syz
[  984.411110][   T30] audit: type=1800 audit(1753349852.492:683): pid=19032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3135" name="card6" dev="devtmpfs" ino=4815 res=0 errno=0
[  984.439230][  T979] usb 7-1: config 0 descriptor??
[  984.929889][  T979] usb 7-1: USB disconnect, device number 22
[  985.964761][T19045] xt_SECMARK: invalid mode: 2
[  986.252851][    T9] usb 2-1: Found UVC 0.00 device syz (8086:0b07)
[  986.276694][    T9] usb 2-1: No valid video chain found.
[  986.330260][    T9] usb 2-1: USB disconnect, device number 92
[  986.790984][T19055] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  986.863501][T19050] hub 9-0:1.0: USB hub found
[  986.868911][T19050] hub 9-0:1.0: 1 port detected
[  986.998903][T19057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  987.186764][T19056] 8021q: adding VLAN 0 to HW filter on device batadv2
[  987.198016][T19056] team0: Port device batadv2 added
[  987.244486][   T30] audit: type=1800 audit(1753349855.242:684): pid=19075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3147" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  988.275738][   T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  988.303118][T19104] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3155'.
[  988.437741][   T24] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  988.460261][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  988.470325][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  988.508972][   T24] usb 2-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  988.533393][   T24] usb 2-1: No valid video chain found.
[  988.714245][   T24] usb 2-1: USB disconnect, device number 93
[  989.794244][T17938] usb 7-1: new high-speed USB device number 23 using dummy_hcd
[  989.958351][T17938] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  989.977556][T17938] usb 7-1: config 0 interface 0 has no altsetting 0
[  990.007464][T17938] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  990.031450][T17938] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  990.066798][T17938] usb 7-1: Product: syz
[  990.093347][T17938] usb 7-1: Manufacturer: syz
[  990.109717][T17938] usb 7-1: SerialNumber: syz
[  990.133199][T17938] usb 7-1: config 0 descriptor??
[  990.150146][T17938] usb 7-1: selecting invalid altsetting 0
[  990.397868][   T24] usb 7-1: USB disconnect, device number 23
[  990.678828][T19160] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  990.744545][ T1209] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  990.914183][ T1209] usb 3-1: Using ep0 maxpacket: 8
[  990.935968][ T1209] usb 3-1: unable to get BOS descriptor or descriptor too short
[  990.946757][ T1209] usb 3-1: config 8 has an invalid interface number: 255 but max is 0
[  990.960323][ T1209] usb 3-1: config 8 has no interface number 0
[  990.964283][   T24] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[  990.975591][ T1209] usb 3-1: config 8 interface 255 has no altsetting 0
[  990.989943][ T1209] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[  991.004596][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.023137][ T1209] usb 3-1: Product: syz
[  991.041305][ T1209] usb 3-1: Manufacturer: syz
[  991.051460][ T1209] usb 3-1: SerialNumber: syz
[  991.167200][   T24] usb 2-1: not running at top speed; connect to a high speed hub
[  991.246160][   T24] usb 2-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  991.265141][   T24] usb 2-1: config 1 interface 0 has no altsetting 0
[  991.353899][ T1209] catc 3-1:8.255: Can't set altsetting 1.
[  991.373047][ T1209] catc 3-1:8.255: probe with driver catc failed with error -5
[  991.374756][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  991.396455][   T30] audit: type=1326 audit(1753349859.482:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19173 comm="syz.5.3172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f606638e9a9 code=0x0
[  991.402712][ T1209] usb 3-1: USB disconnect, device number 57
[  991.462242][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  991.480413][   T24] usb 2-1: Product: ᐌ
[  991.488174][   T24] usb 2-1: Manufacturer: ၦ㟢ܾ铝䎝ዴ䕀㛦괝筯ㄐ⅕씼挙㇏䅂쐐掬ힾ㰨ᩀ뜝ﱠ焪궭㈠⍓ꟑ粕麩爵쬨胉轊耷㥄ঠꐘ棖榶﫝ᇛ᭵㭞馁仕뇇힭څ䮙ꆔ
[  991.512789][   T24] usb 2-1: SerialNumber: ဉ
[  991.665784][  T979] usb 6-1: new full-speed USB device number 104 using dummy_hcd
[  991.761451][T19185] Cannot find del_set index 2 as target
[  991.799694][   T24] usb 2-1: USB disconnect, device number 94
[  991.835360][  T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  991.874746][  T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  991.895119][  T979] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  991.905550][  T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  991.917531][  T979] usb 6-1: config 0 descriptor??
[  991.923285][T19175] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  991.937134][  T979] usb 6-1: Found UVC 0.00 device <unnamed> (10c4:ea90)
[  991.944285][  T979] usb 6-1: No valid video chain found.
[  992.257521][T19199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  992.266628][T19199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  992.276293][T19199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  992.285875][T19199] geneve2: entered promiscuous mode
[  992.291178][T19199] geneve2: entered allmulticast mode
[  992.366283][T19199] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  992.375948][T19199] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  992.385262][T19199] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  994.314751][ T1209] usb 6-1: USB disconnect, device number 104
[  994.647707][T19229] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3187'.
[  994.726720][T19233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3188'.
[  994.771234][T19233] lo: Caught tx_queue_len zero misconfig
[  994.996238][T19242] netlink: 'syz.2.3192': attribute type 1 has an invalid length.
[  995.041514][T19243] kvm: requested 3352 ns i8254 timer period limited to 200000 ns
[  995.046138][T19242] 8021q: adding VLAN 0 to HW filter on device bond4
[  995.149578][T19252] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  995.206493][T19255] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3190'.
[  996.322537][  T979] usb 6-1: new full-speed USB device number 105 using dummy_hcd
[  996.350506][T19255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  996.433259][T19255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  996.478271][  T979] usb 6-1: unable to get BOS descriptor or descriptor too short
[  996.509032][  T979] usb 6-1: not running at top speed; connect to a high speed hub
[  996.519503][  T979] usb 6-1: config 11 has an invalid interface number: 3 but max is 1
[  996.530253][  T979] usb 6-1: config 11 has an invalid descriptor of length 0, skipping remainder of the config
[  996.565720][  T979] usb 6-1: config 11 has 1 interface, different from the descriptor's value: 2
[  996.597457][T19255] bond0 (unregistering): Released all slaves
[  996.740753][T19242] bond4: (slave gretap2): making interface the new active one
[  996.755521][T19242] bond4: (slave gretap2): Enslaving as an active interface with an up link
[  996.872539][  T979] usb 6-1: config 11 has no interface number 0
[  997.054795][  T979] usb 6-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice=9c.cd
[  997.064367][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  997.073160][  T979] usb 6-1: Product: syz
[  997.077596][  T979] usb 6-1: Manufacturer: syz
[  997.082278][  T979] usb 6-1: SerialNumber: syz
[  998.343164][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  998.349679][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  998.385668][T19273] ALSA: mixer_oss: invalid OSS volume '��tv69��t'
[  998.546633][  T979] usb 6-1: USB disconnect, device number 105
[  998.627403][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:11.3/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  999.134811][  T979] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[  999.342258][  T979] usb 6-1: config 0 has no interfaces?
[  999.362595][  T979] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  999.375277][  T979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.383850][  T979] usb 6-1: Product: syz
[  999.391928][  T979] usb 6-1: Manufacturer: syz
[  999.444671][T19284] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3201'.
[  999.476594][  T979] usb 6-1: SerialNumber: syz
[  999.498732][  T979] usb 6-1: config 0 descriptor??
[  999.544582][T19284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3201'.
[  999.654142][   T24] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[ 1000.064169][   T24] usb 7-1: device descriptor read/64, error -71
[ 1000.475705][   T24] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[ 1000.634226][   T24] usb 7-1: device descriptor read/64, error -71
[ 1000.744845][   T24] usb usb7-port1: attempt power cycle
[ 1000.844371][T17938] usb 2-1: new full-speed USB device number 95 using dummy_hcd
[ 1001.006610][T17938] usb 2-1: config 150 has an invalid interface number: 204 but max is 1
[ 1001.021562][T17938] usb 2-1: config 150 has no interface number 0
[ 1001.034348][T17938] usb 2-1: config 150 interface 204 has no altsetting 0
[ 1001.045956][T17938] usb 2-1: config 150 interface 1 has no altsetting 0
[ 1001.067683][T17938] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[ 1001.076897][T17938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1001.085230][T17938] usb 2-1: Product: syz
[ 1001.089441][T17938] usb 2-1: Manufacturer: syz
[ 1001.094215][T17938] usb 2-1: SerialNumber: syz
[ 1001.094566][   T24] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[ 1001.138983][   T24] usb 7-1: device descriptor read/8, error -71
[ 1001.319999][T17938] xr_serial 2-1:150.204: xr_serial converter detected
[ 1001.394339][   T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[ 1001.415402][   T24] usb 7-1: device descriptor read/8, error -71
[ 1001.424233][  T979] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[ 1001.529335][   T24] usb usb7-port1: unable to enumerate USB device
[ 1001.588349][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 86, changing to 10
[ 1001.603349][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1001.614370][  T979] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[ 1001.623521][  T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1001.634718][  T979] usb 3-1: config 0 descriptor??
[ 1001.720771][ T1209] usb 6-1: USB disconnect, device number 106
[ 1001.871755][T19292] xt_connbytes: Forcing CT accounting to be enabled
[ 1001.889140][T19292] Cannot find add_set index 0 as target
[ 1002.139687][  T979] waltop 0003:172F:0037.0036: item fetching failed at offset 10/11
[ 1002.170043][  T979] waltop 0003:172F:0037.0036: probe with driver waltop failed with error -22
[ 1002.170948][T17938] usb 2-1: xr_serial converter now attached to ttyUSB0
[ 1002.216555][    T9] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1002.227767][T19303] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3208'.
[ 1002.337270][ T1209] usb 3-1: USB disconnect, device number 58
[ 1002.376450][    T9] usb 6-1: config 0 has an invalid interface number: 226 but max is 0
[ 1002.391627][    T9] usb 6-1: config 0 has no interface number 0
[ 1002.423518][    T9] usb 6-1: config 0 interface 226 has no altsetting 0
[ 1002.453718][    T9] usb 6-1: New USB device found, idVendor=1110, idProduct=9001, bcdDevice=94.cc
[ 1002.489127][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1002.511976][    T9] usb 6-1: Product: syz
[ 1002.516979][    T9] usb 6-1: Manufacturer: syz
[ 1002.521706][    T9] usb 6-1: SerialNumber: syz
[ 1002.537893][    T9] usb 6-1: config 0 descriptor??
[ 1002.667022][T19316] x_tables: duplicate underflow at hook 1
[ 1002.673228][T19317] x_tables: duplicate underflow at hook 1
[ 1002.756655][    C0] raw-gadget.0 gadget.5: ignoring, device is not running
[ 1002.767524][    T9] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9001) Rev (0X94CC): ADI930
[ 1002.983424][  T979] usb 2-1: USB disconnect, device number 95
[ 1003.031128][  T979] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[ 1003.072245][  T979] xr_serial 2-1:150.204: device disconnected
[ 1003.244235][T17938] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[ 1003.441286][T17938] usb 3-1: Using ep0 maxpacket: 8
[ 1003.480575][T17938] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[ 1003.587855][    T9] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1003.595918][    T9] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/adi930.fw
[ 1003.604638][ T1209] usb 6-1: Direct firmware load for ueagle-atm/adi930.fw failed with error -2
[ 1003.614587][ T1209] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/adi930.fw
[ 1003.624566][T19337] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3216'.
[ 1003.633581][T19337] openvswitch: netlink: Flow key attr not present in new flow.
[ 1003.644778][    T9] usb 6-1: USB disconnect, device number 107
[ 1003.654218][T17938] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1003.913613][T17938] usb 3-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00
[ 1003.980212][ T1209] ------------[ cut here ]------------
[ 1003.986203][ T1209] WARNING: CPU: 0 PID: 1209 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90
[ 1003.994784][ T1209] Modules linked in:
[ 1003.999061][ T1209] CPU: 0 UID: 0 PID: 1209 Comm: kworker/0:2 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) 
[ 1004.011564][ T1209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1004.021777][ T1209] Workqueue: events request_firmware_work_func
[ 1004.028023][ T1209] RIP: 0010:kernfs_get+0x72/0x90
[ 1004.033353][ T1209] Code: e8 b3 32 64 ff 48 89 df be 04 00 00 00 e8 46 47 c6 ff f0 ff 03 eb 05 e8 9c 32 64 ff 5b 5d c3 cc cc cc cc cc e8 8f 32 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 45
[ 1004.053564][ T1209] RSP: 0018:ffffc9000407f5e0 EFLAGS: 00010293
[ 1004.059726][ T1209] RAX: ffffffff825bf441 RBX: ffff888079dd4f00 RCX: ffff888027531e00
[ 1004.067990][ T1209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1004.076088][ T1209] RBP: 0000000000000000 R08: ffff888079dd4f03 R09: 1ffff1100f3ba9e0
[ 1004.084701][ T1209] R10: dffffc0000000000 R11: ffffed100f3ba9e1 R12: ffff888030fc0ba8
[ 1004.092702][ T1209] R13: 1ffff110061f8176 R14: ffff888030fc0bb0 R15: 1ffff110061f8175
[ 1004.101154][ T1209] FS:  0000000000000000(0000) GS:ffff888125c23000(0000) knlGS:0000000000000000
[ 1004.110267][ T1209] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1004.116918][ T1209] CR2: 00002000000ca030 CR3: 0000000032966000 CR4: 00000000003526f0
[ 1004.124997][ T1209] DR0: 0000000000000007 DR1: 0000000000104e69 DR2: 00000000000007ff
[ 1004.132980][ T1209] DR3: 0000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1004.141367][ T1209] Call Trace:
[ 1004.144953][ T1209]  <TASK>
[ 1004.147903][ T1209]  kobject_add_internal+0x632/0xb40
[ 1004.153130][ T1209]  kobject_add+0x155/0x220
[ 1004.157625][ T1209]  ? __pfx_kobject_add+0x10/0x10
[ 1004.162590][ T1209]  ? kobject_init+0x83/0x1e0
[ 1004.167301][ T1209]  get_device_parent+0x316/0x3a0
[ 1004.172266][ T1209]  device_add+0x2e1/0xb50
[ 1004.176685][ T1209]  firmware_fallback_sysfs+0x2e4/0x9b0
[ 1004.182173][ T1209]  _request_firmware+0xf83/0x15b0
[ 1004.187308][ T1209]  ? __pfx__request_firmware+0x10/0x10
[ 1004.192896][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[ 1004.198707][ T1209]  request_firmware_work_func+0xaf/0x1c0
[ 1004.204421][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[ 1004.210186][ T1209]  process_scheduled_works+0xae1/0x17b0
[ 1004.215804][ T1209]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1004.221811][ T1209]  worker_thread+0x8a0/0xda0
[ 1004.226490][ T1209]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1004.232842][ T1209]  ? __kthread_parkme+0x7b/0x200
[ 1004.238182][ T1209]  kthread+0x70e/0x8a0
[ 1004.242284][ T1209]  ? __pfx_worker_thread+0x10/0x10
[ 1004.247740][ T1209]  ? __pfx_kthread+0x10/0x10
[ 1004.252356][ T1209]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1004.257636][ T1209]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1004.262848][ T1209]  ? __pfx_kthread+0x10/0x10
[ 1004.267583][ T1209]  ret_from_fork+0x3fc/0x770
[ 1004.272193][ T1209]  ? __pfx_ret_from_fork+0x10/0x10
[ 1004.277367][ T1209]  ? __switch_to_asm+0x39/0x70
[ 1004.282163][ T1209]  ? __switch_to_asm+0x33/0x70
[ 1004.287016][ T1209]  ? __pfx_kthread+0x10/0x10
[ 1004.291645][ T1209]  ret_from_fork_asm+0x1a/0x30
[ 1004.296497][ T1209]  </TASK>
[ 1004.299540][ T1209] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1004.306829][ T1209] CPU: 0 UID: 0 PID: 1209 Comm: kworker/0:2 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(full) 
[ 1004.318996][ T1209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1004.329058][ T1209] Workqueue: events request_firmware_work_func
[ 1004.335234][ T1209] Call Trace:
[ 1004.338528][ T1209]  <TASK>
[ 1004.341496][ T1209]  dump_stack_lvl+0x99/0x250
[ 1004.346117][ T1209]  ? __asan_memcpy+0x40/0x70
[ 1004.350720][ T1209]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1004.355933][ T1209]  ? __pfx__printk+0x10/0x10
[ 1004.360551][ T1209]  panic+0x2db/0x790
[ 1004.364486][ T1209]  ? __pfx_panic+0x10/0x10
[ 1004.368910][ T1209]  ? show_trace_log_lvl+0x4fb/0x550
[ 1004.374151][ T1209]  ? ret_from_fork_asm+0x1a/0x30
[ 1004.379106][ T1209]  __warn+0x31b/0x4b0
[ 1004.383097][ T1209]  ? kernfs_get+0x72/0x90
[ 1004.387436][ T1209]  ? kernfs_get+0x72/0x90
[ 1004.391775][ T1209]  report_bug+0x2be/0x4f0
[ 1004.396116][ T1209]  ? kernfs_get+0x72/0x90
[ 1004.400448][ T1209]  ? kernfs_get+0x72/0x90
[ 1004.404799][ T1209]  ? kernfs_get+0x74/0x90
[ 1004.409163][ T1209]  handle_bug+0x84/0x160
[ 1004.413442][ T1209]  exc_invalid_op+0x1a/0x50
[ 1004.417961][ T1209]  asm_exc_invalid_op+0x1a/0x20
[ 1004.422817][ T1209] RIP: 0010:kernfs_get+0x72/0x90
[ 1004.427765][ T1209] Code: e8 b3 32 64 ff 48 89 df be 04 00 00 00 e8 46 47 c6 ff f0 ff 03 eb 05 e8 9c 32 64 ff 5b 5d c3 cc cc cc cc cc e8 8f 32 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 45
[ 1004.447383][ T1209] RSP: 0018:ffffc9000407f5e0 EFLAGS: 00010293
[ 1004.453488][ T1209] RAX: ffffffff825bf441 RBX: ffff888079dd4f00 RCX: ffff888027531e00
[ 1004.461472][ T1209] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1004.469452][ T1209] RBP: 0000000000000000 R08: ffff888079dd4f03 R09: 1ffff1100f3ba9e0
[ 1004.477438][ T1209] R10: dffffc0000000000 R11: ffffed100f3ba9e1 R12: ffff888030fc0ba8
[ 1004.485472][ T1209] R13: 1ffff110061f8176 R14: ffff888030fc0bb0 R15: 1ffff110061f8175
[ 1004.493470][ T1209]  ? kernfs_get+0x71/0x90
[ 1004.497827][ T1209]  kobject_add_internal+0x632/0xb40
[ 1004.503074][ T1209]  kobject_add+0x155/0x220
[ 1004.507535][ T1209]  ? __pfx_kobject_add+0x10/0x10
[ 1004.512500][ T1209]  ? kobject_init+0x83/0x1e0
[ 1004.517115][ T1209]  get_device_parent+0x316/0x3a0
[ 1004.522080][ T1209]  device_add+0x2e1/0xb50
[ 1004.526439][ T1209]  firmware_fallback_sysfs+0x2e4/0x9b0
[ 1004.531924][ T1209]  _request_firmware+0xf83/0x15b0
[ 1004.536979][ T1209]  ? __pfx__request_firmware+0x10/0x10
[ 1004.542455][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[ 1004.548195][ T1209]  request_firmware_work_func+0xaf/0x1c0
[ 1004.553858][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[ 1004.559611][ T1209]  process_scheduled_works+0xae1/0x17b0
[ 1004.565190][ T1209]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1004.571214][ T1209]  worker_thread+0x8a0/0xda0
[ 1004.575820][ T1209]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1004.582165][ T1209]  ? __kthread_parkme+0x7b/0x200
[ 1004.587123][ T1209]  kthread+0x70e/0x8a0
[ 1004.591210][ T1209]  ? __pfx_worker_thread+0x10/0x10
[ 1004.596335][ T1209]  ? __pfx_kthread+0x10/0x10
[ 1004.600940][ T1209]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1004.606150][ T1209]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1004.611355][ T1209]  ? __pfx_kthread+0x10/0x10
[ 1004.615962][ T1209]  ret_from_fork+0x3fc/0x770
[ 1004.620562][ T1209]  ? __pfx_ret_from_fork+0x10/0x10
[ 1004.625687][ T1209]  ? __switch_to_asm+0x39/0x70
[ 1004.630539][ T1209]  ? __switch_to_asm+0x33/0x70
[ 1004.635333][ T1209]  ? __pfx_kthread+0x10/0x10
[ 1004.639954][ T1209]  ret_from_fork_asm+0x1a/0x30
[ 1004.644770][ T1209]  </TASK>
[ 1004.648084][ T1209] Kernel Offset: disabled
[ 1004.652424][ T1209] Rebooting in 86400 seconds..