last executing test programs:

1m5.137122859s ago: executing program 4 (id=3468):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r0, 0xf7)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x4)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004)
rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
setrlimit(0x7, &(0x7f0000000380)={0x1, 0x9})
accept4(r4, 0x0, 0x0, 0x800)
io_setup(0x4, 0x0)
fanotify_init(0x0, 0x0)
io_submit(0x0, 0x0, &(0x7f00000002c0))
ioctl$TIOCVHANGUP(r3, 0x5437, 0x0)
syslog(0x3, &(0x7f00000004c0)=""/164, 0xa4)

1m1.532067254s ago: executing program 4 (id=3472):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='lock n'], 0xa)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1})
r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, &(0x7f00000016c0)="307006fd42fa361d0322d0422a96f816aa80afa2cbde9a87d70b63424a8241a18dc8b8b75332fbb1b1ef7809c5df38768ceff839d68a075d4e8e7d639339e30467468cd215c79dfc26879a23f5e0616c5cee33e120c379ad408bff33d1bf559f90095384fd5403508056945f08a9c44472428ec952a045fcca8219f93ae809ab22077ca9efca091fe07295890857a2043c766e4275173f9b91", 0x99, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7}, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x0, 0x0, &(0x7f0000000240)})

59.854683723s ago: executing program 4 (id=3476):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_emit_ethernet(0xc2, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT=r1], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x400, 0x70bd25, 0x25dfdbfb, {{@in6=@empty, @in=@broadcast, 0x4e23, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x0, 0x8}, 0x6e6bb1}, [@offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1}, 0x48002)

58.174255297s ago: executing program 4 (id=3481):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8), 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, <r5=>r3, 0x80000})
r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5})
r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x2, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50})
r9 = fsmount(r7, 0x0, 0x6)
fchdir(r9)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)

56.258102619s ago: executing program 4 (id=3484):
syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2)
r0 = syz_open_dev$usbfs(0x0, 0x77, 0x101301)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0/file0\x00'})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000))
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0xc}], 0x1, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0xa0, 0x6, 0x0, 0x1, 0x0, 0x2000, 0x0})
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, 0x0, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)

54.042864908s ago: executing program 4 (id=3487):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000fcdbdf250000000000000000000000000000000020010000000000000000000000000000000000004e2400000200002021000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2})
io_uring_setup(0x3eaf, &(0x7f0000000100))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@getchain={0x3c, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0x3, 0x4}, {0x2, 0x10}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}]}, 0x3c}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

38.951938762s ago: executing program 32 (id=3487):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd7000fcdbdf250000000000000000000000000000000020010000000000000000000000000000000000004e2400000200002021000000", @ANYRES32=0x0, @ANYRES32=0x0], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0)
io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xdf4, 0x80, 0x7, 0x2})
io_uring_setup(0x3eaf, &(0x7f0000000100))
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r4 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc04c560f, &(0x7f0000000280)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x100000, 0x1, {}, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, "5c0a0551"}, 0x5141, 0x1, {0x0}, 0x2, 0x20000000})
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)=@getchain={0x3c, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x6}, {0x3, 0x4}, {0x2, 0x10}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}]}, 0x3c}}, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)

13.084631084s ago: executing program 0 (id=3547):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_emit_ethernet(0xc2, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT=r1], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x400, 0x70bd25, 0x25dfdbfb, {{@in6=@empty, @in=@broadcast, 0x4e23, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x0, 0x8}, 0x6e6bb1}, [@offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1}, 0x48002)

12.210259978s ago: executing program 3 (id=3548):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1})

10.131396069s ago: executing program 5 (id=3512):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_emit_ethernet(0xc2, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT=r1], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x400, 0x70bd25, 0x25dfdbfb, {{@in6=@empty, @in=@broadcast, 0x4e23, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x0, 0x8}, 0x6e6bb1}, [@offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1}, 0x48002)

10.130475635s ago: executing program 0 (id=3559):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
socket$kcm(0x10, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})

10.120122308s ago: executing program 3 (id=3562):
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
fgetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0)
fanotify_init(0x200, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_open_dev$ndb(0x0, 0x0, 0x115440)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={<r4=>0x0}, &(0x7f0000000240)=0xc)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000280)=r4)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x2bc, 0x130, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f4, 0xffffffff, 0xffffffff, 0x1f4, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x7, 0x1, 0x3, 'snmp_trap\x00', 'syz0\x00', {0x1000}}}}, {{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x318)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffd7c)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2b, 0xf, &(0x7f00000006c0)=@raw=[@ringbuf_query, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f00000002c0)='GPL\x00', 0x6b, 0xef, &(0x7f0000000740)=""/239, 0x41000, 0x30, '\x00', 0x0, @fallback=0x2f, r5, 0x8, &(0x7f00000008c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x1, 0x6, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x2, 0x3, 0xf, 0x5}, {0x3, 0x1, 0xb, 0xb}], 0x10, 0x400}, 0x94)
bind$alg(r5, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x40})
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)

8.205813693s ago: executing program 5 (id=3550):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010000305000000000000002500000000", @ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b00010062726964676500000c0002800500190006000000"], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0xf7e)
read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xe)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x280)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000300)=@generic={0x3, 0x1, 0x3})
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

8.20532468s ago: executing program 0 (id=3564):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})

8.203609785s ago: executing program 1 (id=3551):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x30}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@in={0x2, 0x0, @remote}, 0x0)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

7.614540127s ago: executing program 2 (id=3553):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_io_uring_submit(0x0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = fsopen(&(0x7f0000000040)='binfmt_misc\x00', 0x1)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, 0x0, 0x48040)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$kcm(0xa, 0x3, 0x3a)
ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040))
mknodat$null(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x8000, 0x103)
pipe2$9p(&(0x7f0000000240), 0x0)
r5 = fsopen(&(0x7f0000000140)='erofs\x00', 0x0)
r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd2(0x20001, 0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000040)={0x8, 0x1000, 0x0, r8, 0x8})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)

7.613675938s ago: executing program 0 (id=3554):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x9)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f00000001c0))
socket$netlink(0x10, 0x3, 0x4)
bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
r5 = socket$kcm(0x10, 0x2, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010700000000fcdbdf"], 0x2c}}, 0x40)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e2000000400060008000a00b5"], 0x48}}, 0x4000)

7.058207815s ago: executing program 1 (id=3555):
signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x4, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpgid(0x0)
sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x7fff}, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}, 0x0, 0x0, <r4=>0xffffffffffffffff})
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000000000002000"], 0x40)
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2)
ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x0, 0x2, 0x4, 0x10, 0x5, {}, {0x1, 0xc, 0xd7, 0x7, 0x1, 0x3, "621a65f4"}, 0x1ff, 0x2, {0x0}, 0x6, 0x0, r4})
r6 = socket(0x40000000015, 0x5, 0x2)
close(r6)
sendto$inet6(r6, &(0x7f00000000c0)="c0b926743ee1", 0x6, 0x4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10}, 0x1c)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0)

6.987230982s ago: executing program 3 (id=3556):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8), 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, <r4=>0xffffffffffffffff, 0x80000})
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4})
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x2, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50})
r8 = fsmount(r6, 0x0, 0x6)
fchdir(r8)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)

5.84637528s ago: executing program 2 (id=3557):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = socket$unix(0x1, 0x2, 0x0)
preadv(r4, 0x0, 0x0, 0x1f1, 0x0)
socket$inet(0x2, 0x3, 0x1)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r5 = socket(0x10, 0x2, 0x0)
write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket(0x2, 0x80805, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
pipe2$watch_queue(0x0, 0x80)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)

5.734895737s ago: executing program 3 (id=3558):
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x20, 0x25, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xad5}, {}, {}, [@tail_call, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000}}, @call={0x85, 0x0, 0x0, 0x6}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x6, 0x15, &(0x7f00000001c0)=""/21, 0x41100, 0x46, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x4, 0x8, 0x5}, 0x10, 0x0, r3, 0x5, &(0x7f0000000880)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x0, 0x2, 0x4, 0x2}, {0x3, 0x4, 0xb, 0xc}, {0x1, 0x3, 0xe, 0xc}, {0x3, 0x2, 0x2, 0xa}, {0x1, 0x4, 0xc, 0xa}], 0x10, 0x2}, 0x94)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
dup(r4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000001540)=[0x0, 0x0], &(0x7f0000001580)=[{}, {}], &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x2})

5.208439614s ago: executing program 1 (id=3563):
syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0)
shutdown(r2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00v'], 0x24}, 0x1, 0x5502000000000000}, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/196], 0x119)
r6 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000200)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\x00\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^2\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8\xf7\x10\xe1R \x9a^\xdfq*L\xc4lP6\x8f\xff&>\x94\x882\x1c\x00\x00\xc5\xbdD(\xa5\x17\x11\xd6\t\x12\x7fe\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xc5\xa3_\xab\xf1\xf5\r\xb6\f\xfcS9\xd1.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/\xf5\xd1t\xc7\xeb\x04', 0x0)
r7 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc000000000000000000000000000000fe8800"/45, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000500000000000000000000000000000000000000ffffffff0000000000619dc19f2d0c437100000000000000000000000000000000000000000000000000000000000008000020000c00"], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
keyctl$restrict_keyring(0xa, r7, &(0x7f0000000300)='asymmetric\x00', 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
ptrace$ARCH_GET_GS(0x1e, 0x0, 0x0, 0x1004)
openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f)

3.751504261s ago: executing program 3 (id=3565):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_emit_ethernet(0xc2, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT=r1], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x400, 0x70bd25, 0x25dfdbfb, {{@in6=@empty, @in=@broadcast, 0x4e23, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x0, 0x8}, 0x6e6bb1}, [@offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1}, 0x48002)

3.03533999s ago: executing program 0 (id=3566):
socket(0x10, 0x803, 0x0)
write(0xffffffffffffffff, &(0x7f0000000080), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x81)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000002c0)=""/124)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x8], 0x1, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}}]}, 0x8c}}, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x1ff)
ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000340)={@local, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6, 0x101, 0x103, 0x400, 0x10, 0xc0150002, r4})
ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f0000000140))
syz_open_procfs(0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32, @ANYBLOB="000000f5ffffdfff44ef79c0c5e786c30040", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket(0xa, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0x13, 0x0, 0x0)
getsockopt$inet_opts(r8, 0x0, 0x6, 0x0, &(0x7f0000000000))
mmap(&(0x7f00005e8000/0x1000)=nil, 0x1000, 0x2000003, 0x28011, r7, 0xffff8000)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.938588512s ago: executing program 5 (id=3567):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x9, 0x0, 0x0, 0x0, @tick=0x9, {0x2}, {}, @raw32={[0x400000]}}], 0x1c)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
listen(r4, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r5, &(0x7f0000000080)=[{0x1d, 0x0, 0x8, 0xfd, @tick=0x1, {}, {0x0, 0x8}, @result}], 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB], 0x48)
modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10)
modify_ldt$read(0x0, &(0x7f0000002140)=""/4130, 0x1022)
socket(0x840000000002, 0x3, 0xff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)

2.575809235s ago: executing program 2 (id=3568):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0)

2.041146028s ago: executing program 2 (id=3569):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})

1.941749234s ago: executing program 1 (id=3570):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs$pagemap(0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES64=r2, @ANYBLOB="ed"], 0x20)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r3 = io_uring_setup(0x3454, &(0x7f0000000080))
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00', @ANYBLOB], 0x3c}}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80042, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001ac0)={r4, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd16c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x7fff]}})
ioctl$BLKRASET(r5, 0x1262, &(0x7f0000000040)=0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, &(0x7f0000000100)={0x0, 0x5, 0x1, 'queue0\x00', 0x1})
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)

1.878845157s ago: executing program 2 (id=3571):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0xb00)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
r4 = socket$inet(0xa, 0x801, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x30}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0)
getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@in={0x2, 0x0, @remote}, 0x0)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000050, 0x0, 0x0)
fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)

939.547518ms ago: executing program 3 (id=3572):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
socket(0x80000000000000a, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x42, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000300000000001400", @ANYRES64=r2], 0x38}}, 0x0)
syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000c80)=[{{&(0x7f0000000580)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x40000cc, 0xc000)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa010101, @in=@empty, 0x0, 0xbf, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, {0xfffffffffffffffb, 0xfffffffffffffffd, 0x1}, {0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf000000, 0x6}}, 0xe8)
listen(r4, 0x0)
r5 = fsopen(&(0x7f0000000540)='vxfs\x00', 0x0)
readv(r5, &(0x7f0000000680)=[{&(0x7f0000000200)=""/117, 0x75}, {0x0}], 0x2)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

855.346937ms ago: executing program 0 (id=3573):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8), 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, <r4=>0xffffffffffffffff, 0x80000})
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4})
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x2, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50})
r8 = fsmount(r6, 0x0, 0x6)
fchdir(r8)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)

735.660308ms ago: executing program 1 (id=3574):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
dup(r0)

251.885535ms ago: executing program 1 (id=3575):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8), 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, <r4=>r3, 0x80000})
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4})
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50})
r8 = fsmount(r6, 0x0, 0x6)
fchdir(r8)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81901)

193.972775ms ago: executing program 5 (id=3576):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[], 0x33fe0}}, 0x40010)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0)
write$vga_arbiter(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='lock n'], 0xa)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f00000000c0)={@hyper, 0x1})
r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
add_key$user(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, &(0x7f00000016c0)="307006fd42fa361d0322d0422a96f816aa80afa2cbde9a87d70b63424a8241a18dc8b8b75332fbb1b1ef7809c5df38768ceff839d68a075d4e8e7d639339e30467468cd215c79dfc26879a23f5e0616c5cee33e120c379ad408bff33d1bf559f90095384fd5403508056945f08a9c44472428ec952a045fcca8219f93ae809ab22077ca9efca091fe07295890857a2043c766e4275173f9b91", 0x99, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r7}, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done], 0x0, 0x0, &(0x7f0000000240)})

0s ago: executing program 2 (id=3577):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
syz_emit_ethernet(0xc2, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESOCT=r1], 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000000014000500ff02000000000000000000000000000114000400fe8000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=@getpolicy={0x5c, 0x15, 0x400, 0x70bd25, 0x25dfdbfb, {{@in6=@empty, @in=@broadcast, 0x4e23, 0x6, 0x4e22, 0x4, 0xa, 0x20, 0x0, 0x8}, 0x6e6bb1}, [@offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x0, 0xcb, 0xe7a, 0x2}, 0x10)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5e", 0x6c}], 0x1}, 0x48002)

kernel console output (not intermixed with test programs):

967295 subj=unconfined pid=24574 comm="syz.0.3157" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1660.575377][T24590] vhci_hcd: connection reset by peer
[ 1660.581303][  T168] vhci_hcd: stop threads
[ 1660.587340][  T168] vhci_hcd: release socket
[ 1660.592037][  T168] vhci_hcd: disconnect device
[ 1660.607171][ T5947] vhci_hcd: vhci_device speed not set
[ 1660.626223][ T5915] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1660.895809][ T5915] usb 1-1: config 0 has no interfaces?
[ 1661.025776][ T5915] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1661.091905][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1661.125433][ T5915] usb 1-1: Product: syz
[ 1661.189334][ T5915] usb 1-1: Manufacturer: syz
[ 1661.213531][ T5915] usb 1-1: SerialNumber: syz
[ 1661.246871][ T5915] usb 1-1: config 0 descriptor??
[ 1661.945724][T16051] usb usb42-port1: attempt power cycle
[ 1662.506295][T16051] usb usb42-port1: unable to enumerate USB device
[ 1663.201978][T24591] netdevsim netdevsim2: Direct firmware load for nel/address_bits failed with error -2
[ 1663.212295][T24591] netdevsim netdevsim2: Falling back to sysfs fallback for: nel/address_bits
[ 1663.286991][T24614] usb 1-1: USB disconnect, device number 80
[ 1663.828553][T24634] input: syz0 as /devices/virtual/input/input42
[ 1664.766664][T24092] vhci_hcd: vhci_device speed not set
[ 1666.362082][T24642] syzkaller0: entered promiscuous mode
[ 1666.377540][T24642] syzkaller0: entered allmulticast mode
[ 1666.870588][ T5947] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1667.034908][ T5947] usb 3-1: Using ep0 maxpacket: 8
[ 1667.056811][ T5947] usb 3-1: config 0 has an invalid interface number: 218 but max is 0
[ 1667.084329][ T5947] usb 3-1: config 0 has no interface number 0
[ 1667.153394][ T5947] usb 3-1: config 0 interface 218 has no altsetting 0
[ 1667.170625][ T5947] usb 3-1: New USB device found, idVendor=06cd, idProduct=011c, bcdDevice=b3.4b
[ 1667.435491][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1667.449268][ T5947] usb 3-1: Product: syz
[ 1667.453548][ T5947] usb 3-1: Manufacturer: syz
[ 1667.483634][ T5947] usb 3-1: SerialNumber: syz
[ 1667.544050][ T5947] usb 3-1: config 0 descriptor??
[ 1668.907459][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1668.913840][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.357488][T24680] hub 9-0:1.0: USB hub found
[ 1669.362812][T24680] hub 9-0:1.0: 1 port detected
[ 1672.364227][T21985] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[ 1672.544251][T21985] usb 5-1: Using ep0 maxpacket: 16
[ 1672.551964][T21985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[ 1672.563350][T21985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32770, setting to 1024
[ 1672.574934][T21985] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[ 1672.584026][T21985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1672.600558][ T5947] keyspan 3-1:0.218: Keyspan 1 port adapter converter detected
[ 1672.621192][T21985] usb 5-1: config 0 descriptor??
[ 1672.626506][ T5947] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 84
[ 1672.640002][ T5947] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 81
[ 1672.656405][ T5947] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 82
[ 1672.665474][ T5947] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 1
[ 1672.684508][ T5947] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 2
[ 1672.694710][ T5947] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 83
[ 1672.704483][ T5947] keyspan 3-1:0.218: found no endpoint descriptor for endpoint 3
[ 1672.713538][ T5947] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[ 1672.933305][T24092] usb 3-1: USB disconnect, device number 116
[ 1672.949524][T24092] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[ 1673.021807][T24092] keyspan 3-1:0.218: device disconnected
[ 1673.057450][T21985] bigben 0003:146B:0902.0010: unexpected rdesc, please submit for review
[ 1673.125518][T21985] bigben 0003:146B:0902.0010: unknown main item tag 0x0
[ 1673.173118][T21985] bigben 0003:146B:0902.0010: unknown main item tag 0x0
[ 1673.190843][T21985] bigben 0003:146B:0902.0010: unknown main item tag 0x0
[ 1673.216733][T21985] bigben 0003:146B:0902.0010: unknown main item tag 0x0
[ 1673.223716][T21985] bigben 0003:146B:0902.0010: item fetching failed at offset 4/5
[ 1673.359519][T21985] bigben 0003:146B:0902.0010: parse failed
[ 1673.600702][T21985] bigben 0003:146B:0902.0010: probe with driver bigben failed with error -22
[ 1673.673407][T21985] usb 5-1: USB disconnect, device number 116
[ 1673.756992][T24702] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3178'.
[ 1674.128605][T24702] syz.2.3178 (24702): drop_caches: 2
[ 1675.215339][   T30] kauditd_printk_skb: 23 callbacks suppressed
[ 1675.215350][   T30] audit: type=1326 audit(1761602197.884:2075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1675.324389][T24710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3180'.
[ 1675.431738][   T30] audit: type=1326 audit(1761602197.934:2076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24704 comm="syz.0.3179" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1676.684895][T24092] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[ 1676.884685][ T5915] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1677.031367][T24092] usb 2-1: Using ep0 maxpacket: 8
[ 1677.064850][T24720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1677.081720][T24092] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1677.100115][ T5915] usb 1-1: config 0 has no interfaces?
[ 1677.110300][T24092] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1677.131409][ T5915] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1677.146842][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.168097][T24092] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1677.209157][T24092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.223672][ T5915] usb 1-1: Product: syz
[ 1677.231245][ T5915] usb 1-1: Manufacturer: syz
[ 1677.238344][T24092] usb 2-1: Product: syz
[ 1677.242841][ T5915] usb 1-1: SerialNumber: syz
[ 1677.252761][T24092] usb 2-1: Manufacturer: syz
[ 1677.261728][ T5915] usb 1-1: config 0 descriptor??
[ 1677.269272][T24092] usb 2-1: SerialNumber: syz
[ 1677.495867][T24724] loop2: detected capacity change from 0 to 7
[ 1677.657434][T24737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3185'.
[ 1677.717117][T24092] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 1678.057475][T24092] usbtest 2-1:1.0: couldn't get endpoints, -22
[ 1678.078576][T24092] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[ 1678.105207][T24092] usb 2-1: USB disconnect, device number 100
[ 1679.985135][T24614] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[ 1680.268608][T24614] usb 5-1: config 0 has no interfaces?
[ 1680.282674][T24614] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1680.303356][T24614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1680.345390][ T5947] usb 1-1: USB disconnect, device number 81
[ 1680.423526][T24614] usb 5-1: Product: syz
[ 1680.467315][T24614] usb 5-1: Manufacturer: syz
[ 1680.471941][T24614] usb 5-1: SerialNumber: syz
[ 1680.646102][T24614] usb 5-1: config 0 descriptor??
[ 1681.466760][T24614] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[ 1681.722219][T24614] usb 4-1: Using ep0 maxpacket: 8
[ 1681.771163][T24614] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1681.795144][T24614] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1681.812187][T24614] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1681.865704][T24614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1682.077588][T24614] usb 4-1: Product: syz
[ 1682.086565][T24614] usb 4-1: Manufacturer: syz
[ 1682.112742][T24614] usb 4-1: SerialNumber: syz
[ 1682.349370][T24614] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 1682.380550][T24614] usbtest 4-1:1.0: couldn't get endpoints, -22
[ 1682.471223][T24614] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[ 1682.532165][T24769] loop2: detected capacity change from 0 to 7
[ 1682.585642][T24614] usb 4-1: USB disconnect, device number 106
[ 1682.615289][T16051] usb 5-1: USB disconnect, device number 117
[ 1682.716206][T24781] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3192'.
[ 1682.751754][T24781] syz.0.3192 (24781): drop_caches: 2
[ 1683.306674][   T30] audit: type=1326 audit(1761602205.974:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1683.502824][   T30] audit: type=1326 audit(1761602205.984:2078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1683.564167][   T30] audit: type=1326 audit(1761602205.984:2079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1683.621592][   T30] audit: type=1326 audit(1761602206.004:2080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1683.711906][   T30] audit: type=1326 audit(1761602206.004:2081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1683.823603][   T30] audit: type=1326 audit(1761602206.004:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1684.011631][T24797] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3195'.
[ 1684.041762][T24797] syz.3.3195 (24797): drop_caches: 2
[ 1684.263155][   T30] audit: type=1326 audit(1761602206.004:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1684.298876][   T30] audit: type=1326 audit(1761602206.014:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1684.425614][   T30] audit: type=1326 audit(1761602206.014:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1684.473658][   T30] audit: type=1326 audit(1761602206.014:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24786 comm="syz.1.3194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1686.100478][T24824] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3202'.
[ 1686.104778][T24824] syz.2.3202 (24824): drop_caches: 2
[ 1686.374520][T24614] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[ 1686.561598][T24614] usb 2-1: config 0 has no interfaces?
[ 1686.589028][T24614] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1686.603783][T24614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1686.633381][T24614] usb 2-1: Product: syz
[ 1686.771450][T24614] usb 2-1: Manufacturer: syz
[ 1686.981380][T24614] usb 2-1: SerialNumber: syz
[ 1687.066862][T24614] usb 2-1: config 0 descriptor??
[ 1687.274641][T24830] usb 1-1: new full-speed USB device number 82 using dummy_hcd
[ 1687.441599][T24830] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1687.460976][T24830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1687.481533][T24830] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1687.771714][T24830] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1687.791955][T24830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1687.803139][T24830] usb 1-1: Product: syz
[ 1687.840885][T24830] usb 1-1: Manufacturer: syz
[ 1687.851743][T24830] usb 1-1: SerialNumber: syz
[ 1687.926848][T24830] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[ 1687.945957][T24830] cdc_ncm 1-1:1.0: bind() failure
[ 1688.862442][T24825] bridge0: left allmulticast mode
[ 1688.943121][  T168] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1688.952389][  T168] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1688.961580][  T168] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1689.116165][T17866] usb 2-1: USB disconnect, device number 101
[ 1690.104246][T17866] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[ 1690.474150][T17866] usb 2-1: Using ep0 maxpacket: 8
[ 1690.812177][ T5914] usb 1-1: USB disconnect, device number 82
[ 1690.859824][T17866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1690.870222][T17866] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1690.982490][T17866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1691.001763][T17866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1691.010879][T17866] usb 2-1: Product: syz
[ 1691.015248][T17866] usb 2-1: Manufacturer: syz
[ 1691.019828][T17866] usb 2-1: SerialNumber: syz
[ 1691.081053][T17866] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 1691.110581][T17866] usbtest 2-1:1.0: couldn't get endpoints, -22
[ 1691.124743][T17866] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[ 1691.176695][T24879] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3208'.
[ 1691.208978][T24879] syz.2.3208 (24879): drop_caches: 2
[ 1691.661931][T24870] loop2: detected capacity change from 0 to 7
[ 1691.757583][T17866] usb 2-1: USB disconnect, device number 102
[ 1691.916886][T24881] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1693.185127][T24900] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3211'.
[ 1693.219195][T24900] syz.2.3211 (24900): drop_caches: 2
[ 1695.214198][T17866] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[ 1695.448950][T17866] usb 5-1: Using ep0 maxpacket: 8
[ 1695.457603][T17866] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1695.468526][T17866] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1695.612529][T17866] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1695.638873][T24919] tipc: Failed to remove unknown binding: 66,1,1/2886997007:125097597/125097599
[ 1695.651810][T24919] tipc: Failed to remove unknown binding: 66,1,1/2886997007:125097597/125097599
[ 1695.682879][T24919] tipc: Failed to remove unknown binding: 66,1,1/2886997007:125097597/125097599
[ 1695.920008][T24924] bridge6: entered promiscuous mode
[ 1695.942930][T17866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1695.954906][T17866] usb 5-1: Product: syz
[ 1695.997129][T17866] usb 5-1: Manufacturer: syz
[ 1696.005587][T17866] usb 5-1: SerialNumber: syz
[ 1696.032191][T17866] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 1696.049221][T17866] usbtest 5-1:1.0: couldn't get endpoints, -22
[ 1696.060880][T17866] usbtest 5-1:1.0: probe with driver usbtest failed with error -22
[ 1696.247137][T24910] loop2: detected capacity change from 0 to 7
[ 1696.290233][T24614] usb 5-1: USB disconnect, device number 118
[ 1698.110862][   T30] kauditd_printk_skb: 21 callbacks suppressed
[ 1698.110875][   T30] audit: type=1326 audit(1761602220.744:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1698.285789][   T30] audit: type=1326 audit(1761602220.744:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1698.313859][   T30] audit: type=1326 audit(1761602220.744:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1698.363974][   T30] audit: type=1326 audit(1761602220.744:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1698.439614][   T30] audit: type=1326 audit(1761602220.744:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1698.518666][   T30] audit: type=1326 audit(1761602220.744:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1698.545072][   T30] audit: type=1326 audit(1761602220.754:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1698.568281][   T30] audit: type=1326 audit(1761602220.754:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1698.698576][   T30] audit: type=1326 audit(1761602220.754:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1698.745521][   T30] audit: type=1326 audit(1761602220.754:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24932 comm="syz.4.3219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1700.274763][ T5914] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1700.496826][ T5914] usb 3-1: Using ep0 maxpacket: 16
[ 1700.578540][ T5914] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1700.608768][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1700.640689][ T5914] usb 3-1: Product: syz
[ 1700.755704][T24966] openvswitch: netlink: Message has 1 unknown bytes.
[ 1700.765246][T24966] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1701.218840][ T5914] usb 3-1: Manufacturer: syz
[ 1701.322047][ T5914] usb 3-1: SerialNumber: syz
[ 1701.370348][ T5914] r8152-cfgselector 3-1: Unknown version 0x0000
[ 1701.379437][ T5914] r8152-cfgselector 3-1: config 0 descriptor??
[ 1702.029038][ T5914] r8152-cfgselector 3-1: Unknown version 0x0000
[ 1702.037172][ T5914] r8152-cfgselector 3-1: bad CDC descriptors
[ 1702.293403][ T5914] r8152-cfgselector 3-1: USB disconnect, device number 117
[ 1702.707168][T24979] geneve3: entered promiscuous mode
[ 1702.712511][T24979] geneve3: entered allmulticast mode
[ 1706.292731][T25009] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[ 1706.299377][T25009] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1706.307792][T25010] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14)
[ 1706.314408][T25010] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1706.421926][T25009] vhci_hcd vhci_hcd.0: Device attached
[ 1706.461282][   T30] kauditd_printk_skb: 23 callbacks suppressed
[ 1706.461298][   T30] audit: type=1326 audit(1761602229.104:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1706.494260][T25010] vhci_hcd vhci_hcd.0: Device attached
[ 1706.504968][T25022] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1706.521502][T25026] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3235'.
[ 1706.590424][T25026] syz.0.3235 (25026): drop_caches: 2
[ 1706.655353][T25014] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(17)
[ 1706.661984][T25014] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1706.678743][T25014] vhci_hcd vhci_hcd.0: Device attached
[ 1706.713907][   T30] audit: type=1326 audit(1761602229.104:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1706.812079][T25027] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13)
[ 1706.818710][T25027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1706.822216][   T30] audit: type=1326 audit(1761602229.104:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1706.829588][T25027] vhci_hcd vhci_hcd.0: Device attached
[ 1706.848543][T21985] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[ 1706.964840][T25009] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19)
[ 1706.971454][T25009] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1707.012673][   T30] audit: type=1326 audit(1761602229.104:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1707.055628][T25009] vhci_hcd vhci_hcd.0: Device attached
[ 1707.147261][T25009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1707.173648][T25009] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1707.344277][   T30] audit: type=1326 audit(1761602229.104:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1707.366967][T25010] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1707.390592][T25009] vhci_hcd vhci_hcd.0: port 0 already used
[ 1707.420013][T25015] vhci_hcd: connection closed
[ 1707.420270][T25011] vhci_hcd: connection reset by peer
[ 1707.422569][T25016] vhci_hcd: connection closed
[ 1707.425540][   T13] vhci_hcd: stop threads
[ 1707.425559][   T13] vhci_hcd: release socket
[ 1707.425605][   T13] vhci_hcd: disconnect device
[ 1707.453489][  T168] vhci_hcd: stop threads
[ 1707.480653][T25033] vhci_hcd: connection closed
[ 1707.504123][T25029] vhci_hcd: connection closed
[ 1707.566752][  T168] vhci_hcd: release socket
[ 1707.578400][  T168] vhci_hcd: disconnect device
[ 1707.882755][  T168] vhci_hcd: stop threads
[ 1707.891343][  T168] vhci_hcd: release socket
[ 1707.896359][  T168] vhci_hcd: disconnect device
[ 1707.915125][  T168] vhci_hcd: stop threads
[ 1707.919382][  T168] vhci_hcd: release socket
[ 1707.934063][   T30] audit: type=1326 audit(1761602229.104:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1707.961163][  T168] vhci_hcd: disconnect device
[ 1707.995176][  T168] vhci_hcd: stop threads
[ 1708.000770][  T168] vhci_hcd: release socket
[ 1708.026307][   T30] audit: type=1326 audit(1761602229.104:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1708.271966][  T168] vhci_hcd: disconnect device
[ 1708.283137][   T30] audit: type=1326 audit(1761602229.114:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1708.305086][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1708.400356][   T30] audit: type=1326 audit(1761602229.114:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1708.422439][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1708.485958][T25051] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3238'.
[ 1708.671184][   T30] audit: type=1326 audit(1761602229.114:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25013 comm="syz.2.3234" exe="/root/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1708.774614][T25051] syz.1.3238 (25051): drop_caches: 2
[ 1709.005834][T25060] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3240'.
[ 1709.029278][T25060] syz.0.3240 (25060): drop_caches: 2
[ 1712.004990][T21985] vhci_hcd: vhci_device speed not set
[ 1713.225165][T24848] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[ 1713.491394][T25108] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1713.504424][T25108] tipc: Enabled bearer <ib:wg1>, priority 0
[ 1713.640763][T17866] usb usb40-port1: attempt power cycle
[ 1713.770805][T24848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1713.903029][   T30] kauditd_printk_skb: 19 callbacks suppressed
[ 1713.903046][   T30] audit: type=1326 audit(1761602236.494:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1713.998222][T24848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1714.007805][T24848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1714.020819][   T30] audit: type=1326 audit(1761602236.494:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1714.126007][T24848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1714.437381][T24848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1714.444696][   T30] audit: type=1326 audit(1761602236.494:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1714.537030][T17143] tipc: Node number set to 4269801488
[ 1714.666665][T24848] usb 2-1: Product: syz
[ 1714.671066][T24848] usb 2-1: Manufacturer: syz
[ 1714.676705][T17866] usb usb40-port1: unable to enumerate USB device
[ 1714.691993][T24848] usb 2-1: SerialNumber: syz
[ 1714.698787][   T30] audit: type=1326 audit(1761602236.494:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1714.720846][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1714.779486][T24848] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[ 1714.791592][T24848] cdc_ncm 2-1:1.0: bind() failure
[ 1714.964317][   T30] audit: type=1326 audit(1761602236.494:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1715.382271][   T30] audit: type=1326 audit(1761602236.494:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1715.532700][   T30] audit: type=1326 audit(1761602236.494:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1715.547959][T25127] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3252'.
[ 1715.698596][   T30] audit: type=1326 audit(1761602236.494:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1715.721221][   T30] audit: type=1326 audit(1761602236.494:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=8 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1715.914369][   T30] audit: type=1326 audit(1761602236.494:2179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25103 comm="syz.3.3249" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1716.488577][T25139] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3256'.
[ 1716.577892][T25139] syz.2.3256 (25139): drop_caches: 2
[ 1717.575747][T17866] usb 2-1: USB disconnect, device number 103
[ 1717.735430][T25148] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1719.238700][ T5914] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[ 1719.424814][ T5914] usb 4-1: Using ep0 maxpacket: 8
[ 1719.460853][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1719.501616][ T5914] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1719.763730][ T5914] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1719.776486][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1719.829031][ T5914] usb 4-1: Product: syz
[ 1719.837034][ T5914] usb 4-1: Manufacturer: syz
[ 1719.841801][ T5914] usb 4-1: SerialNumber: syz
[ 1719.895534][ T5914] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 1719.936002][ T5914] usbtest 4-1:1.0: couldn't get endpoints, -22
[ 1719.949785][ T5914] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[ 1720.112540][T25168] loop2: detected capacity change from 0 to 7
[ 1720.214662][ T5914] usb 4-1: USB disconnect, device number 107
[ 1720.993503][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 1720.993522][   T30] audit: type=1326 audit(1761602243.654:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1721.029286][   T30] audit: type=1326 audit(1761602243.684:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1721.053095][   T30] audit: type=1326 audit(1761602243.684:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1721.198676][   T30] audit: type=1326 audit(1761602243.694:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1721.312235][   T30] audit: type=1326 audit(1761602243.694:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1721.362417][   T30] audit: type=1326 audit(1761602243.694:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1721.417030][   T30] audit: type=1326 audit(1761602243.694:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1721.442921][T25191] tipc: New replicast peer: 255.255.255.255
[ 1721.449890][T25191] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1721.457172][T25191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3266'.
[ 1721.466201][T25191] tipc: Disabling bearer <udp:syz2>
[ 1721.757033][   T30] audit: type=1326 audit(1761602243.694:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1721.780259][   T30] audit: type=1326 audit(1761602243.694:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1721.988372][   T30] audit: type=1326 audit(1761602243.694:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25179 comm="syz.2.3264" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1722.234030][ T5915] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[ 1722.487966][T25202] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3269'.
[ 1722.509918][T25202] syz.2.3269 (25202): drop_caches: 2
[ 1722.675313][ T5915] usb 5-1: Using ep0 maxpacket: 8
[ 1722.686017][ T5915] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[ 1722.697814][ T5915] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[ 1722.717069][ T5915] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[ 1722.726446][ T5915] usb 5-1: Product: syz
[ 1722.731164][ T5915] usb 5-1: Manufacturer: syz
[ 1722.756564][ T5915] usb 5-1: SerialNumber: syz
[ 1723.536575][T25212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3280'.
[ 1723.545696][T25212] sch_tbf: burst 274 is lower than device lo mtu (11337746) !
[ 1723.609823][ T5915] usb 5-1: Invalid connection information received from device
[ 1723.988773][T25219] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3272'.
[ 1724.047445][T25219] syz.1.3272 (25219): drop_caches: 2
[ 1724.205336][ T5915] usb 5-1: USB disconnect, device number 119
[ 1724.265466][T24614] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1724.425126][T24614] usb 3-1: Using ep0 maxpacket: 8
[ 1724.450729][T24614] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1724.450777][T24614] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1724.779060][T24614] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1724.779091][T24614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1724.779109][T24614] usb 3-1: Product: syz
[ 1724.779125][T24614] usb 3-1: Manufacturer: syz
[ 1724.779140][T24614] usb 3-1: SerialNumber: syz
[ 1724.801331][T24614] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 1724.802210][T24614] usbtest 3-1:1.0: couldn't get endpoints, -22
[ 1724.802291][T24614] usbtest 3-1:1.0: probe with driver usbtest failed with error -22
[ 1725.290598][T25215] loop2: detected capacity change from 0 to 7
[ 1725.292611][ T5915] usb 3-1: USB disconnect, device number 118
[ 1725.738997][T25220] tty tty20: ldisc open failed (-12), clearing slot 19
[ 1728.174405][T24848] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[ 1728.364268][T24848] usb 4-1: Using ep0 maxpacket: 8
[ 1728.565436][T24848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1728.580796][T24848] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1728.648723][T24848] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1728.854210][T24848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1728.864648][T24848] usb 4-1: Product: syz
[ 1728.884208][T24848] usb 4-1: Manufacturer: syz
[ 1728.911322][T24848] usb 4-1: SerialNumber: syz
[ 1729.008079][T24848] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 1729.093613][T24848] usbtest 4-1:1.0: couldn't get endpoints, -22
[ 1729.110218][T24848] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[ 1729.276212][T25252] loop2: detected capacity change from 0 to 7
[ 1729.347387][T24848] usb 4-1: USB disconnect, device number 108
[ 1729.793156][  T168] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1729.821216][  T168] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1729.989468][  T168] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1730.119137][  T168] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1730.376799][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.383138][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.587676][T25281] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3283'.
[ 1730.685067][T24845] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1731.605882][T24845] usb 3-1: config 0 has no interfaces?
[ 1731.637323][T24845] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1731.647084][T24845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1731.678255][T24845] usb 3-1: Product: syz
[ 1731.690151][T24845] usb 3-1: Manufacturer: syz
[ 1731.740719][T24845] usb 3-1: SerialNumber: syz
[ 1731.845755][T24845] usb 3-1: config 0 descriptor??
[ 1734.085214][T17866] usb 3-1: USB disconnect, device number 119
[ 1734.837941][T24844] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[ 1735.205129][T24844] usb 2-1: Using ep0 maxpacket: 8
[ 1735.707702][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'.
[ 1735.718829][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'.
[ 1735.728531][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'.
[ 1735.746731][T24844] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1735.777898][T24844] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1736.564707][T24844] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1736.573746][T24844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1736.636012][T24844] usb 2-1: Product: syz
[ 1736.640221][T24844] usb 2-1: Manufacturer: syz
[ 1736.666389][T24844] usb 2-1: SerialNumber: syz
[ 1736.721970][T24844] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 1736.776017][T24844] usbtest 2-1:1.0: couldn't get endpoints, -22
[ 1736.814659][T24844] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[ 1737.027604][T25318] loop2: detected capacity change from 0 to 7
[ 1737.045208][T17866] usb 2-1: USB disconnect, device number 104
[ 1737.290130][T25350] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[ 1737.299034][T25350] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1738.444205][T25368] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3297'.
[ 1738.830100][ T5199] Dev loop6: unable to read RDB block 7
[ 1738.839159][ T5199]  loop6: unable to read partition table
[ 1738.867799][ T5199] loop6: partition table beyond EOD, truncated
[ 1739.546242][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1739.546255][   T30] audit: type=1326 audit(1761602262.154:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1739.636541][   T30] audit: type=1326 audit(1761602262.154:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1739.711839][   T30] audit: type=1326 audit(1761602262.154:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1739.971308][   T30] audit: type=1326 audit(1761602262.154:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1740.075259][   T30] audit: type=1326 audit(1761602262.154:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1740.346725][   T30] audit: type=1326 audit(1761602262.154:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1740.369845][   T30] audit: type=1326 audit(1761602262.154:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1740.726452][T24845] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[ 1740.735261][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1740.945302][   T30] audit: type=1326 audit(1761602262.154:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1740.996858][   T30] audit: type=1326 audit(1761602262.154:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1741.043979][T24845] usb 5-1: device descriptor read/64, error -32
[ 1741.179534][T25394] syz.2.3300 (25394): drop_caches: 2
[ 1741.238348][T25394] syz.2.3300 (25394): drop_caches: 2
[ 1741.372399][   T30] audit: type=1326 audit(1761602262.154:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25374 comm="syz.3.3298" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1741.464889][T24845] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[ 1741.646455][T25400] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3303'.
[ 1741.801931][T24845] usb 5-1: config 0 has no interfaces?
[ 1741.840754][T24845] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1741.850430][T24845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1741.859211][T24845] usb 5-1: Product: syz
[ 1741.868929][T24845] usb 5-1: Manufacturer: syz
[ 1741.985367][T24845] usb 5-1: SerialNumber: syz
[ 1742.000695][T24845] usb 5-1: config 0 descriptor??
[ 1742.152470][T25401] syzkaller0: entered promiscuous mode
[ 1742.164138][T25401] syzkaller0: entered allmulticast mode
[ 1742.224871][T24848] usb 5-1: USB disconnect, device number 121
[ 1743.084792][T24848] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1743.424795][T24848] usb 3-1: Using ep0 maxpacket: 8
[ 1743.450828][T24848] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1743.490022][T24848] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1743.770522][T24848] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1743.806894][T24848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1743.857243][T24848] usb 3-1: Product: syz
[ 1743.857266][T24848] usb 3-1: Manufacturer: syz
[ 1743.857281][T24848] usb 3-1: SerialNumber: syz
[ 1743.917853][T24848] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 1743.918736][T24848] usbtest 3-1:1.0: couldn't get endpoints, -22
[ 1743.918809][T24848] usbtest 3-1:1.0: probe with driver usbtest failed with error -22
[ 1744.151899][T25413] loop2: detected capacity change from 0 to 7
[ 1744.171272][T24844] usb 3-1: USB disconnect, device number 120
[ 1744.579700][T25422] tty tty29: ldisc open failed (-12), clearing slot 28
[ 1747.634485][T17143] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1747.807157][T17143] usb 3-1: config 0 has no interfaces?
[ 1747.816545][T17143] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1747.827318][T17143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1747.844720][T17143] usb 3-1: Product: syz
[ 1747.849696][T17143] usb 3-1: Manufacturer: syz
[ 1747.855151][T17143] usb 3-1: SerialNumber: syz
[ 1747.872717][T17143] usb 3-1: config 0 descriptor??
[ 1748.199088][T25423] batman_adv: batadv0: Interface deactivated: virt_wifi0
[ 1748.465601][T25431] geneve3: entered promiscuous mode
[ 1748.480317][T25431] geneve3: entered allmulticast mode
[ 1748.752416][ T4314] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1748.762080][ T4314] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1748.777080][T13220] usb 3-1: USB disconnect, device number 121
[ 1748.795727][ T4314] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1748.951291][   T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1749.331671][T13220] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[ 1750.140601][T13220] usb 5-1: Using ep0 maxpacket: 8
[ 1750.186650][T13220] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1750.294670][T24835] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[ 1750.305223][T13220] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1750.552853][T13220] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1750.564866][T13220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1750.602044][T13220] usb 5-1: Product: syz
[ 1750.613484][T13220] usb 5-1: Manufacturer: syz
[ 1750.618505][T13220] usb 5-1: SerialNumber: syz
[ 1750.627475][T13220] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 1750.637534][T13220] usbtest 5-1:1.0: couldn't get endpoints, -22
[ 1750.643714][T13220] usbtest 5-1:1.0: probe with driver usbtest failed with error -22
[ 1750.691498][T24835] usb 3-1: config 0 has no interfaces?
[ 1750.714676][T24835] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1750.725591][T24835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1750.733561][T24835] usb 3-1: Product: syz
[ 1750.738023][T24835] usb 3-1: Manufacturer: syz
[ 1750.742597][T24835] usb 3-1: SerialNumber: syz
[ 1750.787041][T24835] usb 3-1: config 0 descriptor??
[ 1750.841241][T25461] loop2: detected capacity change from 0 to 7
[ 1750.929690][T24835] usb 5-1: USB disconnect, device number 122
[ 1751.521956][T25483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3317'.
[ 1751.531485][T25483] sch_tbf: burst 274 is lower than device lo mtu (11337746) !
[ 1752.662810][T13220] usb 3-1: USB disconnect, device number 122
[ 1752.980744][T25499] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3321'.
[ 1753.298520][T25500] tipc: Failed to remove unknown binding: 66,1,1/4269801488:3814896782/3814896784
[ 1753.311054][T25500] tipc: Failed to remove unknown binding: 66,1,1/4269801488:3814896782/3814896784
[ 1753.321373][T25500] tipc: Failed to remove unknown binding: 66,1,1/4269801488:3814896782/3814896784
[ 1754.711973][T25515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3322'.
[ 1755.329611][T25516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1755.356537][T25516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1756.544952][T25446] usb 4-1: new high-speed USB device number 109 using dummy_hcd
[ 1756.799425][T25446] usb 4-1: config 0 has no interfaces?
[ 1756.808383][T25446] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1757.010188][T25446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1757.041031][T25446] usb 4-1: Product: syz
[ 1757.047010][T25446] usb 4-1: Manufacturer: syz
[ 1757.051626][T25446] usb 4-1: SerialNumber: syz
[ 1757.070729][T25446] usb 4-1: config 0 descriptor??
[ 1757.878691][T24835] usb 4-1: USB disconnect, device number 109
[ 1757.893812][T13220] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[ 1758.299156][T13220] usb 5-1: Using ep0 maxpacket: 8
[ 1758.328968][T13220] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[ 1758.495845][T13220] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[ 1758.581594][T13220] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[ 1760.081454][   T30] kauditd_printk_skb: 5 callbacks suppressed
[ 1760.081473][   T30] audit: type=1800 audit(1761602282.694:2226): pid=25562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3329" name="file0" dev="fuse" ino=0 res=0 errno=0
[ 1760.256133][T13220] usb 5-1: string descriptor 0 read error: -71
[ 1760.262778][T13220] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1760.293761][T13220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1760.547546][T13220] usb 5-1: can't set config #1, error -71
[ 1760.668098][T13220] usb 5-1: USB disconnect, device number 123
[ 1761.258177][T25581] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3335'.
[ 1763.420473][T25603] x_tables: duplicate underflow at hook 3
[ 1763.603780][T25606] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3339'.
[ 1763.789464][T25607] syz.3.3339 (25607): drop_caches: 2
[ 1765.385205][T25446] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[ 1765.537789][T25446] usb 3-1: config 0 has no interfaces?
[ 1765.550492][T25446] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1765.668653][T25446] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1765.738721][T25446] usb 3-1: Product: syz
[ 1765.756544][T25446] usb 3-1: Manufacturer: syz
[ 1765.761186][T25446] usb 3-1: SerialNumber: syz
[ 1765.779702][T25446] usb 3-1: config 0 descriptor??
[ 1766.163277][   T30] audit: type=1326 audit(1761602288.824:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1766.269559][T13220] usb 3-1: USB disconnect, device number 123
[ 1766.323414][   T30] audit: type=1326 audit(1761602288.824:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1766.447893][T25635] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3347'.
[ 1766.626601][   T30] audit: type=1326 audit(1761602288.854:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1766.715419][   T30] audit: type=1326 audit(1761602288.854:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1766.747589][   T30] audit: type=1326 audit(1761602288.854:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1766.802308][   T30] audit: type=1326 audit(1761602288.854:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1766.876612][   T30] audit: type=1326 audit(1761602288.854:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1767.048509][   T30] audit: type=1326 audit(1761602288.854:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1767.352115][T25640] netlink: 'syz.2.3348': attribute type 10 has an invalid length.
[ 1767.362320][T25640] team0: Port device netdevsim0 added
[ 1767.375795][T25640] netlink: 'syz.2.3348': attribute type 10 has an invalid length.
[ 1767.414740][   T30] audit: type=1326 audit(1761602288.854:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1767.532176][T25640] team0: Port device netdevsim0 removed
[ 1767.588605][   T30] audit: type=1326 audit(1761602288.854:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25627 comm="syz.1.3345" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1768.264114][T13220] usb 5-1: new full-speed USB device number 124 using dummy_hcd
[ 1768.403305][T24847] usb 4-1: new high-speed USB device number 110 using dummy_hcd
[ 1768.650444][T24847] usb 4-1: Using ep0 maxpacket: 32
[ 1768.680896][T24847] usb 4-1: config 0 has an invalid interface number: 169 but max is 0
[ 1768.717007][T24847] usb 4-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config
[ 1768.775694][T25656] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3352'.
[ 1768.839889][T24847] usb 4-1: config 0 has no interface number 0
[ 1768.871087][T24847] usb 4-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1768.886862][T24847] usb 4-1: config 0 interface 169 has no altsetting 0
[ 1768.920545][T25656] syz.2.3352 (25656): drop_caches: 2
[ 1769.050698][T24847] usb 4-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49
[ 1769.062001][T24847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1769.070939][T24847] usb 4-1: Product: syz
[ 1769.075917][T24847] usb 4-1: Manufacturer: syz
[ 1769.086857][T24847] usb 4-1: SerialNumber: syz
[ 1769.105666][T24847] usb 4-1: config 0 descriptor??
[ 1769.131548][T24847] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1769.323523][T25648] netlink: 'syz.3.3350': attribute type 21 has an invalid length.
[ 1769.332285][T25648] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3350'.
[ 1769.346322][T25648] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3350'.
[ 1769.399502][T24847] snd-usb-audio 4-1:0.169: probe with driver snd-usb-audio failed with error -2
[ 1769.567944][ T5827] udevd[5827]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1769.800798][T24847] usb 4-1: USB disconnect, device number 110
[ 1770.377150][T25671] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3354'.
[ 1770.405621][T25671] syz.0.3354 (25671): drop_caches: 2
[ 1770.825410][T25677] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3355'.
[ 1770.846802][T25677] syz.3.3355 (25677): drop_caches: 2
[ 1771.395900][T25686] openvswitch: netlink: Message has 1 unknown bytes.
[ 1771.402774][T25686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1771.862366][T13220] usb 5-1: unable to read config index 0 descriptor/start: -71
[ 1771.896771][T13220] usb 5-1: can't read configurations, error -71
[ 1772.865270][T13220] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[ 1773.036415][T13220] usb 5-1: Using ep0 maxpacket: 8
[ 1773.049094][T13220] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1773.061837][T13220] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1773.113620][T13220] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1773.125728][T13220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1773.503928][T25702] geneve3: entered promiscuous mode
[ 1773.510194][T25702] geneve3: entered allmulticast mode
[ 1773.592610][T13220] usb 5-1: Product: syz
[ 1773.755537][T25709] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3373'.
[ 1773.773480][T25709] syz.1.3373 (25709): drop_caches: 2
[ 1773.917579][T13220] usb 5-1: Manufacturer: syz
[ 1773.930804][T13220] usb 5-1: SerialNumber: syz
[ 1774.039999][T13220] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 1774.091831][T13220] usbtest 5-1:1.0: couldn't get endpoints, -22
[ 1774.130300][T13220] usbtest 5-1:1.0: probe with driver usbtest failed with error -22
[ 1774.616393][T25690] loop2: detected capacity change from 0 to 7
[ 1774.646799][T13220] usb 5-1: USB disconnect, device number 125
[ 1775.445397][   T30] kauditd_printk_skb: 48 callbacks suppressed
[ 1775.445410][   T30] audit: type=1326 audit(1761602298.054:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1775.500485][   T30] audit: type=1326 audit(1761602298.054:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1775.571175][   T30] audit: type=1326 audit(1761602298.054:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1775.643860][   T30] audit: type=1326 audit(1761602298.054:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1775.666032][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1775.852412][   T30] audit: type=1326 audit(1761602298.054:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1775.946513][   T30] audit: type=1326 audit(1761602298.054:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1776.014915][T25726] syz.1.3365 (25726): drop_caches: 2
[ 1776.029470][T25726] syz.1.3365 (25726): drop_caches: 2
[ 1776.429719][   T30] audit: type=1326 audit(1761602298.054:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1776.476507][T24835] usb 5-1: new full-speed USB device number 126 using dummy_hcd
[ 1776.537834][   T30] audit: type=1326 audit(1761602298.054:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1776.698545][T24835] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1776.709766][T24835] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1776.740119][   T30] audit: type=1326 audit(1761602298.054:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1776.776143][T24835] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1776.821319][   T30] audit: type=1326 audit(1761602298.054:2294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25712 comm="syz.0.3362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf707d539 code=0x7ffc0000
[ 1776.848371][T24835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1776.878806][T24835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1776.909640][T24835] usb 5-1: Product: syz
[ 1776.920547][T24835] usb 5-1: Manufacturer: syz
[ 1776.930482][T24835] usb 5-1: SerialNumber: syz
[ 1776.949509][T24835] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[ 1777.014138][T24835] cdc_ncm 5-1:1.0: bind() failure
[ 1777.305305][T25446] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[ 1777.546815][T25446] usb 4-1: Using ep0 maxpacket: 32
[ 1777.595784][T25446] usb 4-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[ 1777.658488][T25446] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1777.674939][T25446] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1777.690338][T25446] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1777.698550][T25446] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[ 1777.711787][T25742] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3369'.
[ 1777.735823][T25742] syz.0.3369 (25742): drop_caches: 2
[ 1777.969586][T24835] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[ 1778.095234][T25446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1778.136528][T25446] usb 4-1: config 0 descriptor??
[ 1778.167537][T24835] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1778.181440][T24835] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1778.257657][T24835] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1778.267713][T24835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1778.285077][T25740] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1778.298200][T24835] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1778.948418][T25733] netlink: 'syz.3.3367': attribute type 10 has an invalid length.
[ 1778.988292][T25733] netlink: 'syz.3.3367': attribute type 10 has an invalid length.
[ 1779.078900][T25748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1779.232306][T25748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1779.317912][T25446] usbhid 4-1:0.0: can't add hid device: -71
[ 1779.324020][T25446] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1779.508573][T25446] usb 4-1: USB disconnect, device number 111
[ 1780.216885][T24835] usb 5-1: USB disconnect, device number 126
[ 1780.772161][T24835] usb 2-1: USB disconnect, device number 105
[ 1782.195230][T25446] usb 2-1: new full-speed USB device number 106 using dummy_hcd
[ 1782.370993][T25446] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1782.382108][T25446] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1782.395198][T25446] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1782.415775][T25446] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1782.426134][T25446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1782.436823][T25446] usb 2-1: Product: syz
[ 1782.445343][T25446] usb 2-1: Manufacturer: syz
[ 1782.455300][T25446] usb 2-1: SerialNumber: syz
[ 1782.489650][T25446] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[ 1782.544703][T25446] cdc_ncm 2-1:1.0: bind() failure
[ 1783.601936][   T30] kauditd_printk_skb: 37 callbacks suppressed
[ 1783.601952][   T30] audit: type=1326 audit(1761602306.204:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1783.668089][T13220] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1783.791947][   T30] audit: type=1326 audit(1761602306.204:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=461 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1783.907457][T13220] usb 1-1: config 0 has no interfaces?
[ 1783.915677][T13220] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1783.927060][   T30] audit: type=1326 audit(1761602306.204:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1783.951246][T13220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1783.960990][T13220] usb 1-1: Product: syz
[ 1783.966980][T13220] usb 1-1: Manufacturer: syz
[ 1783.971993][T13220] usb 1-1: SerialNumber: syz
[ 1783.988462][   T30] audit: type=1326 audit(1761602306.204:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1784.021637][T13220] usb 1-1: config 0 descriptor??
[ 1784.033199][   T30] audit: type=1326 audit(1761602306.204:2336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1784.078845][   T30] audit: type=1326 audit(1761602306.204:2337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1784.103066][   T30] audit: type=1326 audit(1761602306.204:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1784.137920][   T30] audit: type=1326 audit(1761602306.214:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1784.162161][   T30] audit: type=1326 audit(1761602306.214:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1784.188140][   T30] audit: type=1326 audit(1761602306.214:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25792 comm="syz.2.3382" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 1784.771021][T24847] usb 2-1: USB disconnect, device number 106
[ 1784.821290][T24835] usb 1-1: USB disconnect, device number 83
[ 1784.957028][T13220] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[ 1785.106754][T25812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'.
[ 1785.117494][T25808] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3384'.
[ 1785.135286][T13220] usb 5-1: Using ep0 maxpacket: 8
[ 1785.147106][T13220] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1785.165980][T13220] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1785.183739][T13220] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1785.196800][T13220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1785.205522][T13220] usb 5-1: Product: syz
[ 1785.241636][T13220] usb 5-1: Manufacturer: syz
[ 1785.400644][T13220] usb 5-1: SerialNumber: syz
[ 1785.669704][T13220] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 1785.684662][T24847] usb 3-1: new full-speed USB device number 124 using dummy_hcd
[ 1785.843002][T13220] usbtest 5-1:1.0: couldn't get endpoints, -22
[ 1785.865531][T25799] loop2: detected capacity change from 0 to 7
[ 1785.958878][T24847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1785.969748][T24847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1785.980720][T25808] syz.3.3384 (25808): drop_caches: 2
[ 1785.986801][T13220] usbtest 5-1:1.0: probe with driver usbtest failed with error -22
[ 1786.021629][T24847] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1786.242336][T24847] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1786.262837][T24847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1786.282941][T24847] usb 3-1: Product: syz
[ 1786.310304][T24847] usb 3-1: Manufacturer: syz
[ 1786.314173][T13220] usb 5-1: USB disconnect, device number 127
[ 1786.330805][T24847] usb 3-1: SerialNumber: syz
[ 1786.369224][T24847] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[ 1786.387578][T24847] cdc_ncm 3-1:1.0: bind() failure
[ 1786.975300][T25821] random: crng reseeded on system resumption
[ 1787.945019][T24847] usb 2-1: new full-speed USB device number 107 using dummy_hcd
[ 1788.000049][T25830] netlink: 'syz.3.3391': attribute type 16 has an invalid length.
[ 1788.036038][T25830] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3391'.
[ 1788.525212][T25446] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[ 1788.742197][T25446] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1788.789841][T25446] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1788.806064][T24847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1788.868016][T24847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1788.887071][T25446] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1789.057938][T24835] usb 3-1: USB disconnect, device number 124
[ 1789.078807][T24847] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1789.139683][T25446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1789.165193][T25842] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3394'.
[ 1789.240502][T25832] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[ 1789.266572][T25842] syz.3.3394 (25842): drop_caches: 2
[ 1789.283337][T24847] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1789.305325][T24847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1789.367836][T24847] usb 2-1: Product: syz
[ 1789.381906][T25446] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1789.445528][T24847] usb 2-1: Manufacturer: syz
[ 1789.477663][T24847] usb 2-1: SerialNumber: syz
[ 1790.133001][T24847] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[ 1790.145273][T24847] cdc_ncm 2-1:1.0: bind() failure
[ 1791.687326][T24847] usb 1-1: USB disconnect, device number 84
[ 1791.788964][T25446] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 1791.796182][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.803562][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1792.093026][T25446] usb 5-1: Using ep0 maxpacket: 8
[ 1792.147958][T24847] usb 2-1: USB disconnect, device number 107
[ 1792.170587][T25446] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1792.284685][T25446] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1792.408416][T25446] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1792.418797][T25446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1792.429521][T25446] usb 5-1: Product: syz
[ 1792.433775][T25446] usb 5-1: Manufacturer: syz
[ 1792.446300][T25446] usb 5-1: SerialNumber: syz
[ 1792.579189][T25446] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 1792.595417][T25446] usbtest 5-1:1.0: couldn't get endpoints, -22
[ 1792.611830][T25446] usbtest 5-1:1.0: probe with driver usbtest failed with error -22
[ 1792.807380][T25862] loop2: detected capacity change from 0 to 7
[ 1792.893878][T25446] usb 5-1: USB disconnect, device number 2
[ 1794.071960][T25885] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1794.831682][T25898] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3405'.
[ 1794.859734][T25898] syz.4.3405 (25898): drop_caches: 2
[ 1795.085264][T13220] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[ 1795.631276][T13220] usb 4-1: Using ep0 maxpacket: 8
[ 1795.665677][T13220] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1795.686202][T13220] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1795.766578][T13220] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1795.776383][T13220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1796.016459][T13220] usb 4-1: Product: syz
[ 1796.108298][ T5199] Dev loop6: unable to read RDB block 7
[ 1796.115170][T13220] usb 4-1: Manufacturer: syz
[ 1796.125476][T13220] usb 4-1: SerialNumber: syz
[ 1796.147392][T13220] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[ 1796.194351][T13220] usbtest 4-1:1.0: couldn't get endpoints, -22
[ 1796.200748][T13220] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[ 1796.233244][T25906] pim6reg: entered allmulticast mode
[ 1796.259145][ T5199]  loop6: unable to read partition table
[ 1796.302129][ T5199] loop6: partition table beyond EOD, truncated
[ 1796.507909][T25895] loop2: detected capacity change from 0 to 7
[ 1796.582343][T13220] usb 4-1: USB disconnect, device number 112
[ 1797.375775][T25919] bridge6: entered promiscuous mode
[ 1798.975265][T13220] usb 4-1: new full-speed USB device number 113 using dummy_hcd
[ 1799.148654][T13220] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1799.228070][T13220] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1799.287555][T13220] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1799.557743][T13220] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1799.577262][T13220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1799.594988][T13220] usb 4-1: Product: syz
[ 1799.599348][T13220] usb 4-1: Manufacturer: syz
[ 1799.616348][T25934] netlink: 'syz.0.3411': attribute type 10 has an invalid length.
[ 1799.634756][T25934] team0: Port device netdevsim0 added
[ 1799.669873][T25934] netlink: 'syz.0.3411': attribute type 10 has an invalid length.
[ 1799.725150][T13220] usb 4-1: SerialNumber: syz
[ 1799.737445][T25934] team0: Port device netdevsim0 removed
[ 1799.758477][T13220] cdc_ncm 4-1:1.0: NCM or ECM functional descriptors missing
[ 1799.771281][T13220] cdc_ncm 4-1:1.0: bind() failure
[ 1802.155206][T25446] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 1802.300857][T24835] usb 4-1: USB disconnect, device number 113
[ 1802.375131][T25446] usb 5-1: Using ep0 maxpacket: 8
[ 1802.395566][T25446] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1802.406302][T25446] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1802.430873][T25446] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1802.441798][T25446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1802.455917][T25446] usb 5-1: Product: syz
[ 1802.460101][T25446] usb 5-1: Manufacturer: syz
[ 1802.470433][T25446] usb 5-1: SerialNumber: syz
[ 1802.547782][T25446] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[ 1802.562657][T25446] usbtest 5-1:1.0: couldn't get endpoints, -22
[ 1802.615775][T25446] usbtest 5-1:1.0: probe with driver usbtest failed with error -22
[ 1802.758261][T25955] loop2: detected capacity change from 0 to 7
[ 1802.785459][T25446] usb 5-1: USB disconnect, device number 3
[ 1803.075183][T25972] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3421'.
[ 1803.120009][T25972] syz.0.3421 (25972): drop_caches: 2
[ 1803.735096][T25446] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[ 1803.968664][T25446] usb 4-1: Using ep0 maxpacket: 16
[ 1805.835258][T24835] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[ 1806.178613][T24835] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1806.205650][T24835] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1806.312001][T24835] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1806.648456][T25446] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1806.661138][T25446] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 1806.674971][T25446] usb 4-1: can't read configurations, error -71
[ 1806.752086][T24835] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1806.892848][T26000] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3428'.
[ 1806.917420][T26000] syz.3.3428 (26000): drop_caches: 2
[ 1807.203653][T25990] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3426'.
[ 1807.267482][   T30] kauditd_printk_skb: 48 callbacks suppressed
[ 1807.267499][   T30] audit: type=1326 audit(1761602329.774:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1807.617995][T26008] bridge0: entered promiscuous mode
[ 1807.665184][T24835] usb 3-1: new full-speed USB device number 125 using dummy_hcd
[ 1807.737173][   T30] audit: type=1326 audit(1761602329.774:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1807.899077][   T30] audit: type=1326 audit(1761602329.774:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1807.945532][   T30] audit: type=1326 audit(1761602329.774:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1808.155471][T24835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1808.190806][T24835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1808.252829][   T30] audit: type=1326 audit(1761602329.784:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1808.381114][   T30] audit: type=1326 audit(1761602329.794:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1808.515535][T24835] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1808.561783][   T30] audit: type=1326 audit(1761602329.794:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1808.602453][T24835] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1808.612057][T24835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1808.630195][T24835] usb 3-1: Product: syz
[ 1808.638652][T24835] usb 3-1: Manufacturer: syz
[ 1808.838808][T24835] usb 3-1: SerialNumber: syz
[ 1808.908785][   T30] audit: type=1326 audit(1761602329.794:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1808.945107][   T30] audit: type=1326 audit(1761602329.794:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1808.968590][   T30] audit: type=1326 audit(1761602329.794:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25985 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1809.099752][T25446] usb 2-1: USB disconnect, device number 108
[ 1809.100265][T24835] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[ 1809.173732][T24835] cdc_ncm 3-1:1.0: bind() failure
[ 1810.640370][T24835] usb 3-1: USB disconnect, device number 125
[ 1812.189602][T26045] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3436'.
[ 1812.571260][T26046] syzkaller0: entered promiscuous mode
[ 1812.641943][T26046] syzkaller0: entered allmulticast mode
[ 1814.195968][T25446] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 1814.356908][T25446] usb 5-1: config 0 has no interfaces?
[ 1814.409014][T25446] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1814.433422][T25446] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1814.475066][T25446] usb 5-1: Product: syz
[ 1814.484630][T25446] usb 5-1: Manufacturer: syz
[ 1814.494667][T25446] usb 5-1: SerialNumber: syz
[ 1814.531003][T25446] usb 5-1: config 0 descriptor??
[ 1815.504331][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'.
[ 1815.539377][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'.
[ 1815.561869][T26081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3443'.
[ 1816.686344][T24835] usb 5-1: USB disconnect, device number 4
[ 1818.188112][T26072] veth85: entered promiscuous mode
[ 1818.193264][T26072] veth85: entered allmulticast mode
[ 1818.925287][T25446] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[ 1819.525360][T25446] usb 1-1: config 0 has no interfaces?
[ 1819.653031][T26117] bridge6: entered promiscuous mode
[ 1819.935372][T13220] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[ 1820.125208][T25446] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1820.147208][T25446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1820.160547][T25446] usb 1-1: Product: syz
[ 1820.172272][T25446] usb 1-1: Manufacturer: syz
[ 1820.243120][T25446] usb 1-1: SerialNumber: syz
[ 1820.301474][T25446] usb 1-1: config 0 descriptor??
[ 1820.443656][T13220] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1820.464461][T13220] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1820.727917][T13220] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1820.781672][T13220] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1820.837429][T13220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1820.846771][T13220] usb 5-1: Product: syz
[ 1820.906058][T13220] usb 5-1: Manufacturer: syz
[ 1820.943271][T13220] usb 5-1: SerialNumber: syz
[ 1821.018247][T13220] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing
[ 1821.026210][T13220] cdc_ncm 5-1:1.0: bind() failure
[ 1821.947311][T26124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3453'.
[ 1822.323165][T26128] x_tables: duplicate underflow at hook 3
[ 1823.160547][T25446] usb 5-1: USB disconnect, device number 5
[ 1823.606670][T26140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3455'.
[ 1824.260728][T26135] 8021q: adding VLAN 0 to HW filter on device bond34
[ 1824.438617][T25446] usb 1-1: USB disconnect, device number 85
[ 1825.334708][T13220] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[ 1825.669926][T13220] usb 1-1: config 0 has no interfaces?
[ 1825.698726][T13220] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1825.709331][T13220] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1825.745167][T25446] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[ 1826.100976][T13220] usb 1-1: Product: syz
[ 1826.109986][T13220] usb 1-1: Manufacturer: syz
[ 1826.118507][T13220] usb 1-1: SerialNumber: syz
[ 1826.151111][T13220] usb 1-1: config 0 descriptor??
[ 1826.368483][T25446] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1826.414625][T25446] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1826.464666][T25446] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1826.510735][T25446] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1826.852619][T26168] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3461'.
[ 1826.915265][   T30] kauditd_printk_skb: 31 callbacks suppressed
[ 1826.915278][   T30] audit: type=1326 audit(1761602349.434:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.050478][   T30] audit: type=1326 audit(1761602349.444:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.076171][   T30] audit: type=1326 audit(1761602349.444:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.122505][   T30] audit: type=1326 audit(1761602349.444:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.148677][   T30] audit: type=1326 audit(1761602349.444:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.177321][   T30] audit: type=1326 audit(1761602349.444:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.247141][   T30] audit: type=1326 audit(1761602349.454:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.284779][T24836] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[ 1827.426696][   T30] audit: type=1326 audit(1761602349.454:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.471720][T24836] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1827.497448][T24836] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1827.577542][T26184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'.
[ 1827.648478][T24836] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1827.659454][   T30] audit: type=1326 audit(1761602349.454:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.684704][T24836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1827.719630][T26179] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[ 1827.726961][   T30] audit: type=1326 audit(1761602349.454:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26163 comm="syz.4.3461" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf706d539 code=0x7ffc0000
[ 1827.755766][T24836] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1827.794252][T13220] usb 1-1: USB disconnect, device number 86
[ 1829.025618][T24836] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[ 1829.196015][T24836] usb 1-1: Using ep0 maxpacket: 8
[ 1829.203369][T24836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1829.217974][T24836] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1829.222194][T25446] usb 5-1: USB disconnect, device number 6
[ 1829.267710][T24836] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1829.295142][T24836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1829.372620][T24836] usb 1-1: Product: syz
[ 1829.380319][T24836] usb 1-1: Manufacturer: syz
[ 1829.386569][T24836] usb 1-1: SerialNumber: syz
[ 1829.740720][T26205] hub 9-0:1.0: USB hub found
[ 1829.749563][T26205] hub 9-0:1.0: 1 port detected
[ 1829.793611][T24836] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[ 1829.846422][T25446] usb 4-1: USB disconnect, device number 116
[ 1829.895619][T26190] loop2: detected capacity change from 0 to 7
[ 1829.920978][T24836] usbtest 1-1:1.0: couldn't get endpoints, -22
[ 1829.971158][T24836] usbtest 1-1:1.0: probe with driver usbtest failed with error -22
[ 1830.746440][T24836] usb 1-1: USB disconnect, device number 87
[ 1831.255196][T25446] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1831.510233][T25446] usb 4-1: config 0 has no interfaces?
[ 1831.535079][T25446] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1831.544569][T25446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1831.552542][T25446] usb 4-1: Product: syz
[ 1831.557575][T25446] usb 4-1: Manufacturer: syz
[ 1831.562173][T25446] usb 4-1: SerialNumber: syz
[ 1831.581495][T25446] usb 4-1: config 0 descriptor??
[ 1833.745848][T26243] bridge7: entered promiscuous mode
[ 1834.463367][T25446] usb 4-1: USB disconnect, device number 117
[ 1834.898951][T26255] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3476'.
[ 1835.383327][T26255] syz.4.3476 (26255): drop_caches: 2
[ 1836.312004][T26266] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3479'.
[ 1836.850552][T25446] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1837.308365][T25446] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1837.357680][T25446] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1837.380792][T25446] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1837.423434][T25446] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1837.766923][   T30] kauditd_printk_skb: 70 callbacks suppressed
[ 1837.835661][T26274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3480'.
[ 1837.845319][   T30] audit: type=1326 audit(1761602360.424:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.845381][   T30] audit: type=1326 audit(1761602360.424:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=254 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.845422][   T30] audit: type=1326 audit(1761602360.424:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.845461][   T30] audit: type=1326 audit(1761602360.424:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.845502][   T30] audit: type=1326 audit(1761602360.434:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.845542][   T30] audit: type=1326 audit(1761602360.444:2516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.845583][   T30] audit: type=1326 audit(1761602360.444:2517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.845623][   T30] audit: type=1326 audit(1761602360.444:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.845660][   T30] audit: type=1326 audit(1761602360.444:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.845695][   T30] audit: type=1326 audit(1761602360.444:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26268 comm="syz.3.3480" exe="/root/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1837.959698][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1838.030062][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1839.612015][T26295] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3486'.
[ 1839.629911][T26295] syz.1.3486 (26295): drop_caches: 2
[ 1840.740866][T26308] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3487'.
[ 1840.756774][T26309] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3497'.
[ 1840.804096][T26309] syz.0.3497 (26309): drop_caches: 2
[ 1841.241922][T26308] syzkaller0: entered promiscuous mode
[ 1841.248670][T26308] syzkaller0: entered allmulticast mode
[ 1841.750182][T13220] usb 4-1: USB disconnect, device number 118
[ 1847.155200][T13220] usb 2-1: new full-speed USB device number 109 using dummy_hcd
[ 1848.099995][T13220] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1848.110973][T13220] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1848.121416][T13220] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1848.202863][T13220] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1848.222723][T13220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1848.235148][T13220] usb 2-1: Product: syz
[ 1848.242350][T13220] usb 2-1: Manufacturer: syz
[ 1848.247792][T13220] usb 2-1: SerialNumber: syz
[ 1848.285158][T13220] cdc_ncm 2-1:1.0: NCM or ECM functional descriptors missing
[ 1848.382237][T13220] cdc_ncm 2-1:1.0: bind() failure
[ 1850.239601][T13220] usb 2-1: USB disconnect, device number 109
[ 1850.283740][T26383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3501'.
[ 1853.138803][T26402] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3505'.
[ 1853.211211][T26402] syz.0.3505 (26402): drop_caches: 2
[ 1853.230472][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1853.237477][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1853.469656][T26412] vim2m vim2m.0: vidioc_s_fmt queue busy
[ 1854.462942][T26418] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3508'.
[ 1854.488823][T26418] syz.3.3508 (26418): drop_caches: 2
[ 1855.321595][T26411] bridge0: entered promiscuous mode
[ 1855.566499][T26411] 8021q: adding VLAN 0 to HW filter on device team0
[ 1855.596106][T26411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1857.199368][T26442] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1857.210970][T26442] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1857.265545][T26442] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1857.275972][T26442] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1857.283340][T26442] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1858.613597][T26459] netlink: 'syz.3.3516': attribute type 10 has an invalid length.
[ 1858.625082][T24847] usb 3-1: new full-speed USB device number 126 using dummy_hcd
[ 1858.777087][T24847] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1858.788296][T24847] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1858.797947][T24847] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1858.928393][T26458] netlink: 'syz.3.3516': attribute type 10 has an invalid length.
[ 1859.201146][ T3012] team0: Port device netdevsim0 removed
[ 1859.515356][T26442] Bluetooth: hci5: command tx timeout
[ 1859.546796][T24847] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1859.561053][T26459] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[ 1859.640104][T24847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1859.648915][T26459] team0: Device netdevsim0 failed to register rx_handler
[ 1859.695269][T24847] usb 3-1: Product: syz
[ 1859.710958][T24847] usb 3-1: Manufacturer: syz
[ 1859.745274][T24847] usb 3-1: SerialNumber: syz
[ 1859.841582][T24847] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[ 1859.849559][T24847] cdc_ncm 3-1:1.0: bind() failure
[ 1860.323602][T26443] chnl_net:caif_netlink_parms(): no params data found
[ 1861.026000][T26474] netlink: 'syz.3.3520': attribute type 3 has an invalid length.
[ 1861.545360][T26442] Bluetooth: hci5: command tx timeout
[ 1861.790330][T26443] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1861.798278][T26443] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1861.807312][T26443] bridge_slave_0: entered allmulticast mode
[ 1861.816698][T26443] bridge_slave_0: entered promiscuous mode
[ 1861.836655][T26443] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1861.855299][T26443] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1861.869050][T26488] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3522'.
[ 1861.936402][T25446] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 1862.064808][T26488] syz.0.3522 (26488): drop_caches: 2
[ 1862.178742][T24847] usb 3-1: USB disconnect, device number 126
[ 1862.195691][T26443] bridge_slave_1: entered allmulticast mode
[ 1862.239725][T26443] bridge_slave_1: entered promiscuous mode
[ 1862.353973][T25446] usb 2-1: Using ep0 maxpacket: 8
[ 1862.635205][T25446] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1862.776417][T24836] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1862.776430][T25446] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1862.939228][T25446] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1862.966011][T25446] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1863.082183][T25446] usb 2-1: Product: syz
[ 1863.125952][T25446] usb 2-1: Manufacturer: syz
[ 1863.199084][T25446] usb 2-1: SerialNumber: syz
[ 1863.286724][T24836] usb 3-1: Using ep0 maxpacket: 16
[ 1863.299535][T25446] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 1863.366150][T25446] usbtest 2-1:1.0: couldn't get endpoints, -22
[ 1863.393506][T25446] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[ 1863.675469][ T5149] Bluetooth: hci5: command tx timeout
[ 1863.770498][T26479] loop2: detected capacity change from 0 to 7
[ 1863.871445][T25446] usb 2-1: USB disconnect, device number 110
[ 1865.547035][T25446] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[ 1865.737943][ T5149] Bluetooth: hci5: command tx timeout
[ 1865.759114][T25446] usb 1-1: config 0 has no interfaces?
[ 1866.129851][ T3012] bond0 (unregistering): Released all slaves
[ 1866.138587][T25446] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1866.152884][T25446] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1866.384525][T25446] usb 1-1: Product: syz
[ 1866.398871][T25446] usb 1-1: Manufacturer: syz
[ 1866.413296][T25446] usb 1-1: SerialNumber: syz
[ 1866.491088][T25446] usb 1-1: config 0 descriptor??
[ 1866.881897][   T30] kauditd_printk_skb: 30 callbacks suppressed
[ 1866.881916][   T30] audit: type=1326 audit(1761602389.354:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1866.973790][   T30] audit: type=1326 audit(1761602389.354:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1867.051763][   T30] audit: type=1326 audit(1761602389.354:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1867.087332][   T30] audit: type=1326 audit(1761602389.354:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1867.112119][   T30] audit: type=1326 audit(1761602389.354:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1867.222487][ T3012] bond1 (unregistering): Released all slaves
[ 1867.299656][   T30] audit: type=1326 audit(1761602389.354:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1867.361158][   T30] audit: type=1326 audit(1761602389.364:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1867.445631][T25446] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1867.711136][   T30] audit: type=1326 audit(1761602389.364:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1867.760502][   T30] audit: type=1326 audit(1761602389.364:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1867.792472][T25446] usb 4-1: config 0 has no interfaces?
[ 1867.912228][   T30] audit: type=1326 audit(1761602389.364:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26533 comm="syz.1.3529" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1867.937116][T25446] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1867.951762][T25446] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1867.971000][T25446] usb 4-1: Product: syz
[ 1867.992717][T25446] usb 4-1: Manufacturer: syz
[ 1867.998219][T25446] usb 4-1: SerialNumber: syz
[ 1868.055690][T25446] usb 4-1: config 0 descriptor??
[ 1868.138723][ T3012] bond2 (unregistering): Released all slaves
[ 1868.208919][T13220] usb 1-1: USB disconnect, device number 88
[ 1868.346104][T24836] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1868.354814][T24836] usb 3-1: unable to read config index 0 descriptor/start: -32
[ 1868.362395][T24836] usb 3-1: chopping to 0 config(s)
[ 1868.375722][T24836] usb 3-1: can't read configurations, error -32
[ 1868.417920][ T3012] bond3 (unregistering): Released all slaves
[ 1868.555128][T24836] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1868.646393][ T3012] bond4 (unregistering): Released all slaves
[ 1868.700110][T24836] usb 3-1: device descriptor read/64, error -32
[ 1868.822835][T24836] usb usb3-port1: attempt power cycle
[ 1868.831895][ T3012] bond5 (unregistering): Released all slaves
[ 1868.863323][ T3012] bond6 (unregistering): Released all slaves
[ 1869.009814][ T3012] bond7 (unregistering): Released all slaves
[ 1869.159709][T26552] netlink: 'syz.1.3532': attribute type 10 has an invalid length.
[ 1869.189646][T24836] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1869.220336][T24836] usb 3-1: device descriptor read/8, error -32
[ 1869.229629][ T3012] bond8 (unregistering): Released all slaves
[ 1869.241400][T26553] netlink: 'syz.1.3532': attribute type 10 has an invalid length.
[ 1869.387316][ T3012] bond9 (unregistering): Released all slaves
[ 1869.403115][ T3012] bond10 (unregistering): Released all slaves
[ 1869.465902][T24836] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1869.515446][T24836] usb 3-1: device descriptor read/8, error -32
[ 1869.594248][ T3012] bond11 (unregistering): Released all slaves
[ 1869.608366][T25446] usb 4-1: USB disconnect, device number 119
[ 1869.626585][T24836] usb usb3-port1: unable to enumerate USB device
[ 1869.795295][ T3012] bond12 (unregistering): Released all slaves
[ 1869.986085][ T3012] bond13 (unregistering): Released all slaves
[ 1870.100630][ T3012] bond14 (unregistering): Released all slaves
[ 1870.216577][ T3012] bond15 (unregistering): Released all slaves
[ 1870.331393][ T3012] bond16 (unregistering): Released all slaves
[ 1870.445417][ T3012] bond17 (unregistering): Released all slaves
[ 1870.561306][ T3012] bond18 (unregistering): Released all slaves
[ 1870.673875][ T3012] bond19 (unregistering): Released all slaves
[ 1870.788387][ T3012] bond20 (unregistering): Released all slaves
[ 1870.902412][ T3012] bond21 (unregistering): Released all slaves
[ 1871.016854][ T3012] bond22 (unregistering): Released all slaves
[ 1871.129084][ T3012] bond23 (unregistering): Released all slaves
[ 1871.242286][ T3012] bond24 (unregistering): Released all slaves
[ 1871.355883][ T3012] bond25 (unregistering): Released all slaves
[ 1871.468207][ T3012] bond26 (unregistering): Released all slaves
[ 1871.582390][ T3012] bond27 (unregistering): Released all slaves
[ 1871.695282][ T3012] bond28 (unregistering): Released all slaves
[ 1871.812458][ T3012] bond29 (unregistering): Released all slaves
[ 1871.826157][ T3012] bond30 (unregistering): Released all slaves
[ 1871.941322][ T3012] bond31 (unregistering): Released all slaves
[ 1872.061373][ T3012] bond32 (unregistering): Released all slaves
[ 1872.174294][ T3012] bond33 (unregistering): Released all slaves
[ 1872.287437][ T3012] bond34 (unregistering): Released all slaves
[ 1872.479192][T26552] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 1872.499149][T26552] team0: Device netdevsim0 failed to register rx_handler
[ 1872.541566][T26443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1872.610291][T26443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1872.649120][ T3012] tipc: Disabling bearer <eth:batadv0>
[ 1872.812997][ T3012] tipc: Left network mode
[ 1873.256356][T26572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3535'.
[ 1873.307140][T26443] team0: Port device team_slave_0 added
[ 1873.390074][T26443] team0: Port device team_slave_1 added
[ 1873.986653][T24836] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[ 1874.175143][T24836] usb 2-1: Using ep0 maxpacket: 8
[ 1874.177677][T26443] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1874.197414][T24836] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1874.225415][T26443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1874.261539][T24836] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1874.317967][T24836] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[ 1874.328242][T24836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1874.363862][T24836] usb 2-1: Product: syz
[ 1874.393305][T24836] usb 2-1: Manufacturer: syz
[ 1874.399258][T26443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1874.403320][T24836] usb 2-1: SerialNumber: syz
[ 1874.503211][T24836] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 1874.586588][T24836] usbtest 2-1:1.0: couldn't get endpoints, -22
[ 1874.637239][T24836] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[ 1874.722689][T26577] loop2: detected capacity change from 0 to 7
[ 1874.813333][T26443] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1874.818604][T24836] usb 2-1: USB disconnect, device number 111
[ 1874.886500][T26443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1875.129604][T26443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1876.206050][ T3012] batman_adv: batadv0: Removing interface: virt_wifi0
[ 1876.469093][T26606] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1877.245091][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 1877.245108][   T30] audit: type=1326 audit(1761602399.564:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1877.455076][   T30] audit: type=1326 audit(1761602399.564:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1877.655282][   T30] audit: type=1326 audit(1761602399.574:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1877.685735][   T30] audit: type=1326 audit(1761602399.574:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1877.746767][   T30] audit: type=1326 audit(1761602399.584:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1877.769658][   T30] audit: type=1326 audit(1761602399.584:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1877.795648][   T30] audit: type=1326 audit(1761602399.584:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1877.818934][   T30] audit: type=1326 audit(1761602399.594:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1878.160369][   T30] audit: type=1326 audit(1761602399.594:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1878.185607][   T30] audit: type=1326 audit(1761602399.594:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26608 comm="syz.3.3541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1878.537412][T26622] hub 9-0:1.0: USB hub found
[ 1878.545224][T26622] hub 9-0:1.0: 1 port detected
[ 1878.625185][T24836] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 1878.810078][T24836] usb 3-1: config 0 has no interfaces?
[ 1878.826352][T24836] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1878.836406][T24836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1878.958515][T24836] usb 3-1: Product: syz
[ 1878.982126][T24836] usb 3-1: Manufacturer: syz
[ 1879.009805][T24836] usb 3-1: SerialNumber: syz
[ 1879.115126][T24836] usb 3-1: config 0 descriptor??
[ 1880.028766][T26633] netlink: 'syz.1.3545': attribute type 10 has an invalid length.
[ 1880.168090][T26637] netlink: 'syz.1.3545': attribute type 10 has an invalid length.
[ 1881.141256][T24836] usb 3-1: USB disconnect, device number 5
[ 1881.472482][T26644] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3547'.
[ 1881.653695][T26644] syz.0.3547 (26644): drop_caches: 2
[ 1882.081602][T26443] hsr_slave_0: entered promiscuous mode
[ 1882.089395][T26443] hsr_slave_1: entered promiscuous mode
[ 1882.125572][T26633] team0: Device netdevsim0 failed to register rx_handler
[ 1883.089127][ T3012] IPVS: stop unused estimator thread 0...
[ 1883.153514][T26443] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1883.193815][T26443] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1883.236211][T26443] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1883.269569][T26443] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1883.482749][T26443] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1883.568552][T26443] 8021q: adding VLAN 0 to HW filter on device team0
[ 1883.586914][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1883.594122][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1883.632542][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1883.639742][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1883.739623][T26443] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1883.797486][T26443] veth0_vlan: entered promiscuous mode
[ 1883.811313][T26443] veth1_vlan: entered promiscuous mode
[ 1883.860800][T26443] veth0_macvtap: entered promiscuous mode
[ 1883.878183][T26443] veth1_macvtap: entered promiscuous mode
[ 1883.905923][T26443] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1883.926510][T26443] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1883.957318][T18002] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1883.977270][T18002] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1884.019811][T18002] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1884.059366][T18002] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1884.117200][  T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1884.131860][  T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1884.171596][  T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1884.182558][  T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1884.323905][   T30] kauditd_printk_skb: 31 callbacks suppressed
[ 1884.323922][   T30] audit: type=1326 audit(1761602406.984:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1884.378776][   T30] audit: type=1326 audit(1761602407.024:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1884.409969][T26692] netlink: 'syz.1.3560': attribute type 10 has an invalid length.
[ 1884.420232][T26692] team0: Device netdevsim0 failed to register rx_handler
[ 1884.439297][T26692] netlink: 'syz.1.3560': attribute type 10 has an invalid length.
[ 1884.468925][T26700] x_tables: duplicate underflow at hook 3
[ 1884.655576][   T30] audit: type=1326 audit(1761602407.024:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=231 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1884.687224][   T30] audit: type=1326 audit(1761602407.024:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1884.715414][   T30] audit: type=1326 audit(1761602407.024:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1884.768622][   T30] audit: type=1326 audit(1761602407.024:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=338 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1884.795304][   T30] audit: type=1326 audit(1761602407.024:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1884.851124][T26705] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3512'.
[ 1884.909503][T26705] syz.5.3512 (26705): drop_caches: 2
[ 1885.110047][   T30] audit: type=1326 audit(1761602407.024:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1885.345195][   T30] audit: type=1326 audit(1761602407.024:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1885.387795][   T30] audit: type=1326 audit(1761602407.024:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26685 comm="syz.3.3562" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[ 1887.143136][T26736] bridge1: entered promiscuous mode
[ 1887.405943][T26741] geneve3: entered promiscuous mode
[ 1887.411504][T26741] geneve3: entered allmulticast mode
[ 1889.215321][T24835] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1889.366806][T26765] netlink: 'syz.3.3558': attribute type 10 has an invalid length.
[ 1889.393216][T26765] team0: Device netdevsim0 failed to register rx_handler
[ 1889.416144][T24835] usb 3-1: config 0 has no interfaces?
[ 1889.425589][T24836] usb 2-1: new low-speed USB device number 112 using dummy_hcd
[ 1889.439357][T24835] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1889.451231][T26765] netlink: 'syz.3.3558': attribute type 10 has an invalid length.
[ 1889.463712][T24835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1889.465779][T26442] Bluetooth: hci5: command 0x0405 tx timeout
[ 1889.486342][T24835] usb 3-1: Product: syz
[ 1889.491810][T24835] usb 3-1: Manufacturer: syz
[ 1889.498670][T24835] usb 3-1: SerialNumber: syz
[ 1889.597503][T24835] usb 3-1: config 0 descriptor??
[ 1889.603630][T24836] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[ 1889.709328][T24836] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[ 1889.748965][T24836] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1889.779600][T24836] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[ 1889.793252][T24836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[ 1889.805110][T24836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1889.817211][T24836] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[ 1889.836248][T24836] usb 2-1: string descriptor 0 read error: -22
[ 1889.849690][T24836] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[ 1889.861313][T24836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1889.882394][T24836] usb 2-1: config 0 descriptor??
[ 1889.893934][T24836] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1889.901693][T24836] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1889.928839][T24836] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46
[ 1890.802724][T26771] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3565'.
[ 1890.853763][T26771] syz.3.3565 (26771): drop_caches: 2
[ 1891.764958][T24847] usb 3-1: USB disconnect, device number 6
[ 1892.423772][T17866] usb 2-1: USB disconnect, device number 112
[ 1893.469573][ T5199] Dev loop6: unable to read RDB block 7
[ 1893.524138][ T5199]  loop6: unable to read partition table
[ 1893.544954][ T5199] loop6: partition table beyond EOD, truncated
[ 1893.801863][T26805] netlink: 'syz.1.3574': attribute type 10 has an invalid length.
[ 1893.819652][T26805] team0: Device netdevsim0 failed to register rx_handler
[ 1894.076081][T26808] netlink: 'syz.1.3574': attribute type 10 has an invalid length.
[ 1894.913180][T26821] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3577'.
[ 1894.976784][T26822] syz.2.3577 (26822): drop_caches: 2
[ 1896.819353][   T30] kauditd_printk_skb: 2 callbacks suppressed
[ 1896.819370][   T30] audit: type=1326 audit(1761602419.474:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.1.3582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1896.907651][T26855] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3583'.
[ 1896.933711][T26855] syz.2.3583 (26855): drop_caches: 2
[ 1897.063010][   T30] audit: type=1326 audit(1761602419.474:2643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.1.3582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1897.103698][   T30] audit: type=1326 audit(1761602419.714:2644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26850 comm="syz.1.3582" exe="/root/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf704d539 code=0x7ffc0000
[ 1898.609241][T26875] blkio.reset_stats is deprecated
[ 1899.155172][T24847] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1899.315101][T24847] usb 4-1: Using ep0 maxpacket: 16
[ 1899.372001][T24847] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[ 1899.416641][T24847] usb 4-1: config 0 has no interface number 0
[ 1899.422733][T24847] usb 4-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1899.687339][T24847] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1899.760469][T24847] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1899.770740][T24847] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1899.787756][T24847] usb 4-1: Product: syz
[ 1899.799932][T24847] usb 4-1: SerialNumber: syz
[ 1899.902904][T24847] usb 4-1: config 0 descriptor??
[ 1900.136262][T24847] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input47
[ 1902.213621][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.225249][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.232358][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.240482][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.248087][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.255708][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.262896][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.270503][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.278107][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.285807][    C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1902.292793][T24844] usb 4-1: USB disconnect, device number 120
[ 1902.299309][    C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1902.328439][T24844] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1914.666350][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.672687][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1976.107503][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.113823][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1983.305316][ T5841] Bluetooth: hci5: command 0x0405 tx timeout
[ 2037.547022][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.553360][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2052.905843][   T31] INFO: task kworker/1:3:5886 blocked for more than 143 seconds.
[ 2052.913735][   T31]       Not tainted syzkaller #0
[ 2052.919740][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 2052.928943][   T31] task:kworker/1:3     state:D stack:20776 pid:5886  tgid:5886  ppid:2      task_flags:0x4208060 flags:0x00080000
[ 2052.941656][   T31] Workqueue: usb_hub_wq hub_event
[ 2052.947499][   T31] Call Trace:
[ 2052.950803][   T31]  <TASK>
[ 2052.953718][   T31]  __schedule+0x1798/0x4cc0
[ 2052.959069][   T31]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 2052.965283][   T31]  ? __pfx___schedule+0x10/0x10
[ 2052.970157][   T31]  ? schedule+0x91/0x360
[ 2052.975383][   T31]  schedule+0x165/0x360
[ 2052.979558][   T31]  usb_kill_urb+0x1be/0x2d0
[ 2052.985108][   T31]  ? __pfx_usb_kill_urb+0x10/0x10
[ 2052.990372][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 2052.997019][   T31]  usb_start_wait_urb+0x18c/0x4c0
[ 2053.002064][   T31]  ? __pfx_usb_start_wait_urb+0x10/0x10
[ 2053.008445][   T31]  ? usb_alloc_urb+0x46/0x150
[ 2053.013160][   T31]  usb_control_msg+0x232/0x3e0
[ 2053.019664][   T31]  hub_port_init+0xbf9/0x2800
[ 2053.025417][   T31]  hub_event+0x2532/0x4a20
[ 2053.029870][   T31]  ? __pfx_hub_event+0x10/0x10
[ 2053.035624][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 2053.041351][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2053.047243][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 2053.052952][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 2053.059360][   T31]  process_scheduled_works+0xae1/0x17b0
[ 2053.065742][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 2053.071720][   T31]  worker_thread+0x8a0/0xda0
[ 2053.077115][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2053.083444][   T31]  ? __kthread_parkme+0x7b/0x200
[ 2053.089247][   T31]  kthread+0x711/0x8a0
[ 2053.093510][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 2053.099321][   T31]  ? __pfx_kthread+0x10/0x10
[ 2053.103958][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2053.109158][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2053.115244][   T31]  ? __pfx_kthread+0x10/0x10
[ 2053.119853][   T31]  ret_from_fork+0x4bc/0x870
[ 2053.124468][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2053.129593][   T31]  ? __switch_to_asm+0x39/0x70
[ 2053.134422][   T31]  ? __switch_to_asm+0x33/0x70
[ 2053.139190][   T31]  ? __pfx_kthread+0x10/0x10
[ 2053.143784][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2053.149275][   T31]  </TASK>
[ 2053.152406][   T31] 
[ 2053.152406][   T31] Showing all locks held in the system:
[ 2053.160879][   T31] 1 lock held by khungtaskd/31:
[ 2053.166342][   T31]  #0: ffffffff8df3d2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 2053.176877][   T31] 2 locks held by getty/5587:
[ 2053.181537][   T31]  #0: ffff8880339ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 2053.192040][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 2053.202980][   T31] 5 locks held by kworker/1:3/5886:
[ 2053.208824][   T31]  #0: ffff888021ad4548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 2053.220756][   T31]  #1: ffffc90005297ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 2053.233555][   T31]  #2: ffff888028dad198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 2053.242973][   T31]  #3: ffff888145368518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[ 2053.253584][   T31]  #4: ffff888145762068 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[ 2053.264757][   T31] 
[ 2053.267086][   T31] =============================================
[ 2053.267086][   T31] 
[ 2053.276280][   T31] NMI backtrace for cpu 0
[ 2053.276298][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 2053.276310][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2053.276317][   T31] Call Trace:
[ 2053.276322][   T31]  <TASK>
[ 2053.276327][   T31]  dump_stack_lvl+0x189/0x250
[ 2053.276353][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2053.276366][   T31]  ? __pfx__printk+0x10/0x10
[ 2053.276382][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 2053.276394][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 2053.276406][   T31]  ? __pfx__printk+0x10/0x10
[ 2053.276418][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 2053.276435][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 2053.276446][   T31]  watchdog+0xf60/0xfa0
[ 2053.276460][   T31]  ? watchdog+0x1e2/0xfa0
[ 2053.276473][   T31]  kthread+0x711/0x8a0
[ 2053.276487][   T31]  ? __pfx_watchdog+0x10/0x10
[ 2053.276496][   T31]  ? __pfx_kthread+0x10/0x10
[ 2053.276510][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2053.276522][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2053.276533][   T31]  ? __pfx_kthread+0x10/0x10
[ 2053.276546][   T31]  ret_from_fork+0x4bc/0x870
[ 2053.276558][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 2053.276571][   T31]  ? __switch_to_asm+0x39/0x70
[ 2053.276579][   T31]  ? __switch_to_asm+0x33/0x70
[ 2053.276586][   T31]  ? __pfx_kthread+0x10/0x10
[ 2053.276599][   T31]  ret_from_fork_asm+0x1a/0x30
[ 2053.276615][   T31]  </TASK>
[ 2053.276619][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 2053.430526][    C1] NMI backtrace for cpu 1
[ 2053.430543][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[ 2053.430561][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 2053.430583][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 2053.430608][    C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 22 00 f3 0f 1e fa fb f4 <e9> c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 2053.430623][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[ 2053.430638][    C1] RAX: af7380b3a4c2bc00 RBX: ffffffff81967be7 RCX: af7380b3a4c2bc00
[ 2053.430652][    C1] RDX: 0000000000000001 RSI: ffffffff8d70bf1d RDI: ffffffff8bbf05e0
[ 2053.430664][    C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb
[ 2053.430677][    C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7cd470
[ 2053.430689][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100395cb58
[ 2053.430701][    C1] FS:  0000000000000000(0000) GS:ffff88812623e000(0000) knlGS:0000000000000000
[ 2053.430715][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2053.430727][    C1] CR2: 0000558ba002c660 CR3: 000000000dd38000 CR4: 00000000003526f0
[ 2053.430742][    C1] Call Trace:
[ 2053.430749][    C1]  <TASK>
[ 2053.430756][    C1]  default_idle+0x13/0x20
[ 2053.430778][    C1]  default_idle_call+0x73/0xb0
[ 2053.430799][    C1]  do_idle+0x1e7/0x510
[ 2053.430819][    C1]  ? __pfx_do_idle+0x10/0x10
[ 2053.430843][    C1]  cpu_startup_entry+0x44/0x60
[ 2053.430860][    C1]  start_secondary+0x101/0x110
[ 2053.430882][    C1]  common_startup_64+0x13e/0x147
[ 2053.430910][    C1]  </TASK>