last executing test programs:

42.551194853s ago: executing program 3 (id=851):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_emit_ethernet(0xb2, &(0x7f00000001c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x7c, 0x2c, 0x0, @dev={0xfe, 0x80, '\x00', 0x8}, @local, {[@hopopts={0x3c, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x5, 0x40, [0x3, 0x2, 0x8, 0x6, 0x6]}}]}, @routing={0x32, 0x4, 0x1, 0xa5, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2]}], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x2, 0x200000000000001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb48, 0x9, 0x8, 0x2, 0x21}, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x3)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast1, 0x4f23, 0xfffc, 0x4e23, 0x6, 0xa, 0x2a11bad3d5f03f34, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x800000000001}, {0x4, 0xfffffffffffffffe, 0x4, 0x9}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x210000, 0x33}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0xffe0)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB="0104000000000000feffffffffffffff0300000000000000", @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32=r1, @ANYBLOB="000000000400"/28, @ANYRES32=r1, @ANYRESDEC=r0])
r4 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x0, 0x40800})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000005"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r5}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r5, &(0x7f0000000400), &(0x7f0000000500)=""/84}, 0x20)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000000140)={0x6, 0x118, 0xfa00, {{0x6, 0x9, "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", 0x95, 0x3, 0xf0, 0x2, 0x40, 0x7f, 0x6}}}, 0x120)
r7 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0)
syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="20131a000000b00c4fc7db94"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r7, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)

38.771764736s ago: executing program 3 (id=864):
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0xf34da, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r1, r1, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040042000000a8001600a400014020000400feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e425e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db7010000827ffad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x108, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x3, 0x0, 0xe53, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x100, 0x5db, 0x0, 0x6}}, @TCA_NETEM_DELAY_DIST={0x24, 0x2, "d4a943f2d2a0011535c4c55835e8af4c8ed9492d415422016e5dd86cf782605f"}, @TCA_NETEM_RATE={0x14, 0x6, {0x7, 0x8, 0xb6a0, 0x200}}, @TCA_NETEM_ECN={0x8}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xff, 0x7}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x1, 0x1, 0x2, 0x7f, 0x3}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x101, 0x2}}, @TCA_NETEM_RATE={0x14, 0x6, {0xd, 0x7, 0x8, 0x4}}, @TCA_NETEM_CORR={0x10, 0x1, {0xff, 0x7, 0x3}}]}}}]}, 0x108}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r6 = socket(0x2b, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
eventfd(0x8)
connect$unix(r6, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x2000009, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$BTRFS_IOC_SYNC(r6, 0x9408, 0x0)
r9 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0xf, 0x35, 0x17, 0x40008, 0x9, 0x20000fb, 0x4, 0x11, 0xffffffffffffffff}})

37.175499133s ago: executing program 3 (id=871):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
r1 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0xa, 0x7, @loopback}, 0x1c, &(0x7f0000000480)}, 0x20004b88)

37.024796691s ago: executing program 3 (id=872):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
preadv(r3, &(0x7f00000004c0)=[{&(0x7f0000001680)=""/4110, 0x100e}], 0x1, 0x27, 0x13)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x20, 0x40, 0x81, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @local, @empty}}}})
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
unshare(0x28000600)
socket$can_raw(0x1d, 0x3, 0x1)
mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0)
unshare(0x8000280)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r8, 0xffffffffffffffff, 0x0)
fcntl$lock(r7, 0x410, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x1fd})
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r9, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')

36.718318269s ago: executing program 3 (id=875):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x3)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') (async)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x1})
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x2000000b}) (async)
ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000100)={0xc023})
r4 = socket$unix(0x1, 0x2, 0x0) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) (async)
writev(r6, &(0x7f0000001400)=[{0x0}], 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd700000dcdf250700000008000300", @ANYRES32=r8, @ANYBLOB="0d10263b3ca4f56fdd78ffad6bfabf009900ff0700004f00000000000400cf16a8e664c338ed2b03246c6d61637662617030679970d1ab093315"], 0x9c}, 0x1, 0x0, 0x0, 0x93}, 0x24044884)

34.912418834s ago: executing program 3 (id=883):
syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x60242)
syz_open_dev$sndctrl(&(0x7f0000001240), 0x84, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42)
close(r4)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, 0x0, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x2000600d)

34.572922685s ago: executing program 32 (id=883):
syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x60242)
syz_open_dev$sndctrl(&(0x7f0000001240), 0x84, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42)
close(r4)
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, 0x0, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}, 0x2000600d)

16.990308815s ago: executing program 1 (id=932):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)
read$char_usb(r0, &(0x7f0000000400)=""/186, 0x110)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x20000000000000})
fcntl$lock(r2, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0x2005, 0x1f9})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0)
pread64(r3, &(0x7f00000024c0)=""/209, 0xd1, 0x8)
syz_usb_disconnect(0xffffffffffffffff)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x4008032, 0xffffffffffffffff, 0xd0d9c000)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x41, 0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080}, 0x0)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c"], 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d03, 0x0, 0x81}]})
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)

12.667817283s ago: executing program 5 (id=947):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @empty}]}, &(0x7f0000000180)=0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binfmt_format(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$F2FS_IOC_SEC_TRIM_FILE(r3, 0x4018f514, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x4, 0x8, 0x3, 0x0, 0xa, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x2e, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
madvise(&(0x7f0000391000/0x1000)=nil, 0x1000, 0x10)
r5 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x2)
syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00')
readahead(0xffffffffffffffff, 0x6, 0x0)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xc000, 0x2000000a, 0x10001, 0x2, 0x0, [{0x2, 0x3, 0x87, '\x00', 0x9}, {0x0, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x5, 0xc, '\x00', 0x9}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd9, 0xf1, '\x00', 0x7f}, {0x3, 0x8, 0xc2, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x83, '\x00', 0x2}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x44, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xf6, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x81, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x42, '\x00', 0x18}, {0x5, 0x7, 0x2, '\x00', 0xc}, {0x7, 0x1, 0xc}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x1, '\x00', 0x8}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x81, 0x4, '\x00', 0x8}]}})
syz_usb_connect(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100006e383a10d00701415cec01020301090224"], 0x0)
setpgid(0x0, 0x0)
bind$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010100}}, 0x24)
r7 = epoll_create(0x1002)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000040)={0x1000000d})
bind$inet6(r1, 0x0, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @empty}, 0x1c)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
pipe(&(0x7f0000000040))

12.64225551s ago: executing program 0 (id=948):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2f, 0x44, 0x4, 0x2, 0xa, @private1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x700, 0x700, 0x9f, 0x4}})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000053030000060000008c080000", @ANYRES32=0x1, @ANYBLOB="030000000000000000fcff000000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000030000000e00"/28], 0x50)
r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r2})

12.239486626s ago: executing program 0 (id=950):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0080904530002058d9d0009050f0500000000ff090582", @ANYBLOB="6af6033eb8"], 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x8, 0x40, 0x1, 0x3, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @multicast2}}}})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
waitid(0x1, r3, 0x0, 0x61000006, &(0x7f0000000340))
ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYRES32=r4, @ANYRES16=r2, @ANYBLOB="010028bd7000fcdbdf2524000000180001801400020064756d6d7930000026"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880)
ptrace(0x10, r0)
ptrace$cont(0x20, r0, 0x9, 0x5)
ptrace(0x11, r0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newlink={0x60, 0x10, 0x401, 0x70bd28, 0x2, {0x0, 0x0, 0x0, 0x0, 0x14040, 0x8000}, [@IFLA_MTU={0x8, 0x4, 0x80000003}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x2}, @IFLA_PHYS_SWITCH_ID={0x17, 0x24, "55e0867decbd24a7503b35a421437aaf54cf9e"}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf605}, @IFLA_MTU={0x8, 0x4, 0x2}, @IFLA_LINKMODE={0x5, 0x11, 0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4d87e026073bed22}, 0x50)
r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009058203"], 0x0)
syz_usb_control_io(r8, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x40, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x1, 0x6}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0xff}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0xf3, 0x9, 0x1, 0xff, 0xfa}, 0x24, &(0x7f0000000080)={0x5, 0xf, 0x24, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x31, 0xd, 0x3, 0x8, 0xc}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x27, 0x0, 0xb0}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x7, 0xa, 0x400}, @ptm_cap={0x3}]}, 0x8, [{0x7f, &(0x7f0000000140)=@string={0x7f, 0x3, "7b684a6e01f2087f43072b0d84dc82ba7798ea621409c918b832e86c856c703ebde1dd8d4c2bb22ea0bf0708d7a47413d958671da1a227abbe5c7e212498a69da1f2b5892f6c40a5f7ae9e52f389dbbc80d6a75150722bb50659782c6a8e9136ac2cf3e7d645aaf6d69eba86fb04d48522a3684805a4b34e33b77702b6"}}, {0x52, &(0x7f00000001c0)=@string={0x52, 0x3, "d6fe8c9ab2d69862c7fb9282c5a7f8ee279dda35a8e8e1cfddbdfaf09b24ee480e38760fabc0a9e8c0f6c152372769fa02951304645354e0bb1cfb369d80e82cdc055db9a501cc19d9150b9cbafd0cc6"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x436}}, {0xf1, &(0x7f0000000380)=@string={0xf1, 0x3, "c36fae1541b4b991a4468733df9f1f949b82e15bfe24610ec8dcfdd0ff9bdaa91c23b26beb847cbb65a1fac6b59f22fe524ef4a19a8e9385c0d9182d94d87a1ecd2ba89e4320873c2427fe28aae3d738ad530dcd66d3f196431abec9c4ce734b5cad4b83970320660703a9ff0f305766658addbf158e7953f849e98912b8d5fc84bc0b5c0d9fa98a7446096f7a1895f11fd740be2ec4dd20d297c242e9b68b672b404d382c2e9a30e396cd4871685b55420dbb776fd9e0b4ed3ba32696dc6c493bc5b1a6680268ba11e5a5bceebf8c1f041d753503506e925b03762cf3df2cb85d0a5bdd6609cc54b61fb638209fa1"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x810}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x418}}, {0x65, &(0x7f0000000640)=@string={0x65, 0x3, "92b61d8eb91b442661331d08ffdcdd6c6357b1a85ef3f770c175b62605450a838f6b5c778cf1b5203db27f3f33a44770b4b3548dff3b58e69d02625d95229cbc1009d30038814af28e30dc3e1aa6a049d03d578f5529c7928df4fce0aead2cf9084cf4"}}]})

10.987296182s ago: executing program 1 (id=952):
unshare(0x2040400)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) (async)
sendmmsg$inet6(r0, &(0x7f0000001300)=[{{&(0x7f0000000040)={0xa, 0x4e28, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x4ff94) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0x200000000000d47, 0x3e0, 0xffffeffffffffff8, 0x8003, 0x10000, 0x0, 0x1000000000000007, 0xcc, 0x1, 0xfffffffffffff05f, 0x200000000004, 0x10000000000000a2, 0x1000000000000401, 0x1, 0xb68c, 0x8a7], 0x1000, 0x20a54}) (async)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2) (async)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/33, 0x21}], 0x1) (async)
ptrace$setregs(0xd, r2, 0x2, &(0x7f0000000180)) (async)
ptrace$cont(0x21, r2, 0x8, 0x4) (async)
inotify_add_watch(r1, 0x0, 0x502)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r3)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000080)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r3, 0xc0085504, &(0x7f0000000500)=0xfffffffb) (async)
r4 = socket(0x10, 0x803, 0x0)
getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/bnep\x00')
syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000680)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r6=>0x0}) (async)
ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000880)=<r7=>0x0)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f00000008c0)={"b90923e5d8182d62b6d951722d604da0", r6, r7, {0x7, 0x5}, {0x100, 0xff}, 0x7ff, [0x0, 0x0, 0x5, 0xd8, 0xb8, 0x7fffffff, 0x1, 0x0, 0xc0e3, 0xed1, 0x2, 0x9, 0x1, 0x8, 0x7e30, 0x10001]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000080)={"babc4d995ddd748adbf46d9021bb7075", 0x0, r6, {0x9, 0x2}, {0xdb, 0x4}, 0x5, [0x8000000000000000, 0x9, 0x4, 0xdf, 0x0, 0x4, 0x1, 0x1907, 0x100000001, 0x5, 0x6, 0x3, 0x4, 0xfffffffffffffff9, 0x0, 0x5]}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) (async)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)

9.092446013s ago: executing program 0 (id=955):
socket(0x1d, 0x80805, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(0x0, 0xd21, 0x4000)
r2 = openat$kvm(0xffffff9c, &(0x7f0000000240), 0x100, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a)
openat$cgroup_int(r3, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0)
ioctl$UBLK_U_CMD_END_USER_RECOVERY(r3, 0xc0207511, &(0x7f00000002c0)={0x0, 0xffff, 0x0, 0x0, <r4=>0x0})
r5 = syz_open_procfs(r4, &(0x7f0000000340)='environ\x00')
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010dbdf250000000000000000000065e7d2221f2887400fb7ef2b0000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d300000000000000c0016800800018004000c800500110006000000"], 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0)
ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040))
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x87}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, 0x3, 0x8, 0x0, 0xfffffffffffffffd}]})
sendmsg$nl_route(r3, 0x0, 0x0)
r9 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x82140)
ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f0000000100)={0x0, 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
msgctl$IPC_STAT(0x0, 0x2, 0x0)
msgsnd(0x0, 0x0, 0xe3, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r8, 0xc0389423, &(0x7f0000000580)={0x3, 0x20, [0x7fffffff, 0xa6, 0xb5, 0x3ff], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0]})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000480)={[0xf, 0x5, 0xaf, 0x402, 0x101ffffffffffff, 0x8000000d, 0x2004c8, 0xfff9, 0x1, 0xfffffffb, 0x100000001, 0x8000000000000000, 0x8d1b, 0xc, 0x2000000000000003, 0x3], 0x1000, 0x40111})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

8.249034806s ago: executing program 1 (id=957):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x805, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181143, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080)=""/4071, &(0x7f0000001080)=0xfe7)
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="8f", 0x1}], 0x1, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x0)
recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x3a63, &(0x7f0000000180)={0x0, 0x8274, 0x40, 0x3, 0x846})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/131, 0x83}, {0x0}, {0x0}], 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94)
io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r4], 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r6=>0x0})
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
listxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0)
sendmmsg$inet_sctp(r7, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f0000005d80)=[{&(0x7f0000000740)="eda1080413", 0x5}], 0x1, 0x0, 0x0, 0x24000000}], 0x1, 0x62048800)
setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000140)=0x1000, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', <r8=>0x0})
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004)

7.868279823s ago: executing program 5 (id=958):
r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async)
listen(r1, 0x50)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086d044fc1ffffed0000010902240001000000000904"], 0x0) (async)
syz_usb_disconnect(r2) (async)
syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800"], 0x0)
r3 = fsmount(r0, 0x1, 0xb) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r4, 0x84, 0x82, &(0x7f0000000000)="10ef00001a000000", 0x29) (async)
ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000340)={0x0, 0x5, 0x3ff, 0x5f, &(0x7f0000000140)=""/95, 0xbd, &(0x7f00000001c0)=""/189, 0x0, &(0x7f0000000300)}) (async)
sendmmsg$inet_sctp(r3, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x1c}], 0x1, 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f0000000280)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r6, @ANYBLOB="02"], 0x9) (async)
r7 = syz_open_dev$video4linux(&(0x7f0000000400), 0xd, 0x28580)
ioctl$VIDIOC_G_EXT_CTRLS(r7, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x100c, 0xffffffffffffffff, 0x0, 0x0}) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
syz_usb_connect(0x0, 0x4f, &(0x7f0000001240)={{0x12, 0x1, 0x100, 0x91, 0x0, 0x9e, 0x8, 0x1b3d, 0x13a, 0x6e3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x5, 0x6, 0x40, 0x80, "", [{{0x9, 0x4, 0x4e, 0x80, 0x1, 0xf5, 0x5a, 0xff, 0x2, [], [{{0x9, 0x5, 0xc, 0x3, 0x38f, 0x80, 0x1, 0x1, [@generic={0x8, 0xb, "0c5f0ab6bc75"}]}}]}}, {{0x9, 0x4, 0xcf, 0xd9, 0x1, 0x9, 0x27, 0x48, 0x7f, [], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x83, 0x4, 0x9, [@generic={0x8, 0xb, "1655f97bd9ea"}]}}]}}]}}]}}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000100)={r6, 0x2}, 0x8)
r8 = gettid()
setpgid(r8, 0x0) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

5.314720379s ago: executing program 0 (id=961):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
read$qrtrtun(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20)
write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000440)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xfa, "23107a", "8aadb9b1561c89cd31d57d7f754b666f4a230f85ee0c58ab091f8686b6bb3845c1ad10b2d35a53ebb7449fa37c26c5083f586818ecf2862e0cd11a662e816328b88957c0c6ce0da53b2a1898df689dd30dd3ef542fee32a2aa61bc9edcf4e7c91286e52093cf284d91dc948afaca2152b617c281dd23ab2f21b945e4bf0d8ce75c1f1306446881c582df9fac74b18bb69dc125b8878fb996e8ba36f5f09bfbd3d06e5c40cf8472f99d2937dc411c5b4de9c9e76ae8d978c63e749243d13ac84fce80016e77a980a25a0b3e41eebec14ef1a09ab45cbbf18a5934f869259d5800"}}, 0x110)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)

5.19911218s ago: executing program 1 (id=962):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x18, 0x1411, 0x8dde6ee8dcd699b9, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = epoll_create1(0x80000)
r4 = fcntl$dupfd(r2, 0x0, r2)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x20000000})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000001c0)={0x10000014})
r5 = getpid()
kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f0000000100)={r3, r2, 0x6})
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c000000150001002dbd7010ffdbdf25000000000000e34d0000080000000000ffffffff0000000000000000000000004e2300074e2100050200a0202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c0008000800080001040000"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000052)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
readlink(&(0x7f0000002000)='./file0/file3\x00', &(0x7f00000021c0)=""/151, 0x97)
read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000300)=@newtfilter={0x64, 0x2c, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x6, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x3, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8000, 0x10}]}}]}}]}, 0x64}}, 0x24040084)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)
write$FUSE_INIT(r0, &(0x7f000000ae80)={0x50, 0x0, r7, {0x7, 0x2d, 0x3, 0x10020, 0x40, 0x3ff, 0x8, 0x9, 0x0, 0x0, 0x8}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006640)={0x90, 0x0, 0x100000a, {0x3, 0x4, 0x45, 0x1, 0x44e, 0xc, {0x4, 0xc, 0xb, 0x1, 0x4, 0x7, 0xc, 0x7fffffff, 0x0, 0xa000, 0x4, r8, 0x0, 0x0, 0x8b29}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
close(0x3)

4.976059996s ago: executing program 0 (id=963):
socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x17)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect$cdc_ecm(0x6, 0x74, &(0x7f0000000300)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x1, 0x0, 0x50, 0xc, "", [{{0x9, 0x4, 0x0, 0x93, 0x2, 0x2, 0x6, 0x0, 0x2, {{0x7, 0x24, 0x6, 0x0, 0x0, "cd1b"}, {0x5, 0x24, 0x0, 0x1ff}, {0xd, 0x24, 0xf, 0x1, 0xbd, 0x4, 0x2a76, 0x9}, [@mdlm_detail={0xc, 0x24, 0x13, 0x8d, "eb13bd5de2c8871f"}, @dmm={0x7, 0x24, 0x14, 0x7, 0x8000}, @country_functional={0x12, 0x24, 0x7, 0xd, 0x6, [0xd, 0xb8a, 0x8, 0xff48, 0x7175, 0x6]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0xf9, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0xa, 0x39}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x3, 0x8, 0x80, 0x40, 0xb}, 0x1c, &(0x7f00000003c0)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xe, "0916146626ebb0a72dca6504c7ae8064"}, @ptm_cap={0x3}]}, 0x3, [{0xe7, &(0x7f0000000640)=ANY=[@ANYBLOB="e703a77bed38be003a02fe75f73625bd22c1ae7125342066531b765e9c8e62bdf36b64521ec2b28c72ac019f4b9745313a57b69f6656669cb23e319b9006215bb26d8774be62098b6b1181a9e1d30ab7ff8f4995044543a608da7f77953552cb2d0c3e82c463f09548fa55db7c690db3fe81e677e43d69133b07b53d6265860cf93a8159eed573c936d840b1eb6971f76e9f0f0c1da129b39c3a161b7a3b9a6cf1ad299d25f842a6da1f6cb140acce8352c49206d8ad377df688a5c8e43bfedb3217be5729555ee899ab9bad5aad81cdb9afc09449954e7a311ff3216e22b6544932c06be46f03354e5485b4cc82d7943d170a6af03e33"]}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x458}}, {0x7a, &(0x7f0000000200)=ANY=[@ANYBLOB="7a03622c1fe88516d8898d7fa987946bcb7358122b0adc5266b61b72cb053240d549843fc1bf6895348967fea81e05c7710f3b74553dd654aefd82fec4202d726e27f6c83bc438df6b736b73d6116cc51dd200d72b9a6ee637f6d5396cd10b701c4838f93b0c90d05bf562a5c07d4750dd9bea51ce7e6e8595f6d33d3355a1e8"]}]})
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000002c0)="1f4ffd7874dd635fdf9472d87bac33aa", 0x10)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0x5, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4)
getsockopt$inet6_tcp_int(r0, 0x6, 0x6, 0x0, &(0x7f00000001c0))
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x9, 0x0, 0x7fffffff}]})
creat(&(0x7f0000000040)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001a00001f08090000000000000200000025adc3c1e6ba654cc3aa7d342000"/62], 0x0, 0x32}, 0x28)
r4 = syz_io_uring_setup(0x29d8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0, &(0x7f0000000180)=<r7=>0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000081b000002000000ffff000005"], 0x48)
syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r4, 0x1, 0x1, 0x61, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000040)={0xed06, r8, 0x12, {0x7fffffff, 0x7c86}, 0x8}, 0x1)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x110, r3, 0x1000)

4.739585022s ago: executing program 5 (id=965):
unshare(0x60000000)
r0 = socket$packet(0x11, 0x2, 0x300)
unshare(0x10480)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'})
io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0xde76, 0x4000, 0x0, 0x85c})
syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20)
ioctl$FIOCLEX(0xffffffffffffffff, 0x5451)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x4a82, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece)
r6 = dup(r5)
socket$unix(0x1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
unshare(0x80000)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000280)={r8, 0x5}, &(0x7f00000002c0)=0x8)
ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

4.24376655s ago: executing program 2 (id=967):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
set_mempolicy(0x2002, &(0x7f0000000000)=0xb, 0x10000000b) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="20e2240000004ee6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)

3.657436852s ago: executing program 1 (id=969):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080), 0x4)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r1) (async)
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150) (async)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x3, "90873a"}, &(0x7f0000000300)=ANY=[@ANYBLOB="2083"], 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9d, 0xbd, 0x45, 0x40, 0x10b9, 0x6000, 0xbe16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x87, 0x9, 0x30, 0x7, "", [{{0x9, 0x4, 0x40, 0x19, 0x0, 0x3a, 0x92, 0xe0, 0x8}}]}}]}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_DELTABLE={0x140, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x6e, 0x6, "dbbd9294c2082862bff8cea7c1e050b1ddd720d05dc02185ca91fb75cb546a98ba7b853736463337751d0f35725e6e00398ad71808c0b5f6e6ebd503274de731032ba7e844ce4548edbee97e0d55b8a284dcd15f8a216626651ded74b70c069b273f5d70d9fa07970f78"}, @NFTA_TABLE_USERDATA={0x58, 0x6, "30039b79030e9f194739375b8ff788e5c3fc83b44b1f3d60af8ee45a109eb25bf8baaec3f47edc97bd614a64db622de1a2c05c1ec1d6ca52fa5bed27073d82718b22bf4f72c1231c6e80c5ffe65fb969804ede9f"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x1e, 0x6, "88e0b981927fd650855696e8803fc7340625bc11f59b0f3e67ff"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWTABLE={0x264, 0x0, 0xa, 0xf00, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xec, 0x6, "6e20dacea957f3876030a7779725fb87e7e48490bb2eebd6dab1ea3da90bfdc47d03d159b16a267d4c37b2345c4d5819925c110368944e89cd165def570b85ca87573546681541a6913b2de7d1a18c2cf61a6e9564419ba865ffb07ad156cf8ee6c213fe61d6f46510fd10e5e83fd9da4530e1c67c5a3818e10147386b12c93a5cad923a77785017e510f99a116fa68e43748b8858e30103b62e27a10c499eff87666d3d06d8deecab21c8984bc201cbdedbb598aa23ef820237c7c9d822a82bc8f3d47e7e604b9235072508c5d60e7c8c240369fa0b3a5a48c178407c5ffb584e051bebb72ad303"}, @NFTA_TABLE_USERDATA={0xac, 0x6, "8bea65ee3cf708ee566b61dd75b8cfa98be99724cb422ef79878a041df453417a05b7ae7b9d61a11621b272315d3b12d55ac0dba22713cd5a9a31093faa5241701b19e148c991ed6a7d073136fc7f10f6042f51c09d10f562eda7ff33510276946eb0c22c742dde0961029f6a96c08d7d2602d908ca49ab4f91766383a51e95e8f43dca9fed465fe424d41003c8cd183a71f8e1ea0b0fb678dd08485230aca9ceba18313af27ec2f"}, @NFTA_TABLE_USERDATA={0x92, 0x6, "48a196db8304b8cd347d0f2ec557a4a8c2a20d2680b4763d336de434078c94ce774cea1b3b65268e7dff21b492bf8387e69ca9a58b92dfc8c527f462e8c7c822f4cf525677fec4e7324197ca3303633bae6e1a71218a6b7c29b963b6b78a8df65a2be2cd677c57aa1265479be19cb8e2f1bf14ca50a55dc205481ece37296084fb4ca78036f8ae71294fc91b5b53"}, @NFTA_TABLE_USERDATA={0x16, 0x6, "e6b473e8a814c02419dc776861bf8db950bc"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3ec}, 0x1, 0x0, 0x0, 0x40880}, 0x0) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000095af324044060f8077c501020301090212000100000000090401"], 0x0) (async)
syz_usb_control_io$hid(r2, 0x0, 0x0) (async)
syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
syz_usb_disconnect(0xffffffffffffffff) (async, rerun: 32)
syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f0000000300)='\x00')
r3 = syz_open_dev$dvb_dvr(&(0x7f0000001040), 0x0, 0x103)
r4 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x70, 0x0, "", [{{0x9, 0x4, 0x0, 0xb3, 0x2, 0x7, 0x1, 0x1, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x9, 0x2, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x4, 0x4}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0x61, 0x7, 0x2, 0x40, 0x8}, 0xc1, &(0x7f00000004c0)={0x5, 0xf, 0xc1, 0x1, [@generic={0xbc, 0x10, 0x59ce1a447acb5e25, "008770abea3003e9cb7211415bd8b22117a758746dce108777e4f51dff3dd4700353c6adcab159aa5d3cf06e420156c32e0b42a79751498731c99bc24eb1d84aa833514e7fb1e530988168eacd743ffcbd3bcd71072e87903a149f3ffb49065c505f7aa8a1d0793fa3b4bd8c6f3c4e98452d0a203a63958c2d5eb49863840498d58031659e0b59a6ffa3ea8ef4d411b1570d6c4c901582fa4d8c00b6fafa800c037a860e1ff94689acf0856b31a6c14f14c84b9b6d91b327ec"}]}, 0x4, [{0x1d, &(0x7f00000005c0)=@string={0x1d, 0x3, "c86e3962c55deb06ee3b8dfe2c6f27f57a7f114713c7e2979d1743"}}, {0x90, &(0x7f0000000600)=@string={0x90, 0x3, "10e810a4485c553c256696b84d09e1b8e2d0c4dcac5442fc8ca01e464fc92ecde840a5feb75e3e7b2897ccd0499c380ca01ff43e53dee8a9af18362b633d4445bf14618f311979fed94b3a40da9baca78d332e9be5202e2a215b6b0fa4d7d10bfbe4478342d5934df5144ed05098d2ecaf36d3974fb488472e220f7f619cc43df333984f15bee558bba270384ed4"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x411}}]})
syz_usb_control_io$printer(r4, &(0x7f0000000e80)={0x14, &(0x7f0000000d40)={0x40, 0xf, 0xdc, {0xdc, 0x23, "e686aecd213b978cdc703c460d30bd41bee8c65b8c1cc33ca1710ef22a984ba5f389f98ea4983f4a2fe8978fbc6988f529d326f0fac8bb8cac6519f9dd22a290385c90a55764bb865d937c398ed9b17081fc254a9478017928bfcd4c83b028ec12b1c0bbc0cdc5841eb909698136c79009d9234323d1854f7881597836fbbceb477d47b8b62c9f3502e848f33d408658787708389a32430fd02c8232bdb78c7504209b23a98592c14e9664b9c8a16124b4101b06e9aef41df567a27d863fcb68897facb23c8bca5df200352c1e61539e698920946fcfec1d365b"}}, &(0x7f0000000e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f00000010c0)={0x34, &(0x7f0000000ec0)={0x40, 0xe, 0x54, "b368421a552d6cd4012d48c4c285bdb8e551083487bfa2c308694e0e7b8671916b85512eaf21711cd314e23410c18ac6be16edda4051b029005bbff9dd3e80fa5920dce007283889ed9f9c9b8f633f318ce3c798"}, &(0x7f0000000f40)={0x0, 0xa, 0x1}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000fc0)={0x20, 0x0, 0x2a, {0x28, "97102809db68545cddc4e1d79a32576f24e7b43e698ab3d0362c1add993223399fb276b5bb4ed188"}}, &(0x7f0000001000)={0x20, 0x1, 0x1, 0xc7}, &(0x7f0000001080)={0x20, 0x0, 0x1, 0x7}}) (async, rerun: 64)
r5 = fcntl$dupfd(r3, 0x0, r3) (async, rerun: 64)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/softnet_stat\x00')
read$FUSE(r6, &(0x7f0000001340)={0x2020}, 0x2020)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r7=>0x0})
bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r7, 0x0, {0x2, 0xff, 0x4}, 0xfe}, 0x18)

3.472487612s ago: executing program 2 (id=970):
syz_usb_connect(0x2, 0xfc, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x81, 0xa0, 0xdc, 0x20, 0xb05, 0x17ad, 0x754f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xea, 0x1, 0x5, 0x2, 0x70, 0x2, "", [{{0x9, 0x4, 0xe6, 0xf0, 0x3, 0xba, 0xb7, 0xde, 0xd8, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0xb, 0x8, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3355243315b09a75, 0x1, 0x2, 0xa, [@generic={0xaf, 0x23, "b8a6e3e89dd1cfdb70cb4308e7dec7c82f2fc90208bd3f91e0d5d767d0ed095987b9c3ce7669aa72d06148f724a8c7596475cece883dc9c24116b54b8cb8279cee02686732b0f0269c8d704574c81cafc73498bf3e779adf0724a92a89d176c18ec1b40aa777439d6224e83183209e3498d71a3a628e346fe8949037e5260b5702e712797c4735571d6750b592d57d6229fa8736c7eaabc3c8d6ee87263356e7f39b0ff7866a162563067e062a"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0xfb, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x100}]}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x5, [{0xa2, &(0x7f0000000180)=@string={0xa2, 0x3, "9e33953898b072a35ded151ac96c5df377e024c81a6368a4bea97457cd08d084cb69780189970d027cbe0791d63685b6928337acb53668e372fa1ed467ec6e2f4c86b0372a78ddba1760ce3ee846860ef318507ddacae93305a1d352f61b1b8eb809d1ff18754c2e3fb68573725e914f51b1c3412eee1a6008fda3b96e3ee3a7798912ea815bf5482060a25398a8b34b14f712c0d343470bc9111a5f59350cea"}}, {0x86, &(0x7f0000000240)=@string={0x86, 0x3, "c3de9a2d4d29021df8e77d391dbeed12df13d640ddad36a62e553f25aa37d5511ccb3cec94daadea07904b52428e2bf00faf7351fd3ba964c5263d557b3f8107e6b1c791ebcbf145df93bc87c95f1b448181a5f121027004ebc2c6981170d3d3666880230d4d4b492022183aa158bde63bde34c7ff625598bd36a6a2d6d61fdaca6cae94"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x2c, &(0x7f0000000380)=@string={0x2c, 0x3, "910134a51b237642b69c7ca2a966cbd75c89de0d544c86ba294d23751eacc864f5d95e0427ccf0abbe33"}}]})

3.3559222s ago: executing program 5 (id=971):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newrule={0xc0, 0x20, 0x800, 0x70bd2a, 0x25dfdbfb, {0xa, 0x10, 0x20, 0x5, 0x0, 0x0, 0x0, 0x8, 0x1}, [@FRA_DST={0x14, 0x1, @empty}, @FRA_DST={0x14, 0x1, @remote}, @FRA_SRC={0x14, 0x2, @mcast1}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x7}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e20}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_SRC={0x14, 0x2, @remote}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0xfff) (async)
r0 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x80, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x3, 0xae, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x7, 0x4, 0xfe}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0xff, 0xac, 0xf9}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xa, 0x6, 0x8, 0x40, 0x40}, 0x41, &(0x7f0000000240)={0x5, 0xf, 0x41, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x5e, 0x2, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x0, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x9d, "828c55e016c8cc4cdf918d50d03ee650"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x1, 0x21, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x39, 0x7, 0x1}]}, 0x1, [{0xde, &(0x7f00000002c0)=@string={0xde, 0x3, "fdb42c567312c89b23738e4bdeebc64c9cd270fc0c1968b75522dbdaffe519122a2f0587a2b9ab40feb2590ce33fbf99585278997cdf9e102ef30c716fe91f796019873e394074e7e56fa25cf5c64fa54d10e4ae0e65531da74a82cc6d6f8be816303fecb2bc9924d20fb69c34bd8c933f9b96ea3da977499c5bbaa9f29b49cad92c1cefd0ad6eac984ff8e1531f5e3e18454d1f29cf8605eba73b16ab7020efb27a8ba1cedb4be1046f9afdcd4d568ccb3a932f46826fe1d5cadc70cf5eafb42766be7d3fafe1463314c3dbbcc35b63b043cf4e1475662f8d2e144d"}}]})
syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, &(0x7f0000000400)={0x60, 0x8, 0x32, {0x32, 0x22, "db15051d6d6768d387f0223cc85a0f4d8c828f1cb0e34761e2a7afc4a5a9a9a9ae2aa5fd5a2206460b7a14f7868696da"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f00000007c0)={0x34, &(0x7f00000004c0)={0x40, 0x15, 0xc6, "c8a1e4ffd109d27695c6e04267f66a493e550d65b99ecdbac848628369848b9703bbacdba6bf6a5161cdde5f244133f0abdae03f0d5a0d7cdd2c8e97d81b2865186a21b7480f094a5758b590d6430f391bae9149b9a90673abfe6ab5cc2b08569f03072bdb40f348134afaeb9b14b240b3402c0f43fed620c42902b6e6e12c05ab75ffee9f239c04fcbda8c8d31bf8669140ebe365f11eaac1ec069b0f1b6c1da3b7292e2fdaa2977fe26400105f90ff731a56b1d6cb168014a23001564b25c6e6b460158bae"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000640)={0x20, 0x0, 0xf1, {0xef, "7fc16e42a5c91d3b251559ce6eae3e34179fc9f7d06c63b33842369e6eb7285af2da986ac714e7b57a0665d243c03ede373fa829946c4039edbe2cc449de17ae6abd6dd72a0c2fe540a35524910175934cb653f9103c5b2a1f8cf71ae2e2a772274291db4d6ee647177a630ecaaabff951378a130480e539d7d6cd8171fcaae051a06182e3d43753a004371baa8b97b0c31ac38eb1e43fde9cb19aabb295c957d12850d7f622af4d08435f340d20b0b7f8592f150c76e59bdab9f0e2a2df338b81dfbe33ef396620126f76b21083db35ad3f1e3b9992997447a86a64fff7d7886d4820efb6a8b2ea05fc06cc151f8a"}}, &(0x7f0000000740)={0x20, 0x1, 0x1, 0xc}, &(0x7f0000000780)={0x20, 0x0, 0x1, 0x7}}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x12}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd6}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x45}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x60020000)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0xac, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x1) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), r1) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000b80)={'batadv_slave_0\x00', <r5=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000cc0)={'ip_vti0\x00', &(0x7f0000000bc0)={'gre0\x00', <r6=>0x0, 0x80, 0x700, 0x0, 0x3, {{0x2f, 0x4, 0x3, 0x5, 0xbc, 0x67, 0x0, 0x1, 0x2b, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@noop, @noop, @generic={0x94, 0x6, "3e153481"}, @timestamp_prespec={0x44, 0x4c, 0xa, 0x3, 0x7, [{@private=0xa010100}, {@rand_addr=0x64010102, 0x80}, {@remote, 0x6}, {@multicast1, 0xd7d4}, {@private=0xa010101, 0x1}, {@broadcast, 0x9a}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x7}, {@local, 0x5}, {@multicast2, 0x7}]}, @end, @rr={0x7, 0x1b, 0xe8, [@loopback, @private=0xa010101, @loopback, @multicast2, @multicast1, @remote]}, @cipso={0x86, 0x16, 0x3, [{0x2, 0x10, "e8598fb287ccacac3459639d2e98"}]}, @rr={0x7, 0x1f, 0x63, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty, @loopback, @multicast2, @multicast1]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000d80)={'ip6gre0\x00', &(0x7f0000000d00)={'syztnl2\x00', <r7=>0x0, 0x4, 0x64, 0x44, 0xf421, 0x0, @empty, @empty, 0x7, 0x40, 0x9, 0x28}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f00000023c0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002380)={&(0x7f0000000dc0)={0x15a4, r4, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1274, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xa5, 0x5, "e3dcc722b6056861be9b2b921c2cef4dfe8b8568e794b7fea6f52bf8a87525369508f6f71c8012cd0999716e8df30ef79676e5a4c03b9fdda46b5f7751053448c947bea409ecc4e48fbd6e0a78388e2e5e719a3d73794c03a03aa1768de60265feb0f42b4823e855ab5c9f315f12486d1b167e4ccb8783996ca99c1bacc32665e409e06643a5a8a5e9244f5aa87ad0d9d6b321475594b8de697e2e5d3344974b0a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7b2e}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']-^,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\x17}$\x92.{}\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_VALUE={0xe8, 0x4, "eec43d228a4d81b7d247ae2a134839cc60392063c4acb239976414a9a6650fc246d757f1ac96349c51b86bc33c89c12268a2a013e5f85cfe9c33f33563b91e42d3814dcf2692312f37d3632f817556aa53c7bc170cb5b8f5472a2d9622439ab0988cb46de332aa11737552668ce5657f24f92ba13a365efb21538ad6aa6ce76ae40e3390b92a5d41350c96b11a3ed43f56af5c52af3c25fc868861b4d9561aefdd3b26aae838a5a625e71d727540e85822d0e54522de5a7c4097bc31d0f0cef9e586de4f085513c949a19451e5bd4ef4eb91c9a305871af6ead98b2507e16db8b4848327"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2a8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "acd387b983c2743d87643e1d4c9504b947e2d233c90e65444a9c88f8b001071a0aefc24b7f3d5872b9d40ad3b36c6664e754af244b160ea51504ed8ffb404658f3d3ceb1cbb330579f3f6e332923ac51a2f91a49f6199a47c3ffa81726f6740fb6818ae04e3408572977f1a85c75f67533e6537a6fc5e22d5e335932dd6dfb614c08c0daaf68ca52a92377731b7478f330f658c868ea993f8c68b3f4544e"}, @ETHTOOL_A_BITSET_BITS={0xe0, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '-,&&#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe0a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff3650}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_MASK={0x85, 0x5, "60e901c37be0eba96cd6277ee78ef08d71ce7d46fff922e742edbc0fed68eace3819a58aa06747cba8a93aea6919ab009a1e8cf5b0d9ccc246d8524fe692e9de87991726b2a854e28713509e2ef592172dadabcdb575d78124f4a61f77c587002793d9b97c1f85932e712d3107adb0c21d1ebf9a8a109653db1db5dabba782553a"}, @ETHTOOL_A_BITSET_MASK={0x91, 0x5, "6724ab73c35e60cf86f9b72966a1019cc95da1d91c0d448d4372da46a11da4f3b78c3414e66fd098f6ad57768c4e2dff7cf8d9e744a3b04a14301a9efb5ff747117fb88703cbb66715b5ab74e741cb4ee689d3477563d435162e5d647f728509fd5eef977e32ba40f6dd3406f16ae1f703cc4f8cdecd4391cce444ef3b33530fce0c161f66991468b82a7710f8"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}]}, 0x15a4}, 0x1, 0x0, 0x0, 0x10}, 0x8010)
r8 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000002400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r8, &(0x7f0000002600)={0x14, &(0x7f0000002440)={0x0, 0x24, 0xf8, {0xf8, 0xa, "2cecdae8a030cbf9620db8cba29d96ee88260c161884ccc68e7e10a1ef0bcda5224a59d2f64c8b76f3dd3709965328dd9eae931d9f9147e0161561ca6fe44d9ec7fb788b0825ab53f12aed8e81bc5750763ef201cb2db3d3e947982f8a36aa8c678d179e4c94b6d6fd738ee3bf21dbeafe33ac26c31a6f781b498ab761bb82564d722612f9c9df9022a0c0178d3e57f5555234c0599af2a69bef7b94f8fd0758ad8f868d0e2d0397e3cb968609bb9038c5c420ba310202f7108e0eee63f65628057c082986d44bcbfe8fa5ead93e0cabe5f551ff980013e6308cca06ecb3ed8a21b3d638307514b9fcf8d465737e3e87a60a779c6e0e"}}, &(0x7f0000002540)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "495dcc2776a9ee98b93875bd4503d16159998445f44c14d5cd795cc7100cb524201a219c386cbeb52a5fb8b207298f139ca26b9c50b76364d5e2a80ec7a445fc6c75ecdaffa601efaeafc5db5bc63a0db66d5056fa83d267a16597a6c209f17dfe45a201ec90a81287915f6822157e20849696448c2d100d5331"}}}, &(0x7f0000002880)={0x34, &(0x7f0000002640)={0x20, 0xb, 0xbe, "b9137b68bb57d1aafc11840d68b6b0b10f55abc7b9552d249d24cb29f7d218de102872bfe02f7caf6b70029b3e751eba612ddd04fe99cd21b43ef8baa9b04c132b9a3b7275dae7b7520ba44aaf6339253281fac1bf97d39a6b94e0560c3a0a81de568f354ace45aa306d316832330475f2e54ee5fd7ebb61efd0ca2a0dcada8cc8bb3b4df8cd67e7675657fbb31599dbf4fed8826a9f6d265fd9e495916f5f7ba9163897678b549c00146fad434b25ff245ee5a4b7d88a9d0f60b0a6b4e3"}, &(0x7f0000002740)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000002780)={0x0, 0x8, 0x1, 0xdb}, &(0x7f00000027c0)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f0000002800)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000002840)={0xc0, 0xa2, 0x2f, "bdf4a18f6382e65dbb07d2309008d0c2bd1f9bdb908a139dbe2a0c5e26f7a126200f8f643c67d687e304a0bd01f2d9"}})
pipe(&(0x7f00000028c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$MRT6_DEL_MFC_PROXY(r9, 0x29, 0xd3, &(0x7f0000002900)={{0xa, 0x4e24, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, {0xa, 0x4e20, 0x4, @remote, 0x6}, 0xffffffffffffffff, {[0x6, 0x10000, 0x612, 0x2, 0x0, 0xb, 0x1000, 0x10001]}}, 0x5c) (async)
r11 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002980)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x2130, &(0x7f0000002a00)={[{0x5, 0x4e00, "7ad3244e69"}, {0x13, 0x4e00, "113818f0407665b07b42164c7e98181fa2ecc7"}, {0x38, 0x4e00, "64fffc3854d4fa5eb3d05e0383deef2d5beeb17bc839a43ca368f0027ebc0fcd5024a540ca04ea06617dda025678e684af97bc2b35649940"}, {0xbd, 0x4e00, "f4e2d7413813fd49c9c71ee2bf665086b5c3c37b2cb4f4ca3b5dc5acaf84a637d6455240ead8992171576a1d801e0f0c7ae9e2bb4bcc2f0218caa2af2018249cfc19f7c0e21009162292723bbf48a9489798768ceb3855b6118a8b38c0907cd0ca18b68ae1a5ba459d0cb5577102bc3b1f84f3c12fdd52aee6b5e2f3042e7f05d4b87d22ca0a64419d67b4f8d1b15895283141c4a9afe09a24b8df0511ea4a03ff8fe0b3360bafe5ba95826b33182dc0ae807a15fc125dddc422003c92"}, {0x1000, 0x4e00, "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"}, {0x1000, 0x4e00, "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"}, {}]}) (async, rerun: 64)
syz_usb_connect$uac1(0x0, 0xf3, &(0x7f0000004b40)={{0x12, 0x1, 0x300, 0x0, 0x2, 0x0, 0x20, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe1, 0x3, 0x1, 0x6, 0x50, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x12}, [@processing_unit={0x8, 0x24, 0x7, 0x5, 0x3, 0x9, "e2"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa, 0x1, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfffb, 0x81, 0x5, 0x3}, @as_header={0x7, 0x24, 0x1, 0x5, 0x8, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xfc, 0x1, 0x99, 0x0, "", '@'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0xa7, 0xf7, 0x46}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x9, 0x6, {0x7, 0x25, 0x1, 0x0, 0x4, 0x10}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xb0, 0x2, 0x7, 0x81, "4578ef1c0ec2d3e0"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7, 0x334, 0x6, "15db"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0x7, 0xec}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x3, 0x0, 0xfe, "f86123c23b1e91ba09"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x1, 0x9, 0x4, "451b63"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xff, 0x2, 0x10, "5b81382a69d5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x60, 0xcc, 0x2, 0x0, {0x7, 0x25, 0x1, 0x8, 0x7, 0x37}}}}}}}}]}}, &(0x7f0000004d80)={0xa, &(0x7f0000004c40)={0xa, 0x6, 0x200, 0xf7, 0x3, 0x2, 0x0, 0x6}, 0x1a, &(0x7f0000004c80)={0x5, 0xf, 0x1a, 0x3, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x5, 0xf, 0x101}, @wireless={0xb, 0x10, 0x1, 0x4, 0x14, 0x9, 0x6, 0x4, 0xb1}]}, 0x2, [{0x4c, &(0x7f0000004cc0)=@string={0x4c, 0x3, "b7eff11057e8fb851f2d91a171001ee045139c61c3c3cc8fb25a6f676f17c1ae67fa3740a08d69cd03218987b34851361aa449515ac0c1b104c479683f3b8a65bd49246fb79d69c80294"}}, {0x4, &(0x7f0000004d40)=@lang_id={0x4, 0x3, 0x1407}}]}) (async, rerun: 64)
pipe2$watch_queue(&(0x7f0000004e40)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x80)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e80)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000004dc0)="1c751a0681afc45a4edad2a078a39aa6e325c8ac199eb07953fd1b34a0f4c5fc8795a7e3e431fb99587f2eb23fa0046a33f0f695625000f1fc1d7230407fe5860f1b5c1cbae62e83a757bd748885183510c69d4b4ad6b41f0feff2c8e2cc0ac25fbbf27728763aa042e31539f17c5cc21a3b58f300587b", 0x77, r12}, 0x68) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000004f80)={'syztnl1\x00', &(0x7f0000004f00)={'ip6_vti0\x00', r5, 0x2f, 0x6, 0xa6, 0x2, 0x21, @rand_addr=' \x01\x00', @loopback, 0x700, 0x8, 0x7, 0xfff}}) (rerun: 32)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000005000), r3)
sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000005100)={&(0x7f0000004fc0), 0xc, &(0x7f00000050c0)={&(0x7f0000005040)={0x44, r13, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x100}, 0x1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000005180)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r12, &(0x7f0000005240)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000005200)={&(0x7f00000051c0)={0x30, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x5, 0x71}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r15 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000005280), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(r15, 0xc0405665, &(0x7f00000052c0)={0x4, 0x2, 0x5, 0x1, 0x6, 0xffff7fff, 0xa})

2.912527136s ago: executing program 4 (id=973):
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0xe9, r2, 0x1, 0x81}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

2.821427811s ago: executing program 4 (id=974):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async)
mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) (async)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) (async)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x1) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) (async)
fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00')
mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) (async)
mprotect(&(0x7f00003d5000/0x1000)=nil, 0x1000, 0x0) (async)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15)

2.624243698s ago: executing program 2 (id=975):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="0000e95a3a85f23d9ead"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0})
syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000007c0)=ANY=[@ANYBLOB="201f04000000549b3e82"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r3, 0x0, 0x0)
syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000380)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
writev(r2, &(0x7f0000000c40)=[{&(0x7f0000000600)="4e30cac9833ee82585dc1a360e21821dae11e0645e784e8fd06f67561dbaea11307ae0e3dd11bb57bc5cd59eaa0258c69102020e035154a2cc5ed05fa9e5ddd477a7fe7ca7ed6c71961b20f2ea1209b872bfe0cd2c9a891b883528113af71422d7c6921674577aa169069df61448f8694230d3b1f8743b4ec14a49a5e7572f8696b4964ae4238fa06cb94b9bbfede590fb593570b5e31a44eb4f0e2dff368d6c68f2decd83f74f45aeb08ccd00007030c7aa1d38fe993e8c0e1851fc17f5d8a3d937bc773fa2b4e3b7978a3296bf8545574b25c52a1639e53d7c75b88f8d0af12322a92960967cf43a42b4b63244719443a2c843b89cc0c3e8", 0xf9}, {&(0x7f00000007c0)="7a9b479f448c0f97fe3afd658b42c79edbc177fb723d90a3d69bbf969df171f68be336610873ee4904ff71163241867c001cbec5d2b75c40b434085d1d6b055de782e12f3e89ff3f22e86ddf76029e830c7b49723ef0f4c42119841044a699e08afe1a7bd52232b8401733b99d90419c20ec52e11e584afb6d97c7a56be46cedc1cf7fcd5ce4e2b305", 0x89}, {&(0x7f0000000b40)="b2e6fd2aecf7bfe4ab3b5b2f5bc737a246e4176fc5ad683876a04274ab5bbf610daf6f8b4b0bbba16e558c7c21462643c3da4c0d6440bdb4e06148bd942eadb9d894be8676735c85daaffd214a2e8155ec020f864bd87741a9717d641ddaccd9b19cf5f36c9be5119bbe405044f73c819baf90c82cecd7408a9c794795b2b7c5ca84409037a818a94356bc936988bbd6cc08ba58d541804b5a2fe6051905a3ea013937220bcdde9fffafea0e86", 0xad}, {&(0x7f0000000c00)="551d54ee3a1c96de3967504b374c41a9c55a7393bbb608", 0x17}], 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90", 0xc8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000ac0)="a19168e24152c670ecff4e0ee89533187a9206e8b223bed2e89af6709b054a05bafbd8bdb01fe87a3b63a17eff007ee93b40c121e355801159a45e36111175f8d8453960c864bdcf3826be3ffadaa7dba08508123324e0a45a93818ebf5c0fbac285cd0f399da8e4257170efbe", 0x6d}], 0x1}}], 0x2, 0x4000000)
sendmsg$nl_route_sched_retired(r2, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001200)=@deltclass={0x12c, 0x29, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x13, 0x6}, {0x7, 0xffec}, {0x6, 0xd}}, [@c_cbq={{0x8}, {0x54, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x23, 0x1, 0x1a, 0x5, 0xcc6, 0x10001, 0x8, 0x2}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x5, 0x2}, 0x845, 0x1}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x2, 0x7, 0x1, 0x3, 0x871}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x3, 0x10, 0x81, 0x3, 0x4, 0xff, 0x4}}]}}, @c_cbq={{0x8}, {0xa4, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x30, 0x0, 0x3, 0x6, 0x1ff, 0x5, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x0, 0x1, 0x80, 0x1, 0x9}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x1}, 0x7, 0x1}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xf, 0x3, 0x6, 0xfc, 0x8, 0x80000001}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xa, 0x1, 0x5, 0x4, 0x4237, 0x400}}, @TCA_CBQ_RATE={0x10, 0x5, {0x16, 0x0, 0x9, 0x2, 0x90e5, 0x7}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x10, 0x8}, 0xff, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x2, 0x14, 0x0, 0x3, 0xc48b, 0x5, 0x7}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5e, 0x0, 0x2, 0xfc01, 0x4, 0xfff}}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @empty, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)

2.335711459s ago: executing program 4 (id=976):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r2, 0x80047456, 0x800000000003)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESHEX=r4], 0xb8}}, 0x20040014)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50)
sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x20004000)
sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0xf0, r6, 0x920, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000010}, 0x88d0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x101, 0x1, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x2}, {0xa, 0xa}, {0xb, 0xfff1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xe3}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x10)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
shutdown(r1, 0x0)

2.181971137s ago: executing program 1 (id=977):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000ac0)={{<r2=>r0, &(0x7f0000000040)='++-.}-.#+*{\x00', 0x40, &(0x7f0000000080)={@_ha_fsid={[0x80000001, 0x1ff]}, {0x4, 0x9, 0x4, 0x1}}, 0x0, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x10001}, 0xa, &(0x7f0000000980)=[{0x3, 0x4, &(0x7f0000000140)='$$+{-\x1f%&-\x00', &(0x7f0000000180)="2f881c122842e25178f72abdb26315b6fec5f2cffdb79ef3944457b7a941b7d1be23b4de38dea7062ff47754458caf1e2ae66e44e4c6898bbbacc90f9cd82a11901139d414559977736be9678c25e30e24dc553508b7649d1e2474fc23d5d6d61e7b73a5f01093413bee2fb57da35581286efd39f09c8b9f4c0dac2d3723d9a1f6e282cfe676c226243a47dfd44fa3083ddc8fbeefa444113ffb4b789317e224c49f5e6aa0dea80f73d704790c7c6535ba424239b2f57f97220a0d7754cad7442858b11799e342116bccb7b1900bbed52d2f38a889320939839f92c0f6cac506a660b16ef6c1fb4961d4764ac04144", 0xef, 0x28}, {0x1, 0x1, &(0x7f0000000280)='[\x00', &(0x7f00000002c0)="26211304f507b6a9fd7f20424485c95a9f75b8e08b8894c0db61cb5ce09f0b23e45e3d336f5274e1dac9a0e4267c5b50389688aa54b99a07def90adefc732bb8b8af4c7b0ddfa0", 0x47, 0x20}, {0xc0a5b4a8d2170d18, 0x0, &(0x7f0000000340)=')!\x00', &(0x7f0000000380)="18d6ab1d925deee6690d410fac67af9864cb34d86c70fb6a1b4e570895dc5022f1f8352afb1cfcf50b68a7f38eeb5543197867d3d1015f822a68e7a7aa74434caa", 0x41, 0x20}, {0x2, 0x2, &(0x7f0000000400)='^\x00', &(0x7f0000000440)="c6e5af0cc052846d1e185af36a98a6e86b3441a2a7deee8f3f4b81af886fe8c49fc381205e55edf45e2cde390a6fb6337034d949d58d5cffe74aa6c3ebe4e5dd7270d20fd3deb0c29f52eaa54db1a99da2bbb2c800a1e2c35c3fca9a150bebbd7e3624689e6fc596bd7fb4fa5f30a876af2c32016fd62d5b77a752c90f1761943ab5b5733bfe3955ea103429267b1be740cc5fa44fc1f115ca90736d76a70e56c2c0afa5dc341079977d7ffbaac49dff181cdcde20c0ddda1209b13373192c6cf61aab945eee57f08535809843465fe71aceb164778b6fa896e583891bef77cccfe4205dfa7d1686f746fd8257", 0xed, 0x20}, {0x3, 0xc, &(0x7f0000000540)=':\x10\\[%%\x00', &(0x7f0000000580)="66f82e430da1e4c4faf33046ebef2d8b8bc314c66b94ac63fe2d22ff066460cb62a5eab66fa47075b26e8b3f55247e09f5c1fb8dc2290e3624876bf316ef1c8e57047bb00c86d6cdda633cfa0adb6562ee00c164db11921e30a41b299ab8276b34ca753ba497a42e192cadaccc7abe20cfad8e223b5a9f85fe3f481bdaefe78511c70dad6da23cfb45c1665af9bf71360cd4f837d046830fa24b373a9d0f7144f35d1e06cda8fb3d", 0xa8, 0x10}, {0x3, 0x80000000, &(0x7f0000000640)='\x00', &(0x7f0000000680)="95db9005155ed65e51f715e173ec45ac7809b57adfd03c4e4aaf0a4e98f5a504c95f310a085b0c9716264b81cc21d47c34878eca", 0x34, 0x8}, {0x2, 0x6, &(0x7f00000006c0)='*^&\x00', &(0x7f0000000700)="cf1a3d0ca9adbfc12eea0ded7dae133e20a74bd75bfd40758cc24a6191a2869560833b7b71705822109ffeedb799b0ef", 0x30}, {0x3, 0x5, &(0x7f0000000740)='-:-#]\x00', &(0x7f0000000780)="496ed5e4f1d708d90763023a08cc6209c79298730719cd0f570e1327cc9c8e3a70b615be560b44f7ae0dc2083cbc1cb100a7ea04238ec5b9340beaa7ff34ccf1f9edbd4eaf445728704dfb05805d124ecdbf3f", 0x53}, {0x2, 0x5, &(0x7f0000000800)='\x00', &(0x7f0000000840)="586fdfe33fdb93392a52f62b2866d2be6ebcefc9ae055c1ee6e98b5867b9cd4659ceec980ec1e1a87ff2e7e36d16494a9964ad3818ef27c8e57d224bf6266ea457217b6c28c08f84e232fe614459492d77f30eb6d114ef773889bf34b7082b6d64eebcb4365c3adba815d53667b56d36d573b9b70a8489826214f6ed69cccf6c2bf2149b8038a87bb4cb37222c", 0x8d, 0x28}, {0x3, 0x8001, &(0x7f0000000900)='\xc6:\x00', &(0x7f0000000940)="d6775979f93424448861", 0xa, 0x28}]})
ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000b80)={&(0x7f0000000b40)=[{0x70, 0x800, 0xcf7a, 0xfff, 0x43f8}], 0x1, 0x28, 0x4, 0x14})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_disconnect(r1)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05668, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

2.123783538s ago: executing program 4 (id=978):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x800, 0x2, 0x1e2}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0)
sendfile(r5, r7, 0x0, 0x81)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1, {0x0, r4}})
r8 = eventfd2(0x1, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000080)=r8, 0x1)
r9 = io_uring_setup(0x25e, &(0x7f00000002c0)={0x0, 0xa1d5, 0x400, 0x2, 0x2ab})
io_uring_register$IORING_UNREGISTER_RING_FDS(r9, 0x1b, 0x0, 0x0)
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440))

1.987419257s ago: executing program 0 (id=979):
openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8fff6, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r2, r2, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=<r7=>0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = dup(r8)
syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r3}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)

1.833795418s ago: executing program 2 (id=980):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x19, 0x0, @void}, 0x10)
syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff0300000009058203"], 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x78, r1, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffff6be}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xff}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x11}, 0x4)

1.833496063s ago: executing program 4 (id=981):
syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0)
io_setup(0x2278, &(0x7f0000000180)=<r0=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
io_submit(r0, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, 0x0, 0x2d, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x0, r1, 0x0}])

1.395312773s ago: executing program 5 (id=982):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x279}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94)

1.211140002s ago: executing program 5 (id=983):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x161002, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffc)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="66baf80cb8044fdc87efed666a0f388059e0e005000000b91e4200000fc73e0f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b936080000b846330000ba000000000f30b9210000000f01c1c4e17929d8", 0x5e}], 0x1, 0x11, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]})
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
setitimer(0x1, &(0x7f0000000080)={{0x77359400}}, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = socket(0x1e, 0x1, 0x0)
connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10)
bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x3}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="031500000000200000008d8009000100626f6e64000000001400028005000100020000000500150001000000515640f8a044fece643d66d26c2c14cb933b07baf8e90c271201650c2cf95dc7aec072e4f856bb7cb6411c21fafc29b9784776ec07d24adbc904e2d1e851d6ff6ccd8bf37db6db99a06df7f4290f004a95285ed27ee1ed678a0ac1ff6f1124f20f9d506707ea5c80"], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
write$mtd(0xffffffffffffffff, &(0x7f0000000440)="e510ad933b15e775812caa70d9a6ec23ed335fa3f684ecf49f9031952119a3037e93bdb2a6fab0d7222407738fd7f97f513b9405b91b811629eab30a742393330effa2b7114b001d1f4ec094ffed53bd936e3aeef6d72de9647da8a1ec5cb0f35ef26f41ad9c39bf322b97c39ac397a62aa4fa643c7e6703272cfbf018846f4f1e6a840b3d1bf63191bd93acdbc7e2b82ad57b3a978d2ec006974bdb1e279bbb1675f6f45e83205b7e38f5b05030ff11", 0xb0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000140)=@arm64={0x0, 0x8, 0x10, '\x00', 0x6})
bind$tipc(r6, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x10020042, 0x6}, 0x10)
bind$tipc(r3, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000340), 0x2000011a)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff)

1.071021706s ago: executing program 2 (id=984):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@bridge_getneigh={0x44, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x24, 0x16, 0x0, 0x1, [{0x4}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x1, 0x14e, 0x80000001, 0x88a8}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x2c, 0x20, 0x1, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x7}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x20000000) (async, rerun: 32)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async, rerun: 32)
r1 = syz_clone(0x2020080, &(0x7f00000000c0)="3d44273ada54ae92795898e04a649ab132bd1b134bdcfdc8060d5b0a7e7c551dabd11e4d683157d84529842f5877b3ae719b724eaa0bfe2a718fd1e9a933d6d78f450e030dd4476097cbb3141059b7b20a5c05ce37060bcf2b64a1b2c555018de17a59613cba579b6cd4082dc9c744d3cd87e327a10d0dade03a5a3e0ccfb8ac47a668459525dd2f0d424886413d2587bcc49bfc330475700557ef4396e2fdbbb0fd4b9ae367a13d63f353e6a55508df8c87e7a122bd2269c826f1897f780ff9fc99c7f5e1003751f160786e4e90c3", 0xcf, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000380)="d48f613a94b8faf9e82d00194ae7693706ec7283d87db49f126cdfaf5d62967b157920163c5d1f3828607b0932c7fd71e83dffed2ef66994f07d0d2ea440fa7c73c3bd5d5abb0b8a2ac2a8a1a4446d798435f395c37b33d1a56dfdb660a4e52bbffc0197efdd65")
ptrace$setregs(0xd, r1, 0x7, &(0x7f0000000400)="0545fb3608feb2a55b2a44506dcbdd75a9b4c9ed2df78b62cdf57d19a91941105c18e612315ab8ad56bbe5f9145d48ed9b4067da0523b47ad75df61e6e5234c985303dca101b6f90a8c793fa1fe3d001518af9572d2acd1757e7a61745319cce8d21387b7cd73699019ed303be937da7c7284c2e3a6e65246ab02d8ef08844b46c4e755231bf3b69c658f1d82c04eec86615efc17f85fb3778cb371eb3a4a49f18a7c1755bdb485954456d365f5eae2963fd582a65166f268385ab07bfda2c71e589aff574a17d4da20938b530503d5965ff5a59e5b1")

723.386923ms ago: executing program 4 (id=985):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40040)
r1 = socket$alg(0x26, 0x5, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1c, &(0x7f0000000cc0)=[@in6={0xa, 0x4e20, 0x4c0, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x800a, 0x0, 0x4}, &(0x7f0000000280)=0x10)
r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x0)
io_setup(0x206, &(0x7f0000000200)=<r6=>0x0)
io_submit(r6, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}])
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x21c9b000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
io_pgetevents(r6, 0x8, 0x8, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0)
close(0x3)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-camellia-aesni\x00'}, 0x58)

0s ago: executing program 2 (id=986):
connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) (async)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r2 = dup3(r1, r0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x1808, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r4, 0x2, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'gre0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r6, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a2, 0x4, 0x4, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
dup(r8)

kernel console output (not intermixed with test programs):

19 code=0x7ffc0000
[  257.318464][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.368598][   T30] audit: type=1326 audit(1785732875.396:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c839e019 code=0x7ffc0000
[  257.430724][   T30] audit: type=1326 audit(1785732875.396:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c839e019 code=0x7ffc0000
[  257.485206][   T30] audit: type=1326 audit(1785732875.396:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66c839e019 code=0x7ffc0000
[  257.547464][   T30] audit: type=1326 audit(1785732875.396:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7834 comm="syz.2.550" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66c839e019 code=0x7ffc0000
[  258.330312][ T7849] loop3: detected capacity change from 0 to 7
[  258.352978][ T7849] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  258.398143][ T7849] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  258.422568][ T7849] Dev loop3: unable to read RDB block 7
[  258.444257][ T7849]  loop3: AHDI p2 p4
[  258.457895][ T7849] loop3: partition table partially beyond EOD, truncated
[  258.483282][ T7849] loop3: p4 start 150997256 is beyond EOD, truncated
[  258.946902][ T5689] usb 5-1: USB disconnect, device number 49
[  259.630599][ T7869] netdevsim netdevsim4: Direct firmware load for .. @ failed with error -2
[  259.665361][ T7869] netdevsim netdevsim4: Falling back to sysfs fallback for: .. @
[  260.536903][ T7890] loop3: detected capacity change from 0 to 7
[  260.570891][ T7890] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  260.596480][ T7890] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  260.613760][ T7890] Dev loop3: unable to read RDB block 7
[  260.625335][ T7890]  loop3: AHDI p2 p4
[  260.632787][ T7890] loop3: partition table partially beyond EOD, truncated
[  260.633627][ T7892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'.
[  260.648907][ T7890] loop3: p4 start 150997256 is beyond EOD, truncated
[  260.654072][ T7892] netlink: 48 bytes leftover after parsing attributes in process `syz.3.567'.
[  260.686190][ T7886] syzkaller0: entered promiscuous mode
[  260.691838][ T7886] syzkaller0: entered allmulticast mode
[  260.702900][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.567'.
[  260.713753][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.567'.
[  260.727715][ T7893] binder: 7891:7893 ioctl c0306201 2000000004c0 returned -22
[  260.741340][ T7893] binder: 7891:7893 unknown command 0
[  260.761403][ T7893] binder: 7891:7893 ioctl c0306201 2000000001c0 returned -22
[  260.820424][ T7892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.567'.
[  261.098071][ T5689] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  261.172787][ T7899] netlink: 64 bytes leftover after parsing attributes in process `syz.0.558'.
[  261.285706][ T5689] usb 4-1: Using ep0 maxpacket: 32
[  261.303098][ T5689] usb 4-1: config 0 interface 0 altsetting 68 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  261.320895][ T5689] usb 4-1: config 0 interface 0 has no altsetting 0
[  261.331405][ T5689] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  261.342156][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.367663][ T5689] usb 4-1: config 0 descriptor??
[  261.802406][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.818828][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.877282][ T5689] nti 0003:0757:0A00.000C: hidraw0: USB HID v10.01 Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0
[  262.057593][   T10] usb 4-1: USB disconnect, device number 33
[  262.092538][ T7907] fido_id[7907]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  263.028586][   T10] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  263.193099][   T10] usb 4-1: config 150 has an invalid interface number: 204 but max is 2
[  263.205837][   T10] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  263.227664][   T10] usb 4-1: config 150 has no interface number 0
[  263.241743][   T10] usb 4-1: config 150 interface 204 has no altsetting 0
[  263.271326][   T10] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  263.297641][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.326922][   T10] usb 4-1: Product: syz
[  263.339898][   T10] usb 4-1: Manufacturer: syz
[  263.345538][   T10] usb 4-1: SerialNumber: syz
[  263.612492][   T10] xr_serial 4-1:150.204: skipping garbage
[  263.630466][   T10] xr_serial 4-1:150.204: xr_serial converter detected
[  264.729264][ T7905] syzkaller1: entered promiscuous mode
[  264.748463][ T7905] syzkaller1: entered allmulticast mode
[  264.771603][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.571'.
[  265.762305][   T30] kauditd_printk_skb: 103 callbacks suppressed
[  265.762326][   T30] audit: type=1326 audit(1785732884.146:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  265.847428][   T30] audit: type=1326 audit(1785732884.186:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  265.948384][   T30] audit: type=1326 audit(1785732884.186:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  266.050300][   T30] audit: type=1326 audit(1785732884.186:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  266.178673][   T30] audit: type=1326 audit(1785732884.186:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  266.296021][   T30] audit: type=1326 audit(1785732884.186:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  266.379393][   T30] audit: type=1326 audit(1785732884.186:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  266.483787][   T30] audit: type=1326 audit(1785732884.196:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  266.626784][   T30] audit: type=1326 audit(1785732884.196:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  266.744868][   T30] audit: type=1326 audit(1785732884.196:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.4.573" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  266.827292][ T7909] syz.3.569 (7909): drop_caches: 2
[  266.917938][   T10] xr_serial ttyUSB0: Failed to set reg 0x0d: -71
[  266.927139][   T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  266.972099][   T10] usb 4-1: USB disconnect, device number 34
[  267.031249][   T10] xr_serial 4-1:150.204: device disconnected
[  267.084895][ T7932] vlan2: entered promiscuous mode
[  267.100890][ T7932] bridge0: entered promiscuous mode
[  267.113908][ T7932] vlan2: entered allmulticast mode
[  267.158485][ T7932] bridge0: entered allmulticast mode
[  267.815971][ T7954] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  268.828880][ T7977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.587'.
[  269.339535][ T7987] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.505309][ T7989] bridge1: entered promiscuous mode
[  269.521482][ T7989] bridge1: entered allmulticast mode
[  269.568893][ T7992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.591'.
[  269.607534][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'.
[  269.648516][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'.
[  269.680403][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'.
[  269.705658][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'.
[  269.737347][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'.
[  269.777542][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'.
[  269.809347][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'.
[  269.834806][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'.
[  269.936418][ T7978] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  269.946251][ T7978] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  269.982857][ T7978] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  270.067431][ T7978] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  270.313909][  T808] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  270.472951][  T808] usb 1-1: device descriptor read/64, error -71
[  270.734450][  T808] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  270.809482][ T8006] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer.
[  270.853659][   T30] kauditd_printk_skb: 115 callbacks suppressed
[  270.853679][   T30] audit: type=1326 audit(1785732889.236:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  270.901299][  T808] usb 1-1: device descriptor read/64, error -71
[  270.914835][   T30] audit: type=1326 audit(1785732889.236:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  270.939601][   T30] audit: type=1326 audit(1785732889.236:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  271.002841][   T30] audit: type=1326 audit(1785732889.236:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  271.030874][  T808] usb usb1-port1: attempt power cycle
[  271.037831][   T30] audit: type=1326 audit(1785732889.236:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  271.062742][   T30] audit: type=1326 audit(1785732889.236:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  271.100504][   T30] audit: type=1326 audit(1785732889.236:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  271.129736][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  271.132169][   T30] audit: type=1326 audit(1785732889.236:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  271.161286][ T5722] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  271.232256][   T30] audit: type=1326 audit(1785732889.276:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  271.312954][ T5722] usb 5-1: device descriptor read/64, error -71
[  271.378383][  T808] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  271.396900][   T30] audit: type=1326 audit(1785732889.276:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8011 comm="syz.4.595" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe72599e019 code=0x7ffc0000
[  271.443775][  T808] usb 1-1: device descriptor read/8, error -71
[  271.578350][ T5722] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  271.698353][  T808] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  271.726858][ T5722] usb 5-1: device descriptor read/64, error -71
[  271.738455][  T808] usb 1-1: device descriptor read/8, error -71
[  271.836247][ T8020] x_tables: duplicate underflow at hook 1
[  271.848885][ T5722] usb usb5-port1: attempt power cycle
[  271.862489][  T808] usb usb1-port1: unable to enumerate USB device
[  271.999227][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  272.009023][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  272.083406][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[  272.218655][ T5722] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  272.262827][ T5722] usb 5-1: device descriptor read/8, error -71
[  272.335567][ T8031] syzkaller0: entered promiscuous mode
[  272.366983][ T8031] syzkaller0: entered allmulticast mode
[  272.540271][ T5722] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  272.580571][ T5722] usb 5-1: device descriptor read/8, error -71
[  272.699588][ T5722] usb usb5-port1: unable to enumerate USB device
[  272.897361][ T8038] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  273.067999][ T8043] openvswitch: netlink: Duplicate or invalid key (type 0).
[  273.078166][ T8043] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  273.468338][ T5722] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  273.652955][ T5722] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4
[  273.673490][ T5722] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  273.719721][ T5722] usb 1-1: config 0 interface 0 has no altsetting 0
[  273.784263][ T5722] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  273.830114][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  273.855947][ T5722] usb 1-1: Product: syz
[  273.868702][ T5722] usb 1-1: Manufacturer: syz
[  273.905490][ T5722] usb 1-1: SerialNumber: syz
[  273.956027][ T5722] usb 1-1: config 0 descriptor??
[  274.041233][ T5722] usb 1-1: selecting invalid altsetting 0
[  274.921957][ T8049] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  274.960760][ T8049] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  274.983891][ T8049] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  274.986949][ T8049] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  274.997254][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  274.997730][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.115604][ T8045] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow!
[  275.149008][ T5696] usb 1-1: USB disconnect, device number 24
[  275.238578][ T1187] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  275.435515][ T1187] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  275.454196][ T1187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.467428][ T1187] usb 4-1: Product: syz
[  275.474674][ T1187] usb 4-1: Manufacturer: syz
[  275.481850][ T1187] usb 4-1: SerialNumber: syz
[  275.633409][ T5689] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  275.988113][ T8071] __nla_validate_parse: 68 callbacks suppressed
[  275.988135][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.609'.
[  276.039590][ T8052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.049296][ T8052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.066165][ T8053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.100900][ T8053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.134576][ T5722] usb 4-1: USB disconnect, device number 35
[  276.230651][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  276.558417][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  276.708420][    T9] usb 2-1: device descriptor read/64, error -71
[  276.708657][ T5689] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  276.736873][ T5689] ath9k_htc: Failed to initialize the device
[  276.812188][ T5722] usb 4-1: ath9k_htc: USB layer deinitialized
[  276.978387][    T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  277.038515][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[  277.045028][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout
[  277.045057][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout
[  277.129351][    T9] usb 2-1: device descriptor read/64, error -71
[  277.156374][ T8076] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  277.164919][ T8084] fuse: Bad value for 'fd'
[  277.178602][ T8076] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  277.198520][ T8076] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  277.206127][ T8076] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  277.258675][    T9] usb usb2-port1: attempt power cycle
[  277.628692][    T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  277.675595][    T9] usb 2-1: device descriptor read/8, error -71
[  277.838492][ T5722] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  277.858555][ T5689] usb 1-1: new low-speed USB device number 25 using dummy_hcd
[  277.918292][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  277.939137][    T9] usb 2-1: device descriptor read/8, error -71
[  277.968408][ T5722] usb 4-1: device descriptor read/64, error -71
[  278.057491][    T9] usb usb2-port1: unable to enumerate USB device
[  278.064538][ T5689] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  278.086063][ T5689] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  278.098744][ T5689] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  278.113973][ T5689] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  278.127719][ T5689] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  278.147178][ T5689] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  278.160415][ T5689] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  278.172923][ T5689] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  278.192439][ T5689] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  278.205742][ T5689] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  278.208285][ T5722] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  278.233334][ T5689] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  278.241556][ T5689] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  278.253360][ T5689] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  278.266599][ T5689] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  278.277757][ T5689] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  278.348712][ T5689] usb 1-1: string descriptor 0 read error: -22
[  278.349478][ T5722] usb 4-1: device descriptor read/64, error -71
[  278.356903][ T5689] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  278.371290][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.400547][ T8097] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  278.412383][ T5689] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  278.418839][ T8097] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  278.428434][ T8097] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  278.438932][ T8097] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  278.468677][ T5722] usb usb4-port1: attempt power cycle
[  278.535646][ T8106] loop2: detected capacity change from 0 to 7
[  278.546985][ T8106] Dev loop2: unable to read RDB block 7
[  278.563882][ T8106]  loop2: unable to read partition table
[  278.576716][ T8106] loop2: partition table beyond EOD, truncated
[  278.600763][ T8106] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  278.808626][ T5722] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  278.834912][ T8113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.860286][ T8113] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.878983][ T5722] usb 4-1: device descriptor read/8, error -71
[  279.124549][ T5722] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  279.158641][   T10] usb 1-1: USB disconnect, device number 25
[  279.165428][ T5722] usb 4-1: device descriptor read/8, error -71
[  279.299070][ T8125] syzkaller0: entered promiscuous mode
[  279.300077][ T5722] usb usb4-port1: unable to enumerate USB device
[  279.307330][ T8125] syzkaller0: entered allmulticast mode
[  280.377951][ T8133] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  280.401659][ T8133] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  280.424923][ T8133] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  280.438715][ T8133] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  280.858616][ T5722] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  281.038353][ T5722] usb 1-1: Using ep0 maxpacket: 32
[  281.046545][ T5722] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  281.055246][ T5722] usb 1-1: config 0 has no interface number 0
[  281.065388][ T5722] usb 1-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  281.076054][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.084595][ T5722] usb 1-1: Product: syz
[  281.089184][ T5722] usb 1-1: Manufacturer: syz
[  281.093842][ T5722] usb 1-1: SerialNumber: syz
[  281.104088][ T5722] usb 1-1: config 0 descriptor??
[  281.128736][ T5722] hub 1-1:0.89: bad descriptor, ignoring hub
[  281.141080][ T5722] hub 1-1:0.89: probe with driver hub failed with error -5
[  281.161275][ T5722] option 1-1:0.89: GSM modem (1-port) converter detected
[  281.180814][ T5722] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0
[  281.559258][ T8143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.577332][ T8143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.668369][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  281.758653][   T10] usb 1-1: USB disconnect, device number 26
[  281.853608][   T10] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  281.895581][   T10] option 1-1:0.89: device disconnected
[  281.958714][ T8167] fuse: fd is not a fuse device
[  282.023982][ T8169] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.637'.
[  282.045078][ T8169] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.637'.
[  282.471369][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[  282.471437][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout
[  282.478059][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout
[  283.310039][ T8181] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  283.359200][ T8181] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  283.397492][ T8181] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  283.451821][ T8181] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  283.728367][   T10] usb 4-1: new low-speed USB device number 40 using dummy_hcd
[  283.913568][   T10] usb 4-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  283.993955][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  284.027897][   T10] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00
[  284.057960][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.114931][   T10] usb 4-1: config 0 descriptor??
[  284.162430][ T8196] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  284.618500][ T8206] syz.1.647 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  284.718333][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout
[  284.882900][   T10] uclogic 0003:2179:0053.000D: interface is invalid, ignoring
[  285.005987][ T8209] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  285.086603][   T10] usb 4-1: USB disconnect, device number 40
[  285.281378][ T8220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.308908][ T8220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.332766][ T8201] geneve0: entered allmulticast mode
[  285.429020][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout
[  285.435361][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  285.511018][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[  285.938002][ T8233] netlink: 60 bytes leftover after parsing attributes in process `syz.3.653'.
[  286.726321][ T8245] netlink: 48 bytes leftover after parsing attributes in process `syz.2.656'.
[  286.766830][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.810232][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.841283][ T8255] netlink: 'syz.3.659': attribute type 1 has an invalid length.
[  286.914469][ T8256] bond1 (unregistering): Released all slaves
[  287.117647][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.660'.
[  287.151116][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.0.660'.
[  287.418370][ T5722] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  287.642986][ T5722] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  287.659829][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  287.679696][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  287.708053][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.730496][ T8268] netlink: 220 bytes leftover after parsing attributes in process `syz.2.662'.
[  287.757434][ T5722] usb 1-1: Product: syz
[  287.772092][ T8268] netlink: 104 bytes leftover after parsing attributes in process `syz.2.662'.
[  287.787839][ T5722] usb 1-1: Manufacturer: syz
[  287.824845][ T5722] usb 1-1: SerialNumber: syz
[  287.927920][   T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  288.172554][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  288.200057][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  288.238700][ T5722] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  288.398356][ T5722] usb 4-1: Using ep0 maxpacket: 8
[  288.412092][ T5722] usb 4-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 8
[  288.412127][ T5722] usb 4-1: config 1 interface 0 has no altsetting 0
[  288.415194][ T5722] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  288.415224][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.415245][ T5722] usb 4-1: Product: syz
[  288.415261][ T5722] usb 4-1: Manufacturer: syz
[  288.415317][ T5722] usb 4-1: SerialNumber: syz
[  288.489608][ T8272] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  288.600490][    T9] usb 1-1: USB disconnect, device number 27
[  289.114877][   T10] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  289.157085][   T10] ath9k_htc: Failed to initialize the device
[  289.189766][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.235269][    T9] usb 1-1: ath9k_htc: USB layer deinitialized
[  289.257515][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.858779][ T1187] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  290.070825][ T1187] usb 1-1: Using ep0 maxpacket: 16
[  290.104030][ T1187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.150265][ T1187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.177462][ T1187] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00
[  290.191357][ T1187] usb 1-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0
[  290.213933][ T1187] usb 1-1: Manufacturer: syz
[  290.251584][ T1187] usb 1-1: config 0 descriptor??
[  290.357009][ T8283] fuse: Unknown parameter 'userid'
[  290.400038][ T5722] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  290.446395][ T8281] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[  290.453175][ T8281] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  290.474798][ T5722] usb 4-1: USB disconnect, device number 41
[  290.481748][ T8281] vhci_hcd vhci_hcd.0: Device attached
[  290.738664][ T1187] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:041E:3100.000E/input/input11
[  290.759769][ T5696] usb 38-1: SetAddress Request (2) to port 0
[  290.771138][ T5696] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[  290.856403][ T1187] creative-sb0540 0003:041E:3100.000E: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[  290.918593][ T5689] usb 5-1: new full-speed USB device number 54 using dummy_hcd
[  290.980136][ T5722] usb 1-1: USB disconnect, device number 28
[  291.069233][ T5689] usb 5-1: device descriptor read/64, error -71
[  291.222990][ T8294] fido_id[8294]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  291.406400][ T5689] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  291.609203][ T5689] usb 5-1: device descriptor read/64, error -71
[  291.758898][ T5689] usb usb5-port1: attempt power cycle
[  292.122831][ T5689] usb 5-1: new full-speed USB device number 56 using dummy_hcd
[  292.161229][ T5689] usb 5-1: device descriptor read/8, error -71
[  292.418995][ T5689] usb 5-1: new full-speed USB device number 57 using dummy_hcd
[  292.473682][ T5689] usb 5-1: device descriptor read/8, error -71
[  292.599652][ T5689] usb usb5-port1: unable to enumerate USB device
[  292.708744][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  292.849585][ T8323] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  292.910044][   T10] usb 1-1: Using ep0 maxpacket: 16
[  292.915156][ T8323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.931487][ T8323] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  292.956378][   T10] usb 1-1: config 73 has an invalid interface number: 24 but max is 0
[  292.980670][   T10] usb 1-1: config 73 has no interface number 0
[  293.000221][   T10] usb 1-1: config 73 interface 24 has no altsetting 0
[  293.042486][   T10] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09
[  293.091906][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.111471][   T10] usb 1-1: Product: syz
[  293.135281][   T10] usb 1-1: Manufacturer: syz
[  293.151977][   T10] usb 1-1: SerialNumber: syz
[  293.423054][   T10] go7007 1-1:73.24: probe with driver go7007 failed with error -12
[  293.456863][   T10] usb 1-1: USB disconnect, device number 29
[  293.887761][ T8328] netlink: 64 bytes leftover after parsing attributes in process `syz.4.679'.
[  293.936420][ T8328] syzkaller1: entered promiscuous mode
[  293.971480][ T8328] syzkaller1: entered allmulticast mode
[  294.139956][ T8332] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.165669][ T8332] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.039938][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.083093][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  296.258643][    T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  296.331303][   T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  296.460758][ T8373] loop2: detected capacity change from 0 to 7
[  296.475392][    T9] usb 4-1: Using ep0 maxpacket: 16
[  296.485072][ T8285] vhci_hcd: connection reset by peer
[  296.509331][    T9] usb 4-1: config 64 has an invalid interface number: 238 but max is 0
[  296.517900][ T8373] Dev loop2: unable to read RDB block 7
[  296.518355][   T24] usb 5-1: Using ep0 maxpacket: 16
[  296.538109][ T6812] vhci_hcd vhci_hcd.2: stop threads
[  296.545590][ T8373]  loop2: unable to read partition table
[  296.546678][ T6812] vhci_hcd vhci_hcd.2: release socket
[  296.563108][    T9] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config
[  296.584635][ T5696] usb 38-1: device descriptor read/8, error -110
[  296.593288][ T8373] loop2: partition table beyond EOD, truncated
[  296.607577][   T24] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.624336][ T6812] vhci_hcd vhci_hcd.2: disconnect device
[  296.633430][    T9] usb 4-1: config 64 has no interface number 0
[  296.633735][   T24] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  296.654072][ T8373] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  296.726252][    T9] usb 4-1: config 64 interface 238 has no altsetting 0
[  296.766732][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a
[  296.811635][   T24] usb 5-1: config 0 interface 0 has no altsetting 0
[  296.833897][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.863023][   T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00
[  296.895691][    T9] usb 4-1: Product: syz
[  296.926721][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.961595][ T1187] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  296.976950][    T9] usb 4-1: Manufacturer: syz
[  296.988427][   T24] usb 5-1: config 0 descriptor??
[  297.023355][    T9] usb 4-1: SerialNumber: syz
[  297.031715][ T5696] usb usb38-port1: attempt power cycle
[  297.173284][ T1187] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  297.188371][ T1187] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  297.207854][ T1187] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  297.226828][ T1187] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  297.253554][ T1187] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  297.266933][ T1187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  297.316451][ T1187] usb 2-1: SerialNumber: syz
[  297.343022][    T9] uvcvideo 4-1:64.238: Found UVC 0.00 device syz (046d:087c)
[  297.381447][    T9] uvcvideo 4-1:64.238: No valid video chain found.
[  297.412503][    T9] usb 4-1: USB disconnect, device number 42
[  297.490616][   T24] input: HID 28bd:0935 Mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28BD:0935.000F/input/input12
[  297.512887][   T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  297.651050][ T5696] usb usb38-port1: unable to enumerate USB device
[  297.663934][   T24] uclogic 0003:28BD:0935.000F: input,hidraw0: USB HID v0.05 Mouse [HID 28bd:0935] on usb-dummy_hcd.4-1/input0
[  297.757086][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  297.807447][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  297.822208][ T8378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  297.878818][ T8378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  297.892826][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  297.975813][   T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  298.057512][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.129086][   T10] usb 1-1: Product: syz
[  298.164382][   T10] usb 1-1: Manufacturer: syz
[  298.194864][   T10] usb 1-1: SerialNumber: syz
[  298.309942][   T10] usb 1-1: selecting invalid altsetting 1
[  298.356369][   T10] usb 1-1: unit 6 not found!
[  298.436482][ T5711] usb 5-1: USB disconnect, device number 58
[  298.720869][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  298.777928][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.244545][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  299.299368][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  299.537368][   T10] usb 1-1: 2:0: sticky mixer values (0/123/1 => 0), disabling
[  299.550400][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'.
[  299.559301][   T10] usb 1-1: check MIXER_GET_CUR_BROKEN if you believe the mixer is non-sticky
[  299.571427][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'.
[  299.612074][ T8397] netlink: 'syz.2.697': attribute type 4 has an invalid length.
[  299.635500][ T8397] netlink: 152 bytes leftover after parsing attributes in process `syz.2.697'.
[  299.932980][ T8397] .`: renamed from bond0
[  300.103124][   T10] usb 1-1: USB disconnect, device number 30
[  300.227026][ T6646] udevd[6646]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  300.439879][ T1187] usbtest 2-1:1.0: couldn't get endpoints, -22
[  300.488552][ T1187] usbtest 2-1:1.0: probe with driver usbtest failed with error -22
[  300.622906][ T1187] usb 2-1: USB disconnect, device number 30
[  302.568544][   T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  302.748502][   T10] usb 1-1: Using ep0 maxpacket: 8
[  302.756754][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.769015][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  302.782365][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00
[  302.793533][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.807880][   T10] usb 1-1: config 0 descriptor??
[  303.256133][   T10] hid_parser_main: 1 callbacks suppressed
[  303.256157][   T10] apple 0003:05AC:0232.0010: unknown main item tag 0x3
[  303.278807][   T10] apple 0003:05AC:0232.0010: unknown main item tag 0x0
[  303.285934][   T10] apple 0003:05AC:0232.0010: unknown main item tag 0x0
[  303.293630][   T10] apple 0003:05AC:0232.0010: unknown main item tag 0x0
[  303.300904][   T10] apple 0003:05AC:0232.0010: unknown main item tag 0x0
[  303.309747][   T10] apple 0003:05AC:0232.0010: unknown main item tag 0x0
[  303.316689][   T10] apple 0003:05AC:0232.0010: unknown main item tag 0x0
[  303.323816][   T10] apple 0003:05AC:0232.0010: unknown main item tag 0x0
[  303.334625][   T10] apple 0003:05AC:0232.0010: item fetching failed at offset 37/40
[  303.343742][   T10] apple 0003:05AC:0232.0010: parse failed
[  303.350210][   T10] apple 0003:05AC:0232.0010: probe with driver apple failed with error -22
[  303.453299][ T5711] usb 1-1: USB disconnect, device number 31
[  303.638586][   T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  303.808501][   T10] usb 5-1: Using ep0 maxpacket: 32
[  303.828139][   T10] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  303.851379][   T10] usb 5-1: config 0 has no interface number 0
[  303.864289][   T10] usb 5-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  303.886223][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.899022][   T10] usb 5-1: Product: syz
[  303.916486][   T10] usb 5-1: Manufacturer: syz
[  303.935306][   T10] usb 5-1: SerialNumber: syz
[  303.953123][   T10] usb 5-1: config 0 descriptor??
[  303.964511][   T10] hub 5-1:0.89: bad descriptor, ignoring hub
[  303.974370][   T10] hub 5-1:0.89: probe with driver hub failed with error -5
[  304.001530][   T10] option 5-1:0.89: GSM modem (1-port) converter detected
[  304.048547][   T10] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0
[  304.321883][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.339953][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.397999][ T8505] openvswitch: netlink: IPv4 tunnel dst address is zero
[  304.528573][    T9] usb 5-1: USB disconnect, device number 59
[  304.587002][    T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  304.634910][    T9] option 5-1:0.89: device disconnected
[  304.948403][    T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  305.109960][    T9] usb 1-1: Using ep0 maxpacket: 32
[  305.127265][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  305.140585][    T9] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  305.154721][    T9] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  305.181685][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.199105][    T9] usb 1-1: Product: syz
[  305.204013][    T9] usb 1-1: Manufacturer: syz
[  305.215620][    T9] usb 1-1: SerialNumber: syz
[  305.408388][   T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  305.450533][    T9] usb 1-1: Cannot retrieve CPort count: 0
[  305.457340][    T9] usb 1-1: Cannot retrieve CPort count: -5
[  305.471323][    T9] es2_ap_driver 1-1:7.0: probe with driver es2_ap_driver failed with error -5
[  305.486898][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.4.725'.
[  305.578343][   T10] usb 4-1: Using ep0 maxpacket: 16
[  305.590090][   T10] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  305.600597][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.609717][   T10] usb 4-1: Product: syz
[  305.614166][   T10] usb 4-1: Manufacturer: syz
[  305.619461][   T10] usb 4-1: SerialNumber: syz
[  305.663862][    T9] usb 1-1: USB disconnect, device number 32
[  305.993109][ T8525] FAULT_INJECTION: forcing a failure.
[  305.993109][ T8525] name failslab, interval 1, probability 0, space 0, times 1
[  306.006655][ T8525] CPU: 0 UID: 0 PID: 8525 Comm: syz.2.727 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  306.006688][ T8525] Tainted: [L]=SOFTLOCKUP
[  306.006695][ T8525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  306.006706][ T8525] Call Trace:
[  306.006714][ T8525]  <TASK>
[  306.006722][ T8525]  dump_stack_lvl+0xe8/0x150
[  306.006760][ T8525]  should_fail_ex+0x40c/0x560
[  306.006791][ T8525]  should_failslab+0xa8/0x100
[  306.006822][ T8525]  __kmalloc_node_track_caller_noprof+0x100/0x730
[  306.006852][ T8525]  ? ethnl_default_set_doit+0x9a4/0x1080
[  306.006878][ T8525]  ? ethnl_default_set_doit+0x9a4/0x1080
[  306.006914][ T8525]  ? ethnl_default_set_doit+0x169/0x1080
[  306.006945][ T8525]  kmemdup_noprof+0x2b/0x70
[  306.006974][ T8525]  ethnl_default_set_doit+0x9a4/0x1080
[  306.007012][ T8525]  genl_family_rcv_msg_doit+0x233/0x340
[  306.007049][ T8525]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  306.007090][ T8525]  ? bpf_lsm_capable+0x9/0x20
[  306.007115][ T8525]  ? security_capable+0x7e/0x2c0
[  306.007142][ T8525]  genl_rcv_msg+0x614/0x7a0
[  306.007177][ T8525]  ? __pfx_genl_rcv_msg+0x10/0x10
[  306.007204][ T8525]  ? __pfx_ethnl_default_set_doit+0x10/0x10
[  306.007233][ T8525]  ? __pfx_ref_tracker_free+0x10/0x10
[  306.007271][ T8525]  netlink_rcv_skb+0x226/0x4a0
[  306.007296][ T8525]  ? __pfx_genl_rcv_msg+0x10/0x10
[  306.007326][ T8525]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  306.007365][ T8525]  ? down_read+0x2be/0x330
[  306.007397][ T8525]  genl_rcv+0x28/0x40
[  306.007422][ T8525]  netlink_unicast+0x7bb/0x940
[  306.007456][ T8525]  netlink_sendmsg+0x813/0xb40
[  306.007490][ T8525]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.007520][ T8525]  ? aa_sock_msg_perm+0xf1/0x1b0
[  306.007547][ T8525]  ? __pfx_netlink_sendmsg+0x10/0x10
[  306.007570][ T8525]  sock_sendmsg_nosec+0x13a/0x180
[  306.007602][ T8525]  ____sys_sendmsg+0x54e/0x850
[  306.007631][ T8525]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.007664][ T8525]  ? import_iovec+0x73/0xa0
[  306.007688][ T8525]  ___sys_sendmsg+0x2a5/0x360
[  306.007709][ T8525]  ? __lock_acquire+0x683/0x2cf0
[  306.007740][ T8525]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.007799][ T8525]  ? __fget_files+0x2a/0x420
[  306.007824][ T8525]  ? __fget_files+0x3a2/0x420
[  306.007860][ T8525]  __x64_sys_sendmsg+0x1b1/0x290
[  306.007887][ T8525]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  306.007937][ T8525]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.007959][ T8525]  do_syscall_64+0x174/0x580
[  306.007982][ T8525]  ? trace_irq_disable+0x3b/0x140
[  306.008006][ T8525]  ? clear_bhb_loop+0x40/0x90
[  306.008030][ T8525]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.008049][ T8525] RIP: 0033:0x7f66c839e019
[  306.008068][ T8525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  306.008083][ T8525] RSP: 002b:00007f66c91f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.008105][ T8525] RAX: ffffffffffffffda RBX: 00007f66c8625fa0 RCX: 00007f66c839e019
[  306.008119][ T8525] RDX: 0000000020000000 RSI: 0000200000000680 RDI: 0000000000000003
[  306.008132][ T8525] RBP: 00007f66c91f5090 R08: 0000000000000000 R09: 0000000000000000
[  306.008143][ T8525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  306.008154][ T8525] R13: 00007f66c8626038 R14: 00007f66c8625fa0 R15: 00007f66c874fa48
[  306.008185][ T8525]  </TASK>
[  306.892769][   T10] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  306.928440][ T1187] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  306.934620][   T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  306.967241][   T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  306.984954][   T10] usb 4-1: media controller created
[  307.038465][ T5711] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  307.047423][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  307.093153][   T10] zl10353_read_register: readreg error (reg=127, ret==-71)
[  307.129161][ T1187] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  307.177122][ T1187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.228904][ T5711] usb 5-1: Using ep0 maxpacket: 16
[  307.253574][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.254127][ T1187] usb 1-1: config 0 descriptor??
[  307.310259][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.335431][   T10] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  307.354521][ T5711] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  307.378443][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.383861][ T1187] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  307.395721][   T10] usb 4-1: USB disconnect, device number 43
[  307.487533][ T5711] usb 5-1: config 0 descriptor??
[  308.112311][ T5711] usb 5-1: language id specifier not provided by device, defaulting to English
[  308.392698][ T1187] usb 1-1: USB disconnect, device number 33
[  308.465802][ T8562] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  308.501481][ T8562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.520165][ T8562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.534787][ T5711] letsketch 0003:6161:4D15.0011: Device info: 
[  308.616959][ T8567] FAULT_INJECTION: forcing a failure.
[  308.616959][ T8567] name failslab, interval 1, probability 0, space 0, times 0
[  308.630192][ T8567] CPU: 0 UID: 0 PID: 8567 Comm: syz.1.738 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  308.630224][ T8567] Tainted: [L]=SOFTLOCKUP
[  308.630231][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  308.630241][ T8567] Call Trace:
[  308.630249][ T8567]  <TASK>
[  308.630257][ T8567]  dump_stack_lvl+0xe8/0x150
[  308.630294][ T8567]  should_fail_ex+0x40c/0x560
[  308.630324][ T8567]  should_failslab+0xa8/0x100
[  308.630354][ T8567]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  308.630376][ T8567]  ? local_lock_release+0x9c/0x160
[  308.630398][ T8567]  ? __alloc_skb+0x1d7/0x7a0
[  308.630415][ T8567]  ? __alloc_skb+0x1d7/0x7a0
[  308.630442][ T8567]  __alloc_skb+0x1d7/0x7a0
[  308.630466][ T8567]  netlink_ack+0x136/0xb30
[  308.630487][ T8567]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.630519][ T8567]  ? __pfx_ref_tracker_free+0x10/0x10
[  308.630555][ T8567]  netlink_rcv_skb+0x2a4/0x4a0
[  308.630579][ T8567]  ? __pfx_genl_rcv_msg+0x10/0x10
[  308.630608][ T8567]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  308.630647][ T8567]  ? down_read+0x2be/0x330
[  308.630677][ T8567]  genl_rcv+0x28/0x40
[  308.630702][ T8567]  netlink_unicast+0x7bb/0x940
[  308.630735][ T8567]  netlink_sendmsg+0x813/0xb40
[  308.630768][ T8567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.630796][ T8567]  ? aa_sock_msg_perm+0xf1/0x1b0
[  308.630823][ T8567]  ? __pfx_netlink_sendmsg+0x10/0x10
[  308.630846][ T8567]  sock_sendmsg_nosec+0x13a/0x180
[  308.630876][ T8567]  ____sys_sendmsg+0x54e/0x850
[  308.630904][ T8567]  ? __pfx_____sys_sendmsg+0x10/0x10
[  308.630937][ T8567]  ? import_iovec+0x73/0xa0
[  308.630960][ T8567]  ___sys_sendmsg+0x2a5/0x360
[  308.630981][ T8567]  ? __lock_acquire+0x683/0x2cf0
[  308.631012][ T8567]  ? __pfx____sys_sendmsg+0x10/0x10
[  308.631078][ T8567]  ? __fget_files+0x2a/0x420
[  308.631103][ T8567]  ? __fget_files+0x3a2/0x420
[  308.631138][ T8567]  __x64_sys_sendmsg+0x1b1/0x290
[  308.631164][ T8567]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  308.631206][ T8567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.631227][ T8567]  do_syscall_64+0x174/0x580
[  308.631250][ T8567]  ? trace_irq_disable+0x3b/0x140
[  308.631274][ T8567]  ? clear_bhb_loop+0x40/0x90
[  308.631297][ T8567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.631316][ T8567] RIP: 0033:0x7f5fc639e019
[  308.631334][ T8567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  308.631350][ T8567] RSP: 002b:00007f5fc7226028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  308.631370][ T8567] RAX: ffffffffffffffda RBX: 00007f5fc6625fa0 RCX: 00007f5fc639e019
[  308.631384][ T8567] RDX: 0000000020000000 RSI: 0000200000000680 RDI: 0000000000000003
[  308.631396][ T8567] RBP: 00007f5fc7226090 R08: 0000000000000000 R09: 0000000000000000
[  308.631407][ T8567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  308.631418][ T8567] R13: 00007f5fc6626038 R14: 00007f5fc6625fa0 R15: 00007f5fc674fa48
[  308.631448][ T8567]  </TASK>
[  308.933517][ T8538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.944504][ T8538] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.958977][ T1187] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  309.138518][ T1187] usb 1-1: Using ep0 maxpacket: 8
[  309.160993][ T1187] usb 1-1: config index 0 descriptor too short (expected 512, got 36)
[  309.183949][ T1187] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 4
[  309.193471][ T1187] usb 1-1: can't read configurations, error -22
[  309.226504][ T8571] xt_l2tp: missing protocol rule (udp|l2tpip)
[  309.295319][ T5711] usb 5-1: Max retries (5) exceeded reading string descriptor 201
[  309.313493][ T5711] letsketch 0003:6161:4D15.0011: probe with driver letsketch failed with error -71
[  309.338824][ T5711] usb 5-1: USB disconnect, device number 60
[  309.398673][ T1187] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  309.418360][ T8574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'.
[  309.598459][ T1187] usb 1-1: Using ep0 maxpacket: 8
[  309.606411][ T1187] usb 1-1: config index 0 descriptor too short (expected 512, got 36)
[  309.617007][ T1187] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 4
[  309.627363][ T1187] usb 1-1: can't read configurations, error -22
[  309.635325][ T1187] usb usb1-port1: attempt power cycle
[  309.719283][   T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  309.734144][ T8581] fuse: Unknown parameter '���������0000000000000000000000000000000000000000005'
[  309.747253][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.756809][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  309.859773][   T10] usb 4-1: device descriptor read/64, error -71
[  309.996836][ T1187] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  310.029493][ T1187] usb 1-1: Using ep0 maxpacket: 8
[  310.036808][ T1187] usb 1-1: config index 0 descriptor too short (expected 512, got 36)
[  310.045957][ T1187] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 4
[  310.055164][ T1187] usb 1-1: can't read configurations, error -22
[  310.099050][   T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  310.208454][ T1187] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  310.228893][ T5711] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  310.239542][   T10] usb 4-1: device descriptor read/64, error -71
[  310.240173][ T1187] usb 1-1: Using ep0 maxpacket: 8
[  310.256090][ T1187] usb 1-1: config index 0 descriptor too short (expected 512, got 36)
[  310.265588][ T1187] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 4
[  310.274079][ T1187] usb 1-1: can't read configurations, error -22
[  310.282446][ T1187] usb usb1-port1: unable to enumerate USB device
[  310.348688][   T10] usb usb4-port1: attempt power cycle
[  310.381985][ T5711] usb 5-1: device descriptor read/64, error -71
[  310.628461][ T5711] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  310.712373][   T10] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  310.740924][   T10] usb 4-1: device descriptor read/8, error -71
[  310.778625][ T5711] usb 5-1: device descriptor read/64, error -71
[  310.890669][ T5711] usb usb5-port1: attempt power cycle
[  310.988436][   T10] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  311.029153][   T10] usb 4-1: device descriptor read/8, error -71
[  311.161616][   T10] usb usb4-port1: unable to enumerate USB device
[  311.249315][ T5711] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  311.289709][ T5711] usb 5-1: device descriptor read/8, error -71
[  311.511680][ T8622] netlink: 64 bytes leftover after parsing attributes in process `syz.2.753'.
[  311.529029][ T5711] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  311.544481][ T8622] syzkaller1: entered promiscuous mode
[  311.550480][ T8622] syzkaller1: entered allmulticast mode
[  311.569029][ T5711] usb 5-1: device descriptor read/8, error -71
[  311.688724][ T5711] usb usb5-port1: unable to enumerate USB device
[  311.837828][ T8627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  311.862586][ T8627] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.348553][  T808] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  312.443706][ T8640] Cannot find add_set index 0 as target
[  312.523853][  T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.560741][ T1187] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  312.568582][  T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.568637][  T808] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00
[  312.568662][  T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.574143][  T808] usb 1-1: config 0 descriptor??
[  312.654237][ T8648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  312.667030][ T8648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  312.818634][ T1187] usb 2-1: device descriptor read/64, error -71
[  313.088653][ T1187] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  313.133326][  T808] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0
[  313.158173][  T808] lg-g15 0003:046D:0A07.0012: unknown main item tag 0x0
[  313.207772][  T808] lg-g15 0003:046D:0A07.0012: hidraw0: USB HID v0.00 Device [HID 046d:0a07] on usb-dummy_hcd.0-1/input0
[  313.270781][ T1187] usb 2-1: device descriptor read/64, error -71
[  313.341134][ T8625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.383706][ T8625] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.401689][ T1187] usb usb2-port1: attempt power cycle
[  313.408077][ T5696] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  313.628853][ T5696] usb 5-1: Using ep0 maxpacket: 32
[  313.669875][ T5696] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  313.725910][ T5696] usb 5-1: config 0 has no interface number 0
[  313.788760][ T1187] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  313.799342][ T5696] usb 5-1: config 0 interface 12 has no altsetting 0
[  313.845028][ T5696] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  313.867933][ T1187] usb 2-1: device descriptor read/8, error -71
[  313.886745][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.924553][ T5696] usb 5-1: Product: syz
[  313.953459][ T5696] usb 5-1: Manufacturer: syz
[  313.982163][ T5696] usb 5-1: SerialNumber: syz
[  314.070565][ T5696] usb 5-1: config 0 descriptor??
[  314.092177][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'.
[  314.129428][ T1187] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  314.180485][ T1187] usb 2-1: device descriptor read/8, error -71
[  314.319558][ T1187] usb usb2-port1: unable to enumerate USB device
[  315.775896][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  315.865293][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.000407][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.087240][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.221808][  T808] usb 1-1: USB disconnect, device number 38
[  316.536572][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  316.561887][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  316.840369][ T5696] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  316.874608][ T5696] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[  316.908436][ T5696] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  316.940484][ T5696] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[  317.049074][ T5696] usb 5-1: USB disconnect, device number 65
[  317.354044][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  317.360951][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  318.143675][ T8735] loop2: detected capacity change from 0 to 7
[  318.177305][ T8735] Dev loop2: unable to read RDB block 7
[  318.205001][ T8735]  loop2: unable to read partition table
[  318.227560][ T8735] loop2: partition table beyond EOD, truncated
[  318.245735][ T8735] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  318.535119][ T8740] bridge_slave_1: left allmulticast mode
[  318.560706][ T8740] bridge_slave_1: left promiscuous mode
[  318.589062][ T8740] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.693161][ T8740] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  319.049195][ T8749] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  319.257301][ T8760] netlink: 'syz.2.779': attribute type 1 has an invalid length.
[  319.427057][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  319.541075][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  319.856306][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.776'.
[  320.171275][ T8778] bond1: down delay (511) is not a multiple of miimon (8), value rounded to 504 ms
[  320.188486][ T8778] bond1: entered promiscuous mode
[  320.195899][ T8778] bond1: entered allmulticast mode
[  320.203295][ T8778] 8021q: adding VLAN 0 to HW filter on device bond1
[  320.211493][  T808] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  320.411109][  T808] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  320.462224][  T808] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  320.510659][  T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.524298][ T8778] syzkaller0: entered promiscuous mode
[  320.544133][ T8778] syzkaller0: entered allmulticast mode
[  320.561855][  T808] usb 2-1: config 0 descriptor??
[  320.770002][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.809466][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  321.426538][  T808] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0
[  321.480912][  T808] cm6533_jd 0003:0D8C:0022.0013: item fetching failed at offset 4/5
[  321.524600][  T808] cm6533_jd 0003:0D8C:0022.0013: parse failed
[  321.577524][  T808] cm6533_jd 0003:0D8C:0022.0013: probe with driver cm6533_jd failed with error -22
[  321.858944][ T5722] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  322.008382][ T5722] usb 1-1: device descriptor read/64, error -71
[  322.285973][ T5722] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  322.429845][ T5722] usb 1-1: device descriptor read/64, error -71
[  322.550514][ T5722] usb usb1-port1: attempt power cycle
[  322.898413][ T5722] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  322.947206][ T5722] usb 1-1: device descriptor read/8, error -71
[  323.212020][ T5722] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  323.245154][ T5722] usb 1-1: device descriptor read/8, error -71
[  323.367419][ T5722] usb usb1-port1: unable to enumerate USB device
[  325.360282][ T8807] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  325.369876][ T8807] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  325.377477][ T8807] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  325.399622][ T8807] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  325.547776][    T9] usb 2-1: USB disconnect, device number 35
[  326.163938][ T8849] netlink: 128 bytes leftover after parsing attributes in process `syz.2.792'.
[  326.180318][ T8849] A link change request failed with some changes committed already. Interface 
2
6�� may have been left with an inconsistent configuration, please check.
[  326.603940][ T8857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.622793][ T8857] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.679194][ T8853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  326.691601][ T8853] block device autoloading is deprecated and will be removed.
[  326.939310][ T5696] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  327.118529][ T5696] usb 1-1: Using ep0 maxpacket: 16
[  327.131601][ T5696] usb 1-1: unable to get BOS descriptor or descriptor too short
[  327.143863][ T5696] usb 1-1: config 13 has an invalid interface number: 50 but max is 0
[  327.155695][ T5696] usb 1-1: config 13 has no interface number 0
[  327.169285][ T5696] usb 1-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[  327.184817][ T5696] usb 1-1: config 13 interface 50 has no altsetting 0
[  327.249474][ T5696] usb 1-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[  327.284665][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.305798][ T5696] usb 1-1: Product: syz
[  327.312212][ T5696] usb 1-1: Manufacturer: syz
[  327.317712][ T5696] usb 1-1: SerialNumber: syz
[  327.339438][ T8844] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  327.392609][   T29] IPVS: starting estimator thread 0...
[  327.429273][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  327.429270][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout
[  327.442407][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout
[  327.442462][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout
[  327.519777][ T8873] IPVS: using max 50 ests per chain, 120000 per kthread
[  327.755131][ T8886] binder: 8885:8886 unknown command 0
[  327.762435][ T8886] binder: 8885:8886 ioctl c0306201 200000000080 returned -22
[  327.777575][ T8886] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  328.244682][ T8878] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  328.251117][ T8878] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  328.257273][ T8878] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  328.264489][ T8878] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  328.280565][ T8846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.322007][ T8846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.424761][ T8888] bridge0: port 3(wlan1) entered blocking state
[  328.436143][ T8888] bridge0: port 3(wlan1) entered disabled state
[  328.446017][ T8888] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  328.467452][ T8888] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  328.550780][ T8895] capability: warning: `syz.2.805' uses deprecated v2 capabilities in a way that may be insecure
[  328.561607][    T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  328.728497][    T9] usb 2-1: Using ep0 maxpacket: 16
[  328.755728][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  328.768675][ T5689] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  328.772925][    T9] usb 2-1: config 127 has an invalid interface number: 124 but max is 0
[  328.806256][    T9] usb 2-1: config 127 has no interface number 0
[  328.814825][    T9] usb 2-1: config 127 interface 124 has no altsetting 0
[  328.832642][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87
[  328.852847][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.883473][    T9] usb 2-1: Product: syz
[  328.912961][    T9] usb 2-1: Manufacturer: syz
[  328.918854][ T5696] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  328.927341][ T5696] usb 1-1: MIDIStreaming interface descriptor not found
[  328.942513][ T8905] fuse: Bad value for 'fd'
[  328.948889][    T9] usb 2-1: SerialNumber: syz
[  328.954652][ T5689] usb 4-1: device descriptor read/64, error -71
[  328.967790][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'.
[  329.200509][ T5689] usb 4-1: new full-speed USB device number 49 using dummy_hcd
[  329.398441][ T5689] usb 4-1: device descriptor read/64, error -71
[  329.406873][ T5696] usb 1-1: USB disconnect, device number 43
[  329.463783][ T5825] udevd[5825]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  329.541703][ T5689] usb usb4-port1: attempt power cycle
[  329.598651][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout
[  329.632712][ T8921] netlink: 'syz.4.812': attribute type 4 has an invalid length.
[  329.910458][    T9] usb 2-1: reset high-speed USB device number 36 using dummy_hcd
[  329.918503][ T5689] usb 4-1: new full-speed USB device number 50 using dummy_hcd
[  329.949175][ T5689] usb 4-1: device descriptor read/8, error -71
[  330.083243][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  330.218641][ T5689] usb 4-1: new full-speed USB device number 51 using dummy_hcd
[  330.262741][ T5689] usb 4-1: device descriptor read/8, error -71
[  330.309137][ T5639] Bluetooth: hci4: command 0x0c1a tx timeout
[  330.315349][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout
[  330.321567][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout
[  330.330722][    T9] usb 2-1: failed to restore interface 124 altsetting 11 (error=-71)
[  330.351815][    T9] usb 2-1: USB disconnect, device number 36
[  330.380644][ T5689] usb usb4-port1: unable to enumerate USB device
[  330.559170][ T8927] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  330.569202][ T8927] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  330.575851][ T8927] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  330.583369][ T8927] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  330.597509][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.610623][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.667144][ T8932] tun0: tun_chr_ioctl cmd 1074025681
[  330.685820][ T8932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  330.696192][ T8932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  330.721579][ T8932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'.
[  330.733006][   T30] kauditd_printk_skb: 145 callbacks suppressed
[  330.733022][   T30] audit: type=1326 audit(1785732949.116:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637a19e019 code=0x7ffc0000
[  330.765817][   T30] audit: type=1326 audit(1785732949.116:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637a19e019 code=0x7ffc0000
[  330.792850][   T30] audit: type=1326 audit(1785732949.116:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f637a19e019 code=0x7ffc0000
[  330.817309][ T8932] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  330.830923][   T30] audit: type=1326 audit(1785732949.116:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637a19e019 code=0x7ffc0000
[  330.863143][ T8932] batman_adv: batadv0: Removing interface: batadv_slave_1
[  330.872932][   T30] audit: type=1326 audit(1785732949.116:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8938 comm="syz.0.817" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f637a19e019 code=0x7ffc0000
[  330.920879][ T5689] usb 5-1: new full-speed USB device number 66 using dummy_hcd
[  330.987050][ T8944] fuse: Bad value for 'user_id'
[  330.993680][ T8944] fuse: Bad value for 'user_id'
[  331.126407][ T5689] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  331.139380][ T5689] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  331.154457][ T5689] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  331.171026][ T5689] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  331.173868][ T8948] syzkaller0: entered promiscuous mode
[  331.189078][ T8948] syzkaller0: entered allmulticast mode
[  331.209960][ T5689] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  331.220717][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.229956][ T5689] usb 5-1: Product: syz
[  331.234737][ T5689] usb 5-1: Manufacturer: syz
[  331.241389][ T5689] usb 5-1: SerialNumber: syz
[  331.257889][ T8937] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22
[  331.358479][ T5711] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  331.473173][ T8937] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22
[  331.517224][ T5711] usb 1-1: config 2 has an invalid interface number: 12 but max is 0
[  331.531087][ T5711] usb 1-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  331.546575][ T5711] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  331.567275][ T5711] usb 1-1: config 2 has no interface number 0
[  331.587664][ T5711] usb 1-1: config 2 interface 12 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  331.606602][ T5711] usb 1-1: config 2 interface 12 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  331.625490][ T5711] usb 1-1: config 2 interface 12 altsetting 7 endpoint 0x8A has an invalid bInterval 88, changing to 4
[  331.637408][ T5711] usb 1-1: config 2 interface 12 altsetting 7 endpoint 0x8A has invalid wMaxPacketSize 0
[  331.651986][ T5711] usb 1-1: config 2 interface 12 has no altsetting 0
[  331.662207][ T5711] usb 1-1: New USB device found, idVendor=2040, idProduct=8265, bcdDevice=b5.a3
[  331.672033][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.680618][ T5711] usb 1-1: Product: syz
[  331.684945][ T5711] usb 1-1: Manufacturer: syz
[  331.705278][ T5711] usb 1-1: SerialNumber: syz
[  331.908607][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout
[  331.981529][ T8946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.043301][ T8946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.104056][ T8946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  332.149250][ T8946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.367107][ T5711] em28xx 1-1:2.12: New device syz syz @ 12 Mbps (2040:8265, interface 12, class 12)
[  332.425032][ T5711] em28xx 1-1:2.12: Device initialization failed.
[  332.460538][ T5711] em28xx 1-1:2.12: Device must be connected to a high-speed USB 2.0 port.
[  332.522487][ T5711] usb 1-1: USB disconnect, device number 44
[  332.629353][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout
[  332.635691][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout
[  332.635737][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  333.318359][ T5711] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  333.331178][ T8937] raw-gadget.5 gadget.4: fail, usb_ep_enable returned -22
[  333.514441][ T5711] usb 2-1: not running at top speed; connect to a high speed hub
[  333.549087][ T5711] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  333.606463][ T5689] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  333.616584][ T5711] usb 2-1: config 1 interface 0 has no altsetting 0
[  333.638449][ T5689] cdc_ncm 5-1:1.0: dwNtbInMaxSize=15 is too small. Using 2048
[  333.667696][ T5711] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.40
[  333.710031][ T5689] cdc_ncm 5-1:1.0: setting rx_max = 2048
[  333.729690][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  333.762756][    T9] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  333.782782][ T5711] usb 2-1: Product: 㱶髲䤋쎘宨㖜鬘딚䘅㙱⹼禋㣀褋ﴽ랼㳙ꭏ⢿芍ᤰቊ೩趵蠢韛肳೾頨
[  333.850809][ T5711] usb 2-1: Manufacturer: 菬忤㛨ṗ
[  333.876221][    T9] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  333.893736][ T5711] usb 2-1: SerialNumber: syz
[  334.526152][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.543532][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  334.678910][   T29] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  334.752686][ T8976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  334.786535][ T5689] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  334.814642][ T5689] usb 5-1: USB disconnect, device number 66
[  334.833960][   T29] usb 4-1: device descriptor read/64, error -71
[  334.846965][ T5689] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  334.860875][ T8976] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.107709][   T29] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  335.134831][ T5643] udevd[5643]: setting mode of /dev/bus/usb/005/066 to 020664 failed: No such file or directory
[  335.199525][ T5711] usbhid 2-1:1.0: can't add hid device: -71
[  335.206372][ T5643] udevd[5643]: setting owner of /dev/bus/usb/005/066 to uid=0, gid=0 failed: No such file or directory
[  335.223201][ T5711] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  335.251482][ T5711] usb 2-1: USB disconnect, device number 37
[  335.271322][   T29] usb 4-1: device descriptor read/64, error -71
[  335.353145][ T8997] syzkaller0: entered promiscuous mode
[  335.366088][ T8997] syzkaller0: entered allmulticast mode
[  335.419434][   T29] usb usb4-port1: attempt power cycle
[  335.780420][   T29] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  335.862339][   T29] usb 4-1: device descriptor read/8, error -71
[  335.963853][ T9007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.985375][ T9007] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.012794][ T9009] netlink: 'syz.0.835': attribute type 1 has an invalid length.
[  336.118725][   T29] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  336.122991][ T9009] 8021q: adding VLAN 0 to HW filter on device bond2
[  336.155567][ T9016] 8021q: adding VLAN 0 to HW filter on device bond2
[  336.162775][ T9016] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address
[  336.176686][ T9016] bond2: (slave wireguard0): Error -95 calling set_mac_address
[  336.177060][   T29] usb 4-1: device descriptor read/8, error -71
[  336.250252][ T5689] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  336.305055][   T29] usb usb4-port1: unable to enumerate USB device
[  336.428564][ T5711] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  336.438486][ T5689] usb 5-1: Using ep0 maxpacket: 32
[  336.460444][ T5689] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  336.480441][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.489583][ T5689] usb 5-1: Product: syz
[  336.493773][ T5689] usb 5-1: Manufacturer: syz
[  336.511565][ T5689] usb 5-1: SerialNumber: syz
[  336.542563][ T5689] usb 5-1: config 0 descriptor??
[  336.585518][ T5689] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  336.598887][ T5711] usb 1-1: Using ep0 maxpacket: 16
[  336.611579][ T5711] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[  336.623339][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.634163][ T5711] usb 1-1: Product: syz
[  336.638821][ T5711] usb 1-1: Manufacturer: syz
[  336.643512][ T5711] usb 1-1: SerialNumber: syz
[  336.893880][ T5711] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM
[  336.907092][ T5711] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc
[  336.914579][ T5711] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  336.977855][ T5711] usb 1-1: USB disconnect, device number 45
[  337.688387][ T5711] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  337.842590][ T5711] usb 2-1: New USB device found, idVendor=0499, idProduct=1015, bcdDevice= 0.40
[  337.852184][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.860295][ T5711] usb 2-1: Product: ᲁ錳ใ䩥뀾쇓̴몝㽫ꤪ⊵쾱漯ݷ屍쿣뮍፣㲜怽䑕ᰫ笞諰ስ❠攎ቷ䡃Ṇ㧭㭒ᛙ溾쮬䋝⺝჏椝䍅䍲઎獴밦ზ쥩뎉퓘ꄩ႘缁
[  337.881636][ T5711] usb 2-1: Manufacturer: ఄ
[  337.886293][ T5711] usb 2-1: SerialNumber: syz
[  338.018507][ T5696] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  338.116522][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.126210][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.184945][ T5711] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  338.185169][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  338.200272][ T5711] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  338.225768][ T5711] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  338.235070][ T5711] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  338.246384][ T5696] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  338.251275][ T5711] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  338.264047][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.274865][ T5696] usb 1-1: Product: syz
[  338.279067][ T5696] usb 1-1: Manufacturer: syz
[  338.283681][ T5696] usb 1-1: SerialNumber: syz
[  338.353144][ T9042] syzkaller0: entered promiscuous mode
[  338.355469][ T5711] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  338.359967][ T5696] usb 1-1: config 0 descriptor??
[  338.372532][ T5711] usb 2-1: USB disconnect, device number 38
[  338.385622][ T9042] syzkaller0: entered allmulticast mode
[  338.427889][ T5696] asix 1-1:0.0: probe with driver asix failed with error -22
[  338.446899][ T6646] udevd[6646]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  338.623664][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.634907][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.762903][ T5711] usb 1-1: USB disconnect, device number 46
[  338.868079][ T5689] gspca_ov534_9: reg_r err -71
[  339.128522][ T5689] gspca_ov534_9: Unknown sensor 0000
[  339.128990][ T5689] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22
[  339.162728][ T5689] usb 5-1: USB disconnect, device number 67
[  339.178705][ T5711] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  339.388384][ T5711] usb 1-1: Using ep0 maxpacket: 32
[  339.399389][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.426578][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.451089][ T5711] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  339.477544][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.514330][ T5711] usb 1-1: config 0 descriptor??
[  339.562305][ T5711] hub 1-1:0.0: USB hub found
[  339.777037][ T5711] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  339.888320][   T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  340.043116][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  340.068479][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  340.083419][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  340.097772][   T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  340.107431][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.134002][   T10] usb 4-1: Product: syz
[  340.148804][   T10] usb 4-1: Manufacturer: syz
[  340.154818][   T10] usb 4-1: SerialNumber: syz
[  340.171800][   T10] usb 4-1: config 0 descriptor??
[  340.197465][ T9067] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  340.200705][ T5711] hid-generic 0003:046D:C31C.0015: unknown main item tag 0x0
[  340.231049][ T9067] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  340.271598][ T5711] hid-generic 0003:046D:C31C.0015: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0
[  340.295327][   T10] usb 4-1: ucan: probing device on interface #0
[  340.358606][ T5689] usb 2-1: new low-speed USB device number 39 using dummy_hcd
[  340.540610][ T5689] usb 2-1: device descriptor read/64, error -71
[  340.575187][   T10] usb 4-1: ucan: device protocol version -619620093 is not supported
[  340.598602][   T10] usb 4-1: ucan: probe failed; try to update the device firmware
[  340.666433][ T1187] usb 1-1: USB disconnect, device number 47
[  340.705820][ T9078] kvm: emulating exchange as write
[  340.808625][ T5689] usb 2-1: new low-speed USB device number 40 using dummy_hcd
[  340.938418][ T5689] usb 2-1: device descriptor read/64, error -71
[  341.049012][ T5689] usb usb2-port1: attempt power cycle
[  341.388507][ T5689] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[  341.439817][ T5689] usb 2-1: device descriptor read/8, error -71
[  341.452500][ T9084] syzkaller0: entered promiscuous mode
[  341.467196][ T9084] syzkaller0: entered allmulticast mode
[  341.473094][ T5722] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  341.650009][ T5722] usb 1-1: Using ep0 maxpacket: 16
[  341.666617][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.698567][ T5689] usb 2-1: new low-speed USB device number 42 using dummy_hcd
[  341.698624][ T5722] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  341.698672][ T5722] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  341.786451][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.802312][ T5689] usb 2-1: device descriptor read/8, error -71
[  341.822900][ T5722] usb 1-1: config 0 descriptor??
[  341.930860][ T5689] usb usb2-port1: unable to enumerate USB device
[  342.008311][   T10] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  342.161455][   T10] usb 5-1: not running at top speed; connect to a high speed hub
[  342.185176][   T10] usb 5-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  342.209973][   T10] usb 5-1: config 1 interface 0 has no altsetting 0
[  342.223568][   T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40
[  342.233870][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.242628][   T10] usb 5-1: Manufacturer: а
[  342.247565][   T10] usb 5-1: SerialNumber: 㽱緳쵫ੵ쫺涍᪣☪瘈ꀊ엁펞䶳궒塝㲟짃ค﫢쪨伞툙遈껩돏鶈渭ᦧ䔰芜뛪∏﷛Ⱏ렺敀䶅㕹匳딜蒔聗ᴛ흜ઑ쨂襍ⵑ곤䬆ℰ灇
[  342.461501][ T9082] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  342.489131][ T9093] netlink: 168 bytes leftover after parsing attributes in process `syz.4.859'.
[  342.563427][   T10] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input15
[  342.661795][   T10] usb 5-1: USB disconnect, device number 68
[  342.661889][    C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -19
[  342.707621][ T5722] usbhid 1-1:0.0: can't add hid device: -71
[  342.737094][ T5722] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  342.797539][ T5722] usb 1-1: USB disconnect, device number 48
[  342.924466][   T10] appletouch 5-1:1.0: input: appletouch disconnected
[  343.022588][ T9113] batman_adv: batadv0: Adding interface: netdevsim0
[  343.033827][ T9113] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  343.036555][    T9] usb 4-1: USB disconnect, device number 56
[  343.065097][ T9113] batman_adv: batadv0: Interface activated: netdevsim0
[  343.269418][ T9115] netlink: 128 bytes leftover after parsing attributes in process `syz.3.864'.
[  343.282036][ T9115] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  343.316539][ T9117] fuse: Unknown parameter 'user_ih����[Pg��n�1sum�w�t��x)��Qw0֮	Mk�V���i(h�� to�s�����-�3�{�XU���$ϵ�o(k� t00000000000000000000'
[  343.350409][ T9117] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:19999
[  343.357368][    T9] IPVS: starting estimator thread 0...
[  343.458339][ T9120] IPVS: using max 29 ests per chain, 69600 per kthread
[  343.901255][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  343.913491][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.044200][ T9130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.868'.
[  344.137190][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  344.157657][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  344.173467][ T9131] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  344.498868][ T9142] syzkaller0: entered promiscuous mode
[  344.515619][ T9142] syzkaller0: entered allmulticast mode
[  345.054954][ T9149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.070557][ T9149] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  345.563067][ T6828] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.650517][ T1187] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  345.809400][ T1187] usb 2-1: device descriptor read/64, error -71
[  346.109457][ T1187] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  346.132482][ T6828] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.274427][ T1187] usb 2-1: device descriptor read/64, error -71
[  346.277896][ T9173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.296543][ T9173] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.429396][ T1187] usb usb2-port1: attempt power cycle
[  346.474884][ T6828] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.536315][ T9178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  346.540398][ T9177] netlink: 128 bytes leftover after parsing attributes in process `syz.4.881'.
[  346.551952][ T9178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.597336][ T9177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  346.859287][ T1187] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  346.883212][ T6828] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.951500][ T1187] usb 2-1: device descriptor read/8, error -71
[  347.222534][ T1187] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  347.266998][ T1187] usb 2-1: device descriptor read/8, error -71
[  347.390081][ T1187] usb usb2-port1: unable to enumerate USB device
[  347.442870][ T6828] bridge_slave_0: left allmulticast mode
[  347.461309][ T6828] bridge_slave_0: left promiscuous mode
[  347.482372][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.761014][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  347.775525][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  347.785567][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  347.811718][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  347.823533][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  348.647487][ T6828] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.690926][ T6828] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.727417][ T6828] bond0 (unregistering): Released all slaves
[  348.764845][ T6828] bond1 (unregistering): Released all slaves
[  349.007067][   T29] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  349.047455][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1
[  349.210199][   T29] usb 2-1: too many configurations: 133, using maximum allowed: 8
[  349.273210][   T29] usb 2-1: unable to read config index 0 descriptor/start: -61
[  349.313650][   T29] usb 2-1: can't read configurations, error -61
[  349.494973][ T6828] hsr_slave_0: left promiscuous mode
[  349.509517][   T29] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[  349.529201][ T6828] hsr_slave_1: left promiscuous mode
[  349.544596][ T6828] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.569422][ T6828] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.598545][ T6828] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.622463][ T6828] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.705115][   T29] usb 2-1: too many configurations: 133, using maximum allowed: 8
[  349.734997][   T29] usb 2-1: unable to read config index 0 descriptor/start: -61
[  349.737950][ T6828] veth1_macvtap: left promiscuous mode
[  349.751784][   T29] usb 2-1: can't read configurations, error -61
[  349.754466][ T6828] veth0_macvtap: left promiscuous mode
[  349.773569][   T29] usb usb2-port1: attempt power cycle
[  349.779471][ T5632] Bluetooth: hci3: unexpected event for opcode 0x0c46
[  349.782782][ T6828] veth1_vlan: left promiscuous mode
[  349.795991][ T9226] netlink: 40 bytes leftover after parsing attributes in process `syz.2.892'.
[  349.805520][ T6828] veth0_vlan: left promiscuous mode
[  349.911765][ T5632] Bluetooth: hci4: command tx timeout
[  349.969546][ T9233] trusted_key: encrypted_key: insufficient parameters specified
[  349.997335][ T9233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.011331][ T9233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.159874][   T29] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  350.281517][   T29] usb 2-1: too many configurations: 133, using maximum allowed: 8
[  350.330015][   T29] usb 2-1: unable to read config index 0 descriptor/start: -61
[  350.344690][   T29] usb 2-1: can't read configurations, error -61
[  350.460521][ T6828] team0 (unregistering): Port device team_slave_1 removed
[  350.488881][ T6828] team0 (unregistering): Port device team_slave_0 removed
[  350.504964][   T29] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  350.547704][   T29] usb 2-1: too many configurations: 133, using maximum allowed: 8
[  350.647352][   T29] usb 2-1: unable to read config index 0 descriptor/start: -61
[  350.661024][   T29] usb 2-1: can't read configurations, error -61
[  350.668013][   T29] usb usb2-port1: unable to enumerate USB device
[  350.743640][ T9229] bridge2: entered promiscuous mode
[  350.749910][ T9229] bridge2: entered allmulticast mode
[  350.762180][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2
[  351.058873][ T9250] netlink: 'syz.4.895': attribute type 1 has an invalid length.
[  351.259672][ T9193] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.270264][ T9193] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.278680][ T9193] bridge_slave_0: entered allmulticast mode
[  351.305350][ T9193] bridge_slave_0: entered promiscuous mode
[  351.332717][ T5722] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  351.379016][ T9193] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.430233][ T9193] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.437499][ T9193] bridge_slave_1: entered allmulticast mode
[  351.492259][ T9193] bridge_slave_1: entered promiscuous mode
[  351.508851][ T5722] usb 5-1: Using ep0 maxpacket: 8
[  351.524883][ T5722] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  351.540175][ T5722] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  351.570625][ T5722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  351.591051][ T5722] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  351.604481][ T5722] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  351.619197][ T5722] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  351.636007][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.689698][ T6828] IPVS: stop unused estimator thread 0...
[  351.752664][ T9193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.781049][ T9259] netlink: 'syz.0.896': attribute type 10 has an invalid length.
[  351.831417][ T9259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.896'.
[  351.886474][ T9193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.993234][ T5632] Bluetooth: hci4: command tx timeout
[  352.114729][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.169143][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.301826][ T9193] team0: Port device team_slave_0 added
[  352.328991][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  352.349000][ T9193] team0: Port device team_slave_1 added
[  352.360265][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  352.635962][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_0
[  352.659560][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  352.690840][ T9193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  352.806736][ T9278] netlink: 128 bytes leftover after parsing attributes in process `syz.1.897'.
[  352.966798][ T9278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  353.067172][ T9193] batman_adv: batadv0: Adding interface: batadv_slave_1
[  353.094408][ T9193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  353.103733][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'.
[  353.220207][ T9193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  353.315080][ T9286] netlink: 'syz.2.900': attribute type 10 has an invalid length.
[  353.365550][ T9290] netlink: 'syz.2.900': attribute type 10 has an invalid length.
[  353.483491][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3
[  353.543441][ T9286] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  353.566343][ T9286] team0: Port device netdevsim1 added
[  353.590892][ T9290] team0: Port device netdevsim1 removed
[  353.626085][ T9290] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  353.670582][ T9290] .`: (slave netdevsim1): Enslaving as an active interface with an up link
[  353.859280][ T9193] hsr_slave_0: entered promiscuous mode
[  353.875711][ T9193] hsr_slave_1: entered promiscuous mode
[  353.900452][ T9193] debugfs: 'hsr0' already exists in 'hsr'
[  353.913069][ T9193] Cannot create hsr debugfs directory
[  354.068576][ T5632] Bluetooth: hci4: command tx timeout
[  354.395102][ T5722] usb 5-1: usb_control_msg returned -71
[  354.456404][ T5722] usbtmc 5-1:16.0: can't read capabilities
[  354.547194][ T9303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.903'.
[  354.705390][ T5722] usb 5-1: USB disconnect, device number 69
[  356.105668][ T9323] netlink: 'syz.2.905': attribute type 1 has an invalid length.
[  356.150124][ T5632] Bluetooth: hci4: command tx timeout
[  356.175151][ T9324] netlink: 128 bytes leftover after parsing attributes in process `syz.4.906'.
[  356.210893][ T9324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  356.264305][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.2.905'.
[  356.314943][ T9323] netlink: 'syz.2.905': attribute type 10 has an invalid length.
[  356.343881][ T9323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.905'.
[  356.536481][ T9323] dummy0: entered promiscuous mode
[  356.566478][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4
[  357.215494][ T9193] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  357.228018][ T9193] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  357.237184][ T9193] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  357.286988][ T9193] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  357.335390][ T9193] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  357.371851][ T9193] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  357.404908][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'.
[  357.437515][ T9343] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  357.465150][ T9193] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  357.509808][ T9193] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  357.622474][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state
[  357.630013][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state
[  357.795778][ T9348] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  357.817738][ T9348] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  357.938412][ T6815] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  357.962430][ T6815] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.034842][ T9354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.188671][   T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.225997][   T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.340314][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.359902][   T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.371592][   T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.432015][ T9193] 8021q: adding VLAN 0 to HW filter on device team0
[  358.453680][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.460946][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.501962][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.509232][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.562505][   T48] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  358.572870][   T48] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  358.699360][ T9378] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  358.761826][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.061419][ T9193] veth0_vlan: entered promiscuous mode
[  359.121292][ T9193] veth1_vlan: entered promiscuous mode
[  359.369343][ T9193] veth0_macvtap: entered promiscuous mode
[  359.482139][ T9193] veth1_macvtap: entered promiscuous mode
[  359.757655][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_0
[  359.886924][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.111136][   T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.300973][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  360.342102][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.421255][ T6815] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.787586][ T1010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  360.806222][ T1010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.071092][ T1010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.096165][ T1010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.241871][ T9418] netlink: 'syz.2.924': attribute type 1 has an invalid length.
[  362.378771][ T9428] netlink: 'syz.1.926': attribute type 4 has an invalid length.
[  362.445329][ T9429] netlink: 28 bytes leftover after parsing attributes in process `syz.2.924'.
[  362.468854][ T5722] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  362.608687][ T9425] bond2: (slave geneve3): making interface the new active one
[  362.635517][ T9425] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  362.670540][ T6815] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  362.683380][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.715244][   T48] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  362.718626][ T5689] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  362.737482][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.748760][   T48] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  362.757949][ T5722] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  362.772237][   T48] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  362.786796][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.804162][ T5722] usb 5-1: config 0 descriptor??
[  362.943585][ T5689] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  362.991693][ T5689] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  363.035078][ T5689] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  363.078100][ T5689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.159799][ T9430] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22
[  363.236723][ T5689] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  363.713444][ T9430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.740374][ T5722] cp2112 0003:10C4:EA90.0016: item fetching failed at offset 3/7
[  363.779227][ T9430] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.788467][ T5722] cp2112 0003:10C4:EA90.0016: parse failed
[  363.810094][ T5722] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -22
[  364.164983][ T9415] netlink: 'syz.4.925': attribute type 10 has an invalid length.
[  364.233157][ T9415] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  364.255966][ T5722] usb 1-1: USB disconnect, device number 49
[  364.382603][ T9440] atomic_op ffff8880232ad998 conn xmit_atomic 0000000000000000
[  364.410945][  T808] usb 5-1: USB disconnect, device number 70
[  364.726857][ T9459] netlink: 56 bytes leftover after parsing attributes in process `syz.2.930'.
[  364.757307][ T9459] netlink: 56 bytes leftover after parsing attributes in process `syz.2.930'.
[  365.427797][ T9478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.452008][ T9475] kvm: pic: level sensitive irq not supported
[  365.455079][ T9475] kvm: pic: single mode not supported
[  365.473309][ T9478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.491222][ T9475] kvm: pic: single mode not supported
[  365.491446][ T9475] kvm: pic: single mode not supported
[  365.498882][ T9475] kvm: pic: level sensitive irq not supported
[  365.550319][ T9475] kvm: pic: level sensitive irq not supported
[  365.938336][    T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  366.121251][    T9] usb 2-1: Using ep0 maxpacket: 32
[  366.139723][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  366.179919][    T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  366.196359][    T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  366.205797][    T9] usb 2-1: Product: syz
[  366.210546][    T9] usb 2-1: Manufacturer: syz
[  366.215418][    T9] usb 2-1: SerialNumber: syz
[  366.253370][    T9] usb 2-1: config 0 descriptor??
[  366.258622][  T808] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  366.279861][ T9483] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  366.380905][    T9] hub 2-1:0.0: bad descriptor, ignoring hub
[  366.398483][  T808] usb 6-1: device descriptor read/64, error -71
[  366.405482][    T9] hub 2-1:0.0: probe with driver hub failed with error -5
[  366.658417][  T808] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  366.821366][  T808] usb 6-1: device descriptor read/64, error -71
[  366.941298][  T808] usb usb6-port1: attempt power cycle
[  367.236153][ T9501] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  367.260873][ T9501] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  367.278093][ T9501] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  367.289230][  T808] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  367.302430][ T9501] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  367.326628][ T9501] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  367.332102][  T808] usb 6-1: device descriptor read/8, error -71
[  367.385676][ T9501] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  367.599050][  T808] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  367.649449][  T808] usb 6-1: device descriptor read/8, error -71
[  367.789615][  T808] usb usb6-port1: unable to enumerate USB device
[  368.788334][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout
[  369.268321][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout
[  369.348909][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout
[  369.355254][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout
[  369.984360][ T5722] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  370.195566][ T5722] usb 6-1: Using ep0 maxpacket: 16
[  370.258894][ T5722] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  370.313058][ T5722] usb 6-1: config 16 has no interfaces?
[  370.342727][ T5689] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  370.392846][ T5722] usb 6-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c
[  370.446168][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.506046][ T5722] usb 6-1: Product: syz
[  370.527027][ T5722] usb 6-1: Manufacturer: syz
[  370.560544][ T5722] usb 6-1: SerialNumber: syz
[  370.625345][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  370.692579][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  370.694601][ T5689] usb 1-1: config 0 has an invalid interface number: 83 but max is 0
[  370.734281][ T5689] usb 1-1: config 0 has no interface number 0
[  370.808365][ T5689] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 4
[  370.850680][ T5689] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid maxpacket 1014, setting to 64
[  370.866432][   T29] usb 2-1: USB disconnect, device number 51
[  370.906772][ T5689] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  371.008716][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.020467][ T5689] usb 1-1: Product: syz
[  371.052958][ T5689] usb 1-1: Manufacturer: syz
[  371.095271][ T5689] usb 1-1: SerialNumber: syz
[  371.214610][ T5689] usb 1-1: config 0 descriptor??
[  371.234604][ T9559] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22
[  371.327335][ T5689] redrat3 1-1:0.83: Couldn't find all endpoints
[  371.428624][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout
[  371.821851][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.887737][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.955526][ T9559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.044919][ T9559] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.080853][ T9578] syzkaller0: entered promiscuous mode
[  372.101003][ T9578] syzkaller0: entered allmulticast mode
[  372.134860][ T5711] usb 1-1: USB disconnect, device number 50
[  373.234389][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.302989][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.358124][ T9593] can: request_module (can-proto-0) failed.
[  373.459020][ T9598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  373.518312][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout
[  373.530689][ T9598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  373.941044][ T5722] usb 6-1: USB disconnect, device number 6
[  374.302784][ T9604] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  374.324613][ T9604] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  374.345844][ T9604] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  374.378718][ T9604] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  374.668394][ T5722] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  374.838439][ T5722] usb 6-1: Using ep0 maxpacket: 8
[  374.857694][ T5722] usb 6-1: config 0 has no interfaces?
[  374.873618][ T5722] usb 6-1: config 0 has no interfaces?
[  374.893517][ T5722] usb 6-1: config 0 has no interfaces?
[  374.916351][ T5722] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  374.946840][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.977709][ T5722] usb 6-1: Product: syz
[  374.990122][ T5722] usb 6-1: Manufacturer: syz
[  375.003999][ T5722] usb 6-1: SerialNumber: syz
[  375.034908][ T5722] usb 6-1: config 0 descriptor??
[  375.065885][ T9611] bridge0: port 1(vlan0) entered blocking state
[  375.077217][ T5689] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  375.149840][ T9611] bridge0: port 1(vlan0) entered disabled state
[  375.156361][ T9611] vlan0: entered allmulticast mode
[  375.244311][ T9611] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  375.280015][ T9611] vlan0: entered promiscuous mode
[  375.307463][ T9615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.314366][ T5689] usb 5-1: unable to get BOS descriptor or descriptor too short
[  375.332758][ T5711] usb 6-1: USB disconnect, device number 7
[  375.336317][ T5689] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  375.366175][ T5689] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  375.383442][ T9611] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  375.386451][ T9632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.410052][ T9615] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.453931][ T5689] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  375.473986][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.476487][ T9632] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.510597][ T5689] usb 5-1: Product: syz
[  375.515761][ T5689] usb 5-1: Manufacturer: syz
[  375.527365][ T5689] usb 5-1: SerialNumber: syz
[  375.584479][ T5689] usb 5-1: selecting invalid altsetting 1
[  375.596693][ T5689] usb 5-1: unit 6 not found!
[  375.668983][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout
[  375.878312][ T5711] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  376.041952][ T5711] usb 6-1: Using ep0 maxpacket: 8
[  376.055988][ T5711] usb 6-1: config 5 has an invalid interface number: 78 but max is 1
[  376.073537][ T5711] usb 6-1: config 5 has an invalid interface number: 207 but max is 1
[  376.093388][ T5711] usb 6-1: config 5 has no interface number 0
[  376.100471][ T5711] usb 6-1: config 5 has no interface number 1
[  376.107056][ T5711] usb 6-1: config 5 interface 78 altsetting 128 endpoint 0xC has an invalid bInterval 128, changing to 11
[  376.134294][ T5711] usb 6-1: config 5 interface 207 altsetting 217 has a duplicate endpoint with address 0xC, skipping
[  376.171578][ T5711] usb 6-1: config 5 interface 78 has no altsetting 0
[  376.192519][ T5711] usb 6-1: config 5 interface 207 has no altsetting 0
[  376.210976][ T5711] usb 6-1: New USB device found, idVendor=1b3d, idProduct=013a, bcdDevice= 6.e3
[  376.238300][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.261697][ T5711] usb 6-1: Product: syz
[  376.272674][ T5711] usb 6-1: Manufacturer: syz
[  376.287435][ T5711] usb 6-1: SerialNumber: syz
[  376.319519][ T5711] usb 6-1: Interface #78 referenced by multiple IADs
[  376.389830][ T5638] Bluetooth: hci3: command 0x0c1a tx timeout
[  376.396156][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout
[  376.402666][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout
[  376.459074][ T5689] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  376.549391][ T5711] ftdi_sio 6-1:5.78: FTDI USB Serial Device converter detected
[  376.563444][ T5711] ftdi_sio ttyUSB0: unknown device type: 0x6e3
[  376.596562][ T5711] hub 6-1:5.207: Invalid hub with more than one config or interface
[  376.605008][ T5711] hub 6-1:5.207: probe with driver hub failed with error -22
[  376.615137][ T5711] ftdi_sio 6-1:5.207: FTDI USB Serial Device converter detected
[  376.625371][ T5711] ftdi_sio ttyUSB1: unknown device type: 0x6e3
[  376.645023][ T5711] usb 6-1: USB disconnect, device number 8
[  376.656148][ T5711] ftdi_sio 6-1:5.78: device disconnected
[  376.670324][ T5711] ftdi_sio 6-1:5.207: device disconnected
[  376.994560][ T5689] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  377.064199][ T5689] usb 5-1: USB disconnect, device number 71
[  377.290854][ T5711] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  377.292337][ T5643] udevd[5643]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  377.493243][ T5711] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  377.543551][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.633468][ T5711] usb 1-1: config 0 descriptor??
[  377.675441][ T5711] gspca_main: cpia1-2.14.0 probing 0813:0001
[  377.682219][ T9661] bridge_slave_1 (unregistering): left allmulticast mode
[  377.706040][ T9661] bridge_slave_1 (unregistering): left promiscuous mode
[  377.725451][ T9661] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.735148][ T9665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.772934][ T9665] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.083454][ T5711] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  378.498760][ T5711] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  378.580960][ T9679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.591757][ T9679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  378.721592][ T9671] raw_sendmsg: syz.4.968 forgot to set AF_INET. Fix it!
[  378.793162][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  378.799759][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  378.959024][ T5711] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  378.988756][ T5689] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  379.129917][ T5711] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  379.150672][ T5711] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.160817][ T5711] usb 6-1: Product: syz
[  379.170167][ T5711] usb 6-1: Manufacturer: syz
[  379.177210][ T1187] usb 1-1: USB disconnect, device number 51
[  379.180229][ T5711] usb 6-1: SerialNumber: syz
[  379.239487][ T5689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  379.278954][ T5689] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  379.308413][ T5689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.326486][ T5689] usb 2-1: config 0 descriptor??
[  379.359463][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.379394][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.398147][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.414983][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.555039][ T5689] usbhid 2-1:0.0: can't add hid device: -71
[  379.566694][ T5689] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  379.595404][ T5689] usb 2-1: USB disconnect, device number 52
[  379.616954][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.625860][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.657923][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.692057][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.725083][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.745002][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.775371][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.792484][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.835226][ T5711] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  379.853293][ T5711] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  379.880898][ T5711] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  379.904618][ T5711] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  379.919923][ T5711] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  379.936598][ T5711] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  379.957921][ T5711] usb 6-1: USB disconnect, device number 9
[  380.205845][ T9720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.220738][ T9720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.408664][ T5722] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  380.591918][ T5722] usb 2-1: Using ep0 maxpacket: 8
[  380.614373][ T5722] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[  380.660572][ T5722] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[  380.676799][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.703460][ T5722] usb 2-1: Product: syz
[  380.716292][ T5722] usb 2-1: Manufacturer: syz
[  380.738430][ T5722] usb 2-1: SerialNumber: syz
[  380.770435][ T5722] usb 2-1: config 0 descriptor??
[  380.797088][ T5722] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[  380.973351][ T9729] netlink: 'syz.2.984': attribute type 12 has an invalid length.
[  381.015083][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  381.053682][ T9729] netlink: 'syz.2.984': attribute type 12 has an invalid length.
[  381.079970][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  381.089162][ T9729] netlink: 'syz.2.984': attribute type 12 has an invalid length.
[  381.134398][ T9739] netlink: 36 bytes leftover after parsing attributes in process `syz.5.983'.
[  381.183851][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  381.245906][ T9729] netlink: 'syz.2.984': attribute type 12 has an invalid length.
[  381.272357][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  381.296659][ T9729] netlink: 'syz.2.984': attribute type 12 has an invalid length.
[  381.304444][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  381.345533][ T9729] netlink: 'syz.2.984': attribute type 12 has an invalid length.
[  381.365916][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  381.390883][ T9729] netlink: 'syz.2.984': attribute type 12 has an invalid length.
[  381.398949][ T9749] netlink: 'syz.4.985': attribute type 7 has an invalid length.
[  381.413760][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  381.458323][ T9729] netlink: 'syz.2.984': attribute type 12 has an invalid length.
[  381.495445][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  381.587432][ T9729] netlink: 'syz.2.984': attribute type 12 has an invalid length.
[  381.622937][ T9729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.984'.
[  381.988543][   T31] INFO: task kworker/1:8:5704 blocked for more than 143 seconds.
[  382.047706][   T31]       Tainted: G             L      syzkaller #0
[  382.095025][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  382.120216][   T31] task:kworker/1:8     state:D stack:21376 pid:5704  tgid:5704  ppid:2      task_flags:0x4208060 flags:0x00080000
[  382.177358][ T5722] gspca_zc3xx: reg_w_i err -71
[  382.177501][   T31] Workqueue: usb_hub_wq hub_event
[  382.213414][   T31] Call Trace:
[  382.218142][   T31]  <TASK>
[  382.228684][   T31]  __schedule+0x17d9/0x56c0
[  382.240911][   T31]  ? __lock_acquire+0x683/0x2cf0
[  382.257258][   T31]  ? device_initial_probe+0xa1/0xd0
[  382.277384][   T31]  ? really_probe+0x254/0xae0
[  382.283344][   T31]  ? check_noncircular+0xda/0x150
[  382.298353][   T31]  ? __pfx___schedule+0x10/0x10
[  382.310581][   T31]  ? schedule+0x90/0x2b0
[  382.328269][   T31]  schedule+0x164/0x2b0
[  382.335219][   T31]  schedule_timeout+0xc0/0x2c0
[  382.352292][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  382.357861][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  382.364943][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.372247][   T31]  ? wait_for_completion+0x272/0x5e0
[  382.378769][   T31]  wait_for_completion+0x2ca/0x5e0
[  382.384066][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  382.395962][   T31]  ? kobject_put+0x50f/0x550
[  382.402293][   T31]  i2c_del_adapter+0x281/0x430
[  382.407432][   T31]  ? __pfx_i2c_del_adapter+0x10/0x10
[  382.414290][   T31]  ? kfree+0x4d/0x640
[  382.419023][   T31]  dvb_usb_i2c_exit+0x64/0xb0
[  382.424602][   T31]  dvb_usb_device_exit+0x1cb/0x350
[  382.430287][   T31]  ? __pfx_dvb_usb_device_exit+0x10/0x10
[  382.436047][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  382.441859][   T31]  cxusb_probe+0x60f/0x710
[  382.446579][   T31]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  382.454075][   T31]  ? __pfx_cxusb_probe+0x10/0x10
[  382.459443][   T31]  ? __pm_runtime_set_status+0x994/0xc80
[  382.465402][   T31]  usb_probe_interface+0x653/0xc60
[  382.472061][   T31]  ? __pfx_usb_probe_interface+0x10/0x10
[  382.477982][   T31]  really_probe+0x254/0xae0
[  382.484099][   T31]  __driver_probe_device+0x1e8/0x360
[  382.489843][   T31]  driver_probe_device+0x4f/0x240
[  382.495020][   T31]  __device_attach_driver+0x270/0x410
[  382.500994][   T31]  bus_for_each_drv+0x258/0x2f0
[  382.506038][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  382.512634][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  382.519654][   T31]  ? lockdep_hardirqs_on+0x7a/0x110
[  382.525785][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  382.532181][   T31]  __device_attach+0x2c4/0x450
[  382.537229][   T31]  ? __pfx___device_attach+0x10/0x10
[  382.543010][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[  382.554626][   T31]  ? _raw_spin_unlock+0x28/0x50
[  382.561014][   T31]  device_initial_probe+0xa1/0xd0
[  382.566322][   T31]  bus_probe_device+0x12a/0x220
[  382.571658][   T31]  device_add+0x7d7/0xb80
[  382.576190][   T31]  usb_set_configuration+0x1ad8/0x2180
[  382.583814][   T31]  usb_generic_driver_probe+0x8d/0x150
[  382.590900][   T31]  usb_probe_device+0x1c3/0x3b0
[  382.596012][   T31]  ? __pfx_usb_probe_device+0x10/0x10
[  382.601860][   T31]  really_probe+0x254/0xae0
[  382.606621][   T31]  __driver_probe_device+0x1e8/0x360
[  382.612322][   T31]  driver_probe_device+0x4f/0x240
[  382.617589][   T31]  __device_attach_driver+0x270/0x410
[  382.623937][   T31]  bus_for_each_drv+0x258/0x2f0
[  382.633570][   T31]  ? __pfx___device_attach_driver+0x10/0x10
[  382.640027][   T31]  ? __pfx_bus_for_each_drv+0x10/0x10
[  382.645695][   T31]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  382.652021][   T31]  __device_attach+0x2c4/0x450
[  382.657058][   T31]  ? __pfx___device_attach+0x10/0x10
[  382.662812][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[  382.669514][   T31]  ? _raw_spin_unlock+0x28/0x50
[  382.674504][   T31]  device_initial_probe+0xa1/0xd0
[  382.680136][   T31]  bus_probe_device+0x12a/0x220
[  382.685120][   T31]  device_add+0x7d7/0xb80
[  382.691174][   T31]  usb_new_device+0x99d/0x1620
[  382.696182][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  382.703715][   T31]  ? __pfx_usb_new_device+0x10/0x10
[  382.709232][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.714676][   T31]  hub_event+0x28e8/0x4d30
[  382.720153][   T31]  ? do_raw_spin_unlock+0xf5/0x210
[  382.725576][   T31]  ? __pfx_hub_event+0x10/0x10
[  382.731889][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  382.737928][   T31]  ? rcu_is_watching+0x15/0xb0
[  382.745446][   T31]  ? process_scheduled_works+0xa20/0x14e0
[  382.751723][   T31]  process_scheduled_works+0xa8e/0x14e0
[  382.757370][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  382.763645][   T31]  ? assign_work+0x3cf/0x5d0
[  382.768322][   T31]  worker_thread+0xa47/0xfb0
[  382.773045][   T31]  ? __kthread_parkme+0x71/0x1f0
[  382.779763][   T31]  kthread+0x388/0x470
[  382.783894][   T31]  ? __pfx_worker_thread+0x10/0x10
[  382.789587][   T31]  ? __pfx_kthread+0x10/0x10
[  382.794282][   T31]  ret_from_fork+0x514/0xb70
[  382.800536][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  382.805715][   T31]  ? __switch_to+0xc89/0x1420
[  382.811720][ T5722] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  382.818031][   T31]  ? __pfx_kthread+0x10/0x10
[  382.822954][ T5722] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  382.832110][   T31]  ret_from_fork_asm+0x1a/0x30
[  382.837227][   T31]  </TASK>
[  382.841138][   T31] 
[  382.841138][   T31] Showing all locks held in the system:
[  382.854986][ T5722] usb 2-1: USB disconnect, device number 53
[  382.866766][   T31] 1 lock held by ksoftirqd/1/23:
[  382.884637][   T31] 1 lock held by khungtaskd/31:
[  382.897568][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  382.939259][   T31] 2 locks held by getty/5378:
[  382.944084][   T31]  #0: ffff8880324d40a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  382.954148][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  382.967781][   T31] 5 locks held by kworker/1:8/5704:
[  382.973349][   T31]  #0: ffff888022ed9d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  382.985348][   T31]  #1: ffffc90004b57c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  382.999673][   T31]  #2: ffff888029f701d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30
[  383.011794][   T31]  #3: ffff88807f2151d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  383.022862][   T31]  #4: ffff88807c4951a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450
[  383.034727][   T31] 3 locks held by kworker/0:5/5722:
[  383.045219][   T31]  #0: ffff888022ed9d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0
[  383.059494][   T31]  #1: ffff8880b8624440 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x57/0x7d0
[  383.072132][   T31]  #2: ffff8880b8628ea0 (lock#6){..-.}-{3:3}, at: kcov_remote_stop+0x69/0x6c0
[  383.083642][   T31] 4 locks held by udevd/6251:
[  383.089315][   T31]  #0: ffff88807eeeef38 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0
[  383.105067][   T31]  #1: ffff888054927880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420
[  383.128253][   T31]  #2: ffff88807e3d7b48 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420
[  383.146987][   T31]  #3: ffff88807f2151d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  383.163658][   T31] 3 locks held by kworker/u8:18/6828:
[  383.178369][   T31] 
[  383.180841][   T31] =============================================
[  383.180841][   T31] 
[  383.203610][   T31] NMI backtrace for cpu 0
[  383.203632][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  383.203658][   T31] Tainted: [L]=SOFTLOCKUP
[  383.203665][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  383.203676][   T31] Call Trace:
[  383.203684][   T31]  <TASK>
[  383.203692][   T31]  dump_stack_lvl+0xe8/0x150
[  383.203726][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  383.203804][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  383.203835][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[  383.203858][   T31]  sys_info+0x135/0x170
[  383.203884][   T31]  watchdog+0xfd7/0x1030
[  383.203915][   T31]  ? watchdog+0x1c7/0x1030
[  383.203943][   T31]  kthread+0x388/0x470
[  383.203970][   T31]  ? __pfx_watchdog+0x10/0x10
[  383.203991][   T31]  ? __pfx_kthread+0x10/0x10
[  383.204018][   T31]  ret_from_fork+0x514/0xb70
[  383.204047][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  383.204075][   T31]  ? __switch_to+0xc89/0x1420
[  383.204101][   T31]  ? __pfx_kthread+0x10/0x10
[  383.204129][   T31]  ret_from_fork_asm+0x1a/0x30
[  383.204163][   T31]  </TASK>
[  383.204169][   T31] Sending NMI from CPU 0 to CPUs 1:
[  383.329017][    C1] NMI backtrace for cpu 1
[  383.329037][    C1] CPU: 1 UID: 0 PID: 5609 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  383.329059][    C1] Tainted: [L]=SOFTLOCKUP
[  383.329064][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  383.329073][    C1] RIP: 0010:hrtimer_start_range_ns_common+0x246/0xb90
[  383.329096][    C1] Code: 04 eb 08 e8 ac a9 13 00 41 b4 01 44 8b 74 24 0c 44 89 f6 83 e6 01 31 ff e8 d7 ad 13 00 41 f6 c6 01 75 07 e8 8c a9 13 00 eb 72 <e8> 85 a9 13 00 48 8b 04 24 4c 8d 70 0c 4c 89 f0 48 c1 e8 03 42 0f
[  383.329109][    C1] RSP: 0018:ffffc90003af7b48 EFLAGS: 00000002
[  383.329124][    C1] RAX: ffffffff81b36b39 RBX: ffffc90003af7d40 RCX: 0000000000000000
[  383.329135][    C1] RDX: ffff888029871f00 RSI: 0000000000000001 RDI: 0000000000000000
[  383.329145][    C1] RBP: 0000000000000000 R08: ffff8880b8728280 R09: 0000000000000004
[  383.329154][    C1] R10: dffffc0000000000 R11: fffff5200075ef68 R12: ffff8880b8728101
[  383.329166][    C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 00000000000f4240
[  383.329176][    C1] FS:  000055556bf1e540(0000) GS:ffff88812504b000(0000) knlGS:0000000000000000
[  383.329189][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  383.329200][    C1] CR2: 00007f5fc65ef2f8 CR3: 00000000747fa000 CR4: 00000000003526f0
[  383.329215][    C1] Call Trace:
[  383.329222][    C1]  <TASK>
[  383.329234][    C1]  hrtimer_start_range_ns_user+0x113/0x430
[  383.329253][    C1]  do_nanosleep+0x16c/0x6a0
[  383.329270][    C1]  ? do_nanosleep+0x7e/0x6a0
[  383.329285][    C1]  ? __pfx_do_nanosleep+0x10/0x10
[  383.329300][    C1]  ? __asan_memset+0x22/0x50
[  383.329346][    C1]  ? __hrtimer_setup+0x1b7/0x260
[  383.329361][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  383.329379][    C1]  hrtimer_nanosleep+0x18f/0x3a0
[  383.329397][    C1]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  383.329416][    C1]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  383.329437][    C1]  __se_sys_clock_nanosleep+0x35b/0x3b0
[  383.329457][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  383.329477][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.329514][    C1]  do_syscall_64+0x174/0x580
[  383.329577][    C1]  ? clear_bhb_loop+0x40/0x90
[  383.329593][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  383.329608][    C1] RIP: 0033:0x7f3498f59197
[  383.329621][    C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  383.329633][    C1] RSP: 002b:00007ffe1f59bc80 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6
[  383.329649][    C1] RAX: ffffffffffffffda RBX: 000055556bf1e540 RCX: 00007f3498f59197
[  383.329660][    C1] RDX: 00007ffe1f59bcc0 RSI: 0000000000000000 RDI: 0000000000000000
[  383.329669][    C1] RBP: 00007ffe1f59c1a0 R08: 0000000000000000 R09: 0000000000000000
[  383.329679][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[  383.329688][    C1] R13: 00007ffe1f59bcfc R14: 00007ffe1f59bd90 R15: 0000000000000000
[  383.329704][    C1]  </TASK>
[  383.630798][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  383.637705][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  383.648406][   T31] Tainted: [L]=SOFTLOCKUP
[  383.652751][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  383.662824][   T31] Call Trace:
[  383.666253][   T31]  <TASK>
[  383.669224][   T31]  vpanic+0x56c/0xa60
[  383.673260][   T31]  ? __pfx___schedule+0x10/0x10
[  383.678149][   T31]  ? __pfx_vpanic+0x10/0x10
[  383.682692][   T31]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[  383.688881][   T31]  panic+0xc5/0xd0
[  383.692633][   T31]  ? __pfx_panic+0x10/0x10
[  383.697081][   T31]  ? preempt_schedule_common+0x82/0xd0
[  383.702568][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  383.707965][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[  383.714146][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[  383.720498][   T31]  watchdog+0x1030/0x1030
[  383.724945][   T31]  ? watchdog+0x1c7/0x1030
[  383.729394][   T31]  kthread+0x388/0x470
[  383.733512][   T31]  ? __pfx_watchdog+0x10/0x10
[  383.738210][   T31]  ? __pfx_kthread+0x10/0x10
[  383.742829][   T31]  ret_from_fork+0x514/0xb70
[  383.747456][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  383.752591][   T31]  ? __switch_to+0xc89/0x1420
[  383.757291][   T31]  ? __pfx_kthread+0x10/0x10
[  383.761902][   T31]  ret_from_fork_asm+0x1a/0x30
[  383.766691][   T31]  </TASK>
[  383.769884][   T31] Kernel Offset: disabled
[  383.774232][   T31] Rebooting in 86400 seconds..