last executing test programs:

9m1.404023308s ago: executing program 0 (id=306):
socket$packet(0x11, 0x2, 0x300)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000004c40)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x4, 0x6, "ace260", 0x44, 0x2f, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x23, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x1, {0x3e}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0x48, 0x1, 0x1, 0x0, 0x1, 0x61}, 0x2, {0xfffffffb, 0xf587, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7e)
syz_usb_connect(0x3, 0x146, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x0)

8m58.275491452s ago: executing program 0 (id=313):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x7d, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xd4f7, 0x0, 0x10, 0x5}]})
socket$igmp(0x2, 0x3, 0x2) (async)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x7d, 0x2, @vifc_lcl_addr=@private=0xa010102, @multicast2}, 0x10) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xd4f7, 0x0, 0x10, 0x5}]}) (async)

8m58.18387391s ago: executing program 0 (id=315):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0xfffffffffffffe44)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94", 0x5)
r3 = accept$alg(r2, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0xcb, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r5=>0x0, 0x0)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0)
flock(r6, 0x5)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x12)
flock(r7, 0x2)
r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_READ_VOLUME(r8, 0x80044d11, &(0x7f0000000040))
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0)
pread64(r9, &(0x7f0000000340)=""/132, 0x84, 0x41)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r6, 0x29, 0x41, 0x0, 0x48)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
r10 = fsopen(&(0x7f0000000140)='mqueue\x00', 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000076000907010000000000000007020000", @ANYRES32=0x0, @ANYBLOB="07000d80"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40}, 0x40000)
r12 = fsmount(r10, 0x1, 0x0)
fchdir(r12)

8m57.283467324s ago: executing program 0 (id=318):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4b}}], 0x18}}], 0x1, 0x8000004)
syz_usb_connect(0x2, 0x59, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0502030109024700010000000009046900000e010000182403010202"], 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2040000, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000500)=0x8, 0x72)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x47}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044004}, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x16)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x210)

8m54.835158533s ago: executing program 0 (id=331):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20000036)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
sendmsg$sock(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000019c0)="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", 0x5de}], 0x1}, 0x90)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f00000000c0)="260f882b000000430f1bd9460f2355c402d1aa045af2440f07460f01c566baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a0f23d00f21f835000000080f23f8", 0x53}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d})
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)})
syz_usb_connect$cdc_ncm(0x0, 0xba, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x2, 0x1, 0xff, 0xe0, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "2a5aaba193"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1c83, 0x81, 0x8, 0xfe}, {0x6, 0x24, 0x1a, 0x800, 0x15}, [@acm={0x4, 0x24, 0x2, 0x1}, @country_functional={0xa, 0x24, 0x7, 0x80, 0x2, [0x1ff, 0x5]}, @mdlm={0x15, 0x24, 0x12, 0x3aab}, @mbim={0xc, 0x24, 0x1b, 0x5, 0x2, 0x4, 0x7, 0x4a2, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x4528, 0x0, 0x6b, 0xfffd, 0x5}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x2, 0x2, 0xaa, 0x4, 0x88}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x80, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x5, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x98, 0x7, 0x7f}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x6, 0x7, 0x80, 0xff, 0xb}, 0x24, &(0x7f0000000200)={0x5, 0xf, 0x24, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "3509bed43f4de7f949320d6f6df718b3"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x10, 0x0, 0x7a, 0x55}]}, 0x2, [{0xf2, &(0x7f0000000340)=@string={0xf2, 0x3, "25a2f8ec415f7e50e79a905aa88b61019400670bcb4c2ec0d085d836524537bec82a9ba17d9be8d711292dfd6ea9ca06e5a73b060d94774fd9f0820be41cb7dc5f59a327592c1568f31fe2d8e20b301017cf9f22ec560b828f6bbbc1d08e021c55daf325e4fbfe5628f20e11bee6206948e590b38339c5cf3055cec17699ab04ab1f6064145dbc10b2cab24daa99dad2719a26a5ded5a407c393675436d2449d5c62856d1ca24056fb10ef40506e245cdf56c6dd64e3f29b8a8a956d3a5291a179cfc849660ef8ffce2138f456c84b48107ef56d6032fce520bcf7f8b94996377841a5eac60580b30cba998820627896"}}, {0x2a, &(0x7f0000000240)=@string={0x2a, 0x3, "d841f966db7104cba9f12f1962d6a64ffbfe3af21fb2b89fb13ce1cb3a2f82ac534063a75149919c"}}]})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

8m54.460733053s ago: executing program 0 (id=335):
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x105000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8", 0xa4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="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", 0x1e5}], 0x1}}], 0x2, 0x2090)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x73bad9a5c442f118, @tid=r3}, &(0x7f00000000c0))
syz_open_procfs$userns(r3, &(0x7f0000000580))
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0))
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x104)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x3, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x8, 0x1, 0x7}, 0xe)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)

8m54.051729643s ago: executing program 32 (id=335):
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffff9c, 0x0, 0x105000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8", 0xa4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0493121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee4000bfb3d32b0181ff", 0x1e5}], 0x1}}], 0x2, 0x2090)
sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x1, 0x10008095, 0x0, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x73bad9a5c442f118, @tid=r3}, &(0x7f00000000c0))
syz_open_procfs$userns(r3, &(0x7f0000000580))
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000021, 0x0, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000ac0))
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x104)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000280)={0x3, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x2, 0xfc, 0x0, 0x8, 0x1, 0x7}, 0xe)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10)

9.901397351s ago: executing program 3 (id=1907):
r0 = getpid()
r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/nfsfs\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000040)={0xc0000001})
sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0xffffffff)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e23, 0xa, @rand_addr=' \x01\x00', 0x8000}}, 0x0, 0x0, 0x3b, 0x0, "c5b74c26a8a1f2d0d61d51fc3e4f505e7cfdf2df6f216946a356fe2bd03922812fddf1e6ce20795e3f0ddcc061dc48d10a90afb6b477fcf6868faf8f48b39be631e7cdfc90b6a393b7f086a48b1ea864"}, 0xd8)
r2 = socket$inet6(0xa, 0xa, 0xffffffff)
ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x5, 0x2003)
syz_usb_connect$cdc_ncm(0x1, 0xa3, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x2, 0x1, 0x3, 0xa0, 0xff, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x6, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x2, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x5e, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x36, 0x7d9}, @obex={0x5, 0x24, 0x15, 0x5}, @obex={0x5, 0x24, 0x15, 0x7}, @country_functional={0x6, 0x24, 0x7, 0x10, 0xfffc}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x42, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x270, 0x8d, 0x3, 0x68}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x110, 0xa1, 0xc, 0x5, 0x60, 0xff}, 0x22, &(0x7f00000002c0)={0x5, 0xf, 0x22, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x2, 0x9}, @ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x5, 0xf, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x8, 0x7, 0x7}]}, 0x9, [{0x1c, &(0x7f0000000300)=@string={0x1c, 0x3, "798bc6adc4b2f3d50b58ad68cf677ce8d70db8f083ee5c7a2303"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x814}}, {0x43, &(0x7f0000000400)=@string={0x43, 0x3, "7e03bdc35842630f6d0c2f3fd1eee2b099054334ae688565754bbeef73f6cee5beb5ba7f2bb8caccf1ac768fc4ec82b02ef680b5ecbd3688f9f80eed7ff9facc64"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x424}}]})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0xa}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x80}, 0x1, 0x0, 0x0, 0x44}, 0xa41f886c9ce65206)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000780)={<r4=>0x0, @in6={{0xa, 0x4e21, 0x501, @loopback, 0x7f}}}, &(0x7f0000000840)=0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000880)={r4, 0xfffffff3}, 0x8)
fcntl$setown(r2, 0x8, r0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000900), r1)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r5, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000)
kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r2, &(0x7f0000000a40)={r1, r2, 0x6})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r3)
sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x2c, r6, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c010}, 0x0)
r7 = socket(0x8, 0x80000, 0x490)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000c00)={0x0, @in={0x2, 0x4e24, @remote}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, @rc={0x1f, @any, 0x2}, 0x6302, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000bc0)='ip6_vti0\x00', 0xfffffffffffffff9, 0xef, 0xb7b})
sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x44, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x38}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x118, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_TUPLE_MASTER={0xa0, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xe}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TUPLE_MASTER={0x4}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x104}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x400}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xc80}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x2c00c0c0}, 0x40000400)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r7)
io_uring_enter(r1, 0x62b4, 0xb9d, 0x2, &(0x7f0000001000)={[0x82]}, 0x8)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001040)={@local, @dev={0xfe, 0x80, '\x00', 0x12}, @empty, 0x4321, 0x81, 0x2, 0x100, 0x40, 0x280000})
bind$inet6(r1, &(0x7f00000010c0)={0xa, 0x4e20, 0xfffff885, @loopback, 0xbc}, 0x1c)
getsockopt$inet6_mreq(r7, 0x29, 0x8f1f5cf60d45726e, &(0x7f0000001140)={@private2, <r8=>0x0}, &(0x7f0000001180)=0x14)
getsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f00000011c0)={@private, @remote, <r9=>0x0}, &(0x7f0000001200)=0xc)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000001280)={'syztnl0\x00', &(0x7f0000001240)={'syztnl0\x00', <r10=>0x0, 0x700, 0x1, 0x0, 0x8, {{0x8, 0x4, 0x3, 0x5, 0x20, 0x65, 0x0, 0xfb, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0x6, "9545d576"}]}}}}})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f00000014c0)={0x120, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x20080000)

9.779502963s ago: executing program 2 (id=1909):
socket(0x2b, 0x1, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x4000000280381, 0x0)
r0 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffd, 0x0, r3}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "601c69859bced002", "d48286fd02541c95afec379bdb3cc0d5646e20970600000418fe7474dc4c3d7b", "80000100", "0100"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r7)

8.80236128s ago: executing program 2 (id=1911):
syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2)
r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000002380)={0x34, &(0x7f0000002180)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000002040)={0x84, &(0x7f0000001c40)={0x20, 0x30, 0x1, "ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x10, 0x1, 0xb, 0x3}, {0x9, 0x5, 0x6, 0x2, 0x10, 0x1a, 0x6, 0x2}, {0x9, 0x5, 0x0, 0x3, 0x8, 0x80, 0x3, 0x1}}}}}}]}}, 0x0)
r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x200000000000011, 0x4000000000080002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'lo\x00', <r6=>0x0})
bind$packet(r4, &(0x7f0000001100)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x3}, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @remote}], 0x10)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000500)={0x14, &(0x7f00000003c0)={0x40, 0x9c0cd76072f79b7d, 0xbc, {0xbc, 0xd, "4f96a781046d060b8c38288a19b93d6e4a04140f292d86694dec308117872e564b92d79e01e18582e22986e54e92451190d340dee5f707cb37699c25f3d1c9f508236013073aadf246e90bd487cfacb002ed1b0438c0f56669a1e181b131ee2c94538dec46bb9ed8c9d66f4bafbe45b6bf1dece4f58f91c5e0f9d35fdde810594a961a560d70767b2733c26ca40365f40c643425f9d080ef49f3933c34fc9163db348801129dec7732c6f9abb9adcdf9eaf9c8e20a030986a259"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x44, &(0x7f0000000740)={0x20, 0x14, 0xbc, "b5381eb2199eaa193b807be507d4358769f65344ad3ca592a65630cb7f0ed6dea0f7ad9f6085db6dc65770bd43d6f21bcaf0f171c995d05cbe21cedaf5a1f6547ed8707f8fa0b34de2a9fd3978f5ec2bd6c1c578af4b63da2b20526945a79e29c6ecadd08bea36a2aa8a621a8cdf24dbea92ae696cc2f55cb98859f731c485252a2b734532e76732a814424ca5a2e3578337a727de4d6957e20b513d1326188e9575de32db67904d7a825e38fd168442849e8a39a39a02e9f6d01cce"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x2e2, 0x0, 0x2, 0x9, 0x1000, 0x9, 0x6, 0x3, 0x3, 0xfffe, 0x3, 0x5}}, &(0x7f0000000040)={0x20, 0x85, 0x4, 0xe5e}, &(0x7f00000006c0)={0x20, 0x83, 0x2}, &(0x7f0000000840)={0x20, 0x87, 0x2, 0x2}, &(0x7f00000008c0)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io$sierra_net(r1, &(0x7f0000000280)={0x14, &(0x7f0000000140)={0x0, 0x24, 0x25, {0x25, 0x22, "3ffddb6c2f3fe110ba51796a00e6ed3ddc57c600aeef3efca53d974c8e6078440bf44a"}}, &(0x7f00000001c0)={0x0, 0x3, 0x7e, @string={0x7e, 0x3, "ba06c503358d6d548c4dbcf84bcb3bcee08e366c46ec3a855ee61d462ab15b5d3fcaf0626a16e597b6a48a7a735db1cc207fba5b72440ba9a74dbf568fc7b1524e036e9dae739484c78bbe71d21709c07ed6b2b0eeb7c1804710cb5cf35f77d125a5173b9ec8bfff009f7a1f364bc740059953337b5595fb68725090"}}}, &(0x7f0000000380)={0x1c, &(0x7f00000002c0)={0x20, 0xf, 0x66, "57758f468dd2e91ec67a15f39a991fd798b2a40616e24fb78d81f8d05fe65b76e511583e184674fea9d5074c4435a6b58421bb93890fcafe97719ba19f05168e4a224a72a20a6c1ac8b85ed3b40890dc1756cf7b77c621eac9b6b9886d2bbee0602d808f911f"}, &(0x7f0000000e00)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000340)={0x21, 0x0, 0x3, "772916"}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.393374586s ago: executing program 1 (id=1913):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000040f30455070000000000010902240001000040b109040000010300010009210101000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x40, 0xa, 0x7, {0x7, 0xe, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)

6.824872714s ago: executing program 3 (id=1914):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0)
syz_usb_ep_write(r1, 0x81, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x2172, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000100)=0x40)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x2000})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00031d0000000003"], 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)

6.572043817s ago: executing program 1 (id=1915):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_usb_connect$uac3(0x2, 0x89, &(0x7f00000001c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x77, 0x3, 0x1, 0xfe, 0x20, 0x1, {0x8, 0xb, 0x2, 0x0, 0x1, 0x27, 0x30, 0xff}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x401, 0x9, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xd, 0xfd, 0x10, {0xa, 0x25, 0x25, 0x7f, 0x5, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xf, 0x0, 0x7f, {0xa, 0x25, 0x25, 0x0, 0xf6, 0x710}}}}}}}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2)
read(r4, &(0x7f0000000080)=""/77, 0xffffff0f)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
kexec_load(0x0, 0x0, 0x0, 0x0)
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xff}, 0x1c)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xff, 0x1c}, 0xc)
r6 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r6, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r6, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r6, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000010c0)={0xd0, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "314aace2dd42c977993f4bdb8ffea3885f653d05a3ba4e408cb7a580e7bd1fbb83"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "4ae7c2076ebb5febf24bea78e2edbc39a2ac59201c47d957edc4683c98de5396c32449d7"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9624}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x840}, 0x20040820)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, r0, 0xda52f000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'})

6.358668264s ago: executing program 5 (id=1918):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d06, 0x0, 0xffffffffffffc74c}]})
r4 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000080)="1b", 0x1}], 0x1, &(0x7f0000001300)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x8efd, 0x0, 0x2, 0x6, 0x9, 0x0, 0xf}}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x48, 0x4044855}, 0x24040052)

6.182439888s ago: executing program 5 (id=1919):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c0001800600010000d28d1ff5fa40c57e0000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (fail_nth: 4)

5.731467253s ago: executing program 5 (id=1920):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r5, 0x0, 0x18)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003540)=@vmx={0x101, 0x0, 0x466, {0x7000, 0x40000, {}, 0x1, 0x9a3}, {"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", "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"}})
r6 = syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x40000000)
syz_usb_control_io$uac1(r6, &(0x7f0000000640)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r6, &(0x7f00000012c0)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYRESHEX=r6], 0x0, 0x0, 0x0}, 0x0)

5.601235275s ago: executing program 2 (id=1921):
socket(0x2b, 0x1, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x4000000280381, 0x0)
r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x4200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/48, 0x30}], 0x2, 0x12})
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
r6 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffd, 0x0, r5}, &(0x7f0000000180)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r6, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "601c69859bced002", "d48286fd02541c95afec379bdb3cc0d5646e20970600000418fe7474dc4c3d7b", "80000100", "0100"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9)

4.871225159s ago: executing program 3 (id=1922):
syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x0, 0x84, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x71, 0xf2, {0x7, 0x25, 0x1, 0x4, 0x3, 0x800}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0xcdd934d246555470, 0x0, 0x4, 0x2, {0x7, 0x25, 0x1, 0x4, 0x4, 0xff}}}}}}}}]}}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a3000000000"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}})

4.683554254s ago: executing program 2 (id=1923):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b700000000000000b702219dfb765542"], 0x0, 0x47, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x2, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00000000000000ffffffae00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

4.519270491s ago: executing program 2 (id=1924):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r3, 0x0, 0xffffffdb)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r4 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3})
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0)

3.638111747s ago: executing program 3 (id=1930):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x20, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x4, "7f2bd326"}, @local=@item_4={0x3, 0x2, 0x4, "0f7df1c1"}, @main=@item_4={0x3, 0x0, 0xa, "749e821c"}, @local=@item_4={0x3, 0x2, 0x0, "8b923659"}, @local=@item_012={0x0, 0x2, 0x8}, @local=@item_4={0x3, 0x2, 0x5, "583ef1a3"}]}}, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)={0x0, 0x11, 0xa4, {0xa4, 0x11, "e6294cb6289c24e60a2e88dd5d1a14662f4f1ec241274303bf727d43e113103ea4f60aee5de5bd7f3872cf6c49339630c0305108b6e8357360d98f3a6c0ad81b6254a7c3bef86a3349937124b05dc2ef8c0a6be745bb77cd8bb3172ad1128d7ede109709de5c2c35849012b07ba056d96895981a2826cf4ee265be7aab46b0251c733defe72f75bca5c95fabfc4d446be3f4f74906052f10dee573654d6c46bb74f5"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f00000002c0)={0x0, 0xf, 0x17, {0x5, 0xf, 0x17, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x2, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x83, 0x2, 0x6, 0x81, 0x4}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x8, 0x42, 0xfc, "c2073c3a", '\\&b^'}}, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf7, 0x90, 0x0, 0x3, 0xc, 0xffff, 0x4}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x40, 0x5, 0xcf, "1ac28dc4ec90f4154132b6b00249d1cc36c6f8d00aed12503d60a49fb3e65fd3f0b6339c9f212d6c6270d54666fe791ed6f3500af96903645d545a622ffa4b94c1b1690a21784b82a6825d86a00a64417b0f3c754d4d79e83503fa424be4ef57acec418eb4f217f1127037fdb3df8e0c3355a881e4d969159a4d680bd2eeb13337504c69cbde839af5fd31b4d56421998a909885902be2285d5684098e298f179dfab552fdfb0b08ec1d7edc9a7f68dafdbcea3fafba9780aaa4213b81c40db02b35968775fdf7f782445415f4646e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb2}, &(0x7f0000000500)={0x0, 0x8, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x160, 0x40, [0x78ff]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000640)={0x40, 0xb, 0x2, "1ce7"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x8}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, '\nD'}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x7ff}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x40}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x8}})
r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000000)={0x17, 0x8c, &(0x7f0000000100)="ff87b84bd0530a066f4f2a19936269c7820c27db0736b9064a59ccb1b3e240e768d99019c95bdc9622fe760cb82ccdc3c76de83b369e9769e6414062c33104d6d4497baf8d22a3cd14d53cefb9a62981cc620459addeab777706e427fd682e5a4c2b0fee9a5ce1f65747b162134b87b742387e7883dac13953ca7634424abf888d32970a337989d0c35b61b3"})
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000004e40)={0xfb, 0x11, 0x1b23, 0x2ff, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})

3.491933348s ago: executing program 5 (id=1932):
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800)
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00')
socket(0x840000000002, 0x3, 0xff)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000140)=0x7)
socket(0x400000000010, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x101000)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0xfffffffe, 0x3136564e, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538)
r4 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, 0x0, &(0x7f00000000c0))
io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e000000580002801400060020010000000000000000000000000002050016000100000014000700fc0200000000000000000000000000000400120005000800", @ANYRES16, @ANYBLOB="080004"], 0x8c}}, 0x0)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
r9 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010141}}}]}, 0x34}}, 0x0)

3.468451734s ago: executing program 4 (id=1933):
socket(0x2b, 0x1, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x4000000280381, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/48, 0x30}], 0x2, 0x12})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffd, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "601c69859bced002", "d48286fd02541c95afec379bdb3cc0d5646e20970600000418fe7474dc4c3d7b", "80000100", "0100"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)

3.415928907s ago: executing program 1 (id=1934):
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
mkdir(0x0, 0xf)
capset(0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x1, 0x4002)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "b197658ca5a48d07", "1426f9988898396d2938b3a7f654ebc6", "6a175def", "3e198c5957b1fd2e"}, 0x28)
write$binfmt_elf64(r3, &(0x7f0000000740)=ANY=[], 0x4a2)
r4 = syz_io_uring_setup(0xb5c, &(0x7f00000000c0)={0x0, 0x9916, 0x0, 0x0, 0x164, 0x0, r3}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000480)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, &(0x7f0000000580)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

2.492177088s ago: executing program 4 (id=1935):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x13, 0xffffffffffffffff, 0x2000)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x400, 0x0)
r0 = syz_io_uring_setup(0xd0, &(0x7f0000000480)={0x0, 0x4525, 0x0, 0x0, 0x12d}, &(0x7f0000000100), &(0x7f0000000640))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000140)={0x5, 0xf}, 0x1) (async)
io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000140)={0x5, 0xf}, 0x1)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000500)={&(0x7f0000000500), &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000500)={&(0x7f0000000500), &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000240)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x47, 0x0, "dd5caa3ff6140d3c9db14f2e2af2abcfc44a7e6c0ab90deba868514eb6bff13f756435d779ca64172c47979b323ef0461eab808a3e5fa94f04f5751f1553c81cfff95dd808c3fc31b29c1d07fcc00b06"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000240)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x47, 0x0, "dd5caa3ff6140d3c9db14f2e2af2abcfc44a7e6c0ab90deba868514eb6bff13f756435d779ca64172c47979b323ef0461eab808a3e5fa94f04f5751f1553c81cfff95dd808c3fc31b29c1d07fcc00b06"}, 0xd8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x7c59e000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={&(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, <r2=>0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x5, 0x2, 0x4, 0x91})
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, &(0x7f0000000700)={0x7fffffff, 0x0, r2})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) (async)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4})
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000580)=0xe719c17fdb49c053)
socket$inet_smc(0x2b, 0x1, 0x0) (async)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r5, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r5, 0x33, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
timer_create(0x5, &(0x7f0000000800)={0x0, 0x36}, &(0x7f0000000940)=<r6=>0x0)
timer_settime(r6, 0x0, &(0x7f0000000ac0)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
openat$incfs(r5, &(0x7f00000004c0)='.log\x00', 0x101880, 0x103)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x220, 0x308, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0xffffff00, 0x1, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x7, 0x2, 0x0, 0x800, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00', {}, {}, 0x0, 0x180}, 0xc0, 0xe0}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @broadcast, 0x6, 0xfffffffe}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xfd, {}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @dev={0xac, 0x14, 0x14, 0x12}, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
sendto$inet6(r3, &(0x7f0000000440)="00d5d2e7bde008cd15109be1d61f2e78030000000000000087539a1521dc76", 0x1f, 0x4000884, &(0x7f0000000480)={0xa, 0x4e24, 0x0, @remote, 0x85}, 0xfffffdca)
ioctl$SIOCGSTAMP(r3, 0x8906, 0x0)
socket$xdp(0x2c, 0x3, 0x0)

2.263730945s ago: executing program 4 (id=1936):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_io_uring_setup(0x10f, &(0x7f0000000380)={0x0, 0xb5ac, 0x400, 0x0, 0x4003}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x14e)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000006340)={0x2020, 0x0, <r6=>0x0}, 0x2020)
r7 = socket$kcm(0x1e, 0x5, 0x0)
setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r8 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
r9 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfdef)
close(r9)
recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021)
write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, r6, {0x7, 0x1f, 0x1, 0x8888b1, 0x0, 0x1, 0x1000, 0x9, 0x0, 0x0, 0x2, 0x8}}, 0x50)
syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xac901, 0x28)
write$tcp_congestion(r10, &(0x7f00000000c0)='lp\x00', 0xfffffdef)
dup2(r10, r5)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
unshare(0x6020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r11, @ANYBLOB="2c67722e68db3d000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0)
pivot_root(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)

1.9159386s ago: executing program 2 (id=1937):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x7ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0xb5c, &(0x7f0000000240)={0x0, 0x8926, 0x2, 0x0, 0x164}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0xf23, 0x0, 0xc, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6(0xa, 0x800, 0xbc)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80820}, 0x80)
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c009900f5cf00004d00000008002600b4090000050018011f000000"], 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x32, 0xffffffffffffffff, 0x0)

1.871984883s ago: executing program 1 (id=1938):
unshare(0x12040580)
unshare(0x62000600)
unshare(0x40000d80)

1.206150077s ago: executing program 1 (id=1939):
syz_emit_ethernet(0x62, &(0x7f0000000200)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @generic={{0x15, 0x4, 0x1, 0x4, 0x54, 0x68, 0x0, 0x81, 0x16, 0x0, @loopback, @rand_addr=0x64010100, {[@rr={0x7, 0x1f, 0xef, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @remote, @rand_addr=0x64010100, @multicast1, @local, @multicast2]}, @rr={0x7, 0xf, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102]}, @rr={0x7, 0xf, 0xe0, [@loopback, @local, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}}, 0x0)

951.413741ms ago: executing program 3 (id=1940):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000800)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c0001800600010000d28d1ff5fa40c57e0000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000811}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000002000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)

936.607035ms ago: executing program 5 (id=1941):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f00000001c0)=0x7, 0x4) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) (async, rerun: 64)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x5, 0x0, &(0x7f0000000180)) (async)
r1 = fsopen(&(0x7f0000000000)='jffs2\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000080)='%\x00', &(0x7f0000000100)="9d0ad8f68c", 0x5)

842.680756ms ago: executing program 1 (id=1942):
io_setup(0xa, &(0x7f00000001c0)=<r0=>0x0) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/hibernate_compression_threads', 0x81, 0x116)
io_submit(r0, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000bc0)='\x00\x00', 0x2, 0x1000000000003}]) (async, rerun: 32)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000005c0)) (rerun: 32)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, &(0x7f0000000200)={0x14, &(0x7f0000000100)={0x20, 0x2, 0xc2, {0xc2, 0x30, "d979e30b7983cdff18b7cc8723ad73c0cbb5c504a0b546b88b7929bded5b3d8c5e2b4f9648c8167d211e4316324fec191ca2478e0e0f87e09f2ab04e3be1ac854ed3e86beb024ffda57bf410f9b1b9d7766b8b516c07df933b665d0c6d1918c13bfdfe2238a12e8982a66f8e40f3071517527c66db8ee0bd0e865899426f0f0d7fa072619b0c422e75a056afee31f4a83c6cc0bab671c9095b729ce2881f59bc775054138a74d81b1b20fdfef0e3e09c2e1f34e8ef450b66e3a70b7aac3f96ba"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x20, 0xa, 0x7e, "30c791f3373e579d9eb9b24e2484d521b27f965c931d24517f57a33838e63c2d38d49a65740bdd613f85eb3e3ba6689e67ef409f5971a6c5014a9816a93254aaa54ff8827f83740cc84c595f8480e94add7376c7d33af825232b0b2eb72477d578436b661685d324c66ab0e062540f5c6263875546410965e5e2656502bb"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1e}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x2d}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x10000}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "e9dd921b5ae0c9a8a0c71e04b92a958424db8f7e438c5db07960c4e222ea43587460f3b48d857acf465e22bc63ab72"}})
openat$vicodec0(0xffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xb71a, 0x800, 0x10000000, 0x138}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
unshare(0x2a020400) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x2c, 0x0, &(0x7f0000000300))
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) (async)
io_setup(0x2, &(0x7f0000000600)) (async, rerun: 32)
prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/223) (async, rerun: 32)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000100)={0x2098, 0x5, 0x1000, 0xfffffffd}, 0x10)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (async, rerun: 64)
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (rerun: 64)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) (async)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)

487.484122ms ago: executing program 5 (id=1943):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0xa01)
ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000100))
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffc, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000180)="a1f9081d3765", 0x0, 0xfffffff9, 0x1, 0x3, 0x0})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000002080)="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")
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0x80000}, {0x5c, 0xd, 0x9}, {0x6, 0x0, 0x4, 0x7ffffe39}]})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
syz_emit_ethernet(0x26, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffb83524ffffffff88a8200081004600000c02000060080200f7ff5b969f1f76f9bc"], 0x0)
r3 = epoll_create1(0x0)
ppoll(&(0x7f0000000040)=[{r3, 0x3f70}], 0x1, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x14004, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x90002010})
write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)

421.718419ms ago: executing program 4 (id=1944):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40044}, 0x8000)
r3 = add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, r3)
add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4)
add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0x0)
r5 = openat$cgroup_ro(r1, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, &(0x7f0000000080)=0x9, 0x200000000005, 0x6)
close(r5)
socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094)
sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdbdf250400e600"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

421.112797ms ago: executing program 3 (id=1945):
socket(0x2b, 0x1, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000500), 0x4000000280381, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000340)=""/48, 0x30}], 0x2, 0x12})
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffd, 0x0, r2}, &(0x7f0000000180)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000240)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, "601c69859bced002", "d48286fd02541c95afec379bdb3cc0d5646e20970600000418fe7474dc4c3d7b", "80000100", "0100"}, 0x38)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6)

289.626593ms ago: executing program 4 (id=1946):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) (async)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffd, 0xb6}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0) (async)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
readv(r3, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/45, 0x2d}], 0x1)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000d40)={0x2, 0x1}) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000044) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000e80)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf2503000000140001800d00010069623a766c616e3100000000ed8e7de810b86db9ab679a6d56c146ec6f2e524ce98cbe6b93548ecf68c011e87aee04eed054febcc1a06e10edc2ecd9fc8a20e8f4bcf4af"], 0x28}}, 0x0) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r9 = syz_io_uring_setup(0x1238, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x2, 0xab9}, &(0x7f0000000040)=<r10=>0x0, &(0x7f0000000200)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) (async, rerun: 64)
syz_io_uring_submit(r10, r11, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x0, 0x0}) (async, rerun: 64)
io_uring_enter(r9, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
dup2(r12, r8)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async, rerun: 64)
ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000000300)={0x3, 0x4, @status={[0x2, 0x0, 0x8, 0x100000001, 0xff80000000000000, 0xb4]}, [0x1, 0x0, 0x1, 0x5, 0xfffffffffffff886, 0x7fffffff, 0x21db, 0x4, 0xb3, 0x7fffffff, 0x2, 0x3, 0xbc3, 0x404, 0xc, 0xa7, 0x0, 0x400, 0xd, 0x6, 0x9, 0x4, 0x101, 0x80, 0x4, 0x2, 0x1, 0x9, 0xfda, 0x6, 0x50f4, 0x0, 0x7fff, 0x0, 0x100000001, 0xc0b7, 0x3, 0x4, 0x0, 0x7fffffff, 0x6, 0xd7, 0x5, 0x200, 0xd4, 0x4, 0x9, 0xffffffff, 0x2, 0x2, 0x3, 0x9, 0x9, 0x9, 0x2, 0x1, 0x2, 0x8, 0x8000000000000001, 0x2e, 0x7, 0x0, 0x4, 0xffff]}) (rerun: 64)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) (async)
r13 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x206000, 0x0)
ioctl$SNDCTL_DSP_GETOSPACE(r13, 0x8010500c, &(0x7f0000000100)) (async)
socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32)
connect$unix(0xffffffffffffffff, &(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e) (rerun: 32)

0s ago: executing program 4 (id=1947):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5})
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r1 = memfd_create(&(0x7f00000007c0)='/dev/loop#\x00\xee\b\xce\xde\xe9\x8d\xd3\xd4\xe2\xfd\x7f\xf5R%\xe0]l\xa1s\b\xa5\xd2\xd59\xc8\xda\b\xd6\xb2\x15\xf6F\xb8\xb4{r.\xd2\xea\x16\t\xe8=\xa3\x88sN\x83N`\xf9\xec\xe1\xbb\x05<r\xf8\xd56\xaf~Nh%\x17\xf4\t\x00\x00\x00\x00\x00\x00\x00\xf6:\x964\x82jOu\xa3c\x9ez7\x88\x15\xdbz\xd1&\xd1\xca\xcb\xc5C\xa6,\xc7~\x86\xee=\xae}\xeb\xe8N\x11\xed\xee\xd7x6}-y #\x17\x8d[~\xe2\xab\xe6\xe3\x17\xd2/&\xfb\x13\xf3\xd9\xf4O\xf2\xdb\x9b\x03)\xae\xde\xef\x06\x03W\xb5;\xa6\xb4\'\'\xc2C\x85\xe4\xaa\xe8\x81\xb4\x85\xd2\xfe\xcf\x9bn\xee*\x15\x97#\'\a\x00\xd9+@\xb7\xef&\x87\x93\x15\xa4\xe5D\xee\x03\xd1\xd4\xc2yT\x8a0\x06=f\xccK\xe6\xf3\x15\x99z0]\xc4\x04\xb0\xeaZ\xd9\x1e\xbf\xb6\xe9\x80\xfe\xd9G\x82\x93\xbf,J}\xed\xfa\x1b\x01\xc0\x8c\x0f!\x93A-|Ss\xe8\xe3\xfa\xa2{\xef\xff1\xf9|Cj~\xf4\xd1\xf1q\x13\xb6\x94\xe1\x98#|(O7\xa8)\x86\xaf\x10;C<\xd7!\x84\xec\x05\x00\x00\x00\x00\x00\x00\x00\xc0V\v:RK\xed\xc8HD\x9b;\xe0R\x92\x94\xf7\xeb\xe8\x97\x8f\x05\x9a\xe7\xdc\xf09\x00\x00\x00\x00\x00\x00\xf4\xff\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcei\xbf\xec\xac3\xf2\xed\x84\xba\x19E_\xb68', 0x6)
fallocate(r1, 0x0, 0x0, 0x200401)
fallocate(r1, 0x0, 0x0, 0x200401)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000003dc0)="65f3aa2e8c1e66baa00066ed360f017f54640fc7bdfcffffffc7442400cfae0000c74424027fb10000c7442406000000000f011c24de85dd000000ea05000000290178000fc72c5c", 0x48}], 0x1, 0x11, 0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000100)=0x1, 0xe)
writev(r6, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
write$tun(r4, &(0x7f0000001480)={@val={0x0, 0x11}, @void, @eth={@empty, @multicast, @val={@val={0x88a8, 0x4, 0x1}, {0x8100, 0x6, 0x0, 0x1}}, {@ipv4={0x800, @tipc={{0x1f, 0x4, 0x2, 0x30, 0x14c, 0x65, 0x0, 0x7, 0x6, 0x0, @loopback, @empty, {[@rr={0x7, 0x1b, 0xc2, [@broadcast, @loopback, @empty, @remote, @broadcast, @broadcast]}, @timestamp={0x44, 0x28, 0x22, 0x0, 0x8, [0x0, 0x7c, 0x10000, 0x3, 0x4, 0x7f, 0x0, 0x6, 0x8]}, @end, @rr={0x7, 0x1f, 0x25, [@rand_addr=0x64010100, @private=0xa010100, @multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @dev={0xac, 0x14, 0x14, 0x3f}, @local]}, @ra={0x94, 0x4, 0x1}, @end]}}, @name_distributor={{0xd0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x0, 0x0, 0x1, 0x6, 0x583, 0x4, 0x4e23, 0x4e23, 0x3, 0x1}, [{0x6, 0x8, 0xe, 0x6, 0xa106, 0x3, 0x1, 0x1}, {0xe0000000, 0x1, 0x16fc, 0x8, 0xffffff80, 0x3, 0xc, 0xcac4}, {0x1, 0x4, 0x4, 0x7fff, 0x7f7, 0xfff, 0x5, 0xffa3}, {0x3, 0x5, 0x80000000, 0x8, 0x8, 0x8, 0x4, 0x1}, {0xd1, 0x6, 0x5, 0x4526, 0x7, 0xdfe, 0xa, 0x3c}, {0x78e4, 0x5, 0x5538, 0x5, 0x1, 0xe, 0x1, 0x10001}]}}}}}}, 0x166)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0)
preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000480)=""/4091, 0xffb}], 0x1, 0x59, 0x9)
ioctl$XFS_IOC_AG_GEOMETRY(r1, 0xc080583d, &(0x7f0000000200)={0x0, 0x7, 0x7f, 0x1, 0xe372, 0x10000, 0xfffffffa, 0x80})
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20)
sendmsg$inet(r8, &(0x7f0000000640)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000001c0)="a4", 0x1}], 0x1}, 0x8040)

kernel console output (not intermixed with test programs):

621.824283][T11733] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  621.851544][T11733] imon:send_packet: packet tx failed (-71)
[  621.887615][T11733] imon 4-1:0.0: remote input dev register failed
[  621.907631][T11733] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  621.940113][T11733] imon 4-1:0.0: unable to initialize intf0, err 0
[  621.946672][T11733] imon:imon_probe: failed to initialize context!
[  621.969007][T11733] imon 4-1:0.0: unable to register, err -19
[  621.990449][T11733] usb 4-1: USB disconnect, device number 86
[  622.137541][T11755] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  622.247289][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1575'.
[  622.257822][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1575'.
[  622.299965][T11755] usb 3-1: Using ep0 maxpacket: 8
[  622.335763][T11755] usb 3-1: unable to get BOS descriptor or descriptor too short
[  622.347520][T11733] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  622.349947][T11755] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  622.412160][T11755] usb 3-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af
[  622.423455][T11755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.432559][T11755] usb 3-1: Product: syz
[  622.438855][T11755] usb 3-1: Manufacturer: syz
[  622.443972][T11755] usb 3-1: SerialNumber: syz
[  622.521099][T11733] usb 4-1: Using ep0 maxpacket: 16
[  622.532177][T11733] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  622.546301][T11733] usb 4-1: config 0 interface 0 has no altsetting 0
[  622.560366][T11733] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  622.570578][T11733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.584293][T11733] usb 4-1: Product: syz
[  622.590756][T11733] usb 4-1: Manufacturer: syz
[  622.602256][T11733] usb 4-1: SerialNumber: syz
[  622.626221][T11733] usb 4-1: config 0 descriptor??
[  622.662370][T12414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.680024][T12414] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.746562][T11755] vmk80xx 3-1:8.0: driver 'vmk80xx' failed to auto-configure device.
[  622.775128][T11755] usb 3-1: USB disconnect, device number 82
[  622.833488][T12427] netlink: 'syz.5.1577': attribute type 6 has an invalid length.
[  622.841461][T12427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1577'.
[  622.951075][T11733] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input30
[  623.338374][T11733] rc_core: IR keymap rc-imon-pad not found
[  623.350461][T11733] Registered IR keymap rc-empty
[  623.356233][T11733] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  623.367415][T11733] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  623.509568][T11733] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  623.533284][T11733] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31
[  623.573613][T11733] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:87> initialized
[  624.337045][    C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored
[  624.529687][T12405] delete_channel: no stack
[  624.769376][   T30] audit: type=1326 audit(1772537430.179:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.5.1579" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1571d9c799 code=0x0
[  625.132253][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  625.138896][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  625.161359][T11737] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[  625.433802][T11737] usb 6-1: Using ep0 maxpacket: 16
[  625.500255][T11737] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  625.528081][T11737] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.556694][T11737] usb 6-1: config 0 descriptor??
[  625.568717][T11737] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  625.719938][    C1] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  625.721618][T10029] usb 4-1: USB disconnect, device number 87
[  626.763336][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'.
[  626.772590][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'.
[  628.555609][T12490] GUP no longer grows the stack in syz.1.1592 (12490): 200000005000-200000008000 (200000004000)
[  628.657845][T12490] CPU: 1 UID: 0 PID: 12490 Comm: syz.1.1592 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  628.657882][T12490] Tainted: [L]=SOFTLOCKUP
[  628.657890][T12490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  628.657912][T12490] Call Trace:
[  628.657987][T12490]  <TASK>
[  628.658028][T12490]  dump_stack_lvl+0xe8/0x150
[  628.658142][T12490]  fixup_user_fault+0x637/0x6f0
[  628.658208][T12490]  fault_in_user_writeable+0x71/0xd0
[  628.658235][T12490]  futex_lock_pi+0x800/0xb00
[  628.658284][T12490]  ? __pfx_futex_lock_pi+0x10/0x10
[  628.658317][T12490]  ? get_futex_key+0x8cd/0x1690
[  628.658369][T12490]  ? __pfx_futex_wake_mark+0x10/0x10
[  628.658415][T12490]  ? vfs_write+0x9c3/0xb90
[  628.658460][T12490]  do_futex+0x292/0x420
[  628.658485][T12490]  ? __pfx_vfs_write+0x10/0x10
[  628.658510][T12490]  ? __pfx_do_futex+0x10/0x10
[  628.658545][T12490]  __se_sys_futex+0x3a8/0x450
[  628.658578][T12490]  ? __pfx___se_sys_futex+0x10/0x10
[  628.658602][T12490]  ? rcu_is_watching+0x15/0xb0
[  628.658643][T12490]  ? __x64_sys_futex+0x21/0xf0
[  628.658671][T12490]  do_syscall_64+0x14d/0xf80
[  628.658763][T12490]  ? trace_irq_disable+0x3b/0x150
[  628.658793][T12490]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.658836][T12490]  ? clear_bhb_loop+0x40/0x90
[  628.658862][T12490]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.658888][T12490] RIP: 0033:0x7f597379c799
[  628.658936][T12490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  628.658954][T12490] RSP: 002b:00007f59719d5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  628.659005][T12490] RAX: ffffffffffffffda RBX: 00007f5973a16090 RCX: 00007f597379c799
[  628.659021][T12490] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  628.659034][T12490] RBP: 00007f5973832bd9 R08: 0000000000000000 R09: 0000000000000000
[  628.659046][T12490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  628.659058][T12490] R13: 00007f5973a16128 R14: 00007f5973a16090 R15: 00007f5973b3fa48
[  628.659089][T12490]  </TASK>
[  629.301880][T11737] usb 6-1: Detected FT232A
[  629.368491][T11737] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  629.477795][T10029] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  629.477929][T11737] usb 6-1: USB disconnect, device number 74
[  629.534579][T11737] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  629.566896][T11737] ftdi_sio 6-1:0.0: device disconnected
[  629.602582][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1597'.
[  629.661881][T12509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1597'.
[  629.671246][T10029] usb 5-1: Using ep0 maxpacket: 32
[  629.680279][T10029] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  629.692864][T10029] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.708327][T10029] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  629.747844][T10029] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  629.798295][T10029] usb 5-1: config 0 interface 0 has no altsetting 0
[  629.827740][T10029] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  629.837025][T10029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.998143][T12514] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1598'.
[  630.153774][T10029] usb 5-1: config 0 descriptor??
[  630.436017][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.457814][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.489021][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.504252][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.488755][T10029] usbhid 5-1:0.0: can't add hid device: -71
[  632.495004][T10029] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  632.529784][T10029] usb 5-1: USB disconnect, device number 93
[  632.680794][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'.
[  632.704900][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'.
[  632.733955][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'.
[  632.755153][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'.
[  632.780444][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'.
[  632.798421][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'.
[  632.822611][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1603'.
[  632.926454][T12544] netlink: 'syz.4.1606': attribute type 1 has an invalid length.
[  632.937468][T11737] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[  633.087048][T12539] 8021q: adding VLAN 0 to HW filter on device team0
[  633.103490][T12539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  633.128395][T11737] usb 6-1: Using ep0 maxpacket: 8
[  633.164788][T12534] loop9: detected capacity change from 0 to 7
[  633.173224][T12534] Dev loop9: unable to read RDB block 7
[  633.184046][T12534]  loop9: unable to read partition table
[  633.198159][T12534] loop9: partition table beyond EOD, truncated
[  633.221819][T12534] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  633.314256][T11737] usb 6-1: unable to get BOS descriptor or descriptor too short
[  633.328525][T11737] usb 6-1: unable to read config index 0 descriptor/start: -71
[  633.344631][T11737] usb 6-1: can't read configurations, error -71
[  633.367659][T12547] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address
[  633.383626][T12547] bond0: (slave vxcan3): Error -95 calling set_mac_address
[  633.428309][T12549] 8021q: adding VLAN 0 to HW filter on device bond0
[  633.454926][T12544] macvlan0: entered promiscuous mode
[  633.463169][T12544] macvlan0: entered allmulticast mode
[  633.475679][T12544] bond0: entered promiscuous mode
[  633.478436][T10029] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  633.509338][T12544] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  633.547715][T12544] bond0: left promiscuous mode
[  633.637650][T10029] usb 4-1: Using ep0 maxpacket: 16
[  633.647991][T10029] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  633.657287][T10029] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.671057][T10029] usb 4-1: Product: syz
[  633.679819][T10029] usb 4-1: Manufacturer: syz
[  633.689436][T10029] usb 4-1: SerialNumber: syz
[  633.711118][T10029] r8152-cfgselector 4-1: Unknown version 0x0000
[  633.725198][T10029] r8152-cfgselector 4-1: config 0 descriptor??
[  633.991957][T10029] r8152-cfgselector 4-1: Unknown version 0x0000
[  634.013679][T10029] r8152-cfgselector 4-1: bad CDC descriptors
[  634.041161][T10029] r8152-cfgselector 4-1: USB disconnect, device number 88
[  634.360187][T12569] netlink: 'syz.4.1610': attribute type 8 has an invalid length.
[  635.379105][T12583] __nla_validate_parse: 10 callbacks suppressed
[  635.379127][T12583] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1613'.
[  635.570307][T12567] hsr0: entered promiscuous mode
[  635.724159][T12585] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  635.858962][T12557] hsr0: left promiscuous mode
[  635.978133][T11740] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  636.047810][T11737] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  636.167492][T11740] usb 3-1: Using ep0 maxpacket: 8
[  636.179245][T11740] usb 3-1: config 0 has an invalid interface number: 176 but max is 2
[  636.207539][T11740] usb 3-1: config 0 has no interface number 1
[  636.214074][T11740] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  636.237546][T11737] usb 5-1: too many configurations: 124, using maximum allowed: 8
[  636.256281][T11740] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  636.276430][T11737] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  636.287411][T11737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  636.301251][T11740] usb 3-1: config 0 descriptor??
[  636.317441][T11737] usb 5-1: Product: syz
[  636.327558][T11737] usb 5-1: Manufacturer: syz
[  636.353544][T11737] usb 5-1: SerialNumber: syz
[  636.402539][T11733] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  636.416439][T11737] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  636.521608][T11740] qcserial 3-1:0.2: Qualcomm USB modem converter detected
[  636.778454][T11740] usb 3-1: USB disconnect, device number 83
[  637.455060][T11740] qcserial 3-1:0.2: device disconnected
[  637.581976][T11737] usb 5-1: USB disconnect, device number 94
[  637.721962][T11733] usb 5-1: Service connection timeout for: 256
[  637.755542][T11733] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[  637.781529][T11733] ath9k_htc: Failed to initialize the device
[  637.813484][T11737] usb 5-1: ath9k_htc: USB layer deinitialized
[  637.898429][T12610] loop2: detected capacity change from 0 to 7
[  637.926004][T12610] Dev loop2: unable to read RDB block 7
[  638.009450][T12610]  loop2: AHDI p3
[  638.036690][T12610] loop2: partition table partially beyond EOD, truncated
[  638.061081][T12614] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  638.069273][T12614] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  638.105251][ T5193] Dev loop2: unable to read RDB block 7
[  638.120911][ T5193]  loop2: AHDI p3
[  638.135066][ T5193] loop2: partition table partially beyond EOD, truncated
[  638.432361][T12623] loop5: detected capacity change from 0 to 7
[  638.453286][T12623] Dev loop5: unable to read RDB block 7
[  638.460059][   T30] audit: type=1326 audit(1772537443.819:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.485069][T11733] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  638.493167][T11737] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  638.507012][T12623]  loop5: unable to read partition table
[  638.513612][   T30] audit: type=1326 audit(1772537443.819:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.513665][   T30] audit: type=1326 audit(1772537443.819:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.513710][   T30] audit: type=1326 audit(1772537443.819:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.513768][   T30] audit: type=1326 audit(1772537443.819:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.513813][   T30] audit: type=1326 audit(1772537443.819:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.513858][   T30] audit: type=1326 audit(1772537443.819:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.513903][   T30] audit: type=1326 audit(1772537443.819:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.513948][   T30] audit: type=1326 audit(1772537443.819:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.513992][   T30] audit: type=1326 audit(1772537443.829:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.3.1625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  638.716795][T11733] usb 3-1: Using ep0 maxpacket: 16
[  638.733820][T11737] usb 2-1: Using ep0 maxpacket: 16
[  638.748491][T12623] loop5: partition table beyond EOD, truncated
[  638.759404][T11737] usb 2-1: unable to get BOS descriptor or descriptor too short
[  638.777304][T11733] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  638.788516][T11733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  638.799906][T11733] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  638.811215][T11737] usb 2-1: config 16 has an invalid interface number: 82 but max is 0
[  638.820806][T11741] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  638.829675][T11737] usb 2-1: config 16 has no interface number 0
[  638.838503][T11733] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  638.851096][T11737] usb 2-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01
[  638.861347][T11737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.869451][T11733] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  638.882491][T11737] usb 2-1: Product: syz
[  638.886667][T11737] usb 2-1: Manufacturer: syz
[  638.891731][T11737] usb 2-1: SerialNumber: syz
[  638.900050][T11733] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  638.930194][T11733] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  638.950557][T11733] usb 3-1: Manufacturer: syz
[  638.974464][T11733] usb 3-1: config 0 descriptor??
[  638.985189][T12623] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  638.995081][T11741] usb 5-1: device descriptor read/64, error -71
[  639.287963][T11741] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  639.329893][T11737] ums-usbat 2-1:16.82: USB Mass Storage device detected
[  639.425480][T11737] usb 2-1: USB disconnect, device number 98
[  639.487505][T11741] usb 5-1: device descriptor read/64, error -71
[  639.494920][T11733] rc_core: IR keymap rc-hauppauge not found
[  639.507502][T11733] Registered IR keymap rc-empty
[  639.525187][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.568885][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.610301][T11733] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  639.623319][T11741] usb usb5-port1: attempt power cycle
[  639.652607][T11733] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input33
[  639.682389][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.708014][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.747787][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.777593][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.797563][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.817507][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.837575][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.880252][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.920588][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.957562][T11733] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  639.967575][T11741] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  639.980097][T11733] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  639.998788][T11741] usb 5-1: device descriptor read/8, error -71
[  640.017583][T11733] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  640.069096][T11733] usb 3-1: USB disconnect, device number 84
[  640.337496][T11741] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  640.539439][T11741] usb 5-1: device descriptor read/8, error -71
[  640.654409][T11741] usb usb5-port1: unable to enumerate USB device
[  640.977759][T11755] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  641.137513][T11755] usb 2-1: Using ep0 maxpacket: 16
[  641.171618][T11755] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  641.215392][T11755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.290323][T11755] usb 2-1: config 0 descriptor??
[  641.338864][T11755] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  643.039130][T12659] veth1_to_batadv: entered promiscuous mode
[  643.168458][T11755] usb 2-1: Detected FT232A
[  643.189642][T11755] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  643.227950][T11755] usb 2-1: USB disconnect, device number 99
[  643.278230][T11755] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  643.304286][T11755] ftdi_sio 2-1:0.0: device disconnected
[  644.007761][T12684] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  644.015857][T12685] syzkaller0: entered promiscuous mode
[  644.021654][T12685] syzkaller0: entered allmulticast mode
[  644.036642][T12674] tipc: Resetting bearer <eth:syzkaller0>
[  644.072691][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  644.072749][   T30] audit: type=1326 audit(1772537449.489:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  644.203932][T12673] tipc: Resetting bearer <eth:syzkaller0>
[  644.324361][   T30] audit: type=1326 audit(1772537449.499:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  644.377474][   T30] audit: type=1326 audit(1772537449.499:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  644.401389][T12673] tipc: Disabling bearer <eth:syzkaller0>
[  644.475417][   T30] audit: type=1326 audit(1772537449.499:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  644.517739][   T30] audit: type=1326 audit(1772537449.499:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  644.569637][   T30] audit: type=1326 audit(1772537449.499:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  644.643016][   T30] audit: type=1326 audit(1772537449.499:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  644.707509][T11741] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  644.727780][   T30] audit: type=1326 audit(1772537449.499:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  644.807598][   T30] audit: type=1326 audit(1772537449.499:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  644.877053][   T30] audit: type=1326 audit(1772537449.839:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12676 comm="syz.3.1640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  645.147553][T11741] usb 4-1: Using ep0 maxpacket: 8
[  645.164329][T11741] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[  645.177798][T11741] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  645.251377][T11741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  645.313008][T11741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  645.362123][T11741] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  645.381412][T11741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.390505][T11741] usb 4-1: Product: syz
[  645.394722][T11741] usb 4-1: Manufacturer: syz
[  645.407620][T11741] usb 4-1: SerialNumber: syz
[  645.457872][T11741] usb 4-1: config 0 descriptor??
[  645.528489][T11741] powermate 4-1:0.0: probe with driver powermate failed with error -5
[  645.697690][T12701] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1644'.
[  645.783240][T12689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  645.792406][T12689] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  646.417971][T11741] IPVS: starting estimator thread 0...
[  646.518053][T12712] IPVS: using max 26 ests per chain, 62400 per kthread
[  647.370013][T11755] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  647.538191][T11755] usb 3-1: Using ep0 maxpacket: 16
[  647.555020][T11755] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  647.564025][T11755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  647.614648][T11755] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  647.645484][T11755] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  647.664833][T11755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.680105][T11755] usb 3-1: Product: syz
[  647.705582][T11755] usb 3-1: Manufacturer: syz
[  647.715716][T11755] usb 3-1: SerialNumber: syz
[  648.217754][T11755] usb 3-1: 0:2 : does not exist
[  648.349211][T12716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.359129][T12716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.412833][T11741] usb 4-1: USB disconnect, device number 89
[  648.601859][T11755] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1)
[  648.795693][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.907985][T11741] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[  648.916189][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.952646][T12754] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1656'.
[  649.037498][T11737] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  649.180254][T11741] usb 6-1: Using ep0 maxpacket: 16
[  649.194656][T11741] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  649.204571][T11741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  649.246272][T11755] usb 3-1: USB disconnect, device number 85
[  649.390013][T11741] usb 6-1: config 0 descriptor??
[  649.479417][T11741] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  649.607866][T12769] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1658'.
[  651.068575][T10029] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  651.227769][T10029] usb 5-1: Using ep0 maxpacket: 16
[  651.276195][T10029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  651.342166][T10029] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  651.386900][T10029] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  651.483988][T10029] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  651.525245][T10029] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.593135][T10029] usb 5-1: config 0 descriptor??
[  652.079343][T10029] usbhid 5-1:0.0: can't add hid device: -71
[  652.111004][T10029] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  652.175153][T10029] usb 5-1: USB disconnect, device number 100
[  652.473482][T11741] usb 6-1: Detected FT232A
[  652.517880][T11741] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  652.590923][T11741] usb 6-1: USB disconnect, device number 77
[  652.651221][T11741] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  652.727950][T11741] ftdi_sio 6-1:0.0: device disconnected
[  652.865469][T12814] input: syz0 as /devices/virtual/input/input34
[  653.407588][T11741] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[  654.229956][   T30] kauditd_printk_skb: 62 callbacks suppressed
[  654.229977][   T30] audit: type=1326 audit(1772537459.649:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  654.344396][   T30] audit: type=1326 audit(1772537459.679:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  654.381731][T11741] usb 6-1: config 0 has an invalid interface number: 64 but max is 0
[  654.392760][T11741] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  654.404368][T11741] usb 6-1: config 0 has no interface number 0
[  654.412228][   T30] audit: type=1326 audit(1772537459.679:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  654.459351][T11741] usb 6-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  654.477549][T11741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  654.485678][T11741] usb 6-1: Product: syz
[  654.497876][T11741] usb 6-1: Manufacturer: syz
[  654.507809][T11741] usb 6-1: SerialNumber: syz
[  654.513270][   T30] audit: type=1326 audit(1772537459.679:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  654.565730][T11741] usb 6-1: config 0 descriptor??
[  654.607829][T11741] uvcvideo 6-1:0.64: probe with driver uvcvideo failed with error -22
[  654.667225][   T30] audit: type=1326 audit(1772537459.679:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  654.768397][   T30] audit: type=1326 audit(1772537459.679:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  654.862130][T12844] netlink: 'syz.5.1668': attribute type 275 has an invalid length.
[  654.879188][T12844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1668'.
[  654.888778][   T30] audit: type=1326 audit(1772537459.679:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  655.366893][T12840] syzkaller0: entered promiscuous mode
[  655.376788][T12840] syzkaller0: entered allmulticast mode
[  655.405515][   T30] audit: type=1326 audit(1772537459.679:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  655.490839][ T6257] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  655.502465][ T6257] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  655.507576][   T30] audit: type=1326 audit(1772537459.679:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  655.519230][T10029] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  655.642196][   T30] audit: type=1326 audit(1772537459.679:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12821 comm="syz.3.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f349719c799 code=0x7ffc0000
[  656.207953][T10029] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  656.412394][T11757] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  656.597056][T11741] usb 6-1: USB disconnect, device number 78
[  657.121473][T10029] usb 3-1: new full-speed USB device number 86 using dummy_hcd
[  657.279691][T10029] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  657.288184][T10029] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.311149][T10029] usb 3-1: config 0 has no interface number 0
[  657.329142][T10029] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  657.340892][T10029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.350395][T10029] usb 3-1: Product: syz
[  657.354737][T10029] usb 3-1: Manufacturer: syz
[  657.363901][T10029] usb 3-1: SerialNumber: syz
[  657.386759][T10029] usb 3-1: config 0 descriptor??
[  657.437762][T10029] cx231xx 3-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces
[  657.487437][T10029] cx231xx 3-1:0.1: Not found matching IAD interface
[  657.647420][T10029] usb 3-1: USB disconnect, device number 86
[  658.275686][T12899] loop5: detected capacity change from 0 to 7
[  658.328231][T12899] Dev loop5: unable to read RDB block 7
[  658.334195][T12899]  loop5: AHDI p4
[  658.361078][T12899] loop5: partition table partially beyond EOD, truncated
[  659.527600][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  659.797687][T12909] binder: 12907:12909 ioctl 89f0 2000000000c0 returned -22
[  659.805611][T12910] binder: BINDER_SET_CONTEXT_MGR already set
[  659.814948][T12909] binder: 12907:12909 ioctl 89f0 2000000000c0 returned -22
[  659.823345][T12910] binder: 12907:12910 ioctl 4018620d 200000004a80 returned -16
[  659.831496][T12910] binder: BINDER_SET_CONTEXT_MGR already set
[  659.838511][T12909] binder: 12907:12909 ioctl 89f0 2000000000c0 returned -22
[  659.845878][T12910] binder: 12907:12910 ioctl 4018620d 200000004a80 returned -16
[  659.854363][T12909] binder: 12907:12909 ioctl 89f0 2000000000c0 returned -22
[  660.678606][T11741] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[  660.717827][T10029] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  660.787917][T11737] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  660.817636][T11741] usb 6-1: device descriptor read/64, error -71
[  660.887487][T10029] usb 3-1: Using ep0 maxpacket: 8
[  660.906840][T10029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  660.927172][T10029] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  660.947619][T11737] usb 4-1: device descriptor read/64, error -71
[  660.960506][T10029] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  660.982864][T10029] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  660.993730][T10029] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.006761][T10029] usb 3-1: Product: syz
[  661.011362][T10029] usb 3-1: Manufacturer: syz
[  661.016225][T10029] usb 3-1: SerialNumber: syz
[  661.038153][T10029] usb 3-1: config 0 descriptor??
[  661.051704][T10029] radioshark 3-1:0.0: Invalid radioSHARK device
[  661.061031][T10029] radioshark 3-1:0.0: probe with driver radioshark failed with error -22
[  661.071371][T10029] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  661.087855][T11741] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[  661.198861][T11737] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  661.237532][T11741] usb 6-1: device descriptor read/64, error -71
[  661.265067][T12920] netlink: 'syz.2.1683': attribute type 2 has an invalid length.
[  661.348201][T11741] usb usb6-port1: attempt power cycle
[  661.357436][T11737] usb 4-1: device descriptor read/64, error -71
[  661.372368][T12920] @„;: entered promiscuous mode
[  661.457848][ T5960] usb 3-1: USB disconnect, device number 87
[  661.469456][T11737] usb usb4-port1: attempt power cycle
[  661.789059][T11741] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[  661.830653][T11741] usb 6-1: device descriptor read/8, error -71
[  661.858118][T11737] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  661.888464][T11737] usb 4-1: device descriptor read/8, error -71
[  662.088378][T11741] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[  662.127438][T11737] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  662.218199][T11741] usb 6-1: device descriptor read/8, error -71
[  662.229170][T11737] usb 4-1: device descriptor read/8, error -71
[  662.343109][T11741] usb usb6-port1: unable to enumerate USB device
[  662.350635][T11737] usb usb4-port1: unable to enumerate USB device
[  663.851170][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'.
[  663.879452][T12986] veth0_macvtap: left promiscuous mode
[  663.968112][T11757] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[  664.155665][T11757] usb 6-1: Using ep0 maxpacket: 32
[  664.183637][T11757] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  664.200137][T11757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  664.210679][T11757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  664.234494][T11757] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  664.253786][T11757] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  664.438009][T13009] loop2: detected capacity change from 0 to 7
[  664.445300][T13009] Dev loop2: unable to read RDB block 7
[  664.451586][T13009]  loop2: AHDI p1 p2 p3 p4
[  664.456580][T13009] loop2: partition table partially beyond EOD, truncated
[  664.479872][T13009] loop2: p1 start 1601398130 is beyond EOD, truncated
[  664.497746][T11757] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  664.513102][T13009] loop2: p2 start 1702059890 is beyond EOD, truncated
[  664.522887][T13009] loop2: p3 size 3070370205 extends beyond EOD, truncated
[  664.553876][T11757] usb 6-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  664.566775][T11757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  664.610364][T11757] usb 6-1: Product: syz
[  664.625674][T11757] usb 6-1: Manufacturer: syz
[  664.639905][T11757] usb 6-1: SerialNumber: syz
[  664.666590][T11757] usb 6-1: config 0 descriptor??
[  664.679761][T11757] usb 6-1: no audio or video endpoints found
[  664.788857][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  665.113168][T13015] 8021q: adding VLAN 0 to HW filter on device bond6
[  665.715857][T13024] bond7: entered promiscuous mode
[  665.870516][T13024] bond7: entered allmulticast mode
[  665.891481][T13024] 8021q: adding VLAN 0 to HW filter on device bond7
[  665.987733][T11757] usb 2-1: new full-speed USB device number 100 using dummy_hcd
[  666.117722][T11755] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  666.160302][T11757] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15
[  666.180582][T11757] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  666.212892][T11757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  666.245992][T11757] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  666.277133][T11757] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  666.296106][T11755] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  666.362769][T11757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  666.379584][T11755] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  666.420605][T11757] usb 2-1: Product: syz
[  666.429467][T11757] usb 2-1: Manufacturer: syz
[  666.442703][T11757] usb 2-1: SerialNumber: syz
[  666.447949][T11755] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  666.481512][T11757] usb 2-1: config 0 descriptor??
[  666.489321][T11755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  666.510687][T11755] usb 4-1: SerialNumber: syz
[  666.510893][T13026] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  666.673137][T11758] usb 6-1: USB disconnect, device number 83
[  666.734647][T11757] powermate: Expected payload of 3--6 bytes, found 64 bytes!
[  666.758519][T11755] usb 4-1: 0:2 : does not exist
[  666.918695][T11757] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input35
[  666.922626][T13036] binder: 13035:13036 ioctl c0046209 0 returned -22
[  666.976429][    C0] powermate: config urb returned -71
[  666.982301][    C0] powermate: config urb returned -71
[  666.988254][    C0] powermate: config urb returned -71
[  666.994143][    C0] powermate: config urb returned -71
[  667.034520][T11757] usb 2-1: USB disconnect, device number 100
[  667.040664][    C0] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  667.082217][T11755] usb 4-1: USB disconnect, device number 94
[  667.188943][ T8023] udevd[8023]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  667.647695][T11755] usb 6-1: new full-speed USB device number 84 using dummy_hcd
[  667.787517][T11755] usb 6-1: device descriptor read/64, error -71
[  667.835897][T13056] loop2: detected capacity change from 0 to 7
[  667.887560][T13056] Dev loop2: unable to read RDB block 7
[  667.924613][T13056]  loop2: AHDI p1 p2 p3 p4
[  667.961297][T13056] loop2: partition table partially beyond EOD, truncated
[  668.007542][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  668.010253][T13056] loop2: p1 start 1601398130 is beyond EOD, truncated
[  668.040781][T11755] usb 6-1: new full-speed USB device number 85 using dummy_hcd
[  668.068030][T13056] loop2: p2 start 1702059890 is beyond EOD, truncated
[  668.093724][T13056] loop2: p3 size 3070370205 extends beyond EOD, truncated
[  668.277459][T11755] usb 6-1: device descriptor read/64, error -71
[  668.604332][T11755] usb usb6-port1: attempt power cycle
[  668.676069][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  668.907899][T11758] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  668.987652][T11755] usb 6-1: new full-speed USB device number 86 using dummy_hcd
[  669.008458][T11755] usb 6-1: device descriptor read/8, error -71
[  669.087778][T11757] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  669.098608][T11758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  669.110311][T11758] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  669.225803][T11758] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  669.247493][T11758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  669.257567][T11757] usb 2-1: Using ep0 maxpacket: 16
[  669.269857][T11757] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  669.279200][T11758] usb 5-1: config 0 descriptor??
[  669.297032][T11757] usb 2-1: config 1 has no interface number 0
[  669.303669][T11755] usb 6-1: new full-speed USB device number 87 using dummy_hcd
[  669.335935][T11757] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  669.348069][T11755] usb 6-1: device descriptor read/8, error -71
[  669.376178][T11757] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  669.490660][T11755] usb usb6-port1: unable to enumerate USB device
[  669.498048][T11757] usb 2-1: config 1 interface 105 has no altsetting 0
[  669.508548][T11757] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  669.521828][T11757] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  669.534953][T11757] usb 2-1: Product: syz
[  669.542651][T11757] usb 2-1: Manufacturer: syz
[  669.552929][T11757] usb 2-1: SerialNumber: syz
[  669.693891][T13074] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  669.850148][T13074] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  669.967263][T11758] hid-steam 0003:28DE:1142.0017: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  670.067840][T11758] hid-steam 0003:28DE:1142.0017: Steam wireless receiver connected
[  670.138602][T11758] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0
[  670.223564][T11737] usb 5-1: USB disconnect, device number 101
[  670.246785][T11737] hid-steam 0003:28DE:1142.0017: Steam wireless receiver disconnected
[  670.291132][T13074] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  670.301914][T13074] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  670.337912][T13085] fido_id[13085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  670.512740][T11757] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  670.524826][T11757] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  670.554257][T11757] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 44:5c:72:58:3c:ad
[  670.567198][T11758] usb 3-1: new full-speed USB device number 88 using dummy_hcd
[  670.649552][T13093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  670.670695][T13093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  670.727725][T11757] usb 6-1: new full-speed USB device number 88 using dummy_hcd
[  670.764762][T11758] usb 3-1: config 0 has an invalid interface number: 205 but max is 0
[  670.783478][T11758] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  670.818817][T11758] usb 3-1: config 0 has no interface number 0
[  670.852437][T11737] usb 2-1: USB disconnect, device number 101
[  670.860799][T11758] usb 3-1: config 0 interface 205 has no altsetting 0
[  670.861798][T11737] aqc111 2-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  670.916454][T11758] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a
[  670.938431][T11757] usb 6-1: device descriptor read/64, error -71
[  670.956849][T11758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.985872][T11758] usb 3-1: Product: syz
[  671.006531][T11758] usb 3-1: Manufacturer: syz
[  671.028420][T11737] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  671.030397][T11758] usb 3-1: SerialNumber: syz
[  671.054093][T13102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1724'.
[  671.058181][T11737] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  671.095628][T11737] aqc111 2-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  671.117274][T11758] usb 3-1: config 0 descriptor??
[  671.135941][T11758] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state.
[  671.215541][T11757] usb 6-1: new full-speed USB device number 89 using dummy_hcd
[  671.225950][T11758] dvb-usb: bulk message failed: -22 (3/0)
[  671.272940][T11758] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  671.315219][T11758] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device)
[  671.347888][T11757] usb 6-1: device descriptor read/64, error -71
[  671.382494][T11758] usb 3-1: media controller created
[  671.422088][T11758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  671.459255][T11758] dvb-usb: bulk message failed: -22 (6/0)
[  671.468154][T11757] usb usb6-port1: attempt power cycle
[  671.597538][T11758] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device'
[  671.616865][T11758] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36
[  671.634228][T11758] dvb-usb: schedule remote query interval to 150 msecs.
[  671.642137][T11758] dvb-usb: bulk message failed: -22 (3/0)
[  671.669597][T11758] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected.
[  671.812921][T11758] dvb-usb: bulk message failed: -22 (1/0)
[  671.823743][T11758] dvb-usb: error while querying for an remote control event.
[  671.961850][T11757] usb 6-1: new full-speed USB device number 90 using dummy_hcd
[  671.989234][T11758] dvb-usb: bulk message failed: -22 (1/0)
[  671.995481][T11758] dvb-usb: error while querying for an remote control event.
[  672.004856][T11757] usb 6-1: device descriptor read/8, error -71
[  672.110773][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1727'.
[  672.127528][T11755] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  672.160732][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1727'.
[  672.187486][T11758] dvb-usb: bulk message failed: -22 (1/0)
[  672.193305][T11758] dvb-usb: error while querying for an remote control event.
[  672.227914][T13122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1727'.
[  672.314763][T11757] usb 6-1: new full-speed USB device number 91 using dummy_hcd
[  672.314821][T13122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1727'.
[  672.348635][T11757] usb 6-1: device descriptor read/8, error -71
[  672.356123][T11755] usb 4-1: config 0 has no interfaces?
[  672.362245][T11758] dvb-usb: bulk message failed: -22 (1/0)
[  672.370180][T11758] dvb-usb: error while querying for an remote control event.
[  672.388782][T11755] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  672.398546][T11755] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  672.406897][T11755] usb 4-1: Manufacturer: syz
[  672.415545][T11755] usb 4-1: config 0 descriptor??
[  672.457927][T11757] usb usb6-port1: unable to enumerate USB device
[  672.538001][T11757] dvb-usb: bulk message failed: -22 (1/0)
[  672.544001][T11757] dvb-usb: error while querying for an remote control event.
[  672.717566][T11757] dvb-usb: bulk message failed: -22 (1/0)
[  672.723501][T11757] dvb-usb: error while querying for an remote control event.
[  672.888929][T11757] dvb-usb: bulk message failed: -22 (1/0)
[  672.946168][T11757] dvb-usb: error while querying for an remote control event.
[  673.131530][T11757] dvb-usb: bulk message failed: -22 (1/0)
[  673.141536][T11757] dvb-usb: error while querying for an remote control event.
[  673.271740][T11757] usb 3-1: USB disconnect, device number 88
[  673.467590][T11757] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected.
[  673.938034][T11757] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  674.154165][T11757] usb 3-1: Using ep0 maxpacket: 32
[  674.172778][T11757] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  674.191538][T11757] usb 3-1: config 0 has no interface number 0
[  674.210395][T11757] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  674.276983][T11757] usb 3-1: config 0 interface 85 has no altsetting 0
[  674.280618][T11737] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[  674.314494][T11757] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  674.328540][T11757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.364246][T11757] usb 3-1: Product: syz
[  674.384814][T11757] usb 3-1: Manufacturer: syz
[  674.408093][T11757] usb 3-1: SerialNumber: syz
[  674.439002][T11737] usb 6-1: Using ep0 maxpacket: 32
[  674.448121][T11757] usb 3-1: config 0 descriptor??
[  674.470867][T11737] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  674.483794][T11737] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  674.509855][T11737] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  674.520928][T11737] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  674.542979][T11737] usb 6-1: Product: syz
[  674.549458][T11737] usb 6-1: Manufacturer: syz
[  674.586228][T11737] hub 6-1:4.0: USB hub found
[  674.710438][T13143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  674.761772][T13167] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  674.773869][T13167] Invalid logical block size (2)
[  674.809047][T13143] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  674.836443][T11737] hub 6-1:4.0: 2 ports detected
[  674.994294][T11757] appletouch 3-1:0.85: Failed to read mode from device.
[  675.004176][T11757] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  675.221092][T13143] syzkaller0: entered promiscuous mode
[  675.236999][T13143] syzkaller0: entered allmulticast mode
[  675.244173][T11741] usb 4-1: USB disconnect, device number 95
[  675.632274][T13177] fuse: Bad value for 'fd'
[  675.719821][T13170] kvm: apic: phys broadcast and lowest prio
[  675.870379][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'.
[  675.882879][T11737] hub 6-1:4.0: hub_ext_port_status failed (err = -71)
[  675.884185][T11758] usb 6-1: USB disconnect, device number 92
[  675.897150][T13185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1738'.
[  675.953681][T13187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1738'.
[  675.988623][T13187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1738'.
[  676.317661][T11737] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[  676.479822][T11737] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  676.526760][T11737] usb 4-1: config 0 interface 0 has no altsetting 0
[  676.580659][T11737] usb 4-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  676.612549][T11737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  676.639831][T11737] usb 4-1: config 0 descriptor??
[  676.811283][T11757] usb 3-1: USB disconnect, device number 89
[  676.838997][T11755] usb 6-1: new low-speed USB device number 93 using dummy_hcd
[  676.860524][T13191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  676.874637][T13203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  676.875644][T13191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.078872][T11755] usb 6-1: Invalid ep0 maxpacket: 64
[  677.199579][T13203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  677.317928][T11755] usb 6-1: new low-speed USB device number 94 using dummy_hcd
[  677.330485][T11737] usbhid 4-1:0.0: can't add hid device: -71
[  677.336692][T11737] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  677.457676][T11737] usb 4-1: USB disconnect, device number 96
[  677.493513][T11755] usb 6-1: Invalid ep0 maxpacket: 64
[  677.499821][T11755] usb usb6-port1: attempt power cycle
[  677.605323][T13212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1745'.
[  677.779731][T11741] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  677.801117][T13213] tipc: Started in network mode
[  677.806060][T13213] tipc: Node identity ac1414aa, cluster identity 4711
[  677.818807][T13213] tipc: Enabled bearer <udp:syz2>, priority 10
[  677.847501][T11755] usb 6-1: new low-speed USB device number 95 using dummy_hcd
[  677.878191][T11755] usb 6-1: Invalid ep0 maxpacket: 64
[  677.947407][T11741] usb 3-1: Using ep0 maxpacket: 8
[  677.954789][T11741] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  677.968186][T11741] usb 3-1: config 179 has no interface number 0
[  677.990479][T11741] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  678.007825][T11755] usb 6-1: new low-speed USB device number 96 using dummy_hcd
[  678.033379][T11741] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  678.040578][T11755] usb 6-1: Invalid ep0 maxpacket: 64
[  678.056406][T11755] usb usb6-port1: unable to enumerate USB device
[  678.089348][T11741] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  678.123309][T11741] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  678.162323][T11741] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  678.179225][T11741] usb 3-1: config 179 interface 65 has no altsetting 0
[  678.186268][T11741] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  678.196689][T11741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  678.203560][T13220] loop2: detected capacity change from 0 to 7
[  678.212646][T13220] Dev loop2: unable to read RDB block 7
[  678.238557][T11741] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input38
[  678.241869][T13220]  loop2: AHDI p1 p2 p3 p4
[  678.264635][T13220] loop2: partition table partially beyond EOD, truncated
[  678.276130][T13220] loop2: p1 start 1601398130 is beyond EOD, truncated
[  678.290319][T13220] loop2: p2 start 1702059890 is beyond EOD, truncated
[  678.297538][T13220] loop2: p3 size 3070370205 extends beyond EOD, truncated
[  678.391464][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  678.866990][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1750'.
[  678.901612][T13227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  678.911299][T13227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  678.922902][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1750'.
[  678.937875][T11757] tipc: Node number set to 2886997162
[  678.946362][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1750'.
[  679.294733][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  679.294755][   T30] audit: type=1800 audit(1772537484.709:501): pid=13232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1752" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  680.942116][T11737] usb 3-1: USB disconnect, device number 90
[  681.215622][T13242] loop2: detected capacity change from 0 to 7
[  681.242967][T13242] Dev loop2: unable to read RDB block 7
[  681.270793][T13242]  loop2: unable to read partition table
[  681.293981][T13242] loop2: partition table beyond EOD, truncated
[  681.325033][T13242] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  681.382234][ T5193] Dev loop2: unable to read RDB block 7
[  681.393673][ T5193]  loop2: unable to read partition table
[  681.406679][ T5193] loop2: partition table beyond EOD, truncated
[  681.533701][   T51] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  682.147849][T11755] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  682.344651][T11755] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  682.551837][T11755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  682.614222][T11755] usb 3-1: Product: syz
[  682.619332][T13260] loop2: detected capacity change from 0 to 7
[  682.629715][T11755] usb 3-1: Manufacturer: syz
[  682.641973][T11755] usb 3-1: SerialNumber: syz
[  682.647782][ T8023] Dev loop2: unable to read RDB block 7
[  682.653388][ T8023]  loop2: AHDI p1 p2 p3 p4
[  682.667152][ T8023] loop2: partition table partially beyond EOD, truncated
[  682.691123][T11755] usb 3-1: config 0 descriptor??
[  682.697808][ T8023] loop2: p1 start 1601398130 is beyond EOD, truncated
[  682.708453][ T8023] loop2: p2 start 1702059890 is beyond EOD, truncated
[  682.719278][T11755] hub 3-1:0.0: bad descriptor, ignoring hub
[  682.725278][T11755] hub 3-1:0.0: probe with driver hub failed with error -5
[  682.735256][ T8023] loop2: p3 size 3070370205 extends beyond EOD, truncated
[  682.752917][T13260] Dev loop2: unable to read RDB block 7
[  682.758808][T13260]  loop2: AHDI p1 p2 p3 p4
[  682.779495][T13260] loop2: partition table partially beyond EOD, truncated
[  682.786862][T13260] loop2: p1 start 1601398130 is beyond EOD, truncated
[  682.798731][T13260] loop2: p2 start 1702059890 is beyond EOD, truncated
[  682.805733][T13260] loop2: p3 size 3070370205 extends beyond EOD, truncated
[  682.900627][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  682.910897][T13257] fuse: Unknown parameter '00000000000000000000fd'
[  682.944685][T11755] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware
[  683.013276][T11755] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  683.025778][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  683.042838][T13269] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  683.047264][T11755] dib0700: firmware download failed at 7 with -22
[  683.102176][T11755] usb 3-1: USB disconnect, device number 91
[  683.142400][T13275] loop2: detected capacity change from 0 to 7
[  683.175213][ T8023] Dev loop2: unable to read RDB block 7
[  683.190821][ T8023]  loop2: unable to read partition table
[  683.220625][ T8023] loop2: partition table beyond EOD, truncated
[  683.242530][T13275] Dev loop2: unable to read RDB block 7
[  683.258055][T11759] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  683.272779][T13275]  loop2: unable to read partition table
[  683.290758][T13275] loop2: partition table beyond EOD, truncated
[  683.328010][T13275] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  683.419457][T11759] usb 5-1: Using ep0 maxpacket: 16
[  683.440884][T11759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  683.464761][T11759] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96
[  683.476257][T11759] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  683.488038][T11759] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  683.533544][T11759] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  683.551361][T11759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  683.560951][T11759] usb 5-1: SerialNumber: syz
[  683.587979][T13267] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  683.595313][T13267] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  683.621918][T11759] hub 5-1:1.0: bad descriptor, ignoring hub
[  683.638086][T11759] hub 5-1:1.0: probe with driver hub failed with error -5
[  683.757637][T11757] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[  683.829173][T13266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  683.836484][T13266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  683.878936][T11759] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -32
[  683.927522][T11757] usb 6-1: Using ep0 maxpacket: 32
[  683.935313][T11757] usb 6-1: config 0 has an invalid interface number: 151 but max is 0
[  683.944990][T11757] usb 6-1: config 0 has no interface number 0
[  683.951892][T11757] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  683.966967][T11757] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  683.976936][T11757] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.986450][T11757] usb 6-1: Product: syz
[  683.992107][T11757] usb 6-1: Manufacturer: syz
[  683.996887][T11757] usb 6-1: SerialNumber: syz
[  684.007569][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  684.019029][T11757] usb 6-1: config 0 descriptor??
[  685.156424][T11757] usb 6-1: USB disconnect, device number 97
[  685.242562][ T8023] udevd[8023]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  685.814695][T13319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1777'.
[  686.142272][T11757] usb 5-1: USB disconnect, device number 102
[  686.266021][T13327] loop2: detected capacity change from 0 to 7
[  686.346765][T13327] Dev loop2: unable to read RDB block 7
[  686.376198][T13327]  loop2: unable to read partition table
[  686.404234][T13327] loop2: partition table beyond EOD, truncated
[  686.437471][T13327] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  686.571397][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  686.578130][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  687.267442][T11759] usb 5-1: new full-speed USB device number 103 using dummy_hcd
[  687.729591][T11759] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  687.756617][T11759] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  687.766671][T11759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  687.802436][T11759] usb 5-1: Product: syz
[  687.806681][T11759] usb 5-1: Manufacturer: syz
[  687.822956][T13335] libceph: resolve '0..' (ret=-3): failed
[  687.850092][T11759] usb 5-1: SerialNumber: syz
[  687.896035][T11759] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  688.047773][T11737] usb 6-1: new full-speed USB device number 98 using dummy_hcd
[  688.283798][T11737] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  688.334946][T11737] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  688.366169][T11737] usb 6-1: config 1 has no interface number 0
[  688.495764][T11737] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  688.683548][T11737] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  688.711173][T11737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.722048][T11759] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  688.766270][T11759] usb 5-1: USB disconnect, device number 103
[  688.776745][T11737] usb 6-1: Product: syz
[  688.787948][T11757] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  688.816386][T11737] usb 6-1: Manufacturer: syz
[  688.942567][T11757] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  688.961659][T11757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  688.986252][T11757] usb 2-1: Product: syz
[  689.001377][T11757] usb 2-1: Manufacturer: syz
[  689.015398][T11757] usb 2-1: SerialNumber: syz
[  689.037831][T11757] usb 2-1: config 0 descriptor??
[  689.055445][T11737] usb 6-1: SerialNumber: syz
[  689.066090][T11757] gspca_main: sq905c-2.14.0 probing 2770:9052
[  689.222181][T11737] cdc_ncm 6-1:1.1: NCM or ECM functional descriptors missing
[  689.317440][T11737] cdc_ncm 6-1:1.1: bind() failure
[  689.969143][T11757] gspca_sq905c: sq905c_command: usb_control_msg failed (-110)
[  689.980323][T11757] sq905c 2-1:0.0: probe with driver sq905c failed with error -110
[  690.167695][T11737] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[  690.350855][T11737] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  690.360433][T11737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  690.383559][T11737] usb 5-1: Product: syz
[  690.396050][T11737] usb 5-1: Manufacturer: syz
[  690.407553][T11737] usb 5-1: SerialNumber: syz
[  690.683244][T13362] loop2: detected capacity change from 0 to 7
[  690.702852][ T8040] Dev loop2: unable to read RDB block 7
[  690.716708][ T8040]  loop2: unable to read partition table
[  690.740477][ T8040] loop2: partition table beyond EOD, truncated
[  690.756496][T13362] Dev loop2: unable to read RDB block 7
[  690.778920][T13362]  loop2: unable to read partition table
[  690.798037][T13362] loop2: partition table beyond EOD, truncated
[  690.819286][T13362] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  690.843163][T13359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  690.866378][T13359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.020353][T13355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  691.058652][T13355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  691.307516][T11741] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  691.398656][T11733] usb 6-1: USB disconnect, device number 98
[  691.442498][T13366] FAULT_INJECTION: forcing a failure.
[  691.442498][T13366] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  691.476755][T13366] CPU: 1 UID: 0 PID: 13366 Comm: syz.3.1792 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  691.476793][T13366] Tainted: [L]=SOFTLOCKUP
[  691.476802][T13366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  691.476815][T13366] Call Trace:
[  691.476824][T13366]  <TASK>
[  691.476834][T13366]  dump_stack_lvl+0xe8/0x150
[  691.476870][T13366]  should_fail_ex+0x412/0x560
[  691.477024][T13366]  _copy_to_user+0x31/0xb0
[  691.477108][T13366]  simple_read_from_buffer+0xe1/0x170
[  691.477155][T13366]  proc_fail_nth_read+0x1bb/0x230
[  691.477213][T13366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  691.477246][T13366]  ? rw_verify_area+0x2a6/0x4d0
[  691.477266][T13366]  ? tun_chr_write_iter+0x18a/0x200
[  691.477335][T13366]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  691.477365][T13366]  vfs_read+0x20c/0xa70
[  691.477383][T13366]  ? fdget_pos+0x246/0x320
[  691.477415][T13366]  ? __pfx___mutex_lock+0x10/0x10
[  691.477474][T13366]  ? __pfx_vfs_read+0x10/0x10
[  691.477498][T13366]  ? __fget_files+0x2a/0x420
[  691.477530][T13366]  ? __fget_files+0x3a0/0x420
[  691.477558][T13366]  ? __fget_files+0x2a/0x420
[  691.477596][T13366]  ksys_read+0x150/0x270
[  691.477620][T13366]  ? __pfx_ksys_read+0x10/0x10
[  691.477653][T13366]  do_syscall_64+0x14d/0xf80
[  691.477672][T13366]  ? trace_irq_disable+0x3b/0x150
[  691.477702][T13366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.477724][T13366]  ? clear_bhb_loop+0x40/0x90
[  691.477750][T13366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  691.477771][T13366] RIP: 0033:0x7f349715cfce
[  691.477791][T13366] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  691.477809][T13366] RSP: 002b:00007f34980a3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  691.477831][T13366] RAX: ffffffffffffffda RBX: 00007f34980a46c0 RCX: 00007f349715cfce
[  691.477846][T13366] RDX: 000000000000000f RSI: 00007f34980a40a0 RDI: 0000000000000003
[  691.477858][T13366] RBP: 00007f34980a4090 R08: 0000000000000000 R09: 0000000000000000
[  691.477870][T13366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  691.477882][T13366] R13: 00007f3497416038 R14: 00007f3497415fa0 R15: 00007f349753fa48
[  691.477915][T13366]  </TASK>
[  691.983007][T11741] usb 3-1: Using ep0 maxpacket: 8
[  692.039372][T13364] loop9: detected capacity change from 0 to 7
[  692.046658][T13364] Dev loop9: unable to read RDB block 7
[  692.053383][T13364]  loop9: unable to read partition table
[  692.077547][T13364] loop9: partition table beyond EOD, truncated
[  692.093641][T11737] rtl8150 5-1:1.0: couldn't reset the device
[  692.098219][T13364] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  692.191652][T11741] usb 3-1: unable to get BOS descriptor or descriptor too short
[  692.233989][T11737] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5
[  692.247554][T11741] usb 3-1: unable to read config index 0 descriptor/start: -71
[  692.332000][T11757] usb 2-1: USB disconnect, device number 102
[  692.337508][T11741] usb 3-1: can't read configurations, error -71
[  692.433660][T13374] fuse: Unknown parameter 'g´þ0xffffffffffffffff'
[  692.971209][T13383] loop2: detected capacity change from 0 to 7
[  693.000417][T13383] Dev loop2: unable to read RDB block 7
[  693.014776][T13383]  loop2: AHDI p1 p2 p3 p4
[  693.029573][T13383] loop2: partition table partially beyond EOD, truncated
[  693.049303][T13383] loop2: p1 start 1601398130 is beyond EOD, truncated
[  693.073792][T13383] loop2: p2 start 1702059890 is beyond EOD, truncated
[  693.092025][T13383] loop2: p3 size 3070370205 extends beyond EOD, truncated
[  693.116415][T13387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1796'.
[  693.684305][T11755] usb 5-1: USB disconnect, device number 104
[  693.787082][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  693.889175][T13387] bridge_slave_1: left allmulticast mode
[  693.908198][T13387] bridge_slave_1: left promiscuous mode
[  693.934189][T13387] bridge0: port 2(bridge_slave_1) entered disabled state
[  693.984847][T13387] bridge_slave_0: left allmulticast mode
[  693.990735][T13387] bridge_slave_0: left promiscuous mode
[  693.997724][T13387] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.032982][T13391] loop2: detected capacity change from 0 to 7
[  694.040566][T13391] Dev loop2: unable to read RDB block 7
[  694.064190][T13391]  loop2: unable to read partition table
[  694.082492][T13391] loop2: partition table beyond EOD, truncated
[  694.094898][T13391] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  694.128292][ T5193] Dev loop2: unable to read RDB block 7
[  694.134036][ T5193]  loop2: unable to read partition table
[  694.164694][ T5193] loop2: partition table beyond EOD, truncated
[  694.867509][T11741] usb 6-1: new low-speed USB device number 99 using dummy_hcd
[  695.041174][T11741] usb 6-1: config 0 has no interfaces?
[  695.207291][T11741] usb 6-1: string descriptor 0 read error: -22
[  695.213866][T11741] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=5f.b5
[  695.254752][T11741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.368089][T11741] usb 6-1: config 0 descriptor??
[  696.257596][T11757] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[  696.397420][T11757] usb 2-1: device descriptor read/64, error -71
[  696.637449][T11757] usb 2-1: new full-speed USB device number 104 using dummy_hcd
[  696.787499][T11757] usb 2-1: device descriptor read/64, error -71
[  696.918092][T11757] usb usb2-port1: attempt power cycle
[  697.020373][T13435] loop2: detected capacity change from 0 to 7
[  697.031534][T13435] Dev loop2: unable to read RDB block 7
[  697.037262][T13435]  loop2: AHDI p1 p2 p3 p4
[  697.042779][T13435] loop2: partition table partially beyond EOD, truncated
[  697.050485][T13435] loop2: p1 start 1601398130 is beyond EOD, truncated
[  697.058036][T13435] loop2: p2 start 1702059890 is beyond EOD, truncated
[  697.064856][T13435] loop2: p3 size 3070370205 extends beyond EOD, truncated
[  697.163575][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  697.258410][T11757] usb 2-1: new full-speed USB device number 105 using dummy_hcd
[  697.267284][T11755] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  697.288356][T11757] usb 2-1: device descriptor read/8, error -71
[  697.408168][T11755] usb 3-1: device descriptor read/64, error -71
[  697.468679][T11759] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[  697.528229][T11757] usb 2-1: new full-speed USB device number 106 using dummy_hcd
[  697.546803][T11741] usb 6-1: USB disconnect, device number 99
[  697.567011][T11757] usb 2-1: device descriptor read/8, error -71
[  697.628717][T13441] hsr0: entered promiscuous mode
[  697.634282][T11759] usb 5-1: Using ep0 maxpacket: 32
[  697.640482][T13441] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1813'.
[  697.652080][T11759] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  697.660376][T11755] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  697.668437][T11759] usb 5-1: config 0 has no interface number 0
[  697.675926][T13441] hsr_slave_0: left promiscuous mode
[  697.682151][T11757] usb usb2-port1: unable to enumerate USB device
[  697.690827][T11759] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  697.701162][T11759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  697.709510][T13441] hsr_slave_1: left promiscuous mode
[  697.761348][T11759] usb 5-1: Product: syz
[  697.768197][T11759] usb 5-1: Manufacturer: syz
[  697.990281][T11755] usb 3-1: device descriptor read/64, error -71
[  698.073891][T13447] fuse: Bad value for 'fd'
[  698.123719][T11755] usb usb3-port1: attempt power cycle
[  698.131424][T13441] hsr0 (unregistering): left promiscuous mode
[  698.166948][T11759] usb 5-1: SerialNumber: syz
[  698.279327][T11759] usb 5-1: config 0 descriptor??
[  698.477862][T11755] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  698.498213][T11755] usb 3-1: device descriptor read/8, error -71
[  698.627903][T13453] hub 9-0:1.0: USB hub found
[  698.633158][T13453] hub 9-0:1.0: 1 port detected
[  698.688084][T11759] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  698.699774][T11759] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  698.804575][T11759] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  698.816836][T11759] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32
[  698.857684][T11755] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  698.881203][T11755] usb 3-1: device descriptor read/8, error -71
[  698.941994][T11759] usb 5-1: USB disconnect, device number 105
[  699.033734][T11755] usb usb3-port1: unable to enumerate USB device
[  699.104661][T13458] input: syz0 as /devices/virtual/input/input39
[  699.959152][T11737] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[  700.085031][T13477] loop2: detected capacity change from 0 to 7
[  700.107853][T13477] Dev loop2: unable to read RDB block 7
[  700.132369][T13477]  loop2: AHDI p1 p2 p3 p4
[  700.147520][T13477] loop2: partition table partially beyond EOD, truncated
[  700.163078][T11737] usb 5-1: Using ep0 maxpacket: 16
[  700.178970][T11737] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  700.192698][T11737] usb 5-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  700.193202][T13477] loop2: p1 start 1601398130 is beyond EOD, 
[  700.236104][T11737] usb 5-1: config 0 interface 0 has no altsetting 0
[  700.257575][T13477] truncated
[  700.300727][T11737] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00
[  700.310203][T11737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.338202][T11737] usb 5-1: config 0 descriptor??
[  700.363528][T13477] loop2: p2 start 1702059890 is beyond EOD, truncated
[  700.418393][T13477] loop2: p3 size 3070370205 extends beyond EOD, truncated
[  700.559090][ T8023] udevd[8023]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  700.597907][T11737] usbhid 5-1:0.0: can't add hid device: -71
[  700.604548][T11737] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  700.638824][T11737] usb 5-1: USB disconnect, device number 106
[  701.167559][T11733] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[  701.227894][T11737] usb 5-1: new low-speed USB device number 107 using dummy_hcd
[  701.328025][T11733] usb 6-1: Using ep0 maxpacket: 16
[  701.335309][T11733] usb 6-1: unable to get BOS descriptor or descriptor too short
[  701.345087][T11733] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  701.358129][T11733] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  701.374131][T11733] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.406768][T11741] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  701.427921][T11737] usb 5-1: unable to get BOS descriptor or descriptor too short
[  701.438885][T11737] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0
[  701.450684][T11733] usb 6-1: Product: syz
[  701.454979][T11733] usb 6-1: Manufacturer: syz
[  701.464089][T11737] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0
[  701.475119][T11733] usb 6-1: SerialNumber: syz
[  701.483104][T11759] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  701.499696][T11737] usb 5-1: string descriptor 0 read error: -22
[  701.517228][T11737] usb 5-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40
[  701.540222][T11737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.571099][T11737] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  701.578604][T11741] usb 3-1: Using ep0 maxpacket: 32
[  701.588938][T11737] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2
[  701.602298][T11741] usb 3-1: config 0 has an invalid interface number: 247 but max is 0
[  701.621323][T11741] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  701.643812][T11741] usb 3-1: config 0 has no interface number 0
[  701.652766][T11741] usb 3-1: config 0 interface 247 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  701.669112][T11741] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  701.672643][T11759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  701.691089][T11741] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  701.699774][T11741] usb 3-1: Product: syz
[  701.699958][T11759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  701.718867][T11759] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  701.720856][T11741] usb 3-1: Manufacturer: syz
[  701.733916][T11759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.750215][T11759] usb 4-1: config 0 descriptor??
[  701.772099][T11741] usb 3-1: config 0 descriptor??
[  701.783128][T11757] usb 5-1: USB disconnect, device number 107
[  701.875938][T11741] usb 6-1: USB disconnect, device number 100
[  701.976522][T11759] hid-steam 0003:28DE:1142.0019: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  702.029823][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1831'.
[  702.067513][T11759] hid-steam 0003:28DE:1142.0019: Steam wireless receiver connected
[  702.094145][T11759] hid-steam 0003:28DE:1142.001A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[  702.205505][T11759] usb 4-1: USB disconnect, device number 97
[  702.221653][T11759] hid-steam 0003:28DE:1142.0019: Steam wireless receiver disconnected
[  702.345445][T13509] fido_id[13509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  702.476509][T11759] usb 3-1: USB disconnect, device number 98
[  702.698534][T13515] fuse: Bad value for 'fd'
[  702.767452][T11741] usb 5-1: new full-speed USB device number 108 using dummy_hcd
[  702.961570][T11741] usb 5-1: config index 0 descriptor too short (expected 63186, got 210)
[  702.986299][T11741] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[  702.995658][T11741] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  703.007801][T11741] usb 5-1: config 0 has no interface number 0
[  703.014024][T11741] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  703.025766][T11741] usb 5-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  703.060321][T11741] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  703.104018][T11741] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  703.122337][T11741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.145521][T11741] usb 5-1: config 0 descriptor??
[  703.174345][T11741] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  703.184624][T11737] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  703.364847][T11737] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  703.393625][T11737] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  703.444275][T11737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.490729][T11737] usb 2-1: config 0 descriptor??
[  703.604952][ T3029] usb 5-1: Failed to submit usb control message: -71
[  703.605580][ T5960] usb 5-1: USB disconnect, device number 108
[  703.621018][ T3029] usb 5-1: unable to send the bmi data to the device: -71
[  703.637452][T11741] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  703.640202][ T3029] usb 5-1: unable to get target info from device
[  703.653613][ T3029] usb 5-1: could not get target info (-71)
[  703.661491][ T3029] usb 5-1: could not probe fw (-71)
[  703.803033][T11737] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  703.838058][T11741] usb 4-1: Using ep0 maxpacket: 32
[  703.845643][T11741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  703.864023][T11741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  703.883247][T11737] usb 2-1: USB disconnect, device number 107
[  703.903099][T11741] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  703.932127][T11741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  703.961891][T11741] usb 4-1: config 0 descriptor??
[  703.978336][T11741] hub 4-1:0.0: USB hub found
[  704.181003][T11741] hub 4-1:0.0: 26 ports detected
[  704.196734][T11741] hub 4-1:0.0: insufficient power available to use all downstream ports
[  704.271703][T13560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1848'.
[  704.401955][T11741] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  704.418429][T11741] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  704.421307][T13555] fido_id[13555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  704.478115][T11741] usbhid 4-1:0.0: can't add hid device: -71
[  704.494121][T11741] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  704.730975][T11741] usb 4-1: reset high-speed USB device number 98 using dummy_hcd
[  704.778433][   T30] audit: type=1326 audit(1772537510.189:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13571 comm="syz.4.1852" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f221599c799 code=0x0
[  705.147730][T11741] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  705.278914][T11757] usb 4-1: USB disconnect, device number 98
[  705.328333][T11741] usb 5-1: Using ep0 maxpacket: 16
[  705.341290][T11741] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  705.351133][T11741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.412850][T11741] usb 5-1: config 0 descriptor??
[  705.432813][T11741] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  706.103818][T13597] macsec0: entered promiscuous mode
[  706.118718][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1858'.
[  706.247016][T13597] macsec0 (unregistering): left promiscuous mode
[  706.336257][T11757] usb 4-1: new high-speed USB device number 99 using dummy_hcd
[  706.530895][T11757] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  706.549776][T11757] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  706.590985][T11757] usb 4-1: config 1 has no interface number 0
[  706.615774][T11757] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 222, using maximum allowed: 30
[  706.647485][T11757] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  706.684970][T11757] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 222
[  706.727121][T11757] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  706.754557][T11757] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 6
[  706.786700][T11757] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  706.831119][T11757] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=17.40
[  706.883877][T11757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  706.925511][T11757] usb 4-1: Product: syz
[  706.936127][T11757] usb 4-1: Manufacturer: syz
[  706.950238][T11757] usb 4-1: SerialNumber: syz
[  707.175364][T13600] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  707.432145][T13600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.502377][T13600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.979072][T13600] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  708.000093][T11757] cdc_ncm 4-1:1.1: bind() failure
[  708.077499][ T5960] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  708.287475][ T5960] usb 2-1: Using ep0 maxpacket: 16
[  708.315988][ T5960] usb 2-1: unable to get BOS descriptor or descriptor too short
[  708.341903][T11741] usb 5-1: Detected FT232A
[  708.350323][ T5960] usb 2-1: config 8 has an invalid interface number: 12 but max is 1
[  708.369897][T11741] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  708.379234][T13600] program syz.3.1859 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  708.415930][ T5960] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  708.436178][ T5960] usb 2-1: config 8 has 1 interface, different from the descriptor's value: 2
[  708.440034][T11741] usb 5-1: USB disconnect, device number 109
[  708.460246][ T5960] usb 2-1: config 8 has no interface number 0
[  708.476968][ T5960] usb 2-1: config 8 interface 12 has no altsetting 0
[  708.488869][T13620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  708.514937][T11741] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  708.523649][T13620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  708.534554][ T5960] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=4e.f5
[  708.547884][T11741] ftdi_sio 5-1:0.0: device disconnected
[  708.564745][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.589336][ T5960] usb 2-1: Product: syz
[  708.596760][ T5960] usb 2-1: Manufacturer: syz
[  708.608785][ T5960] usb 2-1: SerialNumber: syz
[  708.725196][T11757] usb 4-1: USB disconnect, device number 99
[  708.870468][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'.
[  708.881032][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1869'.
[  708.892002][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'.
[  708.901623][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1869'.
[  709.071717][ T5960] peak_usb 2-1:8.12 can0: unable to request usb[type=0 value=1] err=-32
[  709.097417][ T5960] peak_usb 2-1:8.12: unable to read PCAN-Chip USB firmware info (err -32)
[  709.159570][ T5960] peak_usb 2-1:8.12: probe with driver peak_usb failed with error -32
[  709.268202][T11757] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  709.453199][T11757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  709.464785][T11757] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  709.480350][T11757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.548665][T11757] usb 5-1: config 0 descriptor??
[  709.607192][T11757] pwc: Askey VC010 type 2 USB webcam detected.
[  709.727487][T11755] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  709.806053][T11757] pwc: recv_control_msg error -32 req 02 val 2b00
[  709.815561][T11757] pwc: recv_control_msg error -32 req 02 val 2700
[  709.879383][T11757] pwc: recv_control_msg error -71 req 02 val 2c00
[  709.893454][T11757] pwc: recv_control_msg error -71 req 04 val 1000
[  709.907965][T11757] pwc: recv_control_msg error -71 req 04 val 1300
[  709.954006][T11757] pwc: recv_control_msg error -71 req 04 val 1400
[  709.963894][T11757] pwc: recv_control_msg error -71 req 02 val 2000
[  709.970975][T11757] pwc: recv_control_msg error -71 req 02 val 2100
[  709.977966][T11755] usb 4-1: Using ep0 maxpacket: 32
[  709.994884][T11757] pwc: recv_control_msg error -71 req 04 val 1500
[  710.004677][T11755] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65
[  710.015530][T11755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.153703][T11757] pwc: recv_control_msg error -71 req 02 val 2500
[  710.164809][T11755] usb 4-1: Product: syz
[  710.171912][T11757] pwc: recv_control_msg error -71 req 02 val 2400
[  710.180649][T11755] usb 4-1: Manufacturer: syz
[  710.188269][T11755] usb 4-1: SerialNumber: syz
[  710.193984][T11757] pwc: recv_control_msg error -71 req 02 val 2600
[  710.217285][T11755] usb 4-1: config 0 descriptor??
[  710.223023][T11757] pwc: recv_control_msg error -71 req 02 val 2900
[  710.242330][T11755] gspca_main: vc032x-2.14.0 probing 0ac8:c301
[  710.251618][T11757] pwc: recv_control_msg error -71 req 02 val 2800
[  710.300101][T11757] pwc: recv_control_msg error -71 req 04 val 1100
[  710.318003][T11757] pwc: recv_control_msg error -71 req 04 val 1200
[  710.333375][T11757] pwc: Registered as video103.
[  710.372597][T11757] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input40
[  710.459834][   T30] audit: type=1326 audit(1772537515.869:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13666 comm="syz.4.1876" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f221599c799 code=0x0
[  710.483941][T11755] gspca_vc032x: reg_w err -71
[  710.493225][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.566837][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.668949][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.674438][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.720094][T11757] usb 5-1: USB disconnect, device number 110
[  710.754715][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.787183][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.799705][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.815674][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.827432][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.841313][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.859140][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.871175][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.905605][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.924003][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  710.936341][ T5960] usb 2-1: USB disconnect, device number 108
[  710.976264][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  711.008575][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  711.027643][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  711.033128][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  711.105595][T11755] gspca_vc032x: I2c Bus Busy Wait 00
[  711.178916][T11755] gspca_vc032x: Unknown sensor...
[  711.187653][T11757] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  711.238774][T11755] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  711.378157][T11755] usb 4-1: USB disconnect, device number 100
[  711.397470][T11757] usb 5-1: Using ep0 maxpacket: 16
[  711.420724][T11757] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  711.585839][T11757] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.717855][T11757] usb 5-1: config 0 descriptor??
[  711.863488][T11757] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  711.978049][T13684] vivid-000: disconnect
[  712.257485][T11755] usb 4-1: new high-speed USB device number 101 using dummy_hcd
[  712.267434][T11758] usb 6-1: new high-speed USB device number 101 using dummy_hcd
[  712.417843][T11755] usb 4-1: Using ep0 maxpacket: 32
[  712.473587][T11758] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  712.488674][T11758] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.503545][T11758] usb 6-1: Product: syz
[  712.509162][T11758] usb 6-1: Manufacturer: syz
[  712.514146][T11758] usb 6-1: SerialNumber: syz
[  712.520306][T11755] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  712.545446][T11755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  712.567819][T11755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  712.590937][T11755] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  712.647698][T11755] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 32, changing to 7
[  712.730851][T11755] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  712.763259][T11755] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[  712.781613][T11755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7
[  712.798926][T11755] usb 4-1: Product: syz
[  712.860977][T11755] usb 4-1: Manufacturer: syz
[  712.865742][T11755] usb 4-1: SerialNumber: syz
[  712.880384][T11755] usb 4-1: config 0 descriptor??
[  712.999866][T11755] usb 4-1: no audio or video endpoints found
[  713.209386][T11759] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  713.307681][T11757] usb 5-1: Detected FT232A
[  713.348929][T11757] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  713.390531][T11757] usb 5-1: USB disconnect, device number 111
[  713.444592][T11757] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  713.457000][T11757] ftdi_sio 5-1:0.0: device disconnected
[  713.495102][T11759] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  713.535587][T11759] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  713.557940][T11758] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  713.567234][T11758] cdc_ncm 6-1:1.0: setting tx_max = 16384
[  713.576477][T11759] usb 3-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00
[  713.616780][T11759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  713.654867][T11759] usb 3-1: SerialNumber: syz
[  713.970278][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'.
[  713.979851][T13707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1887'.
[  714.069343][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'.
[  714.092658][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1887'.
[  714.106019][T11758] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  714.216204][T11758] usb 6-1: USB disconnect, device number 101
[  714.224376][T11758] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP)
[  715.277505][T11740] usb 6-1: new high-speed USB device number 102 using dummy_hcd
[  715.383524][T11758] usb 4-1: USB disconnect, device number 101
[  715.433658][T11740] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  715.445358][T11741] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  715.455555][T11740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  715.481715][T13678] vivid-000: reconnect
[  715.484838][T11740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  715.498743][T11740] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  715.512262][T11740] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  715.523289][T11740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.545021][T11740] usb 6-1: config 0 descriptor??
[  715.598724][T11741] usb 5-1: Using ep0 maxpacket: 32
[  715.688628][T11741] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  715.699399][T11741] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  715.711155][T11741] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  715.744038][T11741] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  715.759138][T11741] usb 5-1: config 0 interface 0 has no altsetting 0
[  715.765861][T11741] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00
[  715.779273][T11741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  715.792021][T11759] usb 3-1: 0:2 : does not exist
[  715.794245][T11741] usb 5-1: config 0 descriptor??
[  716.004137][T11740] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  716.113362][T11759] usb 3-1: USB disconnect, device number 99
[  716.272808][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.288177][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  716.306122][T13569] udevd[13569]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  716.461580][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  716.510706][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  717.288321][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  717.340675][T11741] usbhid 5-1:0.0: can't add hid device: -71
[  717.347029][T11741] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  717.392709][T11741] usb 5-1: USB disconnect, device number 112
[  717.559282][T11759] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  717.717710][T11759] usb 3-1: Using ep0 maxpacket: 16
[  717.737283][T11759] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  717.746646][T11759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  717.766033][T11759] usb 3-1: config 0 descriptor??
[  717.779450][T11759] gspca_main: sonixj-2.14.0 probing 0471:0327
[  718.382740][T11759] gspca_sonixj: reg_r err -32
[  718.407541][T11759] sonixj 3-1:0.0: probe with driver sonixj failed with error -32
[  718.471757][ T5960] usb 3-1: USB disconnect, device number 100
[  718.675861][T13781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'.
[  718.686113][T13781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1908'.
[  718.712488][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'.
[  718.722189][T13781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1908'.
[  718.739588][T11737] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  718.827548][T11741] usb 6-1: reset high-speed USB device number 102 using dummy_hcd
[  718.836727][ T5960] usb 4-1: new low-speed USB device number 102 using dummy_hcd
[  718.897695][T11737] usb 2-1: Using ep0 maxpacket: 8
[  718.912699][T13768] loop9: detected capacity change from 0 to 7
[  718.939504][ T8023] Dev loop9: unable to read RDB block 7
[  718.945344][ T8023]  loop9: unable to read partition table
[  718.960788][T13788] xt_l2tp: wrong L2TP version: 0
[  718.966710][ T8023] loop9: partition table beyond EOD, truncated
[  718.980412][T13768] Dev loop9: unable to read RDB block 7
[  718.999549][ T5960] usb 4-1: Invalid ep0 maxpacket: 64
[  719.020415][T13768]  loop9: unable to read partition table
[  719.026854][T13768] loop9: partition table beyond EOD, truncated
[  719.036557][T11741] usb 6-1: device firmware changed
[  719.051384][T11740] usb 6-1: USB disconnect, device number 102
[  719.139774][ T5960] usb 4-1: new low-speed USB device number 103 using dummy_hcd
[  719.157024][T13768] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  719.241234][T11737] usb 2-1: unable to get BOS descriptor or descriptor too short
[  719.269559][T11737] usb 2-1: unable to read config index 0 descriptor/start: -71
[  719.279574][T11737] usb 2-1: can't read configurations, error -71
[  719.298065][ T5960] usb 4-1: Invalid ep0 maxpacket: 64
[  719.303975][ T5960] usb usb4-port1: attempt power cycle
[  719.327503][T11741] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  719.357478][T11740] usb 6-1: new high-speed USB device number 103 using dummy_hcd
[  719.498474][T11741] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  719.508813][T11741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.518834][T11741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.530179][T11741] usb 5-1: config 0 interface 0 has no altsetting 0
[  719.537103][T11740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  719.548851][T11740] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  719.567521][T11741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.579915][T11740] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  719.597949][T11741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.609279][T11740] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  719.621508][T11741] usb 5-1: config 0 interface 0 has no altsetting 0
[  719.629181][T11740] usb 6-1: Manufacturer: syz
[  719.637854][T11741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.646802][T11741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.658220][T11740] usb 6-1: config 0 descriptor??
[  719.663546][ T5960] usb 4-1: new low-speed USB device number 104 using dummy_hcd
[  719.671524][T11741] usb 5-1: config 0 interface 0 has no altsetting 0
[  719.683580][T11741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.701011][T11741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.712702][ T5960] usb 4-1: Invalid ep0 maxpacket: 64
[  719.718152][T11741] usb 5-1: config 0 interface 0 has no altsetting 0
[  719.727232][T11741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.743054][T11741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.756681][T11741] usb 5-1: config 0 interface 0 has no altsetting 0
[  719.783864][T11741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.793850][T11741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.805108][T11741] usb 5-1: config 0 interface 0 has no altsetting 0
[  719.815284][T11741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.827174][T11741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.838744][T11741] usb 5-1: config 0 interface 0 has no altsetting 0
[  719.846544][T11741] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  719.857698][ T5960] usb 4-1: new low-speed USB device number 105 using dummy_hcd
[  719.867821][T11741] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  719.880323][T11741] usb 5-1: config 0 interface 0 has no altsetting 0
[  719.888408][ T5960] usb 4-1: Invalid ep0 maxpacket: 64
[  719.896401][ T5960] usb usb4-port1: unable to enumerate USB device
[  719.904177][T11741] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  719.914093][T11741] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  719.923984][T11741] usb 5-1: Product: syz
[  719.928584][T11741] usb 5-1: Manufacturer: syz
[  719.933263][T11741] usb 5-1: SerialNumber: syz
[  719.942535][T11741] usb 5-1: config 0 descriptor??
[  719.978147][T11741] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  720.007928][T11759] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  720.191835][T11759] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  720.207427][T11759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  720.215505][T11759] usb 3-1: Product: syz
[  720.227688][T11759] usb 3-1: Manufacturer: syz
[  720.232375][T11759] usb 3-1: SerialNumber: syz
[  720.283210][T13799] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3234285568 (51748569088 ns) > initial count (202142848 ns). Using initial count to start timer.
[  720.397576][T11737] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[  720.569582][T11737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  720.587689][T11737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  720.607424][T11737] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  720.616655][T11737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.642278][T11737] usb 2-1: config 0 descriptor??
[  720.651819][T11759] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  720.670384][T11759] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  720.682906][T11759] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  720.696192][T11759] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  720.710347][T11759] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  720.723910][T11759] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32
[  721.078236][T11737] elan 0003:04F3:0755.001D: failed to start in urb: -90
[  721.091192][T11737] elan 0003:04F3:0755.001D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  721.279799][T11759] usb 2-1: USB disconnect, device number 111
[  721.910299][T11740] usbhid 6-1:0.0: can't add hid device: -71
[  721.927874][    C1] usb 5-1: yurex_control_callback - control failed: -2
[  721.942943][T11740] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  721.972542][T11740] usb 6-1: USB disconnect, device number 103
[  722.004520][T11757] usb 5-1: USB disconnect, device number 113
[  722.017753][T11759] usb 4-1: new high-speed USB device number 106 using dummy_hcd
[  722.042189][T11757] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  722.142330][T13818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.162781][T13818] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.178908][T11741] usb 2-1: new full-speed USB device number 112 using dummy_hcd
[  722.209321][T11759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  722.220620][T11759] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  722.231053][T11759] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  722.240218][T11759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.264054][T11759] usb 4-1: config 0 descriptor??
[  722.272261][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1919'.
[  722.282018][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1919'.
[  722.292401][T13822] FAULT_INJECTION: forcing a failure.
[  722.292401][T13822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  722.306149][T13822] CPU: 1 UID: 0 PID: 13822 Comm: syz.5.1919 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  722.306174][T13822] Tainted: [L]=SOFTLOCKUP
[  722.306197][T13822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  722.306211][T13822] Call Trace:
[  722.306221][T13822]  <TASK>
[  722.306230][T13822]  dump_stack_lvl+0xe8/0x150
[  722.306264][T13822]  should_fail_ex+0x412/0x560
[  722.306297][T13822]  _copy_from_iter+0x1d3/0x1670
[  722.306376][T13822]  ? rcu_is_watching+0x15/0xb0
[  722.306411][T13822]  ? __pfx__copy_from_iter+0x10/0x10
[  722.306450][T13822]  ? netlink_sendmsg+0x650/0xb40
[  722.306560][T13822]  ? skb_put+0x11b/0x210
[  722.306653][T13822]  netlink_sendmsg+0x6c0/0xb40
[  722.306695][T13822]  ? __pfx_netlink_sendmsg+0x10/0x10
[  722.306726][T13822]  ? aa_sock_msg_perm+0xf1/0x1b0
[  722.306885][T13822]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  722.306926][T13822]  ? __pfx_netlink_sendmsg+0x10/0x10
[  722.306955][T13822]  ____sys_sendmsg+0xa68/0xad0
[  722.307018][T13822]  ? __pfx_____sys_sendmsg+0x10/0x10
[  722.307059][T13822]  ? import_iovec+0x73/0xa0
[  722.307113][T13822]  ___sys_sendmsg+0x2a5/0x360
[  722.307141][T13822]  ? __pfx____sys_sendmsg+0x10/0x10
[  722.307217][T13822]  ? __fget_files+0x2a/0x420
[  722.307246][T13822]  ? __fget_files+0x3a0/0x420
[  722.307283][T13822]  __x64_sys_sendmsg+0x1bd/0x2a0
[  722.307333][T13822]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  722.307372][T13822]  ? __pfx_ksys_write+0x10/0x10
[  722.307404][T13822]  do_syscall_64+0x14d/0xf80
[  722.307423][T13822]  ? trace_irq_disable+0x3b/0x150
[  722.307452][T13822]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.307473][T13822]  ? clear_bhb_loop+0x40/0x90
[  722.307507][T13822]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  722.307527][T13822] RIP: 0033:0x7f1571d9c799
[  722.307549][T13822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  722.307567][T13822] RSP: 002b:00007f1572ba5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  722.307590][T13822] RAX: ffffffffffffffda RBX: 00007f1572015fa0 RCX: 00007f1571d9c799
[  722.307605][T13822] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003
[  722.307617][T13822] RBP: 00007f1572ba5090 R08: 0000000000000000 R09: 0000000000000000
[  722.307630][T13822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  722.307642][T13822] R13: 00007f1572016038 R14: 00007f1572015fa0 R15: 00007f157213fa48
[  722.307675][T13822]  </TASK>
[  722.562133][T13807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.570767][T11757] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  722.585568][T13807] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.597796][T11759] usbhid 4-1:0.0: can't add hid device: -71
[  722.604546][T11759] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  722.615121][T11741] usb 2-1: unable to get BOS descriptor or descriptor too short
[  722.620727][T11759] usb 4-1: USB disconnect, device number 106
[  722.629937][T11741] usb 2-1: not running at top speed; connect to a high speed hub
[  722.641307][T11741] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  722.651017][T11741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.659379][T11741] usb 2-1: Product: syz
[  722.663578][T11741] usb 2-1: Manufacturer: syz
[  722.668341][T11741] usb 2-1: SerialNumber: syz
[  722.747683][T11757] usb 5-1: Using ep0 maxpacket: 16
[  722.771279][T11757] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  722.787756][T11757] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  722.805205][T11758] usb 3-1: USB disconnect, device number 101
[  722.821385][T11757] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  722.847473][T11757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  722.855534][T11757] usb 5-1: Product: syz
[  722.918984][T11757] usb 5-1: Manufacturer: syz
[  722.923662][T11757] usb 5-1: SerialNumber: syz
[  722.989204][T11759] usb 6-1: new high-speed USB device number 104 using dummy_hcd
[  723.148213][T11759] usb 6-1: Using ep0 maxpacket: 16
[  723.177281][T11759] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  723.188918][T11759] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  723.259808][T11757] usb 5-1: 0:2 : does not exist
[  723.331299][T11757] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  723.426318][T11759] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  723.498095][T11759] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.532378][T11759] usb 6-1: Product: syz
[  723.543615][T11759] usb 6-1: Manufacturer: syz
[  723.565295][T11759] usb 6-1: SerialNumber: syz
[  723.584445][T11757] usb 5-1: USB disconnect, device number 114
[  723.801557][T13835] loop2: detected capacity change from 0 to 7
[  723.812166][T13835] Dev loop2: unable to read RDB block 7
[  723.818079][T13835]  loop2: AHDI p1 p2 p3 p4
[  723.823288][T13835] loop2: partition table partially beyond EOD, truncated
[  723.830860][T13835] loop2: p1 start 1601398130 is beyond EOD, truncated
[  723.838421][T13835] loop2: p2 start 1702059890 is beyond EOD, truncated
[  723.845264][T13835] loop2: p3 size 3070370205 extends beyond EOD, truncated
[  723.857624][T11737] usb 4-1: new high-speed USB device number 107 using dummy_hcd
[  723.914333][ T8025] udevd[8025]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  723.965163][ T8025] udevd[8025]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  724.011403][T11759] usb 6-1: 0:2 : does not exist
[  724.047445][T11737] usb 4-1: Using ep0 maxpacket: 8
[  724.071817][T13833] loop9: detected capacity change from 0 to 7
[  724.082868][ T8025] Dev loop9: unable to read RDB block 7
[  724.088734][ T8025]  loop9: unable to read partition table
[  724.108339][ T8025] loop9: partition table beyond EOD, truncated
[  724.125082][T13833] Dev loop9: unable to read RDB block 7
[  724.134865][T13833]  loop9: unable to read partition table
[  724.175040][T13833] loop9: partition table beyond EOD, truncated
[  724.195451][T13833] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  724.224047][T11759] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  724.231707][T11737] usb 4-1: unable to get BOS descriptor or descriptor too short
[  724.250288][T11737] usb 4-1: unable to read config index 0 descriptor/start: -71
[  724.268463][T11737] usb 4-1: can't read configurations, error -71
[  724.420607][T11759] usb 6-1: USB disconnect, device number 104
[  724.526331][ T8023] udevd[8023]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  724.703001][T13851] netlink: 'syz.4.1929': attribute type 8 has an invalid length.
[  724.712364][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1929'.
[  724.730203][T13851] bond0: entered promiscuous mode
[  724.737263][T13851] gretap0: entered promiscuous mode
[  724.743817][T13851] ip6gretap0: entered promiscuous mode
[  724.756149][T13851] debugfs: 'hsr1' already exists in 'hsr'
[  724.772310][T13851] Cannot create hsr debugfs directory
[  724.782447][T13851] hsr1: entered promiscuous mode
[  724.962830][T11741] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  725.002963][T11741] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  725.025077][T11741] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2
[  725.077123][T11741] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  725.103363][T11741] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  725.127916][T11741] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2
[  725.142630][T11741] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  725.160413][T11741] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  725.288564][T13868] Cannot find del_set index 2 as target
[  725.376026][T11737] usb 4-1: new high-speed USB device number 108 using dummy_hcd
[  725.502570][T11741] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2
[  725.520189][T11741] usb 2-1: USB disconnect, device number 112
[  725.777458][T11737] usb 4-1: Using ep0 maxpacket: 16
[  725.798840][T11737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  725.831998][ T8023] udevd[8023]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  725.845999][T11737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  725.967433][T11737] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  726.036560][T11737] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  726.057915][T11737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  726.075805][T11737] usb 4-1: config 0 descriptor??
[  726.612307][T13874] fuse: Bad value for 'user_id'
[  726.617224][T13874] fuse: Bad value for 'user_id'
[  726.736925][T11737] microsoft 0003:045E:07DA.001E: unknown main item tag 0x1
[  726.775348][T11737] microsoft 0003:045E:07DA.001E: unknown global tag 0xe
[  726.789734][T11737] microsoft 0003:045E:07DA.001E: item 0 2 1 14 parsing failed
[  726.819272][T11737] microsoft 0003:045E:07DA.001E: parse failed
[  726.839683][T11737] microsoft 0003:045E:07DA.001E: probe with driver microsoft failed with error -22
[  726.916945][T11757] usb 4-1: USB disconnect, device number 108
[  727.688683][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1940'.
[  727.806390][T13893] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1940'.
[  727.848870][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'.
[  727.924150][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'.
[  727.988147][T11757] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  728.157502][T11757] usb 2-1: Using ep0 maxpacket: 16
[  728.159311][T11757] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  728.159332][T11757] usb 2-1: config 0 has no interface number 0
[  728.159362][T11757] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  728.161388][T11757] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  728.161411][T11757] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  728.161427][T11757] usb 2-1: Product: syz
[  728.161438][T11757] usb 2-1: SerialNumber: syz
[  728.163524][T11757] usb 2-1: config 0 descriptor??
[  728.169361][T11757] cm109 2-1:0.8: invalid payload size 208, expected 4
[  728.181911][T11757] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input43
[  728.951954][    C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
[  728.952024][    C0] ------------[ cut here ]------------
[  728.952036][    C0] URB ffff888029eaa500 submitted while active
[  728.952058][    C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x7b/0x18b0, CPU#0: syz.5.1943/13902
[  728.952206][    C0] Modules linked in:
[  728.952279][    C0] CPU: 0 UID: 0 PID: 13902 Comm: syz.5.1943 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  728.952315][    C0] Tainted: [L]=SOFTLOCKUP
[  728.952325][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  728.952342][    C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0
[  728.952378][    C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 77 9d f9 fa 49 83 3e 00 74 40 e8 ec 5e 8f fa 48 8d 3d 95 8c e8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d1 5e 8f fa eb 05 e8 ca 5e
[  728.952401][    C0] RSP: 0000:ffffc9000643f880 EFLAGS: 00010087
[  728.952425][    C0] RAX: ffffffff873636f4 RBX: ffff888029eaa500 RCX: 0000000000040000
[  728.952445][    C0] RDX: ffffc90002161000 RSI: ffff888029eaa500 RDI: ffffffff901ec390
[  728.952464][    C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004
[  728.952480][    C0] R10: dffffc0000000000 R11: fffff52000c87f10 R12: 0000000000000820
[  728.952498][    C0] R13: ffff888028421830 R14: ffff888029eaa508 R15: dffffc0000000000
[  728.952518][    C0] FS:  0000555574355500(0000) GS:ffff888125464000(0000) knlGS:0000000000000000
[  728.952540][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  728.952558][    C0] CR2: 0000200001000000 CR3: 0000000052cb8000 CR4: 00000000003526f0
[  728.952580][    C0] Call Trace:
[  728.952591][    C0]  <TASK>
[  728.952604][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  728.952643][    C0]  ? ___ratelimit+0x58c/0x8d0
[  728.952754][    C0]  cm109_urb_irq_callback+0x6e2/0xcb0
[  728.952834][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[  728.952869][    C0]  dummy_timer+0xbbd/0x45d0
[  728.952915][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  728.952981][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  728.953017][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  728.953047][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  728.953079][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  728.953104][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  728.953128][    C0]  __hrtimer_run_queues+0x53a/0xcc0
[  728.953178][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  728.953209][    C0]  ? read_tsc+0x9/0x20
[  728.953240][    C0]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  728.953277][    C0]  hrtimer_run_softirq+0x182/0x5a0
[  728.953315][    C0]  handle_softirqs+0x22a/0x870
[  728.953355][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  728.953396][    C0]  __irq_exit_rcu+0x5f/0x150
[  728.953424][    C0]  irq_exit_rcu+0x9/0x30
[  728.953450][    C0]  sysvec_apic_timer_interrupt+0x57/0xc0
[  728.953517][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  728.953543][    C0] RIP: 0033:0x7f1571c70dd0
[  728.953565][    C0] Code: d5 00 49 39 54 24 28 0f 82 5e 03 00 00 40 0f b6 fe c6 44 24 0e 01 45 31 ed 45 31 f6 89 7c 24 08 85 c0 0f 84 10 01 00 00 66 90 <48> 8b 3c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 ef 80 3d c1 6f 3a 00
[  728.953586][    C0] RSP: 002b:00007f157213fae0 EFLAGS: 00000297
[  728.953608][    C0] RAX: 0000000000000001 RBX: ffffffff8503ba0e RCX: ffffffff8503ba0e
[  728.953626][    C0] RDX: 0000000000001a0e RSI: ffffffff8503ba0e RDI: 000000000000000c
[  728.953643][    C0] RBP: 0000000000000000 R08: 00007f1572000000 R09: 00007f1572002000
[  728.953659][    C0] R10: 000000008503ba12 R11: 000000000000000c R12: 00007f1572016128
[  728.953673][    C0] R13: 00000000000796c8 R14: ffffffff8503ba94 R15: 00007f1572b45720
[  728.953692][    C0]  ? bit_putcs+0x1484/0x1c10
[  728.953777][    C0]  ? bit_putcs+0x13fe/0x1c10
[  728.953803][    C0]  ? bit_putcs+0x13fe/0x1c10
[  728.953825][    C0]  ? bit_putcs+0x13fe/0x1c10
[  728.953852][    C0]  </TASK>
[  728.953876][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  728.953896][    C0] CPU: 0 UID: 0 PID: 13902 Comm: syz.5.1943 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  728.953928][    C0] Tainted: [L]=SOFTLOCKUP
[  728.953938][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  728.953953][    C0] Call Trace:
[  728.953963][    C0]  <TASK>
[  728.953973][    C0]  vpanic+0x56c/0xa60
[  728.954016][    C0]  ? __pfx__printk+0x10/0x10
[  728.954039][    C0]  ? __pfx_vpanic+0x10/0x10
[  728.954069][    C0]  ? is_bpf_text_address+0x292/0x2b0
[  728.954095][    C0]  ? is_bpf_text_address+0x26/0x2b0
[  728.954128][    C0]  panic+0xc5/0xd0
[  728.954159][    C0]  ? __pfx_panic+0x10/0x10
[  728.954207][    C0]  __warn+0x315/0x4f0
[  728.954238][    C0]  ? usb_submit_urb+0x7b/0x18b0
[  728.954272][    C0]  ? usb_submit_urb+0x7b/0x18b0
[  728.954305][    C0]  __report_bug+0x29a/0x540
[  728.954402][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  728.954440][    C0]  ? usb_submit_urb+0x7b/0x18b0
[  728.954471][    C0]  ? __pfx___report_bug+0x10/0x10
[  728.954513][    C0]  ? dev_printk_emit+0xee/0x140
[  728.954556][    C0]  report_bug_entry+0x19a/0x290
[  728.954593][    C0]  ? usb_submit_urb+0x7e/0x18b0
[  728.954623][    C0]  ? usb_submit_urb+0x83/0x18b0
[  728.954653][    C0]  handle_bug+0xce/0x200
[  728.954680][    C0]  exc_invalid_op+0x1a/0x50
[  728.954707][    C0]  asm_exc_invalid_op+0x1a/0x20
[  728.954731][    C0] RIP: 0010:usb_submit_urb+0x7e/0x18b0
[  728.954803][    C0] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 77 9d f9 fa 49 83 3e 00 74 40 e8 ec 5e 8f fa 48 8d 3d 95 8c e8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 d1 5e 8f fa eb 05 e8 ca 5e
[  728.954825][    C0] RSP: 0000:ffffc9000643f880 EFLAGS: 00010087
[  728.954849][    C0] RAX: ffffffff873636f4 RBX: ffff888029eaa500 RCX: 0000000000040000
[  728.954868][    C0] RDX: ffffc90002161000 RSI: ffff888029eaa500 RDI: ffffffff901ec390
[  728.954888][    C0] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004
[  728.954904][    C0] R10: dffffc0000000000 R11: fffff52000c87f10 R12: 0000000000000820
[  728.954922][    C0] R13: ffff888028421830 R14: ffff888029eaa508 R15: dffffc0000000000
[  728.954950][    C0]  ? usb_submit_urb+0x74/0x18b0
[  728.954991][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  728.955026][    C0]  ? ___ratelimit+0x58c/0x8d0
[  728.955067][    C0]  cm109_urb_irq_callback+0x6e2/0xcb0
[  728.955103][    C0]  __usb_hcd_giveback_urb+0x376/0x540
[  728.955136][    C0]  dummy_timer+0xbbd/0x45d0
[  728.955179][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  728.955236][    C0]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  728.955270][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  728.955301][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  728.955340][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  728.955367][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  728.955394][    C0]  __hrtimer_run_queues+0x53a/0xcc0
[  728.955454][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  728.955489][    C0]  ? read_tsc+0x9/0x20
[  728.955514][    C0]  ? ktime_get_update_offsets_now+0x3b2/0x3d0
[  728.955554][    C0]  hrtimer_run_softirq+0x182/0x5a0
[  728.955597][    C0]  handle_softirqs+0x22a/0x870
[  728.955631][    C0]  ? __irq_exit_rcu+0x5f/0x150
[  728.955671][    C0]  __irq_exit_rcu+0x5f/0x150
[  728.955706][    C0]  irq_exit_rcu+0x9/0x30
[  728.955735][    C0]  sysvec_apic_timer_interrupt+0x57/0xc0
[  728.955784][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  728.955810][    C0] RIP: 0033:0x7f1571c70dd0
[  728.955833][    C0] Code: d5 00 49 39 54 24 28 0f 82 5e 03 00 00 40 0f b6 fe c6 44 24 0e 01 45 31 ed 45 31 f6 89 7c 24 08 85 c0 0f 84 10 01 00 00 66 90 <48> 8b 3c 24 49 8b 54 24 40 4c 89 f0 4a 03 14 ef 80 3d c1 6f 3a 00
[  728.955853][    C0] RSP: 002b:00007f157213fae0 EFLAGS: 00000297
[  728.955874][    C0] RAX: 0000000000000001 RBX: ffffffff8503ba0e RCX: ffffffff8503ba0e
[  728.955891][    C0] RDX: 0000000000001a0e RSI: ffffffff8503ba0e RDI: 000000000000000c
[  728.955914][    C0] RBP: 0000000000000000 R08: 00007f1572000000 R09: 00007f1572002000
[  728.955936][    C0] R10: 000000008503ba12 R11: 000000000000000c R12: 00007f1572016128
[  728.955953][    C0] R13: 00000000000796c8 R14: ffffffff8503ba94 R15: 00007f1572b45720
[  728.955971][    C0]  ? bit_putcs+0x1484/0x1c10
[  728.955996][    C0]  ? bit_putcs+0x13fe/0x1c10
[  728.956019][    C0]  ? bit_putcs+0x13fe/0x1c10
[  728.956040][    C0]  ? bit_putcs+0x13fe/0x1c10
[  728.956067][    C0]  </TASK>
[  728.956675][    C0] Kernel Offset: disabled