last executing test programs:

19m14.595786108s ago: executing program 4 (id=540):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000000000"], 0x10}}], 0x1, 0x0)

19m14.48607028s ago: executing program 4 (id=542):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r0 = getpid() (async)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x5b16, 0x0)
r3 = syz_pidfd_open(r0, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002cc0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc, 0x4, {0x14, 0x7}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x4000010)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0)
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x21a, 0x40000032, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900", @ANYRES32], 0x4c}}, 0x0) (async, rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', {}, 0x9})
setns(r3, 0x24020000)
syz_clone(0xfdba2180, 0x0, 0x106, 0x0, 0x0, 0x0)

19m13.156005529s ago: executing program 4 (id=547):
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0xd}, 0x5}]}, 0x0) (async)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0xc0cd4}) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0) (async)
syz_usb_control_io(r3, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac2(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x20, 0x6, 0x28, "ee059b0d1c6b704e391ce5fb05c95360d6f33ed7978881d12f6b10bd1147d866c68bb91c9d565aad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="200889000000b768c60ba8ca81b74ecec1dbabd88d108b2623b85b79a31967ce21f32b9515a67462e31b02ad25120d8ac0f4ec5089cbefdeb87ce624795d7ee8723c7788eb3259b66e57676691cd2ec96c6aa161cb1b1893bacc207b586ecc046317909e449a093c84d54693a00fdce476b6431d611ad3b37d1638669c71e0d01fc31daaaf965d1734cb010aee3ff2"], &(0x7f0000000140)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000340)={0xc0, 0x5, 0x1, '3'}, &(0x7f0000000500)}) (async)
syz_io_uring_setup(0x86d, &(0x7f00000003c0)={0x0, 0xd584, 0x400, 0xfffffffd, 0x220}, &(0x7f0000000700)=<r4=>0x0, &(0x7f0000000380))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') (async)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x40240, 0x0)
ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f0000000040)={0xb}) (async)
pread64(r5, &(0x7f0000001040)=""/238, 0xee, 0x5) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_io_uring_complete(r4)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
creat(0x0, 0x5)

19m12.844325647s ago: executing program 4 (id=549):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000400)=0x800)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
syz_io_uring_setup(0x5675, &(0x7f0000000240)={0x0, 0x12c4, 0x2, 0x3, 0x3a}, 0x0, 0x0)

19m11.191576733s ago: executing program 4 (id=559):
openat$mice(0xffffff9c, 0x0, 0x212240)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$isdn(0x22, 0x3, 0x26)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x13, 0x421, 0xfffffffc, 0x9, 0x0, 0xfffffe0000000001, 0x1e, 0xffffffff}, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x15)
ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r3, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xe, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x80, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x1, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x2000000, 0x80000, 0x5, 0xfffffffd, 0x0, 0x8, 0x0, 0x100000, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x31b5abf4, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x6, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r3, 0x5501)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socket(0x28, 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000000)={0x8, {0x21, 0x974, 0x1, 0x7fffffff}})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
syz_open_dev$loop(0x0, 0x1, 0x122c42)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0x3ff, 0xfa11, 0xffffffff}, 0x0)

19m9.407764812s ago: executing program 4 (id=566):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x600281)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000000c0)={{0x4, 0x0, 0x10, 0x0, '\x00', 0x6}, 0x0, 0x10000000, 0x6cb3, r1, 0x2, 0x7, 'syz1\x00', &(0x7f00000003c0)=['\xfel ~|V\xdab\xa8,\xc84\xaf\x1a3\xe2\xa3\xe0\xf1\xcc\x1c\xf3\xf2>\xf8\xa4\xd6:y\xfd\x11\xa9\x97\xad\x9fa\xb3t\'\x15j\x9d\xfb\x17\x87\x9aK\xfb(\xa1\x016\xe0il\xc9\xd0\x0f\xe9\x9e\xc8ekP\xbcZ\xc7\xb9\xe9\x95\xbe\xa3{\"\xe2\xb2-U\x92\x91?\xf9T\xd4\xedl\xde\x9f(\x15\x87\x80\xb7\xd9~\x8d\x8be\x83\xa0\xa9', '\x80\x00\x00\x00\x00\x00\x00\x00\x00'], 0x6e})
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0})
connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x123, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
ptrace$cont(0x20, r7, 0x40, 0x1)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r11=>0x0})
r12 = socket(0x10, 0x80002, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400f0051300290a0000000000010000070000003429b60492d605e3834c60dfe4164000e14999529052c66242eda88a583b95c6c6c37da6d2881f3feae965ee869e13920efcf0cb54b33b47a4173a6aa3519e4f30def11965ec6614945ed3e5c3de", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800"], 0x44}}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xa}}}, 0x24}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, 0x453, 0x400, 0x70bd2c, 0x25dfdbff, "0e67eb48edfd9bf975483f37c1eb254cd74a892940acf2b6b3bce5f7c12fcd95b6b3bf30bc77b7abd645bb55163c73ae8464db80f68bca7eccfdbdd54b69ea783c5c1edbe0359eb60af2baf0b4deb41deab60ffb487e654168c03c4f4620dc79ad85324d1068b8b6491d7c545b99effb8421b1a318c7be10f34abec951312ff9b4a81f7cc42632eb49adbe94da855f5fdac3d6dfbfb47e303d2ab0b018499b2263afc7"}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x20)

17m33.540563374s ago: executing program 32 (id=566):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x600281)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, <r1=>0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000000c0)={{0x4, 0x0, 0x10, 0x0, '\x00', 0x6}, 0x0, 0x10000000, 0x6cb3, r1, 0x2, 0x7, 'syz1\x00', &(0x7f00000003c0)=['\xfel ~|V\xdab\xa8,\xc84\xaf\x1a3\xe2\xa3\xe0\xf1\xcc\x1c\xf3\xf2>\xf8\xa4\xd6:y\xfd\x11\xa9\x97\xad\x9fa\xb3t\'\x15j\x9d\xfb\x17\x87\x9aK\xfb(\xa1\x016\xe0il\xc9\xd0\x0f\xe9\x9e\xc8ekP\xbcZ\xc7\xb9\xe9\x95\xbe\xa3{\"\xe2\xb2-U\x92\x91?\xf9T\xd4\xedl\xde\x9f(\x15\x87\x80\xb7\xd9~\x8d\x8be\x83\xa0\xa9', '\x80\x00\x00\x00\x00\x00\x00\x00\x00'], 0x6e})
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0})
connect$unix(r3, &(0x7f0000000440)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x123, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58)
ptrace$cont(0x20, r7, 0x40, 0x1)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r11=>0x0})
r12 = socket(0x10, 0x80002, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$nl_route(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400f0051300290a0000000000010000070000003429b60492d605e3834c60dfe4164000e14999529052c66242eda88a583b95c6c6c37da6d2881f3feae965ee869e13920efcf0cb54b33b47a4173a6aa3519e4f30def11965ec6614945ed3e5c3de", @ANYRES32=r11, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800"], 0x44}}, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xa}}}, 0x24}}, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, 0x453, 0x400, 0x70bd2c, 0x25dfdbff, "0e67eb48edfd9bf975483f37c1eb254cd74a892940acf2b6b3bce5f7c12fcd95b6b3bf30bc77b7abd645bb55163c73ae8464db80f68bca7eccfdbdd54b69ea783c5c1edbe0359eb60af2baf0b4deb41deab60ffb487e654168c03c4f4620dc79ad85324d1068b8b6491d7c545b99effb8421b1a318c7be10f34abec951312ff9b4a81f7cc42632eb49adbe94da855f5fdac3d6dfbfb47e303d2ab0b018499b2263afc7"}, 0xb4}, 0x1, 0x0, 0x0, 0x20008000}, 0x20)

2m17.206796307s ago: executing program 0 (id=4562):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, 0x0, 0x2404c001)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x6b3c1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x8000)

2m17.005131357s ago: executing program 0 (id=4565):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="eb5974e8be09e387ab90b1569489ca152362cb44b1952d7a95d4e348dd0a24fdb5fbd2dc1f3ddba2f36dd88226e8ab7b58818a357b167f7671a57d73594a9107053189f3589268715fdfc605ce82d5053ca0394bd3ef6ccbdf534483f3c1d4f9ff65fb1863033c0b1caa3693e04df2ec", 0x70}], 0x1, 0x0, 0x0, 0x20008014}], 0x1, 0x4814)
r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x818f, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r2, 0x47b6, 0x800000, 0x0, 0x0, 0x0)
r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
syz_emit_ethernet(0x16, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@llc={0x4, {@snap={0xaa, 0xaa, 'M', "54955d", 0x6558}}}}}, 0x0)
ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd})

2m15.89571561s ago: executing program 0 (id=4572):
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000401e04012800000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYRESOCT=r0], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)
mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9a}, 0x1c)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x18ba00, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x2f, [{{0x9, 0x2, 0x48}}]}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0)
socket(0x5, 0x800, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000500)=@ready={0x0, 0x0, 0x8, "72918f72", {0x1, 0x1, 0x1000, 0x2, 0x5}})
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x1f, &(0x7f0000000380)=ANY=[@ANYBLOB="0c00004e1560254722cb66187f3b68d00c08004e15"])
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0x1}}, 0x20)
r6 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000080)="38635de68d26fa1b105fad3fe3a9f53ef95c185cb7c7499e6d98d7ec1e3c816b6c3b767d45567e01be2725fba221aabc0100c0569441befb55cce4494bb308ca0540f61b3f41edc2ca780b0ce9cbdbc51a6fc6c0d57929ee537ed3bbb93072e4", 0x60}, {&(0x7f0000000340)="dd5db69463314133856a96a03208c467e9367a0854e707a4afbba3370c96f2675103eaaaf08d1beb7a5735f8adfcc205ca0ea399492b67ea0e25040963dba7febec64af152e1382d87f8ec6081f11a76e1707daa07f80b6fbaf63af8eec79af2b469cb7326ebb57916940773e0a910c9eec0f3bebfe15c90ff1cdfe89919c1f7c8b9093175b4d871a5928cd22cafdc2698c332753a40620cbe51da8cf9e2f4656746682ffd913817693c84e925b8383d0895a688de7eae7c071292dda217f8e9c9b74ec5b5317157fe58b23b1fcf3bcb0081c5d65b40a868632afb1900a8bf76d8e7753ffe7847d3fb61adfb7ec0d6c2d7196edf32cf9a18ec72b4ee790a1c7c84250fc5a3705fb585a40f7ccc3f826b6070512553a56d7050824fd41f4ab32034fa8c2844a1db74131d0d445c3853565acf153fd79d18e75470148d2099f85213240fa73650de009a512c4a2ca63646b01adc7b3f1d812adf87df7d8b003c3a8c46254033ea089f05e117e985f3312184971c3adde02af496047f00bbefdd3fabf1fd09454af629bd43c809d14057772b97443af85102ed550239829f35ec3eb5baa0091c528e9cda79e185012a7c3ac527c4a03e90170e442f8058ac82f58392e4ec50f4c8f74f1aa29d8eabc7f3930319995bca2ff5678d91e7df8a04ab67342b17a74e51978c3a2efb52c0682f232c53732fb5e567e334a45d0d34e21ebc50fe1489ef927cd9fb9667f2e8d52378334b6fad323c474cd3c1257be807b5ffb1b6ef53e47aca6813712c0c8c840a0ab475b9877d108625bfc725d7499d2e6f969cbdd80a4fa825d1204cdaa78f5fb9278c4efefab52399b9cac41058df2d14a367ae3fac80510795752711864f672670064e79283a8eb75aa919237f775a83256f410dc7f8cba54ccbfd2dfc7ef4a84d4e8a4734ac35044fc14c2be5783f153d7589961c307f89e64163ba73b9abcdae3364a70227c148921571cf4d9c1c30a3909bea8bf30a2ea24ca26001bd4ce34485a3ab315159f66bfa8b37a76dbebc4d0d4a0e0fa2a09afa1964148f662a432a66a051e8b15e56dd14baf435b4cd966a958371c0edfcd020b98d82c66d202652f687f2089d0e84ec8e730a09e1bfec30811125dfa49346a485fc444b24d3b680768c4a938de22e920e8b2cb54cfae2f12ab5b700c5e382876dc3a3971f600689047bf0a7a4689497850fc5e5c30ce3df3651f16e5a6aa83dc947904fda4b8e85f58c02e519f1a189e54a475b39709b21fc2f921b03afa2d567ed765cd3ceb5533bae19aae0e0201561581dc6f5d108cd5df5c09712adcf567b0c79d21bbeef2f1af0c9b39d5b5e11c5bfeebab0f43713d37397910ac6c72aaafef7c37ebea1c8c0cb79cbb6e8a033224c5e50dffcf7d4418ee9f5287a163933035c78ffe5e953914842601290f59d339b03497ba5dffdca70bca4764d38d0bf9abb1fb2ef92be2f35c102d8fb4100a0113a05bbf0b20b3e477bbb00ec29268a1d1fd1fd74c306c9dcdb54d40c20d88b658648f68b08e1981ddb9c2b191d5c8e614b94e470273664596a9d67a91826e57af886b5dbb1059d8e6a82247e642aff78f89b083c3f2f4fe4842db6a63e6962452f9805dafc447448717cb0820512b5f1d6cb66432411da84ada3a1296f6afa3f36138a4364511013b8695306b140623b00ad25aef8941b5cf076baac669a1a8b645900306257de599d4904a5f1d439d6453e22d6643e624d9cd220c2217043cd7d6f1d02e3100acd9372965b356b304f49dc45884a465f88c3952a2dcad7865fe8d4b714225fdd276473df9c763700ee0fbdf4485312627272e466bee04d428ee8573be292225a1ac0b50c079e8ea20113f7519e3437afe978cd14f65723b1c2c58d90b9c1d051d8ec7ef46e063a3ca0f4ed723ab66e82ea068cfa82f73116839700617bdabcb9d61a579a38c9", 0x568}], 0x2}, 0x0)
ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000300)={0x2, 0x0, [{0x4, 0xfffffff9, 0x1, 0xffffff4c, 0x1ff, 0x3, 0x25}, {0x80000008, 0x493a, 0x1, 0x5e9dd040, 0x4, 0x127, 0x100}]})
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4, 0xfffffffb}}}}, 0x480)
listen(r1, 0x200204)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
socket$netlink(0x10, 0x3, 0x4)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42100, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f00000000c0)=0x80000000)
lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0)

2m12.807019677s ago: executing program 0 (id=4583):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000010401010000000000000000030000000500010036ff0000060006400004"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x200c004)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) (async)
setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
r10 = dup(r9)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r10, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
sendmsg$inet6(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010) (async)
sendmsg$inet6(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="944cf7", 0x3}], 0x1}, 0x20000010)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

2m12.502436256s ago: executing program 0 (id=4585):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r2, 0x540a, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a00"], 0x68}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880)
r3 = socket(0x10, 0x3, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
io_uring_setup(0x36a3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x39d})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x40009c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300})
ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000180)=0x3)
ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
ioctl$TCXONC(r2, 0x540a, 0x2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000001044104d7a00000000000109022400010000800009040000090300020009210008000000290009058103"], 0x0)

2m11.983339066s ago: executing program 0 (id=4588):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x70000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000380)={0xffff1000, 0xa000, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x378, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000040)={0x1000200001ee0002, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
kcmp(0x0, 0x0, 0x3, r0, 0xffffffffffffffff)
io_uring_setup(0x4acc, 0x0)
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

2m11.599555388s ago: executing program 33 (id=4588):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x70000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000380)={0xffff1000, 0xa000, 0x1})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x378, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000040)={0x1000200001ee0002, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, 0x0, 0x0)
kcmp(0x0, 0x0, 0x3, r0, 0xffffffffffffffff)
io_uring_setup(0x4acc, 0x0)
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
r11 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)

11.01213181s ago: executing program 6 (id=5162):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040d904c2a000000000000109022400010000100009040100090300000009210300000122290009058103"], 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x97, &(0x7f0000000d00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x2, 0x1, 0x5, 0x10, 0x2, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "fcd2654bba"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xfff8, 0x8, 0xf8}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x81, 0x2, 0x2}, @obex={0x5}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x2, 0x37, 0xc8, 0x200, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x8, 0x7a, 0x80}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xb, 0x7f, 0x7d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x5, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0xa7, 0x8}}}}}}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x1, 0x1, 0x10, 0x10, 0x3}, 0x16, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f1600e902100b0710020e98040007100204990200"], 0x3, [{0x2c, &(0x7f0000000e00)=@string={0x2c, 0x3, "bbdddc14c63b4b6f9a32520935be85ede654df5afe46f27da44315d886d49b844fb1fd03d0902dcdbd51"}}, {0xc9, &(0x7f0000000fc0)=@string={0xc9, 0x3, "5029648eb9f95843374afcd2ff5247b4190537c489551f2cb99199982a6931d357a9f33d9abe6a2eab180bb852efae0aa734a635dde6fd91e935d894288ac035af5c924b0cef77e891429021f028784fd113406908d15aa99831c535d1c638541c02fd99bf243d48b0ce4f4cab87f48836aecbea14e07834bd96e5713e12043acc89452ebcc3e4dde3787df4922aa765d68343f6cb152188adcfb01b1733b4a8ad8282cf9a169aaf1f544f6ccfab572f5928f2947227f43dffbdebdefc8239ec71c5a90efb48eb"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x448}}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000500))
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240))
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x1000000, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500)
close(r1)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0xa5, &(0x7f00000010c0)={{0x12, 0x1, 0x210, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x2, 0x1, 0x3, 0x50, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "4817aecb2bc5"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x52, 0x6, 0x119, 0xff}, {0x6, 0x24, 0x1a, 0x6, 0x60}, [@dmm={0x7, 0x24, 0x14, 0x5, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0xc, 0x1c, 0xc}, @mdlm={0x15, 0x24, 0x12, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x8, 0xdb, 0x1}, @dmm={0x7, 0x24, 0x14, 0xfffe, 0x7}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x0, 0x31}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0xff, 0xf8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5f, 0x3, 0x5}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x201, 0x7, 0x3, 0x46, 0xff, 0x8c}, 0xe0, &(0x7f0000000600)={0x5, 0xf, 0xe0, 0x4, [@generic={0x3a, 0x10, 0x4, "bdc1efcf029ab60ee2a24dbe6967efe74d1b94cae77155a21afe6312f27d40a83d04b6ff1cc3af057da296a87452afb6b0bf8c1280b977"}, @generic={0x83, 0x10, 0x4, "065cbb0be90d937cd5b47440b701ae0d37121ec2823dc2db54380162b933f941a52d6b135e73d63163dd5967919412ce21e08f6012a521ec848ece23ed444033e3b7e035d58f5b697195a1ac3cbea860d5787ecb1b739cfa0a9f6ecb866537d4f30e80566eb91b1e18a198d230385f287a05ec277e42f29e291a883ed96d9b45"}, @ss_container_id={0x14, 0x10, 0x4, 0x7a, "57887eace265bbd8d8fffc97497a5f02"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0xc, 0x9}]}, 0x9, [{0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x827}}, {0xf6, &(0x7f0000000780)=@string={0xf6, 0x3, "ca2cb9b868c707c75c3aa909689c4cc1bb32a0475c20e748cbaae3f395153c41653164f3610879e6e4c68d533acbfe31a3c53ba16a7212df44fc0427573d3bda1ce184aee444a95d9e2e36bb45e3637dfb36040a0d575c0a8444e7f2917c12d9ce9d246be7cc8e7e16f3bbfd40c65d037ce826a4f5dae2844690986bd17674dc1680c9057cf0d64fe1461ae3a494d86d58f86a98c1e70e2fed3218b360982cc3ccf05d6c5dae3154f5080d26fa1db522c795f901b3c9fc14de4428a8c3e2644bd92ac410e29ff659b4913ac937909f152e9e9e2c752be1224c21f3dc6e103eeced83d4748e034aa30093161d06132e608be1d2cd"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x430}}, {0x101, &(0x7f0000000980)=ANY=[@ANYBLOB="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"]}, {0x99, &(0x7f0000000ac0)=@string={0x99, 0x3, "cf682e4bc8a49f7b6af62e7db19e06016335840b1fc67da77bedaed77a78f2e938f527e7e2d7bc9bd5fb0ad44e4fca446480f171695f89851b9cb3299694de77a536349c9d68e46bc22cf278fe039a3ddf3d0edd6585f5a05a4bbebc8a657058aa9ae9d1ecc1bc733232d48e7ad938b14c13212adb84e940222a4d349c0287caccaa6626ea542f334414094a6753661bf9b2e7f0a8e3ef"}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x42c}}, {0x4d, &(0x7f0000000e80)=@string={0x4d, 0x3, "8309fe9c761e7e57916eefeb41047b0e189056823dc1cde3fe42f789a7e43e6dd6d0fbeee9cce92c09e1a31050fb253f5b488839da140a449f46ceb920e082ffe6dc1492d78fd64a3f7c79"}}]})
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@getlink={0x1c, 0x12, 0x321, 0x70bd21, 0x8000, {0x7}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0)
write$uinput_user_dev(r3, &(0x7f0000000540)={'syz0\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0xb17, 0x3, 0xafc, 0x32, 0x838, 0x1000009, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x103, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87e, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x26, 0xfffffffa, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x9f, 0x9a0], [0x3, 0x6, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x100005, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x3, 0x7, 0x6, 0x4, 0x4, 0xfff, 0x4], [0xfffffffe, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x4, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x1, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x200000, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x802, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x1003, 0x101, 0x4, 0x9, 0x7, 0x7, 0x1, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0xffffffe3, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x402005, 0xe, 0xee6, 0x800, 0x7, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x4, 0x1, 0x1, 0x3, 0x296, 0x4, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x56be]}, 0x45c)
write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {0x400, 0x4ebc, 0x1ff, 0x6}, 0x4a, [0x0, 0x7, 0x0, 0x6, 0x50, 0x5, 0x2, 0xfffffff7, 0x0, 0xacbe, 0xa, 0x80000001, 0x6, 0x4, 0x7ff, 0x1600000, 0x401, 0x8001, 0x1e, 0x4, 0x101, 0x6, 0x4, 0x7f, 0x1, 0x2, 0xfffffff5, 0x2, 0x6, 0x822, 0x6, 0x57, 0x0, 0x8, 0x0, 0x9, 0x5, 0x2, 0x2d, 0x40, 0x691, 0x72, 0x9, 0xb2a, 0x200, 0x8000, 0x401, 0x6, 0x549, 0x653d, 0x2, 0x0, 0x50000000, 0x8001, 0x200, 0x6, 0x3198, 0x4, 0x9, 0xd555, 0xf, 0x0, 0xfffffffc, 0x57d4], [0x2, 0x4, 0xb, 0x7, 0x40, 0x8000, 0x80000000, 0x200, 0x4, 0xd, 0x2, 0x5, 0x1, 0x8, 0x2656, 0xe468, 0x10001, 0x5, 0x2, 0x2, 0x2, 0xffffffff, 0x0, 0x6, 0xfff, 0x1387, 0x80000001, 0x835, 0xfffff439, 0xfff, 0x80000, 0x1, 0xf, 0xfffffffd, 0x7, 0x2, 0x30000000, 0x3, 0x2, 0x48000000, 0x5, 0x5e0, 0xff, 0xff, 0x34b3, 0x3, 0x4, 0x1fa, 0xfffffffa, 0x7, 0x5, 0x6, 0x9, 0x7, 0x4, 0x7, 0x7, 0x5, 0x47118027, 0x0, 0x0, 0x63d3, 0x7, 0x4], [0x10000, 0x14ca, 0x3, 0x3, 0x7, 0xff, 0x6, 0x1, 0x9645, 0x8, 0x200, 0x7, 0x0, 0x4, 0x1, 0x1800, 0xd, 0x8, 0x3, 0x80, 0x5341, 0x200, 0x9, 0x1000, 0x0, 0x4, 0x8, 0x4, 0x6665, 0x37090f90, 0x9, 0x1, 0x0, 0x3ff, 0x0, 0x2, 0x5, 0x10, 0x6, 0x6, 0x0, 0x2, 0x3, 0x2e, 0x0, 0xffffff9c, 0x7, 0x5, 0x8, 0x8, 0x7, 0x1, 0x40, 0x50a0, 0x8, 0x9, 0xf71290f, 0x5, 0x8, 0x4, 0x2, 0x5, 0x8, 0x995c], [0x0, 0x8, 0x4, 0x5, 0x2, 0xd7d4, 0x26, 0x1, 0x200, 0x8000, 0x5, 0x300000, 0x40000000, 0xa, 0x7276, 0x65, 0x3, 0x2, 0x3, 0x5699, 0x10, 0x2, 0x7, 0x8, 0x7, 0x1, 0x1, 0x2, 0x1, 0x40, 0x40, 0x9, 0x3, 0x6, 0x1, 0x9, 0x2, 0x421, 0xfffffff8, 0x3, 0x100, 0x7, 0x2, 0x8001, 0x0, 0x10000, 0xe8, 0x21, 0x8000, 0x1, 0xffffffff, 0x3ff, 0x2, 0x200, 0x6, 0x80000001, 0x6, 0x5, 0x2, 0x9, 0x1, 0x159, 0x4, 0x8]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6, 0x101}, 0xfffffffd, [0x8, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x3, 0x0, 0x0, 0x80, 0x80001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, 0x90, 0x801, 0x833, 0x2, 0x0, 0x0, 0x2, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0xfffffff9, 0x0, 0x3, 0x0, 0x0, 0x1fc00, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0xffff1e06, 0x7], [0xfffffffd, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x101, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x9e2b, 0x4, 0xfffffffa, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0xfffffffe, 0x0, 0xd1, 0x0, 0x0, 0x0, 0xfa, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x80000, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x4a92, 0xf152, 0x0, 0x10004, 0xfffffffc, 0x0, 0xff, 0x0, 0x800, 0x0, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x800, 0x5, 0x0, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb6, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})

7.880355289s ago: executing program 6 (id=5179):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="20050a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f00000003c0)=ANY=[@ANYBLOB="000d02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x0, 0xa, 0x2, "9c7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000bc0)={0x2c, &(0x7f00000009c0)={0x40, 0x6, 0x2, "510f"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x40, 0x7, 0x1, "ab"}, 0x0, 0x0})
io_setup(0xc, &(0x7f0000000180)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x1})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
io_getevents(r1, 0x4, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000040)={0x77359400})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)='k', 0x1}], 0x1, 0x5)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f00000001c0)=0xde57, 0x4)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x39}]}}}]}, 0x40}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="b136f5"], 0x0, 0x1000)
sendto$packet(r4, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

6.609018628s ago: executing program 5 (id=5185):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x0, 0x0, 0x4}, 0xc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4)

6.428057437s ago: executing program 5 (id=5186):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004010)
syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x4a7c0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@gettaction={0x14, 0x32, 0x400, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4880e)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc9, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x7}})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14)
sendmmsg$inet(r0, &(0x7f00000003c0)=[{{&(0x7f0000000c40)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010100, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @empty}}}], 0x40}}, {{&(0x7f0000000940)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="00dd41dc115d27cf850a782da28375b561df298712d56b", 0x17}], 0x1}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="4315eb08f5052205ccc89f35b71995a7a75937fc1e4aa2b1d800e21ca1ee19fb64a27bbcc11099d06c501efd64e6d511db2ad1a3bbdd98c4047fdd68489b370b46975304c3cd3e5f9ee0c1d5cc83a0811b6ed7cd25b7f0b5016f985f59b05487d9c85d3b5e53e848743cadd7886b3ef879e3de57176121b462919a3531ab6d03b30c96572664c1a89b4a85d98ac8c4badb535c1a45dfbd97b0eabbe81f1fae00aca0b65983dd09bdcf4eaea67fc49eff72594ab2fd8325abcf83830d", 0xbc}, {&(0x7f00000000c0)="c97afed788ab5fcf6ece189e3dfe069476d34cca67627146d335203803b1270dc43bfe3d2641ad42d8f56e07f1bf9077229ff2885fc8892d", 0x38}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000000100)="8e70ca8de307f36bed5b08b3b400179c8620a4d144ab265b2cdd91aa3570e518044855de04536879fd143be2ad8c1de55fa80a5ca7fef4e1b3319af43be965cba0ec8dabdb206367cf24cca12371a82c514c3ad9c508fc7e716bfcc19bb1cfbe174e9361d602099df49cb9e4977b28d4acf6b40f7bcc33291af15ba4619530a80f99b571ac3512029c68c84da32f8a6e52e09498949624099c0c6b0addf450d835630c3dcc6c80daff39625539d248a51fdc80a4b8515b06b44fab7a4a8c4aa37eddb0922b5ccd29f870fb27cf17bbb1dcb0a33f1013267c4053b0eceba9c36fcc3dd48b", 0xe4}, {&(0x7f0000000240)="25e2709ec7bb4e1cf1b164303fb577186e591770769fb996cb0ca03d2da20497f4dab4e162969c", 0x27}, {&(0x7f0000000280)="ed271a1e567fb006bbf85ed12a8b847b45164393d524aabbe13c6a227849572d72fc25eabf9e4feef94454f30495cf047c00e8418b0cc70a40749fb3056df2cd8d8a7eda44b6697c74596834e3a0e9c7fc82e5688210525874fcc52c439da12489bc3e797af07a3e57c16c1f146b6e5f063e4edcd1d5c8404dd73d1279aab6442b9621e13b6acdbc91b59f60c5f41d7703cc4a6221ac", 0x96}], 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x88}}], 0x3, 0x41)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1, 0x80800, 0x0, <r5=>0xffffffffffffffff})
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000000500)={0x1})

6.14394048s ago: executing program 5 (id=5188):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000001940)=""/4096, 0x1000, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x22977000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000500000a20000000000a05000000000000000000070000040900010073797a30000000003c000000090a010400000000000000000700ffff08000a40000000000900020073797a31000000000900010073797a31000000000800054000000021880100000c0a01010000000000000000070000000900020073797a31a9f98d2e46bdffb323186e0740fc32000000000900010073797a30000000005c01038014000080040001800c0004400000000000000002440100800c00044000000000000000040900090073797a320000000008000340000000010c00044000000000000000100c00054000000000000000080c0004400000000000000ffffc000280d30001001b4c26c5a8c9294472705c37116a702f495fba27d732fbd0410432d3a8dd1a9f443eb3751bb1c0795531b619236617f026ab042bbf2698dc4257c12d9f21eebe5df584b3e8093a16912f674069fdf6f8fe3a278a5a3a292e999be4d5fae9688a4ed0ce28c789ec99a4f260cf17830a5b4300227f3d8d4dd2858527351a9fa9efd0295d903966c384a413755da543bb69329198f573a7d76352b22993ca9c7401323b693b43c04fbf745ceb30543b53b432be20c794ac74ba44f086b9b789f4f0aef07351cab5a631595c375500e66c0024000100fd2164d38e9280ea7c592ef86a21b534ee8b6685a226eb5acb2c41937d257cd5e9f50e3d2581"], 0x20c}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
pipe2$watch_queue(0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000100)=0x5)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil)
shmctl$IPC_RMID(r5, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'dummy0\x00', 0x0})
socket$unix(0x1, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r8 = io_uring_setup(0x7625, 0x0)
io_uring_register$IORING_REGISTER_FILES(r8, 0x20, 0x0, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4)

4.774816011s ago: executing program 3 (id=5193):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50102008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_usb_connect(0x3, 0x8f, &(0x7f0000000180)=ANY=[@ANYBLOB="12011001892563086e050450d1db0102030109027d0002a200000009044f040334e95f5b0a24010a00060201020c2408050600070d0a329ce20905860c0004f40804072501832f08000905000040008103ff0905091b08000c07800904b70104b263200309050900ff03030004090502020002f7810609050303ff030840040705a6c6"], 0x0) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.716700712s ago: executing program 6 (id=5194):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="5c3d1ae78c23c5382a2a6706f86191164244b2f9d36e485f16bbeeeabfff8a6045f82f5e6c903a039eb4c451f6a4285873d7531260be180f51bda07622096482e6a3a4e92428b311b6c0de9ebdff26b56f25", @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYBLOB="a320f9d9366beecb90d76cb977b1aea2e10c1f369e4acb484789137904a8dc0c60556860b7baed"], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0x3) (async)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) (async)
r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$dsp(r2, &(0x7f0000000280)='\x00', 0x1) (async)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000380)={0x0, 0x1fffffe, 0x800007, 0x100080000000006, 0x346a, 0x2, 0xfffdfffffffffffe, 0x4, 0x4, 0x2, 0xfffffffd, 0x1}) (async)
close(r2)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (async)
r4 = open(&(0x7f0000000600)='./bus\x00', 0x143142, 0x0)
write$cgroup_int(r4, &(0x7f00000000c0)=0x3, 0x12) (async)
readv(r4, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/204, 0xcc}], 0x1) (async)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)={0x40, 0x10, 0x4, {0x4, 0x23, "2d95"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x801}}, &(0x7f0000000180)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0xa, "a3b3237e"}, @local=@item_4={0x3, 0x2, 0x0, "0132a001"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x1, 0x1, {0x22, 0x412}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000280)={0x40, 0x0, 0xe1, "1c1402a9f0a51636fe9cfd122060bd4bcf02ab6b90fd122dd76ce86660b99bba1a120b72b7c19c5f00ead453b25fcd5c722b9cf57edd16ba564021b90251382dcbd78ac356685cea573d225b49980ad2f9977e97752c9276c2dc2346f99be725cf680ce734fa2c7bf6fcdc1672a76f637ddc5956292a94c96edc3f878f70a226659347cae24ff9839f1eef48134023d47d9ddec88c71b300add276fac27e75e44bdb3c4157e82c029d5b672ed6cbf18c3c08bb477a08f909450fc642e1dc594d54ed2150f99f1808fdeff93a4df74a2d460f0c7d36c86298b6a71da0bacaef2095"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000003c0)={0x0, 0x8, 0x1}, &(0x7f0000000400)={0x20, 0x1, 0x63, "2e21948e1b163a2be482be9a43351dd5b8635c445b2a903c68ef6185f7353a017de415cd3e83d48fe63a9a7746fd73a9b3de12e785e685442b9a643b2da1840160f97f498baa1df7cc1812820f6381734ae3e2df007fdabf8d408b46ffb61d41d16dfb"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x8}}) (async)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080)) (async)
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0xffff0000) (async)
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000002540)=0x1)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c00030068"], 0x58}, 0x1, 0x0, 0x0, 0x4040041}, 0x20000000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x7, 0x4, 0x0, 0x0, @sint={0x101, 0xf}}]}) (async)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_PIT(r7, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x4, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x5, 0x6, 0x9}, {0x1ff, 0x7, 0xd, 0x10, 0x27, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9})
ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x3fe, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x400000000000000, 0x3, 0x4], 0xeeee8000, 0x90410}) (async)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000002c0)={0x4, 0x0, [{0x587, 0x0, 0x5}, {0x87d, 0x0, 0x5}, {0x231, 0x0, 0xf129000000}, {0xadb, 0x0, 0x3363}]})
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

4.260342308s ago: executing program 5 (id=5196):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) (async)
r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x3, 0x42382)
syz_usb_disconnect(r0) (async)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='oom_adj\x00')
fcntl$setstatus(r2, 0x4, 0x40800) (async)
r3 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r2, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}) (async)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
io_uring_enter(r3, 0x567, 0x1000a387, 0x0, 0x0, 0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r6=>r1, {0x4}}, './file0\x00'})
ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f0000000200)={0x40000000, 0x280, "08e328f66615a8bef205cdfd581ef7afdac1c794a124f23c4908b741a43eee16", 0x4, 0x2, 0x8000000000000001, 0x6, 0x9, 0x2, 0x0, 0x3, [0x6, 0x4, 0x4, 0xf400000]}) (async)
r7 = syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1039, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x6, 0x0, 0x10, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x0, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xda, 0x2}]}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x2, 0x2, 0x4, 0x40, 0xe7}, 0x0, 0x0})
syz_usb_control_io(r7, 0x0, 0x0)

4.141370253s ago: executing program 5 (id=5197):
socket$inet6_udp(0xa, 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000001c0)={"eaffffbc", 0x100, 0x5, 0x4, 0x804, 0x1, "956888e9d000", '\x00', "2f069577", "959174a2", ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", '\x00', "ff0100f001ffffffffe6ff00"]})
unshare(0x2040400)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

4.087034503s ago: executing program 5 (id=5198):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500))
setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x6d0b, 0x4)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x40, 0x14, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$kvm(0x0, &(0x7f0000000000), 0x20000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xdb)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r4, 0x4068aea3, &(0x7f0000000100)={0xed, 0x0, 0x8000000000000001})
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000340)={0x20, 0x9, 0x4, "fce890dc"}, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000500)={0x40, 0x16, 0x4, "4e59aaf9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x70bd2b, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x8804}, 0x4000000)
r5 = socket$inet6(0xa, 0x3, 0xff)
sendmmsg$inet6(r5, &(0x7f0000002bc0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0)

3.660137238s ago: executing program 2 (id=5200):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x6, @remote, 0x2}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x4e21, 0xfa9, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x9}], 0x2c)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
setrlimit(0xf, &(0x7f0000000000)={0x0, 0x5})
timer_create(0x3, 0x0, &(0x7f0000000300)=<r1=>0x0)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004010}, 0x400c1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}})
unshare(0x40000000)
setrlimit(0x0, &(0x7f0000000040)={0x7, 0xfffffffffffffffc})
timer_settime(r1, 0x1, &(0x7f0000000100)={{0x0, 0x3938700}}, 0x0)

3.220818174s ago: executing program 2 (id=5201):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (async)
sendmmsg$inet(r1, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x19, &(0x7f00000016c0)=[{&(0x7f0000000000)="97e8e909ef8ed7010fc2bb245f4d2d6ae7f1d45ec6efbf1eb9edeaf6abb1fe177388794aae5e9796", 0xffe3}], 0x1}}], 0x1, 0x4000800) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000540)={'syztnl0\x00', r2, 0x10, 0x10, 0x3, 0x200, {{0x27, 0x4, 0x1, 0x7, 0x9c, 0x64, 0x0, 0x8, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xc}, {[@ssrr={0x89, 0x7, 0x5e, [@multicast2]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xbc, 0x3, 0x0, [{@multicast1, 0x7}, {@loopback, 0x9}, {@remote, 0xbdc00000}, {@private=0xa010102, 0x7}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x9}, {@multicast2, 0x40}]}, @generic={0x82, 0xa, "d85241e27ef7a7f3"}, @ra={0x94, 0x4, 0x1}, @end, @timestamp_prespec={0x44, 0x34, 0xfd, 0x3, 0x8, [{@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x5}, {@loopback, 0x3}, {@remote, 0x6}, {@empty, 0x5}, {@broadcast, 0x3}]}]}}}}})
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000400), 0x10000)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000600)={<r5=>0x0, 0x89}, &(0x7f0000000640)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000680)={r5, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000740)=0x84)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x67a38, 0x79223}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xdc97}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40040)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = io_uring_setup(0x6249, &(0x7f0000000240)={0x0, 0x51e7, 0x200, 0x2, 0x204}) (async)
r8 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) (async)
syz_usb_disconnect(r8)
read$char_usb(r9, 0x0, 0x0) (async)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r7, 0x6, &(0x7f00000002c0)={0xee9f, 0x0, &(0x7f0000000000)=[r0, r3]}, 0x2)
r10 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000180)=<r11=>0x0, &(0x7f0000000100)=<r12=>0x0) (async)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
syz_io_uring_submit(r11, r12, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r13, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880), 0x63}, 0x0, 0xe3d08660d3cd4684})
io_uring_enter(r10, 0x92, 0x0, 0x0, 0x0, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004b0000340000000000019078ac1e0001ac1414aa8617000000030611848a83989c24887c92520e2763c50300080092266d54ce9181c3d787bab34590780007000d7a661d53bde5263744babd877644c4c784be7bef05b9938b85571807f1ce8d5fc4090b9d7c9a3c161ed3a701d67293154b1eac6d9eb9e887e9a4d4f0cedf628ed5cbc1dcb53bc0fde8c17b0a3a9bc583fe7f93df0c0ebf6b9f2c7d282250f6ca9487449c23a4b372704b663e152a3a639a7bea542517776410f8bd514a8dbac4c449d873b33b497cac7f19ad7e60cad81eef772d2c1eecae7988954432f286779f909165"], 0x0)
r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r14, 0x0)
gettimeofday(&(0x7f0000000040), 0x0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44001000", @ANYRES16=r6, @ANYBLOB="01002cbd70010080000034000000080073000000000008000300200000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x44}}, 0x20000000)

3.052375222s ago: executing program 3 (id=5202):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x1, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
recvmmsg(r0, &(0x7f0000002cc0)=[{{&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/159, 0x9f}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000200)=""/18, 0x12}], 0x4, &(0x7f0000000280)=""/181, 0xb5}, 0x43}, {{&(0x7f0000000340)=@l2tp6, 0x80, &(0x7f00000003c0), 0x0, &(0x7f0000000400)=""/49, 0x31}, 0x5}, {{&(0x7f0000000440)=@ax25={{0x3, @default}, [@remote, @default, @remote, @bcast, @default, @remote, @netrom, @bcast]}, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/87, 0x57}, {&(0x7f0000000540)=""/229, 0xe5}], 0x2}, 0x6}, {{&(0x7f0000000680)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/218, 0xda}], 0x1}, 0x1}, {{&(0x7f0000000840)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000008c0)=""/63, 0x3f}, {&(0x7f0000000900)=""/190, 0xbe}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/173, 0xad}, {&(0x7f0000001a80)=""/8, 0x8}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x6, &(0x7f0000002b40)=""/200, 0xc8}, 0x5}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c40)}], 0x1}, 0xffff8c10}], 0x6, 0x40010100, &(0x7f0000002e40)={0x77359400})

2.984890162s ago: executing program 3 (id=5203):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004090)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c)
recvmmsg(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2100, 0x0)
recvmmsg$unix(r1, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x1, 0x4, 0x8}, 0x48)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c90200000000d0a20268fa095d42000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x11c, 0x11c, 0x3, [@float={0x6, 0x0, 0x0, 0x10, 0x8}, @union={0x10, 0x9, 0x0, 0x5, 0x0, 0x2, [{0xa, 0x2}, {0x4, 0x4, 0x8}, {0x1, 0x3, 0x80000000}, {0xa, 0x5, 0xffffffff}, {0x5, 0x3, 0x401}, {0x7, 0x0, 0x7}, {0xf, 0x4, 0x2}, {0xd, 0x3, 0x80}, {0xc, 0x2, 0xd51}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x800}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x4}}, @enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x4}]}, @struct={0xd, 0x6, 0x0, 0x4, 0x1, 0x0, [{0x2, 0x1, 0x2}, {0x4, 0x1, 0x6278}, {0x6, 0x5, 0x80000001}, {0x7, 0x1, 0x401}, {0x3, 0x3, 0x8}, {0xa, 0x1, 0x4}]}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/121, 0x137, 0x79, 0x1, 0xae, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20000000, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$BLKTRACESTOP(r0, 0x1275, 0x0)

2.612998513s ago: executing program 3 (id=5205):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
set_mempolicy(0x3, &(0x7f0000000100)=0x2, 0xc150)
prctl$PR_CAPBSET_READ(0x17, 0x1b)
r2 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000600)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000000c0)={&(0x7f0000001000)={[{0x0, 0x0, 0x4, 0xf4}, {0x0}]}, 0x2, 0x1}, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000003070103700000a6dc806aa67908b0a196d349ba0d0900010074797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

1.63575685s ago: executing program 1 (id=5209):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000001, 0x17d, 0x400000004, 0xffffffffffffffff, 0xf1, 0x8, 0x0, 0x42, 0x0, 0x3b9, 0xffff, 0x0, 0x0, 0x8], 0x8000000, 0x3c4210})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000340)="f081550000a000000f00000f001e48b8feb65a0d000000000f21f835200000000f23f8be252e8a094d36420f705626002e660f3a176a4b00b9800000c0d8d967420f01c30f5966b8f80cb8c087678eef66bac60fc72a45c194710a000000058a3bc4827dbcae009008f2", 0x5c}], 0x1, 0xf4, 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0)
r8 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, 0x2000})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080005802d"], 0x44}}, 0x2404000c)
syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x61, &(0x7f0000000040)=[@cr4={0x1, 0x40be6}], 0x1)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_CAP_X2APIC_API(r4, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x2})
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000100)={{0x2e, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x1, 'fo\x00', 0x2f, 0x8001, 0x6e}, {@rand_addr=0x64010100, 0x4e22, 0x2, 0x2, 0x1, 0x6c08}}, 0x44)

1.566698963s ago: executing program 6 (id=5210):
socket$nl_route(0x10, 0x3, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102)
fsopen(&(0x7f0000000580)='overlay\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd, 0x2c}, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xffffffff}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002700)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000027c0)="e560", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000580)="04f274", 0x3}], 0x1}}], 0x2, 0x20008050)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="030006"], 0x14)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
unshare(0x8040480)
r5 = socket$kcm(0x29, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffd3}, 0x48)
r7 = socket$kcm(0x2, 0x1, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r7, r6})
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x12}}}, 0x118)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

1.186752874s ago: executing program 3 (id=5211):
pipe(&(0x7f00000045c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
capset(&(0x7f0000000040), 0x0)
r2 = socket$inet(0x2, 0x3, 0x7f)
clock_settime(0x1f63efe618c1a3a7, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_io_uring_setup(0x10d2, &(0x7f0000000500)={0x0, 0x7734, 0x80, 0x0, 0x834d}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0xc0, &(0x7f0000000140)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r5, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f000000b680)=[{{&(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000003c0)=[{&(0x7f00000001c0)="5ddeeb7d31dfdbfd56e2460986934ac301c13c18df8bf9451d9fcd65f45e21412b7eb63526d1ff6ee6e71e036057", 0x2e}, {&(0x7f00000002c0)="3476a0cc13c78156b3e02fc1a08c8c6ee1b047957594bb47fac782efbddb17c1654914fe4d7ee4d2", 0x28}, {&(0x7f0000000340)="3bab3f69130bd6c76de63abe0d1d45dddec87e07240cbb5c84c127c8e415426cc56f5ee2841b7012faf985063a2c5f13", 0x30}, {&(0x7f0000000380)="f9a122c23615efac1ad4864d0d92e691596f835e76", 0x15}], 0x4, &(0x7f0000000740)=[@rights={{0x1c, 0x1, 0x1, [r4, r8, r4]}}, @rights={{0x18, 0x1, 0x1, [r0, r3]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r5, r4, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r8, r9, r9, r5]}}, @rights={{0x2c, 0x1, 0x1, [r1, 0xffffffffffffffff, r4, 0xffffffffffffffff, r2, r0, r5]}}], 0x110, 0x20000081}}, {{&(0x7f0000000880)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000900)=[{&(0x7f000000a380)="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", 0x1000}], 0x1, &(0x7f00000018c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}], 0x120, 0x20000000}}, {{0x0, 0x0, &(0x7f0000004280), 0x0, 0x0, 0x0, 0x44}}], 0x3, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
r10 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x1000000, 0x1000, 0x1, 0x2}, 0x20)
setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000080)=0xfffffffa, 0x4)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
bind$unix(r11, &(0x7f00000017c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
write$binfmt_script(r1, &(0x7f0000000980)={'#! ', './file0', [], 0xa, "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"}, 0xf0b)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x8000, 0x7800, 0x0, 0x400, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}}}})

1.10533544s ago: executing program 2 (id=5212):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) (async)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) (async)
open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) (async)
read$FUSE(r4, &(0x7f0000000200)={0x2020, 0x0, <r5=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
write$FUSE_INIT(r4, &(0x7f0000002300)={0x50, 0x0, r5, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r4, &(0x7f00000065c0)={0x2020}, 0x2020) (async)
read$FUSE(r4, &(0x7f00000065c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) (async)
write$FUSE_INTERRUPT(r4, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10)
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
dup3(r7, r4, 0x0) (async)
dup3(r7, r4, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x1c4)
r8 = fanotify_init(0x200, 0x0)
fanotify_mark(r8, 0x201, 0x40000036, r3, 0x0) (async)
fanotify_mark(r8, 0x201, 0x40000036, r3, 0x0)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) (async)
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r9, &(0x7f00000001c0)='\\', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r10 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setsig(r10, 0xa, 0x13)
fcntl$setlease(r10, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))

793.16315ms ago: executing program 2 (id=5213):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40000c0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
sendto$inet6(r0, &(0x7f0000000440)="6465bff2bbcad94264b8932e07326f345e10d1dfc5eb8662d906ac672a9d975a16b03ad9eeac7a40debfe530bc532b5f764177b0aa988084f6197a85c3f1b30985816feea320175d899d99759a63112eb94b5888e3d98f533335308073efe4fc831fffcc1eb45409c6baf833c160da0bc8a65338d7b7339a5e3416d81b01ff6089ebef961211a657467667ac445089deddef0dfabd27d28c285a11ed1098bb67da9b0181", 0xa4, 0x40010, &(0x7f0000000040)={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x36}, 0x80000000}, 0x1c)
r4 = memfd_create(&(0x7f0000000240)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r5 = dup(r4)
write$binfmt_elf32(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c464a030403ff0700000000000002000300080000003d03000038000000d6000000977000007c0d200003000700080007000000000000000070020000000400000007000000feffffff0504000000ee00000900000005000000faffffff050000000400000009000000e79700000300000005000000030000000100000000000000ff00000005000000020000004d74000007000000"], 0x98)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x26, &(0x7f0000000100)={0x1, 0x2, 0x5, 0xfffffffffffffffd})
r7 = msgget$private(0x0, 0x193)
msgsnd(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0)
msgsnd(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0)
msgsnd(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0)
msgrcv(r7, &(0x7f00000002c0), 0x8, 0x0, 0x800)
r8 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'wlan1\x00', &(0x7f0000000000)=@ethtool_ringparam={0x34}})
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r11=>0x0})
bind$can_j1939(r10, &(0x7f00000001c0)={0x1d, r11, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18)
sendmsg$can_j1939(r10, &(0x7f0000000940)={&(0x7f00000003c0)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x1}, 0xff}, 0x18, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x810)

690.173209ms ago: executing program 1 (id=5214):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x26, r1})
rt_sigtimedwait(&(0x7f0000000080)={[0x1]}, &(0x7f00000000c0), &(0x7f0000000140)={0x0, 0x989680}, 0x8)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=<r2=>0x0)
tkill(r2, 0x7)
read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, <r3=>0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
capget(&(0x7f0000002200)={0x20080522, r4}, &(0x7f0000002240)={0x10, 0x4, 0xfffffffa, 0x2, 0x2, 0x5})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000002280), 0x60000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000022c0)={0xc})
capget(&(0x7f0000002300)={0x20080522, r2}, &(0x7f0000002340)={0x8, 0x5, 0x5, 0x7fffffff, 0x9, 0x4})
ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002380), 0x2, 0x0)
write$FUSE_INIT(r6, &(0x7f00000023c0)={0x50, 0x0, r3, {0x7, 0x2d, 0xe, 0xf006804, 0xfff9, 0x5, 0x800, 0x2, 0x0, 0x0, 0x40}}, 0x50)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002440)={{0x1, 0x1, 0x18, <r7=>r5, {0x8, 0x8a7f}}, './file0\x00'})
sendmsg$NL80211_CMD_SET_COALESCE(r7, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40800)
syz_genetlink_get_family_id$wireguard(&(0x7f00000025c0), r7)
sendmsg$AUDIT_SET(r7, &(0x7f00000026c0)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002680)={&(0x7f0000002640)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfd, {0x44, 0x1, 0x2, r2, 0x0, 0x1000100, 0x2, 0x1, 0x0, 0xff, 0xffff393c}, ["", "", "", "", "", "", ""]}, 0x3c}}, 0x10)
setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000002700)={@loopback, @dev={0xac, 0x14, 0x14, 0x2e}, r1}, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002780), r7)
sendmsg$NL80211_CMD_SET_WIPHY(r8, &(0x7f0000002880)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002840)={&(0x7f00000027c0)={0x80, r9, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x15e}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x44, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x7}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x4}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x9e}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x7f}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x4}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x6}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x4}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x7}]}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f00000028c0)=r7, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
munlockall()
r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000002940), r7)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x28, r10, 0x604, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x80c1)
ioctl$XFS_IOC_SWAPEXT(r6, 0xc0c0586d, &(0x7f0000002a40)={0x0, r7, r7, 0x83, 0x7, '\x00', {0xaad, 0xf83d, 0x1, 0x7, 0x8, 0xffffffff, 0x72, 0x800, {0x3, 0x4}, {0x5, 0xfffffff8}, {0xfffffffffffffff7, 0x8}, 0x4, 0x8, 0x2, 0x200, 0x7, 0x0, 0x2, 0x7, 0x657, 0x9, '\x00', 0x7, 0xff, 0x9, 0xbb}})
bind$inet(r7, &(0x7f0000002b00)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, 0x10)
pwritev2(r5, &(0x7f0000002c40)=[{&(0x7f0000002b40)="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", 0xfc}], 0x1, 0x6, 0x3, 0x0)

588.992973ms ago: executing program 2 (id=5215):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
r2 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0x0)
ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000500)={0x1, @output={0x0, 0x0, {0x8, 0x2}, 0x4d, 0x1}}) (async)
r3 = dup3(r1, r0, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) (async)
r5 = socket$inet6(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x50b, 0x70bd27, 0x25dfdbfe, {0x2, 0x1, 0x0, 0xfe}, [@IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @multicast1}, @IFA_LOCAL={0x8, 0x2, @private=0xa010102}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}}, 0x0)
sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x4) (async)
syz_clone(0x40200000, 0x0, 0xffffffffffffff55, 0x0, 0x0, 0x0)

460.113238ms ago: executing program 2 (id=5216):
r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00')
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0)
landlock_create_ruleset(0x0, 0x0, 0x1)
write$tcp_mem(r0, &(0x7f0000000180)={0x6, 0x20, 0x0, 0x20, 0x1}, 0x48)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0x8a, 0x1000, 0x0, 0x0}, {0xfffa, 0x8000, 0xfe, &(0x7f00000003c0)="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"}], 0x2})
syz_usb_control_io(r1, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_procfs(0x0, 0x0)
socket(0xa, 0x800, 0xfffffffb)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x2, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000001, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newtfilter={0xac, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0xa, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x81}, 0x800)
socket$nl_generic(0x10, 0x3, 0x10)

345.270001ms ago: executing program 1 (id=5217):
r0 = socket(0x10, 0x3, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
r2 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
close(0x3) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], <r3=>0x0, 0xbf, &(0x7f0000000500), 0x0, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x1000096, 0x8, 0xfffffffffffffe53, &(0x7f0000000800)}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980)=r3, 0x4) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x254081, 0x0) (async, rerun: 64)
bind$inet(r2, 0x0, 0x0) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) (async)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
accept4$packet(r5, 0x0, 0x0, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$nl_xfrm(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x400, 0x70bd2d, 0x25dfdbfc, {@in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4d2, 0x2, 0x33}}, 0x28}}, 0x4004000)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x9, 0x1000, 0x0, 0xc705}, 0x10)
write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 32)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f00000000c0)=0x8000, 0x4) (rerun: 32)
writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f00000005c0)="4a759ce6499198f49bb998e2c7bd2e21933fbb62be1daf0be3cdb90a28147251fbe4f8bad003f67ebe41ff5a2364dc11777de45fd805a7277e3d82785ad6d94b4409035a3dedc67d57816a5f28f0899bed560d747818daa52e1471e8a6b8aec8b3667199d8dbb613a6f9d0a16fc305793a755611bc6beff32299548c01cdfcfbc4bf90f20eba38d81648dadd91d7a95a834fe83f272fa8c55c3ddbb16f06564fb53035c6e2d6c553015eb1fb05b65abb4c835e1ebfac5ed8c233da4d1d02a0", 0xbf}, {&(0x7f0000000680)="9ff5ef9f5883624d71e4ef46cb6e24d6cef712ee469c8395a88668ad524e22beeeaa32a45252170ef2c7a33a49e302c6b0a537ae5a30c19eae987e1fb7863450cbd4b727b30dd3c1f3419f1f075b89da7f0c7331696ddc60b5bfa09a45b151879b374911b05c0bd9688db4ec2e09aaba278caff7ac651dab60fe85cd94b20950de329b6d918407e4fa3e4c36c4caf31a3e9c89a1cea7bee9c020fab43f7b2ce330ade22bb31da9f484d0a98fae809ce4ba49b763089d822e7e7e2023e91f7a4d86a57d2cf509916cf4b7c8484a22517ae4eef10947d3a791bcfe3d5dd6daa477f75cf556e7008e1284f6359eebbf", 0xee}], 0x2) (async, rerun: 64)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800100010005fba0000000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0) (rerun: 64)

244.808771ms ago: executing program 3 (id=5218):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0x1, 0x10, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, r4, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1020000})
close_range(r3, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0xc00)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={<r7=>0x0}, &(0x7f00000001c0)=0xc)
write$P9_RGETLOCK(r6, &(0x7f0000000240)={0x27, 0x37, 0x2, {0x0, 0x3, 0xfffffffffffffffb, r7, 0x9, '/dev/kvm\x00'}}, 0x27)

224.11427ms ago: executing program 6 (id=5219):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg(r0, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)}}], 0x1, 0x84)

192.264825ms ago: executing program 1 (id=5220):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
fallocate(r1, 0x8, 0x7ffffffffffffffe, 0x5cfc)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=@mpls_delroute={0xa0, 0x19, 0x0, 0x70bd2c, 0x25dfdbfd, {0x1c, 0x80, 0x80, 0x2, 0xfc, 0x0, 0xc8, 0x9, 0x1200}, [@RTA_NEWDST={0x84, 0x13, [{0xb, 0x0, 0x1}, {0x7}, {0x8}, {0x3, 0x0, 0x1}, {0x5}, {0xfb90b, 0x0, 0x1}, {0xa0a24}, {0x1, 0x0, 0x1}, {0xe, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x2}, {0x8}, {0x3ff, 0x0, 0x1}, {0xa7, 0x0, 0x1}, {0x9}, {0x3, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xffffe, 0x0, 0x1}, {0x405, 0x0, 0x1}, {0x3}, {0x0, 0x0, 0x1}, {0x4}, {0xa7, 0x0, 0x1}, {0x80}, {0x7f, 0x0, 0x1}, {0x75d, 0x0, 0x1}, {0x7da5, 0x0, 0x1}, {0xea0}, {0x91, 0x0, 0x1}, {0xae}, {0x1, 0x0, 0x1}, {0xffff9}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x40, 0x107, 0xfffffffe, 0x2, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x14, 0x2, 0x0, 0x1, [@nested={0x10, 0x14, 0x0, 0x1, [@nested={0xc, 0x14, 0x0, 0x1, [@typed={0x8, 0xb6, 0x0, 0x0, @u32=0x4788}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800)

73.326012ms ago: executing program 6 (id=5221):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}})
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x1d5}, &(0x7f00000001c0), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000200), 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r1, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_RESIZE_RINGS(r1, 0x21, 0x0, 0x1)
r2 = fsmount(r0, 0x0, 0x1)
fchdir(r2)
chdir(&(0x7f0000000140)='./bus\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r5 = gettid()
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
tkill(r5, 0x15)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffff7d, 0x0, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1002}]})
r6 = syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00')
r7 = open_tree(r6, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f00000000c0)=0x7fff)
socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
timer_create(0x2, 0x0, &(0x7f0000bbdffc))
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000)

72.716865ms ago: executing program 1 (id=5222):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x6, 0x0, 0xe7}, 0x3, 0x400000, 0x0, 0x6, 0x0, 0x9}})
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x8f, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$xdp(0x2c, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', <r5=>0x0})
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20048cf1)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x6, 0x1}, 0x2, 0x80, &(0x7f0000000080)={0x1f, 0x1, 0x8, 0x9, 0x6}, 0x8, 0x0, 0x200, 0x0, 0x800, 0x200, &(0x7f0000000140)="2d4f2caea510d0a8d95b7fba453eeecc21a43bf4fb82"})
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054)

0s ago: executing program 1 (id=5223):
r0 = gettid()
sigaltstack(&(0x7f0000000080)={0x0, 0x80000000}, 0x0)
io_setup(0x402, &(0x7f0000000000)=<r1=>0x0) (async)
syz_io_uring_setup(0x4, &(0x7f0000000580), &(0x7f0000000080), 0x0) (async, rerun: 32)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="340000003e0007012bbd700000000000010100080400fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async, rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e) (async, rerun: 64)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8010) (async, rerun: 32)
r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32)
io_getevents(r1, 0x1000, 0x80000000000033b, &(0x7f0000000240), 0x0) (async)
io_submit(r1, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000080)="8c", 0x1}])
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x3938700}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063115b000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x24}, 0x23)

kernel console output (not intermixed with test programs):

aces, different from the descriptor's value: 3
[ 1254.917651][   T10] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.40
[ 1254.926901][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1254.935129][   T10] usb 6-1: Product: syz
[ 1254.943010][   T10] usb 6-1: Manufacturer: syz
[ 1254.947628][   T10] usb 6-1: SerialNumber: syz
[ 1254.967357][   T10] gspca_main: spca501-2.14.0 probing 0000:0000
[ 1255.211811][T25458] RDS: rds_bind could not find a transport for ::ffff:100.1.1.64, load rds_tcp or rds_rdma?
[ 1255.402023][T25462] geneve2: entered promiscuous mode
[ 1255.493337][   T10] gspca_spca501: reg write: error -110
[ 1255.503376][   T10] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 1255.574157][   T10] spca501 6-1:1.0: probe with driver spca501 failed with error -22
[ 1255.584831][T25467] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4759'.
[ 1255.619808][   T10] usb 6-1: 0:2 : does not exist
[ 1255.771232][T25469] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) !
[ 1255.784988][T25469] mac80211_hwsim hwsim48 syzkaller0: entered promiscuous mode
[ 1255.792656][T25469] mac80211_hwsim hwsim48 syzkaller0: entered allmulticast mode
[ 1256.243317][   T10] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1256.444258][   T10] usb 4-1: config index 0 descriptor too short (expected 8192, got 18)
[ 1256.453081][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1256.465816][   T10] usb 4-1: config 0 has no interfaces?
[ 1256.475193][   T10] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1256.485996][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1256.495199][   T10] usb 4-1: Product: syz
[ 1256.499864][   T10] usb 4-1: Manufacturer: syz
[ 1256.505564][   T10] usb 4-1: SerialNumber: syz
[ 1256.512310][   T10] usb 4-1: config 0 descriptor??
[ 1256.815188][   T10] usb 4-1: USB disconnect, device number 50
[ 1256.965583][T25492] syzkaller0: entered promiscuous mode
[ 1256.990115][T25492] syzkaller0: entered allmulticast mode
[ 1257.148290][ T5903] usb 6-1: USB disconnect, device number 123
[ 1257.352410][T25496] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4767'.
[ 1257.561886][T25502] loop8: detected capacity change from 0 to 7
[ 1257.579070][T25502] Dev loop8: unable to read RDB block 7
[ 1257.611200][T25506] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4769'.
[ 1257.620674][T25502]  loop8: unable to read partition table
[ 1257.643802][T25502] loop8: partition table beyond EOD, truncated
[ 1257.650236][T25502] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1257.760781][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4772'.
[ 1257.859407][ T5903] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1257.922880][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4775'.
[ 1257.966939][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4775'.
[ 1258.003382][T25520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4775'.
[ 1258.083529][ T5903] usb 2-1: Using ep0 maxpacket: 16
[ 1258.090309][ T5903] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1258.113442][ T5903] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1258.121647][ T5903] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1258.144780][T14490] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1258.329953][ T5903] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1258.338374][ T5903] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1258.364329][ T5903] usb 2-1: config 0 has no interface number 0
[ 1258.400178][ T5903] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1258.424702][T14490] usb 6-1: config 0 has no interfaces?
[ 1258.443772][T14490] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1258.459796][ T5903] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1258.512582][T14490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1258.533097][ T5903] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1258.553995][T14490] usb 6-1: config 0 descriptor??
[ 1258.560510][ T5903] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1258.651574][ T5903] usb 2-1: config 0 interface 125 has no altsetting 0
[ 1258.665961][ T5903] usb 2-1: config 0 interface 125 has no altsetting 2
[ 1258.691626][ T5903] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1258.704266][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.717887][ T5903] usb 2-1: Product: syz
[ 1258.725526][ T5903] usb 2-1: Manufacturer: syz
[ 1258.740528][ T5903] usb 2-1: SerialNumber: syz
[ 1258.757564][ T5903] usb 2-1: config 0 descriptor??
[ 1258.765143][T25524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1258.773978][T25524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1258.790799][ T5903] usb 2-1: selecting invalid altsetting 2
[ 1258.819442][T25524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1258.884530][T25524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1258.910369][   T10] usb 6-1: USB disconnect, device number 124
[ 1259.198296][    C1] usb 2-1: async_complete: urb error -71
[ 1259.204075][    C1] usb 2-1: async_complete: urb error -71
[ 1259.209810][    C1] usb 2-1: async_complete: urb error -71
[ 1259.251377][ T5903] get_1284_register: usb error -71
[ 1259.255614][T25507] netlink: 'syz.1.4770': attribute type 2 has an invalid length.
[ 1259.289189][ T5903] usb 2-1: USB disconnect, device number 17
[ 1259.421923][T25546] macsec3: entered promiscuous mode
[ 1259.427252][T25546] macsec3: entered allmulticast mode
[ 1259.432712][T14490] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1259.583090][T14490] usb 6-1: device descriptor read/64, error -71
[ 1259.863078][T14490] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1260.043104][T14490] usb 6-1: device descriptor read/64, error -71
[ 1260.164234][T14490] usb usb6-port1: attempt power cycle
[ 1260.423401][T14501] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[ 1260.673258][T14490] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1260.675942][T14501] usb 2-1: Invalid ep0 maxpacket: 16
[ 1260.711483][T14490] usb 6-1: device descriptor read/8, error -71
[ 1260.823529][T14501] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[ 1260.973259][T14501] usb 2-1: Invalid ep0 maxpacket: 16
[ 1260.983416][T14501] usb usb2-port1: attempt power cycle
[ 1261.038116][ T5903] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1261.213060][ T5903] usb 4-1: Using ep0 maxpacket: 16
[ 1261.225779][ T5903] usb 4-1: config 0 has an invalid interface number: 104 but max is 1
[ 1261.236590][ T5903] usb 4-1: config 0 has an invalid interface number: 104 but max is 1
[ 1261.245133][ T5903] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1261.272307][ T5903] usb 4-1: config 0 has no interface number 0
[ 1261.290628][ T5903] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1261.346003][T14501] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[ 1261.363410][ T5903] usb 4-1: config 0 interface 104 has no altsetting 1
[ 1261.374246][ T5903] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[ 1261.384855][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.393239][ T5903] usb 4-1: Product: syz
[ 1261.397561][ T5903] usb 4-1: Manufacturer: syz
[ 1261.404177][ T5903] usb 4-1: SerialNumber: syz
[ 1261.414930][ T5903] usb 4-1: config 0 descriptor??
[ 1261.415301][T14501] usb 2-1: Invalid ep0 maxpacket: 16
[ 1261.482798][ T5903] asix 4-1:0.104: probe with driver asix failed with error -22
[ 1261.599433][T14501] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[ 1261.627695][T14501] usb 2-1: Invalid ep0 maxpacket: 16
[ 1261.633783][T14501] usb usb2-port1: unable to enumerate USB device
[ 1261.634982][ T5903] usb 4-1: USB disconnect, device number 51
[ 1262.691692][T25586] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4792'.
[ 1262.771651][T25591] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1263.306115][T25604] netlink: 'syz.3.4797': attribute type 1 has an invalid length.
[ 1263.463529][   T30] audit: type=1326 audit(1773603901.705:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1263.503087][   T30] audit: type=1326 audit(1773603901.735:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1263.550126][T25616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4800'.
[ 1263.563234][T25616] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4800'.
[ 1263.574064][   T30] audit: type=1326 audit(1773603901.735:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c3419c502 code=0x7ffc0000
[ 1263.640008][   T30] audit: type=1326 audit(1773603901.735:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c3419c502 code=0x7ffc0000
[ 1263.684264][T14501] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1263.707886][   T30] audit: type=1326 audit(1773603901.735:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1263.756235][   T30] audit: type=1326 audit(1773603901.735:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1263.798353][   T30] audit: type=1326 audit(1773603901.735:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1263.825985][   T30] audit: type=1326 audit(1773603901.735:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1263.857415][   T30] audit: type=1326 audit(1773603901.735:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1263.889431][   T30] audit: type=1326 audit(1773603901.735:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25614 comm="syz.6.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1263.914032][T14501] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1263.932414][T14501] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1263.946029][T14501] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1263.987010][T14501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1263.998670][T14501] usb 6-1: Product: syz
[ 1264.002912][T14501] usb 6-1: Manufacturer: syz
[ 1264.008770][T14501] usb 6-1: SerialNumber: syz
[ 1264.231215][T25632] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4806'.
[ 1264.503092][T14490] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1264.639836][T14501] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS
[ 1264.648198][T14501] cdc_ncm 6-1:1.0: bind() failure
[ 1264.653046][T14490] usb 2-1: Using ep0 maxpacket: 32
[ 1264.662730][T14490] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[ 1264.671377][T14490] usb 2-1: config 0 has no interface number 0
[ 1264.671839][T14501] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[ 1264.684734][T14490] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1264.684874][T14501] cdc_ncm 6-1:1.1: bind() failure
[ 1264.700860][T14490] usb 2-1: config 0 interface 89 has no altsetting 0
[ 1264.710477][T14490] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a
[ 1264.712787][T14501] usb 6-1: USB disconnect, device number 3
[ 1264.736710][T14490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.754900][T14490] usb 2-1: Product: syz
[ 1264.759308][T14490] usb 2-1: Manufacturer: syz
[ 1264.764235][T14490] usb 2-1: SerialNumber: syz
[ 1264.770882][T14490] usb 2-1: config 0 descriptor??
[ 1264.779705][T14490] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[ 1264.789620][T14490] em28xx 2-1:0.89: Video interface 89 found:
[ 1264.979816][T25634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1264.992204][T25634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1265.073449][T14490] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[ 1265.146703][T14490] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[ 1265.171353][T14490] em28xx 2-1:0.89: board has no eeprom
[ 1265.192804][T25654] kvm: user requested TSC rate below hardware speed
[ 1265.202189][T25654] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[ 1265.252153][T14490] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[ 1265.261710][T14490] em28xx 2-1:0.89: analog set to bulk mode.
[ 1265.278297][ T5903] em28xx 2-1:0.89: Registering V4L2 extension
[ 1265.319171][T14490] usb 2-1: USB disconnect, device number 22
[ 1265.334421][T14490] em28xx 2-1:0.89: Disconnecting em28xx
[ 1265.367902][ T5903] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[ 1265.383346][ T5903] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[ 1265.394052][ T5903] em28xx 2-1:0.89: No AC97 audio processor
[ 1265.406798][ T5903] usb 2-1: Decoder not found
[ 1265.416078][ T5903] em28xx 2-1:0.89: failed to create media graph
[ 1265.424284][T25665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1265.427204][ T5903] em28xx 2-1:0.89: V4L2 device video103 deregistered
[ 1265.431536][T25665] IPv6: NLM_F_CREATE should be set when creating new route
[ 1265.471123][ T5903] em28xx 2-1:0.89: Registering snapshot button...
[ 1265.481650][ T5903] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input118
[ 1265.499713][ T5903] em28xx 2-1:0.89: Remote control support is not available for this card.
[ 1265.517781][T14490] em28xx 2-1:0.89: Closing input extension
[ 1265.524143][T14490] em28xx 2-1:0.89: Deregistering snapshot button
[ 1265.551676][T14490] em28xx 2-1:0.89: Freeing device
[ 1265.924280][T14490] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1265.963068][T14501] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[ 1266.073337][T14490] usb 2-1: Using ep0 maxpacket: 8
[ 1266.080619][T14490] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1266.089325][T14490] usb 2-1: config 0 has no interface number 0
[ 1266.099079][T14490] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 48, changing to 9
[ 1266.113076][T14501] usb 4-1: Using ep0 maxpacket: 16
[ 1266.120177][T14501] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1266.131265][T14490] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1266.145363][T14501] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1266.153628][T14490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1266.158824][T14501] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[ 1266.171004][T14501] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1266.197126][T14490] usb 2-1: config 0 descriptor??
[ 1266.208736][T14501] usb 4-1: Product: syz
[ 1266.217073][T14490] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1266.220956][T14501] usb 4-1: Manufacturer: syz
[ 1266.247971][T14501] usb 4-1: SerialNumber: syz
[ 1266.263889][T14501] usb 4-1: config 0 descriptor??
[ 1266.407175][T14490] usb 2-1: USB disconnect, device number 23
[ 1266.413278][    C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1266.555633][T25686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4818'.
[ 1266.568087][T25686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4818'.
[ 1266.579700][T14501] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input119
[ 1266.595527][T25686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4818'.
[ 1266.635589][T25686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4818'.
[ 1266.649316][T25686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4818'.
[ 1266.669936][T25688] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4819'.
[ 1266.923065][T14501] rc_core: IR keymap rc-imon-pad not found
[ 1266.928921][T14501] Registered IR keymap rc-empty
[ 1266.933911][T14501] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[ 1266.944501][T14501] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[ 1267.005155][T14501] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 1267.031430][T14501] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input120
[ 1267.046585][T14501] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:52> initialized
[ 1267.140580][T14490] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1267.310055][T14490] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1267.322637][T14490] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1267.355694][T14490] usb 2-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40
[ 1267.365405][T14490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1267.449198][T14490] usb 2-1: Product: syz
[ 1267.465738][T14490] usb 2-1: Manufacturer: syz
[ 1267.491006][T14490] usb 2-1: SerialNumber: syz
[ 1267.673184][T19897] wlan0: Trigger new scan to find an IBSS to join
[ 1267.699259][    C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71)
[ 1267.700353][ T5903] usb 4-1: USB disconnect, device number 52
[ 1267.750175][T14490] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1267.785170][T14490] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1267.892261][T14490] usb 2-1: USB disconnect, device number 24
[ 1268.436098][T25704] netlink: 'syz.5.4823': attribute type 1 has an invalid length.
[ 1268.443897][T25704] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4823'.
[ 1268.854804][T25732] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4828'.
[ 1268.869370][T25732] openvswitch: netlink: Message has 12 unknown bytes.
[ 1268.878546][T25732] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1269.782860][T25750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4836'.
[ 1269.792032][T14501] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1269.869842][T25750] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1269.943117][T14501] usb 3-1: device descriptor read/64, error -71
[ 1270.274578][T14501] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1270.501628][T14501] usb 3-1: device descriptor read/64, error -71
[ 1270.722344][T14501] usb usb3-port1: attempt power cycle
[ 1270.728613][T19146] wlan0: Trigger new scan to find an IBSS to join
[ 1270.897990][T25777] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4844'.
[ 1271.233116][T14501] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1271.263599][T14501] usb 3-1: device descriptor read/8, error -71
[ 1271.516396][T14501] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 1271.544370][T14501] usb 3-1: device descriptor read/8, error -71
[ 1271.641918][T25783] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4846'.
[ 1271.694129][T25783] openvswitch: netlink: Message has 12 unknown bytes.
[ 1271.700260][T14501] usb usb3-port1: unable to enumerate USB device
[ 1271.707602][T25783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1272.303113][T14490] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1272.467540][T14490] usb 2-1: device descriptor read/64, error -71
[ 1272.803664][T14490] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1273.080956][T25809] ptrace attach of "./syz-executor exec"[18695] was attempted by " ��      ��      �      ��      ��      ��      ��              ��      ��      ��                 ����                                                                                                                                                                                                                      encrypted                                                               !                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    
[ 1273.147368][T14490] usb 2-1: device descriptor read/64, error -71
[ 1273.213215][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1273.213234][   T30] audit: type=1400 audit(1773603911.325:3300): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="\" pid=25799 comm="syz.2.4853"
[ 1273.938178][T14490] usb usb2-port1: attempt power cycle
[ 1274.283149][T14490] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1274.334028][T14490] usb 2-1: device descriptor read/8, error -71
[ 1274.583064][T14499] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1274.583108][T14490] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1274.633303][T24402] wlan0: Trigger new scan to find an IBSS to join
[ 1274.644333][T14490] usb 2-1: device descriptor read/8, error -71
[ 1274.743056][T14499] usb 6-1: Using ep0 maxpacket: 16
[ 1274.753663][T14490] usb usb2-port1: unable to enumerate USB device
[ 1274.754108][T14499] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[ 1274.793044][T14499] usb 6-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1274.804587][T14499] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1274.833048][T14499] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1274.844544][T14499] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1274.865083][T14499] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[ 1274.884486][T14499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.893254][T14499] usb 6-1: Product: syz
[ 1274.897437][T14499] usb 6-1: Manufacturer: syz
[ 1274.902028][T14499] usb 6-1: SerialNumber: syz
[ 1274.927640][T14499] usb 6-1: config 0 descriptor??
[ 1274.933632][T25814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1275.179323][T25814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1275.198772][T14499] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input123
[ 1275.516313][T25839] SET target dimension over the limit!
[ 1275.646070][T11544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1276.165455][T25840] netlink: 360 bytes leftover after parsing attributes in process `syz.3.4860'.
[ 1276.209106][T25840] openvswitch: netlink: Message has 12 unknown bytes.
[ 1276.226029][T25840] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1276.287319][T25850] bridge0: entered promiscuous mode
[ 1277.090683][T25872] trusted_key: encrypted_key: insufficient parameters specified
[ 1277.348582][T14501] usb 6-1: USB disconnect, device number 4
[ 1278.253394][T25897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4878'.
[ 1278.262386][T25897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4878'.
[ 1278.326887][T25900] netlink: 360 bytes leftover after parsing attributes in process `syz.1.4876'.
[ 1278.353496][T25900] openvswitch: netlink: Message has 12 unknown bytes.
[ 1278.360391][T25900] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1278.911614][   T30] audit: type=1326 audit(1773603917.135:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25907 comm="syz.2.4881" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c1c79c799 code=0x0
[ 1278.991861][T25911] loop9: detected capacity change from 0 to 7
[ 1279.024749][T25911] Dev loop9: unable to read RDB block 7
[ 1279.030445][T25911]  loop9: unable to read partition table
[ 1279.036574][T25911] loop9: partition table beyond EOD, truncated
[ 1279.042822][T25911] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1279.383679][T25916] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4882'.
[ 1280.070267][T14501] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[ 1280.353543][T14501] usb 2-1: config 201 has an invalid interface number: 249 but max is 0
[ 1280.365434][T14501] usb 2-1: config 201 has no interface number 0
[ 1280.403071][T14501] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[ 1280.438352][T14501] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[ 1280.453640][T14501] usb 2-1: config 201 interface 249 has no altsetting 0
[ 1280.464590][T14501] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[ 1280.473928][T14501] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1280.482127][T14501] usb 2-1: Product: syz
[ 1280.487075][T14501] usb 2-1: Manufacturer: syz
[ 1280.492235][T14501] usb 2-1: SerialNumber: syz
[ 1280.750961][T14501] ath6kl: Failed to submit usb control message: -71
[ 1280.757728][T14501] ath6kl: unable to send the bmi data to the device: -71
[ 1280.778972][T14501] ath6kl: Unable to send get target info: -71
[ 1280.787716][T14501] ath6kl: Failed to init ath6kl core: -71
[ 1280.796254][T14501] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71
[ 1281.076185][T14501] usb 2-1: USB disconnect, device number 29
[ 1281.132306][T25947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4891'.
[ 1281.403547][T25957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1281.410789][T25957] IPv6: NLM_F_CREATE should be set when creating new route
[ 1281.433638][T14499] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1281.603491][T14499] usb 6-1: Using ep0 maxpacket: 16
[ 1281.616042][T14499] usb 6-1: too many configurations: 17, using maximum allowed: 8
[ 1281.649733][T25948] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4889'.
[ 1281.853309][T14501] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[ 1281.943577][   T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1282.039712][T14501] usb 3-1: device descriptor read/64, error -71
[ 1282.113181][   T10] usb 2-1: Using ep0 maxpacket: 8
[ 1282.131336][T25964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4897'.
[ 1282.158161][T25964] bond5: entered promiscuous mode
[ 1282.164689][T25964] bond5: entered allmulticast mode
[ 1282.170531][T25964] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1282.293153][T14501] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[ 1282.423271][T14501] usb 3-1: device descriptor read/64, error -71
[ 1282.543496][T14501] usb usb3-port1: attempt power cycle
[ 1282.690200][   T10] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1282.699015][   T10] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 1282.710502][   T10] usb 2-1: can't read configurations, error -71
[ 1282.893467][T14501] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[ 1282.914468][T14501] usb 3-1: device descriptor read/8, error -71
[ 1283.000516][T25996] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1283.008024][T25996] team0: Device macvlan2 is already an upper device of the team interface
[ 1283.153141][T14501] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[ 1283.195050][T14501] usb 3-1: device descriptor read/8, error -71
[ 1283.303907][T14501] usb usb3-port1: unable to enumerate USB device
[ 1283.333476][   T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1283.483047][   T10] usb 2-1: Using ep0 maxpacket: 32
[ 1283.489613][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1283.500877][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1283.510740][   T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[ 1283.520306][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1283.530413][T14490] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1283.531484][   T10] usb 2-1: config 0 descriptor??
[ 1283.694875][T14490] usb 4-1: Using ep0 maxpacket: 32
[ 1283.701923][T14490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 1283.713263][T14490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1283.723123][T14490] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1283.734667][T14490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1283.745820][T14490] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1283.758932][T14490] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 1283.768290][T14490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1283.776412][T14490] usb 4-1: Product: syz
[ 1283.780610][T14490] usb 4-1: Manufacturer: syz
[ 1283.785403][T14490] usb 4-1: SerialNumber: syz
[ 1283.806610][T14490] usb 4-1: config 0 descriptor??
[ 1283.812491][T26005] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1283.827842][T14490] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input124
[ 1283.848598][ T5178] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1283.860522][ T5178] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1283.881788][ T5178] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1283.893448][ T5178] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1284.299069][T23823] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1284.329107][   T10] koneplus 0003:1E7D:2D51.004C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0
[ 1284.390700][ T5178] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1284.434784][T26005] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1284.469335][T14499] usb 6-1: string descriptor 0 read error: -71
[ 1284.469347][ T5178] xpad 4-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 1284.487224][T14499] usb 6-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48
[ 1284.498375][ T5976] usb 4-1: USB disconnect, device number 53
[ 1284.498415][    C1] xpad 4-1:0.0: xpad_irq_in - usb_submit_urb failed with result -19
[ 1284.516863][   T10] koneplus 0003:1E7D:2D51.004C: couldn't init struct koneplus_device
[ 1284.619485][   T10] koneplus 0003:1E7D:2D51.004C: couldn't install mouse
[ 1284.642600][T14499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1284.681160][   T10] koneplus 0003:1E7D:2D51.004C: probe with driver koneplus failed with error -71
[ 1284.699894][T14499] r8152-cfgselector 6-1: Unknown version 0x0000
[ 1284.699910][T14499] r8152-cfgselector 6-1: rejected 8 configurations due to insufficient available bus power
[ 1284.699920][T14499] r8152-cfgselector 6-1: no configuration chosen from 8 choices
[ 1284.700883][T14499] r8152-cfgselector 6-1: USB disconnect, device number 5
[ 1284.723917][   T10] usb 2-1: USB disconnect, device number 31
[ 1285.153105][T14499] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 1285.314383][T14499] usb 6-1: Using ep0 maxpacket: 16
[ 1285.321836][T14499] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1285.334871][T14499] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1285.344158][T14499] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1285.352160][T14499] usb 6-1: Product: syz
[ 1285.357299][T14499] usb 6-1: Manufacturer: syz
[ 1285.362020][T14499] usb 6-1: SerialNumber: syz
[ 1285.369589][T14499] usb 6-1: config 0 descriptor??
[ 1285.381753][T14499] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1285.391885][T14499] em28xx 6-1:0.0: DVB interface 0 found: bulk
[ 1285.483061][T14490] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1285.635128][T14490] usb 4-1: Using ep0 maxpacket: 8
[ 1285.641741][T14490] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[ 1285.650676][T14490] usb 4-1: config 179 has no interface number 0
[ 1285.657247][T14490] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1285.668544][T14490] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1285.684388][T14490] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1285.695707][T14490] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1285.707220][T14490] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1285.720901][T14490] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1285.730025][T14490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1285.741652][T26035] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1285.986401][T14499] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1286.013514][T26035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1286.117017][T26035] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1286.196140][T14496] usb 4-1: USB disconnect, device number 54
[ 1286.196211][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1286.210685][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1286.458054][T14499] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1286.470158][T14499] em28xx 6-1:0.0: board has no eeprom
[ 1286.925327][T26059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4925'.
[ 1286.942602][T26057] kvm: kvm [26056]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076)
[ 1286.951366][T14490] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 1286.969451][T26059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4925'.
[ 1286.980381][T26062] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1287.013054][T14499] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1287.023042][T14499] em28xx 6-1:0.0: dvb set to bulk mode.
[ 1287.028648][   T10] em28xx 6-1:0.0: Binding DVB extension
[ 1287.136368][T14490] usb 3-1: Using ep0 maxpacket: 16
[ 1287.142834][T14499] usb 6-1: USB disconnect, device number 6
[ 1287.144482][T14490] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1287.160585][T14490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1287.172905][T14499] em28xx 6-1:0.0: Disconnecting em28xx
[ 1287.188629][T14490] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1287.209552][T14490] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1287.224005][   T10] em28xx 6-1:0.0: Registering input extension
[ 1287.232850][T14490] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1287.254481][T14499] em28xx 6-1:0.0: Closing input extension
[ 1287.276524][T14490] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1287.353288][T14490] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1287.361401][T14490] usb 3-1: Manufacturer: syz
[ 1287.449901][T14490] usb 3-1: config 0 descriptor??
[ 1287.481231][T14499] em28xx 6-1:0.0: Freeing device
[ 1287.792564][T26075] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4929'.
[ 1287.891868][T26075] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1287.928031][T14490] rc_core: IR keymap rc-hauppauge not found
[ 1287.934041][T14490] Registered IR keymap rc-empty
[ 1287.939446][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1287.963520][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1287.972485][T26077] macsec1: entered promiscuous mode
[ 1287.980040][T26077] bond3: entered promiscuous mode
[ 1287.991392][T26077] macsec1: entered allmulticast mode
[ 1287.994097][T14490] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1288.010145][T26077] bond3: entered allmulticast mode
[ 1288.011769][T14490] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input126
[ 1288.028318][T26077] bond3: left allmulticast mode
[ 1288.037596][T26077] bond3: left promiscuous mode
[ 1288.071014][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.113388][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.158195][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.199750][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.244704][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.313123][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.343836][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.363423][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.398014][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.433148][T14490] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1288.454521][T14490] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[ 1288.472455][T14490] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1288.514568][T14490] usb 3-1: USB disconnect, device number 15
[ 1288.704165][T26088] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4932'.
[ 1289.003140][T14499] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1289.156147][T14499] usb 4-1: Using ep0 maxpacket: 32
[ 1289.172199][T14499] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1289.181925][T14499] usb 4-1: config 0 has no interface number 0
[ 1289.190675][T14499] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1289.202341][T14499] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1289.211749][T14499] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1289.220605][T14499] usb 4-1: Product: syz
[ 1289.223548][T24852] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1289.239969][T14499] usb 4-1: Manufacturer: syz
[ 1289.243791][T26101] mac80211_hwsim hwsim51 syzkaller0: left allmulticast mode
[ 1289.326324][T26101] tipc: Resetting bearer <eth:syzkaller0>
[ 1289.332414][T26101] tipc: Resetting bearer <eth:syzkaller0>
[ 1289.341660][T26101] macsec3: left allmulticast mode
[ 1289.350136][T14499] usb 4-1: SerialNumber: syz
[ 1289.357864][T14499] usb 4-1: config 0 descriptor??
[ 1289.383033][T24852] usb 2-1: Using ep0 maxpacket: 32
[ 1289.395453][T24852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1289.411946][T24852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1289.435967][T24852] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1289.456701][T24852] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[ 1289.481085][T24852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.491175][T26111] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1289.573907][T24852] usb 2-1: config 0 descriptor??
[ 1289.626107][T26111] bond3 (unregistering): Released all slaves
[ 1289.745921][T26101] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048)
[ 1289.757292][T26119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1289.766167][T26119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1289.997778][T26097] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4937'.
[ 1290.015762][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.122551][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.135335][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.152425][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.160334][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.174030][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.183037][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.195344][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.206803][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.216163][T24852] apple 0003:05AC:024B.004D: unknown main item tag 0x0
[ 1290.233111][T24852] apple 0003:05AC:024B.004D: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.1-1/input0
[ 1290.285529][T24852] usb 2-1: USB disconnect, device number 32
[ 1290.360478][T26130] fido_id[26130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1290.779022][T26137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4945'.
[ 1290.809505][T26136] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4945'.
[ 1290.944058][T26141] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1291.902431][T14499] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[ 1291.922285][T26165] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4952'.
[ 1291.937193][T14499] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1291.963986][T14499] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1291.980601][T14499] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1292.007177][T14499] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[ 1292.021872][T14499] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1292.031829][T14499] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[ 1292.170602][T14499] usb 4-1: USB disconnect, device number 55
[ 1292.234646][T26172] fuse: Bad value for 'fd'
[ 1292.522739][T26180] vxcan3: entered promiscuous mode
[ 1292.543366][T14499] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1292.706417][T14499] usb 4-1: device descriptor read/64, error -71
[ 1292.953216][T14499] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1293.084712][T14499] usb 4-1: device descriptor read/64, error -71
[ 1293.214021][T14499] usb usb4-port1: attempt power cycle
[ 1293.553950][T14499] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1293.585456][T26210] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4970'.
[ 1293.597047][T14499] usb 4-1: device descriptor read/8, error -71
[ 1293.684012][T14496] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1293.843057][T14499] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1293.850638][T14496] usb 2-1: Using ep0 maxpacket: 8
[ 1293.862149][T14496] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89
[ 1293.880503][T14499] usb 4-1: device descriptor read/8, error -71
[ 1293.886707][T14496] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.906700][T14496] usb 2-1: config 0 descriptor??
[ 1293.923977][T14496] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22
[ 1293.940868][T14496] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5
[ 1293.954050][T24852] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[ 1293.968532][T14496] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 1293.995098][T14496] usb-storage 2-1:0.0: device ignored
[ 1294.003384][T14499] usb usb4-port1: unable to enumerate USB device
[ 1294.093901][T24852] usb 3-1: device descriptor read/64, error -71
[ 1294.124050][T14496] usb 2-1: USB disconnect, device number 33
[ 1294.333131][T24852] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[ 1294.463112][T24852] usb 3-1: device descriptor read/64, error -71
[ 1294.573555][T24852] usb usb3-port1: attempt power cycle
[ 1294.914458][T24852] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[ 1294.965034][T24852] usb 3-1: device descriptor read/8, error -71
[ 1294.988844][T26237] delete_channel: no stack
[ 1295.233106][T24852] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[ 1295.270194][T24852] usb 3-1: device descriptor read/8, error -71
[ 1295.384264][T24852] usb usb3-port1: unable to enumerate USB device
[ 1295.613116][T24852] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1295.743077][T24852] usb 4-1: device descriptor read/64, error -71
[ 1295.952694][T26249] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1295.965313][T26249] bridge1: entered promiscuous mode
[ 1295.983045][T24852] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1296.123154][T24852] usb 4-1: device descriptor read/64, error -71
[ 1296.233709][T24852] usb usb4-port1: attempt power cycle
[ 1296.430024][T26260] netlink: 360 bytes leftover after parsing attributes in process `syz.5.4984'.
[ 1296.445468][T26260] openvswitch: netlink: Message has 12 unknown bytes.
[ 1296.452465][T26260] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1296.573075][T24852] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1296.614884][T24852] usb 4-1: device descriptor read/8, error -71
[ 1296.873223][T24852] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1296.903661][T24852] usb 4-1: device descriptor read/8, error -71
[ 1297.013427][T24852] usb usb4-port1: unable to enumerate USB device
[ 1297.053055][T14499] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1297.246823][T14499] usb 2-1: config 120 has too many interfaces: 48, using maximum allowed: 32
[ 1297.347469][T14499] usb 2-1: config 120 has 0 interfaces, different from the descriptor's value: 48
[ 1297.378500][T14499] usb 2-1: config 120 has too many interfaces: 48, using maximum allowed: 32
[ 1297.387579][T26279] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4988'.
[ 1297.397230][T14499] usb 2-1: config 120 has 0 interfaces, different from the descriptor's value: 48
[ 1297.409105][T14499] usb 2-1: config 120 has too many interfaces: 48, using maximum allowed: 32
[ 1297.418974][T14499] usb 2-1: config 120 has 0 interfaces, different from the descriptor's value: 48
[ 1297.430299][T14499] usb 2-1: config 120 has too many interfaces: 48, using maximum allowed: 32
[ 1297.450803][T14499] usb 2-1: config 120 has 0 interfaces, different from the descriptor's value: 48
[ 1297.504827][T14499] usb 2-1: config 120 has too many interfaces: 48, using maximum allowed: 32
[ 1297.513973][T14499] usb 2-1: config 120 has 0 interfaces, different from the descriptor's value: 48
[ 1297.531776][T26276] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1297.539604][T26276] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1297.817680][T14499] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9
[ 1297.884349][T14499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1297.939879][T26276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1297.965081][T26276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1298.045639][T14499] usb 2-1: Product: syz
[ 1298.049833][T14499] usb 2-1: Manufacturer: syz
[ 1298.063151][T14499] usb 2-1: SerialNumber: syz
[ 1298.659738][T26276] tipc: Resetting bearer <eth:syzkaller0>
[ 1298.811643][T19146] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1298.820871][T19146] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1298.836073][T19146] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1298.855769][T19146] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1299.946829][T14499] usb 2-1: USB disconnect, device number 34
[ 1300.001967][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.008422][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.213134][    T9] usb 4-1: new full-speed USB device number 64 using dummy_hcd
[ 1300.377844][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1300.397085][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[ 1300.417042][    T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1300.426761][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1300.441478][    T9] usb 4-1: Product: syz
[ 1300.452537][    T9] usb 4-1: Manufacturer: syz
[ 1300.467434][    T9] usb 4-1: SerialNumber: syz
[ 1300.533940][T26317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4996'.
[ 1300.562536][T26317] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1300.689611][T26321] macsec2: entered promiscuous mode
[ 1300.695068][T26321] bond6: entered promiscuous mode
[ 1300.700372][T26321] macsec2: entered allmulticast mode
[ 1300.705821][T26321] bond6: entered allmulticast mode
[ 1300.738151][T26321] bond6: left allmulticast mode
[ 1300.757148][    T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1300.767962][T26321] bond6: left promiscuous mode
[ 1300.785334][    T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1300.814318][    T9] usb 4-1: 6:0: failed to get current value for ch 1 (-22)
[ 1300.838421][    T9] usb 4-1: 6:0: failed to get current value for ch 0 (-22)
[ 1300.913282][T14484] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[ 1300.976458][    T9] usb 4-1: USB disconnect, device number 64
[ 1301.095672][T14484] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1301.109026][T14484] usb 6-1: not running at top speed; connect to a high speed hub
[ 1301.119946][T14484] usb 6-1: config 17 has an invalid interface number: 8 but max is 1
[ 1301.128347][T14484] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2
[ 1301.137460][T14484] usb 6-1: config 17 has no interface number 0
[ 1301.144137][T14484] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1301.154056][T14484] usb 6-1: config 17 interface 8 has no altsetting 0
[ 1301.156751][T23822] udevd[23822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1301.162575][T14484] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff
[ 1301.198275][T14484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.222103][T26335] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5000'.
[ 1301.239706][T14484] usb 6-1: Product: syz
[ 1301.258781][T14484] usb 6-1: Manufacturer: syz
[ 1301.278980][T14484] usb 6-1: SerialNumber: syz
[ 1301.513917][T14484] usb 6-1: selecting invalid altsetting 0
[ 1301.599466][T26340] netlink: 360 bytes leftover after parsing attributes in process `syz.2.4998'.
[ 1301.661664][T26342] openvswitch: netlink: Message has 12 unknown bytes.
[ 1301.668694][T26342] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1301.742687][T26337] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5002'.
[ 1301.813180][T26338] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5002'.
[ 1301.824447][T26341] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5002'.
[ 1301.969509][T14484] usb 6-1: USB disconnect, device number 7
[ 1302.583572][T14499] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1302.744777][T14499] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1302.753634][T14499] usb 6-1: config 0 has no interface number 0
[ 1302.760131][T14499] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10
[ 1302.771581][T14499] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024
[ 1302.783702][T14499] usb 6-1: config 0 interface 8 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1302.800311][T14499] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[ 1302.816753][T14499] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1302.830875][T14499] usb 6-1: config 0 descriptor??
[ 1302.933161][    T9] usb 2-1: new full-speed USB device number 35 using dummy_hcd
[ 1303.091912][   T30] audit: type=1326 audit(1773603941.325:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26370 comm="syz.3.5009" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7822d9c799 code=0x0
[ 1303.116188][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1303.142306][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 1303.184488][    T9] usb 2-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[ 1303.219229][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.231315][    T9] usb 2-1: config 0 descriptor??
[ 1303.239903][T26372] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5009'.
[ 1303.249276][T26367] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1303.257320][T26372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5009'.
[ 1303.284168][T14499] uclogic 0003:28BD:0042.004E: interface is invalid, ignoring
[ 1303.461936][ T5903] usb 6-1: USB disconnect, device number 8
[ 1303.532782][T26367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1303.541994][T26367] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1303.588479][T26374] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1303.688815][T26377] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5011'.
[ 1303.713907][T26377] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1303.729905][T26377] macsec5: entered promiscuous mode
[ 1303.735302][T26377] bond5: entered promiscuous mode
[ 1303.741033][T26377] macsec5: entered allmulticast mode
[ 1303.746427][T26377] bond5: entered allmulticast mode
[ 1303.753723][T26377] bond5: left allmulticast mode
[ 1303.758611][T26377] bond5: left promiscuous mode
[ 1303.954428][    T9] usbhid 2-1:0.0: can't add hid device: -71
[ 1303.963513][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1303.974581][    T9] usb 2-1: USB disconnect, device number 35
[ 1304.208712][T26388] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5013'.
[ 1304.429726][T26392] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1304.569395][T26396] input: syz0 as /devices/virtual/input/input127
[ 1304.736862][T26392] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1304.904281][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1305.094795][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1305.254761][T26402] openvswitch: netlink: Message has 12 unknown bytes.
[ 1305.262531][T26402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1305.272012][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1305.293581][    T9] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1305.311203][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1305.325770][    T9] usb 3-1: config 0 descriptor??
[ 1305.374988][T14499] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1305.551210][T14499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1305.562637][T14499] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1305.587017][T14499] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1305.626568][T14499] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1305.647804][T26404] IPVS: set_ctl: invalid protocol: 115 224.0.0.2:20000
[ 1305.666234][T14499] usb 4-1: config 0 descriptor??
[ 1305.951042][    T9] usbhid 3-1:0.0: can't add hid device: -71
[ 1305.967407][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1306.003706][    T9] usb 3-1: USB disconnect, device number 20
[ 1306.081913][T14499] cm6533_jd 0003:0D8C:0022.004F: invalid report_count 1192232228
[ 1306.099981][T14499] cm6533_jd 0003:0D8C:0022.004F: item 0 4 1 9 parsing failed
[ 1306.124234][T14499] cm6533_jd 0003:0D8C:0022.004F: parse failed
[ 1306.130369][T14499] cm6533_jd 0003:0D8C:0022.004F: probe with driver cm6533_jd failed with error -22
[ 1306.271593][T26407] __nla_validate_parse: 3 callbacks suppressed
[ 1306.271610][T26407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5019'.
[ 1306.290919][    T9] usb 4-1: USB disconnect, device number 65
[ 1306.578092][T26420] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[ 1306.864637][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1306.922577][   T30] audit: type=1326 audit(1773603945.155:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26426 comm="syz.3.5026" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7822d9c799 code=0x0
[ 1307.024121][T26428] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5026'.
[ 1307.035642][    T9] usb 3-1: Using ep0 maxpacket: 32
[ 1307.042479][    T9] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[ 1307.063545][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1307.087695][    T9] usb 3-1: config 0 descriptor??
[ 1307.103317][    T9] gspca_main: sq930x-2.14.0 probing 041e:403c
[ 1307.683179][T11544] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1307.706874][    T9] gspca_sq930x: ucbus_write failed -71
[ 1307.717555][    T9] sq930x 3-1:0.0: probe with driver sq930x failed with error -71
[ 1307.731068][    T9] usb 3-1: USB disconnect, device number 21
[ 1307.875299][T26442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5030'.
[ 1308.079058][T26448] kAFS: unable to lookup cell ''
[ 1308.105508][   T30] audit: type=1326 audit(1773603946.315:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83d59c799 code=0x7ffc0000
[ 1308.133866][   T30] audit: type=1326 audit(1773603946.315:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fc83d59c799 code=0x7ffc0000
[ 1308.177700][   T30] audit: type=1326 audit(1773603946.315:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83d59c799 code=0x7ffc0000
[ 1308.376854][T26450] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5032'.
[ 1308.433084][ T5903] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1308.463316][   T30] audit: type=1326 audit(1773603946.315:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fc83d59c799 code=0x7ffc0000
[ 1308.561601][T26456] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1308.609441][   T30] audit: type=1326 audit(1773603946.325:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc83d59c799 code=0x7ffc0000
[ 1308.729461][ T5903] usb 2-1: Using ep0 maxpacket: 32
[ 1308.923192][ T5903] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1308.937937][   T30] audit: type=1326 audit(1773603946.325:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc83d55cfce code=0x7ffc0000
[ 1308.942559][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1309.083911][   T30] audit: type=1326 audit(1773603946.325:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc83d59c42b code=0x7ffc0000
[ 1309.162774][   T30] audit: type=1326 audit(1773603946.325:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc83d59c42b code=0x7ffc0000
[ 1309.223077][   T30] audit: type=1326 audit(1773603946.325:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc83d59c42b code=0x7ffc0000
[ 1309.287606][   T30] audit: type=1326 audit(1773603946.325:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26443 comm="syz.1.5031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc83d59c42b code=0x7ffc0000
[ 1309.324409][ T5903] usb 2-1: config 0 descriptor??
[ 1309.564661][ T5903] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 1309.651943][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1309.662436][ T5903] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 1309.678529][ T5903] usb 2-1: media controller created
[ 1309.719403][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1310.036580][ T5903] DVB: Unable to find symbol dib7000p_attach()
[ 1310.056464][ T5903] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 1310.343067][T14484] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1310.350724][ T5903] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1310.369930][ T5903] Registered IR keymap rc-empty
[ 1310.390535][ T5903] dvb-usb: could not initialize remote control.
[ 1310.427268][ T5903] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 1310.525468][T14484] usb 4-1: Using ep0 maxpacket: 16
[ 1310.550793][T14484] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1310.574887][T14484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1310.651730][T14484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1310.672896][T14484] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1310.693033][T14484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1310.704447][T14484] usb 4-1: Product: syz
[ 1310.712062][T14484] usb 4-1: Manufacturer: syz
[ 1310.721863][T14484] usb 4-1: SerialNumber: syz
[ 1310.792398][T26487] netlink: 'syz.2.5040': attribute type 11 has an invalid length.
[ 1310.972596][T14484] usb-storage 4-1:1.2: USB Mass Storage device detected
[ 1310.986196][T26492] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5042'.
[ 1311.011568][T14484] usb 4-1: USB disconnect, device number 66
[ 1311.143390][    T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 1311.294602][    T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1311.303489][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1311.314210][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1311.323887][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1311.336503][    T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1311.345712][    T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1311.353824][    T9] usb 3-1: Product: syz
[ 1311.357989][    T9] usb 3-1: Manufacturer: syz
[ 1311.368703][    T9] cdc_wdm 3-1:1.0: skipping garbage
[ 1311.374051][    T9] cdc_wdm 3-1:1.0: skipping garbage
[ 1311.380839][    T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[ 1311.387503][    T9] cdc_wdm 3-1:1.0: Unknown control protocol
[ 1311.779808][T26499] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5044'.
[ 1311.862429][T26489] tipc: Resetting bearer <eth:syzkaller0>
[ 1311.943724][T26508] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5046'.
[ 1312.064761][T26282] usb 3-1: USB disconnect, device number 22
[ 1312.103312][ T5903] usb 2-1: USB disconnect, device number 36
[ 1312.204828][ T5903] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 1312.563174][ T5903] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1312.563353][T26282] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 1312.673168][    T9] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[ 1312.723059][ T5903] usb 6-1: Using ep0 maxpacket: 16
[ 1312.729348][ T5903] usb 6-1: config 0 has no interfaces?
[ 1312.735906][ T5903] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1312.743267][T26282] usb 3-1: Using ep0 maxpacket: 16
[ 1312.753047][ T5903] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1312.761213][ T5903] usb 6-1: SerialNumber: syz
[ 1312.768347][T26282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1312.780736][ T5903] usb 6-1: config 0 descriptor??
[ 1312.781875][T26282] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1312.796678][T26282] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 1312.809969][T26282] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[ 1312.819064][T26282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1312.829092][T26282] usb 3-1: config 0 descriptor??
[ 1312.854764][    T9] usb 4-1: config index 0 descriptor too short (expected 39, got 27)
[ 1312.862953][    T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1312.872874][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1312.881888][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1312.891023][    T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1312.899367][    T9] usb 4-1: Product: syz
[ 1312.904610][    T9] usb 4-1: Manufacturer: syz
[ 1312.909226][    T9] usb 4-1: SerialNumber: syz
[ 1312.916709][    T9] usb 4-1: config 0 descriptor??
[ 1312.926350][    T9] hub 4-1:0.0: bad descriptor, ignoring hub
[ 1312.932254][    T9] hub 4-1:0.0: probe with driver hub failed with error -5
[ 1312.941777][    T9] usb 4-1: selecting invalid altsetting 0
[ 1313.083810][    T9] usb 6-1: USB disconnect, device number 9
[ 1313.129791][T26521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1313.141160][T26521] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1313.194492][T26535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5055'.
[ 1313.204024][T26535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5055'.
[ 1313.257021][T26282] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0050/input/input129
[ 1313.263330][ T5903] usb 4-1: USB disconnect, device number 67
[ 1313.347017][T26282] appleir 0003:05AC:8241.0050: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[ 1313.456692][T26282] usb 3-1: USB disconnect, device number 23
[ 1313.652239][T26547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5059'.
[ 1313.678814][T26547] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5059'.
[ 1313.690520][T26547] netlink: 'syz.5.5059': attribute type 11 has an invalid length.
[ 1313.698787][T26547] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5059'.
[ 1313.793583][T26545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5058'.
[ 1314.068724][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 1314.068742][   T30] audit: type=1326 audit(1773603952.305:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.136908][   T30] audit: type=1326 audit(1773603952.345:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.393578][   T30] audit: type=1326 audit(1773603952.345:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.420053][   T30] audit: type=1326 audit(1773603952.345:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.472713][   T30] audit: type=1326 audit(1773603952.345:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.523980][   T30] audit: type=1326 audit(1773603952.345:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.568743][   T30] audit: type=1326 audit(1773603952.345:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.606779][T26574] Invalid argument reading file caps for ./file0
[ 1314.614807][   T30] audit: type=1326 audit(1773603952.355:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.617988][T26576] Invalid argument reading file caps for ./file0
[ 1314.663219][   T30] audit: type=1326 audit(1773603952.355:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.686388][   T30] audit: type=1326 audit(1773603952.355:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26565 comm="syz.2.5065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5c1c79c799 code=0x7ffc0000
[ 1314.746330][    T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1314.890256][T26585] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5069'.
[ 1314.903687][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1314.910838][    T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[ 1314.919008][    T9] usb 4-1: config 0 has no interface number 0
[ 1314.928250][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1314.938095][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.955284][    T9] usb 4-1: Product: syz
[ 1314.959525][    T9] usb 4-1: Manufacturer: syz
[ 1314.964710][    T9] usb 4-1: SerialNumber: syz
[ 1314.973577][    T9] usb 4-1: config 0 descriptor??
[ 1315.133133][T26282] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 1315.203042][ T5903] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[ 1315.283229][T26282] usb 3-1: Using ep0 maxpacket: 32
[ 1315.290321][T26282] usb 3-1: config 0 has an invalid interface number: 14 but max is 0
[ 1315.298662][T26282] usb 3-1: config 0 has no interface number 0
[ 1315.304912][T26282] usb 3-1: config 0 interface 14 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 20
[ 1315.319031][T26282] usb 3-1: config 0 interface 14 has no altsetting 0
[ 1315.327990][T26282] usb 3-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10
[ 1315.337415][T26282] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1315.345456][T26282] usb 3-1: Product: syz
[ 1315.349639][T26282] usb 3-1: Manufacturer: syz
[ 1315.354427][T26282] usb 3-1: SerialNumber: syz
[ 1315.361648][T26282] usb 3-1: config 0 descriptor??
[ 1315.373931][ T5903] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be
[ 1315.383272][ T5903] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3
[ 1315.391472][ T5903] usb 2-1: Product: syz
[ 1315.392185][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1315.401152][ T5903] usb 2-1: Manufacturer: syz
[ 1315.407469][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1315.411937][ T5903] usb 2-1: SerialNumber: syz
[ 1315.428139][ T5903] usb 2-1: config 0 descriptor??
[ 1315.573415][T26282] usb-storage 3-1:0.14: USB Mass Storage device detected
[ 1315.585224][T26282] usb-storage 3-1:0.14: Quirks match for vid 04b3 pid 4001: 2000
[ 1315.627207][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 1315.643423][    T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[ 1315.710368][ T5903] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-32
[ 1315.728883][ T5903] peak_usb 2-1:0.0: unable to read PCAN-Chip USB firmware info (err -32)
[ 1315.773931][T26282] usb 3-1: USB disconnect, device number 24
[ 1315.793689][ T5903] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -32
[ 1315.897003][T26596] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5074'.
[ 1316.209243][T26282] usb 2-1: USB disconnect, device number 37
[ 1317.175054][T26631] binder: 26630:26631 ioctl 4018620d 0 returned -22
[ 1317.487965][T26282] usb 4-1: USB disconnect, device number 68
[ 1317.623239][ T5903] usb 3-1: new low-speed USB device number 25 using dummy_hcd
[ 1317.726630][T26644] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5087'.
[ 1317.737237][T26644] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5087'.
[ 1317.797953][ T5903] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1317.815800][ T5903] usb 3-1: config 0 has no interface number 0
[ 1317.840704][ T5903] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1317.885368][ T5903] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1317.920175][ T5903] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1317.947037][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1317.978199][ T5903] usb 3-1: config 0 descriptor??
[ 1317.993533][T26639] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1318.011615][ T5903] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1318.153356][T26282] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1318.305165][T26282] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1318.621248][T26282] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 135, changing to 7
[ 1318.683981][T26282] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40
[ 1318.695645][T26282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1318.710387][T26282] usb 6-1: Manufacturer: Џ
[ 1319.389254][T26659] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1319.559318][T26646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1319.576528][T26646] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1319.659379][T26282] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1319.676609][T26282] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1319.871597][T26282] usb 6-1: USB disconnect, device number 10
[ 1319.934591][T23822] udevd[23822]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1320.024614][T26677] netlink: 'syz.6.5095': attribute type 3 has an invalid length.
[ 1320.037027][T26677] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5095'.
[ 1320.041304][T26674] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5094'.
[ 1320.428490][T26282] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1320.440131][    T9] usb 2-1: new low-speed USB device number 38 using dummy_hcd
[ 1320.484229][T14499] usb 3-1: USB disconnect, device number 25
[ 1320.615148][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1320.625965][T26282] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30
[ 1320.639288][    T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1320.648818][T26282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1320.660803][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1320.668734][T26282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1320.738654][T26282] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34
[ 1320.759678][    T9] usb 2-1: string descriptor 0 read error: -22
[ 1320.766364][    T9] usb 2-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40
[ 1320.780341][    T9] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[ 1320.790451][T26282] usb 6-1: New USB device found, idVendor=056a, idProduct=0131, bcdDevice= 0.00
[ 1320.814501][T26282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1320.828341][    T9] usb 2-1: 0:2 : does not exist
[ 1320.858564][T26282] usb 6-1: config 0 descriptor??
[ 1320.971333][    T9] usb-storage 2-1:1.1: USB Mass Storage device detected
[ 1321.004124][T26690] netlink: 'syz.2.5099': attribute type 2 has an invalid length.
[ 1321.056005][T26690] !: entered promiscuous mode
[ 1321.258464][    T9] usb 2-1: us122l: couldn't allocate write buffer
[ 1321.266748][    T9] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22
[ 1321.279386][T26670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1321.283332][T14499] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1321.299126][T26670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1321.300847][    T9] usb 2-1: USB disconnect, device number 38
[ 1321.325258][T26282] wacom 0003:056A:0131.0051: Unknown device_type for 'HID 056a:0131'. Ignoring.
[ 1321.443043][T14499] usb 4-1: device descriptor read/64, error -71
[ 1321.522093][T14490] usb 6-1: USB disconnect, device number 11
[ 1321.693135][T14499] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1321.823148][T14499] usb 4-1: device descriptor read/64, error -71
[ 1321.867143][    T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 1321.943160][T14499] usb usb4-port1: attempt power cycle
[ 1322.003435][    T9] usb 3-1: device descriptor read/64, error -71
[ 1322.274182][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 1322.293515][T14499] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1322.338790][T14499] usb 4-1: device descriptor read/8, error -71
[ 1322.413518][    T9] usb 3-1: device descriptor read/64, error -71
[ 1322.533394][    T9] usb usb3-port1: attempt power cycle
[ 1322.583058][T14499] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[ 1322.614289][T14499] usb 4-1: device descriptor read/8, error -71
[ 1322.733445][T14499] usb usb4-port1: unable to enumerate USB device
[ 1322.839351][T26715] tap0: tun_chr_ioctl cmd 1074025677
[ 1322.844866][T26715] tap0: linktype set to 780
[ 1322.883253][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 1322.904169][    T9] usb 3-1: device descriptor read/8, error -71
[ 1323.183181][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 1323.246715][    T9] usb 3-1: device descriptor read/8, error -71
[ 1323.363321][    T9] usb usb3-port1: unable to enumerate USB device
[ 1323.420879][T26729] misc userio: No port type given on /dev/userio
[ 1323.436374][T26730] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1324.193051][T14499] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1324.545560][T14499] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 1324.554392][T14499] usb 2-1: config 1 has an invalid interface number: 5 but max is 2
[ 1324.568521][T14499] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1324.588741][T14499] usb 2-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[ 1324.608936][T14499] usb 2-1: config 1 has no interface number 3
[ 1324.627136][T14499] usb 2-1: config 1 interface 5 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[ 1324.679179][T14499] usb 2-1: config 1 interface 5 has no altsetting 0
[ 1324.691834][T14499] usb 2-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40
[ 1324.703147][    T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1324.717832][T26743] snd_dummy snd_dummy.0: control 3:5:3:syz1:9 is already present
[ 1324.726829][T14499] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.737401][T14499] usb 2-1: Product: syz
[ 1324.747847][T14499] usb 2-1: Manufacturer: syz
[ 1324.753072][T14499] usb 2-1: SerialNumber: syz
[ 1324.802067][T26746] batadv_slave_0: entered promiscuous mode
[ 1324.831420][T26746] batadv_slave_0: entered allmulticast mode
[ 1324.853155][    T9] usb 4-1: Using ep0 maxpacket: 16
[ 1324.862340][    T9] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[ 1324.881875][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.929662][    T9] usb 4-1: Product: syz
[ 1324.947072][    T9] usb 4-1: Manufacturer: syz
[ 1324.961810][    T9] usb 4-1: SerialNumber: syz
[ 1325.193367][    T9] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[ 1325.250059][    T9] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1325.287062][    T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[ 1325.499318][    T9] usb 4-1: media controller created
[ 1325.529212][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1325.565874][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1325.637652][T26771] FAULT_INJECTION: forcing a failure.
[ 1325.637652][T26771] name failslab, interval 1, probability 0, space 0, times 0
[ 1325.662046][T26771] CPU: 1 UID: 0 PID: 26771 Comm: syz.6.5122 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1325.662073][T26771] Tainted: [L]=SOFTLOCKUP
[ 1325.662079][T26771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1325.662089][T26771] Call Trace:
[ 1325.662097][T26771]  <TASK>
[ 1325.662104][T26771]  dump_stack_lvl+0xe8/0x150
[ 1325.662132][T26771]  should_fail_ex+0x412/0x560
[ 1325.662159][T26771]  should_failslab+0xa8/0x100
[ 1325.662182][T26771]  __kmalloc_node_noprof+0xf0/0x7c0
[ 1325.662201][T26771]  ? crypto_create_tfm_node+0x83/0x3f0
[ 1325.662333][T26771]  crypto_create_tfm_node+0x83/0x3f0
[ 1325.662365][T26771]  crypto_alloc_tfm_node+0x172/0x3f0
[ 1325.662386][T26771]  ? __keyctl_dh_compute+0x3df/0xd10
[ 1325.662407][T26771]  __keyctl_dh_compute+0x536/0xd10
[ 1325.662423][T26771]  ? aa_file_perm+0x192/0x15e0
[ 1325.662453][T26771]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1325.662495][T26771]  ? get_pid_task+0x20/0x1f0
[ 1325.662510][T26771]  ? get_pid_task+0x20/0x1f0
[ 1325.662527][T26771]  keyctl_dh_compute+0x124/0x180
[ 1325.662546][T26771]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1325.662575][T26771]  __se_sys_keyctl+0x44c/0x9e0
[ 1325.662597][T26771]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1325.662619][T26771]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1325.662643][T26771]  ? __fget_files+0x3a0/0x420
[ 1325.662670][T26771]  ? fput+0xa0/0xd0
[ 1325.662691][T26771]  ? ksys_write+0x242/0x270
[ 1325.662712][T26771]  ? __pfx_ksys_write+0x10/0x10
[ 1325.662735][T26771]  ? __x64_sys_keyctl+0x20/0xc0
[ 1325.662756][T26771]  do_syscall_64+0x14d/0xf80
[ 1325.662772][T26771]  ? trace_irq_disable+0x3b/0x150
[ 1325.662794][T26771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1325.662810][T26771]  ? clear_bhb_loop+0x40/0x90
[ 1325.662829][T26771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1325.662844][T26771] RIP: 0033:0x7f9c3419c799
[ 1325.662861][T26771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1325.662875][T26771] RSP: 002b:00007f9c35131028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1325.662893][T26771] RAX: ffffffffffffffda RBX: 00007f9c34415fa0 RCX: 00007f9c3419c799
[ 1325.662905][T26771] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017
[ 1325.662915][T26771] RBP: 00007f9c35131090 R08: 0000000000000000 R09: 0000000000000000
[ 1325.662926][T26771] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001
[ 1325.662937][T26771] R13: 00007f9c34416038 R14: 00007f9c34415fa0 R15: 00007f9c3453fa48
[ 1325.662962][T26771]  </TASK>
[ 1325.932481][    T9] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[ 1325.944689][    T9] usb 4-1: USB disconnect, device number 73
[ 1326.029895][T26752] netlink: 'syz.2.5116': attribute type 8 has an invalid length.
[ 1326.056038][T26752] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5116'.
[ 1326.104784][T14499] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[ 1326.236371][T14499] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1326.347643][T14499] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1326.389283][T14499] usb 2-1: USB disconnect, device number 39
[ 1326.416882][T23822] udevd[23822]: setting mode of /dev/bus/usb/002/039 to 020664 failed: No such file or directory
[ 1326.462469][T23822] udevd[23822]: setting owner of /dev/bus/usb/002/039 to uid=0, gid=0 failed: No such file or directory
[ 1326.599546][T23822] udevd[23822]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1326.743076][T14499] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1326.948325][T14499] usb 6-1: device descriptor read/64, error -71
[ 1327.113870][T26797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5129'.
[ 1327.124959][T26797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1327.136293][T26797] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1327.203143][T14499] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1327.243595][T26287] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1327.343060][T14499] usb 6-1: device descriptor read/64, error -71
[ 1327.373287][    T9] usb 4-1: new full-speed USB device number 74 using dummy_hcd
[ 1327.395617][T26287] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1327.409534][T26287] usb 2-1: config 1 has an invalid descriptor of length 91, skipping remainder of the config
[ 1327.420200][T26287] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1327.429416][T26287] usb 2-1: config 1 has no interface number 1
[ 1327.435797][T26287] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1327.452366][T26287] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1327.462298][T14499] usb usb6-port1: attempt power cycle
[ 1327.481940][T26287] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1327.490309][T26287] usb 2-1: Product: syz
[ 1327.497887][T26287] usb 2-1: Manufacturer: syz
[ 1327.508001][T26287] usb 2-1: SerialNumber: syz
[ 1327.527693][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1327.541918][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1327.553379][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1327.564958][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1327.578130][    T9] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[ 1327.587387][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.599400][    T9] usb 4-1: config 0 descriptor??
[ 1327.699626][T26800] binder: 26799:26800 ioctl c0305616 200000000480 returned -22
[ 1327.742650][T26287] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[ 1327.763474][T26287] usb 2-1: MIDIStreaming interface descriptor not found
[ 1327.804113][T14499] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1327.819512][    T9] usbhid 4-1:0.0: can't add hid device: -71
[ 1327.834513][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1327.849238][    T9] usb 4-1: USB disconnect, device number 74
[ 1327.859714][T14499] usb 6-1: device descriptor read/8, error -71
[ 1327.866211][T26287] usb 2-1: USB disconnect, device number 40
[ 1328.066016][ T5903] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 1328.123083][T14499] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1328.143543][T14499] usb 6-1: device descriptor read/8, error -71
[ 1328.224186][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1328.234626][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1328.244340][ T5903] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1328.253693][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1328.261788][ T5903] usb 3-1: SerialNumber: syz
[ 1328.266806][T14499] usb usb6-port1: unable to enumerate USB device
[ 1328.355475][    T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1328.480025][ T5903] usb 3-1: 0:2 : does not exist
[ 1328.509707][ T5903] usb 3-1: USB disconnect, device number 30
[ 1328.523969][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1328.536226][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1328.547340][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1328.559660][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1328.570139][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1328.574340][T14490] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[ 1328.586704][    T9] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[ 1328.599757][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1328.609697][    T9] usb 4-1: config 0 descriptor??
[ 1328.744365][T14490] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1328.756465][T14490] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11
[ 1328.765792][T14490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1328.773859][T14490] usb 2-1: Product: syz
[ 1328.778031][T14490] usb 2-1: Manufacturer: syz
[ 1328.782615][T14490] usb 2-1: SerialNumber: syz
[ 1328.789889][T14490] usb 2-1: config 0 descriptor??
[ 1328.798635][T14490] usb 2-1: no audio or video endpoints found
[ 1329.039352][T26813] FAULT_INJECTION: forcing a failure.
[ 1329.039352][T26813] name failslab, interval 1, probability 0, space 0, times 0
[ 1329.054376][T26813] CPU: 1 UID: 0 PID: 26813 Comm: syz.2.5134 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1329.054401][T26813] Tainted: [L]=SOFTLOCKUP
[ 1329.054407][T26813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1329.054416][T26813] Call Trace:
[ 1329.054425][T26813]  <TASK>
[ 1329.054431][T26813]  dump_stack_lvl+0xe8/0x150
[ 1329.054457][T26813]  should_fail_ex+0x412/0x560
[ 1329.054484][T26813]  should_failslab+0xa8/0x100
[ 1329.054506][T26813]  __kmalloc_cache_noprof+0x88/0x660
[ 1329.054525][T26813]  ? mpi_alloc+0x52/0x140
[ 1329.054627][T26813]  mpi_alloc+0x52/0x140
[ 1329.054652][T26813]  mpi_read_raw_data+0x139/0x970
[ 1329.054680][T26813]  dh_set_secret+0x193/0x320
[ 1329.054722][T26813]  ? crypto_create_tfm_node+0x83/0x3f0
[ 1329.054739][T26813]  ? __kmalloc_node_noprof+0x34f/0x7c0
[ 1329.054760][T26813]  ? __pfx_dh_set_secret+0x10/0x10
[ 1329.054779][T26813]  ? crypto_alloc_tfm_node+0x3c0/0x3f0
[ 1329.054800][T26813]  ? __keyctl_dh_compute+0x3df/0xd10
[ 1329.054820][T26813]  __keyctl_dh_compute+0x5ae/0xd10
[ 1329.054835][T26813]  ? aa_file_perm+0x192/0x15e0
[ 1329.054865][T26813]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1329.054906][T26813]  ? get_pid_task+0x20/0x1f0
[ 1329.054921][T26813]  ? get_pid_task+0x20/0x1f0
[ 1329.054938][T26813]  keyctl_dh_compute+0x124/0x180
[ 1329.054956][T26813]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1329.054985][T26813]  __se_sys_keyctl+0x44c/0x9e0
[ 1329.055007][T26813]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1329.055028][T26813]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1329.055050][T26813]  ? __fget_files+0x3a0/0x420
[ 1329.055077][T26813]  ? fput+0xa0/0xd0
[ 1329.055098][T26813]  ? ksys_write+0x242/0x270
[ 1329.055117][T26813]  ? __pfx_ksys_write+0x10/0x10
[ 1329.055138][T26813]  ? __x64_sys_keyctl+0x20/0xc0
[ 1329.055159][T26813]  do_syscall_64+0x14d/0xf80
[ 1329.055175][T26813]  ? trace_irq_disable+0x3b/0x150
[ 1329.055196][T26813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1329.055212][T26813]  ? clear_bhb_loop+0x40/0x90
[ 1329.055231][T26813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1329.055247][T26813] RIP: 0033:0x7f5c1c79c799
[ 1329.055263][T26813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1329.055276][T26813] RSP: 002b:00007f5c1a9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1329.055294][T26813] RAX: ffffffffffffffda RBX: 00007f5c1ca15fa0 RCX: 00007f5c1c79c799
[ 1329.055306][T26813] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017
[ 1329.055317][T26813] RBP: 00007f5c1a9f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1329.055327][T26813] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001
[ 1329.055338][T26813] R13: 00007f5c1ca16038 R14: 00007f5c1ca15fa0 R15: 00007f5c1cb3fa48
[ 1329.055364][T26813]  </TASK>
[ 1329.353041][    T9] usbhid 4-1:0.0: can't add hid device: -71
[ 1329.385042][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1329.439925][    T9] usb 4-1: USB disconnect, device number 75
[ 1329.452255][T14490] usb 2-1: USB disconnect, device number 41
[ 1329.747600][T26819] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[ 1329.819294][T26834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5139'.
[ 1329.980978][T26840] syzkaller0: entered promiscuous mode
[ 1329.988217][T26840] syzkaller0: entered allmulticast mode
[ 1330.030113][T14490] usb 6-1: new full-speed USB device number 16 using dummy_hcd
[ 1330.183040][T14484] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1330.197641][T14490] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[ 1330.206966][T14490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1330.223191][T14490] usb 6-1: config 0 descriptor??
[ 1330.232131][T14490] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[ 1330.349404][T14484] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1330.372398][T26852] netlink: 360 bytes leftover after parsing attributes in process `syz.6.5142'.
[ 1330.380944][T14484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1330.403067][T14484] usb 4-1: Product: syz
[ 1330.413117][T14484] usb 4-1: Manufacturer: syz
[ 1330.425539][T14484] usb 4-1: SerialNumber: syz
[ 1330.437576][T26852] openvswitch: netlink: Message has 12 unknown bytes.
[ 1330.444697][T26852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1330.461053][T14490] gp8psk: usb in 128 operation failed.
[ 1330.481991][T14484] usb 4-1: config 0 descriptor??
[ 1330.509496][T14484] gspca_main: sunplus-2.14.0 probing 04fc:504a
[ 1330.699209][T14490] gp8psk: FW Version = 68.248.173 (0x44f8ad)  Build 2048/49/50
[ 1330.926021][T14490] gp8psk: usb in 149 operation failed.
[ 1330.931546][T14490] gp8psk: failed to get FPGA version
[ 1330.970243][T14490] gp8psk: usb in 138 operation failed.
[ 1330.980152][T14490] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 1331.003087][T14490] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[ 1331.028286][T14490] usb 6-1: USB disconnect, device number 16
[ 1331.137328][T26856] FAULT_INJECTION: forcing a failure.
[ 1331.137328][T26856] name failslab, interval 1, probability 0, space 0, times 0
[ 1331.193221][T26856] CPU: 0 UID: 0 PID: 26856 Comm: syz.2.5146 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1331.193248][T26856] Tainted: [L]=SOFTLOCKUP
[ 1331.193255][T26856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1331.193264][T26856] Call Trace:
[ 1331.193271][T26856]  <TASK>
[ 1331.193279][T26856]  dump_stack_lvl+0xe8/0x150
[ 1331.193306][T26856]  should_fail_ex+0x412/0x560
[ 1331.193340][T26856]  should_failslab+0xa8/0x100
[ 1331.193362][T26856]  __kmalloc_noprof+0xe8/0x760
[ 1331.193379][T26856]  ? mpi_alloc+0x77/0x140
[ 1331.193400][T26856]  ? __kmalloc_cache_noprof+0x15b/0x660
[ 1331.193421][T26856]  mpi_alloc+0x77/0x140
[ 1331.193444][T26856]  mpi_read_raw_data+0x139/0x970
[ 1331.193472][T26856]  dh_set_secret+0x193/0x320
[ 1331.193487][T26856]  ? crypto_create_tfm_node+0x83/0x3f0
[ 1331.193507][T26856]  ? __kmalloc_node_noprof+0x34f/0x7c0
[ 1331.193527][T26856]  ? __pfx_dh_set_secret+0x10/0x10
[ 1331.193542][T26856]  ? crypto_alloc_tfm_node+0x3c0/0x3f0
[ 1331.193554][T26856]  ? __keyctl_dh_compute+0x3df/0xd10
[ 1331.193566][T26856]  __keyctl_dh_compute+0x5ae/0xd10
[ 1331.193575][T26856]  ? aa_file_perm+0x192/0x15e0
[ 1331.193600][T26856]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1331.193641][T26856]  ? get_pid_task+0x20/0x1f0
[ 1331.193657][T26856]  ? get_pid_task+0x20/0x1f0
[ 1331.193674][T26856]  keyctl_dh_compute+0x124/0x180
[ 1331.193689][T26856]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1331.193706][T26856]  __se_sys_keyctl+0x44c/0x9e0
[ 1331.193719][T26856]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1331.193732][T26856]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1331.193750][T26856]  ? __fget_files+0x3a0/0x420
[ 1331.193778][T26856]  ? fput+0xa0/0xd0
[ 1331.193800][T26856]  ? ksys_write+0x242/0x270
[ 1331.193819][T26856]  ? __pfx_ksys_write+0x10/0x10
[ 1331.193840][T26856]  ? __x64_sys_keyctl+0x20/0xc0
[ 1331.193852][T26856]  do_syscall_64+0x14d/0xf80
[ 1331.193862][T26856]  ? trace_irq_disable+0x3b/0x150
[ 1331.193876][T26856]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1331.193886][T26856]  ? clear_bhb_loop+0x40/0x90
[ 1331.193900][T26856]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1331.193916][T26856] RIP: 0033:0x7f5c1c79c799
[ 1331.193933][T26856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1331.193947][T26856] RSP: 002b:00007f5c1a9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1331.193964][T26856] RAX: ffffffffffffffda RBX: 00007f5c1ca15fa0 RCX: 00007f5c1c79c799
[ 1331.193976][T26856] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017
[ 1331.193985][T26856] RBP: 00007f5c1a9f6090 R08: 0000000000000000 R09: 0000000000000000
[ 1331.193991][T26856] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001
[ 1331.193997][T26856] R13: 00007f5c1ca16038 R14: 00007f5c1ca15fa0 R15: 00007f5c1cb3fa48
[ 1331.194011][T26856]  </TASK>
[ 1331.327321][T14484] gspca_sunplus: reg_w_riv err -71
[ 1331.605681][T14484] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[ 1331.643778][T14484] usb 4-1: USB disconnect, device number 76
[ 1332.493063][T26284] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[ 1332.653526][T26284] usb 6-1: Using ep0 maxpacket: 32
[ 1332.659548][T26284] usb 6-1: too many configurations: 106, using maximum allowed: 8
[ 1332.669918][T26284] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1332.677954][T26284] usb 6-1: can't read configurations, error -61
[ 1332.823924][T26284] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 1332.853084][T14484] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1332.973102][T26284] usb 6-1: Using ep0 maxpacket: 32
[ 1332.978706][T26284] usb 6-1: too many configurations: 106, using maximum allowed: 8
[ 1332.988099][T26284] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1332.996120][T26284] usb 6-1: can't read configurations, error -61
[ 1333.002604][T26284] usb usb6-port1: attempt power cycle
[ 1333.008128][T14484] usb 2-1: Using ep0 maxpacket: 32
[ 1333.015286][T14484] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[ 1333.023416][T14484] usb 2-1: config 0 has no interface number 0
[ 1333.029552][T14484] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1333.040545][T14484] usb 2-1: config 0 interface 85 has no altsetting 0
[ 1333.050820][T14484] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1333.060005][T14484] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1333.068072][T14484] usb 2-1: Product: syz
[ 1333.072367][T14484] usb 2-1: Manufacturer: syz
[ 1333.077034][T14484] usb 2-1: SerialNumber: syz
[ 1333.084015][T14484] usb 2-1: config 0 descriptor??
[ 1333.153221][    T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[ 1333.193379][T26287] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1333.303125][    T9] usb 4-1: Using ep0 maxpacket: 32
[ 1333.310046][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[ 1333.322669][    T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[ 1333.332157][    T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[ 1333.341514][    T9] usb 4-1: Product: syz
[ 1333.345903][    T9] usb 4-1: Manufacturer: syz
[ 1333.350500][    T9] usb 4-1: SerialNumber: syz
[ 1333.355195][T26287] usb 3-1: Using ep0 maxpacket: 16
[ 1333.363550][    T9] usb 4-1: config 0 descriptor??
[ 1333.366099][T26284] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 1333.369301][T26898] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[ 1333.383433][T26287] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1333.391442][T26287] usb 3-1: config 0 has no interface number 0
[ 1333.404459][T26284] usb 6-1: Using ep0 maxpacket: 32
[ 1333.410694][T26284] usb 6-1: too many configurations: 106, using maximum allowed: 8
[ 1333.414081][T26287] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1333.420995][T26284] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1333.436301][T26284] usb 6-1: can't read configurations, error -61
[ 1333.441632][T26287] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1333.452659][T26287] usb 3-1: Product: syz
[ 1333.457847][T26287] usb 3-1: Manufacturer: syz
[ 1333.462446][T26287] usb 3-1: SerialNumber: syz
[ 1333.469432][T26287] usb 3-1: config 0 descriptor??
[ 1333.478490][T26287] gspca_main: spca1528-2.14.0 probing 04fc:1528
[ 1333.563126][T26284] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 1333.583895][T26284] usb 6-1: Using ep0 maxpacket: 32
[ 1333.589480][T26284] usb 6-1: too many configurations: 106, using maximum allowed: 8
[ 1333.603311][T26284] usb 6-1: unable to read config index 0 descriptor/start: -61
[ 1333.611062][T26284] usb 6-1: can't read configurations, error -61
[ 1333.617904][T26284] usb usb6-port1: unable to enumerate USB device
[ 1333.680734][    T9] usb 4-1: USB disconnect, device number 77
[ 1333.701103][T14484] appletouch 2-1:0.85: Geyser mode initialized.
[ 1333.710005][T14484] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input135
[ 1334.201028][T26905] openvswitch: netlink: IP tunnel dst address not specified
[ 1334.210674][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5158'.
[ 1334.222278][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5158'.
[ 1334.231786][T26905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5158'.
[ 1334.246157][T26905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5158'.
[ 1334.358221][T26907] FAULT_INJECTION: forcing a failure.
[ 1334.358221][T26907] name failslab, interval 1, probability 0, space 0, times 0
[ 1334.373353][T26907] CPU: 0 UID: 0 PID: 26907 Comm: syz.3.5159 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1334.373371][T26907] Tainted: [L]=SOFTLOCKUP
[ 1334.373375][T26907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1334.373381][T26907] Call Trace:
[ 1334.373385][T26907]  <TASK>
[ 1334.373390][T26907]  dump_stack_lvl+0xe8/0x150
[ 1334.373411][T26907]  should_fail_ex+0x412/0x560
[ 1334.373428][T26907]  should_failslab+0xa8/0x100
[ 1334.373441][T26907]  __kmalloc_cache_noprof+0x88/0x660
[ 1334.373454][T26907]  ? mpi_alloc+0x52/0x140
[ 1334.373470][T26907]  mpi_alloc+0x52/0x140
[ 1334.373485][T26907]  mpi_read_raw_data+0x139/0x970
[ 1334.373502][T26907]  dh_set_secret+0x1cd/0x320
[ 1334.373512][T26907]  ? crypto_create_tfm_node+0x83/0x3f0
[ 1334.373524][T26907]  ? __kmalloc_node_noprof+0x34f/0x7c0
[ 1334.373536][T26907]  ? __pfx_dh_set_secret+0x10/0x10
[ 1334.373547][T26907]  ? crypto_alloc_tfm_node+0x3c0/0x3f0
[ 1334.373560][T26907]  ? __keyctl_dh_compute+0x3df/0xd10
[ 1334.373578][T26907]  __keyctl_dh_compute+0x5ae/0xd10
[ 1334.373587][T26907]  ? aa_file_perm+0x192/0x15e0
[ 1334.373606][T26907]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1334.373628][T26907]  ? get_pid_task+0x20/0x1f0
[ 1334.373638][T26907]  ? get_pid_task+0x20/0x1f0
[ 1334.373647][T26907]  keyctl_dh_compute+0x124/0x180
[ 1334.373658][T26907]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1334.373674][T26907]  __se_sys_keyctl+0x44c/0x9e0
[ 1334.373687][T26907]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1334.373701][T26907]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1334.373715][T26907]  ? __fget_files+0x3a0/0x420
[ 1334.373732][T26907]  ? fput+0xa0/0xd0
[ 1334.373746][T26907]  ? ksys_write+0x242/0x270
[ 1334.373757][T26907]  ? __pfx_ksys_write+0x10/0x10
[ 1334.373770][T26907]  ? __x64_sys_keyctl+0x20/0xc0
[ 1334.373783][T26907]  do_syscall_64+0x14d/0xf80
[ 1334.373793][T26907]  ? trace_irq_disable+0x3b/0x150
[ 1334.373807][T26907]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1334.373817][T26907]  ? clear_bhb_loop+0x40/0x90
[ 1334.373829][T26907]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1334.373838][T26907] RIP: 0033:0x7f7822d9c799
[ 1334.373848][T26907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1334.373856][T26907] RSP: 002b:00007f7823c79028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1334.373871][T26907] RAX: ffffffffffffffda RBX: 00007f7823015fa0 RCX: 00007f7822d9c799
[ 1334.373878][T26907] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017
[ 1334.373884][T26907] RBP: 00007f7823c79090 R08: 0000000000000000 R09: 0000000000000000
[ 1334.373890][T26907] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000001
[ 1334.373896][T26907] R13: 00007f7823016038 R14: 00007f7823015fa0 R15: 00007f782313fa48
[ 1334.373911][T26907]  </TASK>
[ 1334.691107][T26287] gspca_spca1528: reg_w err -110
[ 1334.723347][T26287] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110
[ 1334.738373][T26910] netlink: 400 bytes leftover after parsing attributes in process `syz.3.5161'.
[ 1335.173712][T26287] usb 4-1: new high-speed USB device number 78 using dummy_hcd
[ 1335.336028][T26287] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1335.357890][T26287] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1335.419036][T26287] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1335.428244][T26287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1335.438642][T26287] usb 4-1: SerialNumber: syz
[ 1335.659473][T26287] usb 4-1: 0:2 : does not exist
[ 1335.681316][T26284] usb 2-1: USB disconnect, device number 42
[ 1335.739528][T26284] appletouch 2-1:0.85: input: appletouch disconnected
[ 1335.770358][T26287] usb 4-1: USB disconnect, device number 78
[ 1335.818164][T23822] udevd[23822]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1336.284894][T26930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5166'.
[ 1336.309830][T26930] veth4: entered allmulticast mode
[ 1336.426301][T26930] veth5: entered promiscuous mode
[ 1336.834996][T26287] usb 3-1: USB disconnect, device number 31
[ 1337.247885][T26952] input: syz0 as /devices/virtual/input/input136
[ 1337.776250][T14490] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 1338.000281][T26960] binder: 26959:26960 ioctl 40086e8b 2000000029c0 returned -22
[ 1338.078022][T14490] usb 3-1: Using ep0 maxpacket: 32
[ 1338.085662][T14490] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1338.110537][T14490] usb 3-1: config 0 has no interface number 0
[ 1338.117004][T26962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1338.212894][T14490] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1338.263235][T14490] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1338.289406][T26964] bond6: entered promiscuous mode
[ 1338.293041][T14490] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1338.339095][T14490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1338.365632][T14490] usb 3-1: config 0 descriptor??
[ 1338.994651][T26951] loop2: detected capacity change from 0 to 7
[ 1339.017266][T26951] Dev loop2: unable to read RDB block 7
[ 1339.023556][T26951]  loop2: unable to read partition table
[ 1339.029639][T26951] loop2: partition table beyond EOD, truncated
[ 1339.042228][T26978] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5182'.
[ 1339.051385][T26951] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1339.090030][T14490] uclogic 0003:28BD:0094.0052: failed retrieving string descriptor #100: -71
[ 1339.124758][T14490] uclogic 0003:28BD:0094.0052: failed retrieving pen parameters: -71
[ 1339.210565][T14490] uclogic 0003:28BD:0094.0052: pen probing failed: -71
[ 1339.234311][T14490] uclogic 0003:28BD:0094.0052: failed probing parameters: -71
[ 1339.255260][T14490] uclogic 0003:28BD:0094.0052: probe with driver uclogic failed with error -71
[ 1339.295607][T14490] usb 3-1: USB disconnect, device number 32
[ 1339.380774][T26985] FAULT_INJECTION: forcing a failure.
[ 1339.380774][T26985] name failslab, interval 1, probability 0, space 0, times 0
[ 1339.394894][T26985] CPU: 1 UID: 0 PID: 26985 Comm: syz.5.5184 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1339.394921][T26985] Tainted: [L]=SOFTLOCKUP
[ 1339.394927][T26985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1339.394937][T26985] Call Trace:
[ 1339.394944][T26985]  <TASK>
[ 1339.394951][T26985]  dump_stack_lvl+0xe8/0x150
[ 1339.394978][T26985]  should_fail_ex+0x412/0x560
[ 1339.395005][T26985]  should_failslab+0xa8/0x100
[ 1339.395027][T26985]  __kmalloc_cache_noprof+0x88/0x660
[ 1339.395046][T26985]  ? mpi_alloc+0x52/0x140
[ 1339.395072][T26985]  mpi_alloc+0x52/0x140
[ 1339.395096][T26985]  mpi_read_raw_data+0x139/0x970
[ 1339.395134][T26985]  dh_set_secret+0x200/0x320
[ 1339.395149][T26985]  ? crypto_create_tfm_node+0x83/0x3f0
[ 1339.395168][T26985]  ? __kmalloc_node_noprof+0x34f/0x7c0
[ 1339.395189][T26985]  ? __pfx_dh_set_secret+0x10/0x10
[ 1339.395209][T26985]  ? crypto_alloc_tfm_node+0x3c0/0x3f0
[ 1339.395230][T26985]  ? __keyctl_dh_compute+0x3df/0xd10
[ 1339.395250][T26985]  __keyctl_dh_compute+0x5ae/0xd10
[ 1339.395267][T26985]  ? aa_file_perm+0x192/0x15e0
[ 1339.395296][T26985]  ? __pfx___keyctl_dh_compute+0x10/0x10
[ 1339.395338][T26985]  ? get_pid_task+0x20/0x1f0
[ 1339.395353][T26985]  ? get_pid_task+0x20/0x1f0
[ 1339.395370][T26985]  keyctl_dh_compute+0x124/0x180
[ 1339.395389][T26985]  ? __pfx_keyctl_dh_compute+0x10/0x10
[ 1339.395418][T26985]  __se_sys_keyctl+0x44c/0x9e0
[ 1339.395440][T26985]  ? __pfx___se_sys_keyctl+0x10/0x10
[ 1339.395462][T26985]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1339.395485][T26985]  ? __fget_files+0x3a0/0x420
[ 1339.395513][T26985]  ? fput+0xa0/0xd0
[ 1339.395534][T26985]  ? ksys_write+0x242/0x270
[ 1339.395554][T26985]  ? __pfx_ksys_write+0x10/0x10
[ 1339.395577][T26985]  ? __x64_sys_keyctl+0x20/0xc0
[ 1339.395598][T26985]  do_syscall_64+0x14d/0xf80
[ 1339.395613][T26985]  ? trace_irq_disable+0x3b/0x150
[ 1339.395634][T26985]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1339.395650][T26985]  ? clear_bhb_loop+0x40/0x90
[ 1339.395669][T26985]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1339.395685][T26985] RIP: 0033:0x7f065e99c799
[ 1339.395701][T26985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1339.395714][T26985] RSP: 002b:00007f065f790028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa
[ 1339.395732][T26985] RAX: ffffffffffffffda RBX: 00007f065ec15fa0 RCX: 00007f065e99c799
[ 1339.395744][T26985] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 0000000000000017
[ 1339.395755][T26985] RBP: 00007f065f790090 R08: 0000000000000000 R09: 0000000000000000
[ 1339.395765][T26985] R10: fffffffffffffe4f R11: 0000000000000246 R12: 0000000000000002
[ 1339.395776][T26985] R13: 00007f065ec16038 R14: 00007f065ec15fa0 R15: 00007f065ed3fa48
[ 1339.395801][T26985]  </TASK>
[ 1339.683138][T11544] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[ 1339.771722][T26987] pim6reg: entered allmulticast mode
[ 1339.797136][T26987] pim6reg: left allmulticast mode
[ 1339.989508][T26989] kvm: pic: non byte write
[ 1340.000719][T26989] kvm: pic: non byte write
[ 1340.909569][   T30] kauditd_printk_skb: 18 callbacks suppressed
[ 1340.909588][   T30] audit: type=1326 audit(1773603979.135:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27003 comm="syz.3.5191" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7822d9c799 code=0x0
[ 1341.310790][T27015] netlink: 360 bytes leftover after parsing attributes in process `syz.5.5188'.
[ 1341.370090][T27016] openvswitch: netlink: Message has 12 unknown bytes.
[ 1341.376974][T27016] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1341.442739][T27012] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5192'.
[ 1341.957089][    T9] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[ 1342.123051][    T9] usb 4-1: Using ep0 maxpacket: 8
[ 1342.134878][    T9] usb 4-1: config 162 has an invalid interface number: 79 but max is 1
[ 1342.150730][    T9] usb 4-1: config 162 has an invalid interface number: 183 but max is 1
[ 1342.177037][    T9] usb 4-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[ 1342.217987][    T9] usb 4-1: config 162 has no interface number 0
[ 1342.241895][    T9] usb 4-1: config 162 has no interface number 1
[ 1342.264390][    T9] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1342.311024][    T9] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[ 1342.349550][    T9] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 1342.378341][    T9] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1342.393189][    T9] usb 4-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 0
[ 1342.403612][    T9] usb 4-1: config 162 interface 79 has no altsetting 0
[ 1342.410482][    T9] usb 4-1: config 162 interface 183 has no altsetting 0
[ 1342.420126][    T9] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1
[ 1342.431317][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1342.444750][    T9] usb 4-1: Product: syz
[ 1342.449871][    T9] usb 4-1: Manufacturer: syz
[ 1342.456758][    T9] usb 4-1: SerialNumber: syz
[ 1342.593319][T26282] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 1342.693054][   T30] audit: type=1326 audit(1773603980.915:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27037 comm="syz.1.5199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc83d59c799 code=0x0
[ 1342.714118][    T9] pl2303 4-1:162.79: required endpoints missing
[ 1342.746956][T27044] loop9: detected capacity change from 0 to 7
[ 1342.803472][T27044] Dev loop9: unable to read RDB block 7
[ 1342.809329][T27044]  loop9: unable to read partition table
[ 1342.823088][T27044] loop9: partition table beyond EOD, truncated
[ 1342.829427][T27044] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[ 1342.838786][T26282] usb 6-1: Using ep0 maxpacket: 32
[ 1342.845921][    T9] pl2303 4-1:162.183: required interrupt-in endpoint missing
[ 1342.869278][    T9] usb 4-1: USB disconnect, device number 79
[ 1342.877576][T26282] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[ 1342.889365][T26282] usb 6-1: config 0 has no interface number 0
[ 1342.934800][T26282] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 1342.944357][T26282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1342.952351][T26282] usb 6-1: Product: syz
[ 1342.979014][T26282] usb 6-1: Manufacturer: syz
[ 1343.017227][T26282] usb 6-1: SerialNumber: syz
[ 1343.044474][T26282] usb 6-1: config 0 descriptor??
[ 1343.458869][T26282] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 1343.483634][T14490] usb 3-1: new low-speed USB device number 33 using dummy_hcd
[ 1343.501712][T26282] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1343.502768][T27053] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5203'.
[ 1343.608408][T27057] netlink: 'syz.1.5204': attribute type 1 has an invalid length.
[ 1343.651855][T27057] bond7: entered promiscuous mode
[ 1343.657990][T27057] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1343.679222][T14490] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1343.699453][T27057] ipvlan2: entered allmulticast mode
[ 1343.706879][T14490] usb 3-1: config 0 has no interface number 0
[ 1343.713042][T14490] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[ 1343.730547][T27057] bond7: entered allmulticast mode
[ 1343.736365][T14490] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[ 1343.749640][T14490] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1343.750749][T27059] bond7: (slave bridge2): making interface the new active one
[ 1343.766573][T27059] bridge2: entered promiscuous mode
[ 1343.773685][T27059] bridge2: entered allmulticast mode
[ 1343.781316][T27059] bond7: (slave bridge2): Enslaving as an active interface with an up link
[ 1343.810201][T14490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1343.824444][T27063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5205'.
[ 1344.032332][T14490] usb 3-1: config 0 descriptor??
[ 1344.046410][T27049] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1344.063617][T14490] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1344.329863][T14490] usb 3-1: USB disconnect, device number 33
[ 1344.335893][    C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[ 1344.768702][T27077] kvm: pic: level sensitive irq not supported
[ 1344.768806][T27077] kvm: pic: non byte read
[ 1344.787818][T27077] kvm: pic: level sensitive irq not supported
[ 1344.787894][T27077] kvm: pic: non byte read
[ 1345.204707][T27088] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5212'.
[ 1346.123052][T14490] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 1346.131214][T27111] kvm: kvm [27110]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00
[ 1346.147429][T27111] kvm: kvm [27110]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00
[ 1346.159989][T27116] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1346.179990][T27117] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1346.180987][T27111] kvm: kvm [27110]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00
[ 1346.209933][T27111] kvm: kvm [27110]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00
[ 1346.305700][T14490] usb 3-1: Using ep0 maxpacket: 32
[ 1346.312758][T14490] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1346.319776][T14490] usb 3-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e
[ 1346.331462][T14490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1346.349119][T14490] usb 3-1: config 0 descriptor??
[ 1346.357782][   T30] audit: type=1326 audit(1773603984.585:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27118 comm="syz.6.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1346.381017][   T30] audit: type=1326 audit(1773603984.585:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27118 comm="syz.6.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1346.419169][T14490] usb 3-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state
[ 1346.473453][T14490] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1346.474550][T27127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5223'.
[ 1346.483942][   T30] audit: type=1326 audit(1773603984.585:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27118 comm="syz.6.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c3415cfce code=0x7ffc0000
[ 1346.523379][T14490] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+)
[ 1346.559545][T14490] usb 3-1: media controller created
[ 1346.580274][T14490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1346.588880][   T30] audit: type=1326 audit(1773603984.665:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27118 comm="syz.6.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c3415cfce code=0x7ffc0000
[ 1346.613310][   T30] audit: type=1326 audit(1773603984.665:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27118 comm="syz.6.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1346.613726][T26282] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1346.656081][T27104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1346.668951][T26282] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71
[ 1346.671521][T27104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1346.689456][T26282] usb 6-1: USB disconnect, device number 21
[ 1346.700786][T27104] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] SMP KASAN PTI
[ 1346.712739][T27104] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf]
[ 1346.721154][T27104] CPU: 1 UID: 0 PID: 27104 Comm: syz.2.5216 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1346.732089][T27104] Tainted: [L]=SOFTLOCKUP
[ 1346.736407][T27104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 1346.746449][T27104] RIP: 0010:__mutex_lock+0x14b/0x1300
[ 1346.751814][T27104] Code: 80 64 27 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d f3 ae 77 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 29 27 80 f6 4d 39 64 24 60 0f 85 10 0f 00
[ 1346.771407][T27104] RSP: 0018:ffffc90005baf420 EFLAGS: 00010202
[ 1346.777464][T27104] RAX: 0000000000000019 RBX: 1ffff92000b75e9c RCX: ffffffff9a276403
[ 1346.785420][T27104] RDX: 0000000000000000 RSI: ffffffff8e16761d RDI: 00000000000000c8
[ 1346.793374][T27104] RBP: ffffc90005baf5d8 R08: ffffc90005baf547 R09: 0000000000000000
[ 1346.801328][T27104] R10: ffffc90005baf520 R11: fffff52000b75ea9 R12: 0000000000000068
[ 1346.809305][T27104] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1346.817261][T27104] FS:  00007f5c1a9f66c0(0000) GS:ffff888125560000(0000) knlGS:0000000000000000
[ 1346.826176][T27104] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1346.832740][T27104] CR2: 000000110c398a16 CR3: 00000000354fc000 CR4: 00000000003526f0
[ 1346.840696][T27104] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404
[ 1346.848648][T27104] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1346.856605][T27104] Call Trace:
[ 1346.859869][T27104]  <TASK>
[ 1346.862788][T27104]  ? __mutex_lock+0x319/0x1300
[ 1346.867541][T27104]  ? __lock_acquire+0x6b5/0x2cf0
[ 1346.872469][T27104]  ? dvb_usbv2_generic_write+0x26/0x60
[ 1346.877994][T27104]  ? __mutex_trylock_common+0x158/0x260
[ 1346.883527][T27104]  ? mxl111sf_ctrl_msg+0xb0/0x2f0
[ 1346.888580][T27104]  ? __pfx___mutex_lock+0x10/0x10
[ 1346.893594][T27104]  ? __pfx___mutex_lock+0x10/0x10
[ 1346.898603][T27104]  ? __mutex_lock+0x319/0x1300
[ 1346.903349][T27104]  dvb_usbv2_generic_write+0x26/0x60
[ 1346.908618][T27104]  mxl111sf_ctrl_msg+0x160/0x2f0
[ 1346.913543][T27104]  mxl111sf_write_reg+0xa9/0x1b0
[ 1346.918470][T27104]  ? __pfx_mxl111sf_write_reg+0x10/0x10
[ 1346.924005][T27104]  ? __lock_acquire+0x6b5/0x2cf0
[ 1346.928933][T27104]  mxl111sf_i2c_xfer+0x496/0x5100
[ 1346.933997][T27104]  ? __pfx_mxl111sf_i2c_xfer+0x10/0x10
[ 1346.939443][T27104]  ? is_bpf_text_address+0x26/0x2b0
[ 1346.944626][T27104]  ? kernel_text_address+0xa5/0xe0
[ 1346.949724][T27104]  ? __kernel_text_address+0xd/0x30
[ 1346.954906][T27104]  ? unwind_get_return_address+0x4d/0x90
[ 1346.960533][T27104]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1346.966669][T27104]  ? arch_stack_walk+0xfb/0x150
[ 1346.971514][T27104]  ? stack_trace_save+0xa9/0x100
[ 1346.976434][T27104]  ? __pfx_stack_trace_save+0x10/0x10
[ 1346.981792][T27104]  ? stack_trace_save+0xa9/0x100
[ 1346.986714][T27104]  ? stack_depot_save_flags+0x33/0x810
[ 1346.992160][T27104]  ? stack_depot_save_flags+0x33/0x810
[ 1346.997610][T27104]  ? kasan_save_track+0x4f/0x80
[ 1347.002446][T27104]  ? kasan_save_track+0x3e/0x80
[ 1347.007280][T27104]  ? __kasan_kmalloc+0x93/0xb0
[ 1347.012027][T27104]  ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0
[ 1347.018601][T27104]  ? memdup_user+0x2b/0xd0
[ 1347.023002][T27104]  ? look_up_lock_class+0x57/0x110
[ 1347.028100][T27104]  ? register_lock_class+0x31/0x2e0
[ 1347.033285][T27104]  ? __lock_acquire+0x6b5/0x2cf0
[ 1347.038235][T27104]  __i2c_transfer+0x79a/0x2020
[ 1347.043086][T27104]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1347.048880][T27104]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1347.054675][T27104]  ? i2c_transfer+0xc8/0x2d0
[ 1347.059256][T27104]  i2c_transfer+0x1cc/0x2d0
[ 1347.063747][T27104]  i2cdev_ioctl_rdwr+0x460/0x740
[ 1347.068709][T27104]  i2cdev_ioctl+0x6a5/0x880
[ 1347.073202][T27104]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1347.078222][T27104]  ? __fget_files+0x3a0/0x420
[ 1347.083233][T27104]  ? __fget_files+0x2a/0x420
[ 1347.087812][T27104]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1347.092733][T27104]  ? __pfx_i2cdev_ioctl+0x10/0x10
[ 1347.097742][T27104]  __se_sys_ioctl+0xfc/0x170
[ 1347.102319][T27104]  do_syscall_64+0x14d/0xf80
[ 1347.106893][T27104]  ? trace_irq_disable+0x3b/0x150
[ 1347.111907][T27104]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1347.117959][T27104]  ? clear_bhb_loop+0x40/0x90
[ 1347.122623][T27104]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1347.128497][T27104] RIP: 0033:0x7f5c1c79c799
[ 1347.132897][T27104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1347.152487][T27104] RSP: 002b:00007f5c1a9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1347.160883][T27104] RAX: ffffffffffffffda RBX: 00007f5c1ca15fa0 RCX: 00007f5c1c79c799
[ 1347.168866][T27104] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000006
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer)
[ 1347.176830][T27104] RBP: 00007f5c1c832c99 R08: 0000000000000000 R09: 0000000000000000
[ 1347.184801][T27104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1347.192760][T27104] R13: 00007f5c1ca16038 R14: 00007f5c1ca15fa0 R15: 00007f5c1cb3fa48
[ 1347.200723][T27104]  </TASK>
[ 1347.203737][T27104] Modules linked in:
[ 1347.207806][T14499] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[ 1347.208289][T27104] ---[ end trace 0000000000000000 ]---
[ 1347.235742][T27104] RIP: 0010:__mutex_lock+0x14b/0x1300
[ 1347.244435][T27104] Code: 80 64 27 9a 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 e4 0f 00 00 83 3d f3 ae 77 0e 00 75 23 49 8d 7c 24 60 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 29 27 80 f6 4d 39 64 24 60 0f 85 10 0f 00
[ 1347.264893][   T30] audit: type=1326 audit(1773603984.665:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27118 comm="syz.6.5221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3419c799 code=0x7ffc0000
[ 1347.294070][T27104] RSP: 0018:ffffc90005baf420 EFLAGS: 00010202
[ 1347.301478][T27104] RAX: 0000000000000019 RBX: 1ffff92000b75e9c RCX: ffffffff9a276403
[ 1347.309538][T27104] RDX: 0000000000000000 RSI: ffffffff8e16761d RDI: 00000000000000c8
[ 1347.327160][T27104] RBP: ffffc90005baf5d8 R08: ffffc90005baf547 R09: 0000000000000000
[ 1347.339967][T27104] R10: ffffc90005baf520 R11: fffff52000b75ea9 R12: 0000000000000068
[ 1347.353190][T27104] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1347.370844][T27104] FS:  00007f5c1a9f66c0(0000) GS:ffff888125560000(0000) knlGS:0000000000000000
[ 1347.380931][T27104] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1347.441597][T27104] CR2: 00007fc83d585900 CR3: 00000000354fc000 CR4: 00000000003526f0
[ 1347.495667][T27104] DR0: 0000000000000003 DR1: 00000000000001f8 DR2: 000000000000008e
[ 1347.581310][T27104] DR3: 000000000000057a DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1347.623036][T26282] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1347.704581][T27104] Kernel panic - not syncing: Fatal exception
[ 1347.710906][T27104] Kernel Offset: disabled
[ 1347.715217][T27104] Rebooting in 86400 seconds..