last executing test programs:

11.249876147s ago: executing program 4 (id=707):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000180)={0x0, 0x4533, 0x10000, 0x1, 0x1fb, 0x0, r2}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x48, 0x0, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r6, 0x545c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)

10.017623736s ago: executing program 4 (id=712):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}})
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000880)={[0x6, 0x4, 0x4, 0x0, 0x258, 0xfffffffe, 0x6e7, 0xd, 0x9, 0x8, 0x10001, 0x3, 0x441, 0x1ff, 0x4b, 0x2, 0x0, 0x6, 0x923, 0x1, 0x0, 0xfd6, 0x80000000, 0x8, 0x7fffffff, 0xff, 0x2, 0xb, 0x21, 0x88ae, 0xffffffff, 0x5, 0x3, 0x81, 0x7, 0x9122, 0x4, 0xfc1, 0xfffffffe, 0x800, 0x9, 0x8, 0x6, 0x6, 0xc71f, 0xfffffffc, 0x8000, 0x8, 0x7, 0x4, 0x6, 0x9, 0x4, 0x100, 0x0, 0x8001, 0xa, 0x3, 0x46b40000, 0x2030, 0x8, 0x2, 0x1d, 0xe, 0x40, 0x1000, 0x6, 0xffffffff, 0x4c856450, 0x1, 0x8a, 0x6, 0x0, 0x80000001, 0x9, 0x9, 0x8, 0x1, 0x2, 0xb1bb, 0x6d1, 0x7, 0x5, 0x0, 0x2, 0x8, 0x4, 0xb4604000, 0x3, 0x3, 0x1, 0x8, 0x2, 0x5, 0x0, 0x2ce2da7c, 0x3, 0x7, 0x4, 0x80000001, 0x4, 0x0, 0x3ff, 0x81d1, 0x176, 0x8, 0x3, 0x80000001, 0x9, 0xfffffffa, 0x10001000, 0x7fffffff, 0x8, 0x1, 0xfdee, 0x1000, 0x8, 0x80000000, 0x7fff, 0xc1, 0x979, 0x4, 0x9e, 0x8000, 0x4, 0x7f, 0x97ca7ab4, 0x0, 0x7, 0x401, 0xf, 0x5, 0x3, 0x1, 0x81, 0x5, 0x9, 0x4, 0xfffffff9, 0x2, 0x6, 0xce000000, 0x3, 0x16fe, 0x6, 0x0, 0x74c, 0x1, 0xfffffff9, 0x2, 0x6, 0x8, 0x8, 0x3fff8000, 0x1ff, 0x80, 0x8, 0x9, 0x9, 0x0, 0x7, 0x6, 0xa, 0x5, 0x9, 0x5, 0x8, 0xfffffff8, 0x0, 0xc, 0x0, 0x9, 0x10000, 0x400, 0x1000, 0x8, 0x7, 0x3279, 0x1, 0x7, 0x8f0d, 0x9, 0x2, 0x401, 0xf34286c, 0x64, 0x7, 0x6, 0x3, 0x3ff, 0xfffffff0, 0x8, 0x1, 0x8001, 0x9, 0x6, 0x4, 0x34, 0x6, 0x5, 0x33c7, 0xfffffffc, 0x543, 0x8, 0x4, 0x7, 0xff, 0x7, 0x5, 0x400, 0x6, 0x10000, 0x9, 0x1ff, 0x3, 0x9, 0xfff, 0x1, 0x10, 0x4, 0xfb23, 0x7, 0x0, 0x41f, 0x4, 0x1000, 0x2, 0xfffffffc, 0x3, 0x80000000, 0x3, 0x5, 0x4, 0xfffffffb, 0x8, 0x501, 0x100, 0x6, 0x8, 0x0, 0x81, 0xffffffff, 0x1, 0xc, 0x4, 0x3, 0x101, 0x6bb, 0x8, 0x0, 0x8, 0x2, 0x800, 0xd7, 0x6, 0x9, 0x7fff, 0x4, 0x9, 0x2, 0xffff0300, 0x80000000, 0x4, 0x80000001, 0xd02f, 0x0, 0x254c, 0x9, 0x1, 0x80000000, 0xffff, 0x6, 0x800, 0xb, 0x0, 0x5, 0xfffffff8, 0x6, 0x0, 0x9, 0x2, 0x0, 0x1, 0x93, 0x8, 0x2, 0x401, 0xffffffff, 0x0, 0x4, 0x5, 0x0, 0xbd, 0x52, 0x2, 0xff, 0x0, 0xf4, 0x5, 0x29, 0x1, 0x3, 0x74, 0x8, 0xffff, 0x83, 0x63c, 0x81, 0x9, 0xfffffffb, 0x1f68360c, 0x1e7b, 0xb, 0x5, 0x7, 0x2, 0xaf43, 0x7fff, 0xe8, 0x100, 0x6, 0xdbf, 0x5, 0x8, 0x200, 0x5e, 0x10000, 0xf, 0x7, 0x10, 0x2, 0xfffffffe, 0x9, 0x2, 0x9, 0x1ff, 0x1249d3c6, 0x8000, 0x5, 0x4, 0x1000, 0xc0c54c3, 0x200, 0x6, 0x3, 0x6, 0xa, 0x5, 0x1, 0x8, 0x9, 0x4, 0x6, 0x9, 0x3, 0xd, 0x0, 0x2, 0x1, 0x4, 0x3, 0xfffffff7, 0x3, 0xff, 0x5, 0x1000, 0x4, 0xce, 0x9d, 0x7b40c5c1, 0xfffffff8, 0x7, 0x20000, 0x9, 0x1, 0x8001, 0x55, 0xb, 0xe4e7, 0xfffffff9, 0x8c, 0xc6c, 0x1, 0x0, 0x4, 0xfffffffb, 0x3, 0x1f5, 0x0, 0xfffffff3, 0x101, 0xa9fa, 0x4, 0xd, 0x9, 0xffff8000, 0x5, 0x2, 0x4, 0x12000, 0x7, 0x4, 0x2, 0x1, 0x64, 0x5, 0x5, 0x9, 0x1, 0x9, 0x4, 0x10000, 0x4, 0x5, 0x325, 0x4, 0x0, 0x0, 0xa24c, 0xf4d4, 0xba0, 0x8, 0x9, 0x81, 0x101, 0x7, 0x9, 0x683, 0x7, 0x7, 0x80000001, 0x2, 0x200, 0x1, 0x5, 0xaa, 0x4d9, 0xe, 0x3, 0x4, 0xe, 0x40, 0xc3d, 0x5, 0x0, 0x2, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x2, 0x3, 0x1, 0x5973, 0x2, 0x1000, 0x7, 0x6, 0x1, 0x6, 0x1d1, 0x2, 0x3, 0x5, 0x7fffffff, 0x2ace, 0x6, 0x2837, 0x7, 0x2, 0x2, 0x1, 0x7ff, 0xa7, 0x6, 0x1, 0x7ff, 0x1000, 0x101, 0xd, 0x2, 0x8, 0x8dd, 0x6, 0x8000, 0x80000001, 0xa, 0x2, 0x100, 0xb83, 0xf, 0x5, 0xfff, 0x9, 0xfffffff8, 0x1, 0xfffff564, 0x1, 0xfffffffe, 0x66b, 0x5, 0x2, 0x4, 0x6, 0x5, 0x3, 0x7fffffff, 0x80000, 0x7, 0x6, 0x5, 0x100, 0x7fff, 0x9, 0x7, 0x9, 0x0, 0x7, 0x94, 0x5aa5e24e, 0x1, 0x5, 0xd, 0x23, 0x4, 0x3, 0x6, 0x7, 0x490b, 0x7, 0xf8cd, 0x100, 0x80000001, 0x5, 0x0, 0x1ff, 0xf, 0x26fd1adf, 0x285953f0, 0x7, 0x1, 0x0, 0x0, 0xae4, 0x9, 0xf, 0xff, 0x7, 0x213, 0x10000, 0x3, 0x8, 0x9e3, 0x4, 0x2, 0xfffffffa, 0x800, 0x8, 0x6, 0xfffffff9, 0x5, 0x4, 0x6, 0x1, 0x1000, 0x2, 0xfffffa6e, 0x5f, 0x81, 0x1, 0x7, 0x2, 0x8000, 0x2, 0x5, 0x7ff, 0x7, 0x10000, 0xfffffffc, 0x2, 0x200, 0xd, 0x9, 0x3ff, 0x1, 0x3, 0x87, 0x9, 0xce7c, 0x6, 0x8, 0xc00000, 0x1e01, 0x3, 0x2, 0x7, 0x8, 0x8, 0x7, 0x4, 0x4, 0x3, 0x3, 0x8f, 0x9, 0x7c, 0x3, 0x5d5, 0x800, 0x6, 0x4, 0x2, 0x0, 0x8, 0x80000000, 0x1, 0x4, 0x9, 0x8001, 0xffff0001, 0x1, 0x7, 0x2, 0x9, 0x40, 0x9, 0x19, 0xa, 0x40, 0x6, 0x7f, 0x1, 0x2, 0x8000, 0x9, 0x0, 0xfffffffd, 0x84d, 0x4, 0x6, 0x9, 0x1, 0x0, 0xffffff01, 0x6, 0x5240, 0x5, 0x4, 0x3, 0x6b0, 0x3ff, 0x2, 0x80000000, 0x1, 0x8ab, 0x9, 0xcc6, 0xc, 0x860, 0x6, 0x4, 0x1c6, 0x9, 0x0, 0x8, 0x5, 0x3, 0x1, 0x8, 0x401, 0x3, 0x8, 0xed5c, 0x3ff, 0x7, 0x5, 0x3, 0x3, 0xfff, 0x15, 0x9, 0x9a, 0x81, 0x6, 0x5, 0x7, 0x8, 0x8000, 0x8, 0x9, 0x4, 0x5, 0x800, 0x4, 0xe4b, 0x5eed, 0xbca5, 0x8, 0x1000, 0x4, 0xfffffff8, 0x22280000, 0x8, 0xf, 0x7, 0x8c4, 0x7, 0x5, 0x4, 0x2, 0xc78, 0x8, 0x5, 0xffffffff, 0x1, 0xd, 0x56, 0x8, 0x3f, 0x9, 0x40, 0x5, 0x1, 0x2, 0x8, 0x4, 0x40, 0xfb, 0x2, 0x6, 0x5, 0x6, 0x8001, 0xff, 0x4, 0x8001, 0xfffffff3, 0x0, 0x2, 0x6, 0x71, 0xffffd390, 0x1, 0x8, 0x8, 0xb, 0x9, 0x3, 0xa0, 0x9, 0x2, 0x200, 0x7, 0xb, 0x2ae89fe1, 0xffff, 0xe, 0x8, 0x80000000, 0xffffffff, 0x0, 0x6, 0x8, 0xc, 0xfff, 0x3, 0x4, 0x2, 0x6, 0xfffffffd, 0x9, 0x7, 0x6, 0xf, 0x5, 0xfffffffa, 0x3729, 0x9, 0x4, 0x2, 0x7, 0x4, 0x188, 0x9, 0x3, 0x5, 0xfffffffb, 0x5, 0x2, 0x7fffffff, 0x1, 0xffffffff, 0x4, 0x7, 0x4, 0x4, 0xb, 0x3, 0x8, 0x8, 0x7, 0x460a, 0x6, 0x6, 0x4, 0x5f, 0x8, 0x7fffffff, 0x7d, 0x4, 0x3, 0x7, 0x54, 0x40, 0xc, 0x400, 0x0, 0x47f4, 0x4, 0x10001, 0x3, 0x6, 0x9, 0x2, 0xfffffffe, 0x0, 0x0, 0x660e0725, 0xa, 0x40, 0x3, 0x2, 0x6, 0x3, 0xe4, 0x0, 0x1, 0x5, 0x400, 0x4, 0xba, 0x5, 0x76a, 0x8, 0x2, 0xf, 0x7ff, 0x89, 0x1, 0x9, 0x8b94, 0x4, 0x1, 0x8, 0x3, 0x6, 0xfffffff9, 0xd, 0xff, 0x8, 0x22a, 0x59c3, 0x401, 0xfffffffa, 0xb, 0x2, 0x400, 0x0, 0x8, 0x0, 0x6, 0x401, 0x7e, 0xffffffff, 0x3, 0xc, 0x23a4c66, 0x7, 0x0, 0x7, 0x2, 0x2, 0x8, 0x3, 0x2, 0x1, 0x4, 0x3, 0x7, 0xf346, 0x9, 0x3, 0x8, 0x9, 0x37, 0xc12f, 0x1, 0x73, 0x40, 0xfffffff7, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x7fffffff, 0x2, 0x1, 0x7ff, 0x8, 0x7f, 0x0, 0x2, 0xc2b, 0x4, 0x8000, 0xfff, 0x6e24, 0x9, 0x10001, 0x7, 0xfffffffd, 0x7ff, 0x1000, 0x4, 0xd, 0x3, 0x2, 0x8, 0xfffffff8, 0xfffffff9, 0x6, 0xffffffff, 0x80, 0x883, 0x0, 0xffff, 0x80, 0x7, 0x9, 0x2, 0x6, 0x8, 0x80000001, 0x3, 0x9, 0x3ff, 0x1, 0x4, 0x3, 0x0, 0x1, 0x10000, 0x4, 0xffffffff, 0x5, 0xa8c3, 0x7, 0x8001, 0x9, 0x3, 0x3, 0xf, 0x7e3, 0x58, 0xc, 0x80000001, 0x9, 0x400, 0x40000000, 0x6, 0x401, 0x7, 0x9, 0x0, 0x6, 0x7, 0xd, 0x9, 0x0, 0x7fffffff, 0xff, 0xaac, 0x5, 0x3, 0x0, 0x0, 0x4, 0xfffffff8, 0x80, 0x2, 0x7fffffff, 0x8001, 0x0, 0x5f, 0x4, 0x874, 0x7175, 0xd6, 0x60000, 0x7, 0x8001, 0x9, 0xc2e, 0xfffffffc, 0x8, 0x4, 0x7ff, 0x5, 0x7, 0x9, 0xfffffff7, 0x7, 0x4, 0xfffffff8, 0xaf, 0xc, 0x1ff, 0x2, 0x5, 0xfffffff5, 0x6]})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1a010c005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99080805", @ANYRES16], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r4 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a5bd2cb999f14"], 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
syz_usb_control_io(r4, &(0x7f0000000440)={0x2c, &(0x7f0000000140)={0x40, 0x11, 0xc2, {0xc2, 0x13, "a4949383eb60784f6b441d89763b5aa84c94e86ed192f660c6478e803380e76b26da83253a7af0a441b1c5e933e719380f2f95a53eb9d7222d8bcab8234db0dece9ed4d3a9bbe2c83df71672aa48580a73ea7afdb4a5a25ecc3a7ab25ece80ea617f9ea566722ee4d8c3133bf3b6bb4648e8a38affdc54ecf8f6a966ea6e15d70d1d3be6434dd65a08577dcbcb865ebe243e7ab1c8d85ae374304283e3ddeb8f9059842ff65bcc61599c6c13266617cda6ede4f211f02ef8a42194a96e2896f4"}}, &(0x7f0000000240)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "b4bd2df3c51c6414fcafab1d6b4f8f848934b3e98a815d3c085754ecb4d4507c2a9552ceba61e5c110df1f3b3971e419b8de2b0d5f0e91ad6ebedb"}}, &(0x7f00000002c0)={0x0, 0xf, 0x11b, {0x5, 0xf, 0x11b, 0x6, [@ptm_cap={0x3}, @generic={0xe7, 0x10, 0x2, "b3d37a7ffeb7cf16ec14547950e2eee4233ac11847015fcff081c6aad0b12c9b84d3ce248b1226d5a114418bea0f4e9c5b4aa7393eb270fd91c15419c6bcb6cc23e4ccb41dac6866fe3ee4fcda45b75634cf321a1cfb0f3115b400ee6d701340f031e5cdb41064822b01f199b8a99bc8aff7cb0d200a0bd5c068fa64b56fd41c22b0596db851ed140818904097a6ac5af05ae3467e5a7d39179c3282b70583c449cc251af55e929fd4acd56cc347416ea26d3a23b41a10821dc54372785c4b4f1031efb4eeb93def346bdd65be56cc380c8e64e1d196adb2f8de9ae298075e92c7559f8d"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x8, 0x1, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x0, 0xd}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x5, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "f60747dd02e0c7f993975ab960f7222a"}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x4, 0x5, 0x8, "67b1e37d", "61b4b4fe"}}, &(0x7f0000000400)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x80, 0xb9, 0x8, 0xfc, 0x4, 0x3}}}, &(0x7f0000000880)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="200e200000003622174e107b74fc370646dab944865b7c615928816b9cbe9a81f919306b6e06"], &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000580)={0x20, 0x0, 0x8, {0x1, 0x4, [0xf00]}}, &(0x7f00000005c0)={0x40, 0x7, 0x2, 0xc9}, &(0x7f0000000600)={0x40, 0x9, 0x1, 0x4}, &(0x7f0000000640)={0x40, 0xb, 0x2, 'Em'}, &(0x7f0000000680)={0x40, 0xf, 0x2}, &(0x7f00000006c0)={0x40, 0x13, 0x6}, &(0x7f0000000700)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000740)={0x40, 0x19, 0x2, "9946"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x81}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x6a}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x9a}})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000740)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x4, {0x9, 0x6, "9eccdc", 0x273, 0x6c, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @remote, [], "73ee99d2d629e569"}}}}}}}, 0x0)
readv(r5, &(0x7f0000001300)=[{&(0x7f0000000080)=""/108, 0x6c}, {0x0}], 0x2)

8.19169615s ago: executing program 0 (id=714):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="66baa000ed0f300fc75a723e400f017e0566baf80cb8087f998eef66bafc0c66ed66bad004b000ee0f20e035040000000f22e02e420f01c2b9800000c00f3235008000000f3066baf80cb8dcf06f88ef66bafc0ced", 0x55}], 0x1, 0x40, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000980)=[@textreal={0x8, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
write$apparmor_exec(0xffffffffffffffff, &(0x7f00000000c0)={'exec ', ':\x00\b\xc4\x99\x10\tI\xc22b\xe8\r\xfa\xc1\xd6-\xe5\xd3-\xce\xeapE\xb53&\v\xa0\xd3\v#E\xc4I\x97\xfd'}, 0x2a)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
connect$pppoe(r4, &(0x7f00000010c0)={0x18, 0x0, {0x0, @empty, 'caif0\x00'}}, 0x1e)
r5 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x1d78, 0x4, 0x7}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}]}, 0x50}}, 0x8c000)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
syz_emit_ethernet(0x32, &(0x7f00000000c0)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0xfffd, 0x0, 0x7f, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x8}}}}}}}, 0x0)
r8 = getpid()
r9 = syz_pidfd_open(r8, 0x0)
close_range(r9, 0xffffffffffffffff, 0x0)
syz_usb_connect(0x3, 0xb, &(0x7f0000001440)=ANY=[], 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r9, 0xc0085504, &(0x7f00000000c0)={{r9}, "c4005a51cf48a456fe399e96793568de827d6e3af15928143f77a2c2bf19506fac2c94a8808e7365569e94b6012f452ddbdb4acaadf3199a4fa57eab4549a87e05bb9a155f3d08704dc753cff79d5128dc113e58ecd5a19e0bc7bef139e74acaed4f126be4cc57e22d44a734c7f2c44b2b2dc3ecfb59318827549e5b2679b3cc4f8d5df2bc30b674fb5f8e181e7dab6cc37989c9911a3d5b32ac444ebf78c76d68c313ed1bcaa4bfcdddc200878c72704b48f4cda8c86a41c703694c1e57aaf73751f45d5ed54010c14c30ea8ca2f620ab57b6ad6bdf3263aeab2de44576b10a1040c6cc84fcf2cb5037e025b227baf26e0c5bda231531365c778ef42bc49fd603b98b7b5173f2f1669834e8cd5167092f5d56e6c2623165710ec863179f143dba38551641ea77676773f3a18e97ada500fe448f172e6e714e16079d8233626d4c5c08c9117c5872c5d815ae0d481c25f2cfd2c76c6723e5ee78d5941b7d49e3d123294dd4c04c2691c5d086393047e3fd027daebf2114d1e9da89a36a49f7a411638060e87593ed8e45fb4292ff888e2eb7b776c9428623a34454eb2f11a47b43707e4b161faa8b8dc0d9cb2a0ac253ab41d01721909ae06af564cabff5a0ba5df004c44138b49d2e17944f6588839fdedcf6ddef583df85490fa3a956e416e02943d56f734c3d3aa8b4898544e8f417c79bb5532b4ab2393c6723488c627a285686a0dac4cd6df370ab806b80f251256cfc058f8c2c2b46dca533048a18315caca12ad5915f077285ffbe1a4b5f46f2af4e45695348200e1f5a57a698acae6b4f6124fc076af5f40c3461e91b2639a84be51abe62d27cde1642731d31ae1264d20a21011bd221f8d0e4fc9835ccb61405e1ba6fcd48b9d3487909f89a0f40f91abfd3d33876b707d908bd2b076d37f5b2e2d530210e3930cf0418c3a7d8d0900cd16b4d2b2d4ebf6134c88813a808d82c86a20b7beb6534bb112b374d5b00e000000e37872a2df879ebd568f0b20ce7d4aeb5ef6c960093b8a3d0e0332d821fdd099269364539d876caf78e60232baf7cc26589453666f17f94ac05fc2b752546a9586f9f18288e5944effa6f912709652113377ee14d949842910b0af467706b42d969908840fe55857f526694cdacb7735f2e0bdc49ca50ca57193aec63535f679e1486185bae007a7cd345bf8d7428e1a2881f6d327ee34ef0bbd67b51d25000fc59ed894c001ca327898dc4a3e7c33e20542772f31e7f125eedec11604b6569f051e643bff91d616284d2ea0f25320c22caba4d681781a13bf341dc22f882540aaab75d5bba9bbfe8aa960705d1d903a7ed8b7a14cc18b2ec9d1640ba3b6cf9c2a6cde4f7b23d1eb42fa57d2b2206c6cd6f84a5b7d682a09064e341c844edd3361f2e457a5057e1c3d97916190d9749adbadb70797f1729cc01c6146a23942e245021fe02748e2235582b36df8236c8b25fa94d1ed7e495f0df447b36f609b17526b2c8c43f1ded38f99344f2553fd911deed701d89fdf92ed6368d74f6f09ce2d26a3916f28eda4fac022f043aff14bab96f3841980533b2f935cfe7e40ad9cc77557d50a32a73aa71ae37a0cece6580887608d028b55fa7a1a1cf214098fe13c1a32ee5890e3d2c9a4d23041f89bac353aa1641df4375080b2181555e9667082a35b041645be39a47298b747eed9d127d8d342b620d0ecd2a48a86bd7dbfa04bf5fad62f5b1055b2259dc64b02d27599fff87c8303b47174e3ee66645d1eaaa05d63bad90ef4fdb97d21b468b37c313571d5776495460b57ba25dc2a5def286c8e81a3fdaa3dfb1dfb9deec86aa3629a03b9722bd95a96972a32552ba5d74f03989c73598b3ba0ef19151631ba4cf90d1bcc35c7cd2fecd6c271564df5ed060081417488454f5878f09523ce1b966162808d13a86872ad04bc777544ae4477459d197c6aaecf52e229a6cc94d151e014b589311f8e5bb7eb57605a80c11a7df2110b70735ae34a21e467f7bd8c3f81c1f9dfcf9464365566786b086637717df597c05b45249b04faa2269ca5a3fca2f1797682f24a34c9f70c27b6dd47fe9f6f006c934481524985afeec903f160c4e2c36c2bbe2081ff33733ca17ca2a2d794fd3af80d5a1adcbfa384e1ba851f4a554433e532f321b332d640513c9df326ddaa4691201f94d1b4b82b82f9bb986e00242fce6588d906cd820640a59707cecf78533496fdc49d90effde5769812ae474ef31adb849542ef23359a640eeeadecf273713a46e96c836823012fc190c8d1dd88d965fbe11074da36375c11fedc648160b55b8b8bc830b72a6f98b1396a72d96f06fab40ddd4729dc162d30e8a34c4041cc22fd62eb501fa685ae7d53376cca12e40f53edd0ae8abbb666c75a6ca8658b4ef8810931158868afb757831d14e81cdadc995fcb98e2da29050080ca03494f81b59985dbe3da8634a3c4a00626d08d6f1f997ccd63a1a103d292d29cdf15b2c4bca2f34ba406a47d9a184ed712356257ec45aa9a8ed8b8daca20f6a2edb1494a2af100000000000000006f1bfeb0edfdb1f10b66753f3fe900b95be3aafbfb5e2976de8b2c6b485243770da0cdc8f4d7384b6f39817f5661429442b20cab08cc28cf814ebf10d7ad4de140241ec169d70781524127a9454e5f1ee9fd5652818683a2f7ff0b11c8fea2ff7398e01df48c8eb62123f2630d561470003d020f4cc8923654fcf65d400ed0792af6bf1876099951e938adc275f47b9ba178b8ae3e9b295fab66c144ad8ad2fd29bced367833b76b2f0ded8dfead5dfccfc9ba2d658688abeb41f53eaf6efa82e5947f8d7a6e1010517032443507f5bd419317324000ca02e49db1cb985f8f11149496bfe54629f3f759c3100e0ab50c95446fd390a87b884930763ac810bdcdaee81b64343b955eba24d34d816bcf3eb5df1b6b44317e033a9015640942da607e3ea61727b97eab7511ff680dc5f4e54fa19e07c0023152272edc066010e661de98f73f913bc04983b325ff62134b41081dce65528af69b5206f9522b3e09f78dea218621e60f5ca9c58212526d96aace431133528b8a5354b213ef4883ef271e488bf629284c277843202bf7a41dbe2616e8338ab14f83bd6da1d1c4a4b50b6372564187a497036f2040f77c099bd0d98d3e4eebd4bf433360c518fc965e966642a22a335f3a9688336bd254dc9fe32632d4c1599c6b72fca290d9cae38548f4ad5d2a165053b7d392276d81ff26e97ebcfa210eddc832240de22bbfc6623929aa2d8bad6c41db54e2125063f9153e98b2316ae5e9d51a3a9efe5a81242f7045dbafa8db63cafad19e32b767dcd5adfd5e5459dce45c71f61a18a3e6a7de43bd61d6015fac48dcecb60795e02b30dc04cc4a408abc2dee10a97fb387a229ba5c07cebc63037c0102c846393b2bf865db38e51ce44b5cede8d530cb6496e5a34b9b0b060b8bd6f98cd53169518a1732d92af494c351f8ce753754f7d944865de345d8520a9232a1c5e516e61f23c39e09bac5d7c70a478e0b7a3208f61f090f69b9ab33da7a8ae16626c3d26f11065fd46851eff2c5968f937e90abe02555cad9e54b4bcaf3ee55aba96406cd457e27c1ad5b9cc640afff1d94d7d5f854fd50a66bf37355c548f840129ae0d81dc23202e4d7921236172d1c4920c1bf5e7bfad21740acd8f5fa278b6de2336276e271045d0ef0a9a566ae988269cb16f7eee941941d3a9f05d754cbb92a27ad9cb374872c3566a9db35920d63f0cfa69ef8dfc41f307f7c1f1ae712e3f6001e57e1de99777212ede107b692182c507b168c77a3824f0cd663f6d2ffe73e3d90587b3444e9a3cb093ddefd2869db927938ecf6cbd16a85d0849b7c829a37b70b24868e7ab1aa2adc012d85a8bf374225281b50882a40e6bed667f0538d8c85768cc9d8537bedfebe64cddf937a150c565e3824a75f5e7a173fed0ed3b3aa8750fde47ce1c219d5fc1977abc24c7a28aa8251e29a17eee3405d4c1f1f5e8b53df9425d6dde4b9de4715097c580500000037b42974a40f0bf24dcca060871b759e5f42a12da7d89a494468f6c91c47ac17e7bfd61e62872541fd5d3941c0f0ebca3de06ca63cb50f60fa5ffc61ade4eaed0fd5dd1eb4b8e2d2ebb689741fb354c8bbdc9092f68a156952395585113d78254ec826ba49204d76b8dcd854c4cf942c50c38ad5f8db2bf032d5eced178b25e56f9b39961aea03785119cab42fffbbbeaa15f0c21511f441fd72ab25014dbe5a35dfe295486e0d2e5803304deff8736e1d8df7886e4725321bc450c68459f01b5b3014735e81f989945e59b4c5e367976e90124e9cf422cc0f0d624627ab83ccd65ac7c1b91424672ebb3d91d932994c6e215a9d60efb6ed87eb579951668273e9a38f9089179459d2f670a21bd999a97c968891c59402d188dc601ef033fb9af3291b8778f2a38d379913a02d2215f2960f80847afe4d65f1fc7bcd1995e83fc88d87d799af0bf16060780efc8dbd08b041d8c2f646ca18ea18d3d295e172b344b6aea8d2a2620b6379c5c368459fee07bfcc83c83acaf3dc67755bbe8fe58b1a39051ef2327b30c886a0a5183e38c199e32365cb8194deade3262ea5ffa559b789da10f2948e135ce5858e1b016c153b14795a085b5bef350f95487a3f748afa943179d87a1e8828edc33804c2ea49979074fe162a8a36689286c390585d9f83645be3b921c4a6678b8ffd7edfb7c85265d5796ce4f12595b364fcc81b58c267beaa85dd47ad8c55783fe526d6dd0e3cc1f70a7e88d6f826b18aeab8282ff8e2a13ee8f03fab41be97af13c87883f87e6f0bdda04deebc05e35b601a55cc984478a997725d3faab2101cd9596c757c659e6b6c9178f620fbdcb87e399404f4bcd9b57dd1013818e58a785bed0a7fd1f5e5e355816ceba6745a42e10a145c87aedede2e0bed7bc75015a8354ba95a226c87df41d41e4ae368c4e84e8a032c48977601d71eae547f95375746e1f9c86135481bd09a08fee04db26b96cc9327bbde61cec27a56d114cc0e6459170e6cc4dde84e3fe1d975d05e14dbdac32aa759e5d0268fe819a3dc503247b6c24c1607b4742671f5ad63c21812b1904b3c39ec8734fb1ee77a124a29c50154f53c89754f5e4719cc0279c851a63fc33e16f2393e5134568b78126b5680664fcd1fbf9d88f4efdadc120bbb4f21ddd7bf4c445a534631c5f2c4b51d7842743493b4a13bb99f160987284bc7960aaa6d40dbe05e20f42ff48425d1c8166b7fd457d33d808b456b7b11d3d3c1f445a9698ee8a473fb116c5c4824fa224088fa6f031f07f2972e62592d59536dc4cbe3c1cb33e922b0f35f79f1df10ab43e1d3e5dc480bdd8a7039f71ee9c73f976809ec2853ad0c18e4f0ee73fd1361591375d3db6c822e7baae597fc454aae7b426922e9fd9a87fe52a25d5cd03434d7ffb9f319fbeb403c0836f2117cf851bf7660ecb567a6cd918e85190683c1c0a79da1cd92b8527400008f047a436a4859be0e7b9469c6830a81d81f93ea8ba1b614de4386294089c9b34f4b8116ae7afedd43f6a82abf4302e4d8a9fba0b87347df1f5bb676f496bf29bf9ea9e3ea4bd1dd3f3d4feb7609f96424f35035b5a13fd6efd0441dea1c1f17feae7d5a1ef77aa05537fc87e112e123e306ef0daa36e1ff069be815c5d0b74b6b41c6d5b76c04057de0a43c2e40b04fc11b60f0f1e7ff0b88fb600d79e03cc8b73fed0af95601acca00"})
ioctl$KVM_NMI(r2, 0xae9a)

7.227318585s ago: executing program 0 (id=717):
ioprio_set$uid(0x3, 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x0)

6.62163358s ago: executing program 3 (id=718):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
fsetxattr(r0, &(0x7f0000000000)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)=ANY=[@ANYRES64=r1, @ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r1, @ANYRESOCT=r1], 0x7c}, 0x1, 0x0, 0x0, 0x20040815}, 0x0) (async, rerun: 32)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) (rerun: 32)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xe, 0x12, r2, 0x74ebf000) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async, rerun: 64)
unshare(0x46000000) (async, rerun: 64)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async)
syz_usb_control_io$printer(r5, 0x0, 0x0)
syz_usb_control_io(r5, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 64)
socket$kcm(0x2, 0x3, 0x2) (async, rerun: 64)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c61f00fffffffffbdbdf25410000000000000000"], 0x14}}, 0x8) (async)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f0000000b00)={0x24, 0x1, r9, 0x0, 0xf, 0x2})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r8, 0x3ba0, &(0x7f0000000540)={0x48, 0x1, r9, 0x0, 0xfffffffffffffffe, 0x100006d9})
ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r9, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8b1b, &(0x7f00000002c0)={'wlan1\x00', @random}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'\x00', @multicast}) (async)
write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x0, 0xb160, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfba, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @private=0xa010100, {[@timestamp={0x44, 0x4, 0x9, 0x0, 0x6}]}}, {0x4e20, 0x4e22, 0xfa2, 0x0, @wg=@data={0x4, 0x2, 0x5, "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"/3978}}}}, 0xfc8)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, 0xa, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0)

6.578514119s ago: executing program 4 (id=719):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x12040)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000, 0x4, &(0x7f0000006680))
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$getownex(r4, 0x10, &(0x7f0000001880))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
r5 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x3c, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x7f}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x756}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804)
close(r5)
write$cgroup_pid(r1, &(0x7f00000001c0), 0x12)
r6 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, 0x0, 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f00000005c0)=r6, 0x12)
r9 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r9, &(0x7f00000000c0)='THAWED\x00', 0x7)

6.177613114s ago: executing program 1 (id=721):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa7, 0x6c, 0xf8, 0x20, 0x6d0, 0x622, 0x70f8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb7, 0x0, 0x2, 0xe2, 0x66, 0xf2, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x210, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000c40, 0x0, 0x0, 0x200000000c70, 0x200000000ca0], 0x11, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="000000001c000000000c000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000020000000000000000000000000000000000000000000000001b0000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000600004000feffffff00000000"]}, 0x108)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000240)={0xa0, 0x0, r3, {{0x2, 0x0, 0x6, 0x8, 0x5, 0x8, {0x2, 0x4, 0xfffffffffffffffa, 0x80, 0x0, 0xffff, 0xe166, 0x6, 0xffffff53, 0x1000, 0xc, r4, r5, 0x9, 0x2}}, {0x0, 0x8}}}, 0xa0)
r6 = syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)
r9 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCMGET(r9, 0x5415, &(0x7f0000000000))

5.948456333s ago: executing program 3 (id=722):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
preadv2(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/84, 0x54}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000440)=""/225, 0xe1}, {&(0x7f0000000540)=""/205, 0xcd}], 0x5, 0x50, 0x6, 0x2)
socket$inet6_sctp(0xa, 0x5, 0x84)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0xffffffff85000014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(r4, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f00000067c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b00", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="780000000000000002000000000000040000000000000000000000000000000004"], 0x0, 0x0, 0x0, 0x0})
getdents(r6, &(0x7f0000000700)=""/90, 0x5a)
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x100001, 0x5}}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)

5.818337458s ago: executing program 4 (id=723):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) (async)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1) (async)
ptrace$setregs(0xd, r1, 0x0, 0x0)
ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket(0x10, 0x3, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newtfilter={0x24, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x2, 0xb}}}, 0x24}}, 0x48c0) (async)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000036c0)=[{{&(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="8c71582c160818335aa077da96a9babd4d69d2b04f8f195b6e54d68cd2a22eaf4353ce5d7f1ddca15c807d5d94f317d503486723252f41529639739e520923a3e0f40cf57f347b1b6b952deddde73b57e08fcb9537f44c02b8c2e474457a522c9365d18bef5faa63a1e92271654ad9c3d4516a4673a76ad6eb08fd2885e950949eaa7f06de73af385401bbbf4571ae0f0d1504c577720a1e06e7bc58cde18c223853dd88c3f008d659d4bb0fcd6977b9305281dc2023bf", 0xb7}, {&(0x7f0000000180)="65202f8a439b2cfb61b04da74f89bbf85910c65e75e213a635c25063880512ee6d2cf384e404d541963a879d6d04d2c3e674c89520a0b95838b53f1fc33f31f93a316a780b697e38120a5e4f838efa973e14106cfc30ac66850939c6fb37c81d94a49688ccbdf97379ce507379aaae", 0x6f}, {&(0x7f0000000840)="e11f42b1ed8ae2431f964350ff63a5c8f33cd7f655063983349d6cd102704c502d919c046a2d4963542e3fdefe73e745e5617a39692a2ce6ebe55672858a68eb6030376d194c718091ddcb1ef6dc3f198d6fe0a99742018627b4ba804a7d54f9079acf32bfe6b9faddf21f7abee5cbbfea53c5b0f788bb1edad89e840e72d015890585d289813929be9261d1f5011f42b7961edc587dd86d15490098b3ae", 0x9e}], 0x3, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}}, {{&(0x7f0000000440)={0x2, 0x4e20, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000003800)=ANY=[@ANYBLOB="1400000000000000000000000200000001000000000000001c000000000000000000000008000000", @ANYRES32=r3], 0xf0}}, {{&(0x7f0000002900)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000002c80)=[{&(0x7f0000002940)="a88c15626021c7537c870274aa1bc0db6c88af6143027c906cf535b405ec01ec1141e8dc3c49ae202644a66df528cb0e39bc972e66ab90c791a011f00b857fa52e842f7234a21a3f316c0daf64e5a420b14d075b8619ffd4a7199e9ac9868cc0b37fce199cd5b374bbffc586fda25294e8a8c52f6b5978bbe5", 0x79}, {&(0x7f0000002a00)="b8be34c604832265bfa9495a71477453354d7550977ffb3bb41aa724dc5c2fd4ad92c0ef8bdc797f4e64414b085e3be4fa7d14c4a4feb4cff6d09f52fbe1d9c964e7d112680be022ef0763c683a3fea62a689ac0c34387b6057ffa2c3785e31ca6a0454d7ed18086af", 0x69}, {&(0x7f0000002b00)="f1f87db03ea08a44afe544a09af987ba9bb8b13fbeafabb013d090c333047c8ea1dc02a1b8b0c7367332a5b0e244c4a1cf9fc27da0a79deee9cd7ddc7694603bdc2c618705f7d57cf8c4506befec4027c99662a9bec09101539258260845bfd07f4e5b1b21d603da5ce69a6b7f3d2bc13a6ed15c5ca08fc80a5a5451bdf229dcd1a70d35b9d4ed74e1a40e89cc5deac154547f9ca134444cb5a24be37979f968515834e914580fb13a754f94d888fb32896f57713ca2", 0xb6}, {&(0x7f0000002bc0)="23382b02a52fc5a726bd68ab598360901a5b6fd3976d65804aa23736a718a40d2bc23a10b5815abf052e083ffaa6fad2c3475c94f1c8b75a05f9a046c5aa69a1a951a1ed998780299507d99e0ac85a487e3acde929aea665533c7f2dce0c807a64eb30a2870ac8a277f4fbeeded6f05780c6b98f413e3925cf42ae3180426848643d2a30887249d1", 0x88}], 0x4, &(0x7f0000002cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @multicast2}}}], 0x20}}, {{&(0x7f0000002d00)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000003180)=[{&(0x7f0000002d40)="f6b13da0a8d8136621db8e4d91ca00d529ba0be377b3513002c892008cfa63e9e67f52080e9df053134c8671a625f8eca554eac3b45eff5a5e0c86c32373ba40ed68b8c885185f581349783c4a97a20fdffd79608271564f3430585ddc376258dd83edc4c639f9923a5a4165e864678981e60adc49e543a6742341f706c2bdf0066bff44ad8a05b8c0ee65ec8908696ebe", 0x91}, {&(0x7f0000002e00)="4099ff34cb6bf15da7f7de4891cbe7ed41d83e678d53032d4c90ed06fb9d7148", 0x20}, {&(0x7f0000002e40)="137e12cbed3dfafae6c95ab1e8d553ab69e31cd8fd4936ecc19286ee217fadc3157481c742b8b5297e7354c66fdf16bb9f0ce11a2e48f41adabc705b4451e4aa2f7ff52f3642b3b871e42ff3b4388f49c25f97339bd935dec6ebae117c4f56715f09b3fcd62c92ea4a751c9774fb82f28de11fb0d7352d3d0f06169a5affa69458d2f761464273cad441d0f758c46647047fa2b3d1db649ee83964e15330ac71ee90de3f611ddbecb5f1e90dd8b0597533e8854f8d3268eff86f7a7a5a2f15e2a82cacacb7e9939214273fb681b05d9f6af3c6d75a5bd493b3", 0xd9}, {&(0x7f0000002f40)="50f1fdddcaaf1c2bc7aa773c52a2e08ef62f01c58fc62774202b73399a8e9022f0323324d7c671eea135", 0x2a}, {&(0x7f0000002f80)="d48acb116871ee38c6bc8c37cc0fc91e65b35ba8547aa117b28028aa50dd21a4d4ada2a90287e1eeec704339a36947eb26befca3fbaec88148d3ea649df89e95ec2e44e494c6f230825fd287ab", 0x4d}, {&(0x7f0000003040)="8644f5949a76048a2c431393c91f2bd02c1eb01570fdcd858c018a77fb7b85db879651d677c28389f81f69f5f4b31e52dde17f386811036adfafb7fd777989face1514811c", 0x45}, {&(0x7f00000030c0)="695056f1142758765f4d871b501c4111678650fac01f8450578ecb171e7c54e82a2bc65e3107d7d6069c3fed80de6715f7ac17635b07b493f98affcf8965f7093359326105186db2b2ba4be0c123cee34301bcad59ddceeb3082b2d9b60dab3d7b3a1555d54c0136f58aff9a335d772d326ed970424d4c1082a6d5bda499ce8365ccb6dae546a1b1c6860646a93713077f77f6f97234aedc67c2c03448418fbaabe5da87d1395a08396dd30b73a8e8d5", 0xb0}], 0x7, &(0x7f0000003200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x476}}], 0x18}}, {{&(0x7f0000003240)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003580)=[{&(0x7f0000003280)="e042abf353e09da31d46c5", 0xb}, {&(0x7f00000032c0)="166826310871c9087f8f6b97ac53bb09c5a658ec121d822f8d783bed56fa60c6a7b6c108606ac7d027b437a02a4b655f6cfe4ee6fd7c965cdb3fe6cf538975514b0379d4c15b046adcb9397f0fadb7b947863b9198d784fe0cd4f30bddbfc06999b166", 0x63}, {&(0x7f00000033c0)="65e26ab56d5246afade6f244e58a687367235bbb9ef701d802c039b78c7c9b12b31b5f8d4cadd9be5785ae2b5546c67ccf485de93ca0982f8754d2ca7da734658e10896a788e99240ae3450c9d9c03836fae9657f1a6b457c8f2fc704ef6", 0x5e}, {&(0x7f0000003440)="6d4f8ca9f40632495627e02c102ea21a70d1a9540198c4eb87a8da706e0805fb23b59301617376d2e481f4f454b5b504eb344e0b1dfefe1421d0a46702c9a629309ca2e9d11a7830a140c72b948d85b32e30257c0f5999d3641f395c01380ad6a73f64b10a5d0a02618084350351a2591e56872a813abebec1280a37fe43e49f9af3d42b4ea5b28c14668cb68502a8e1627ea31e1a", 0x95}, {&(0x7f0000003500)="09757c3168e981c8c0a3abd9c8ecfec32f24174b0fbfbf38a09ed4f98963f49e8261c57ec93d6f5cf293820072361db0e5bfeb7583f669ac9dce53ae7bfb1e7dafbb137c57b58efe9b03279f76318ce6d1fd1f2b5f00443847e0505a595325d4c64881de0b40e7f0", 0x68}], 0x5, &(0x7f0000003600)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1131}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x86}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe4}}], 0xc0}}], 0x5, 0x80)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$igmp6(0xa, 0x3, 0x2) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async)
sendfile(r6, r7, 0x0, 0x1) (async)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344, <r8=>0x41424344}, 0x1, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @local, {[@cipso={0x86, 0x0, 0x3, [{0x1, 0x0, "86d1e29096d97cfa2826030ab65c54"}]}]}}, {{0x4e22, 0x4e26, r8, 0x41424344, 0x0, 0x6, 0x400000000000001a, 0x1}}}}}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, <r9=>0x41424344}, 0x5, 0x61f)
syz_emit_ethernet(0x1e2, &(0x7f0000000540)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x1, 0x6, "08f268", 0x1ac, 0x6, 0x1, @remote, @private2, {[@srh={0x3b, 0x8, 0x4, 0x4, 0x5, 0x18, 0x3, [@remote, @private2, @mcast1, @local]}, @fragment={0x3c, 0x0, 0xd, 0x1, 0x0, 0x7, 0x64}, @hopopts={0x3a, 0x20, '\x00', [@enc_lim={0x4, 0x1, 0xd1}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x0, 0xd5, "562bd8a39f6090066096f1c8aa36322e43612aa579d2d7e42cd6e032c34320d2c58370f17840fb313f77d93ffe5d8ccaf56bbf10f7f611ef4f14170de981f60decf3df841c64abba264f588d082c04de00c32241b308c50051c05b92879e3155b1493d0d23f9924895122d469de5aa35195d404c82d16a289ec6f32a6fa67eb2761a61b5031ed57135a1ece74a27a853344cefd02ddddd874a7692bb0148728df2a0fbe91744b804ff9a10f917cf13482ac7e67bc4de9a8657646722b7bf5a6da1fedeb988f4c65492d74ccb924c19a75f75f1f003"}, @pad1, @padn]}], {{0x4e21, 0x4e23, r8, r9, 0x0, 0x0, 0x13, 0xc2, 0x3, 0x0, 0x6, {[@sack={0x5, 0x1e, [0x3, 0x3, 0x3979, 0xcfec, 0x0, 0x4, 0x0]}, @window={0x3, 0x3, 0x7}, @mptcp=@capable={0x1e, 0xc, 0x6, 0x8, 0x1, 0x4}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @window={0x3, 0x3, 0x2}]}}}}}}}}, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)

5.44592635s ago: executing program 4 (id=724):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102001a0010f3044d07400001020301090224000101033005090400080103f801000921ff00010122b00b09056803100002ba07"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {0x0}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000240), 0x0, 0x2)
read(r5, &(0x7f0000000080)=""/116, 0xfffffeb2)

4.229928225s ago: executing program 1 (id=727):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
preadv(r2, &(0x7f0000000100)=[{&(0x7f0000000200)=""/170, 0xaa}], 0x1, 0x9, 0x36)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x0, 0x0, 0x80000001, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
syz_open_dev$usbfs(0x0, 0x76, 0x101301)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x802})
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0xc0406618, &(0x7f0000000140)={@desc={0x1, 0x0, @auto="4fb6531a71440dec"}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
r8 = inotify_init1(0x0)
inotify_add_watch(r8, &(0x7f00000004c0)='./file0\x00', 0x80000000)
inotify_add_watch(r8, &(0x7f0000000080)='./file0\x00', 0x4000000)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x401, 0x4)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

4.18047724s ago: executing program 3 (id=728):
r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140), &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x47f9, 0x0, 0x20, 0x0, 0x0)
r3 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, &(0x7f0000000140)=<r4=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r3, 0xa32, 0xe91a, 0x47, 0x0, 0x0)

4.117732284s ago: executing program 0 (id=729):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000) (async)
userfaultfd(0x801) (async, rerun: 64)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (rerun: 64)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
socket(0x22, 0x2, 0x24) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (rerun: 32)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect(r3, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x46, 0xb, "30baaf652685f9a25cdf20e68a81fb0d8c073a4cf9d07ebc2b5cc2e689b17668bc65fedd36417d7cb483ec614c4645b290e4739fe43eaeb37bfc11d4ca0998", 0x37}, 0x80) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 32)
writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x1}], 0x1) (async, rerun: 32)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(0x0, 0x500, 0x0) (async)
close(r6)
sendmmsg$inet(r4, &(0x7f00000004c0)=[{{&(0x7f0000000140)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000000180)}}], 0x1, 0xf00)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r8, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) (async)
r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) (async)
close_range(r10, 0xffffffffffffffff, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x26800, 0x0)

3.553903902s ago: executing program 0 (id=730):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11ff, 0x3331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6, 0x7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x20f752}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0)
syz_usb_ep_read(r0, 0x9, 0x1, &(0x7f0000000080)=""/1) (async)
r4 = socket(0x10, 0x3, 0x0)
write(r4, &(0x7f0000000100)="1b0000001a005f3803000000000000008004000000000000000000", 0x1b)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r7, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) (async)
setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) (async)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async)
setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) (async)
recvmmsg(r7, &(0x7f0000004940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=""/19, 0x18}, 0x3}], 0x1, 0x2, 0x0) (async)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f1, 0x0, 0x9}]}) (async)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e21, @rand_addr=0x64010101}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x90, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x7fff, 0xfff3})
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x4, {0x4, 0x1, "2c81"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

3.256473564s ago: executing program 3 (id=731):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', <r1=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', r1, 0x8, 0x8, 0x0, 0x1ff, {{0x5, 0x4, 0x2, 0x2b, 0x14, 0x65, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14)
r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0) (async)
syz_usb_control_io$hid(r5, 0x0, 0x0) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x8, 0x11, 0x0, @empty, @empty, {[], {0x0, 0x4e22, 0x8}}}}}}, 0x0)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r8=>0x0})
r9 = syz_open_dev$vim2m(0x0, 0x7ff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, 0x0) (async)
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x2c, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}, [{0x8, 0xb, 0x200}]}, 0x2c}}, 0x0) (async)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x33, 0x0, @loopback, @remote}, "00186371ae9b1c03"}}}}}, 0x0)

2.412343392s ago: executing program 1 (id=732):
io_setup(0x67f, &(0x7f0000000000)=<r0=>0x0)
r1 = eventfd2(0x0, 0x1801)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[@uexit={0x0, 0x18}, @code={0x1, 0x61, {"c74424003f000000c74424020f9ed1b8ff1c24430f35b9800000c00f3235000400000f3065360fc7bf000000000f01a36c8c00000fc79d1b00c0fe44e65d430f07c4c265adb100000000c482f9326b80"}}, @uexit={0x0, 0x18, 0x8000000000000000}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x2, 0x18, {0xa, 0x8000}}, @uexit={0x0, 0x18}, @uexit={0x0, 0x18, 0xffffffffffffff80}, @uexit={0x0, 0x18, 0xda80000000000000}, @code={0x1, 0x6a, {"0f23630f221cc7442400e8000000c7442402ffffffffff2c24430f01df45d9f166410f38809c4002000000c441f9c5c759660f38de7f00c7442400556a0000c7442402e06e0000c7442406000000000f011c24c443755e0f00"}}, @uexit={0x0, 0x18, 0xfa}, @uexit={0x0, 0x18, 0x8}, @cpuid={0x2, 0x18, {0x400, 0xe}}, @uexit={0x0, 0x18, 0x3}, @cpuid={0x2, 0x18, {0x42c, 0x23d4}}, @cpuid={0x2, 0x18, {0x5, 0x1}}, @code={0x1, 0x6c, {"0f01c2c4e2f9978f00100000400f01cfb9920b0000b802000000ba000000000f30c4e10c572a66baf80cb838cf1c8aef66bafc0cb82f420000ef66440f38823e66baf80cb811d7db8eef66bafc0cecc463c95c0c27f4366546dadd"}}, @uexit={0x0, 0x18, 0x2}, @code={0x1, 0x62, {"660f629b9209000066baf80cb88e88fb8def66bafc0c66edf3440fc28e002000000065db066466410f013fc4c219a722660f3803b50030000066b803008ee8660f3880b301880000c4e14dfb8508770000"}}, @cpuid={0x2, 0x18, {0x4, 0x2}}, @code={0x1, 0x58, {"6466440f3880a5000000002e3e36f3450f09c4a17f7d400266400f3882b80b0d00000fc72a670f07c4819de0b595e5d5ec0f20e035000200000f22e026f242adb9e70a00000f32"}}, @uexit={0x0, 0x18}, @cpuid={0x2, 0x18, {0x7, 0x5}}, @code={0x1, 0x5a, {"6636440f01f866b825000f00d0410f01c5440f88f86f000066450fc447de28430f01df48b800780000000000000f23d00f21f8352000000f0f23f866ba4000b006eec4c1195d220f30"}}], 0x3e3})
io_submit(r0, 0x2, &(0x7f0000001540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000000040)="d75cf65285e94ba1b0d02dabd0b8393d01e59162820355f15f89dadeb290cde56ddc6ba3a3f4b31cfffa6207ad8d54fca86321d985f969f2bd", 0x39, 0x8, 0x0, 0x0, r1}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0xb, 0xc, r2, &(0x7f0000000500)="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", 0x1000, 0x1, 0x0, 0x2}])
r3 = syz_open_dev$I2C(&(0x7f0000001580), 0xa6, 0x40)
r4 = eventfd2(0x3, 0x100800)
r5 = syz_open_dev$evdev(&(0x7f00000027c0), 0x6, 0x2)
r6 = eventfd2(0xe, 0x1)
io_submit(r0, 0x6, &(0x7f0000002a40)=[&(0x7f00000025c0)={0x0, 0x0, 0x0, 0x2, 0xe606, r3, &(0x7f00000015c0)="522fa13680e13d9ffd6b3375b10c1bfff31e20d6038246407eca4a6266ec296b88ffd52fb7d5791f1ba52cc3f71cd8326f72607be0ea25209523c88c2fef7bcb4d31717d1a46a17622bd50b35bbe2b0c6de63626b9a4e3412279ee770cf61b28a550320a0c32b341ec7a1a4cea68d33e2d4e57dedd664526ad9b86387b6e8880c940bfc392a1241b3738c17eda3042929b1014aa1029ff2557f817e397a88011ca30d8b25792b270477362e0ea207f30e5bdc06769054904d419f7ad1ebf0e10fe1e0075256bb71b350853d8dda7da91d44e778e2d6443b2a60456c1f450ef9af8113a3f0115c3fea7db03cf78ca252b741c0e91fa8b7445bc7e5606ba9f0f67e8c4cf524d9be32be4e3ba92483584a0a3318cb72a531f286789e38d5b772d342081d71c51c13f838ea1613de506b86ba1726fecc372f32ac121ceeb5fdeca6479f302fc2d80a1aa6a91a78d9685c6eda9f4d817a09ae5ef4a507e76804f16a8b7df8e25b6119eafe92b8bc316ccd9a7756df706ed8ba1330d8a740191dc5631a6480d62c15a6760329fd8294d13ad005d2cb17ef27d544f1c9f195e8100aac7c66b58ac09d4150d08be89e68377bfdba80d622746205e6d3d7f65551cd6307310d64059cca90ff08d0339e5891fe6164a3b6382d5b722b63d1ed7d94e5b8cc263d0ed1447e2cb665f607cd82c5a120ede8778c278710e5a7e0f2fe29a7a645b40b47fa5fe9002c19d27d46320d18736b50a7d33b9ed7ee8b85d80b38eada9d950cee94c77fbb728f73846c93177f13d7e92c18894bc59621852f0ec01e9b54ad399aedb4936f9ca58afa7cd99b0a2bbdef98a643817d0f80e286cfeb2c183191c4b2b59f9de3ae35a7ec52f839b4f0ac6d8b692a7fd521d7a348ef1af403762a74a9caedc67abbdd8394e6b1e690fc6a406c3ed4de67afd84fb2b0818c9defb32cea9ccc493f3770c6d53751dad0d18adfc921250ec163887f73595dc9ea0652bdb186e5af9624ae758cb50bdf0155ec168b41ec012d0bc8c133bb45411a0b0560afef624fad25aeeff9db10990ed27d3777bfe3d4607235e76441380ad6cdd3fb739d0552ae255cee0ef1a0219ab4918001be8ab4895d7da95d4f3222ee18654b580a39f7009b3f00c355e5a693e7d28c85d16b0bbae5d2d4df93b1a2012e94eb9d2c39e58bb003d1c2268b626142a66e22aa866bd7cb649aeb6626da9178a7fad4bd7ff1b43b5dcc9bab5333661264aa80355ad1807a16c3e0b21a7b0d06f8b9ef40853e681e0bedc7174f768abd9d417376021cf916cdea625ad49e8ce89b9a703f16dee91e48e2c88c28ddfb688f00be54a66aa823ec78be4d3c43455c4f73b224923ef9cff6412ba4b61b54615d223e105fafc2c6fd55c5a5c2d1421bba6ceca76782772025b643c89c80111fddc0888f1737849eff9085d1fb2b457b3932c2384d253540fe1e75dc78a408915eaa1df7ff0b3981fd434360cf1328cbb1f595ae892ba3922da147b5d1209442bc1b838555ac12746d1c7e683b9e72ba24e16dca4f87c210dbea92626952c2ff171c77c4a35acb3390f6dfebce31a8155dee5872938697f19de1e12d633f4dfcc95fde105c57e04fc125c7d4962dd10b2f534f47a506541fedab3083d9998ee4f024d2688c5ac499932aec8725dadb27f7282f281971a99ea1c8674bf5deba3ac82430b3b083ee79f0dfa2a3a8411f9d2d41b65de29a18dddbc8dba676e133e1b9caecdc947750c1733f3036a8b9818ee606fd2bd6da5b904a923c778c63cdbc6c26abc185df324f7fd876d5552a7fd44cb86d44d8466f0565c4c7d7bccbfcc04b0263e7471e88cdb07167d39662aa5b5f002103a7952fe80789f84f4fc06914e23d4781afa6276c63616c9cf6fb2b99b35c0ae5c4f2d1c15456e79f014a60fff19c9141aebffa0808402bca7d402096ea8aa97d1751701811afe8800d58e649a56face3272ce405aafb3113405157a338216a08076ce31f40847bad7b2a15b387b534aa536ffc26e4cd4ee225eab813d08d410c4e180ac87b654177f9972d719619d2b593e13d1e399d3e9e2687576235ace1b0b574cf3c469c7af5e71e638447bd77112f63042fa1cc8ae62183e83cab990b721b0c856caf4a567fbd23771ec0597cff38dfe1298abcfd1116195c5946dc55b2a07eed7b323854afa35082fed4fb1d03bf707a5b7e1411f42b02184c440d27061640de8f1edc162deefad3f78d8d2080a36a5c2d3dcd2fbb1091ec2371dee4bf0426d65d22a729f91d181b096a3beb121d5991c151da38e2ca46b5aa32b3d4ee66e3f0f8168e1c947e75d17f310882a88850d37d5b5510b7933624984f4b0e260edabf01b6e2a11233e4a413cebba6bfa429d1503bceecb74bfde43a94e57f84321570d811772fa844e8e9df204851f457194b9bcf5b411fa991bc7b5ffe9c763c3be2db001abaa1cd747410c203bd4e0895c480520e611123b81982e786f52c277372e1cad250648fa068d8617e0197ccef9628879bc18c4a984b7e46ff818670e26e82e1f208f2efd044248d779016468ee8ee5ad4ec0ce0c2edb0309b48ff9dc85e561459ca88e56ee3d20730e9cb7d770251ce4f12cee77079ba0e8ab9075b0efaa6cf7a34ac2eee4e584a2d906a8e36764625a98c8f238cfc57b1c780b3688c5ef79619b1f5aec71700bca69b2bfcffa1a1798e51b30728d1308f620c2a3db838eaf753945077fc4b16d586ccbdcc36471273138fa80d6f7e577fd9a17bb285eb35a7236dedf1bcede5c736372e343c1d89183d419cf8658fd469d9c57955d7215d4bb7db4e789feb51dafcd1c39310318dc6312e0af32527bc422c0bb4aafba50514ddbbec3b396ba1381c31588c13aa67bf09b4764f47c43965b28a4fbfc7b8018dd913cb136809e19829a51577adf0a81020803f7a374289c16f28459b05cb2f7ad5dac31b4457256da7ac7862a1e7f0229f4fec1ccd9b9f6b12a2f4c7f2d3b19c14bedfe26e9f4a137b89e1d74c288563cc8b5ab57b378524afd040d96bb1a88e8a493fdfb68bd142cecb3033e2d7dd1ba80ddcf7b7036b1de3acb16cdb7ec08d9fbc40bddb206ebdafe2bf9489e576a8171eb4f2641fcce5ca35d0e4928379c99d1c9cb01868d8935afbbed554573d0fe0063834b7571099ac149e022534340734d1c012d9e4c0ecec724dca29448ca25c6f6e849d282aace922e09e4221f870774361efa738e677f8ebbfee8c4be0d4018507ea2f640086b790636e0cebcbeedeb2096f3916f481b7a6e168fb63776ccee8cd5ccfe369d0249fe1416a7900b2dac25da3fe58149d7ead30eb5f961d3debe70e8b24d73ebc62d3c3fbe593b2d272f3cf8c75a60d1d7caa7fd46e2b6b5d6d9109683ddce639a4f1fac445df1a776cbf7b2b099fb50cb4c626dfc24a0c8d7a9729f2bd66bc6c9bce68f88248fc26d630e34beb890a9bf7bf2a387f3d3d0f905e93b137952ee976b74dbe9f30a4f0ecc33da330bc69ea8634b4175ae8b913462c3029ac602a90141e544b244bed56c1d5a4ff5bc813b734c8119da3d6adc268f7d8e8e40a6422e916b00603144bd046bce76acfa40da179a6ef26e564951c001f50c16e0ea8b01974ae45c9b1f30441ff86b4c8053b36cdd5d4af8b8603f9206bba6eef0d70ce4730fcb88a58af2f381d515d3821ce66b1f822f182e83f31e0d5c572cbaaaa30a933583c9064aaeaf9d81237f6c61f5aedbb5fe7964d42cc96f9430750bf1bbf97cc5a378c7fa9346128a461621f650feeca7998c4edff4af7ac29b27d936124250a512c9af1c4d2683da27e59e2d4641904310ae0827b8b76b25db0d77af41d4eec772d0c30d941ce6030f25071b89a73588e89e71494717c3788a8dac5d109bac71e2fd90367435c75fbf6a57db2f96b5442471301679554aecd6bf2b6d60763f634ed0c64543d7ea9a5b40952c81415a8ab49eb89bc52ef0baf4b7a8c99c7e75a8b81aa5f2e3238acdf693a469203abd849f29d06c1e30a7a243e1be89ee75b5be809d3bf9d48cae07e8453bfea6d4094fb25fd070afb9ea691fe7562cea789929675238b68a68542c56cbbb222a32c6911d4887138bc7ff1b241abf75cc6fb51295cc3622c118e90587c2e4540d3667925559b03dc682d3e857454dbef999fc01bd401c5a0ca0d5540181a8220dfd165e5b0c2a83fa0c966c8d745989f4737ecf0169ea354fe8f364ec366e49860c7bec0e548678e36e2c7c86edf36bb5d9c6e1cd459018c0120f76292489fc295dfd196d069e580e1da8678b96d61ea4ec7c45cc4900f283dd647eaa8f50d42ddb68e2eb41a4973f48c126aed49284c3edb53673a7a807a99261cbeeff7e4671ffcab71d66a6362745e68c68bd964d6b61200137e4e7a5d83b8bf6970062f9fd3bf6ce99bd07171f630a3c9629ec7d2d373f0ab0e3a48d751a8760161a28304484e68b97bd9c89778c5d614236b54624c17daaeeb868b758aabf6a67a46e73e1aacc000a4e2c75b5c8d38ff47899f0388045331afae3a2304857e8bcd9613329181c2c19ecc4107819fc2c81bc2b4b2da13299276157d932978ebaebfad54f38d0297c49663d17febe7d24d9f828294302d21f65d54e1abff6f97393a8e34369a180606e1b2484c83ad5aa9d025a9c3f7a0210e31d23ec7f91f8cf4c2ac31c5f342f8df3d570b9a9ef02408c223f92a81ca3dab2ae4e38b3254cd04bb5ef1b2bf8769dd5e5f0ef1f6d0aec589a5d8fe21e70adb4ae9d1b6ceea5a6f6bf98c5e421a5457367fa61fb222762b6c26dc2703c9e459f60034bef0afe657d2b556ebe88c2f3a8687f6abc66d47c18bfe3c4afb92d9ea63cb07fac015954f5e6a0d681e1451cd3be2486e8ff4d024b262e5ce897694d9d4647010264cfbcd42f773fc442d0f893eb6a935c1bb177d012064bacc341837e52a34f78cd4652f73cde567ef33350e2af75e2a031b3b2d5aa70a2beeee2be487f89ff2fe8c405e6bd4c355fab9427781512159c92df50b8e166dcdd66a23ea18b7530259d8ed62c4525689956d95e1d0da01df816fe8644a5b4b890dd0330f7de0abfa29d53ef77fa6bc59f2408b12e392732a7e0a2d2bd3e21a5f5f1da43e366feb1022fe33311e29786ece038deb35307ab381556303cccde3db16166728e745a7d3f5fa1d2f107979a9ed81e898743f74293b030ac3a0faf185b74be359a517028fc1d31c37b960555c47a714a054d72d7c5938dc1118b340c37a1e37c01bb64fdc174f6e502ae1f2b97df66020aa55e67640da166e5c0ada477044c80dc3779e0ade37bc891f8434bd0934ed8401bdb1adcd62e8889ad820217fb9d21094a66cd8c5f9c1b57431d524d8beeed0d75f43ec70377b97e80ae85b6a5deaf225cb8435df47b9c2a191590f5f992bc2a659bee4a21ca0f935791520accef01bf74e7d2b586d0e98119f5ec88b9594d9635f5097e20c22de89f24aec871436d877d53e729a054367ba1818b477652495f07eac6ebd7d980366b7ed701eef01bfbd640863d31e4a35bffe93d71e0ee5a47fe2d036d41a02df4309940b741b2d138d67cab67df817c622a2bda11d111941b8b419096070a8a5dd825e873352726f9a268dec66a398481aa51192ddce756e4fb1c5f20e9d6aca770718f68362506620df04d7263721e913a2e6c2d39f7f4e95ba13546825f948774bdf304fd32f514f09a881b352a236f298304e45d1870e02dd04fcdd962e84185a006eab6d88c335476f7a397bf4ce9f5c073c7869d719a8df0145f0f6b4baf3165c153", 0x1000, 0x8, 0x0, 0x0, r1}, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x7, 0x5, r2, &(0x7f0000002600)="a2cc203425f14225a8ea34d583595d99bc829992f07a09f10d17e17e5ff1eab4f3d4d43810647aae05c65bd4172dda4c0d299cf4389c3bb828480fb8791b7511e63852bdd0a1c03117285ff63964bff3e10b5f09238c0ab23eba84cf20ccec14f4fa193c43bf793a1b6cf55f11c8ac14db79004ea1f31c9b", 0x78, 0x100000000, 0x0, 0x1, r1}, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x3, 0xe, r2, &(0x7f00000026c0)="ca826d7648374287c85f1ba9f73bafa336baa6c7da192c442b91c3c3bf659660b138e651b9e33191bcdb0444fda50d979a377714067aa8136d9ef8dad7fc43f37c3654a20fbd2ceae891eae919fd6fcf75c50be35f251c1703e3e7a18390eab1430a3fc9588518c15ffc2869fca32998ba8b29380cbb183addefe4f5a61b272c72735883a6df586fc383312e", 0x8c, 0x4, 0x0, 0x2, r4}, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x7, 0x0, r5, &(0x7f0000002800)="6000b9c810b2b9868bd2d8bff6753a9d58e369ed9673f842e69d5fefaff84e7fc2511b58f883c605b7647e1f73d7591b645bf27f8a1e87eb1aa45d01a3b450753db7959c41daaa668ec9552d78e600bc63978d1ebe1548a34b7b997066d607f01a6e0b571bf122de2e3f77628fe03c03c7706f09f0d54a48b420586e5e7100e78134869724aec77204c7140d8827f2d3592223544053ec66d0bd4a89c4168ab82ec018558cda8fb80293e8b6e599e90c8211c7a9a649084f3cff4f40554c8ceec5aad595b5ac0e837e14a5f0", 0xcc, 0xffffffffffffffff, 0x0, 0x1, r1}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x3, 0x5, r2, &(0x7f0000002940)="d84e8cd0671b4363b014f04f", 0xc, 0x537d, 0x0, 0x2}, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x7f, r1, &(0x7f00000029c0)="c68a0108052db4b9cef54f26e831c9e3a7ce76170eee87e38244fc63578dea91c117bd", 0x23, 0x40, 0x0, 0x0, r6}])
r7 = syz_open_dev$mouse(&(0x7f0000002a80), 0x0, 0x2e0800)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000002b80)={&(0x7f0000002ac0), 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x20, 0x140f, 0x2, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40)
ioctl$EVIOCGBITSND(r5, 0x80404532, &(0x7f0000002bc0)=""/185)
r8 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002c80), 0x2, 0x0)
r9 = getpgrp(0x0)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000002cc0)={0x2, r9})
io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000002e00)={&(0x7f0000003000)={[{&(0x7f0000002d00)="85a82a6a790bb826732c0bfc187b3ae716175a49021a50b291ebc34446016ee72e919d6b54446cb94795e82e641cad318bafbf5ac29ec0ae7202459e1707be110786e4e35f8482e6448e510058657462f6b2db22cfc9b31e336a5b40b87626e6a0e57d75e13e7542c1fce55a7225a46874f9263c687bf90b5bf0c3fbeaec9822d7326a20d635748cf92d0ae7e960793aea93be98841105f0e3da3736bde9c144073fbb52c928caf9c403e3862716e231aad795eda9fcc5aa34a91f6e0080fa91f39f08179c036bc79f8635bc85304af7c900dd42881399678276b6ca517883f4972cbb7bf80a157aca9d5aa089239cca49f6900c", 0xf4, 0x3}]}, 0x1, 0x2}, 0x1)
read(0xffffffffffffffff, &(0x7f0000002e40)=""/161, 0xa1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002f40)={0x3, &(0x7f0000002f00)=[{0x2, 0x3, 0xca, 0x9}, {0x5, 0x7, 0xff, 0x9}, {0x6, 0x54, 0x3, 0x3a08}]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000002f80)='./binderfs2/custom0\x00', 0x7170225b7520b3d0, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r7, 0x5411, &(0x7f0000002fc0))
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000004000)={{0x0, 0x0, 0x80}})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000006080)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'})
r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f00000060c0)={0x10003, 0x1, 0x80a0000, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006140), r7)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r7, &(0x7f0000006480)={&(0x7f0000006100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006440)={&(0x7f0000006180)={0x298, r11, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x16f, 0x2a, [@preq={0x82, 0x30, {{0x0, 0x0, 0x1}, 0x7, 0x0, 0x3, @device_b, 0x3, @void, 0xc00, 0x7, 0x2, [{{0x1}, @device_a, 0xfff}, {{0x0, 0x0, 0x1}, @device_b, 0x101}]}}, @supported_rates, @supported_rates={0x1, 0x7, [{0x30}, {0x5}, {0x4}, {0x60}, {0x24, 0x1}, {0x6}, {0x2}]}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, 0x9}}, @rann={0x7e, 0x15, {{0x1, 0x3}, 0xda, 0x1, @broadcast, 0x3ff, 0x5, 0xc2}}, @mic={0x8c, 0x10, {0xca3, "4919388c6bf4", @short="00b3315c7db0129f"}}, @ibss={0x6, 0x2, 0x100}, @random_vendor={0xdd, 0xeb, "ce8a748e8b0a51f65ae54054d52d32f917b36fafd33779b7e786b7c6ddaa5dcafaef6ec1bef084f40cc90e195216501f4971a9c560fc06c29c47a2537be9e60aee2b7c6ba72941317d1e230a5bbdf13af7e9a5a6df16063eff34bf203121ac95c0a184364017307d8765e016bdb395cc20d3f400a3bb605e233808e4dccf4f68205e53ba6a4739b6ee98d48d115e7eb51f83b0aa0f26b41a74c286e709c995b9335554d9046a3493e27e4e5379f789b0247cfa8deb916869ed7e0a5fdcb55420d549ca7e33df2f076ff5337b6c0db1eca36f030d6609e5f49ca11ed465682306cfddd06de461778500d054"}, @mesh_chsw={0x76, 0x6, {0x4, 0x81, 0x39, 0x5}}, @challenge={0x10, 0x1, 0xdf}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x3}, @NL80211_ATTR_IE={0xfb, 0x2a, [@ibss={0x6, 0x2, 0x8001}, @random_vendor={0xdd, 0x33, "5e776340275778e9a464e95fec3bf20a4abe1d053bc398899b387b05cf7ecf86c4cd1571b497b765fb65c3d952c13b8eb28809"}, @fast_bss_trans={0x37, 0xa4, {0x0, 0x2, "5ab416af1d166c1e298765be490070f3", "17f08006437694689a55f494813d5b885c7809dc8bdb9b74f4e84b766792dee7", "0d62ad3455054d46733bd314a5fc0c09ba3a188427bced601ac0c14e0ac220f8", [{0x1, 0x28, "95f29d9a7f90f08e833c7d53e52403b6eb2b48f6fd531ea689a6228cf23759ad421883165d609641"}, {0x2, 0x26, "64714f6b88d2ba888ea9785b3de2fe101f01762570cfc3c65badf58ff64ba8480324e93617b4"}]}}, @peer_mgmt={0x75, 0x16, {0x1, 0x0, @val=0x3, @void, @val="2b130ae0393c41e7d91b01e5bb54ad84"}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x8080}, 0x8010)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
bind$inet(r12, &(0x7f00000064c0)={0x2, 0x4e20, @broadcast}, 0x10)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$fb0(0xffffffffffffff9c, &(0x7f0000006500), 0xe00, 0x0)

2.289795582s ago: executing program 2 (id=733):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff6a0af0fff8ffff1971a4f0ff00000000b7060000080000173c640000000000004504040001ffffffc604000001000a00b7040000000100006a0af2fe00000000850000002f000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000d099d9abc1242d9388b72e45ffc2a09f000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bbfc7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d1a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff14ae9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60c3d494239884363cc0000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x3f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x16)
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="5c00000014006b03000000d86e6c1d0002845da60600000000000000e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000040)
syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
accept4(r2, 0x0, 0x0, 0x800)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r5 = accept$alg(r4, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)
writev(r5, &(0x7f0000000400)=[{&(0x7f0000000000)="2670e400a7cd2502df7986430458f68b124c93cfde5e8611861d74a5572162658ecb1f0717e5b2f49b6d2f60797d2975a524be5f71a43b3dadfa6e06f319bf57fb379cf068a0920ef790b0a8c7288632220046ce2922bc20d8f6ec8902c7b2b0a962fe09a3f14946fcd55fcebaa1294cb515cbdb5d25a98010fc3c7e8e6eb254451832f7b5944de95d2b2608b9c4ba8fd75f6c9d98007df452e472f9b1e9d30b90779ee42fcd88e8b4175066b73858f4164bd1bb22ebd829dc8d90fd8516187e40417efc5c759ada70450be2efd08b40ed4e77ea41920c381dcf69fd6a", 0xdd}, {&(0x7f00000001c0)="53812f25b1e42e134f4e75a76aad6ce9d6e1727644d2179fdb23bdb4a90dedb3ddcde79706ee102d63e1589cb57c5d038803359f1e3a928b0a61189782f3b37c9680813d0ab217665df4b2d515c27f4e8df80a0dfee70129ebab9d4779a5ad4260a674b13a1b364ec09325f6a7e51e6a732d376442cba82eed6473ef3c162e12dff86e8ec888be76181667ca6b360f1ae6160f821780abbb17c558d25a1ae439710b5f6d1e8347f52dafe63e88d4ba3b9dbaebc2fcd5b9a3ab53d9", 0xbb}, {&(0x7f00000012c0)="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", 0xe69}], 0x3)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
syz_open_dev$tty1(0xc, 0x4, 0x1)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)

2.20975624s ago: executing program 1 (id=734):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x3, 0x4)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={<r2=>r1, 0x9}, &(0x7f0000000100)=0xc)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x10001, @remote, 0x2}}, 0x7926e497, 0x0, 0x7, 0x1, 0x6}, &(0x7f0000000200)=0x98)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x4, 0x401, 0x2, r1}, 0x10)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000280)=0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'pim6reg1\x00'})
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xc008a1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8044)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000440)=<r5=>0x0)
fcntl$getownex(r3, 0x10, &(0x7f0000000480)={0x0, <r6=>0x0})
tgkill(r5, r6, 0xc)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0xc)
r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(r8, 0x4008af14, &(0x7f0000000540)={0x1, 0xe73b})
r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f00000005c0)={0x3, @raw_data="18af11d87f2748c969547bcf11cbf7cdd99fccd4678984365729079104e8cbedff83db216266bb9028b962132e7bf81308acdbbd32a82cbdbf825513459ff34cad2233ae0f588cfe5e1559a4d21f3028dd8a6efe0996e88da0822f9ea43482042b6c78ce3f6a5d1c9f31fd7b4dc710b02ac8316b285780fdfd872d7c1bb6885d77ff49956c93b7e44f2877e2ab843cb832c381dd9c5633f783a5074c34ea03a0e1380c456087d9da869ecad948d5de3e39cccbdf865ed21b1c37450d4343471cc0b46273e0235635"})
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000006c0), 0x400000, 0x0)
write$apparmor_exec(r10, &(0x7f0000000700)={'stack ', '/dev/vim2m\x00'}, 0x11)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000780)={'syz1\x00', {0x8b, 0x21a5, 0xfffe, 0x2742}, 0x54, [0x400, 0x3, 0x1, 0x80, 0x7, 0x8a, 0x9, 0x6, 0x4, 0x7ff, 0xffffffff, 0x2, 0xd72, 0x1, 0xffffffff, 0x1, 0x10, 0x8000, 0x6, 0x4978276d, 0x0, 0x7, 0x7, 0x6, 0xf, 0x59e, 0x1, 0xffffffff, 0x3, 0x81, 0x4, 0x3c000, 0x2, 0xfe, 0x5, 0x2, 0x7ff, 0x8, 0x2747, 0x5, 0xf, 0x2, 0x5, 0x2, 0xa916, 0x8, 0x45, 0x4, 0x0, 0x9, 0xeb0, 0x8, 0xa, 0xaae8, 0x6, 0x7f, 0x5, 0x5, 0x4fa, 0xe2c, 0x8000, 0x1, 0x5, 0x9], [0x8, 0x4, 0x2, 0x0, 0xfff, 0x2, 0xdd3, 0x5, 0xed, 0x1, 0x2, 0xfffffffb, 0x3, 0xfff, 0x7, 0xffffa035, 0xffffffff, 0x80, 0x3, 0x6, 0x5, 0x9, 0x0, 0x7, 0x3ff, 0x2, 0x1000, 0x3, 0x9, 0x1, 0x44f8115c, 0x6, 0x92, 0x8000, 0x7fff, 0x9, 0x9, 0x0, 0x4, 0x6, 0x2, 0xf, 0x4, 0x6, 0x1, 0x98e, 0x7, 0x0, 0x1, 0xfffffff1, 0x4, 0x3, 0xde, 0x7, 0x80000000, 0x9, 0x3, 0x8808, 0x7, 0x0, 0x5, 0x39, 0x0, 0x3], [0xff, 0x1, 0x1, 0x7, 0x1, 0x1, 0x2, 0x1, 0x6, 0x7, 0x8, 0xff, 0x0, 0x7, 0xd, 0x8, 0x50, 0x67cc1a53, 0x81, 0x0, 0xd, 0x10, 0x3ff, 0xfffffff8, 0x2, 0xfffffff8, 0x3, 0x6, 0x10, 0xff, 0x1, 0x98000000, 0x3237, 0x1, 0xa2, 0x7, 0xfffffffd, 0x3d6d, 0xfff, 0xb, 0x7, 0x4, 0x7, 0x0, 0x9, 0x3, 0x2, 0x6, 0x7, 0xa, 0x8000, 0x6, 0x7ff, 0x100, 0xfff, 0x1ff, 0x8000, 0x552b8497, 0x8, 0x5, 0x1, 0x800, 0x22, 0x952b], [0x4, 0x6, 0x88, 0x0, 0x0, 0x8000000, 0x8, 0x2, 0x35af3723, 0xfffffffc, 0x2, 0x3, 0x3ff, 0x9624, 0xffffffff, 0x10000, 0x8, 0x1, 0x85d, 0x40, 0x2, 0x0, 0x6f, 0x6, 0x2, 0x8a, 0x7ff, 0x4, 0xf, 0x7fff, 0x401, 0x6, 0x0, 0x9, 0x7, 0x7f5, 0xe0a, 0x3, 0x8, 0x9, 0x0, 0x586, 0xd07b, 0xfffffffb, 0x3, 0x6, 0x8, 0x3, 0x8, 0x0, 0x7f, 0x6f, 0x8, 0x5, 0x7, 0x4, 0x10, 0x8, 0xea, 0x7, 0x10000, 0x68, 0x0, 0x8]}, 0x45c)
prctl$PR_SET_PTRACER(0x59616d61, r5)
r12 = openat$cgroup_ro(r11, &(0x7f0000000c00)='cpuset.memory_pressure\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r12, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, 0x3, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40040)
r13 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r13, 0x84, 0x5, &(0x7f0000000d40)={r1, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}}, 0x84)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000e00))

2.178830683s ago: executing program 3 (id=735):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x6, 0x80000000}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}, @RTA_OIF={0x8}]}, 0x34}}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYRESDEC=r1])
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x10, 0x1417, 0x400, 0x70bd30}, 0x10}, 0x1, 0x0, 0x0, 0x4180}, 0x48000)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r6 = accept$alg(r5, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000006100), 0x49f, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000180), 0x4, 0x600000)
r9 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0x40005]}, 0x8)
fcntl$lock(r9, 0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f00000000c0)={0xdd, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3, 0x0, <r10=>0x0})
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES64=r10, @ANYBLOB="2c726f6f746d6f64653d30303030300dc4a04430fb0030303030303034303030302c757365725f69643d2ec917568f0724ce6697d5a066d8a8d910dca41eaf20aef2d123d68b873156be8342c2c410f9343c21a8d10200", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
read$FUSE(r11, &(0x7f0000006380)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_INIT(r11, &(0x7f0000004200)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
syz_fuse_handle_req(r11, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.030011542s ago: executing program 4 (id=736):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT=0x0], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010)
r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000000)=0x5)
syz_usb_ep_write(r0, 0x8d, 0x6, &(0x7f00000001c0)="d0be166e5e8b")

1.947155792s ago: executing program 1 (id=737):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0)
syz_usb_disconnect(r0) (async)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x6}) (async)
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f00002b3000/0x2000)=nil, 0x1000}) (async)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r3, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1}) (async)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)

1.768762727s ago: executing program 3 (id=738):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x4, 0x4800)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040))
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000080)=0x9) (async)
ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000080)=0x9)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = memfd_create(&(0x7f0000000280)='%\x00', 0x4)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
syz_usb_connect(0x5, 0x36, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000252d010034001280090001007866726d0000000024000280080001000000000008000200030000e40800010001000000080001000100000008000300", @ANYRES32=r7], 0x5c}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
socket(0x10, 0x80002, 0x0) (async)
r8 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r8, &(0x7f00000000c0), 0x492492492492627, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r5, 0x0) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r5, 0x0)
preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000180)=""/157, 0x200000}, {0x0}], 0x2, 0x20, 0x0, 0x0) (async)
preadv2(r5, &(0x7f0000000340)=[{&(0x7f0000000180)=""/157, 0x200000}, {0x0}], 0x2, 0x20, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

818.070346ms ago: executing program 1 (id=739):
ioprio_set$uid(0x3, 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
splice(r1, 0x0, r0, 0x0, 0x6, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x40095}, 0x0)

606.764487ms ago: executing program 2 (id=740):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_io_uring_setup(0x24f5, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000100), &(0x7f0000000800))
request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x30100, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r3, 0x1, 0x70b929, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x134, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b05624bff751a7202038ea97c65d6f9b4aefdaf9782a867d"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3719540506f1f60cc011672b387000b3dbcb3b9d384f9739"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2fbd12d08c2d2302e7fbf922e36efe6ce6345dc6cecc0b20"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x134}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000080)

503.702885ms ago: executing program 2 (id=741):
r0 = syz_open_dev$media(&(0x7f00000000c0), 0xff, 0x199d00)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f00000005c0)=0x77)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x100}, {}, {0x0, 0x1}})
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080)=<r3=>0xffffffffffffffff)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffc, 0x6, 0x2, @buffer={0x0, 0x1000, &(0x7f0000000f80)=""/4096}, &(0x7f0000000040)="0000501ef663", 0x0, 0x4, 0x10030, 0x0, 0x0})
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c58b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xfffffffffffffe5b, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r8=>r1, {0x30000}}, './file0\x00'})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000700)={&(0x7f0000000280)="675a823e31144581290424d846e6746d296e8e0c9791388b310d2d9289b58645b33a7746775a5a7e2e6b8f7b164da9139e01f67da4fb7ba70bcb8445eb1e247d38678501fb83de51b8d3e1585570b13d1f864bcec6e890ae751b507d0fb9235ae26dc5d700c28ecb2091ef045905d785e39a30404e548ad1a50ad8aa908b4cee82b769e6aef988369fb2e98fd483f8a6b3e9e69bff79f66d84573dd044e947c8", &(0x7f0000000480)=""/213, &(0x7f0000000340)="83c6745f71caedec6f2ee8f93785d7a896358afdd101220c11f9f1cc7c3601e0d24a136d224402bc73cab97cfebd20c18ad3d6a5d93d962c97115d506b3aa38d8d548234e71d18a12c17b25e7834e3fc1127bc3b3cc8c18724fd1aad67f03db79b45a756f0265529827727b4e1be51d19fda4b71c4490a5cf5f0385f700a31c50af89dadbf67ea2398caa0e32eee0a52b5ff09", &(0x7f0000000640)="d8b8d93b0a6d77ec77a3bebf512586b52c2abe7ab836b16b95e33b0bcf72db0c15f694d35f152764b872b40b43960ea28614fab04aae7dfbc57c24a3ceda7348fb2bbd3a289b82d27442f31655a56e16146c3989bdb4cb8f0491d0556cbd2b018d329d289b2dd6ba6c96bfde08e2586ebb471c23dcda997ec5b14e5af60aeda6493d6a760bff5e92e46fba5cc748c3dfead077dc67c61254da763b09653d2b2ac974d0ecc71ac792", 0x0, r8, 0x4}, 0x38)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd2b, 0x25dfdbfc, 0x0, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r10 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0xc4bc, 0x400, 0x1, 0xbe}, &(0x7f0000002000)=<r11=>0x0, &(0x7f0000000000)=<r12=>0x0)
syz_io_uring_submit(r11, r12, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4007, @fd=r3, 0x9, 0x0, 0x0, 0x22})
r13 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7ffffffbffffffff, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r13, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3014, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r10, 0x48eb, 0x1158, 0x2, 0x0, 0x0)

366.061103ms ago: executing program 2 (id=742):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="505a6942234bf66aa16488f2fe9096c32c000000", @ANYRESHEX=r1, @ANYRESHEX=r1], 0x2c}, 0x1, 0x0, 0x0, 0x44015}, 0x24000010)

338.608153ms ago: executing program 2 (id=743):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x101000)
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x1)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1007, 0x1, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0})
r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x10000, 0x1ad01)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/wakeup_count', 0x200801, 0x0)
getdents(r2, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r2)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000300)=0x400)
r3 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
msgget$private(0x0, 0x3)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x3c0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x0, 0x100000}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000005600010000000000000000000700c6c9", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@newlinkprop={0x9c, 0x6c, 0x20c, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x200, 0x10c32}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x8}, @IFLA_MTU={0x8, 0x4, 0x7}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x95}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xc7e8}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'dvmrp0\x00'}, {0x14, 0x35, 'veth1_to_bridge\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'pim6reg1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x20048041)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

276.186595ms ago: executing program 0 (id=744):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
fchdir(0xffffffffffffffff)
landlock_restrict_self(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000580)="66b9800000c00f326635000400000f30640faa670f71e6003e0f009300280f01d1660f38f89300082e65f30f5966bd66660fc7b4000066b80500000066b900c000000f01c10f624c05", 0x49}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000600)="450f1f400048b805000000000000000f23c80f21f835080010000f23f8400feffac422793fcc470f01c5428d9241000000c462b9b99b000001008f49f894b409d17b0000b9760900000f3266450ff9a505000000", 0x54}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

125.73135ms ago: executing program 2 (id=745):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x22, 0x2, 0x24)
close(r3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r7, 0x401c5504, 0x0)
shutdown(r6, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r8 = fsopen(&(0x7f00000001c0)='squashfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
close(r9)
sendmmsg$inet(r4, 0x0, 0x0, 0xf00)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6e, 0x39, 0x2b, 0x8, 0x6cd, 0x119, 0xe6d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x0, 0xe0, 0x0, [{{0x9, 0x4, 0xfc, 0x2, 0x0, 0xba, 0x70, 0xc3, 0x8}}]}}]}}, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2)

0s ago: executing program 0 (id=746):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102001a0010f3044d07400001020301090224000101033005090400080103f801000921ff00010122b00b09056803100002ba07"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x1010, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r4, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180, 0xb4}, {0x0}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f00000004c0)=""/142, 0x8e}, {&(0x7f0000000640)=""/70, 0x46}, {&(0x7f00000006c0)=""/179, 0xb3}], 0x6, &(0x7f0000000580)=""/70, 0x46}}], 0x1, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
socket$inet6(0xa, 0x2, 0x0)
r5 = syz_open_dev$radio(&(0x7f0000000240), 0x0, 0x2)
read(r5, &(0x7f0000000080)=""/116, 0xfffffeb2)

kernel console output (not intermixed with test programs):

0][   T49] usb 1-1: SerialNumber: syz
[  205.375813][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.402944][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.414276][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  205.424650][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.434388][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.443730][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.455000][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  205.459386][ T5914] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  205.465139][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.481566][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.504054][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.515619][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  205.534221][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.543304][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.567921][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.585495][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  205.604180][   T49] usb 1-1: 0:2 : does not exist
[  205.613767][   T49] usb 1-1: unit 5 not found!
[  205.621817][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.635648][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.637919][ T5892] usb 2-1: Using ep0 maxpacket: 16
[  205.653235][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.678540][   T49] usb 1-1: USB disconnect, device number 34
[  205.684690][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  205.696715][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.713186][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.730083][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.742902][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  205.753549][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.772088][ T5892] usb 2-1: config 0 has no interfaces?
[  205.773465][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.789647][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.801221][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  205.812259][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0
[  205.833447][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  205.856598][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  205.870285][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  205.895704][ T5890] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0
[  205.942804][ T5914] usb 5-1: Using ep0 maxpacket: 16
[  205.951725][ T5892] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  205.962841][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.971384][ T5892] usb 2-1: Product: syz
[  205.977164][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.988483][ T5892] usb 2-1: Manufacturer: syz
[  205.993140][ T5892] usb 2-1: SerialNumber: syz
[  205.997909][ T5914] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  206.014278][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0
[  206.033531][ T5890] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  206.044119][ T5890] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  206.045186][ T5892] usb 2-1: config 0 descriptor??
[  206.058197][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.060851][ T5890] usb 4-1: Product: syz
[  206.087305][ T5890] usb 4-1: Manufacturer: syz
[  206.092211][ T5890] usb 4-1: SerialNumber: syz
[  206.111400][ T5890] usb 4-1: config 0 descriptor??
[  206.196173][ T5890] yurex 4-1:0.0: Could not submitting URB
[  206.223035][ T5914] usb 5-1: config 0 descriptor??
[  206.347341][ T5890] yurex 4-1:0.0: probe with driver yurex failed with error -5
[  206.398796][ T7406] fuse: Unknown parameter '#'
[  206.491002][ T7399] dns_resolver: Unsupported content type (8)
[  206.623878][ T5890] usb 4-1: USB disconnect, device number 40
[  206.674458][ T7412] netlink: 'syz.3.378': attribute type 29 has an invalid length.
[  206.772821][ T5914] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  206.917233][   T49] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  206.963119][ T5845] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  207.029898][ T5845] usb 3-1: USB disconnect, device number 29
[  207.099353][ T5914] usb 5-1: USB disconnect, device number 47
[  207.137306][ T5890] usb 4-1: new low-speed USB device number 41 using dummy_hcd
[  207.267449][ T7423] loop8: detected capacity change from 0 to 1
[  207.283171][ T7423] Dev loop8: unable to read RDB block 1
[  207.291188][ T7423]  loop8: unable to read partition table
[  207.297294][ T7423] loop8: partition table beyond EOD, truncated
[  207.306664][   T49] usb 1-1: config 0 has no interfaces?
[  207.318322][   T49] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  207.342611][ T7423] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  207.368510][ T5890] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  207.384170][   T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.408104][ T5890] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  207.478302][   T49] usb 1-1: Product: syz
[  207.684665][ T5890] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  207.771814][   T49] usb 1-1: Manufacturer: syz
[  207.787195][   T49] usb 1-1: SerialNumber: syz
[  207.796783][ T5890] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  207.902797][ T5891] usb 2-1: USB disconnect, device number 51
[  207.950118][   T49] usb 1-1: config 0 descriptor??
[  207.967132][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  208.007409][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  208.079724][ T5890] usb 4-1: string descriptor 0 read error: -22
[  208.086106][ T5890] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  208.201249][ T7413] usb 1-1: USB disconnect, device number 35
[  208.313016][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.656521][ T5890] usb 4-1: config 0 descriptor??
[  208.667825][ T7412] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  208.691891][ T5890] hub 4-1:0.0: bad descriptor, ignoring hub
[  208.708750][ T5890] hub 4-1:0.0: probe with driver hub failed with error -5
[  208.730651][ T5890] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input17
[  208.857241][    C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -1
[  208.966540][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'.
[  209.030418][ T7412] 8021q: VLANs not supported on caif0
[  209.060737][ T7432] netlink: 'syz.3.378': attribute type 29 has an invalid length.
[  209.123192][ T5890] usb 4-1: USB disconnect, device number 41
[  209.129291][    C1] usb_acecad 4-1:0.0: can't resubmit intr, dummy_hcd.3-1/input0, status -19
[  210.197537][ T7456] netlink: 'syz.0.386': attribute type 1 has an invalid length.
[  210.261161][ T5845] IPVS: starting estimator thread 0...
[  210.387179][ T7457] IPVS: using max 37 ests per chain, 88800 per kthread
[  210.748742][ T7462] ALSA: mixer_oss: invalid OSS volume ''
[  210.844164][ T7468] netlink: 'syz.4.389': attribute type 10 has an invalid length.
[  211.142179][ T7458] bond1: (slave veth5): Enslaving as an active interface with a down link
[  211.413314][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'.
[  211.422839][ T7443] openvswitch: netlink: Flow key attr not present in new flow.
[  211.627998][ T7459] bond1: (slave veth7): Enslaving as an active interface with a down link
[  211.686475][ T7468] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  211.867241][ T5891] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  212.057524][ T5889] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  212.067742][ T5891] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  212.076921][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.144750][ T5891] usb 2-1: Product: syz
[  212.179267][ T5891] usb 2-1: Manufacturer: syz
[  212.194944][ T5891] usb 2-1: SerialNumber: syz
[  212.224764][ T5891] usb 2-1: config 0 descriptor??
[  212.290632][ T5891] gspca_main: sunplus-2.14.0 probing 055f:c230
[  212.318177][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'.
[  212.367236][ T5889] usb 4-1: Using ep0 maxpacket: 16
[  212.404394][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short
[  212.474346][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.712034][ T5889] usb 4-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8
[  212.724235][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.739903][ T5889] usb 4-1: config 1 interface 0 has no altsetting 0
[  212.793174][ T7484] netlink: 308 bytes leftover after parsing attributes in process `syz.2.393'.
[  212.836285][ T5889] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  212.865971][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.911882][ T5889] usb 4-1: Product: syz
[  212.944692][ T7485] netlink: 44 bytes leftover after parsing attributes in process `syz.2.393'.
[  212.957160][ T7485] netlink: 67 bytes leftover after parsing attributes in process `syz.2.393'.
[  212.988163][ T5889] usb 4-1: Manufacturer: syz
[  212.992888][ T5889] usb 4-1: SerialNumber: syz
[  213.278717][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.304940][   T30] audit: type=1326 audit(1748208662.312:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  213.328425][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.362091][   T30] audit: type=1326 audit(1748208662.312:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  213.413493][   T30] audit: type=1326 audit(1748208662.312:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  213.619164][   T30] audit: type=1326 audit(1748208662.312:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  213.677875][   T30] audit: type=1326 audit(1748208662.312:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  213.748771][ T7477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  213.757979][ T7477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  213.815197][   T30] audit: type=1326 audit(1748208662.312:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  213.852563][   T30] audit: type=1326 audit(1748208662.312:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  213.885379][   T30] audit: type=1326 audit(1748208662.312:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  213.913297][   T30] audit: type=1326 audit(1748208662.312:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  213.940216][   T30] audit: type=1326 audit(1748208662.312:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7486 comm="syz.4.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71e018e969 code=0x50000
[  214.409667][ T5891] gspca_sunplus: reg_r err -71
[  214.414750][ T5891] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  214.430679][ T5891] usb 2-1: USB disconnect, device number 52
[  214.967930][ T7496] veth0: entered promiscuous mode
[  215.098877][ T7495] veth0: left promiscuous mode
[  215.769653][ T5890] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  215.911020][ T5889] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  216.017175][ T5889] usb 4-1: USB disconnect, device number 42
[  216.130764][ T5890] usb 3-1: Using ep0 maxpacket: 32
[  216.229933][ T5890] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.277104][ T5890] usb 3-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  216.341044][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.371834][ T7514] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'.
[  216.391898][ T5890] usb 3-1: Product: syz
[  216.396129][ T5890] usb 3-1: Manufacturer: syz
[  216.455324][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.402'.
[  216.465579][ T5890] usb 3-1: SerialNumber: syz
[  216.492160][ T5890] usb 3-1: config 0 descriptor??
[  216.511370][ T7519] program syz.0.404 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  216.552543][ T5890] hdpvr 3-1:0.0: Could not find bulk-in endpoint
[  216.663833][ T5890] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12
[  216.782761][ T7525] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  216.985074][ T7527] syz_tun: entered promiscuous mode
[  217.002084][ T7506] Cannot find add_set index 3 as target
[  217.189437][ T7527] macsec1: entered promiscuous mode
[  217.235207][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  217.561387][ T7527] syz_tun: left promiscuous mode
[  218.321735][ T5891] usb 3-1: USB disconnect, device number 30
[  218.988711][   T30] kauditd_printk_skb: 1879 callbacks suppressed
[  218.988731][   T30] audit: type=1326 audit(1748208668.012:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.057099][   T30] audit: type=1326 audit(1748208668.032:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.187880][   T30] audit: type=1326 audit(1748208668.042:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.269134][ T7557] tipc: Started in network mode
[  219.275781][ T7557] tipc: Node identity 00000000000000000000ffff7f000001, cluster identity 4711
[  219.277174][ T5891] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  219.289355][   T30] audit: type=1326 audit(1748208668.042:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.323208][ T7557] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  219.374131][   T30] audit: type=1326 audit(1748208668.042:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.442623][   T30] audit: type=1326 audit(1748208668.042:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.543806][   T30] audit: type=1326 audit(1748208668.042:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.567202][ T5891] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  219.582907][ T5891] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  219.623563][ T5891] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  219.654601][   T30] audit: type=1326 audit(1748208668.042:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.677233][   T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  219.692710][   T30] audit: type=1326 audit(1748208668.042:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.696272][ T5891] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  219.724629][   T30] audit: type=1326 audit(1748208668.042:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7551 comm="syz.3.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  219.837094][   T10] usb 4-1: Using ep0 maxpacket: 32
[  219.843818][   T10] usb 4-1: config 2 has an invalid interface number: 157 but max is 0
[  219.853225][   T10] usb 4-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  219.873947][   T10] usb 4-1: config 2 has no interface number 1
[  219.917126][   T10] usb 4-1: too many endpoints for config 2 interface 0 altsetting 5: 142, using maximum allowed: 30
[  219.920774][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.936983][ T5891] usb 3-1: Product: 댗��늘ᓓ奆桙�땨ᡲ콧媱싺᫋駵ᄎ襞㼠쭵�훖濘ⵇ�莟䕳욦쟔ṣ晲
[  219.984593][   T10] usb 4-1: config 2 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 142
[  219.998385][   T10] usb 4-1: config 2 interface 0 has no altsetting 0
[  220.004960][ T5891] usb 3-1: Manufacturer: ᘄᤌꡅ켚誇餵�뼳�妽�扬檟梧ʇ蛣㮯풃�ꆔ풩��軉�椆�룇�ˋ霉઩�䑞晖瓺ḑ多奙굢ܞ撥譓�਷夎ᶫᒇ䰷���ퟰ�׫�徽�⢎㘩둜�嚭㿕퉦ᨧ垙ᷗ�⎓輄炩
[  220.032836][   T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  220.042315][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.050739][   T10] usb 4-1: Product: syz
[  220.055163][   T10] usb 4-1: Manufacturer: syz
[  220.060177][   T10] usb 4-1: SerialNumber: syz
[  220.085614][ T5891] usb 3-1: SerialNumber: á Š
[  220.096851][   T10] imon 4-1:2.157: inconsistent driver matching
[  220.112328][   T10] imon 4-1:2.157: unable to register, err -22
[  220.174857][   T10] imon 4-1:2.157: probe with driver imon failed with error -22
[  220.361987][ T5891] usb 3-1: 0:2 : does not exist
[  220.399092][ T5891] usb 3-1: USB disconnect, device number 31
[  220.414044][ T7574] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  220.610491][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  220.908180][   T10] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  220.917214][ T5889] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  220.953791][   T10] imon 4-1:2.0: unable to initialize intf0, err -19
[  220.983712][   T10] imon:imon_probe: failed to initialize context!
[  221.039627][   T10] imon 4-1:2.0: unable to register, err -19
[  221.067179][ T5891] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  221.087148][ T5889] usb 5-1: Using ep0 maxpacket: 8
[  221.094074][ T5889] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  221.103444][ T5889] usb 5-1: config 0 has no interface number 1
[  221.110032][ T5889] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  221.119668][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.131134][   T10] usb 4-1: USB disconnect, device number 43
[  221.132788][ T5889] usb 5-1: config 0 descriptor??
[  221.218367][ T5891] usb 3-1: Using ep0 maxpacket: 32
[  221.226653][ T5891] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 208, changing to 11
[  221.394387][ T5889] qcserial 5-1:0.2: Qualcomm USB modem converter detected
[  221.403897][ T5891] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  221.512530][ T5891] usb 3-1: config 1 interface 0 has no altsetting 0
[  221.564403][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.419'.
[  221.610500][ T5891] usb 3-1: New USB device found, idVendor=056a, idProduct=010f, bcdDevice= 0.40
[  221.626507][ T7583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.419'.
[  221.638774][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.660086][ T7585] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  221.670287][ T5891] usb 3-1: Product: င
[  221.670310][ T5891] usb 3-1: Manufacturer: �箤㛳ﯗ湸쑀䴗䊅듲蔈巬㈆峇�庒䲂�䈣
[  221.670330][ T5891] usb 3-1: SerialNumber: á°‰
[  221.748707][ T7588] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  221.847949][ T7590] loop7: detected capacity change from 0 to 16384
[  221.943354][ T5891] usbhid 3-1:1.0: can't add hid device: -71
[  221.964028][ T5891] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  222.005497][ T5891] usb 3-1: USB disconnect, device number 32
[  222.037174][ T5914] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  222.176062][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.422'.
[  222.229226][ T7593] loop7: detected capacity change from 16384 to 16383
[  222.243871][ T5914] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  222.314689][ T5914] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  222.365368][ T5914] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  222.456413][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  222.505880][ T5914] usb 4-1: SerialNumber: syz
[  222.837575][ T5914] usb 4-1: 0:2 : does not exist
[  222.842503][ T5914] usb 4-1: unit 5 not found!
[  222.931854][ T5914] usb 4-1: USB disconnect, device number 44
[  223.031301][ T5839] udevd[5839]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  223.089179][   T49] usb 5-1: USB disconnect, device number 48
[  223.175578][   T49] qcserial 5-1:0.2: device disconnected
[  223.189668][ T7573] delete_channel: no stack
[  223.278150][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.426'.
[  223.394812][ T7615] FAULT_INJECTION: forcing a failure.
[  223.394812][ T7615] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  223.416452][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.4.427 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) 
[  223.416481][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  223.416500][ T7615] Call Trace:
[  223.416512][ T7615]  <TASK>
[  223.416523][ T7615]  dump_stack_lvl+0x189/0x250
[  223.416568][ T7615]  ? __lock_acquire+0xaac/0xd20
[  223.416602][ T7615]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.416632][ T7615]  ? __pfx__printk+0x10/0x10
[  223.416652][ T7615]  ? __might_fault+0xb0/0x130
[  223.416692][ T7615]  should_fail_ex+0x414/0x560
[  223.416720][ T7615]  copy_fpstate_to_sigframe+0xa65/0xcc0
[  223.416750][ T7615]  ? copy_fpstate_to_sigframe+0x180/0xcc0
[  223.416778][ T7615]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[  223.416798][ T7615]  ? trace_sched_exit_tp+0x38/0x120
[  223.416859][ T7615]  ? fpu__alloc_mathframe+0xa8/0x130
[  223.416884][ T7615]  get_sigframe+0x58d/0x7d0
[  223.416910][ T7615]  ? __pfx_get_sigframe+0x10/0x10
[  223.416938][ T7615]  ? rcu_is_watching+0x15/0xb0
[  223.416960][ T7615]  x64_setup_rt_frame+0x15c/0xd40
[  223.416982][ T7615]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  223.417018][ T7615]  ? irqentry_exit+0x74/0x90
[  223.417042][ T7615]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.417073][ T7615]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  223.417094][ T7615]  ? arch_do_signal_or_restart+0x331/0x780
[  223.417121][ T7615]  arch_do_signal_or_restart+0x3e5/0x780
[  223.417145][ T7615]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  223.417179][ T7615]  ? local_irq_enable_exit_to_user+0x5/0x10
[  223.417214][ T7615]  syscall_exit_to_user_mode+0x8b/0x120
[  223.417240][ T7615]  do_syscall_64+0x103/0x210
[  223.417269][ T7615]  ? clear_bhb_loop+0x60/0xb0
[  223.417294][ T7615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.417313][ T7615] RIP: 0033:0x7f71e018d41f
[  223.417336][ T7615] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  223.417352][ T7615] RSP: 002b:00007f71e0f9e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  223.417373][ T7615] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00007f71e018d41f
[  223.417386][ T7615] RDX: 0000000000000001 RSI: 00007f71e0f9e090 RDI: 0000000000000004
[  223.417398][ T7615] RBP: 00007f71e0f9e090 R08: 0000000000000000 R09: 00007f71e0f9ddf7
[  223.417412][ T7615] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[  223.417424][ T7615] R13: 0000000000000000 R14: 00007f71e03b5fa0 R15: 00007f71e04dfa28
[  223.417454][ T7615]  </TASK>
[  223.875794][ T7625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.430'.
[  223.887124][   T49] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  224.047999][   T49] usb 2-1: Using ep0 maxpacket: 16
[  224.106888][ T7632] netlink: 40 bytes leftover after parsing attributes in process `syz.2.432'.
[  224.149042][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  224.181379][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  224.191388][   T49] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.00
[  224.200819][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.224098][   T49] usb 2-1: config 0 descriptor??
[  224.647279][   T49] apple 0003:05AC:0246.000E: reserved main item tag 0xd
[  224.654365][   T49] apple 0003:05AC:0246.000E: unexpected long global item
[  224.798063][   T49] apple 0003:05AC:0246.000E: parse failed
[  224.804313][   T49] apple 0003:05AC:0246.000E: probe with driver apple failed with error -22
[  224.843473][ T5914] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  224.850685][   T49] usb 2-1: USB disconnect, device number 53
[  225.145632][ T5914] usb 5-1: Using ep0 maxpacket: 16
[  225.161588][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short
[  225.219218][ T7652] vlan2: entered promiscuous mode
[  225.225601][ T7652] vlan2: entered allmulticast mode
[  225.254949][ T5914] usb 5-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8
[  225.280098][ T7652] hsr_slave_1: entered allmulticast mode
[  225.340941][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'.
[  225.355270][ T5914] usb 5-1: config 1 interface 0 has no altsetting 0
[  225.452260][ T5914] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  225.498434][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.581263][ T5914] usb 5-1: Product: syz
[  225.615077][ T5914] usb 5-1: Manufacturer: syz
[  225.790280][ T5914] usb 5-1: SerialNumber: syz
[  225.846121][ T7660] fuse: Bad value for 'fd'
[  226.704062][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  226.724059][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  226.753246][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  226.782200][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  226.805390][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  226.825580][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  226.852223][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  226.864264][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  226.883991][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  227.036399][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'.
[  227.305506][   T30] kauditd_printk_skb: 148 callbacks suppressed
[  227.305523][   T30] audit: type=1326 audit(1748208676.322:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da152ab39 code=0x7ffc0000
[  227.334025][    C0] vkms_vblank_simulate: vblank timer overrun
[  227.526289][   T30] audit: type=1326 audit(1748208676.372:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da158e969 code=0x7ffc0000
[  227.548885][    C0] vkms_vblank_simulate: vblank timer overrun
[  227.734423][   T30] audit: type=1326 audit(1748208676.372:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1da158e969 code=0x7ffc0000
[  227.907140][   T30] audit: type=1326 audit(1748208676.382:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da152ab39 code=0x7ffc0000
[  228.039012][ T5914] usbhid 5-1:1.0: couldn't find an input interrupt endpoint
[  228.072354][   T30] audit: type=1326 audit(1748208676.382:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da152ab39 code=0x7ffc0000
[  228.132334][ T5914] usb 5-1: USB disconnect, device number 49
[  228.196390][   T30] audit: type=1326 audit(1748208676.382:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da152ab39 code=0x7ffc0000
[  228.284797][   T30] audit: type=1326 audit(1748208676.382:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da152ab39 code=0x7ffc0000
[  228.385617][   T30] audit: type=1326 audit(1748208676.382:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da152ab39 code=0x7ffc0000
[  228.439985][ T7689] fuse: Bad value for 'fd'
[  228.490727][   T30] audit: type=1326 audit(1748208676.382:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da152ab39 code=0x7ffc0000
[  228.517201][ T5845] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  228.575572][   T30] audit: type=1326 audit(1748208676.382:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7677 comm="syz.0.443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1da152ab39 code=0x7ffc0000
[  228.707256][ T5845] usb 2-1: Using ep0 maxpacket: 16
[  228.770616][ T5845] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  228.827314][ T5845] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.847796][ T5845] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.871343][ T5845] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  228.924094][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.955335][ T5845] usb 2-1: Product: syz
[  228.967128][ T5845] usb 2-1: Manufacturer: syz
[  228.990498][ T5845] usb 2-1: SerialNumber: syz
[  229.452058][ T5845] usb 2-1: 0:2 : does not exist
[  229.677619][ T5914] usb 4-1: new low-speed USB device number 45 using dummy_hcd
[  229.808913][ T5914] usb 4-1: device descriptor read/64, error -71
[  230.067292][ T5914] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[  230.227820][ T5914] usb 4-1: device descriptor read/64, error -71
[  230.337702][ T5914] usb usb4-port1: attempt power cycle
[  230.597168][   T49] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  230.697312][ T5914] usb 4-1: new low-speed USB device number 47 using dummy_hcd
[  230.758001][ T5914] usb 4-1: device descriptor read/8, error -71
[  230.770865][   T49] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.792213][   T49] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  230.817097][   T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.842137][   T49] usb 3-1: config 0 descriptor??
[  230.997271][ T5914] usb 4-1: new low-speed USB device number 48 using dummy_hcd
[  231.047886][ T5914] usb 4-1: device descriptor read/8, error -71
[  231.138247][   T49] usbhid 3-1:0.0: can't add hid device: -71
[  231.158149][ T5914] usb usb4-port1: unable to enumerate USB device
[  231.187265][   T49] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  231.195398][ T7732] netlink: 'syz.2.460': attribute type 21 has an invalid length.
[  231.214788][   T49] usb 3-1: USB disconnect, device number 33
[  231.588893][ T5914] usb 2-1: USB disconnect, device number 54
[  231.671734][ T7739] netlink: 'syz.4.462': attribute type 3 has an invalid length.
[  232.069807][ T5892] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  232.308947][ T5892] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.333235][ T5892] usb 5-1: config 0 interface 0 has no altsetting 0
[  232.343514][ T5892] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  232.353170][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.383533][ T5892] usb 5-1: config 0 descriptor??
[  232.772616][ T7762] ipvlan0: entered promiscuous mode
[  232.780633][ T7762] ipvlan0: entered allmulticast mode
[  232.786079][ T7762] veth0_vlan: entered allmulticast mode
[  232.815465][ T5892] usbhid 5-1:0.0: can't add hid device: -71
[  232.847337][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  232.885935][ T5892] usb 5-1: USB disconnect, device number 50
[  233.227427][   T49] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  233.247173][ T5914] usb 2-1: new low-speed USB device number 55 using dummy_hcd
[  233.387169][ T5914] usb 2-1: device descriptor read/64, error -71
[  233.397760][   T49] usb 3-1: Using ep0 maxpacket: 16
[  233.408048][   T49] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  233.422124][   T49] usb 3-1: config 0 has no interface number 0
[  233.428423][   T49] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.444749][   T49] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.454704][   T49] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  233.464080][ T5889] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  233.475238][   T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.478261][ T7780] batman_adv: batadv0: Adding interface: dummy0
[  233.490430][ T7780] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  233.494045][   T49] usb 3-1: config 0 descriptor??
[  233.521160][ T7780] batman_adv: batadv0: Interface activated: dummy0
[  233.548102][ T7780] batadv0: mtu less than device minimum
[  233.554939][ T7780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.566953][ T7780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.578452][ T7780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.590483][ T7780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.602039][ T7780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.613614][ T7780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.625087][ T7780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.636682][ T7780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.648211][ T7780] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  233.662774][ T5914] usb 2-1: new low-speed USB device number 56 using dummy_hcd
[  233.700526][ T5889] usb 4-1: Using ep0 maxpacket: 8
[  233.707535][ T5889] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  233.715840][ T5889] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  233.725844][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  233.746952][ T5889] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  233.757257][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  233.770503][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  233.780585][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.798628][ T5914] usb 2-1: device descriptor read/64, error -71
[  233.919825][ T5914] usb usb2-port1: attempt power cycle
[  234.012256][ T5889] usb 4-1: usb_control_msg returned -32
[  234.018112][ T5889] usbtmc 4-1:16.0: can't read capabilities
[  234.163355][   T49] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.000F/input/input19
[  234.177180][ T5845] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  234.266962][   T49] input: HID 28bd:0071 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0071.000F/input/input20
[  234.278937][ T5914] usb 2-1: new low-speed USB device number 57 using dummy_hcd
[  234.309168][ T5914] usb 2-1: device descriptor read/8, error -71
[  234.329933][   T49] uclogic 0003:28BD:0071.000F: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.2-1/input1
[  234.385729][ T7786] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0
[  234.404270][ T5845] usb 5-1: config 0 has no interfaces?
[  234.417309][   T49] usb 3-1: USB disconnect, device number 34
[  234.480219][ T5845] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  234.491264][ T5845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.503906][ T5845] usb 5-1: Product: syz
[  234.514380][ T5845] usb 5-1: Manufacturer: syz
[  234.525361][ T5845] usb 5-1: SerialNumber: syz
[  234.545433][ T5845] usb 5-1: config 0 descriptor??
[  234.568135][ T7787] fido_id[7787]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  234.583382][ T5914] usb 2-1: new low-speed USB device number 58 using dummy_hcd
[  234.610025][ T5914] usb 2-1: device descriptor read/8, error -71
[  234.717310][ T5914] usb usb2-port1: unable to enumerate USB device
[  235.137267][ T5914] usb 4-1: USB disconnect, device number 49
[  235.609393][ T7803] vlan2: entered promiscuous mode
[  235.614804][ T7803] vlan2: entered allmulticast mode
[  235.620519][ T7803] hsr_slave_1: entered allmulticast mode
[  235.679870][ T7803] __nla_validate_parse: 48 callbacks suppressed
[  235.679885][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'.
[  236.338135][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'.
[  236.397370][   T49] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  236.557170][   T49] usb 2-1: Using ep0 maxpacket: 16
[  236.639705][   T49] usb 2-1: unable to get BOS descriptor or descriptor too short
[  236.668404][   T49] usb 2-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8
[  236.727888][   T49] usb 2-1: config 1 interface 0 has no altsetting 0
[  236.755356][   T49] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  236.890569][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.899408][ T5914] usb 5-1: USB disconnect, device number 51
[  237.032135][   T49] usb 2-1: Product: syz
[  237.058046][   T49] usb 2-1: Manufacturer: syz
[  237.108314][   T49] usb 2-1: SerialNumber: syz
[  237.907131][ T5892] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  238.059690][ T5892] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  238.068285][ T5892] usb 4-1: config 0 has no interface number 0
[  238.080064][ T5892] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  238.097070][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.123861][ T5892] usb 4-1: Product: syz
[  238.198957][ T5892] usb 4-1: Manufacturer: syz
[  238.250875][ T5892] usb 4-1: SerialNumber: syz
[  238.359704][ T5892] usb 4-1: config 0 descriptor??
[  238.744968][ T5892] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  238.764661][ T5892] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  238.796897][ T5892] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  238.816784][ T5892] usb 4-1: media controller created
[  238.947288][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  238.966239][   T30] kauditd_printk_skb: 393 callbacks suppressed
[  238.966259][   T30] audit: type=1326 audit(1748208687.982:2646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  238.995053][    C1] vkms_vblank_simulate: vblank timer overrun
[  239.245105][   T30] audit: type=1326 audit(1748208687.982:2647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  239.308588][ T5892] i2c i2c-2: ec100: i2c rd failed=-71 reg=33
[  239.347399][   T30] audit: type=1326 audit(1748208688.022:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  239.412265][   T30] audit: type=1326 audit(1748208688.022:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  239.538418][ T5892] usb 4-1: USB disconnect, device number 50
[  239.588052][   T30] audit: type=1326 audit(1748208688.022:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  239.610266][    C1] vkms_vblank_simulate: vblank timer overrun
[  239.747179][   T30] audit: type=1326 audit(1748208688.022:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  239.789412][ T7848] block device autoloading is deprecated and will be removed.
[  239.821750][ T7848] syz.2.495: attempt to access beyond end of device
[  239.821750][ T7848] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  239.838790][   T30] audit: type=1326 audit(1748208688.022:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  239.861178][    C1] vkms_vblank_simulate: vblank timer overrun
[  239.878298][ T5889] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  239.907112][   T30] audit: type=1326 audit(1748208688.022:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  239.929410][    C1] vkms_vblank_simulate: vblank timer overrun
[  239.988063][   T30] audit: type=1326 audit(1748208688.022:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7835 comm="syz.3.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x7ffc0000
[  240.010314][    C1] vkms_vblank_simulate: vblank timer overrun
[  240.051008][   T49] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  240.091147][ T5889] usb 3-1: Using ep0 maxpacket: 16
[  240.106379][ T5889] usb 3-1: config 8 has an invalid interface number: 39 but max is 0
[  240.114836][ T5889] usb 3-1: config 8 has no interface number 0
[  240.125897][   T49] usb 2-1: USB disconnect, device number 59
[  240.134753][ T5889] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F
[  240.165199][ T5889] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0
[  240.175491][ T5889] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0
[  240.197505][ T5889] usb 3-1: config 8 interface 39 has no altsetting 0
[  240.210457][ T5889] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77
[  240.220429][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.257181][ T5889] usb 3-1: Product: syz
[  240.276228][ T5889] usb 3-1: Manufacturer: syz
[  240.287272][ T5892] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  240.295033][ T5889] usb 3-1: SerialNumber: syz
[  240.447319][ T5892] usb 4-1: Using ep0 maxpacket: 8
[  240.469167][ T5892] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  240.495187][ T5892] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  240.541818][ T5892] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1568, setting to 1024
[  240.576366][ T5892] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  240.613099][ T5892] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.647329][ T5892] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  240.688107][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.910666][   T49] usb 2-1: new low-speed USB device number 60 using dummy_hcd
[  240.985772][ T5892] usb 4-1: GET_CAPABILITIES returned 0
[  241.008172][ T5892] usbtmc 4-1:16.0: can't read capabilities
[  241.037531][ T5889] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: -110
[  241.054854][ T5889] ipheth 3-1:8.39: probe with driver ipheth failed with error -110
[  241.068005][   T49] usb 2-1: Invalid ep0 maxpacket: 64
[  241.227261][   T49] usb 2-1: new low-speed USB device number 61 using dummy_hcd
[  241.337653][ T5892] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  241.387142][   T49] usb 2-1: Invalid ep0 maxpacket: 64
[  241.393157][   T49] usb usb2-port1: attempt power cycle
[  241.497167][ T5892] usb 5-1: Using ep0 maxpacket: 32
[  241.504446][ T5892] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  241.512943][ T5892] usb 5-1: config 0 has no interface number 0
[  241.522148][ T5892] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  241.531483][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.540065][ T5892] usb 5-1: Product: syz
[  241.544363][ T5892] usb 5-1: Manufacturer: syz
[  241.550103][ T5892] usb 5-1: SerialNumber: syz
[  241.557585][ T5892] usb 5-1: config 0 descriptor??
[  241.572978][ T5892] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  241.737236][   T49] usb 2-1: new low-speed USB device number 62 using dummy_hcd
[  241.760033][   T49] usb 2-1: Invalid ep0 maxpacket: 64
[  241.778358][ T5892] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  241.795880][ T5892] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  241.887566][   T49] usb 2-1: new low-speed USB device number 63 using dummy_hcd
[  241.917818][   T49] usb 2-1: Invalid ep0 maxpacket: 64
[  241.923657][   T49] usb usb2-port1: unable to enumerate USB device
[  241.975864][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48
[  242.176688][    C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  242.186194][ T5892] usb 5-1: USB disconnect, device number 52
[  242.201832][ T5892] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  242.217760][ T5892] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  242.241632][ T5892] quatech2 5-1:0.51: device disconnected
[  242.368296][ T5914] usb 3-1: USB disconnect, device number 35
[  242.827727][   T49] usb 4-1: USB disconnect, device number 51
[  242.857274][ T5914] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  242.914425][ T7883] netlink: 'syz.3.507': attribute type 12 has an invalid length.
[  243.015840][    C1] vkms_vblank_simulate: vblank timer overrun
[  243.032044][ T5914] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  243.041780][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.054494][ T5914] usb 3-1: config 0 descriptor??
[  243.157953][ T5845] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  243.279549][ T5914] [drm] vendor descriptor length:6 data:06 5f 2c 00 00 00 00 00 00 00 00
[  243.288380][ T5914] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  243.317177][ T5845] usb 5-1: Using ep0 maxpacket: 8
[  243.331748][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.344489][ T5892] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  243.352357][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.352419][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  243.352468][ T5845] usb 5-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00
[  243.423194][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.457597][ T5845] usb 5-1: config 0 descriptor??
[  243.491801][ T5914] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  243.503512][ T5914] [drm] Initialized udl on minor 2
[  243.607294][ T5892] usb 4-1: Using ep0 maxpacket: 16
[  243.674685][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.696815][ T5914] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed
[  243.707707][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short
[  243.780749][ T5914] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  243.783312][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.854585][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  243.883532][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  243.892523][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  243.904579][ T5914] usb 3-1: USB disconnect, device number 36
[  243.911157][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  243.928584][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  243.942158][ T5892] usb 4-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8
[  243.956161][ T5892] usb 4-1: config 1 interface 0 has no altsetting 0
[  243.985909][ T5892] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  243.995402][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.011830][ T5892] usb 4-1: Product: syz
[  244.016156][ T5892] usb 4-1: Manufacturer: syz
[  244.024680][ T5845] usbhid 5-1:0.0: can't add hid device: -71
[  244.035052][ T5845] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  244.045170][ T5892] usb 4-1: SerialNumber: syz
[  244.062512][ T5845] usb 5-1: USB disconnect, device number 53
[  244.109033][   T49] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  244.267168][   T49] usb 2-1: Using ep0 maxpacket: 16
[  244.297603][   T49] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  244.320128][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.403872][   T49] usb 2-1: Product: syz
[  244.429726][   T49] usb 2-1: Manufacturer: syz
[  244.454995][   T49] usb 2-1: SerialNumber: syz
[  244.520008][   T49] usb 2-1: config 0 descriptor??
[  244.560053][   T49] as10x_usb: device has been detected
[  244.590078][   T49] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  244.633761][ T5889] IPVS: starting estimator thread 0...
[  244.688481][   T49] usb 2-1: DVB: registering adapter 2 frontend 0 (Sky IT Digital Key (green led))...
[  244.727409][ T7899] IPVS: using max 27 ests per chain, 64800 per kthread
[  244.752510][ T7892] random: crng reseeded on system resumption
[  244.775550][ T7901] netlink: 32 bytes leftover after parsing attributes in process `syz.4.512'.
[  244.813864][   T49] as10x_usb: error during firmware upload part1
[  244.832433][   T49] Registered device Sky IT Digital Key (green led)
[  245.671448][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  245.682096][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  245.918635][ T7892] dummy0: entered promiscuous mode
[  245.927480][ T5845] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  245.931328][ T7892] vlan2: entered promiscuous mode
[  246.072756][ T5914] usb 2-1: USB disconnect, device number 64
[  246.117605][ T5845] usb 3-1: Using ep0 maxpacket: 8
[  246.125158][ T5914] Unregistered device Sky IT Digital Key (green led)
[  246.134024][ T5914] as10x_usb: device has been disconnected
[  246.158436][ T5845] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  246.168310][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  246.208754][ T5845] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.222213][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  246.235580][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  246.250998][ T5845] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  246.260321][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  246.277152][ T5845] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.311686][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  246.323192][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  246.335417][ T5845] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  246.343528][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  246.355231][ T5845] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  246.367391][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  246.416516][ T5892] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  246.440978][ T5892] usb 4-1: USB disconnect, device number 52
[  246.451809][ T5845] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  246.477971][ T5845] usb 3-1: string descriptor 0 read error: -22
[  246.484750][ T5845] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  246.495563][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.527625][ T5845] adutux 3-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  246.730419][ T5889] usb 3-1: USB disconnect, device number 37
[  248.088223][   T49] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  248.197837][ T7954] fuse: Bad value for 'user_id'
[  248.202936][ T7954] fuse: Bad value for 'user_id'
[  248.248900][   T49] usb 2-1: too many configurations: 9, using maximum allowed: 8
[  248.258982][   T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.268556][   T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.503160][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.520400][   T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.529852][   T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.541145][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.547880][ T5889] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[  248.558391][   T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.567774][   T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.579016][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.605606][   T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.619290][   T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.634554][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.654390][   T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.663919][   T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.687701][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.699433][ T5889] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  248.717677][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5
[  248.746010][   T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.760515][   T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.781310][ T5889] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  248.798297][ T5889] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  248.816741][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.830747][ T5889] usb 3-1: Manufacturer: syz
[  248.840661][   T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.878914][ T5889] usb 3-1: config 0 descriptor??
[  248.888868][   T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.907974][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.932523][   T49] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[  248.944422][   T49] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  248.955702][   T49] usb 2-1: config 0 interface 0 has no altsetting 0
[  248.987800][   T49] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  248.996981][   T49] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  249.006370][   T49] usb 2-1: Product: syz
[  249.011096][   T49] usb 2-1: Manufacturer: syz
[  249.015771][   T49] usb 2-1: SerialNumber: syz
[  249.044278][   T49] usb 2-1: config 0 descriptor??
[  249.066484][   T49] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[  249.165570][ T5889] usb 3-1: USB disconnect, device number 38
[  249.171670][ T5891] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  249.369323][ T5891] usb 5-1: config 0 has an invalid interface number: 255 but max is 0
[  249.378174][ T5891] usb 5-1: config 0 has no interface number 0
[  249.384380][ T5891] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  249.467077][ T5891] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  249.467182][ T5892] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  249.480654][ T5891] usb 5-1: config 0 interface 255 has no altsetting 0
[  249.480719][ T5891] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  249.480743][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.485793][ T5891] usb 5-1: config 0 descriptor??
[  249.526479][   T24] usb 2-1: USB disconnect, device number 65
[  249.553752][   T24] yurex 2-1:0.0: USB YUREX #0 now disconnected
[  249.592435][ T5891] ums-realtek 5-1:0.255: USB Mass Storage device detected
[  249.847355][ T5892] usb 4-1: Using ep0 maxpacket: 16
[  249.907208][   T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  249.923573][ T5892] usb 4-1: unable to get BOS descriptor or descriptor too short
[  249.943319][ T5892] usb 4-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8
[  249.966122][ T5892] usb 4-1: config 1 interface 0 has no altsetting 0
[  249.982066][ T5892] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  249.991506][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.999662][ T5892] usb 4-1: Product: syz
[  250.014558][ T5892] usb 4-1: Manufacturer: syz
[  250.106655][ T5892] usb 4-1: SerialNumber: syz
[  250.141055][ T7975] hsr0: entered promiscuous mode
[  250.146752][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.529'.
[  250.210704][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.231105][ T7975] hsr_slave_0: left promiscuous mode
[  250.262990][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.281667][ T7975] hsr0 (unregistering): left promiscuous mode
[  250.308923][ T5914] usb 5-1: USB disconnect, device number 54
[  250.453234][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  250.517702][   T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  250.553589][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.610857][   T24] usb 2-1: config 0 descriptor??
[  250.698183][ T5889] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0
[  250.756075][ T5889] hid-generic 0000:0000:0000.0010: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  251.050819][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  251.061916][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  251.106754][   T24] usb 2-1: USB disconnect, device number 66
[  251.765769][ T7986] FAULT_INJECTION: forcing a failure.
[  251.765769][ T7986] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  251.847717][ T7986] CPU: 0 UID: 0 PID: 7986 Comm: syz.1.533 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) 
[  251.847747][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  251.847771][ T7986] Call Trace:
[  251.847783][ T7986]  <TASK>
[  251.847791][ T7986]  dump_stack_lvl+0x189/0x250
[  251.847829][ T7986]  ? __pfx_dump_stack_lvl+0x10/0x10
[  251.847858][ T7986]  ? __pfx__printk+0x10/0x10
[  251.847891][ T7986]  should_fail_ex+0x414/0x560
[  251.847918][ T7986]  _copy_to_user+0x31/0xb0
[  251.847949][ T7986]  simple_read_from_buffer+0xe1/0x170
[  251.847980][ T7986]  proc_fail_nth_read+0x1df/0x250
[  251.848012][ T7986]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  251.848044][ T7986]  ? rw_verify_area+0x258/0x650
[  251.848066][ T7986]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  251.848096][ T7986]  vfs_read+0x1fd/0x980
[  251.848142][ T7986]  ? __pfx___mutex_lock+0x10/0x10
[  251.848169][ T7986]  ? __pfx_vfs_read+0x10/0x10
[  251.848193][ T7986]  ? __fget_files+0x2a/0x420
[  251.848224][ T7986]  ? __fget_files+0x3a0/0x420
[  251.848249][ T7986]  ? __fget_files+0x2a/0x420
[  251.848284][ T7986]  ksys_read+0x145/0x250
[  251.848305][ T7986]  ? rcu_is_watching+0x15/0xb0
[  251.848325][ T7986]  ? __pfx_ksys_read+0x10/0x10
[  251.848352][ T7986]  ? do_syscall_64+0xba/0x210
[  251.848382][ T7986]  do_syscall_64+0xf6/0x210
[  251.848409][ T7986]  ? clear_bhb_loop+0x60/0xb0
[  251.848434][ T7986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.848453][ T7986] RIP: 0033:0x7f5aac18d37c
[  251.848471][ T7986] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  251.848488][ T7986] RSP: 002b:00007f5aacf80030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  251.848510][ T7986] RAX: ffffffffffffffda RBX: 00007f5aac3b5fa0 RCX: 00007f5aac18d37c
[  251.848525][ T7986] RDX: 000000000000000f RSI: 00007f5aacf800a0 RDI: 0000000000000004
[  251.848537][ T7986] RBP: 00007f5aacf80090 R08: 0000000000000000 R09: 000000000000001c
[  251.848556][ T7986] R10: fffffefffffbffaf R11: 0000000000000246 R12: 0000000000000001
[  251.848569][ T7986] R13: 0000000000000000 R14: 00007f5aac3b5fa0 R15: 00007f5aac4dfa28
[  251.848600][ T7986]  </TASK>
[  253.094620][ T5892] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  253.164260][ T5892] usb 4-1: USB disconnect, device number 54
[  253.947102][ T5914] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  254.067178][ T5889] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  254.087318][ T5914] usb 4-1: device descriptor read/64, error -71
[  254.230963][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.261531][ T5889] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  254.311774][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.322637][ T5889] usb 3-1: config 0 descriptor??
[  254.333735][ T5889] pwc: Askey VC010 type 2 USB webcam detected.
[  254.342127][ T5914] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  254.477330][ T5914] usb 4-1: device descriptor read/64, error -71
[  254.600133][ T5914] usb usb4-port1: attempt power cycle
[  254.627600][ T5892] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  254.786023][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00
[  254.804573][ T5889] pwc: recv_control_msg error -32 req 02 val 2700
[  254.812743][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00
[  254.822336][ T5889] pwc: recv_control_msg error -32 req 04 val 1000
[  254.829979][ T5889] pwc: recv_control_msg error -32 req 04 val 1300
[  254.840829][ T5889] pwc: recv_control_msg error -32 req 04 val 1400
[  254.844562][ T5892] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.866068][ T5892] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  254.875178][ T5892] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  254.890036][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.976549][ T5889] pwc: recv_control_msg error -32 req 02 val 2000
[  255.014572][ T5892] usb 5-1: config 0 descriptor??
[  255.018919][ T5889] pwc: recv_control_msg error -32 req 02 val 2100
[  255.023784][ T5892] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  255.037118][ T5914] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  255.045337][ T5889] pwc: recv_control_msg error -32 req 04 val 1500
[  255.048202][ T5892] dvb-usb: bulk message failed: -22 (3/0)
[  255.061968][ T5914] usb 4-1: device descriptor read/8, error -71
[  255.078212][ T5889] pwc: recv_control_msg error -32 req 02 val 2500
[  255.637486][ T5892] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  255.656782][ T5892] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  255.686690][ T5892] usb 5-1: media controller created
[  255.699206][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  255.744055][ T5892] dvb-usb: bulk message failed: -22 (6/0)
[  255.758820][ T5914] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  255.767606][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.774121][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  255.801851][ T5889] pwc: recv_control_msg error -32 req 02 val 2400
[  255.808454][ T5892] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  255.812971][ T5892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input21
[  255.836126][ T5914] usb 4-1: device descriptor read/8, error -71
[  255.837368][ T5889] pwc: recv_control_msg error -32 req 02 val 2600
[  255.859944][ T5892] dvb-usb: schedule remote query interval to 150 msecs.
[  255.866963][ T5892] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  255.880889][ T5889] pwc: recv_control_msg error -32 req 02 val 2900
[  255.899236][ T5889] pwc: recv_control_msg error -32 req 02 val 2800
[  255.916363][ T5892] usb 5-1: USB disconnect, device number 55
[  255.948018][ T5914] usb usb4-port1: unable to enumerate USB device
[  256.011004][ T5892] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  256.131991][ T5889] pwc: recv_control_msg error -71 req 04 val 1200
[  256.165197][ T5889] pwc: Registered as video103.
[  256.201111][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[  256.303054][ T5889] usb 3-1: USB disconnect, device number 39
[  256.328483][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'.
[  256.967252][   T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  257.157326][   T24] usb 4-1: device descriptor read/64, error -71
[  257.407207][   T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  257.537266][   T24] usb 4-1: device descriptor read/64, error -71
[  257.609572][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'.
[  257.712413][   T24] usb usb4-port1: attempt power cycle
[  257.882265][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'.
[  257.920562][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'.
[  258.267149][   T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  258.355047][ T5838] Bluetooth: hci0: SCO packet for unknown connection handle 200
[  258.370286][   T24] usb 4-1: device descriptor read/8, error -71
[  258.627091][ T5889] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  258.655340][   T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  258.706416][   T24] usb 4-1: device descriptor read/8, error -71
[  258.727165][ T5914] usb 5-1: new low-speed USB device number 56 using dummy_hcd
[  258.807106][ T5889] usb 3-1: Using ep0 maxpacket: 16
[  258.816374][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 62320, setting to 1024
[  258.828387][   T24] usb usb4-port1: unable to enumerate USB device
[  258.857828][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  258.900696][ T5889] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  258.910399][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.927650][ T5889] usb 3-1: Product: syz
[  258.937691][ T5889] usb 3-1: Manufacturer: syz
[  258.954493][ T5889] usb 3-1: SerialNumber: syz
[  258.980483][ T5889] usb 3-1: config 0 descriptor??
[  259.014425][ T8077] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  259.024172][ T5889] hub 3-1:0.0: bad descriptor, ignoring hub
[  259.037832][ T5889] hub 3-1:0.0: probe with driver hub failed with error -5
[  259.077582][ T5889] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input23
[  259.297319][    C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1
[  259.366487][ T8081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'.
[  259.531932][ T8084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.552'.
[  260.075944][ T8091] net_ratelimit: 11 callbacks suppressed
[  260.075960][ T8091] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.513868][    C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1
[  261.491434][ T8103] loop8: detected capacity change from 0 to 1
[  261.515377][ T5839] Dev loop8: unable to read RDB block 1
[  261.525076][ T5839]  loop8: unable to read partition table
[  261.560592][ T5839] loop8: partition table beyond EOD, truncated
[  261.583609][ T8103] Dev loop8: unable to read RDB block 1
[  261.601367][ T8103]  loop8: unable to read partition table
[  261.647393][ T8103] loop8: partition table beyond EOD, truncated
[  261.653796][ T8103] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  261.848170][ T8111] tipc: Enabling <ib:lo> not permitted
[  261.853864][ T8111] tipc: Enabling of bearer <ib:lo> rejected, failed to enable media
[  261.897404][   T10] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  262.007419][   T24] usb 3-1: USB disconnect, device number 40
[  262.097768][   T10] usb 5-1: Using ep0 maxpacket: 32
[  262.111650][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  262.121288][   T10] usb 5-1: config 7 has an invalid interface number: 187 but max is 0
[  262.130110][   T10] usb 5-1: config 7 has no interface number 0
[  262.148772][   T10] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  262.166670][   T10] usb 5-1: config 7 interface 187 has no altsetting 0
[  262.177086][   T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  262.186349][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.197134][   T10] usb 5-1: Product: syz
[  262.202608][   T10] usb 5-1: Manufacturer: syz
[  262.229643][   T10] usb 5-1: SerialNumber: syz
[  262.391912][ T8118] kvm: pic: non byte write
[  262.464780][   T10] usb 5-1: Limiting number of CPorts to U8_MAX
[  262.480909][   T10] usb 5-1: Unknown endpoint type found, address 0x07
[  262.516142][   T10] usb 5-1: Unknown endpoint type found, address 0x03
[  262.541162][   T10] usb 5-1: Not enough endpoints found in device, aborting!
[  265.618270][ T5845] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  265.822896][ T5845] usb 2-1: Using ep0 maxpacket: 16
[  265.849083][ T5845] usb 2-1: unable to get BOS descriptor or descriptor too short
[  265.897459][ T5845] usb 2-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8
[  265.948925][ T5845] usb 2-1: config 1 interface 0 has no altsetting 0
[  266.002136][ T5845] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  266.011357][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.048207][ T5845] usb 2-1: Product: syz
[  266.054752][   T30] audit: type=1326 audit(1748208715.072:2655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8166 comm="syz.3.573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08aa78e969 code=0x0
[  266.093908][ T5845] usb 2-1: Manufacturer: syz
[  266.100442][ T5845] usb 2-1: SerialNumber: syz
[  266.172968][   T49] usb 5-1: USB disconnect, device number 57
[  266.484835][ T8168] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.492421][ T8168] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.037540][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  267.085237][ T8168] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  267.306920][ T8168] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.322498][ T8168] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.333516][ T8168] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.349100][ T8168] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  267.791213][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.839444][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.017509][   T10] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  268.177293][   T10] usb 5-1: device descriptor read/64, error -71
[  268.345286][ T8194] netlink: 'syz.2.579': attribute type 1 has an invalid length.
[  268.428093][   T10] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  268.567754][   T10] usb 5-1: device descriptor read/64, error -71
[  268.586058][ T8197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[  268.598005][ T8197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[  268.607389][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.2.579'.
[  268.687173][ T8197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[  268.711589][ T8197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[  268.721014][   T10] usb usb5-port1: attempt power cycle
[  268.758186][ T8197] bond1: (slave geneve2): making interface the new active one
[  268.856737][ T8197] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  268.861867][ T5845] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[  268.907502][ T5845] usb 2-1: USB disconnect, device number 67
[  268.944920][ T8191] bond1: entered promiscuous mode
[  268.964620][ T8191] geneve2: entered promiscuous mode
[  269.001910][ T8191] bond1: entered allmulticast mode
[  269.011356][ T8191] geneve2: entered allmulticast mode
[  269.025767][ T8191] 8021q: adding VLAN 0 to HW filter on device bond1
[  269.107311][   T10] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  269.165250][   T10] usb 5-1: device descriptor read/8, error -71
[  269.471421][   T10] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  269.552755][   T10] usb 5-1: device descriptor read/8, error -71
[  269.572501][   T24] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  269.674007][   T10] usb usb5-port1: unable to enumerate USB device
[  269.747307][   T24] usb 4-1: Using ep0 maxpacket: 8
[  269.774590][   T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  269.796100][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  269.827447][   T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  269.847980][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  269.864459][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  269.881585][   T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  269.893106][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  269.912309][   T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  269.925763][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  270.009886][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  270.033208][   T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  270.050923][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  270.267243][   T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  270.281973][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  270.293283][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  270.313910][   T24] usb 4-1: string descriptor 0 read error: -22
[  270.323883][   T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  270.343887][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.387315][ T5889] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  270.405831][   T24] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  270.548888][ T5889] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  270.567205][ T5889] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  270.577250][ T5889] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  270.587661][ T5889] usb 3-1: config 220 has no interface number 2
[  270.594026][ T5889] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  270.607448][ T5889] usb 3-1: config 220 interface 0 has no altsetting 0
[  270.614344][ T5889] usb 3-1: config 220 interface 76 has no altsetting 0
[  270.656020][ T5889] usb 3-1: config 220 interface 1 has no altsetting 0
[  270.659097][ T5889] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  270.659129][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.659153][ T5889] usb 3-1: Product: syz
[  270.659169][ T5889] usb 3-1: Manufacturer: syz
[  270.659218][ T5889] usb 3-1: SerialNumber: syz
[  270.697313][ T5845] usb 2-1: new full-speed USB device number 68 using dummy_hcd
[  270.869191][ T5845] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  270.878136][ T5845] usb 2-1: config 0 has no interface number 0
[  270.887962][ T5891] usb 4-1: USB disconnect, device number 63
[  270.906102][ T5889] usb 3-1: selecting invalid altsetting 0
[  270.907914][ T5845] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  270.936518][ T5889] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  270.936615][ T5845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.952145][ T5889] usb 3-1: No valid video chain found.
[  270.969981][ T5889] usb 3-1: selecting invalid altsetting 0
[  270.970644][ T5845] usb 2-1: Product: syz
[  270.976001][ T5889] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  270.985201][ T5845] usb 2-1: Manufacturer: syz
[  270.994195][ T5889] usb 3-1: USB disconnect, device number 41
[  271.004781][ T5845] usb 2-1: SerialNumber: syz
[  271.028490][ T5845] usb 2-1: config 0 descriptor??
[  271.047513][   T24] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  271.209291][   T24] usb 5-1: config 0 has an invalid interface number: 32 but max is 0
[  271.223967][   T24] usb 5-1: config 0 has no interface number 0
[  271.232897][   T24] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.248594][   T24] usb 5-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.264629][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  271.274215][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.298446][   T24] usb 5-1: config 0 descriptor??
[  271.667248][ T8253] input: syz1 as /devices/virtual/input/input26
[  271.745962][ T8253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  271.788967][ T8253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.252047][ T8261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  272.267902][ T8261] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  272.757354][ T5891] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  272.935555][ T8270] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«=
[  272.987205][ T5891] usb 4-1: Using ep0 maxpacket: 16
[  273.016490][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.038214][ T5845] usb 2-1: Firmware version (0.0) predates our first public release.
[  273.064955][ T5891] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.075413][ T5891] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  273.087425][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.100551][ T5891] usb 4-1: config 0 descriptor??
[  273.129191][ T5845] usb 2-1: Please update to version 0.2 or newer
[  273.208257][ T8269] [U] J"—E:ÀÆ"


[  273.320776][ T8266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.356368][ T8266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.511362][   T49] usb 2-1: USB disconnect, device number 68
[  273.561727][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.602'.
[  273.823945][ T5891] hid-picolcd 0003:04D8:F002.0011: unbalanced collection at end of report description
[  274.007737][ T5891] hid-picolcd 0003:04D8:F002.0011: device report parse failed
[  274.015333][ T5891] hid-picolcd 0003:04D8:F002.0011: probe with driver hid-picolcd failed with error -22
[  274.118777][ T5891] usb 4-1: USB disconnect, device number 64
[  274.145946][   T24] usbhid 5-1:0.32: can't add hid device: -71
[  274.146060][   T24] usbhid 5-1:0.32: probe with driver usbhid failed with error -71
[  274.154367][   T24] usb 5-1: USB disconnect, device number 62
[  274.457264][   T49] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  274.625994][ T8294] netlink: 80 bytes leftover after parsing attributes in process `syz.2.606'.
[  274.646467][   T49] usb 2-1: Using ep0 maxpacket: 32
[  274.680024][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.733377][   T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.792302][   T49] usb 2-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[  274.862785][   T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.874647][   T49] usb 2-1: config 0 descriptor??
[  274.887551][ T5845] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  275.099017][ T8278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.137652][ T8278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.157675][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.184862][   T49] smartjoyplus 0003:0925:8866.0012: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.1-1/input0
[  275.223459][   T49] smartjoyplus 0003:0925:8866.0012: Force feedback for SmartJoy PLUS PS2/USB adapter
[  275.274139][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.322274][ T5845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  275.359834][   T30] audit: type=1326 audit(1748208724.382:2656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aac18e969 code=0x7ffc0000
[  275.360168][ T8300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.404442][ T5845] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  275.449074][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.468538][ T8300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  275.478932][   T49] usb 2-1: USB disconnect, device number 69
[  275.533111][   T30] audit: type=1326 audit(1748208724.382:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8276 comm="syz.1.603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aac18e969 code=0x7ffc0000
[  275.566337][ T8304] veth0_to_team: mtu less than device minimum
[  275.627537][ T5845] usb 3-1: config 0 descriptor??
[  276.095655][ T5845] plantronics 0003:047F:FFFF.0013: report_id 61431350 is invalid
[  276.121212][ T5845] plantronics 0003:047F:FFFF.0013: item 0 4 1 8 parsing failed
[  276.147818][ T5845] plantronics 0003:047F:FFFF.0013: parse failed
[  276.167190][ T5845] plantronics 0003:047F:FFFF.0013: probe with driver plantronics failed with error -22
[  276.237930][ T8314] tc_dump_action: action bad kind
[  276.303433][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.313797][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.323241][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.606'.
[  276.399372][ T8294] batadv_slave_0: left promiscuous mode
[  276.414297][ T8294] bond1: left promiscuous mode
[  276.420165][ T8294] geneve2: left promiscuous mode
[  276.425960][ T8294] bond1: left allmulticast mode
[  276.443749][ T8294] geneve2: left allmulticast mode
[  276.491638][ T8294] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  276.550794][ T8294] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  276.592882][ T8294] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  276.602162][ T5845] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  276.661495][ T8294] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  276.770217][ T5845] usb 2-1: Using ep0 maxpacket: 16
[  276.786923][ T5845] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.810866][ T5845] usb 2-1: config 0 interface 0 has no altsetting 0
[  276.829654][ T5845] usb 2-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  276.855176][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.867204][ T5891] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  276.910894][ T5845] usb 2-1: config 0 descriptor??
[  277.027332][ T5891] usb 5-1: Using ep0 maxpacket: 8
[  277.460944][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.470502][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.818775][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.831022][ T5891] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  277.851972][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.868510][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.876673][ T5891] usb 5-1: Product: syz
[  277.887586][ T5891] usb 5-1: Manufacturer: syz
[  277.890046][ T8314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.892485][ T5891] usb 5-1: SerialNumber: syz
[  277.921304][ T8314] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  277.966789][ T5845] usbhid 2-1:0.0: can't add hid device: -71
[  277.975048][ T5845] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  278.009415][ T5845] usb 2-1: USB disconnect, device number 70
[  278.100556][ T5891] usb 5-1: config 0 descriptor??
[  278.320604][ T5845] usb 3-1: USB disconnect, device number 42
[  278.351332][ T5891] usb read operation failed. (-32)
[  278.351722][ T8338] syzkaller0: entered promiscuous mode
[  278.433415][ T5891] usb write operation failed. (-71)
[  278.438069][ T8338] syzkaller0: entered allmulticast mode
[  278.440612][ T5891] usb write operation failed. (-71)
[  278.556778][ T5891] usb write operation failed. (-71)
[  278.668585][ T5891] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state
[  278.670528][ T8343] kvm: pic: non byte read
[  278.678232][ T5891] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2
[  278.757382][ T5891] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw
[  278.937611][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.619'.
[  279.537132][   T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  279.718300][   T24] usb 4-1: Using ep0 maxpacket: 8
[  279.739768][   T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  279.757757][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  279.803303][   T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  279.825510][ T5890] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  279.876260][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  279.898775][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  279.945962][   T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  279.956483][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  280.006808][   T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  280.018944][ T5890] usb 2-1: Using ep0 maxpacket: 8
[  280.049657][ T5890] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.066199][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  280.083080][ T5890] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.093183][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  280.105108][ T5890] usb 2-1: config 0 interface 0 has no altsetting 0
[  280.111856][ T5890] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  280.121335][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.130495][   T24] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  280.147142][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  280.160227][   T24] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  280.173343][ T5890] usb 2-1: config 0 descriptor??
[  280.197117][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  280.217331][   T24] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  280.242006][   T24] usb 4-1: string descriptor 0 read error: -22
[  280.248848][   T24] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  280.271159][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.316285][   T24] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  280.335875][ T8367] netlink: 32 bytes leftover after parsing attributes in process `syz.0.624'.
[  280.426857][ T5890] smartjoyplus 0003:0B43:0003.0014: ignoring exceeding usage max
[  280.451184][ T5890] smartjoyplus 0003:0B43:0003.0014: unbalanced collection at end of report description
[  280.483567][ T5890] smartjoyplus 0003:0B43:0003.0014: parse failed
[  280.502046][ T5890] smartjoyplus 0003:0B43:0003.0014: probe with driver smartjoyplus failed with error -22
[  280.517816][ T8353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.620'.
[  280.543141][ T5890] usb 2-1: USB disconnect, device number 71
[  280.557350][ T5845] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  280.748727][ T5845] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  280.772019][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.797154][ T5845] usb 3-1: Product: syz
[  280.801376][ T5845] usb 3-1: Manufacturer: syz
[  280.817050][ T5845] usb 3-1: SerialNumber: syz
[  280.828382][ T5845] usb 3-1: config 0 descriptor??
[  280.868717][ T5845] ch341 3-1:0.0: ch341-uart converter detected
[  280.897348][ T5890] usb 2-1: new high-speed USB device number 72 using dummy_hcd
[  281.057164][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  281.068917][ T5890] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  281.070236][   T10] usb 4-1: USB disconnect, device number 65
[  281.105889][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.141884][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  281.189974][ T5890] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  281.232080][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.257711][ T5890] usb 2-1: Product: syz
[  281.285550][ T5890] usb 2-1: Manufacturer: syz
[  281.296074][ T5890] usb 2-1: SerialNumber: syz
[  281.364131][ T8383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.393527][ T8383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.481959][ T8383] macsec1: entered promiscuous mode
[  281.487373][ T8383] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  281.494807][ T8383] macsec1: entered allmulticast mode
[  281.502317][ T8383] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  281.558786][ T5890] usb 2-1: 0:2 : does not exist
[  281.860131][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'.
[  281.899840][ T5845] usb 3-1: failed to receive control message: -110
[  281.919843][ T5845] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110
[  281.996046][ T5890] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1)
[  282.059127][ T5890] usb 2-1: USB disconnect, device number 72
[  282.130391][ T5929] udevd[5929]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  283.356095][   T49] usb 3-1: USB disconnect, device number 43
[  283.369034][   T49] ch341 3-1:0.0: device disconnected
[  283.757255][ T8425] netlink: 'syz.3.636': attribute type 29 has an invalid length.
[  283.977948][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.638'.
[  284.037932][   T49] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  284.207412][   T49] usb 4-1: Using ep0 maxpacket: 32
[  284.218574][   T49] usb 4-1: config 0 has an invalid interface number: 114 but max is 0
[  284.239422][   T49] usb 4-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config
[  284.299867][   T49] usb 4-1: config 0 has no interface number 0
[  284.331323][   T49] usb 4-1: too many endpoints for config 0 interface 114 altsetting 227: 67, using maximum allowed: 30
[  284.352693][   T49] usb 4-1: config 0 interface 114 altsetting 227 has 0 endpoint descriptors, different from the interface descriptor's value: 67
[  284.368077][   T49] usb 4-1: config 0 interface 114 has no altsetting 0
[  284.378091][   T49] usb 4-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[  284.389994][   T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.400485][   T49] usb 4-1: Product: syz
[  284.402585][ T8439] vlan2: entered promiscuous mode
[  284.470710][   T49] usb 4-1: Manufacturer: syz
[  284.475466][   T49] usb 4-1: SerialNumber: syz
[  284.475777][ T8439] vlan2: entered allmulticast mode
[  284.519796][   T49] usb 4-1: config 0 descriptor??
[  284.542938][ T8439] hsr_slave_1: entered allmulticast mode
[  284.667091][ T5845] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  284.742308][   T49] pn533_usb 4-1:0.114: NFC: Could not find bulk-in or bulk-out endpoint
[  284.765758][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.641'.
[  284.789160][   T49] usb 4-1: USB disconnect, device number 66
[  284.967158][ T5845] usb 3-1: Using ep0 maxpacket: 16
[  284.995988][ T5845] usb 3-1: unable to get BOS descriptor or descriptor too short
[  285.026281][ T5845] usb 3-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8
[  285.093929][ T5845] usb 3-1: config 1 interface 0 has no altsetting 0
[  285.118828][ T5845] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  285.161742][ T5845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.214469][ T5845] usb 3-1: Product: syz
[  285.262905][ T5845] usb 3-1: Manufacturer: syz
[  285.318799][ T5845] usb 3-1: SerialNumber: syz
[  285.560761][ T8455] loop8: detected capacity change from 0 to 1
[  285.625009][ T8455] Dev loop8: unable to read RDB block 1
[  285.646199][ T8455]  loop8: unable to read partition table
[  285.697260][ T8455] loop8: partition table beyond EOD, truncated
[  285.743042][ T8455] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5)
[  286.399580][ T8471] netlink: 'syz.1.652': attribute type 8 has an invalid length.
[  286.409555][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state
[  286.419660][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.430066][ T8471] bridge0: entered allmulticast mode
[  287.064238][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.654'.
[  287.483723][ T8485] netlink: 56 bytes leftover after parsing attributes in process `syz.1.655'.
[  287.505640][ T8485] tipc: Enabling of bearer <udp:syz
> rejected, failed to enable media
[  287.834431][ T5845] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  287.838552][ T8488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.656'.
[  287.850926][ T8488] 8021q: VLANs not supported on nlmon0
[  287.913008][ T5845] usb 3-1: USB disconnect, device number 44
[  287.976371][ T8490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.657'.
[  288.020069][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.657'.
[  288.388603][ T8497] 8021q: adding VLAN 0 to HW filter on device bond1
[  288.409310][ T8497] bond0: (slave bond1): Enslaving as an active interface with an up link
[  288.546034][ T8510] netlink: 'syz.0.663': attribute type 29 has an invalid length.
[  288.967193][   T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  289.130125][   T10] usb 3-1: device descriptor read/64, error -71
[  289.249564][ T8524] netlink: 'syz.0.663': attribute type 29 has an invalid length.
[  289.367258][ T5914] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  289.431219][   T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.472590][   T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  289.567328][ T5914] usb 4-1: Using ep0 maxpacket: 16
[  289.584097][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short
[  289.594706][ T5914] usb 4-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8
[  289.626670][ T5914] usb 4-1: config 1 interface 0 has no altsetting 0
[  289.647484][   T10] usb 3-1: device descriptor read/64, error -71
[  289.663361][ T5914] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  289.674813][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.684477][ T5914] usb 4-1: Product: syz
[  289.699380][ T5914] usb 4-1: Manufacturer: syz
[  289.714230][ T5914] usb 4-1: SerialNumber: syz
[  289.767674][   T10] usb usb3-port1: attempt power cycle
[  289.848679][   T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.994411][   T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.137687][   T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  290.217939][   T10] usb 3-1: device descriptor read/8, error -71
[  290.481130][   T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  290.509318][   T10] usb 3-1: device descriptor read/8, error -71
[  290.534490][   T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.631058][   T10] usb usb3-port1: unable to enumerate USB device
[  291.287494][   T53] bridge_slave_1: left allmulticast mode
[  291.328577][   T53] bridge_slave_1: left promiscuous mode
[  291.364152][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.463591][   T53] bridge_slave_0: left allmulticast mode
[  291.516852][   T53] bridge_slave_0: left promiscuous mode
[  291.591238][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  292.507276][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  292.548908][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  292.590735][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  292.625043][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  292.652457][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  292.896245][ T5914] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  292.961132][ T5914] usb 4-1: USB disconnect, device number 67
[  293.599133][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.615548][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.694150][   T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  293.705161][   T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  293.720376][   T53] bond0 (unregistering): Released all slaves
[  293.747542][ T8553] tap0: tun_chr_ioctl cmd 1074025677
[  293.753055][ T8553] tap0: linktype set to 805
[  293.827559][ T5914] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  293.974186][ T8580] loop6: detected capacity change from 0 to 524287999
[  293.997103][ T5914] usb 4-1: Using ep0 maxpacket: 8
[  294.019856][ T5914] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  294.040340][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.079608][ T5914] usb 4-1: Product: syz
[  294.091958][ T5914] usb 4-1: Manufacturer: syz
[  294.107658][ T5914] usb 4-1: SerialNumber: syz
[  294.146931][ T5914] usb 4-1: config 0 descriptor??
[  294.191360][ T5914] gspca_main: se401-2.14.0 probing 047d:5003
[  294.463324][   T53] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode
[  294.697094][ T5838] Bluetooth: hci1: command tx timeout
[  294.836492][   T53] hsr_slave_0: left promiscuous mode
[  294.846483][   T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  294.867266][   T53] batman_adv: batadv0: Removing interface: batadv_slave_0
[  294.954258][   T53] veth1_macvtap: left promiscuous mode
[  294.984663][   T53] veth0_macvtap: left promiscuous mode
[  295.000386][   T53] veth1_vlan: left promiscuous mode
[  295.023492][   T53] veth0_vlan: left promiscuous mode
[  295.031642][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.682'.
[  295.167546][ T5914] gspca_se401: read req failed req 0x06 error -19
[  295.184460][ T5914] usb 4-1: USB disconnect, device number 68
[  295.662876][   T53] team0 (unregistering): Port device team_slave_1 removed
[  295.741534][   T53] team0 (unregistering): Port device team_slave_0 removed
[  296.783849][ T8551] chnl_net:caif_netlink_parms(): no params data found
[  296.795894][ T5838] Bluetooth: hci1: command tx timeout
[  296.917506][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.686'.
[  297.117135][   T49] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  297.278208][   T49] usb 3-1: Using ep0 maxpacket: 16
[  297.354152][   T49] usb 3-1: unable to get BOS descriptor or descriptor too short
[  297.371939][   T49] usb 3-1: config 1 interface 0 altsetting 8 has an endpoint descriptor with address 0x68, changing to 0x8
[  297.459051][ T8551] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.466179][ T8551] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.474057][ T8551] bridge_slave_0: entered allmulticast mode
[  297.518668][ T8551] bridge_slave_0: entered promiscuous mode
[  297.534201][   T49] usb 3-1: config 1 interface 0 has no altsetting 0
[  297.590049][ T8551] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.624898][ T8551] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.651375][ T8551] bridge_slave_1: entered allmulticast mode
[  297.683306][ T8551] bridge_slave_1: entered promiscuous mode
[  297.739681][   T49] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  297.787421][   T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.823601][   T49] usb 3-1: Product: syz
[  297.829999][   T49] usb 3-1: Manufacturer: syz
[  297.834623][   T49] usb 3-1: SerialNumber: syz
[  297.997823][ T5914] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  298.092264][ T8551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  298.099986][ T8646] could not allocate digest TFM handle blake2s-128-arm
[  298.144148][ T8551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  298.157285][ T5914] usb 4-1: device descriptor read/64, error -71
[  298.342474][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.689'.
[  298.417142][ T5914] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  298.632806][ T5914] usb 4-1: device descriptor read/64, error -71
[  298.747919][ T5914] usb usb4-port1: attempt power cycle
[  298.801893][ T8654] team0 (unregistering): Port device team_slave_0 removed
[  298.867234][ T5838] Bluetooth: hci1: command tx timeout
[  298.874589][ T8654] team0 (unregistering): Port device team_slave_1 removed
[  298.935360][ T8654] team0 (unregistering): Port device batadv1 removed
[  299.016594][ T8551] team0: Port device team_slave_0 added
[  299.116539][ T8551] team0: Port device team_slave_1 added
[  299.157661][ T5914] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  299.198630][ T5914] usb 4-1: device descriptor read/8, error -71
[  299.233457][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.240872][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.287983][ T8551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.305734][ T8551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.315469][ T8551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.345631][ T8551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.468604][ T5914] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  299.489245][ T5914] usb 4-1: device descriptor read/8, error -71
[  299.608549][ T5914] usb usb4-port1: unable to enumerate USB device
[  299.762159][ T8551] hsr_slave_0: entered promiscuous mode
[  299.794978][ T8551] hsr_slave_1: entered promiscuous mode
[  300.149945][   T49] usbhid 3-1:1.0: couldn't find an input interrupt endpoint
[  300.212587][   T49] usb 3-1: USB disconnect, device number 49
[  300.318536][ T8678] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  300.947169][ T5838] Bluetooth: hci1: command tx timeout
[  301.096727][ T8551] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  301.129949][ T8551] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  301.158686][ T8551] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  301.186925][ T8551] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  301.439444][ T8551] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.478714][ T8551] 8021q: adding VLAN 0 to HW filter on device team0
[  301.495090][   T83] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.502339][   T83] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.554776][   T83] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.562027][   T83] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.714624][ T8551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.813538][ T8551] veth0_vlan: entered promiscuous mode
[  301.841638][ T8551] veth1_vlan: entered promiscuous mode
[  301.951974][ T8551] veth0_macvtap: entered promiscuous mode
[  301.972262][ T8722] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  301.995121][ T8724] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.014000][ T8551] veth1_macvtap: entered promiscuous mode
[  302.014048][ T8722] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  302.042189][ T8722] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  302.062318][ T8724] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.073169][ T8725] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.082396][ T8722] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  302.105199][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  302.123878][ T8724] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.135736][ T8724] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.161250][ T8724] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.174625][ T8724] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.194459][ T8551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  302.210141][ T8724] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.242344][ T8551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.267230][ T8551] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.275984][ T8551] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.289669][ T8551] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  302.301523][ T8724] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.333531][ T8724] netlink: 6 bytes leftover after parsing attributes in process `syz.2.701'.
[  302.514197][ T1312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.532873][ T1312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.586853][ T1312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  302.601806][ T1312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  302.777429][ T5890] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  302.957238][ T5890] usb 3-1: Using ep0 maxpacket: 16
[  302.974688][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  303.045609][ T5890] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  303.085145][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.152328][ T5890] usb 3-1: config 0 descriptor??
[  303.789845][ T5890] usbhid 3-1:0.0: can't add hid device: -71
[  303.806115][ T5890] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  303.828243][ T5890] usb 3-1: USB disconnect, device number 50
[  304.437129][   T49] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  304.555358][ T8775] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  304.877123][ T5890] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  305.032186][   T49] usb 4-1: config 0 has no interfaces?
[  305.042520][   T49] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  305.053017][   T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.082945][ T5890] usb 3-1: config 0 has no interfaces?
[  305.089305][ T5890] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  305.107311][   T49] usb 4-1: Product: syz
[  305.112071][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.434860][   T49] usb 4-1: Manufacturer: syz
[  305.454584][   T49] usb 4-1: SerialNumber: syz
[  305.475725][   T49] usb 4-1: config 0 descriptor??
[  305.483327][ T5890] usb 3-1: config 0 descriptor??
[  305.773606][   T49] usb 3-1: USB disconnect, device number 51
[  305.966297][ T8804] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  307.837806][   T49] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  308.030928][   T49] usb 3-1: Using ep0 maxpacket: 16
[  308.042645][   T49] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[  308.054672][   T49] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  308.079712][   T49] usb 3-1: config 4 has no interface number 0
[  308.094073][   T49] usb 3-1: config 4 interface 51 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  308.167882][   T49] usb 3-1: config 4 interface 51 has no altsetting 0
[  308.169269][ T5914] usb 4-1: USB disconnect, device number 73
[  308.184727][   T49] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  308.210547][   T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.234866][   T49] usb 3-1: Product: syz
[  308.240365][   T49] usb 3-1: Manufacturer: syz
[  308.245202][   T49] usb 3-1: SerialNumber: syz
[  308.321760][   T49] cdc_eem 3-1:4.51: probe with driver cdc_eem failed with error -22
[  308.504830][ T8843] netlink: 'syz.3.716': attribute type 10 has an invalid length.
[  308.517121][ T8843] __nla_validate_parse: 27 callbacks suppressed
[  308.517142][ T8843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.716'.
[  309.687168][   T49] usb 2-1: new high-speed USB device number 73 using dummy_hcd
[  309.837890][   T49] usb 2-1: Using ep0 maxpacket: 32
[  309.880764][   T49] usb 2-1: config 0 has an invalid interface number: 183 but max is 0
[  309.892655][   T49] usb 2-1: config 0 has no interface number 0
[  309.904524][   T49] usb 2-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528
[  309.944070][   T49] usb 2-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8
[  310.008030][   T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.016322][   T49] usb 2-1: Product: syz
[  310.021177][   T49] usb 2-1: Manufacturer: syz
[  310.025901][   T49] usb 2-1: SerialNumber: syz
[  310.041337][   T49] usb 2-1: config 0 descriptor??
[  310.051386][ T8868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  310.283449][ T8868] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  310.336463][   T49] net1080 2-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.1-1, NetChip TurboCONNECT, f2:f1:99:78:47:96
[  310.688231][ T8868] fuse: Bad value for 'user_id'
[  310.695722][ T8868] fuse: Bad value for 'user_id'
[  310.731712][ T5914] usb 2-1: USB disconnect, device number 73
[  310.747247][ T5914] net1080 2-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.1-1, NetChip TurboCONNECT
[  310.812716][   T49] usb 3-1: USB disconnect, device number 52
[  311.015961][ T8898] netlink: 72 bytes leftover after parsing attributes in process `syz.2.726'.
[  311.307304][   T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  311.517083][   T10] usb 3-1: Using ep0 maxpacket: 32
[  311.544237][   T10] usb 3-1: config 0 has an invalid interface number: 4 but max is 0
[  311.584456][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.736811][   T10] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  311.761549][   T10] usb 3-1: config 0 has no interface number 1
[  311.994340][   T10] usb 3-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  312.310568][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27
[  312.345923][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.391477][   T10] usb 3-1: Product: syz
[  312.395695][   T10] usb 3-1: Manufacturer: syz
[  312.475277][   T10] usb 3-1: SerialNumber: syz
[  312.513534][   T10] usb 3-1: config 0 descriptor??
[  312.565371][   T10] pwc: Logitech QuickCam Pro 3000 USB webcam detected.
[  312.759747][   T10] pwc: Failed to set LED on/off time (-71)
[  312.765975][   T10] pwc: send_video_command error -71
[  312.771422][   T10] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  312.797153][ T5890] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  312.797163][   T10] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  312.820135][   T10] usb 3-1: USB disconnect, device number 53
[  312.997281][ T5890] usb 4-1: Using ep0 maxpacket: 32
[  313.024598][ T5890] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  313.053873][ T5890] usb 4-1: config 0 has no interface number 0
[  313.097478][ T5890] usb 4-1: config 0 interface 12 has no altsetting 0
[  313.136439][ T5890] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  313.145862][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.154553][ T5890] usb 4-1: Product: syz
[  313.160483][ T5890] usb 4-1: Manufacturer: syz
[  313.180501][ T5890] usb 4-1: SerialNumber: syz
[  313.207791][ T5890] usb 4-1: config 0 descriptor??
[  313.440874][ T5890] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  313.467276][ T5890] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  313.504598][ T5890] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  313.516400][ T5890] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  313.556720][ T5890] usb 4-1: USB disconnect, device number 74
[  313.700860][ T8931] fuse: Unknown parameter '0x0000000000000004
'
[  313.997305][   T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd
[  314.143081][ T5890] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  314.317127][   T10] usb 2-1: config 0 has an invalid interface number: 98 but max is 0
[  314.325286][   T10] usb 2-1: config 0 has no interface number 0
[  314.337203][   T10] usb 2-1: config 0 interface 98 has no altsetting 0
[  314.364977][   T10] usb 2-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  314.379456][ T5890] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  314.385439][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.390117][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.405138][   T10] usb 2-1: Product: syz
[  314.417201][   T10] usb 2-1: Manufacturer: syz
[  314.421931][   T10] usb 2-1: SerialNumber: syz
[  314.428722][ T5890] usb 4-1: config 0 descriptor??
[  314.438310][   T10] usb 2-1: config 0 descriptor??
[  314.528805][ T5890] gspca_main: cpia1-2.14.0 probing 0813:0001
[  314.660139][ T8943] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  314.677663][   T10] usb 2-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  314.839740][ T5890] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  315.151230][ T8954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.741'.
[  315.365461][ T8958] netlink: 2 bytes leftover after parsing attributes in process `syz.2.743'.
[  315.519819][   T10] usb 2-1: [ueagle-atm] pre-firmware device, uploading firmware
[  315.527840][   T10] usb 2-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  315.536221][ T5914] usb 2-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  315.553260][ T5914] usb 2-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  315.567110][   T10] usb 2-1: USB disconnect, device number 74
[  315.595149][ T5914] ------------[ cut here ]------------
[  315.601677][ T5914] WARNING: CPU: 0 PID: 5914 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90
[  315.610177][ T5914] Modules linked in:
[  315.615137][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: kworker/0:7 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) 
[  315.627645][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  315.633098][ T8965] delete_channel: no stack
[  315.638165][ T5914] Workqueue: events request_firmware_work_func
[  315.648683][ T5914] RIP: 0010:kernfs_get+0x72/0x90
[  315.653666][ T5914] Code: e8 83 a8 64 ff 48 89 df be 04 00 00 00 e8 36 a6 c6 ff f0 ff 03 eb 05 e8 6c a8 64 ff 5b 5d c3 cc cc cc cc cc e8 5f a8 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35
[  315.673299][    C0] vkms_vblank_simulate: vblank timer overrun
[  315.679848][ T5914] RSP: 0018:ffffc90004c47680 EFLAGS: 00010293
[  315.685959][ T5914] RAX: ffffffff825b4971 RBX: ffff88807a5011e0 RCX: ffff888029ba8000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  315.694050][ T5914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  315.702544][ T5914] RBP: 0000000000000000 R08: ffff88807a5011e3 R09: 1ffff1100f4a023c
[  315.706828][ T5890] gspca_cpia1: usb_control_msg 02, error -71
[  315.711025][ T5914] R10: dffffc0000000000 R11: ffffed100f4a023d R12: ffff8880564b5aa8
[  315.725157][ T5914] R13: 1ffff1100ac96b56 R14: ffff8880564b5ab0 R15: 1ffff1100ac96b55
[  315.726905][ T5890] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  315.733185][ T5914] FS:  0000000000000000(0000) GS:ffff8881260c2000(0000) knlGS:0000000000000000
[  315.733208][ T5914] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  315.733224][ T5914] CR2: 0000200000012030 CR3: 000000005f23a000 CR4: 00000000003526f0
[  315.733244][ T5914] DR0: 0000000000000000 DR1: 0000000000000005 DR2: 0000000000000000
[  315.733258][ T5914] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  315.780873][ T5914] Call Trace:
[  315.784181][ T5914]  <TASK>
[  315.787181][ T5914]  kobject_add_internal+0x632/0xb40
[  315.792496][ T5914]  kobject_add+0x155/0x220
[  315.797427][ T5914]  ? __pfx_kobject_add+0x10/0x10
[  315.802447][ T5914]  ? kobject_init+0x83/0x1e0
[  315.807559][ T5914]  get_device_parent+0x316/0x3a0
[  315.812553][ T5914]  device_add+0x2e1/0xb50
[  315.816886][ T5890] usb 4-1: USB disconnect, device number 75
[  315.823571][ T5914]  firmware_fallback_sysfs+0x2e4/0x9b0
[  315.829115][ T5914]  _request_firmware+0xf83/0x15b0
[  315.834242][ T5914]  ? __pfx__request_firmware+0x10/0x10
[  315.839851][ T5914]  ? process_scheduled_works+0x9ec/0x17a0
[  315.845613][ T5914]  request_firmware_work_func+0xaf/0x1c0
[  315.851318][ T5914]  ? process_scheduled_works+0x9ec/0x17a0
[  315.857206][ T5914]  process_scheduled_works+0xadb/0x17a0
[  315.862814][ T5914]  ? __pfx_process_scheduled_works+0x10/0x10
[  315.868891][ T5914]  worker_thread+0x8a0/0xda0
[  315.873550][ T5914]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  315.879989][ T5914]  ? __kthread_parkme+0x7b/0x200
[  315.884972][ T5914]  kthread+0x70e/0x8a0
[  315.889133][ T5914]  ? __pfx_worker_thread+0x10/0x10
[  315.894280][ T5914]  ? __pfx_kthread+0x10/0x10
[  315.900919][ T5914]  ? __pfx_kthread+0x10/0x10
[  315.905557][ T5914]  ? _raw_spin_unlock_irq+0x23/0x50
[  315.911993][ T5914]  ? lockdep_hardirqs_on+0x9c/0x150
[  315.917672][ T5914]  ? __pfx_kthread+0x10/0x10
[  315.922325][ T5914]  ret_from_fork+0x4b/0x80
[  315.926798][ T5914]  ? __pfx_kthread+0x10/0x10
[  315.931499][ T5914]  ret_from_fork_asm+0x1a/0x30
[  315.936318][ T5914]  </TASK>
[  315.939418][ T5914] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  315.946734][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: kworker/0:7 Not tainted 6.15.0-rc7-syzkaller-00152-gd0c22de9995b #0 PREEMPT(full) 
[  315.958825][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  315.968913][ T5914] Workqueue: events request_firmware_work_func
[  315.975120][ T5914] Call Trace:
[  315.978438][ T5914]  <TASK>
[  315.981396][ T5914]  dump_stack_lvl+0x99/0x250
[  315.986121][ T5914]  ? __asan_memcpy+0x40/0x70
[  315.990743][ T5914]  ? __pfx_dump_stack_lvl+0x10/0x10
[  315.995982][ T5914]  ? __pfx__printk+0x10/0x10
[  316.000621][ T5914]  panic+0x2db/0x790
[  316.004567][ T5914]  ? __pfx_panic+0x10/0x10
[  316.009017][ T5914]  ? show_trace_log_lvl+0x4fb/0x550
[  316.014255][ T5914]  ? ret_from_fork_asm+0x1a/0x30
[  316.019204][ T5914]  __warn+0x31b/0x4b0
[  316.023195][ T5914]  ? kernfs_get+0x72/0x90
[  316.027540][ T5914]  ? kernfs_get+0x72/0x90
[  316.031969][ T5914]  report_bug+0x2be/0x4f0
[  316.036307][ T5914]  ? kernfs_get+0x72/0x90
[  316.040668][ T5914]  ? kernfs_get+0x72/0x90
[  316.045010][ T5914]  ? kernfs_get+0x74/0x90
[  316.049350][ T5914]  handle_bug+0x84/0x160
[  316.053610][ T5914]  exc_invalid_op+0x1a/0x50
[  316.058128][ T5914]  asm_exc_invalid_op+0x1a/0x20
[  316.062985][ T5914] RIP: 0010:kernfs_get+0x72/0x90
[  316.067937][ T5914] Code: e8 83 a8 64 ff 48 89 df be 04 00 00 00 e8 36 a6 c6 ff f0 ff 03 eb 05 e8 6c a8 64 ff 5b 5d c3 cc cc cc cc cc e8 5f a8 64 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 35
[  316.087550][ T5914] RSP: 0018:ffffc90004c47680 EFLAGS: 00010293
[  316.093629][ T5914] RAX: ffffffff825b4971 RBX: ffff88807a5011e0 RCX: ffff888029ba8000
[  316.101615][ T5914] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  316.109590][ T5914] RBP: 0000000000000000 R08: ffff88807a5011e3 R09: 1ffff1100f4a023c
[  316.117576][ T5914] R10: dffffc0000000000 R11: ffffed100f4a023d R12: ffff8880564b5aa8
[  316.125557][ T5914] R13: 1ffff1100ac96b56 R14: ffff8880564b5ab0 R15: 1ffff1100ac96b55
[  316.133553][ T5914]  ? kernfs_get+0x71/0x90
[  316.137921][ T5914]  kobject_add_internal+0x632/0xb40
[  316.143144][ T5914]  kobject_add+0x155/0x220
[  316.147582][ T5914]  ? __pfx_kobject_add+0x10/0x10
[  316.152538][ T5914]  ? kobject_init+0x83/0x1e0
[  316.157149][ T5914]  get_device_parent+0x316/0x3a0
[  316.162111][ T5914]  device_add+0x2e1/0xb50
[  316.166452][ T5914]  firmware_fallback_sysfs+0x2e4/0x9b0
[  316.171930][ T5914]  _request_firmware+0xf83/0x15b0
[  316.177012][ T5914]  ? __pfx__request_firmware+0x10/0x10
[  316.182512][ T5914]  ? process_scheduled_works+0x9ec/0x17a0
[  316.188253][ T5914]  request_firmware_work_func+0xaf/0x1c0
[  316.193904][ T5914]  ? process_scheduled_works+0x9ec/0x17a0
[  316.199642][ T5914]  process_scheduled_works+0xadb/0x17a0
[  316.205223][ T5914]  ? __pfx_process_scheduled_works+0x10/0x10
[  316.211236][ T5914]  worker_thread+0x8a0/0xda0
[  316.215837][ T5914]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  316.222181][ T5914]  ? __kthread_parkme+0x7b/0x200
[  316.227139][ T5914]  kthread+0x70e/0x8a0
[  316.231224][ T5914]  ? __pfx_worker_thread+0x10/0x10
[  316.236386][ T5914]  ? __pfx_kthread+0x10/0x10
[  316.240997][ T5914]  ? __pfx_kthread+0x10/0x10
[  316.245600][ T5914]  ? _raw_spin_unlock_irq+0x23/0x50
[  316.250817][ T5914]  ? lockdep_hardirqs_on+0x9c/0x150
[  316.256026][ T5914]  ? __pfx_kthread+0x10/0x10
[  316.260625][ T5914]  ret_from_fork+0x4b/0x80
[  316.265054][ T5914]  ? __pfx_kthread+0x10/0x10
[  316.269659][ T5914]  ret_from_fork_asm+0x1a/0x30
[  316.274451][ T5914]  </TASK>
[  316.277635][ T5914] Kernel Offset: disabled
[  316.281976][ T5914] Rebooting in 86400 seconds..