last executing test programs:

14.275545789s ago: executing program 2 (id=239):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f00001eb000/0x4000)=nil, 0x4000, 0x4, 0x13, r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4ea6, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}, 0xffff8003}, 0x1c)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000140)={@local, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60100000023b510ba42ff13482864280a9c1f4eb5", 0x1, 0x0, 0x0, 0x8}, 0x3c)
setuid(0xee01)
syz_usb_connect(0x0, 0xfffffffffffffff9, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x25, 0xdc, 0x52, 0x20, 0x1de1, 0xf105, 0x95cf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11f, 0x1, 0xf, 0x8, 0x20, 0xb7, [{{0x9, 0x4, 0xd0, 0x5, 0x1, 0xe, 0x1, 0x0, 0x43, [@uac_as, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "f68238b5"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x342, 0x3, 0x5, 0x9}, {0x6, 0x24, 0x1a, 0x2, 0xb}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x3, 0x1458}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x101, 0x9, 0xbf, 0x6}, @mdlm_detail={0x18, 0x24, 0x13, 0x9f, "306a7c6bd0931c15b0e7e550b4cbea731aae03c6"}]}], [{{0x9, 0x5, 0x6, 0x1, 0x3ff, 0x0, 0x5b, 0x4, [@generic={0xb7, 0x22, "2c2f6236f4a576138afaf3fb47e85d21b7f7c3c10000ddda1e8257749edd63a3b23ce65fa31b735018434cd83a370dd012c75ea0c18328509ed127f8d1438ac1d20f4eacc019822679997a6e29cdadc27b1c1b9bea15656f27451925b95aa3777934fc5be7b9d357abe6f1517c33d13a4bb066c53bbe8a11a20700000000000000fcfa023e67eb6f905e19770c0c67097d3b3429d98bc8672036cdc175a1ae163e7b6c64a882ff6f84c722c7f07f03b78ad22ba91a"}]}}]}}]}}]}}, 0x0)

13.004498684s ago: executing program 3 (id=241):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343)
syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
chdir(0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
splice(0xffffffffffffffff, &(0x7f0000000140)=0x8c, r1, &(0x7f00000002c0)=0x6cd, 0x9, 0xc)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003f4000000f403"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x182800, 0x0)
ioctl$RTC_AIE_ON(r5, 0x7001)
ioctl$RTC_AIE_OFF(r5, 0x7002)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000140)={'bridge_slave_1\x00'})

10.997367686s ago: executing program 2 (id=249):
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x0, 0x84)
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180))
landlock_restrict_self(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r3=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001680)=@newqdisc={0x45c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_RTAB={0x404, 0x2, [0xe, 0x3, 0xc9, 0x3, 0x40, 0x6, 0x1, 0x8f9, 0x4, 0x0, 0x6, 0x8, 0xced, 0xe50, 0x9, 0x1, 0xfffff609, 0x1576, 0x7fffffff, 0x1f, 0x9, 0x0, 0x68, 0x6, 0x2, 0x0, 0x975, 0x4, 0x80000001, 0xfd, 0x3, 0x400, 0x0, 0x8, 0x7ff, 0x100, 0x213c, 0xeab6, 0x100, 0x10, 0x100, 0x4, 0xffff, 0x1ad8, 0xfd5, 0x10001, 0x5d5, 0x1, 0x81, 0x2, 0x2719, 0x9, 0x9, 0x10000, 0xffff, 0x8, 0x5, 0x3, 0xffffff45, 0x7fff, 0x81, 0x5, 0xf, 0x6, 0x100, 0x7, 0x2, 0x3, 0x3, 0x3, 0x40, 0x7fffffff, 0x8, 0x6, 0x4, 0x40, 0xf28, 0x18, 0xaca, 0x7f, 0x8, 0x2, 0x400, 0xf, 0xd8c3, 0x8, 0x8, 0x636, 0xabb, 0xffffffff, 0xffff02e4, 0x1, 0x2, 0xef7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x0, 0x4, 0x9, 0x5, 0xffffffff, 0x10, 0x2, 0x81, 0x6636, 0x10001, 0x5, 0x7, 0x9, 0x3ff, 0x2, 0x448, 0x8, 0x3, 0x8, 0x8001, 0x5, 0x2, 0x9, 0xf, 0x2, 0xfffffbff, 0x5, 0x8, 0x9, 0x6777, 0x3, 0x9224, 0x5, 0x1fc000, 0x30, 0x6, 0x8001, 0x6, 0x3, 0x8, 0x0, 0xfab, 0x9, 0x6a65d93c, 0x4, 0xb0, 0x3, 0x8301, 0xfffffff4, 0x9, 0x8, 0x4, 0x2e, 0xffffffff, 0x1f27, 0xe92, 0x0, 0x10001, 0x0, 0x3, 0x1, 0x2, 0x5, 0x8, 0x5, 0x1, 0x5, 0xfffffffb, 0x401, 0x4000400, 0x0, 0x0, 0x37f, 0x2b5, 0x0, 0xd, 0x94e, 0x865, 0x5, 0x5, 0x2, 0x80000001, 0xffffff49, 0x2, 0x3, 0x3, 0x200, 0x10, 0x10000, 0xf35, 0x6, 0x9, 0x100000, 0x10, 0x2, 0x9, 0x1, 0x6, 0x9, 0x5c9, 0x7, 0x3bf, 0xfffff000, 0xfffffff9, 0x1, 0x10, 0x15, 0x72e2, 0x80000000, 0x7fff, 0x41e, 0x10000, 0x0, 0x2, 0xfffffff5, 0xca8, 0xbf07, 0x8, 0x2, 0x2, 0x6, 0x4, 0x3, 0xfffffff3, 0xffff556b, 0xa, 0xfffffff9, 0x78, 0x80000001, 0xfffffff7, 0x118f, 0xba, 0x4, 0x49f2, 0x1, 0x0, 0x4921, 0x3ff, 0x2, 0xfff, 0xff7ffeff, 0x80000000, 0xd, 0xf28, 0x4000000, 0x5, 0x400, 0x6, 0xff, 0x80000000, 0x148c, 0x0, 0x9, 0x3e, 0xc, 0x5, 0x482]}]}}]}, 0x45c}}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r3, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x1, 0x5001)
syz_usb_connect(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="7b2ed7c470b6c6538bdcad0db328917ce40af7a98ac83a830bc6e23e11c88ab93c7d4d93c2f2dbce7dc9666f062dfb38791e900549a0073782285a6a579cc5872f5bfd89ee36e962483c4d8c680793"], 0x0)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, r7, 0x2000)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r8, 0x107, 0x5, 0x0, 0x0)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbmon(&(0x7f0000000080), 0x100, 0xaa0c0)
recvmmsg(r10, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0)

10.680232008s ago: executing program 4 (id=250):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x2010, 0xffffffffffffffff, 0x3000000)
r1 = memfd_secret(0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f00000000c0))
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x1, 0x4}}, 0x10)

10.010361239s ago: executing program 4 (id=252):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
gettid()
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', '', [], 0xa, "de55febcfe339d00050000000000000000000cdb59d4c81b5f8942472fc4658723c0360dfcbeff35d0bd95ba5eefdcee5f405204f8ce9e587b26d92638a698bd316f879df638cd5bad983c992f"}, 0x51)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x2a)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000008000000000000000000040000000000", @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x60}}, 0x24004000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)

9.544551099s ago: executing program 3 (id=254):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map, r1, 0x1d, 0x10, r1, @void, @value=r1}, 0x20)
syz_usb_control_io$hid(r0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc000, 0x0)
faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000000c0)={0x0, 0x1, 0xb2e})
syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400f41000087c286"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x50, 0x8b, 0x5, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}, @loopback, 0x40, 0x40, 0xe, 0x2}})
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="14ffffff10003b1026bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000020000000002900dac60200"], 0x50}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0)

7.154280272s ago: executing program 4 (id=259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000340902040001000040000204f5b3ee2102949da00009050402000000000009054acfafa44f8c391ada6166b8f1c1", @ANYRES32=r0, @ANYRES16=r0], 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001100)=ANY=[@ANYBLOB="3400000040000100fcff07f80300000001000000040048801402018010001080ecf90c000f80030091402d2e26000800", @ANYRES32=r0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x233bada16d32a7f8, 0x0)

6.880090339s ago: executing program 2 (id=261):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) (rerun: 64)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4000009b, 0x0, 0x1}]}) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000140)=0x3ff, 0x4) (async, rerun: 32)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000040)=0x2b16, 0x4) (rerun: 32)
sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000200)=@caif=@dgm, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)=""/144}, {&(0x7f0000000340)=""/69}, {&(0x7f0000000080)=""/3}, {&(0x7f0000000100)=""/47}, {&(0x7f00000003c0)=""/118}, {&(0x7f0000000440)=""/32}]}, 0x8}], 0x2, 0x12081, 0x0)

6.246690312s ago: executing program 0 (id=262):
socket$inet(0x2, 0x2, 0x2)
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000001780)=@ethtool_perm_addr={0x20, 0x1000, "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"}})
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200})
sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
dup(r3)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_emit_vhci(0x0, 0x7)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x9c, 0x4)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x10)
syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x40080)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000)

6.214994417s ago: executing program 3 (id=263):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, <r2=>0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r2, 0xb, 0x9, 0x8, 0x2, [], [0x6, 0x6a83, 0x9, 0x6], [0x1, 0x3, 0x4, 0x2876], [0x3, 0x3, 0x7fffffff, 0x22]})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, 0x0, &(0x7f0000000040))
setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x5, 0x2, 0x1}, 'syz1\x00', 0x3f})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a68000000060a0b040000000000000000020000003c0004802800018011"], 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x2, 'hsr0\x00', {0x4}, 0x400})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000200)={{0x77359400}, 0x11, 0xae, 0x7fffffff}, 0xffffffe7)

5.607305641s ago: executing program 1 (id=264):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async, rerun: 64)
r1 = socket(0x1, 0x803, 0x0) (rerun: 64)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) (async, rerun: 32)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 32)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x0, @local}}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8081, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) (async)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000001a) (async)
r6 = syz_open_procfs(0x0, 0x0) (async, rerun: 32)
pwritev(r0, &(0x7f0000000ec0)=[{&(0x7f0000000480)="6bc78d674e7d57568ed0760f9bd8f7a2f8990b35efb9415812b44a5c364f99d51501805f449a0cf24339c460f95fe8940121ccc7a2f2a971c7da2ac64dd30950d9fc16ffefdbdf15d2df520583d2b76496273ba5e92737269294c81f59422409663ed10d746815a3ea005d6b48946e09ea20eb524f6b75896137ba834254158abc5bcd4d97133c37765f1af4a5a5018a909b788259e3b2d265f4", 0x9a}, {&(0x7f0000000b40)="a4ba1ae90ddd5770bfc22c65ef39c89c8c6427197aacb8a56671419b6253cb9f666692e2b11f0bbabb72466c0cdfda039aaa3126b513eed4b06dec219751df97251955bbf6b8cfd868c1ec40fb43f0f247e0bb9842c9311e15d5ce43e04eab867806b8855d970d92b4af3ffc69e55cbe84513becdb8a2bb6c1df6a4a110a8eb20893872df80db19704cc1edb458784011580e07cfbdceb794ca21198c4ba35857ec6b2c74bd8a26bd8b5f19f63f808b7bc632d6fc1ad961d3f66e617e69e8ffc4ce3902b28a519d055025574f5da2a827e53f4f0551980757fa2367d78fe85ae598d", 0xe2}, {&(0x7f0000000c40)="9b707d31dd5de824ba07c7b52980c04f36f510dab79a9ec1dfaadc47a02629b2f61fd0b84f57f91e20c221ea51b0c6a92f1116879c880ce3bc0abaf0dfc9cf1249b5f8074926870f14bca79352083756df286acfb709a31b612896924cd2b6a880a180d8f1fcabf7494c9a230deb0a82f1f62f6574c974244172db6dfe90a8bb1664e03e82827d28b07b831e22aac804c5025c1afb846b763c3dffec4f4ad7b5e1411dac594a2cbf12ecbaff1d9168bf67cb6a8071abbca5a072c9942a7f0eca89d84fe5ae", 0xc5}, {&(0x7f00000002c0)="95f5b68df63a67f4eedb29375d94d211ae1509be51117a1b5368f671b55d1b8172e57041d8f8e597ee8f396ba83e6327a2a53812eb07dbd105027dd74e26d1efef8979f1c6627d94ac374e6458df4707dee2ebc13e7a0446f4b7ee97b7a4792b2b87896a4e059e29facae9bb6598216d91aa5d4292", 0x75}, {&(0x7f0000000540)="1d0e6304a3763ca7062d68be1006cd971ddc6e2f2ad98533aa57f054712cf1553df6f8e8d961b5f191dab9adecddff4095170a5573bbca517f1de4d0f34fe1e9b0045be70f7fbdce6167904b5040d7a91d76ffeaa4b5f18b997ae27e9fa911d354d987208f40332c6db1a7009593baaa50c2c1d8fba8ee24b4f2d6c553ab1d67205fd7ef45bc93d0324625f5cd94d5613d43aa7f28dfbdf3e0df06c11ba942fb7b1cd437e8f4989f2f895b90435227fafccf63d25d2eaabd930aaa2a77", 0xbd}, {&(0x7f0000000d40)="4ab5db120e131618184208311ba2c33eff75c42b6d6c6537d606701880c3af6124d75ff37d29354a5c53d7c6ecc0f8583be40d08182c241c62a8ff87f0fd5f2c429aac852ce2caffcb79cf17495a0c3a3dde5d99fab351f341a5ef4869ed4e6ebd468f644ffb92d58aa47611169217430504a028f9f0e951799dbe76b8a7cedf09642a530a6cc31378062df98c9be233f1e85a3a107a4e74d80483f273e7d2237cd41e7f8c258de3874571", 0xab}, {&(0x7f00000000c0)="cd1fbe5f5b7817bea5a8f5e1d5e8737000b83af97ed73cdbe6706cc47c8340d7c93f11e9649cf1a9d78e549dbc6232cc8025ab15f98bc0458b16", 0x3a}, {&(0x7f0000000e00)="19add6a85f8ce4dc3b025375094aec2efb030de651790b99edabac1459b40ab2cecfd8c55125a1ed05f02f0660d428b3df812ba51a0df472ec2781e2fb2c8d946652e8b79e3d4e0fbd87503be35f661228d766dc4bc03255c36534ae9602d3ead87fd5954dbc7c0654c38f096ca4038cba1e252b123dbbb5acc0cba3407dba96b6aae682fba50baae743970271b77665b48b1bd90bfbf49c57cc730d14d903", 0x9f}], 0x8, 0x103fd, 0xff) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 32)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) (async)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0xa20085, &(0x7f0000000f40)=ANY=[@ANYRES64=r6, @ANYRES8=r8, @ANYRES16=r2, @ANYRESDEC=r1, @ANYBLOB="07dd24433ecf0fd61b1f419f431289b51e37aad7b2c2b3bca2b1ac736ced46c957e97b63e626e7fd5c13844c45c39ecc61d25b97dc2c893225ad21b9635daedd08af341527c8da0ae0cc6ba71a96c5cfdd3fc6ec85e308f3466a381b70975b7a7ad0fad5cba5201d81caf2110c4c72d873a3afa579613df859576e622ea7760aad5f0f2dc4a5825c5a8812bfa2e5d33c6c5025d310fa74135bc5c5e38f21190c88563c8dcbfbcb2b2afd661e3c746047a9ab70d29497b5f586b644948ff7f166219590a11c5c14e57c140ce9", @ANYRES8=r5, @ANYRES8=r2, @ANYRESOCT=r3])
read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) (async, rerun: 32)
syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32)

5.302813398s ago: executing program 1 (id=265):
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000100)) (async)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) (async)
r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async)
r3 = fsmount(r2, 0x0, 0xb)
fchdir(r3) (async)
ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r3, 0x40096100, &(0x7f0000000000)={{}, 0xe}) (async)
r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='id_legacy\x00', &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00A\xbd\x98\x88\xf8\xc8\xa1#\xc5\xae\xe2\x17\xde\x8f2\x90')

4.866681307s ago: executing program 1 (id=266):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/udp6\x00')
sendmsg$nl_route(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001a00000128bd7000fddbdf250a000001ff02fe050004000008001900", @ANYRES32, @ANYBLOB="09080eecaaabe0e1d5a4c2ccba316983e034d50d7fecbb93ef0283dcb8e52a7ca03237bd2a0f21028d3561ebf72e724729e128317fa5bce0066130abfce4dcb63811750f537663ac153e6bfbd6618b51facc68872ad14ad0042e61eda332309e1a593b9c768477304311c8b58df6c4d6a5ac19738977c29a845e30bb79e2db711d324cbdabedb220ed11a381daba980b78403874"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
preadv(r1, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000000)={0x100, 0x2, 0x1, 0x5, 0x0, 0x7, 0x8000})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405515, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x83, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x8000]})
syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340)=<r4=>0x0, &(0x7f00000000c0))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='io_uring_task_add\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, 0x0, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000480))
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r7 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x500, 0x3c0, 0x1, @discrete={0x7fff, 0xfff}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004004)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x13, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x94)

4.460130789s ago: executing program 0 (id=267):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async)
socket$inet6(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000400)={[{0x2d, 'cpu'}]}, 0x5) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000280)={'syztnl1\x00', <r4=>0x0, 0x4, 0x2, 0x3, 0x424, 0x5a, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x8007, 0x180, 0x5}})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, &(0x7f0000000380)={&(0x7f0000004d80)=@migrate={0x108c, 0x21, 0x10, 0x70bd27, 0x25dfdbfd, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6=@remote, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x5c, r4}, 0x6e6bb0, 0x1}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_auth={0x1034, 0x1, {{'sha512-neon\x00'}, 0x7f60, "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"}}]}, 0x108c}, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) (async)
sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async, rerun: 32)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) (async)
recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, &(0x7f00000004c0)=""/193, 0xc1}, 0x7f}, {{&(0x7f00000005c0)=@in, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}], 0x1, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x2, 0x40012100, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) (async)
ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x1) (async)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', r4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r9, &(0x7f0000000100)={0xa, 0xa9d, 0x3, @mcast1}, 0x1c)
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r1, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) (async, rerun: 32)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

4.084468296s ago: executing program 1 (id=268):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r1, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x5})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0x10201})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x3, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0x20000000000})
ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00005de000/0x2000)=nil, 0x2000, 0xf3})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0xfffffffffffffd9c, 0x0, r1, 0x0, &(0x7f0000000300)="ea", 0x1, 0x7d})
r2 = socket$unix(0x1, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f0000000080), 0x0, 0x20000000)

4.059250716s ago: executing program 3 (id=269):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cf, 0x4380, 0x0, 0x0, 0x0, r1}, &(0x7f0000000280)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
close(r5)
r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
lremovexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='security.apparmor\x00')
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x16)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r7 = syz_open_dev$sg(&(0x7f0000000000), 0xb68, 0x1)
ioctl$SG_IO(r7, 0x2285, 0x0)
io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
rt_sigsuspend(&(0x7f00000000c0)={[0x8]}, 0x8)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil)

3.867569362s ago: executing program 1 (id=270):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x7, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10}, 0x94)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000680)={<r0=>0x0})
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f00000006c0)={r0}) (async)
ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, &(0x7f00000006c0)={r0})
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r1, &(0x7f0000007740)=[{{&(0x7f0000002540)={0xa, 0x4e22, 0x3, @mcast2, 0x6}, 0x1c, 0x0}}], 0x1, 0x20004000) (async)
sendmmsg$inet6(r1, &(0x7f0000007740)=[{{&(0x7f0000002540)={0xa, 0x4e22, 0x3, @mcast2, 0x6}, 0x1c, 0x0}}], 0x1, 0x20004000)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x218}}], 0x1, 0x810) (async)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], 0x218}}], 0x1, 0x810)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000280), &(0x7f0000000500)=0x4)
r6 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x4900, 0x4) (async)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x4900, 0x4)
renameat2(r7, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4) (async)
renameat2(r7, &(0x7f0000000580)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x4)
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000001580)={{0x1, 0x231d3000, 0xc, 0x9, 0x80, 0x2c, 0x1e, 0x0, 0xd6, 0x6, 0x8, 0x8}, {0x41000, 0xf000, 0x8, 0x4, 0x3, 0x7, 0xb, 0x4, 0x0, 0xa, 0x4, 0xe}, {0x1, 0xe000, 0x7, 0x4, 0x4, 0x4, 0x1, 0x80, 0x9, 0xfc, 0x27, 0x82}, {0x70000, 0xa7bf84cae611be43, 0xa, 0x42, 0x49, 0x0, 0x9, 0x6c, 0x8, 0x5, 0x48, 0x1}, {0xe000, 0x6000, 0x4, 0x80, 0x5d, 0xa0, 0xa9, 0x8, 0x6, 0x3, 0x7f, 0xd}, {0x1000, 0xffff1000, 0x3, 0x4, 0x8, 0x6, 0x4, 0x6, 0x3, 0x7a, 0xf3, 0x5}, {0xdddd1000, 0x50000, 0x9, 0x6, 0x7, 0x9, 0x6, 0x80, 0x4, 0x8, 0x0, 0x8}, {0x60000, 0x8041000, 0xd, 0x1, 0x3, 0x59, 0x9, 0xa0, 0x7f, 0xf7, 0x0, 0x80}, {0xdddd0000, 0x9}, {0x100000, 0x7}, 0x80000000, 0x0, 0x1000, 0x200000, 0x0, 0x400, 0xa000, [0x8, 0x5, 0x7, 0xffffffffffffffff]})
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f00000000c0)={'virt_wifi0\x00', @remote})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)

3.867116437s ago: executing program 4 (id=271):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r1=>0x0}) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x71b4, &(0x7f00000005c0)={0x0, 0x8d2df, 0x12902, 0xffffffff, 0x800800}, &(0x7f0000000480)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x5c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000}) (async)
io_uring_enter(r2, 0x47f5, 0x2000000, 0x0, 0x0, 0x0) (async)
r5 = syz_open_dev$video4linux(&(0x7f0000000200), 0x1, 0x80280)
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) (async)
ioctl$VIDIOC_SUBDEV_G_CROP(r5, 0xc038563b, &(0x7f0000000000)={0x1, 0x0, {0xc41, 0x8, 0x19, 0x6752}}) (async)
r6 = dup(r5) (async)
r7 = socket$kcm(0x2, 0x5, 0x84) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x4}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
close(r9) (async)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x10) (async)
sendmsg$inet(r7, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x1, 0xfe, &(0x7f0000003ec0)=""/254, 0x41101, 0x8, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x4, 0x1000000, 0x6}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)=[{0x3, 0x3, 0x9}], 0x10, 0x8}, 0x94) (async)
fsopen(&(0x7f00000000c0)='affs\x00', 0x0) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000240))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
r11 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r11, 0x40044160, 0x3)
socket$nl_xfrm(0x10, 0x3, 0x6)

3.814012208s ago: executing program 4 (id=272):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x4001, 0x3, 0x240, 0x0, 0x720d, 0x148, 0xf8, 0x148, 0x1a8, 0x240, 0x240, 0x1a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @remote, 0xffffffff, 0x0, 'wg1\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x84, 0x3, 0x11}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x84]}, {0xffffffffffffffff, [0x6, 0xb2cc575b459b5b33, 0x4, 0x2, 0x1], 0x6, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0x0, 0xfffffff2]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0)
unshare(0x8040480)
r5 = socket$unix(0x1, 0x1, 0x0)
cachestat(r5, &(0x7f0000000280)={0x52a, 0x6}, 0x0, 0x0)
ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x20004, r6, 0x80000})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00')
mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1)
fcntl$setlease(r8, 0x400, 0x1)

3.404306219s ago: executing program 0 (id=273):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000140)={0x5400000000000000, {0x0, 0x5, 0x0, 0x9}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_clone3(&(0x7f0000000600)={0x100000, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340)=<r3=>0x0, {0x18}, &(0x7f0000000380)=""/97, 0x61, &(0x7f0000000500)=""/247, &(0x7f0000000440)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58)
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x5, 0x4002)
r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socket$inet_mptcp(0x2, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0800080007000000000014000000416f008c00660000ff1190780a010102ac1414134418e8100000000100000002000000d2000000830000000501445450a3ac1e000100000002ac1414aa00000000ac14c3d1ffff0081ac14141000000204ac1414aa000000007f0000010000000c73010102fffffff7ac1414aa0000008fac1414aa00006e6f7f000001006941000000004e204e2300089078"], 0x9a)

3.060252056s ago: executing program 3 (id=274):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000b7e000/0x2000)=nil, 0x2000, 0x64)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
r0 = fsopen(&(0x7f0000000300)='jfs\x00', 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000ec0)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(cbcmac(cast5-generic))\x00'}, 0x58)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000740), 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f00000001c0)={0x0, 0x1000000, {0x28, 0x64, 0x2025, 0x5, 0x1, 0x0, 0x1, 0x4}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
dup(r3)
ioctl$KVM_IRQFD(r4, 0x4020ae76, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd2d, 0x0, {0xa, 0x0, 0x80, 0x20, 0xfe, 0x0, 0x0, 0x1}, [@FRA_SRC={0x14, 0x2, @mcast2}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x19, 0x5}]}, 0x38}}, 0x800)
r6 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20)
fallocate(r3, 0x0, 0x89aa, 0xabb3)

3.055777104s ago: executing program 1 (id=275):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000ff0f000019000000bb2837c7a81074dcdc581a17d0e8f05a1a2fa3d930128b93d61ee71126c8fc32e422e24663c870cfb0eb41054fa131bfa6cea186409eff6fdcadbe1806d89b96ffb7b859f42c4fdd552c5f3a51fd12"])
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8)
r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000080)={0x9, 0x2, 0x0, "f067c51ac931286a106a241012c9bd17b30a3e5c6817c45fb9ff6b7176716429"})
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000000000000212000100080400fbffffff080006000000010000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000)
ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x4, 0x0, 0x0, 0x43, &(0x7f0000000080)="45c804235abff735d1df6791a0035e99b297e79e6f6771453867d86ea46d7eaaf75ed73ac043e1bf16ec9ba50f00ba3fd1ddfc6d4dfe76a905dd53a0a36c56ca97e10d", 0x7646})
mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0)

2.134093115s ago: executing program 2 (id=276):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) (async, rerun: 64)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000002c0)=<r1=>0xffffffffffffffff) (rerun: 64)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@multiplanar_userptr={0x7, 0x1, 0x4, 0x10, 0x3, {0x77359400}, {0x5, 0x8, 0x47, 0x80, 0x1e, 0x6, "1f0a800a"}, 0x5, 0x2, {&(0x7f0000000240)=[{0x3, 0x5, {&(0x7f00000001c0)}, 0x7}, {0x3, 0x77, {&(0x7f0000000200)}, 0x855}]}, 0x2, 0x0, r1}) (async, rerun: 64)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) (async, rerun: 64)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x42040)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000d00)={0x1, 0x2, 0x0, 0x0, 0x9}) (async)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1)

2.008625011s ago: executing program 4 (id=277):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x2)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_usb_disconnect(r0)
setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
link(&(0x7f0000000140)='.\x00', 0x0)
r3 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001", @ANYBLOB="8528c6799c81"], 0x0)

1.876361916s ago: executing program 2 (id=278):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000340)="b8be098ec066b818b200000f23c00f21f86635000003000f23f82667660ffcc1da632c7c0066b8000000000f23c00f21f86635000009000f23f866b91e09000066b80c93000066ba000000000f30baf80c3333b8bdf8628e66efbafc0cec66b9820900000f32baf80c66b85f66f58166efbafc0cb00dee", 0x77}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000005c0), 0x10)
recvmmsg(r3, &(0x7f0000003880)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000140)=""/200, 0xc8}], 0x2}, 0x3}], 0x1, 0x10002, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x72f557785cf91f15, 0x12, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x62ff}, [@jmp={0x5, 0x0, 0x5, 0x9, 0xa, 0x30, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x45}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f00000004c0)='GPL\x00', 0xb1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x4, 0xcb0, 0xfffffff7}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000580)=[r1, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x0, 0x1, 0xc, 0xb}, {0x2, 0x2, 0x9, 0x1}], 0x10, 0x3ff}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r5, &(0x7f0000000280)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0x61, {0x0, 0x200000000002, 0x20}}, 0x111000)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@int={0x10, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0x2b, 0x7b18f16c35eee794}]}, {0x0, [0xda24485d43d665ee, 0x2e, 0x30]}}, &(0x7f0000000800)=""/90, 0x2d, 0x5a, 0x0, 0x8e01f52, 0x10000, @value=r5}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xcc, &(0x7f00000008c0)=""/204, 0x0, 0x8, '\x00', 0x0, @fallback, r6, 0x8, &(0x7f00000000c0)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendfile(r8, r7, 0x0, 0x100000002)
accept$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000003c0)=0x1c)
munlockall()
sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r3, @ANYRES64=r2, @ANYRES64=r3], 0x48}}, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.639266564s ago: executing program 3 (id=279):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e4010223010902"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x4}, 0x0})
syz_usb_control_io(r3, 0x0, 0x0)
set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100, 0x5000, 0x2, 0x1}, 'syz1\x00', 0x3f})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a68000000060a0b040000000000000000020000003c0004802800018011"], 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
ioctl$UI_DEV_CREATE(r0, 0x5501)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="201fb0b2de000000", @ANYRES16=r5, @ANYBLOB="000425bd7000fcdbdf25830000000a000600ffffffffffff0000"], 0x20}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4004)
r6 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00')
writev(r6, &(0x7f0000000000)=[{&(0x7f0000000340)="f6", 0x1}, {0x0}], 0x2)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, <r7=>r0, {0x2, 0x9}}, './file0\x00'})
ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000380)={0xfffffff7, 0x0, 0x2, 0x0, 0x2})
write$input_event(r6, &(0x7f0000000200)={{}, 0x11, 0xae, 0x6}, 0x18)

1.551797067s ago: executing program 0 (id=280):
r0 = fsopen(&(0x7f0000000000)='msdos\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000080)='discard', &(0x7f0000000200)='\t', 0x1) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x6, 0x5}) (async)
creat(&(0x7f0000000080)='./file0\x00', 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

471.337544ms ago: executing program 0 (id=281):
syz_io_uring_setup(0xbdc, &(0x7f0000000000)={0x0, 0xce90, 0x10, 0x3, 0x40004333}, 0x0, &(0x7f00000000c0))
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000500)={<r2=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0, r2}}, 0x18)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x7e069000)
mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil)
mremap(&(0x7f0000ef9000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil)
mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
read$FUSE(r3, &(0x7f0000005200)={0x2020}, 0x2020)

125.602244ms ago: executing program 0 (id=282):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000004100)={0x2020}, 0x2020)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRESHEX=r0], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048085)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'})
socket(0xa, 0x4, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000070}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

0s ago: executing program 2 (id=283):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'sit0\x00', 0x0})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x10, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffffff, 0xffff, 0xfffffffc, 0x2000, 0xffffffff}, 0x0, 0x0, 0x4000007, 0x8, 0x101, 0x14, 0x0, 0x0, 0x2, 0x0, {0x1, 0x0, 0x0, 0x0, 0x2000000}}}}]}, 0x78}}, 0x4080)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000044000900000000000500000008000200", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000280003802400008004000180040002800c0004"], 0xe8}, 0x1, 0x0, 0x0, 0x20000010}, 0x8021)
syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x10002)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x3, 0x8248})
socket$nl_route(0x10, 0x3, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0xf)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0xa, 0x8000, 0x0, 0x9, 0x1, 0x800, 0x4fa0f, 0xffffffff}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.130' (ED25519) to the list of known hosts.
[   82.231785][ T5817] cgroup: Unknown subsys name 'net'
[   82.348720][ T5817] cgroup: Unknown subsys name 'cpuset'
[   82.358053][ T5817] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.146818][ T5817] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.185855][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.194123][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.205563][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.214155][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.214982][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.224149][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.237315][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.238966][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.245504][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.255423][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.259620][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.269692][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.274788][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.283482][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.291218][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.298621][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.309942][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.318570][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.325883][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.329632][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.341477][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.341474][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.356721][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.385505][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.393662][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   88.101331][ T5847] chnl_net:caif_netlink_parms(): no params data found
[   88.210655][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   88.222241][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   88.300666][ T5850] chnl_net:caif_netlink_parms(): no params data found
[   88.373197][ T5848] chnl_net:caif_netlink_parms(): no params data found
[   88.557115][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.565953][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.573616][ T5847] bridge_slave_0: entered allmulticast mode
[   88.581081][ T5847] bridge_slave_0: entered promiscuous mode
[   88.631777][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.639110][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.647011][ T5847] bridge_slave_1: entered allmulticast mode
[   88.654944][ T5847] bridge_slave_1: entered promiscuous mode
[   88.689735][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.697256][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.704729][ T5849] bridge_slave_0: entered allmulticast mode
[   88.712138][ T5849] bridge_slave_0: entered promiscuous mode
[   88.720112][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.727913][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.735243][ T5850] bridge_slave_0: entered allmulticast mode
[   88.742519][ T5850] bridge_slave_0: entered promiscuous mode
[   88.764131][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.771304][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.778733][ T5846] bridge_slave_0: entered allmulticast mode
[   88.786343][ T5846] bridge_slave_0: entered promiscuous mode
[   88.810168][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.817382][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.824663][ T5849] bridge_slave_1: entered allmulticast mode
[   88.832014][ T5849] bridge_slave_1: entered promiscuous mode
[   88.839877][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.847257][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.854593][ T5850] bridge_slave_1: entered allmulticast mode
[   88.861873][ T5850] bridge_slave_1: entered promiscuous mode
[   88.881374][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.888974][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.896324][ T5846] bridge_slave_1: entered allmulticast mode
[   88.903923][ T5846] bridge_slave_1: entered promiscuous mode
[   88.950696][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.013406][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.036364][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.044046][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.051229][ T5848] bridge_slave_0: entered allmulticast mode
[   89.058772][ T5848] bridge_slave_0: entered promiscuous mode
[   89.068757][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.080707][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.105863][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.115634][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.123438][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.130643][ T5848] bridge_slave_1: entered allmulticast mode
[   89.138245][ T5848] bridge_slave_1: entered promiscuous mode
[   89.147239][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.158682][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.184122][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.232166][ T5847] team0: Port device team_slave_0 added
[   89.292142][ T5847] team0: Port device team_slave_1 added
[   89.313488][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.326108][ T5849] team0: Port device team_slave_0 added
[   89.334502][ T5850] team0: Port device team_slave_0 added
[   89.355061][ T5846] team0: Port device team_slave_0 added
[   89.363974][ T5150] Bluetooth: hci4: command tx timeout
[   89.371876][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.383760][ T5849] team0: Port device team_slave_1 added
[   89.391561][ T5850] team0: Port device team_slave_1 added
[   89.412079][ T5846] team0: Port device team_slave_1 added
[   89.443395][ T5150] Bluetooth: hci3: command tx timeout
[   89.453261][   T52] Bluetooth: hci0: command tx timeout
[   89.453652][ T5843] Bluetooth: hci1: command tx timeout
[   89.465367][ T5150] Bluetooth: hci2: command tx timeout
[   89.474960][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.482029][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.508141][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.569773][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.577288][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.604160][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.630215][ T5848] team0: Port device team_slave_0 added
[   89.636718][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.643827][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.670494][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.682427][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.689775][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.715805][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.735268][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.742456][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.769232][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.783571][ T5848] team0: Port device team_slave_1 added
[   89.790015][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.797342][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.823576][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.835303][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.842260][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.868311][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.880866][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.887950][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   89.913958][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.995028][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.002027][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.028332][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.090701][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.097755][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   90.124402][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.141139][ T5847] hsr_slave_0: entered promiscuous mode
[   90.148519][ T5847] hsr_slave_1: entered promiscuous mode
[   90.216815][ T5850] hsr_slave_0: entered promiscuous mode
[   90.223482][ T5850] hsr_slave_1: entered promiscuous mode
[   90.230391][ T5850] debugfs: 'hsr0' already exists in 'hsr'
[   90.236580][ T5850] Cannot create hsr debugfs directory
[   90.246912][ T5849] hsr_slave_0: entered promiscuous mode
[   90.254102][ T5849] hsr_slave_1: entered promiscuous mode
[   90.260444][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   90.267389][ T5849] Cannot create hsr debugfs directory
[   90.277563][ T5846] hsr_slave_0: entered promiscuous mode
[   90.284814][ T5846] hsr_slave_1: entered promiscuous mode
[   90.291442][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   90.297771][ T5846] Cannot create hsr debugfs directory
[   90.468124][ T5848] hsr_slave_0: entered promiscuous mode
[   90.474891][ T5848] hsr_slave_1: entered promiscuous mode
[   90.481123][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   90.488445][ T5848] Cannot create hsr debugfs directory
[   90.981350][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.003983][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.016973][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.039864][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.112412][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.128292][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.156968][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.173639][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.256612][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.269626][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.285216][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.297327][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.411069][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.436511][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   91.454408][ T5843] Bluetooth: hci4: command tx timeout
[   91.468444][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   91.496832][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   91.518821][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.525940][ T5843] Bluetooth: hci0: command tx timeout
[   91.533062][ T5843] Bluetooth: hci1: command tx timeout
[   91.533086][ T5150] Bluetooth: hci2: command tx timeout
[   91.538502][   T52] Bluetooth: hci3: command tx timeout
[   91.601189][ T5847] 8021q: adding VLAN 0 to HW filter on device team0
[   91.644777][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.652183][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.691366][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.716784][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.732239][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.739510][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.752298][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.767580][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.826085][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.857502][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.899224][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   91.921743][ T5850] 8021q: adding VLAN 0 to HW filter on device team0
[   91.946991][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.954191][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.977663][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.984927][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.016430][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.023643][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.040661][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.047894][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.104135][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.166563][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.216960][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   92.236728][ T2983] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.243920][ T2983] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.272614][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.279918][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.408216][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.430381][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.471805][ T5849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.493538][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.518950][ T5847] veth0_vlan: entered promiscuous mode
[   92.529526][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   92.569283][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.583415][ T5847] veth1_vlan: entered promiscuous mode
[   92.600611][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.607825][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.652308][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.659512][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.764604][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.799615][ T5847] veth0_macvtap: entered promiscuous mode
[   92.850596][ T5850] veth0_vlan: entered promiscuous mode
[   92.887967][ T5846] veth0_vlan: entered promiscuous mode
[   92.913539][ T5847] veth1_macvtap: entered promiscuous mode
[   92.934443][ T5850] veth1_vlan: entered promiscuous mode
[   92.956637][ T5846] veth1_vlan: entered promiscuous mode
[   92.988875][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.017378][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.057989][  T300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.068293][  T300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.083899][ T5849] veth0_vlan: entered promiscuous mode
[   93.089832][  T300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.099009][  T300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.131137][ T5850] veth0_macvtap: entered promiscuous mode
[   93.165204][ T5849] veth1_vlan: entered promiscuous mode
[   93.174697][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   93.182527][ T5850] veth1_macvtap: entered promiscuous mode
[   93.208807][ T5846] veth0_macvtap: entered promiscuous mode
[   93.245551][ T5846] veth1_macvtap: entered promiscuous mode
[   93.319978][ T5849] veth0_macvtap: entered promiscuous mode
[   93.331723][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.347172][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.360443][ T5849] veth1_macvtap: entered promiscuous mode
[   93.369171][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.384815][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.426626][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.456312][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.466439][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.477536][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.495617][ T2983] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.508475][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.519484][ T2983] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.528573][   T52] Bluetooth: hci4: command tx timeout
[   93.553155][ T5848] veth0_vlan: entered promiscuous mode
[   93.567344][ T2983] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.599998][ T5847] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   93.615226][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.623299][   T52] Bluetooth: hci3: command tx timeout
[   93.624859][ T5843] Bluetooth: hci1: command tx timeout
[   93.628792][ T5150] Bluetooth: hci0: command tx timeout
[   93.634213][ T5843] Bluetooth: hci2: command tx timeout
[   93.651605][ T2983] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.667828][ T2983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.680519][ T2983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.699776][ T5848] veth1_vlan: entered promiscuous mode
[   93.750312][ T2983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.775150][ T2983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.791827][ T2983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.828677][ T2983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.844509][ T2983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.883122][ T2983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.997268][ T5848] veth0_macvtap: entered promiscuous mode
[   94.075871][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.080129][ T5848] veth1_macvtap: entered promiscuous mode
[   94.097033][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.158334][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.167106][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.195347][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.202325][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.220433][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.229589][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.290085][ T5938] process 'syz.4.7' launched './file0' with NULL argv: empty string added
[   94.308579][  T300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.335668][ T5938] mmap: syz.4.7 (5938) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   94.360111][ T5938] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.391311][   T30] audit: type=1326 audit(1767879352.908:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.4.7" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51e5b8f749 code=0x0
[   94.403024][  T300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.510592][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   94.519413][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.528085][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.536735][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.545402][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.554114][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.562760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   94.571468][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.580219][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.588931][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   94.815741][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.830543][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.841627][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.903899][  T300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.993905][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.016093][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.106456][ T3515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.116004][ T3515] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.280822][ T4168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.298673][ T4168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.408657][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.438304][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.603046][ T5150] Bluetooth: hci4: command tx timeout
[   95.683431][ T5150] Bluetooth: hci2: command tx timeout
[   95.683474][ T5835] Bluetooth: hci3: command tx timeout
[   95.689457][   T52] Bluetooth: hci1: command tx timeout
[   95.712808][ T5843] Bluetooth: hci0: command tx timeout
[   95.881927][ T5960] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   95.927578][ T5960] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.951375][ T5960] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   95.989108][ T5962] netlink: 'syz.1.10': attribute type 49 has an invalid length.
[   95.998540][ T5960] netlink: 'syz.0.1': attribute type 10 has an invalid length.
[   96.026004][ T5960] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1'.
[   96.038242][  T795] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   96.086722][ T5960] batadv0: entered promiscuous mode
[   96.092004][ T5960] batadv0: entered allmulticast mode
[   96.129923][ T5960] bond0: (slave batadv0): Releasing backup interface
[   96.180947][ T5960] bridge0: port 3(batadv0) entered blocking state
[   96.193868][ T5960] bridge0: port 3(batadv0) entered disabled state
[   96.200505][  T795] usb 3-1: device descriptor read/64, error -71
[   96.230167][ T5973] netlink: 44 bytes leftover after parsing attributes in process `syz.3.13'.
[   96.335932][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[   96.345420][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[   96.433322][ T5837] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.502851][  T795] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.576497][ T5981] input: syz1 as /devices/virtual/input/input5
[   96.592946][ T5837] usb 2-1: Using ep0 maxpacket: 16
[   96.626836][ T5837] usb 2-1: unable to get BOS descriptor or descriptor too short
[   96.643115][  T795] usb 3-1: device descriptor read/64, error -71
[   96.685014][ T5837] usb 2-1: config 13 has an invalid interface number: 50 but max is 0
[   96.714482][ T5837] usb 2-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config
[   96.752791][ T5837] usb 2-1: config 13 has no interface number 0
[   96.765973][  T795] usb usb3-port1: attempt power cycle
[   96.810987][ T5837] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16
[   96.899520][ T5837] usb 2-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   96.914364][ T5837] usb 2-1: config 13 interface 50 has no altsetting 0
[   96.934238][ T5837] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32
[   96.945088][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.953190][ T5837] usb 2-1: Product: 땀⮥ｾ瞭齷�혶緸붓냯�勌��烹밀쪆讬媼㌑㕴뻨녰籙ⴰ랃g蛿༳髵眊ⱂ蟡阓೜⤟䇑믦᥼㕷텴ﺽ㖡㶎�켷Ɯ�昣�뷡�⬽ઓ麬�
[   96.977690][ T5837] usb 2-1: Manufacturer: �
[   96.982376][ T5837] usb 2-1: SerialNumber: �
[   96.999583][ T5971] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   97.264327][ T5837] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   97.272890][  T795] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   97.301090][ T5837] usb 2-1: MIDIStreaming interface descriptor not found
[   97.479123][  T981] cfg80211: failed to load regulatory.db
[   97.506868][ T5837] usb 2-1: USB disconnect, device number 2
[   97.651112][  T795] usb 3-1: device descriptor read/8, error -71
[   97.672496][ T5993] udevd[5993]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   97.932966][  T795] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   97.986269][  T795] usb 3-1: device descriptor read/8, error -71
[   98.153634][  T795] usb usb3-port1: unable to enumerate USB device
[   98.442813][   T44] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   98.593296][   T44] usb 2-1: device descriptor read/64, error -71
[   98.674497][    T9] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[   98.844664][    T9] usb 1-1: config 0 has an invalid interface number: 138 but max is 0
[   98.862834][    T9] usb 1-1: config 0 has no interface number 0
[   98.869036][    T9] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[   98.903457][   T44] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   98.918640][    T9] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87
[   98.963775][    T9] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10
[   99.006876][    T9] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[   99.033122][   T44] usb 2-1: device descriptor read/64, error -71
[   99.042377][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66
[   99.052528][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.084977][    T9] usb 1-1: config 0 descriptor??
[   99.174316][   T44] usb usb2-port1: attempt power cycle
[   99.250090][ T6027] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component
[   99.305460][    T9] usb 1-1: string descriptor 0 read error: -71
[   99.321691][    T9] usbtest 1-1:0.138: Linux gadget zero
[   99.345213][    T9] usbtest 1-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt)
[   99.356533][ T6029] netlink: 'syz.4.21': attribute type 10 has an invalid length.
[   99.384035][    T9] usb 1-1: USB disconnect, device number 2
[   99.387951][ T6027] bridge_slave_0: left allmulticast mode
[   99.396310][ T6027] bridge_slave_0: left promiscuous mode
[   99.407996][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.435443][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'.
[   99.450572][ T6027] bridge_slave_1: left allmulticast mode
[   99.465918][ T6027] bridge_slave_1: left promiscuous mode
[   99.471871][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.495732][ T6027] bond0: (slave bond_slave_0): Releasing backup interface
[   99.542810][   T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   99.556142][ T6027] bond0: (slave bond_slave_1): Releasing backup interface
[   99.575125][   T44] usb 2-1: device descriptor read/8, error -71
[   99.639470][ T6027] team0: Port device team_slave_0 removed
[   99.674361][ T6027] team0: Port device team_slave_1 removed
[   99.692411][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.702064][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.731648][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.741548][ T6027] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.760168][ T6027] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   99.853059][   T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   99.887695][   T44] usb 2-1: device descriptor read/8, error -71
[   99.938044][ T6029] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.994416][ T6029] team0: Port device bond0 added
[  100.015315][   T44] usb usb2-port1: unable to enumerate USB device
[  100.291122][ T6031] team0 (unregistering): Port device bond0 removed
[  100.362880][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  100.842780][   T44] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  100.974132][    T9] usb 3-1: Using ep0 maxpacket: 8
[  100.982628][    T9] usb 3-1: config index 0 descriptor too short (expected 1307, got 27)
[  100.991920][  T795] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.999614][    T9] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  101.003141][   T44] usb 4-1: Using ep0 maxpacket: 8
[  101.019985][   T44] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89
[  101.020742][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  101.071858][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  101.088199][   T44] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  101.108547][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  101.115626][   T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.131016][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  101.168037][   T44] usb 4-1: Product: syz
[  101.188136][   T44] usb 4-1: Manufacturer: syz
[  101.225479][   T44] usb 4-1: SerialNumber: syz
[  101.258541][  T795] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  101.274948][    T9] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  101.288691][  T795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.305322][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.322052][    T9] usb 3-1: Product: syz
[  101.334597][  T795] usb 1-1: config 0 descriptor??
[  101.336277][   T44] usb 4-1: config 0 descriptor??
[  101.362967][    T9] usb 3-1: Manufacturer: syz
[  101.377095][ T6069] syz.1.27 uses obsolete (PF_INET,SOCK_PACKET)
[  101.392406][    T9] usb 3-1: SerialNumber: syz
[  101.402011][  T795] cp210x 1-1:0.0: cp210x converter detected
[  101.432992][    T9] usb 3-1: config 0 descriptor??
[  101.462558][    T9] hub 3-1:0.0: bad descriptor, ignoring hub
[  101.492140][    T9] hub 3-1:0.0: probe with driver hub failed with error -5
[  101.602869][   T44] rc_core: IR keymap rc-streamzap not found
[  101.608849][   T44] Registered IR keymap rc-empty
[  101.670517][  T795] usb 1-1: cp210x converter now attached to ttyUSB0
[  101.685592][   T44] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  101.738633][   T44] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6
[  101.829051][   T44] usb 4-1: USB disconnect, device number 2
[  101.830497][ T6080] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  101.857105][ T5923] usb 3-1: USB disconnect, device number 6
[  101.882026][ T6081] xt_hashlimit: overflow, try lower: 18446744073709551615/255
[  102.096819][    T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  102.136318][    T9] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  102.430935][   T30] audit: type=1326 audit(1767879360.948:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  102.490190][ T6096] bond1: option tlb_dynamic_lb: invalid value (5)
[  102.590203][   T30] audit: type=1326 audit(1767879360.998:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  102.655843][ T6096] bond1 (unregistering): Released all slaves
[  102.674276][    T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[  102.675927][   T30] audit: type=1326 audit(1767879360.998:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  102.740772][   T30] audit: type=1326 audit(1767879361.018:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  102.741192][    T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[  102.805943][   T30] audit: type=1326 audit(1767879361.018:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  102.849707][   T30] audit: type=1326 audit(1767879361.018:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  102.891152][   T30] audit: type=1326 audit(1767879361.018:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  102.901249][    T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0
[  102.959428][   T30] audit: type=1326 audit(1767879361.018:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  103.024333][   T30] audit: type=1326 audit(1767879361.018:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  103.035279][    T9] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1
[  103.120989][   T30] audit: type=1326 audit(1767879361.018:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6092 comm="syz.3.31" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1053b8f749 code=0x7ffc0000
[  103.344369][ T6112] fido_id[6112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  103.407277][    T9] usb 1-1: USB disconnect, device number 3
[  103.452122][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  103.484253][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.34'.
[  103.494801][    T9] cp210x 1-1:0.0: device disconnected
[  103.834566][ T6119] bond1: option ad_actor_sys_prio: invalid value (0)
[  103.926825][ T6119] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[  104.065765][ T6119] bond1 (unregistering): Released all slaves
[  104.213343][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  104.232834][ T5950] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  104.492788][ T5950] usb 2-1: Using ep0 maxpacket: 16
[  104.534699][    T9] usb 4-1: device descriptor read/64, error -71
[  104.554139][ T5950] usb 2-1: config index 0 descriptor too short (expected 14385, got 18)
[  104.563534][ T5950] usb 2-1: config 52 has too many interfaces: 52, using maximum allowed: 32
[  104.572277][ T5950] usb 2-1: config 52 has an invalid descriptor of length 52, skipping remainder of the config
[  104.585947][ T5950] usb 2-1: config 52 has 0 interfaces, different from the descriptor's value: 52
[  104.633862][ T5950] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  104.643306][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  104.651450][ T5950] usb 2-1: Product: syz
[  104.656614][ T5950] usb 2-1: Manufacturer: syz
[  104.661311][ T5950] usb 2-1: SerialNumber: syz
[  104.832912][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  105.002813][    T9] usb 4-1: device descriptor read/64, error -71
[  105.150471][    T9] usb usb4-port1: attempt power cycle
[  105.355335][ T6160] netlink: 'syz.4.40': attribute type 1 has an invalid length.
[  105.591610][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  105.599390][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  105.637593][    T9] usb 4-1: device descriptor read/8, error -71
[  105.780451][   T10] usb 3-1: Using ep0 maxpacket: 8
[  105.788159][   T10] usb 3-1: config 0 has an invalid interface number: 186 but max is 0
[  105.797884][   T10] usb 3-1: config 0 has no interface number 0
[  105.811100][   T10] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  105.838377][   T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  105.883342][   T10] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  105.912842][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  105.928922][ T6161] macvlan2: entered promiscuous mode
[  105.934626][ T6161] macvlan2: entered allmulticast mode
[  106.009492][    T9] usb 4-1: device descriptor read/8, error -71
[  106.135312][   T10] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  106.290295][    T9] usb usb4-port1: unable to enumerate USB device
[  106.396138][   T10] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  106.498857][ T6171] fuse: Bad value for 'rootmode'
[  106.670873][   T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  106.680925][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.764243][   T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  106.780033][   T10] usb 3-1: Product: syz
[  106.792823][   T10] usb 3-1: Manufacturer: syz
[  106.863055][   T10] usb 3-1: SerialNumber: syz
[  106.929659][   T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  106.935649][   T10] usb 3-1: config 0 descriptor??
[  106.942152][   T44] usb 1-1: config 0 has no interface number 0
[  107.054817][   T44] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  107.091892][   T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.234587][   T10] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0
[  107.324347][   T44] usb 1-1: Product: syz
[  107.343929][   T44] usb 1-1: Manufacturer: syz
[  107.377663][   T44] usb 1-1: SerialNumber: syz
[  107.428809][  T981] usb 3-1: USB disconnect, device number 7
[  107.440057][   T44] usb 1-1: config 0 descriptor??
[  107.668253][   T44] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  107.751555][   T44] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  107.832128][   T44] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  107.855759][   T44] usb 1-1: media controller created
[  107.969268][   T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  108.428006][ T5950] usb 2-1: USB disconnect, device number 7
[  108.453333][   T44] usb 1-1: USB disconnect, device number 4
[  108.553804][   T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  108.728191][   T10] usb 3-1: device descriptor read/64, error -71
[  108.847323][ T5837] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  108.872297][ T6198] batadv_slave_1: entered promiscuous mode
[  109.033250][   T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  109.088275][ T5837] usb 4-1: Using ep0 maxpacket: 8
[  109.095385][ T5837] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  109.104273][ T5837] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  109.115230][ T5837] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  109.125377][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  109.139380][ T5837] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  109.157814][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.171546][ T5837] usb 4-1: Product: syz
[  109.189483][ T5837] usb 4-1: Manufacturer: syz
[  109.200243][ T5837] usb 4-1: SerialNumber: syz
[  109.202954][   T10] usb 3-1: device descriptor read/64, error -71
[  109.219318][ T5837] usb 4-1: config 0 descriptor??
[  109.227351][ T5837] hub 4-1:0.0: bad descriptor, ignoring hub
[  109.234189][ T5837] hub 4-1:0.0: probe with driver hub failed with error -5
[  109.386338][   T10] usb usb3-port1: attempt power cycle
[  109.573126][ T6210] 8021q: adding VLAN 0 to HW filter on device batadv1
[  109.599124][ T6210] team0: Port device batadv1 added
[  109.679477][ T6193] batadv_slave_1: left promiscuous mode
[  109.716626][ T5837] usb 4-1: USB disconnect, device number 7
[  109.772764][   T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  109.793505][   T10] usb 3-1: device descriptor read/8, error -71
[  109.932862][  T981] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  110.063415][   T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  110.133949][  T981] usb 5-1: Using ep0 maxpacket: 32
[  110.141741][  T981] usb 5-1: config 0 has no interfaces?
[  110.144700][   T10] usb 3-1: device descriptor read/8, error -71
[  110.194198][  T981] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=96.8f
[  110.231940][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.265975][  T981] usb 5-1: Product: syz
[  110.278817][  T981] usb 5-1: Manufacturer: syz
[  110.288283][  T981] usb 5-1: SerialNumber: syz
[  110.321686][   T10] usb usb3-port1: unable to enumerate USB device
[  110.326234][  T981] usb 5-1: config 0 descriptor??
[  110.608195][  T981] usb 5-1: USB disconnect, device number 2
[  110.880950][ T6227] syzkaller0: entered promiscuous mode
[  110.889434][ T6227] syzkaller0: entered allmulticast mode
[  111.455421][ T5837] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  111.491322][ T6244] Zero length message leads to an empty skb
[  111.632851][ T5837] usb 1-1: Using ep0 maxpacket: 8
[  111.716456][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  111.742829][ T5837] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  111.758801][ T6244] kvm: pic: level sensitive irq not supported
[  111.759052][ T6244] kvm: pic: non byte read
[  111.780970][ T6244] kvm: pic: level sensitive irq not supported
[  111.781056][ T6244] kvm: pic: non byte read
[  111.798756][ T5837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  111.812814][ T5837] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  111.848026][ T6244] kvm: pic: level sensitive irq not supported
[  111.886554][ T6244] kvm: pic: non byte read
[  111.905619][ T5837] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  111.925009][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.936652][ T6254] netlink: 64 bytes leftover after parsing attributes in process `syz.4.59'.
[  111.949654][ T5837] hub 1-1:1.0: bad descriptor, ignoring hub
[  111.962081][ T6244] kvm: pic: level sensitive irq not supported
[  111.962161][ T6244] kvm: pic: non byte read
[  111.975066][ T6254] input: syz1 as /devices/virtual/input/input7
[  111.981305][ T6254] input: failed to attach handler leds to device input7, error: -6
[  111.992948][ T5837] hub 1-1:1.0: probe with driver hub failed with error -5
[  112.007128][ T5837] cdc_wdm 1-1:1.0: skipping garbage
[  112.012501][ T5837] cdc_wdm 1-1:1.0: skipping garbage
[  112.026518][ T5837] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  112.051733][ T5837] cdc_wdm 1-1:1.0: Unknown control protocol
[  112.492567][ T6259] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000
[  112.560013][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'.
[  113.123246][ T6264] fuse: Unknown parameter 'êr±ŠêyAdeiault_i'
[  113.418278][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  113.418298][   T30] audit: type=1800 audit(1767879371.938:58): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.63" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  113.605498][   T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  113.753058][   T10] usb 3-1: device descriptor read/64, error -71
[  113.933463][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  113.992895][   T10] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  114.093608][    T9] usb 4-1: Using ep0 maxpacket: 32
[  114.116154][    T9] usb 4-1: config 0 has an invalid interface number: 125 but max is 0
[  114.125030][   T10] usb 3-1: device descriptor read/64, error -71
[  114.151902][    T9] usb 4-1: config 0 has no interface number 0
[  114.171479][    T9] usb 4-1: config 0 interface 125 has no altsetting 0
[  114.183019][    T9] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=b8.a2
[  114.202823][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.219024][    T9] usb 4-1: Product: syz
[  114.224976][    T9] usb 4-1: Manufacturer: syz
[  114.229676][    T9] usb 4-1: SerialNumber: syz
[  114.244140][    T9] usb 4-1: config 0 descriptor??
[  114.257817][   T10] usb usb3-port1: attempt power cycle
[  114.334915][   T44] usb 1-1: USB disconnect, device number 5
[  114.559436][ T6280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.570869][ T6280] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.579009][   T30] audit: type=1326 audit(1767879373.018:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b7b8f749 code=0x7ffc0000
[  114.613147][   T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  114.633589][   T10] usb 3-1: device descriptor read/8, error -71
[  114.642386][   T30] audit: type=1326 audit(1767879373.018:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5b7b8f749 code=0x7ffc0000
[  114.732003][   T30] audit: type=1326 audit(1767879373.018:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b7b8f749 code=0x7ffc0000
[  114.792808][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  114.794787][   T30] audit: type=1326 audit(1767879373.018:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b7b8f749 code=0x7ffc0000
[  114.865525][   T30] audit: type=1326 audit(1767879373.018:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5b7b91667 code=0x7ffc0000
[  114.898202][   T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  114.925653][   T10] usb 3-1: device descriptor read/8, error -71
[  114.948033][   T30] audit: type=1326 audit(1767879373.018:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe5b7b915dc code=0x7ffc0000
[  115.000629][   T30] audit: type=1326 audit(1767879373.018:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe5b7b91514 code=0x7ffc0000
[  115.022873][    T9] usb 2-1: Using ep0 maxpacket: 32
[  115.028120][ T5974] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  115.079623][   T10] usb usb3-port1: unable to enumerate USB device
[  115.086438][   T30] audit: type=1326 audit(1767879373.018:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe5b7b91514 code=0x7ffc0000
[  115.165066][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.176482][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.190124][    T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  115.200225][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.213956][    T9] usb 2-1: config 0 descriptor??
[  115.215841][   T30] audit: type=1326 audit(1767879373.018:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe5b7b8e3aa code=0x7ffc0000
[  115.252835][ T5974] usb 1-1: Using ep0 maxpacket: 16
[  115.276356][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.287593][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.303352][ T5974] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  115.312579][ T5974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.361009][ T5974] usb 1-1: config 0 descriptor??
[  115.381580][ T5974] usbhid 1-1:0.0: can't add hid device: -22
[  115.389909][ T5974] usbhid 1-1:0.0: probe with driver usbhid failed with error -22
[  115.576293][ T5974] usb 1-1: USB disconnect, device number 6
[  116.681221][ T5837] usb 4-1: USB disconnect, device number 8
[  116.763472][ T6320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  117.504980][ T6338] netlink: 28 bytes leftover after parsing attributes in process `syz.3.82'.
[  117.811116][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  117.818316][ T6347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  117.825839][ T6347] IPv6: NLM_F_CREATE should be set when creating new route
[  117.833217][ T6347] IPv6: NLM_F_CREATE should be set when creating new route
[  117.840479][ T6347] IPv6: NLM_F_CREATE should be set when creating new route
[  117.851044][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  117.909741][    T9] usb 2-1: USB disconnect, device number 8
[  117.969757][ T6343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  118.152926][ T5837] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  118.347544][ T5837] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  118.361998][ T5837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.385251][ T5837] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  118.403748][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  118.418547][ T5837] usb 3-1: config 1 has no interface number 0
[  118.432285][ T5837] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  118.454785][ T5837] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  118.490606][ T5837] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  118.502011][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.510695][ T5837] usb 3-1: Product: syz
[  118.515362][ T5837] usb 3-1: Manufacturer: syz
[  118.520138][ T5837] usb 3-1: SerialNumber: syz
[  118.578011][    T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  118.618561][    T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  118.646973][    T9] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  118.662183][    T9] usb 2-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.684153][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  118.709996][    T9] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  118.744495][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.921309][    T9] usb 2-1: Product: syz
[  118.935172][    T9] usb 2-1: Manufacturer: syz
[  118.950170][    T9] usb 2-1: SerialNumber: syz
[  118.981590][ T6355] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  119.016382][ T6355] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  119.241437][    T9] rtl8150 2-1:1.0: couldn't find required endpoints
[  119.255157][    T9] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  119.338039][    T9] usb 2-1: USB disconnect, device number 9
[  119.794665][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  119.953287][    T9] usb 4-1: Using ep0 maxpacket: 32
[  119.978084][    T9] usb 4-1: config 0 has an invalid interface number: 74 but max is 1
[  119.992044][    T9] usb 4-1: config 0 has no interface number 1
[  120.014818][    T9] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  120.024143][ T5974] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  120.040723][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.061235][    T9] usb 4-1: Product: syz
[  120.075152][    T9] usb 4-1: Manufacturer: syz
[  120.086956][    T9] usb 4-1: SerialNumber: syz
[  120.099120][    T9] usb 4-1: config 0 descriptor??
[  120.181924][    T9] snd-usb-audio 4-1:0.74: probe with driver snd-usb-audio failed with error -22
[  120.196078][ T5974] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  120.206274][ T5974] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  120.232327][ T5974] usb 5-1: config 220 has no interface number 2
[  120.241947][ T5974] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  120.271749][ T5974] usb 5-1: config 220 interface 0 has no altsetting 0
[  120.285239][ T5974] usb 5-1: config 220 interface 76 has no altsetting 0
[  120.299912][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.74/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.337411][ T5974] usb 5-1: config 220 interface 1 has no altsetting 0
[  120.357656][ T5974] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  120.379034][ T5974] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.407518][ T5974] usb 5-1: Product: syz
[  120.416361][ T5974] usb 5-1: Manufacturer: syz
[  120.424513][ T5974] usb 5-1: SerialNumber: syz
[  120.541326][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'.
[  120.822828][ T5950] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  120.912102][  T981] usb 3-1: USB disconnect, device number 16
[  120.963085][ T5950] usb 2-1: device descriptor read/64, error -71
[  121.171675][ T6401] random: crng reseeded on system resumption
[  121.232859][ T5950] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  121.263451][  T981] usb 3-1: new low-speed USB device number 17 using dummy_hcd
[  121.375389][ T5950] usb 2-1: device descriptor read/64, error -71
[  121.415740][  T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  121.427511][  T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.438268][  T981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  121.510158][ T5950] usb usb2-port1: attempt power cycle
[  121.696957][  T981] usb 3-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00
[  121.728173][  T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.760847][  T981] usb 3-1: config 0 descriptor??
[  121.783476][  T981] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8
[  121.962843][ T5950] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  121.987699][ T5185] bcm5974 3-1:0.0: could not read from device
[  121.997109][ T5950] usb 2-1: device descriptor read/8, error -71
[  122.011782][ T5185] bcm5974 3-1:0.0: could not read from device
[  122.027776][  T981] usb 3-1: USB disconnect, device number 17
[  122.036812][ T5185] bcm5974 3-1:0.0: could not read from device
[  122.123865][ T5993] udevd[5993]: Error opening device "/dev/input/event4": No such file or directory
[  122.149046][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4"
[  122.180124][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4"
[  122.221361][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4"
[  122.232178][ T5993] udevd[5993]: Unable to EVIOCGABS device "/dev/input/event4"
[  122.313015][ T5950] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  122.361671][ T5950] usb 2-1: device descriptor read/8, error -71
[  122.494841][ T5950] usb usb2-port1: unable to enumerate USB device
[  122.553040][  T981] usb 4-1: USB disconnect, device number 9
[  122.822066][ T5974] usb 5-1: selecting invalid altsetting 0
[  122.830349][ T5974] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  122.874032][ T5974] uvcvideo 5-1:220.0: No valid video chain found.
[  123.033270][ T5974] usb 5-1: selecting invalid altsetting 0
[  123.063985][  T981] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  123.091797][ T5974] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  123.143987][ T5974] usb 5-1: USB disconnect, device number 3
[  123.232820][  T981] usb 4-1: Using ep0 maxpacket: 8
[  123.245033][  T981] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  123.294236][  T981] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF
[  123.366573][  T981] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 47, changing to 9
[  123.548507][  T981] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 25189, setting to 1024
[  123.622337][  T981] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  123.624322][ T6418] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  123.753518][  T981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  123.794858][  T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.862820][  T981] usb 4-1: Product: syz
[  123.872765][  T981] usb 4-1: Manufacturer: syz
[  123.882849][  T981] usb 4-1: SerialNumber: syz
[  123.911476][ T6405] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  123.978746][  T981] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  124.001638][  T981] usbtest 4-1:1.0: couldn't get endpoints, -22
[  124.020077][  T981] usbtest 4-1:1.0: probe with driver usbtest failed with error -22
[  124.219405][  T981] usb 4-1: USB disconnect, device number 10
[  124.747867][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.104'.
[  125.003422][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[  125.014774][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[  125.026899][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[  125.037742][ T6434] netlink: 8 bytes leftover after parsing attributes in process `syz.0.105'.
[  125.351085][ T6439] tipc: Started in network mode
[  125.357042][ T6439] tipc: Node identity da50c6408556, cluster identity 4711
[  125.384230][ T6439] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  125.427906][ T6439] tipc: Resetting bearer <eth:syzkaller0>
[  125.513366][ T6437] tipc: Disabling bearer <eth:syzkaller0>
[  125.675840][ T6457] netlink: 'syz.3.109': attribute type 1 has an invalid length.
[  125.760330][ T6462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.109'.
[  125.916564][ T6457] bond1: (slave bridge1): making interface the new active one
[  125.996047][ T6457] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  126.023088][ T5911] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  126.172810][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  126.187319][ T5911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  126.216885][ T5911] usb 2-1: New USB device found, idVendor=04b3, idProduct=3105, bcdDevice= 0.00
[  126.233535][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.292431][ T5911] usb 2-1: config 0 descriptor??
[  126.453834][ T6469] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  126.573074][ T6469] Cannot find add_set index 0 as target
[  127.057637][ T6476] input: syz0 as /devices/virtual/input/input9
[  127.193393][ T5911] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  127.372928][ T5911] usb 4-1: Using ep0 maxpacket: 8
[  127.406259][ T5911] usb 4-1: config 9 has an invalid interface number: 47 but max is 0
[  127.417254][ T5911] usb 4-1: config 9 has no interface number 0
[  127.427044][ T5911] usb 4-1: New USB device found, idVendor=12d1, idProduct=140e, bcdDevice= 0.00
[  127.436574][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.446430][ T5911] usb 4-1: Product: syz
[  127.450872][ T5911] usb 4-1: Manufacturer: syz
[  127.456163][ T5911] usb 4-1: SerialNumber: syz
[  127.474763][ T6481] : entered promiscuous mode
[  127.683706][ T5911] usb-storage 4-1:9.47: USB Mass Storage device detected
[  127.758731][ T5911] usb 4-1: USB disconnect, device number 11
[  128.056733][ T6496] can: request_module (can-proto-0) failed.
[  128.672520][ T5983] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  128.792771][ T5974] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  128.881584][  T981] usb 2-1: USB disconnect, device number 14
[  128.906248][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.923560][ T5983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.936695][ T5983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  128.943793][ T5974] usb 5-1: device descriptor read/64, error -71
[  128.950898][ T5983] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  128.966502][ T5983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.983529][ T5983] usb 4-1: config 0 descriptor??
[  129.098883][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.208508][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.241194][ T5974] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  129.432933][ T5974] usb 5-1: device descriptor read/64, error -71
[  129.443533][  T981] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  129.458903][ T5983] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  129.573190][ T5974] usb usb5-port1: attempt power cycle
[  129.613668][  T981] usb 2-1: Using ep0 maxpacket: 8
[  129.620749][  T981] usb 2-1: config 3 has an invalid interface number: 242 but max is 3
[  129.642794][  T981] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping
[  129.668808][  T981] usb 2-1: config 3 has an invalid interface number: 194 but max is 3
[  129.670076][ T6525] loop9: detected capacity change from 0 to 7
[  129.685264][ T6009] usb 4-1: USB disconnect, device number 12
[  129.694110][  T981] usb 2-1: config 3 has an invalid interface number: 160 but max is 3
[  129.702853][  T981] usb 2-1: config 3 has an invalid interface number: 210 but max is 3
[  129.711712][  T981] usb 2-1: config 3 contains an unexpected descriptor of type 0x2, skipping
[  129.743192][ T6525] Dev loop9: unable to read RDB block 7
[  129.759882][  T981] usb 2-1: config 3 has an invalid descriptor of length 164, skipping remainder of the config
[  129.760344][ T6525]  loop9: AHDI p1 p2
[  129.774436][  T981] usb 2-1: config 3 has no interface number 0
[  129.774463][  T981] usb 2-1: config 3 has no interface number 1
[  129.801156][  T981] usb 2-1: config 3 has no interface number 2
[  129.801444][ T6525] loop9: partition table partially beyond EOD, 
[  129.808251][  T981] usb 2-1: config 3 has no interface number 3
[  129.831233][ T6525] truncated
[  129.831280][  T981] usb 2-1: config 3 interface 242 altsetting 1 endpoint 0x6 has an invalid bInterval 129, changing to 7
[  129.839184][ T6525] loop9: p1 size 4227858431 extends beyond EOD, truncated
[  129.862925][  T981] usb 2-1: config 3 interface 242 altsetting 1 has an endpoint descriptor with address 0x1F, changing to 0xF
[  129.880801][  T981] usb 2-1: config 3 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  129.902566][  T981] usb 2-1: config 3 interface 242 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[  129.922909][ T5974] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  129.973049][  T981] usb 2-1: config 3 interface 242 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[  129.988421][  T981] usb 2-1: config 3 interface 242 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[  130.013151][ T5974] usb 5-1: device descriptor read/8, error -71
[  130.047940][  T981] usb 2-1: config 3 interface 242 altsetting 1 has a duplicate endpoint with address 0x2, skipping
[  130.072823][  T981] usb 2-1: config 3 interface 242 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  130.110770][  T981] usb 2-1: config 3 interface 242 altsetting 1 endpoint 0xC has invalid maxpacket 22059, setting to 64
[  130.133874][  T981] usb 2-1: config 3 interface 242 altsetting 1 has a duplicate endpoint with address 0xC, skipping
[  130.146192][  T981] usb 2-1: config 3 interface 242 altsetting 1 has 13 endpoint descriptors, different from the interface descriptor's value: 14
[  130.164763][  T981] usb 2-1: config 3 interface 194 altsetting 9 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  130.184009][  T981] usb 2-1: config 3 interface 194 altsetting 9 has a duplicate endpoint with address 0xB, skipping
[  130.195597][  T981] usb 2-1: config 3 interface 194 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[  130.207252][  T981] usb 2-1: config 3 interface 194 altsetting 9 has a duplicate endpoint with address 0x2, skipping
[  130.222920][  T981] usb 2-1: config 3 interface 194 altsetting 9 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  130.234217][  T981] usb 2-1: config 3 interface 194 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  130.254410][ T5974] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  130.293554][ T5974] usb 5-1: device descriptor read/8, error -71
[  130.315706][  T981] usb 2-1: config 3 interface 160 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  130.364580][  T981] usb 2-1: config 3 interface 210 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  130.403588][  T981] usb 2-1: config 3 interface 242 has no altsetting 0
[  130.413326][ T5974] usb usb5-port1: unable to enumerate USB device
[  130.420700][  T981] usb 2-1: config 3 interface 194 has no altsetting 0
[  130.451152][  T981] usb 2-1: config 3 interface 160 has no altsetting 0
[  130.471480][  T981] usb 2-1: config 3 interface 210 has no altsetting 0
[  130.524772][  T981] usb 2-1: New USB device found, idVendor=19d2, idProduct=1286, bcdDevice=44.b4
[  130.553309][  T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.571611][  T981] usb 2-1: Product: syz
[  130.581817][  T981] usb 2-1: Manufacturer: syz
[  130.592845][  T981] usb 2-1: SerialNumber: syz
[  130.616584][ T6517] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  130.840380][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.864132][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.914683][  T981] option 2-1:3.242: GSM modem (1-port) converter detected
[  130.978643][  T981] option 2-1:3.194: GSM modem (1-port) converter detected
[  131.000591][  T981] option 2-1:3.210: GSM modem (1-port) converter detected
[  131.020241][  T981] usb 2-1: USB disconnect, device number 15
[  131.040576][  T981] option 2-1:3.242: device disconnected
[  131.069450][  T981] option 2-1:3.194: device disconnected
[  131.087694][  T981] option 2-1:3.210: device disconnected
[  132.220288][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.135'.
[  132.862813][  T981] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  132.862813][ T5974] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  133.042951][ T5974] usb 4-1: Using ep0 maxpacket: 16
[  133.044747][  T981] usb 5-1: Using ep0 maxpacket: 8
[  133.056088][  T981] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  133.066650][  T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.074104][ T5974] usb 4-1: config 7 has an invalid interface number: 9 but max is 0
[  133.087211][ T5974] usb 4-1: config 7 has no interface number 0
[  133.099347][  T981] pvrusb2: Hardware description: Terratec Grabster AV400
[  133.103303][ T5974] usb 4-1: config 7 interface 9 has no altsetting 0
[  133.126665][ T5974] usb 4-1: New USB device found, idVendor=071b, idProduct=3203, bcdDevice= 0.00
[  133.133704][  T981] pvrusb2: **********
[  133.152871][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.160940][ T5974] usb 4-1: Product: syz
[  133.161997][  T981] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  133.173280][ T5974] usb 4-1: Manufacturer: syz
[  133.187572][  T981] pvrusb2: Important functionality might not be entirely working.
[  133.187614][ T5974] usb 4-1: SerialNumber: syz
[  133.207746][  T981] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  133.219849][  T981] pvrusb2: **********
[  133.289815][ T2345] pvrusb2: Invalid write control endpoint
[  133.294084][ T6579] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  133.399758][ T6586] netlink: 'syz.1.142': attribute type 9 has an invalid length.
[  133.410292][ T6009] usb 5-1: USB disconnect, device number 8
[  133.418185][ T6586] netlink: 'syz.1.142': attribute type 11 has an invalid length.
[  133.446581][ T5974] usb-storage 4-1:7.9: USB Mass Storage device detected
[  133.446965][ T2345] pvrusb2: Invalid write control endpoint
[  133.473115][ T6586] netlink: 'syz.1.142': attribute type 12 has an invalid length.
[  133.478781][ T6584] syzkaller0: entered promiscuous mode
[  133.484539][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  133.497772][ T6586] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.142'.
[  133.507025][ T6584] syzkaller0: entered allmulticast mode
[  133.518614][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  133.522439][ T5974] usb-storage 4-1:7.9: Quirks match for vid 071b pid 3203: 80600
[  133.535442][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  133.545650][ T2345] pvrusb2: Device being rendered inoperable
[  133.554222][ T2345] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  133.562187][ T2345] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  133.574571][ T2345] pvrusb2: Attached sub-driver cx25840
[  133.580238][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  133.590803][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  133.635809][ T6584] input: syz1 as /devices/virtual/input/input10
[  133.642364][ T6584] input: failed to attach handler leds to device input10, error: -6
[  133.674584][   T30] kauditd_printk_skb: 70 callbacks suppressed
[  133.674603][   T30] audit: type=1326 audit(1767879392.198:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6580 comm="syz.2.141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea3018f749 code=0x0
[  133.715196][ T5974] usb 4-1: USB disconnect, device number 13
[  134.166886][ T5974] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  134.366661][ T5974] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  134.377103][ T5950] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  134.384953][ T5974] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.407839][ T5974] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  134.425954][ T5974] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  134.442853][ T5974] usb 2-1: SerialNumber: syz
[  134.558493][ T5950] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  134.578649][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.600049][ T5950] usb 4-1: Product: syz
[  134.620997][ T5950] usb 4-1: Manufacturer: syz
[  134.631990][ T5950] usb 4-1: SerialNumber: syz
[  134.649180][ T5950] usb 4-1: config 0 descriptor??
[  134.696347][ T5974] usb 2-1: 0:2 : does not exist
[  134.708902][ T5974] usb 2-1: unit 255 not found!
[  134.737637][ T5974] usb 2-1: USB disconnect, device number 16
[  134.822381][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  135.066239][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.083272][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.105933][ T6600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.135772][ T6600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.228744][ T5950] usb 4-1: Firmware version (0.0) predates our first public release.
[  135.253394][ T5950] usb 4-1: Please update to version 0.2 or newer
[  135.365672][ T5950] usb 4-1: USB disconnect, device number 14
[  135.586711][ T6009] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  135.629651][ T6630] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  135.952761][ T6009] usb 1-1: Using ep0 maxpacket: 16
[  135.964832][ T6009] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.986117][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0
[  136.002794][ T6009] usb 1-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00
[  136.522858][ T6009] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.568242][ T6009] usb 1-1: config 0 descriptor??
[  137.054569][ T6638] netlink: 84 bytes leftover after parsing attributes in process `syz.3.154'.
[  137.192453][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.217943][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.458701][ T6009] usbhid 1-1:0.0: can't add hid device: -71
[  137.488743][ T6009] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  137.566002][ T6009] usb 1-1: USB disconnect, device number 7
[  137.919971][ T6654] kernel profiling enabled (shift: 17)
[  138.178965][ T6658] vivid-007: disconnect
[  138.195751][ T6658] netlink: 168 bytes leftover after parsing attributes in process `syz.1.157'.
[  138.323967][  T981] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  138.417061][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.427008][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  138.503677][  T981] usb 5-1: Using ep0 maxpacket: 32
[  138.524328][  T981] usb 5-1: config 0 has an invalid interface number: 72 but max is 0
[  138.532707][  T981] usb 5-1: config 0 has no interface number 0
[  138.580658][  T981] usb 5-1: New USB device found, idVendor=d265, idProduct=baff, bcdDevice=57.f9
[  138.608873][  T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.665279][ T6651] vivid-007: reconnect
[  138.673400][  T981] usb 5-1: Product: syz
[  138.677713][  T981] usb 5-1: Manufacturer: syz
[  138.685859][  T981] usb 5-1: SerialNumber: syz
[  138.693739][  T981] usb 5-1: config 0 descriptor??
[  138.711293][  T981] usb-storage 5-1:0.72: USB Mass Storage device detected
[  138.926479][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.967541][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.573539][  T981] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  139.981668][ T6680] xt_hashlimit: size too large, truncated to 1048576
[  140.134729][  T981] usb 3-1: Using ep0 maxpacket: 32
[  140.148214][  T981] usb 3-1: config 0 has an invalid descriptor of length 26, skipping remainder of the config
[  140.171975][  T981] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  140.194897][  T981] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  140.205815][  T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.221450][  T981] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  140.242183][  T981] usb 3-1: no configuration chosen from 1 choice
[  140.615705][ T6686] netlink: 4472 bytes leftover after parsing attributes in process `syz.0.166'.
[  140.811816][ T5911] usb 5-1: USB disconnect, device number 9
[  140.963379][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.122484][ T5923] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  141.342763][ T5923] usb 2-1: Using ep0 maxpacket: 8
[  141.353702][ T5923] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=11.85
[  141.366397][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.389986][ T5923] usb 2-1: Product: syz
[  141.407054][ T5923] usb 2-1: Manufacturer: syz
[  141.421169][ T5923] usb 2-1: SerialNumber: syz
[  141.422869][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  141.447671][ T5923] usb 2-1: config 0 descriptor??
[  141.470626][ T5923] ipw 2-1:0.0: IPWireless converter converter detected
[  141.705725][ T6692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  141.732872][ T6692] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  141.819423][ T5923] usb 2-1: USB disconnect, device number 17
[  141.905249][ T5923] ipw 2-1:0.0: device disconnected
[  142.005969][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  142.144155][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.166294][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.329061][ T5950] usb 3-1: USB disconnect, device number 18
[  142.367788][ T5923] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  142.573628][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.600683][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.620864][ T5923] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  142.642050][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.671345][ T5923] usb 2-1: config 0 descriptor??
[  143.044300][ T5923] usbhid 2-1:0.0: can't add hid device: -71
[  143.050386][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  143.067470][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.099431][ T5923] usb 2-1: USB disconnect, device number 18
[  143.351273][ T6712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.362430][ T6712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.524319][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  143.702773][ T5923] usb 2-1: new low-speed USB device number 19 using dummy_hcd
[  144.083049][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.091664][ T5923] usb 2-1: Invalid ep0 maxpacket: 64
[  144.270269][ T5923] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  144.452758][ T5923] usb 2-1: Invalid ep0 maxpacket: 64
[  144.460557][ T5923] usb usb2-port1: attempt power cycle
[  144.495136][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  144.724464][ T5843] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  144.734116][ T5843] Bluetooth: hci3: Injecting HCI hardware error event
[  144.742595][ T5835] Bluetooth: hci3: hardware error 0x00
[  144.803137][ T5923] usb 2-1: new low-speed USB device number 21 using dummy_hcd
[  144.866424][ T5923] usb 2-1: Invalid ep0 maxpacket: 64
[  145.062851][ T5923] usb 2-1: new low-speed USB device number 22 using dummy_hcd
[  145.102793][ T6009] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  145.128542][ T5923] usb 2-1: device descriptor read/8, error -71
[  145.135540][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  145.242879][ T6009] usb 5-1: device descriptor read/64, error -71
[  145.251006][ T6746] netlink: 'syz.1.180': attribute type 5 has an invalid length.
[  145.283255][ T5923] usb usb2-port1: unable to enumerate USB device
[  145.332856][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  145.573039][ T6009] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  145.757701][    T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  145.777513][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.789036][    T9] usb 3-1: config 0 descriptor??
[  145.833220][ T6009] usb 5-1: device descriptor read/64, error -71
[  145.963153][ T6009] usb usb5-port1: attempt power cycle
[  146.024904][    T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  146.065775][ T6751] input: syz1 as /devices/virtual/input/input13
[  146.080826][ T6751] input: failed to attach handler leds to device input13, error: -6
[  146.162960][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  146.342924][ T6009] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  146.803054][ T5835] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  146.867244][ T6009] usb 5-1: device descriptor read/8, error -71
[  146.939385][ T6755] kvm: pic: non byte write
[  147.133410][ T6009] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  147.182967][ T6009] usb 5-1: device descriptor read/8, error -71
[  147.203022][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.293706][ T6009] usb usb5-port1: unable to enumerate USB device
[  147.315996][ T5923] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  147.465401][   T30] audit: type=1800 audit(1767879405.988:139): pid=6764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.184" name="bus" dev="ramfs" ino=11697 res=0 errno=0
[  147.523573][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  147.540356][ T6761] can: request_module (can-proto-4) failed.
[  147.547042][ T5923] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  147.556661][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.575880][ T5923] usb 4-1: Product: syz
[  147.622805][ T5923] usb 4-1: Manufacturer: syz
[  147.635307][ T5923] usb 4-1: SerialNumber: syz
[  147.931839][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  147.962799][ T5983] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  147.983132][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  148.005954][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  148.052964][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  148.093611][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  148.111773][ T5923] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  148.142791][ T5983] usb 2-1: Using ep0 maxpacket: 16
[  148.151120][ T5923] usb 4-1: USB disconnect, device number 16
[  148.180586][ T5983] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00
[  148.211223][ T5983] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.231650][ T5983] usb 2-1: Product: syz
[  148.236223][ T5983] usb 2-1: Manufacturer: syz
[  148.240861][ T5983] usb 2-1: SerialNumber: syz
[  148.249809][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  148.271816][ T5983] usb 2-1: config 0 descriptor??
[  148.284104][ T5983] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  148.307277][ T5983] usb 2-1: Detected FT232B
[  148.321200][ T6778] syzkaller0: entered promiscuous mode
[  148.327921][ T6778] syzkaller0: entered allmulticast mode
[  148.344871][ T5950] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  148.459403][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[  148.502991][ T5923] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  148.512761][ T5950] usb 5-1: Using ep0 maxpacket: 16
[  148.544642][ T6779] input: syz0 as /devices/virtual/input/input15
[  148.549836][ T5950] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  148.561058][    T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  148.586020][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'.
[  148.608874][ T5950] usb 5-1: config 0 has no interface number 0
[  148.615398][    T9] [drm] Initialized udl on minor 2
[  148.623780][ T5950] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  148.640812][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  148.655623][ T5950] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  148.679723][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  148.695042][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.695520][ T5950] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  148.724523][ T5974] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  148.743159][ T5923] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00
[  148.744180][    T9] usb 3-1: USB disconnect, device number 19
[  148.767241][ T5974] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  148.775428][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  148.790074][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.793608][ T5950] usb 5-1: Product: syz
[  148.829355][ T5950] usb 5-1: SerialNumber: syz
[  148.849030][ T5923] usb 4-1: config 0 descriptor??
[  148.865840][ T5950] usb 5-1: config 0 descriptor??
[  148.874709][ T5983] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  148.916010][ T5950] cm109 5-1:0.8: invalid payload size 0, expected 4
[  148.919195][ T5983] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  148.930041][ T5950] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input16
[  148.946263][ T6782] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9)
[  148.953079][ T6782] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  148.975572][ T6782] vhci_hcd vhci_hcd.0: Device attached
[  148.983529][ T5983] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  149.002080][ T5983] usb 2-1: USB disconnect, device number 23
[  149.011471][ T6785] vhci_hcd: connection closed
[  149.018170][ T3515] vhci_hcd vhci_hcd.0: stop threads
[  149.023162][ T6787] netlink: 'syz.2.191': attribute type 10 has an invalid length.
[  149.023644][ T6787] bridge0: port 3(netdevsim0) entered blocking state
[  149.048127][ T3515] vhci_hcd vhci_hcd.0: release socket
[  149.048905][ T6787] bridge0: port 3(netdevsim0) entered disabled state
[  149.065242][ T3515] vhci_hcd vhci_hcd.0: disconnect device
[  149.071323][ T6787] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  149.088119][ T5983] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  149.110438][ T6787] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  149.118697][ T5983] ftdi_sio 2-1:0.0: device disconnected
[  149.135406][ T6787] bridge0: port 3(netdevsim0) entered blocking state
[  149.142339][ T6787] bridge0: port 3(netdevsim0) entered forwarding state
[  149.236068][ T6789] netlink: 28 bytes leftover after parsing attributes in process `syz.4.187'.
[  149.313248][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.328303][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'.
[  149.423411][ T5923] aquacomputer_d5next 0003:0C70:F00B.0004: hidraw0: USB HID v1.01 Device [HID 0c70:f00b] on usb-dummy_hcd.3-1/input0
[  149.626837][ T5923] usb 4-1: USB disconnect, device number 17
[  149.646720][ T6792] fido_id[6792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  149.894046][ T6799] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.949804][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.323273][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.400597][ T6808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.196'.
[  150.644927][ T6009] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.207492][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.216225][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.223570][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.230751][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.238191][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.245342][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.252475][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.259620][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.266789][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.273952][    C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  151.283940][    C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  151.293519][ T5950] usb 5-1: USB disconnect, device number 14
[  151.319132][ T5950] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  151.422698][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  151.820754][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.200'.
[  151.830135][ T6824] netlink: 44 bytes leftover after parsing attributes in process `syz.3.200'.
[  152.071331][ T6832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'.
[  152.120292][ T5911] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  152.283104][ T5911] usb 4-1: device descriptor read/64, error -71
[  152.323107][ T6009] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  152.462813][ T6009] usb 5-1: device descriptor read/64, error -71
[  152.485629][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  152.502897][ T5950] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  152.562818][ T5911] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  152.674492][ T5950] usb 2-1: config 0 has an invalid interface number: 69 but max is 0
[  152.684025][ T5950] usb 2-1: config 0 has no interface number 0
[  152.690277][ T5950] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  152.700530][ T5950] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.711694][ T6009] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  152.722394][ T5950] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  152.732606][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.734930][ T5911] usb 4-1: device descriptor read/64, error -71
[  152.745509][ T5950] usb 2-1: Product: syz
[  152.752378][ T5950] usb 2-1: Manufacturer: syz
[  152.757724][ T5950] usb 2-1: SerialNumber: syz
[  152.766355][ T5950] usb 2-1: config 0 descriptor??
[  152.772343][ T6835] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  152.784623][ T5950] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  152.813304][ T5950] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  152.853183][ T6009] usb 5-1: device descriptor read/64, error -71
[  152.884117][ T5911] usb usb4-port1: attempt power cycle
[  152.973577][ T6009] usb usb5-port1: attempt power cycle
[  153.126205][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.148275][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.199966][  T981] usb 2-1: USB disconnect, device number 24
[  153.224063][  T981] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  153.241712][ T5911] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  153.263751][  T981] cyberjack 2-1:0.69: device disconnected
[  153.284701][ T5911] usb 4-1: device descriptor read/8, error -71
[  153.322929][ T6009] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  153.354412][ T6009] usb 5-1: device descriptor read/8, error -71
[  153.525194][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.533676][ T5911] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  153.555230][ T5911] usb 4-1: device descriptor read/8, error -71
[  153.602832][ T6009] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  153.628877][ T6009] usb 5-1: device descriptor read/8, error -71
[  153.663276][ T5911] usb usb4-port1: unable to enumerate USB device
[  153.683507][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  153.753685][ T6009] usb usb5-port1: unable to enumerate USB device
[  154.462801][ T5911] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  154.563554][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  154.633387][ T5911] usb 1-1: Using ep0 maxpacket: 16
[  154.642289][ T5911] usb 1-1: config 0 has an invalid interface number: 214 but max is 0
[  154.651882][ T5911] usb 1-1: config 0 has no interface number 0
[  154.659331][ T5911] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  154.672628][ T5911] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  154.683523][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  154.691663][ T5911] usb 1-1: Manufacturer: syz
[  154.698853][ T5911] usb 1-1: SerialNumber: syz
[  154.713914][ T5911] usb 1-1: config 0 descriptor??
[  155.121756][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.482558][ T5911] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71
[  155.546346][ T5911] usb 1-1: USB disconnect, device number 8
[  155.642093][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  155.683703][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.450209][ T6883] netlink: 96 bytes leftover after parsing attributes in process `syz.0.217'.
[  156.643659][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.732868][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  156.966901][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.113435][ T5950] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  157.209390][ T5974] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  157.242772][  T981] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  157.254700][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.224'.
[  157.293639][ T5950] usb 5-1: Using ep0 maxpacket: 16
[  157.354506][ T5950] usb 5-1: unable to get BOS descriptor or descriptor too short
[  157.364187][ T5950] usb 5-1: config 1 has an invalid interface number: 26 but max is 1
[  157.372358][ T5950] usb 5-1: config 1 has an invalid interface number: 89 but max is 1
[  157.391224][ T5974] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  157.402892][  T981] usb 3-1: device descriptor read/64, error -71
[  157.412957][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  157.424201][ T5950] usb 5-1: config 1 has an invalid descriptor of length 11, skipping remainder of the config
[  157.430227][ T6906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.225'.
[  157.443668][ T5950] usb 5-1: config 1 has no interface number 0
[  157.449987][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  157.461621][ T5950] usb 5-1: config 1 has no interface number 1
[  157.467890][ T5974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  157.477907][ T5950] usb 5-1: config 1 interface 26 altsetting 213 bulk endpoint 0xC has invalid maxpacket 1023
[  157.545315][ T5974] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  157.554986][ T5950] usb 5-1: config 1 interface 26 altsetting 213 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[  157.566220][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.582326][ T5974] usb 1-1: Product: syz
[  157.591704][ T5950] usb 5-1: config 1 interface 26 altsetting 213 bulk endpoint 0xD has invalid maxpacket 8
[  157.602048][ T5974] usb 1-1: Manufacturer: syz
[  157.609950][ T5974] usb 1-1: SerialNumber: syz
[  157.615168][ T5950] usb 5-1: config 1 interface 26 altsetting 213 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  157.654325][ T5974] usb 1-1: config 0 descriptor??
[  157.687521][  T981] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  157.688221][ T5950] usb 5-1: config 1 interface 26 altsetting 213 has 4 endpoint descriptors, different from the interface descriptor's value: 6
[  157.709788][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  157.733167][ T5974] iguanair 1-1:0.0: failed to get version
[  157.765960][ T5974] iguanair 1-1:0.0: probe with driver iguanair failed with error -90
[  158.006934][ T5974] usb 1-1: USB disconnect, device number 9
[  158.013040][ T5950] usb 5-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  158.048633][ T5950] usb 5-1: config 1 interface 26 has no altsetting 0
[  158.061416][ T5950] usb 5-1: config 1 interface 89 has no altsetting 0
[  158.072836][  T981] usb 3-1: device descriptor read/64, error -71
[  158.078504][ T5950] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec
[  158.089012][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.101555][ T5950] usb 5-1: Product: syz
[  158.116052][ T5950] usb 5-1: Manufacturer: syz
[  158.128569][ T5950] usb 5-1: SerialNumber: syz
[  158.141183][ T6895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  158.149557][ T6895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  158.189723][  T981] usb usb3-port1: attempt power cycle
[  158.552993][  T981] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  158.607721][  T981] usb 3-1: device descriptor read/8, error -71
[  158.723460][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  158.794836][ T6918] loop9: detected capacity change from 0 to 7
[  158.816519][ T5993] Dev loop9: unable to read RDB block 7
[  158.822186][ T5993]  loop9: unable to read partition table
[  158.835701][ T5993] loop9: partition table beyond EOD, truncated
[  158.862935][  T981] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  158.868275][ T6918] Dev loop9: unable to read RDB block 7
[  158.891036][ T6918]  loop9: unable to read partition table
[  158.914504][  T981] usb 3-1: device descriptor read/8, error -71
[  158.923345][ T5950] usb 5-1: unknown interface protocol 0x7d, assuming v1
[  158.936486][ T6918] loop9: partition table beyond EOD, truncated
[  158.947927][ T5950] usb 5-1: 26:2 : does not exist
[  158.953682][ T6918] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  158.963460][ T5923] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  158.990014][ T5950] usb 5-1: unknown interface protocol 0x13, assuming v1
[  158.997829][ T5950] usb 5-1: 89:2 : does not exist
[  159.043897][  T981] usb usb3-port1: unable to enumerate USB device
[  159.097633][ T5950] usb 5-1: USB disconnect, device number 19
[  159.152732][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  159.169964][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  159.234907][ T5994] udevd[5994]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  159.252084][ T5923] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  159.279076][ T6924] could not allocate digest TFM handle xcbc(aes)
[  159.295323][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.350465][ T5923] usb 2-1: config 0 descriptor??
[  159.472766][ T5974] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  159.581850][ T6917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.604805][ T6917] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.605812][ T6940] netlink: 'syz.3.232': attribute type 27 has an invalid length.
[  159.632841][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'.
[  159.733851][ T6940] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  159.745002][ T5923] usbhid 2-1:0.0: can't add hid device: -71
[  159.751127][ T5923] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  159.763602][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  159.797633][ T5923] usb 2-1: USB disconnect, device number 25
[  159.845116][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'.
[  160.145443][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.743097][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  160.809249][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.933588][    T9] usb 2-1: Using ep0 maxpacket: 32
[  160.962947][    T9] usb 2-1: config 2 has an invalid interface number: 45 but max is 0
[  160.973567][    T9] usb 2-1: config 2 has no interface number 0
[  160.979780][    T9] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  161.010705][    T9] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  161.074332][    T9] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92
[  161.092826][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.109076][    T9] usb 2-1: Product: syz
[  161.122716][    T9] usb 2-1: Manufacturer: syz
[  161.135993][    T9] usb 2-1: SerialNumber: syz
[  161.171643][    T9] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected
[  161.303954][    T9] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  161.374480][  T981] usb 2-1: USB disconnect, device number 26
[  161.425088][  T981] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  161.503346][  T981] kobil_sct 2-1:2.45: device disconnected
[  161.899955][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.262861][    T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  162.434685][    T9] usb 3-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30
[  162.452763][  T981] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  162.460903][    T9] usb 3-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  162.501510][    T9] usb 3-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  162.546288][    T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  162.555903][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  162.612877][  T981] usb 4-1: Using ep0 maxpacket: 32
[  162.618215][ T5923] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  162.622954][    T9] usb 3-1: SerialNumber: syz
[  162.654142][  T981] usb 4-1: config 0 has an invalid interface number: 126 but max is 0
[  162.682895][  T981] usb 4-1: config 0 has no interface number 0
[  162.689092][  T981] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  162.755595][  T981] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  162.781589][  T981] usb 4-1: config 0 interface 126 has no altsetting 0
[  162.805843][  T981] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  162.817066][  T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.825301][ T5923] usb 2-1: Using ep0 maxpacket: 32
[  162.835405][ T5923] usb 2-1: config 0 has an invalid interface number: 38 but max is 0
[  162.843677][ T5950] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  162.879539][  T981] usb 4-1: Product: syz
[  162.884119][ T5923] usb 2-1: config 0 has no interface number 0
[  162.895429][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.903979][ T5923] usb 2-1: config 0 interface 38 altsetting 157 bulk endpoint 0x6 has invalid maxpacket 484
[  162.916420][  T981] usb 4-1: Manufacturer: syz
[  162.923190][  T981] usb 4-1: SerialNumber: syz
[  162.928645][ T5923] usb 2-1: config 0 interface 38 has no altsetting 0
[  162.955829][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.958919][  T981] usb 4-1: config 0 descriptor??
[  162.973397][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.994996][ T5923] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=7f.b3
[  163.011698][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.020511][ T6975] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  163.028091][ T6975] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  163.036701][ T5923] usb 2-1: Product: syz
[  163.041276][ T5923] usb 2-1: Manufacturer: syz
[  163.065967][    T9] rndis_host 3-1:253.0: RNDIS init failed, -71
[  163.083059][ T5923] usb 2-1: SerialNumber: syz
[  163.097238][    T9] rndis_host 3-1:253.0: probe with driver rndis_host failed with error -71
[  163.155051][    T9] usb 3-1: USB disconnect, device number 24
[  163.177367][ T5923] usb 2-1: config 0 descriptor??
[  163.192926][ T6977] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  163.217177][ T5923] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[  163.249052][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.313027][ T6987] netlink: 'syz.0.245': attribute type 11 has an invalid length.
[  163.457582][ T6975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.497353][ T6975] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.653039][ T5923] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20
[  163.757020][ T6995] netlink: 88 bytes leftover after parsing attributes in process `syz.4.247'.
[  163.848984][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.242'.
[  163.858463][ T6977] 8021q: VLANs not supported on sit0
[  163.865979][    T9] usb 2-1: USB disconnect, device number 27
[  164.076274][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.602947][ T7010] capability: warning: `syz.2.249' uses 32-bit capabilities (legacy support in use)
[  164.672245][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  164.796521][ T7005] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  165.012900][ T5950] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  165.082917][    T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  165.123266][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  165.212890][ T5950] usb 2-1: Using ep0 maxpacket: 32
[  165.223728][ T5950] usb 2-1: config 0 has an invalid interface number: 239 but max is 0
[  165.232850][    T9] usb 3-1: device descriptor read/64, error -71
[  165.252765][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.298584][  T981] ir_usb 4-1:0.126: IR Dongle converter detected
[  165.302057][ T5950] usb 2-1: config 0 has no interface number 0
[  165.326245][ T5950] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8
[  165.334710][  T981] usb 4-1: IRDA class descriptor not found, device not bound
[  165.351673][  T981] usb 4-1: USB disconnect, device number 23
[  165.406854][ T5950] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  165.465099][ T5950] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89
[  165.504019][    T9] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  165.521979][ T5950] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024
[  165.585277][ T5950] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024
[  165.729864][ T5950] usb 2-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85
[  165.746889][ T5950] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  165.771203][ T5950] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0
[  165.781478][    T9] usb 3-1: device descriptor read/64, error -71
[  165.811894][ T5950] usb 2-1: config 0 interface 239 has no altsetting 0
[  165.867008][ T5950] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9
[  165.877840][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.894012][ T5950] usb 2-1: Product: syz
[  165.903351][    T9] usb usb3-port1: attempt power cycle
[  165.913865][ T5950] usb 2-1: Manufacturer: syz
[  165.924957][ T5950] usb 2-1: SerialNumber: syz
[  165.940769][ T5950] usb 2-1: config 0 descriptor??
[  165.954858][ T7015] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  166.043101][ T7015] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  166.111322][ T5835] Bluetooth: hci5: urb ffff888143b78400 submission failed (90)
[  166.142895][ T5974] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  166.163258][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.284312][ T5974] usb 4-1: device descriptor read/64, error -71
[  166.328035][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.362792][    T9] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  166.383493][    T9] usb 3-1: device descriptor read/8, error -71
[  166.483370][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  166.552811][ T5974] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  166.622829][    T9] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  166.682815][ T5974] usb 4-1: device descriptor read/64, error -71
[  166.769882][    T9] usb 3-1: device descriptor read/8, error -71
[  166.845835][ T5974] usb usb4-port1: attempt power cycle
[  166.913096][    T9] usb usb3-port1: unable to enumerate USB device
[  167.211545][ T5974] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  167.212197][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.228586][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  167.246676][ T5974] usb 4-1: device descriptor read/8, error -71
[  167.492837][ T5974] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  167.527902][ T5974] usb 4-1: device descriptor read/8, error -71
[  167.591031][ T5832] usb 2-1: USB disconnect, device number 28
[  167.723964][ T5974] usb usb4-port1: unable to enumerate USB device
[  168.253080][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.364268][ T5974] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  168.472770][ T5832] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  168.539371][ T5974] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  168.559101][ T5974] usb 2-1: config 0 has no interface number 0
[  168.580807][ T5974] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  168.592822][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.601128][ T5974] usb 2-1: Product: syz
[  168.621112][ T5974] usb 2-1: Manufacturer: syz
[  168.626289][ T5974] usb 2-1: SerialNumber: syz
[  168.633051][ T5832] usb 5-1: device descriptor read/64, error -71
[  168.655132][ T5974] usb 2-1: config 0 descriptor??
[  168.879931][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.892804][ T5832] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  168.918581][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.942563][ T5974] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  168.975559][ T5974] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  169.032739][ T5832] usb 5-1: device descriptor read/64, error -71
[  169.053195][ T5974] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  169.078063][ T5974] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  169.099040][ T5974] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  169.133040][ T5974] usb 2-1: USB disconnect, device number 29
[  169.145737][ T5832] usb usb5-port1: attempt power cycle
[  169.212486][ T5974] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  169.224860][ T5974] keyspan 2-1:0.133: device disconnected
[  169.292951][  T981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  169.325458][ T5950] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  169.361639][ T7063] netlink: 'syz.0.262': attribute type 10 has an invalid length.
[  169.410131][ T7056] netlink: 'syz.0.262': attribute type 10 has an invalid length.
[  169.433357][ T7063] team0: Port device netdevsim0 added
[  169.542334][ T7056] team0: Port device netdevsim0 removed
[  169.568685][ T5832] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  169.579451][ T7056] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  169.604938][ T5950] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  169.614782][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.623664][ T5832] usb 5-1: device descriptor read/8, error -71
[  169.674527][ T5950] usb 4-1: config 0 descriptor??
[  169.862778][ T5832] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  169.883565][ T5832] usb 5-1: device descriptor read/8, error -71
[  169.993118][ T5832] usb usb5-port1: unable to enumerate USB device
[  169.997524][ T5950] kaweth 4-1:0.0: Firmware present in device.
[  170.094762][ T5950] kaweth 4-1:0.0: Statistics collection: 0
[  170.094789][ T5950] kaweth 4-1:0.0: Multicast filter limit: 0
[  170.094807][ T5950] kaweth 4-1:0.0: MTU: 0
[  170.094822][ T5950] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00
[  170.252941][ T5974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.331773][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  170.505094][ T5950] kaweth 4-1:0.0: Error setting SOFS wait
[  170.511176][ T5950] kaweth 4-1:0.0: probe with driver kaweth failed with error -5
[  170.525686][ T5950] usb 4-1: USB disconnect, device number 28
[  171.363036][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  171.532945][ T7091] net veth1_virt_wifi ªªªªª»
Á>ÞF: renamed from virt_wifi0
[  171.593004][ T7097] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  171.918243][ T7103] syzkaller1: entered promiscuous mode
[  171.924280][ T7103] syzkaller1: entered allmulticast mode
[  172.346161][ T7108] program syz.1.275 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.404798][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  172.434524][ T7108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.275'.
[  172.722888][ T5974] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  172.978792][ T5974] usb 2-1: device descriptor read/64, error -71
[  173.263099][ T5974] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  173.293140][ T5950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.412807][ T5974] usb 2-1: device descriptor read/64, error -71
[  173.455318][ T5923] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  173.473834][ T5832] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  173.543328][ T5974] usb usb2-port1: attempt power cycle
[  173.636585][ T5923] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  173.666958][ T5923] usb 5-1: config 0 interface 0 has no altsetting 0
[  173.692347][ T5923] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  173.724827][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  173.746562][ T7129] netdevsim netdevsim0 netdevsim1: entered promiscuous mode
[  173.752809][ T5923] usb 5-1: Product: syz
[  173.766579][ T5923] usb 5-1: Manufacturer: syz
[  173.775999][ T5923] usb 5-1: SerialNumber: syz
[  173.799132][ T5923] usb 5-1: config 0 descriptor??
[  173.880118][ T5923] usb 5-1: selecting invalid altsetting 0
[  173.943106][ T7129] vlan2: entered promiscuous mode
[  173.952796][ T5832] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  174.161445][ T5832] usb 4-1: config 0 has no interfaces?
[  174.163604][ T5974] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  174.243059][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.254943][ T5974] usb 2-1: device descriptor read/8, error -71
[  174.266947][ T5832] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  174.290054][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  174.341684][ T5832] usb 4-1: Product: syz
[  174.542694][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.620605][ T5832] usb 4-1: Manufacturer: syz
[  174.644704][ T5832] usb 4-1: SerialNumber: syz
[  174.652193][   T10] usb 5-1: USB disconnect, device number 24
[  174.663691][ T5974] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  174.666513][ T5832] usb 4-1: config 0 descriptor??
[  174.734396][ T5974] usb 2-1: device descriptor read/8, error -71
[  174.866591][ T5974] usb usb2-port1: unable to enumerate USB device
[  175.222861][   T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  175.244440][ T7143] fuse: Bad value for 'fd'
[  175.305896][ T7141] ------------[ cut here ]------------
[  175.311634][ T7141] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1187/0x1310, CPU#0: syz.2.283/7141
[  175.323870][ T7141] Modules linked in:
[  175.328116][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.2.283 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  175.339022][ T7141] Tainted: [L]=SOFTLOCKUP
[  175.343467][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  175.353717][ T7141] RIP: 0010:__kvm_gpc_refresh+0x1187/0x1310
[  175.359760][ T7141] Code: c6 05 2c dd 2b 0e 01 48 c7 c7 33 eb 77 8d be 35 04 00 00 48 c7 c2 80 f2 61 8b e8 64 fa 5d 00 e9 fe f1 ff ff e8 fa b9 80 00 90 <0f> 0b 90 bb ea ff ff ff e9 7e fe ff ff e8 e7 b9 80 00 90 0f 0b 90
[  175.379883][ T7141] RSP: 0018:ffffc9000b3c7600 EFLAGS: 00010283
[  175.386088][ T7141] RAX: ffffffff81403dc6 RBX: ffff888000000000 RCX: 0000000000080000
[  175.394247][ T7141] RDX: ffffc9000c069000 RSI: 0000000000000401 RDI: 0000000000000402
[  175.402264][ T7141] RBP: ffffc9000b3c7790 R08: ffffffff8f822377 R09: 1ffffffff1f0446e
[  175.410568][ T7141] R10: dffffc0000000000 R11: fffffbfff1f0446f R12: ffff888055b6d290
[  175.418749][ T7141] R13: dffffc0000000000 R14: ffff888000000000 R15: ffffffffffffff01
[  175.426827][ T7141] FS:  00007fea310726c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
[  175.435857][ T7141] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  175.442535][ T7141] CR2: 00007fea3104ff98 CR3: 000000007a662000 CR4: 00000000003526f0
[  175.450643][ T7141] Call Trace:
[  175.454021][ T7141]  <TASK>
[  175.456991][ T7141]  ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0
[  175.462718][ T7141]  ? lock_acquire+0x107/0x340
[  175.467455][ T7141]  ? kvm_gpc_refresh+0x31/0x140
[  175.472350][ T7141]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  175.477897][ T7141]  ? kvm_xen_set_evtchn+0x138/0x230
[  175.483224][ T7141]  kvm_gpc_refresh+0xe1/0x140
[  175.487946][ T7141]  ? kvm_xen_set_evtchn+0x138/0x230
[  175.493251][ T7141]  kvm_xen_set_evtchn+0x164/0x230
[  175.498335][ T7141]  ? __pfx_evtchn_set_fn+0x10/0x10
[  175.503543][ T7141]  kvm_set_irq+0x260/0x4e0
[  175.508001][ T7141]  ? __pfx_kvm_set_irq+0x10/0x10
[  175.513024][ T7141]  ? __pfx_evtchn_set_fn+0x10/0x10
[  175.518258][ T7141]  kvm_vm_ioctl_irq_line+0x8c/0x130
[  175.523625][ T7141]  kvm_vm_ioctl+0x88d/0xc60
[  175.528170][ T7141]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  175.533278][ T7141]  ? kasan_quarantine_put+0xbb/0x1f0
[  175.538597][ T7141]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  175.544302][ T7141]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  175.549979][ T7141]  ? do_vfs_ioctl+0xbe8/0x1430
[  175.554814][ T7141]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  175.559878][ T7141]  ? do_futex+0x333/0x420
[  175.564386][ T7141]  ? __fget_files+0x2a/0x420
[  175.569060][ T7141]  ? __fget_files+0x2a/0x420
[  175.573841][ T7141]  ? __fget_files+0x3a0/0x420
[  175.578552][ T7141]  ? __fget_files+0x2a/0x420
[  175.583341][ T7141]  ? bpf_lsm_file_ioctl+0x9/0x20
[  175.588321][ T7141]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  175.593427][ T7141]  __se_sys_ioctl+0xfc/0x170
[  175.598086][ T7141]  do_syscall_64+0xec/0xf80
[  175.603051][ T7141]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.609178][ T7141]  ? trace_irq_disable+0x37/0x100
[  175.614366][ T7141]  ? clear_bhb_loop+0x60/0xb0
[  175.619135][ T7141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.625288][ T7141] RIP: 0033:0x7fea3018f749
[  175.629889][ T7141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.649741][ T7141] RSP: 002b:00007fea31072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  175.658331][ T7141] RAX: ffffffffffffffda RBX: 00007fea303e5fa0 RCX: 00007fea3018f749
[  175.666496][ T7141] RDX: 0000200000000000 RSI: 00000000c008ae67 RDI: 0000000000000004
[  175.674614][ T7141] RBP: 00007fea30213f91 R08: 0000000000000000 R09: 0000000000000000
[  175.682763][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.690871][ T7141] R13: 00007fea303e6038 R14: 00007fea303e5fa0 R15: 00007fea3050fa28
[  175.699023][ T7141]  </TASK>
[  175.702137][ T7141] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  175.709487][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.2.283 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  175.720300][ T7141] Tainted: [L]=SOFTLOCKUP
[  175.724667][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  175.734759][ T7141] Call Trace:
[  175.738058][ T7141]  <TASK>
[  175.741002][ T7141]  vpanic+0x1e0/0x670
[  175.745016][ T7141]  panic+0xb9/0xc0
[  175.748753][ T7141]  ? __pfx_panic+0x10/0x10
[  175.753218][ T7141]  __warn+0x317/0x4b0
[  175.757222][ T7141]  ? __kvm_gpc_refresh+0x1187/0x1310
[  175.762524][ T7141]  ? __kvm_gpc_refresh+0x1187/0x1310
[  175.767820][ T7141]  __report_bug+0x288/0x500
[  175.772330][ T7141]  ? check_noncircular+0xda/0x150
[  175.777373][ T7141]  ? __kvm_gpc_refresh+0x1187/0x1310
[  175.782691][ T7141]  ? __pfx___report_bug+0x10/0x10
[  175.787822][ T7141]  ? __kvm_gpc_refresh+0x1187/0x1310
[  175.793153][ T7141]  report_bug+0x16a/0x220
[  175.797501][ T7141]  ? __kvm_gpc_refresh+0x1187/0x1310
[  175.802807][ T7141]  ? __kvm_gpc_refresh+0x1189/0x1310
[  175.808135][ T7141]  handle_bug+0x98/0x200
[  175.812446][ T7141]  exc_invalid_op+0x1a/0x50
[  175.816996][ T7141]  asm_exc_invalid_op+0x1a/0x20
[  175.821900][ T7141] RIP: 0010:__kvm_gpc_refresh+0x1187/0x1310
[  175.827846][ T7141] Code: c6 05 2c dd 2b 0e 01 48 c7 c7 33 eb 77 8d be 35 04 00 00 48 c7 c2 80 f2 61 8b e8 64 fa 5d 00 e9 fe f1 ff ff e8 fa b9 80 00 90 <0f> 0b 90 bb ea ff ff ff e9 7e fe ff ff e8 e7 b9 80 00 90 0f 0b 90
[  175.847516][ T7141] RSP: 0018:ffffc9000b3c7600 EFLAGS: 00010283
[  175.853633][ T7141] RAX: ffffffff81403dc6 RBX: ffff888000000000 RCX: 0000000000080000
[  175.861641][ T7141] RDX: ffffc9000c069000 RSI: 0000000000000401 RDI: 0000000000000402
[  175.869653][ T7141] RBP: ffffc9000b3c7790 R08: ffffffff8f822377 R09: 1ffffffff1f0446e
[  175.877673][ T7141] R10: dffffc0000000000 R11: fffffbfff1f0446f R12: ffff888055b6d290
[  175.885703][ T7141] R13: dffffc0000000000 R14: ffff888000000000 R15: ffffffffffffff01
[  175.893870][ T7141]  ? __kvm_gpc_refresh+0x1186/0x1310
[  175.899218][ T7141]  ? kvm_xen_set_evtchn_fast+0x1fb/0x9b0
[  175.904911][ T7141]  ? lock_acquire+0x107/0x340
[  175.909646][ T7141]  ? kvm_gpc_refresh+0x31/0x140
[  175.914563][ T7141]  ? __pfx___kvm_gpc_refresh+0x10/0x10
[  175.920078][ T7141]  ? kvm_xen_set_evtchn+0x138/0x230
[  175.925345][ T7141]  kvm_gpc_refresh+0xe1/0x140
[  175.930073][ T7141]  ? kvm_xen_set_evtchn+0x138/0x230
[  175.935331][ T7141]  kvm_xen_set_evtchn+0x164/0x230
[  175.940432][ T7141]  ? __pfx_evtchn_set_fn+0x10/0x10
[  175.945598][ T7141]  kvm_set_irq+0x260/0x4e0
[  175.950059][ T7141]  ? __pfx_kvm_set_irq+0x10/0x10
[  175.955034][ T7141]  ? __pfx_evtchn_set_fn+0x10/0x10
[  175.960243][ T7141]  kvm_vm_ioctl_irq_line+0x8c/0x130
[  175.965515][ T7141]  kvm_vm_ioctl+0x88d/0xc60
[  175.970113][ T7141]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  175.975388][ T7141]  ? kasan_quarantine_put+0xbb/0x1f0
[  175.980727][ T7141]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  175.986412][ T7141]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  175.992090][ T7141]  ? do_vfs_ioctl+0xbe8/0x1430
[  175.996987][ T7141]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  176.002066][ T7141]  ? do_futex+0x333/0x420
[  176.006455][ T7141]  ? __fget_files+0x2a/0x420
[  176.011092][ T7141]  ? __fget_files+0x2a/0x420
[  176.015722][ T7141]  ? __fget_files+0x3a0/0x420
[  176.020465][ T7141]  ? __fget_files+0x2a/0x420
[  176.025104][ T7141]  ? bpf_lsm_file_ioctl+0x9/0x20
[  176.030133][ T7141]  ? __pfx_kvm_vm_ioctl+0x10/0x10
[  176.035307][ T7141]  __se_sys_ioctl+0xfc/0x170
[  176.039955][ T7141]  do_syscall_64+0xec/0xf80
[  176.044500][ T7141]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.050602][ T7141]  ? trace_irq_disable+0x37/0x100
[  176.055731][ T7141]  ? clear_bhb_loop+0x60/0xb0
[  176.060459][ T7141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  176.066401][ T7141] RIP: 0033:0x7fea3018f749
[  176.070855][ T7141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.090488][ T7141] RSP: 002b:00007fea31072038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  176.098936][ T7141] RAX: ffffffffffffffda RBX: 00007fea303e5fa0 RCX: 00007fea3018f749
[  176.106934][ T7141] RDX: 0000200000000000 RSI: 00000000c008ae67 RDI: 0000000000000004
[  176.114931][ T7141] RBP: 00007fea30213f91 R08: 0000000000000000 R09: 0000000000000000
[  176.123009][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  176.131001][ T7141] R13: 00007fea303e6038 R14: 00007fea303e5fa0 R15: 00007fea3050fa28
[  176.139210][ T7141]  </TASK>
[  176.142864][ T7141] Kernel Offset: disabled
[  176.147206][ T7141] Rebooting in 86400 seconds..